From 07bd2770cf00d52b80b7e0118f51d161ef574ca0 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Fri, 2 Oct 2026 15:10:42 +0000 Subject: [PATCH] Trending CVEs update 2026-10-02 15:10 :robot: --- README.md | 10 +++++----- cves/2026/CVE-2026-40281.md | 1 + cves/2026/CVE-2026-55559.md | 2 +- index/github.txt | 2 ++ 4 files changed, 9 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 0ed506e5ca8..708532321dd 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-02%20Oct%202026%2014%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610021408)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C953-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C220-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610021408)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-02%20Oct%202026%2015%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610021508)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C953-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C220-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610021508)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,9 +12,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 17m ago | [CVE-2025-45737](https://github.com/Shinn-Home/CVE-2025-45737) | 利用CVE-2025-45737漏洞，实现提权 | -| 0⭐ | 2h ago | [CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE](https://github.com/kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE) | GLPI is a free asset and IT management software package. An authenticated user can upload and force the… | -| 0⭐ | 19h ago | [CVE-2025-47947](https://github.com/yel1337/CVE-2025-47947) | POC for libapache2-mod-security2 | +| 0⭐ | 1h ago | [CVE-2025-45737](https://github.com/Shinn-Home/CVE-2025-45737) | 利用CVE-2025-45737漏洞，实现提权 | +| 0⭐ | 3h ago | [CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE](https://github.com/kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE) | GLPI is a free asset and IT management software package. An authenticated user can upload and force the… | +| 0⭐ | 20h ago | [CVE-2025-47947](https://github.com/yel1337/CVE-2025-47947) | POC for libapache2-mod-security2 | | 0⭐ | 1d ago | KEV [CVE-2025-8110](https://github.com/Makis6/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | | 1⭐ | 1d ago | [CVE-2025-29927](https://github.com/vulnace/CVE-2025-29927) | POC for react2shell | | 0⭐ | 1d ago | [CVE-2025-59528-Poc](https://github.com/Amoru-Bek/CVE-2025-59528-Poc) | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5,… | @@ -58,7 +58,7 @@ | 6⭐ | 43d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 3⭐ | 45d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 22⭐ | 52d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | -| 6⭐ | 56d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | +| 6⭐ | 57d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 7⭐ | 61d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 72d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 3⭐ | 74d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation | diff --git a/cves/2026/CVE-2026-40281.md b/cves/2026/CVE-2026-40281.md index 393321f28e4..2d6c236e445 100644 --- a/cves/2026/CVE-2026-40281.md +++ b/cves/2026/CVE-2026-40281.md @@ -16,6 +16,7 @@ Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 an #### Github - https://github.com/0xgh057r3c0n/CVE-2026-40281 +- https://github.com/MRdark-ops/CVE-2026-40281-exploit #### Vulhub - https://github.com/vulhub/vulhub/tree/master/gotenberg/CVE-2026-40281 diff --git a/cves/2026/CVE-2026-55559.md b/cves/2026/CVE-2026-55559.md index fc4c8a2dd6f..a7475815c4f 100644 --- a/cves/2026/CVE-2026-55559.md +++ b/cves/2026/CVE-2026-55559.md @@ -18,4 +18,4 @@ Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts - https://github.com/advisories/GHSA-73mf-m39p-wpm9 #### Github -No PoCs found on GitHub currently. +- https://github.com/MRdark-ops/CVE-2026-55559 diff --git a/index/github.txt b/index/github.txt index 450bf9426ba..1b67fc1bc2b 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27127,3 +27127,5 @@ CVE-2025-24801 - https://github.com/kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and CVE-2026-103922 - https://github.com/techupdate24/capacitor-flaw-cve-2026-103922 CVE-2026-104286 - https://github.com/techupdate24/fortimail-zero-day-cve-2026-104286 CVE-2025-45737 - https://github.com/Shinn-Home/CVE-2025-45737 +CVE-2026-40281 - https://github.com/MRdark-ops/CVE-2026-40281-exploit +CVE-2026-55559 - https://github.com/MRdark-ops/CVE-2026-55559