diff --git a/README.md b/README.md index 6a9f4306ee2..0d875a4b5d1 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-17%20Sep%202026%2023%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609172307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C966-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C199-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609172307)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-18%20Sep%202026%2000%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609180007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C967-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C199-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609180007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,16 +12,16 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 16h ago | [CVE-2026-67401](https://github.com/imbas007/CVE-2026-67401) | PoC for CVE-2026-67401 - cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE.… | -| 0⭐ | 1d ago | KEV [lenovo_y700_tb320fc_on_CVE-2025-21479](https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | +| 0⭐ | 55m ago | KEV [lenovo_y700_tb320fc_on_CVE-2025-21479](https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | +| 0⭐ | 6h ago | [CVE-2026-88533](https://github.com/HEMLOCK-LYK/CVE-2026-88533) | PoC and lab reproduction for CVE-2026-88533 | +| 0⭐ | 17h ago | [CVE-2026-67401](https://github.com/imbas007/CVE-2026-67401) | PoC for CVE-2026-67401 - cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE.… | +| 0⭐ | 20h ago | [CVE-2026-12793](https://github.com/abraxas/CVE-2026-12793) | CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8) | | 1⭐ | 1d ago | [CVE-2025-57231](https://github.com/anirbala98/CVE-2025-57231) | Docmost < 0.22.0 - Arbitrary File Read | -| 0⭐ | 1d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | +| 0⭐ | 2d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 2⭐ | 2d ago | KEV [CVE-2026-82329-PoC-Exploit](https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit) | 🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted… | | 1⭐ | 2d ago | [langflow-CVE-2026-17633-PoC](https://github.com/Oscar-Collado/langflow-CVE-2026-17633-PoC) | PoC for CVE-2026-17633 - Authenticated RCE in IBM Langflow OSS 1.0.0-1.10.3 via custom_component endpoint.… | | 0⭐ | 2d ago | KEV [CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | | 0⭐ | 2d ago | [CVE-2025-64512_PoC](https://github.com/Jinook-Kim/CVE-2025-64512_PoC) | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from… | -| 0⭐ | 3d ago | KEV [CVE-2026-33017](https://github.com/Oieua/CVE-2026-33017) | My implementation of the | -| 0⭐ | 3d ago | KEV [CVE-2025-32432](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.… | ## Trending in 2026 @@ -29,7 +29,7 @@ | --- | --- | --- | --- | | 15⭐ | 1d ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | | 3⭐ | 1d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | -| 363⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | +| 379⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | | 3⭐ | 2d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | | 3⭐ | 2d ago | [CVE-2026-12944](https://github.com/cflowsec/CVE-2026-12944) | Langflow 1.10.0 urllib SSRF POC | | 16⭐ | 3d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | @@ -52,12 +52,12 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 4⭐ | 20h ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | -| 3⭐ | 20d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | +| 5⭐ | 21h ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | +| 3⭐ | 21d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 7⭐ | 21d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 4⭐ | 28d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 3⭐ | 30d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | -| 20⭐ | 37d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | +| 20⭐ | 38d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 6⭐ | 42d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 7⭐ | 46d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 58d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | @@ -66,7 +66,7 @@ | 7⭐ | 71d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 77d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | | 3⭐ | 77d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | -| 4⭐ | 81d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | +| 4⭐ | 82d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 84d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 |
diff --git a/cves/2026/CVE-2026-87796.md b/cves/2026/CVE-2026-87796.md new file mode 100644 index 00000000000..429db79aa33 --- /dev/null +++ b/cves/2026/CVE-2026-87796.md @@ -0,0 +1,18 @@ +### [CVE-2026-87796](https://www.cve.org/CVERecord?id=CVE-2026-87796) +**Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload** +![](https://img.shields.io/static/v1?label=Vendor&message=sh1zen&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Multi%20Uploader%20for%20Gravity%20Forms&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-434%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type&color=brightgreen) + +### Description + +The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the move_file function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/abraxas/CVE-2026-87796 diff --git a/docs/hero.svg b/docs/hero.svg index 4b61641cedb..31d5d0a8dad 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 82,967 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 172,186 + fill="#e6edf3" letter-spacing="-0.5">172,187 CVES INDEXED82,966 + fill="#2f81f7" letter-spacing="-0.5">82,967 WITH POCS1,199 diff --git a/docs/social-card.svg b/docs/social-card.svg index 6a59d61b6fc..4274645d043 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 172,186 + fill="#e6edf3" letter-spacing="-0.5">172,187 CVES INDEXED82,966 + fill="#2f81f7" letter-spacing="-0.5">82,967 WITH POCS1,199 diff --git a/docs/stats.json b/docs/stats.json index ab1e19a9f02..9949fa13cc9 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1199, - "total_cves": 172186, - "with_pocs": 82966 + "total_cves": 172187, + "with_pocs": 82967 } diff --git a/index/github.txt b/index/github.txt index 34c2e1328d9..afbc989701f 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26683,3 +26683,4 @@ CVE-2026-1961 - https://github.com/kalnux/CVE-2026-1961-foreman-poc CVE-2026-44840 - https://github.com/isaca0315/CVE-2026-44840-poc CVE-2026-32604 - https://github.com/K3ysTr0K3R/CVE-2026-32604 CVE-2026-84600 - https://github.com/OwenPawl/CVE-2026-84600 +CVE-2026-87796 - https://github.com/abraxas/CVE-2026-87796 diff --git a/index/trending.json b/index/trending.json index 61cf41b0990..78121f1d5bf 100644 --- a/index/trending.json +++ b/index/trending.json @@ -23,7 +23,7 @@ }, { "year": 2026, - "stars": 363, + "stars": 379, "name": "cve-2026-41940-PoC", "url": "https://github.com/ctdal/cve-2026-41940-PoC", "desc": "A cPanel and WHM authentication bypassing tool", @@ -221,7 +221,7 @@ }, { "year": 2025, - "stars": 4, + "stars": 5, "name": "CVE-2025-32432-exploit-by-P34NUT", "url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT", "desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail", @@ -483,6 +483,30 @@ "cve": "CVE-2023-32315", "kev": true }, + { + "year": 2025, + "stars": 0, + "name": "lenovo_y700_tb320fc_on_CVE-2025-21479", + "url": "https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479", + "desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", + "pushed": "2026-09-17T23:13:37Z", + "created": "2026-09-16T11:58:06Z", + "cve": "CVE-2025-21479", + "kev": true, + "landed": true + }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-88533", + "url": "https://github.com/HEMLOCK-LYK/CVE-2026-88533", + "desc": "PoC and lab reproduction for CVE-2026-88533", + "pushed": "2026-09-17T18:03:25Z", + "created": "2026-09-17T17:54:18Z", + "cve": "CVE-2026-88533", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 0, @@ -496,15 +520,15 @@ "landed": true }, { - "year": 2025, + "year": 2026, "stars": 0, - "name": "lenovo_y700_tb320fc_on_CVE-2025-21479", - "url": "https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479", - "desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", - "pushed": "2026-09-16T12:57:55Z", - "created": "2026-09-16T11:58:06Z", - "cve": "CVE-2025-21479", - "kev": true, + "name": "CVE-2026-12793", + "url": "https://github.com/abraxas/CVE-2026-12793", + "desc": "CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)", + "pushed": "2026-09-17T03:18:59Z", + "created": "2026-09-17T02:44:56Z", + "cve": "CVE-2026-12793", + "kev": false, "landed": true }, { @@ -578,29 +602,5 @@ "cve": "CVE-2025-64512", "kev": false, "landed": true - }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-33017", - "url": "https://github.com/Oieua/CVE-2026-33017", - "desc": "My implementation of the", - "pushed": "2026-09-14T22:02:33Z", - "created": "2026-09-14T22:00:37Z", - "cve": "CVE-2026-33017", - "kev": true, - "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-32432", - "url": "https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432", - "desc": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.", - "pushed": "2026-09-14T10:28:44Z", - "created": "2026-09-14T10:19:44Z", - "cve": "CVE-2025-32432", - "kev": true, - "landed": true } ]