diff --git a/README.md b/README.md index 2666afd003c..e8e5a7f7e49 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-CVE Radar +CVE Radar -[![last sync](https://img.shields.io/badge/last%20sync-01%20Sep%202026%2003%3A39%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/cve/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/cve/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609010339)](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-101%2C809-2f81f7?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C110-f85149?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![stars](https://img.shields.io/github/stars/0xMarcio/cve?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609010339)](https://github.com/0xMarcio/cve/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-01%20Sep%202026%2003%3A42%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/cve/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/cve/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609010342)](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-103%2C945-2f81f7?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C182-f85149?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![stars](https://img.shields.io/github/stars/0xMarcio/cve?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609010342)](https://github.com/0xMarcio/cve/stargazers)
@@ -17,13 +17,13 @@ No star floor here, so a PoC published this morning shows up the same day rather | 0⭐ | 6h ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… | | 0⭐ | 12h ago | [CVE-2026-68138](https://github.com/suominen/CVE-2026-68138) | Tracking CVE-2026-68138, the Linux kernel net/sched qdisc rate-table use-after-free | | 0⭐ | 13h ago | KEV [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… | -| 1⭐ | 1d ago | [CVE-2026-31802](https://github.com/Recorded-texteditor120/CVE-2026-31802) | Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file… | +| 0⭐ | 19h ago | [CVE-2026-76569](https://github.com/toanln-cov/CVE-2026-76569) | Reflected XSS via search GET Parameter in Phoca Download | | 2⭐ | 1d ago | [CVE-2025-49844](https://github.com/Zain3311/CVE-2025-49844) | 🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain… | | 10⭐ | 1d ago | KEV [cve-2025-21479-iqoo11pro](https://github.com/Type010/cve-2025-21479-iqoo11pro) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 0⭐ | 1d ago | [cve-2026-42945](https://github.com/FranklinF25/cve-2026-42945) | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This… | +| 0⭐ | 1d ago | [cve-2026-42533](https://github.com/FranklinF25/cve-2026-42533) | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a… | | 0⭐ | 1d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | | 10⭐ | 1d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | -| 0⭐ | 1d ago | KEV [CVE-2025-55182-scanner](https://github.com/mayank729/CVE-2025-55182-scanner) | 🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect… | ## 2026 · newest 20 of 253 diff --git a/docs/hero.svg b/docs/hero.svg index 4bcc20386be..e40871fbebc 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="CVE Radar, 103,945 CVEs with public proof-of-concept exploits"> @@ -22,10 +22,10 @@ fill="#e6edf3" letter-spacing="-0.5">154,097 CVES INDEXED101,809 + fill="#2f81f7" letter-spacing="-0.5">103,945 WITH POCS1,110 + fill="#f85149" letter-spacing="-0.5">1,182 KNOWN EXPLOITED diff --git a/docs/social-card.png b/docs/social-card.png index b38d4eb5993..18c5fd26a29 100644 Binary files a/docs/social-card.png and b/docs/social-card.png differ diff --git a/docs/social-card.svg b/docs/social-card.svg index 66ca09ad7b3..b7959243a03 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -23,10 +23,10 @@ fill="#e6edf3" letter-spacing="-0.5">154,097 CVES INDEXED101,809 + fill="#2f81f7" letter-spacing="-0.5">103,945 WITH POCS1,110 + fill="#f85149" letter-spacing="-0.5">1,182 KNOWN EXPLOITED diff --git a/docs/stats.json b/docs/stats.json index d706002460d..4b20e581d12 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { - "kev": 1110, + "kev": 1182, "total_cves": 154097, - "with_pocs": 101809 + "with_pocs": 103945 } diff --git a/trending.json b/trending.json index 91c4080dff3..573462c2dcd 100644 --- a/trending.json +++ b/trending.json @@ -576,13 +576,13 @@ }, { "year": 2026, - "stars": 1, - "name": "CVE-2026-31802", - "url": "https://github.com/Recorded-texteditor120/CVE-2026-31802", - "desc": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", - "pushed": "2026-08-31T02:15:38Z", - "created": "2026-03-28T20:49:46Z", - "cve": "CVE-2026-31802", + "stars": 0, + "name": "CVE-2026-76569", + "url": "https://github.com/toanln-cov/CVE-2026-76569", + "desc": "Reflected XSS via search GET Parameter in Phoca Download", + "pushed": "2026-08-31T07:54:25Z", + "created": "2026-08-31T07:51:07Z", + "cve": "CVE-2026-76569", "kev": false, "landed": true }, @@ -622,6 +622,18 @@ "kev": false, "landed": true }, + { + "year": 2026, + "stars": 0, + "name": "cve-2026-42533", + "url": "https://github.com/FranklinF25/cve-2026-42533", + "desc": "A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", + "pushed": "2026-08-30T13:29:46Z", + "created": "2026-08-29T14:21:49Z", + "cve": "CVE-2026-42533", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -645,17 +657,5 @@ "cve": "CVE-2026-82222", "kev": false, "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-55182-scanner", - "url": "https://github.com/mayank729/CVE-2025-55182-scanner", - "desc": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", - "pushed": "2026-08-30T04:24:27Z", - "created": "2022-06-17T10:19:10Z", - "cve": "CVE-2025-55182", - "kev": true, - "landed": true } ]