diff --git a/README.md b/README.md index 33bfe3264b4..2875042c36e 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-04%20Oct%202026%2012%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610041207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C012-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610041207)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-04%20Oct%202026%2013%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610041307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C013-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610041307)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,9 +12,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 2h ago | KEV [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0,… | -| 0⭐ | 13h ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) | -| 0⭐ | 18h ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… | +| 0⭐ | 3h ago | KEV [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0,… | +| 0⭐ | 14h ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) | +| 0⭐ | 19h ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… | | 0⭐ | 2d ago | [CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE](https://github.com/kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE) | GLPI is a free asset and IT management software package. An authenticated user can upload and force the… | | 0⭐ | 2d ago | [CVE-2025-47947](https://github.com/yel1337/CVE-2025-47947) | POC for libapache2-mod-security2 | | 0⭐ | 3d ago | KEV [CVE-2025-8110](https://github.com/Makis6/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | @@ -27,8 +27,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 25⭐ | 19h ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | -| 825⭐ | 19h ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | +| 3⭐ | 15h ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… | +| 32⭐ | 20h ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | +| 825⭐ | 20h ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 2d ago | [CVE-2026-100520-laranode-path-traversal](https://github.com/wvllxe/CVE-2026-100520-laranode-path-traversal) | Path Traversal -> RCE in Laranode < 1.2.1 (CWE-22). PoC + advisory writeup. | | 4⭐ | 4d ago | KEV [CVE-2026-87902](https://github.com/tonydelouvre/CVE-2026-87902) | XWP_RCE - CVE-2026-87902 Hacker Console | | 4⭐ | 4d ago | KEV [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM - via… | @@ -46,7 +47,6 @@ | 30⭐ | 6d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | | 13⭐ | 6d ago | [CVE-2026-28695](https://github.com/predyy/CVE-2026-28695) | CVE-2026-28695 PoC - Authenticated blind remote code execution in Craft CMS. | | 3⭐ | 6d ago | [mediawiki-CVE-2026-100382](https://github.com/nth347/mediawiki-CVE-2026-100382) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in… | -| 6⭐ | 6d ago | [opace6-cve-2026-64560](https://github.com/qingle009/opace6-cve-2026-64560) | OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address | ## Trending in 2025 diff --git a/cves/2026/CVE-2026-96451.md b/cves/2026/CVE-2026-96451.md new file mode 100644 index 00000000000..bd37c4be8cd --- /dev/null +++ b/cves/2026/CVE-2026-96451.md @@ -0,0 +1,18 @@ +### [CVE-2026-96451](https://www.cve.org/CVERecord?id=CVE-2026-96451) +**WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=Ultimate%20Member&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Ultimate%20Member&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brightgreen) + +### Description + +Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/Nxploited/CVE-2026-96451 diff --git a/docs/hero.svg b/docs/hero.svg index 8d5558f1810..db2dbdc82d6 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 84,013 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 173,326 + fill="#e6edf3" letter-spacing="-0.5">173,327 CVES INDEXED84,012 + fill="#2f81f7" letter-spacing="-0.5">84,013 WITH POCS1,221 diff --git a/docs/social-card.svg b/docs/social-card.svg index a2a7df9608f..d7a43635704 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 173,326 + fill="#e6edf3" letter-spacing="-0.5">173,327 CVES INDEXED84,012 + fill="#2f81f7" letter-spacing="-0.5">84,013 WITH POCS1,221 diff --git a/docs/stats.json b/docs/stats.json index 8079b6901c9..0b16b5a3bb5 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1221, - "total_cves": 173326, - "with_pocs": 84012 + "total_cves": 173327, + "with_pocs": 84013 } diff --git a/index/github.txt b/index/github.txt index cde3f7bebff..3edee4edda2 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27169,3 +27169,4 @@ CVE-2026-72778 - https://github.com/TRX-0/CVE-2026-72778-craftcms-rce CVE-2026-72781 - https://github.com/TRX-0/CVE-2026-72781-craftcms-sandbox-rce CVE-2025-55182 - https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182 CVE-2026-19632 - https://github.com/TheJesterrrr/CVE-2026-19632 +CVE-2026-96451 - https://github.com/Nxploited/CVE-2026-96451 diff --git a/index/trending.json b/index/trending.json index 4f65a4f60ea..31d85c1cc5a 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,18 @@ [ { "year": 2026, - "stars": 25, + "stars": 3, + "name": "cve-2026-103956-loom-unauth", + "url": "https://github.com/abraxas/cve-2026-103956-loom-unauth", + "desc": "CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured", + "pushed": "2026-10-03T21:54:38Z", + "created": "2026-10-03T21:54:10Z", + "cve": "CVE-2026-103956", + "kev": false + }, + { + "year": 2026, + "stars": 32, "name": "cve-2026-41940-PoC", "url": "https://github.com/yasouxken/cve-2026-41940-PoC", "desc": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header - no credentials required.", @@ -208,17 +219,6 @@ "cve": "CVE-2026-100382", "kev": false }, - { - "year": 2026, - "stars": 6, - "name": "opace6-cve-2026-64560", - "url": "https://github.com/qingle009/opace6-cve-2026-64560", - "desc": "OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address", - "pushed": "2026-09-27T15:19:49Z", - "created": "2026-09-26T12:31:39Z", - "cve": "CVE-2026-64560", - "kev": false - }, { "year": 2025, "stars": 7,