diff --git a/README.md b/README.md index 1e0a0da7a04..ec11ff78baa 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2014%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610111407)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C370-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610111407)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2015%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610111507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C370-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610111507)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,13 +14,13 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 2h ago | [CVE-2026-27626](https://github.com/Shisones/CVE-2026-27626) | CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root… | -| 0⭐ | 5h ago | [Exploit-CVE-2026-40224](https://github.com/0xparad0x/Exploit-CVE-2026-40224) | CVE-2026-40224: systemd-machined local privilege escalation | -| 0⭐ | 7h ago | KEV [CVE-2025-57819](https://github.com/Wayang1337/CVE-2025-57819) | FreePBX unauthenticated SQLi (endpoint module) | -| 0⭐ | 7h ago | [CVE-2026-104335](https://github.com/Farih123/CVE-2026-104335) | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code… | -| 0⭐ | 9h ago | KEV [cve-2025-24813](https://github.com/toyplan/cve-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | -| 0⭐ | 12h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… | -| 0⭐ | 14h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent | +| 0⭐ | 3h ago | [CVE-2026-27626](https://github.com/Shisones/CVE-2026-27626) | CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root… | +| 0⭐ | 6h ago | [Exploit-CVE-2026-40224](https://github.com/0xparad0x/Exploit-CVE-2026-40224) | CVE-2026-40224: systemd-machined local privilege escalation | +| 0⭐ | 8h ago | KEV [CVE-2025-57819](https://github.com/Wayang1337/CVE-2025-57819) | FreePBX unauthenticated SQLi (endpoint module) | +| 0⭐ | 8h ago | [CVE-2026-104335](https://github.com/Farih123/CVE-2026-104335) | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code… | +| 0⭐ | 10h ago | KEV [cve-2025-24813](https://github.com/toyplan/cve-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | +| 0⭐ | 13h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… | +| 0⭐ | 15h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent | | 0⭐ | 1d ago | [CVE-2026-102428](https://github.com/murrez/CVE-2026-102428) | CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi - order_field/order_direction… | | 0⭐ | 1d ago | [CVE-2026-106445](https://github.com/murrez/CVE-2026-106445) | CVE-2026-106445 - Handlebars 4.0.0-4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f).… | | 0⭐ | 1d ago | [CVE-2026-107806](https://github.com/murrez/CVE-2026-107806) | CVE-2026-107806 - nginx-ui 2.3.8-2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET… | @@ -37,18 +37,18 @@ | 88⭐ | 29d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… | | 49⭐ | 12d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | | 105⭐ | 46d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | -| 7⭐ | 1h ago | [cve-2026-43499-honor](https://github.com/knowlily/cve-2026-43499-honor) | CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro,… | | 86⭐ | 37d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | +| 7⭐ | 2h ago | [cve-2026-43499-honor](https://github.com/knowlily/cve-2026-43499-honor) | CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro,… | | 108⭐ | 68d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… | | 40⭐ | 17d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | +| 109⭐ | 84d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… | | 39⭐ | 18d ago | KEV [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | -| 108⭐ | 84d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… | | 31⭐ | 13d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | | 35⭐ | 4d ago | KEV [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | | 26⭐ | 13d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 43⭐ | 29d ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | -| 86⭐ | 90d ago | [Android-CVE-2026-43499](https://github.com/CakesTwix/Android-CVE-2026-43499) | Android version CVE-2026-43499 tester | -| 13⭐ | 5d ago | [watchTowr-vs-Atlassian-CVE-2026-21589](https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | +| 87⭐ | 90d ago | [Android-CVE-2026-43499](https://github.com/CakesTwix/Android-CVE-2026-43499) | Android version CVE-2026-43499 tester | +| 44⭐ | 34d ago | [CVE-2026-28576-poc](https://github.com/mobilehackinglab/CVE-2026-28576-poc) | SQL injection vulnerability in Android 17 (AOSP) | ## Trending in 2025 @@ -59,7 +59,7 @@ | 10⭐ | 45d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 7⭐ | 52d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 8⭐ | 70d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | -| 7⭐ | 65d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | +| 7⭐ | 66d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 5⭐ | 81d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 3⭐ | 44d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 3⭐ | 54d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | diff --git a/index/releases/2022.json b/index/releases/2022.json index 7c682fb8f68..23bdb1689d9 100644 --- a/index/releases/2022.json +++ b/index/releases/2022.json @@ -3824,7 +3824,7 @@ "CVE-2022-26134 github:rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb"}, "CVE-2022-26134 github:reph0r/poc-exp?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reph0r/poc-exp"}, "CVE-2022-26134 github:reubensammut/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reubensammut/cve-2022-26134"}, -"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-11T03:07:59Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"425cffd7a9b2aad60bf142a09f089c22937d7f2f","imported":true,"pending":true,"pushed_at":"2026-10-09T23:02:02Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, +"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-11T15:08:37Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"425cffd7a9b2aad60bf142a09f089c22937d7f2f","imported":true,"pending":true,"pushed_at":"2026-10-09T23:02:02Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, "CVE-2022-26134 github:secjia/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/secjia/CVE-2022-26134"}, "CVE-2022-26134 github:shamo0/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shamo0/CVE-2022-26134"}, "CVE-2022-26134 github:shiftsansan/cve-2022-26134-console?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shiftsansan/CVE-2022-26134-Console"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index 3003f514279..00902d13ec1 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -3578,7 +3578,7 @@ "CVE-2026-21589 github:0xblackash/cve-2026-21589?#":{"basis":"commit","blobs":["ea6d9269d791f32f99dced1a1ac1d3c83ba8a54a"],"checked":"2026-10-07T16:09:46Z","commit":"2026-10-07T16:02:15Z","commit_verified":true,"copy":"CVE-2026-21589 github:marcusprogram/cve-2026-21589?#","created":"2026-10-07T15:41:20Z","cve":"CVE-2026-21589","head":"66dfe8ed84e09f77866e34d9ddc11375db8874f9","history_paths":["CVE-2026-21589.py"],"history_version":3,"paths":["CVE-2026-21589.py"],"pushed_at":"2026-10-07T16:02:15Z","released":"2026-10-06T15:51:43Z","repo":1409019111,"rev":"fe3cdf4367adb0a2c3026a3d954c204e7ec7c4ec39166ee2ceaeda7c0438ac43","seen":"2026-10-07T16:09:53Z","sha":"66dfe8ed84e09f77866e34d9ddc11375db8874f9","url":"https://github.com/0xBlackash/CVE-2026-21589"}, "CVE-2026-21589 github:aduli198/cve-2026-21589?#":{"basis":"commit","blobs":["c36930227d632cac27206146421a062cd0e5ccce"],"checked":"2026-10-07T12:09:09Z","commit":"2026-10-07T09:10:12Z","commit_verified":true,"created":"2026-10-07T09:03:00Z","cve":"CVE-2026-21589","head":"3c08a1ae4fe83563b3f9bafb4855720a2f508ce5","history_paths":["cve-2026-21589-admin-takeover.py"],"history_version":3,"paths":["cve-2026-21589-admin-takeover.py"],"pushed_at":"2026-10-07T09:10:13Z","released":"2026-10-07T09:10:12Z","repo":1408523550,"rev":"508d2ae01d6fd8a9756fd484b1a417d7f7704aa7bb66ed1b934f7c7c09bf6df8","seen":"2026-10-07T12:09:17Z","sha":"3c08a1ae4fe83563b3f9bafb4855720a2f508ce5","url":"https://github.com/aduli198/CVE-2026-21589"}, "CVE-2026-21589 github:bimboxh4/cve-2026-21589?#":{"basis":"commit","blobs":["27abcc0574ee699c79fdbaf5e6d9b08799be02ea"],"checked":"2026-10-07T16:09:46Z","commit":"2026-10-07T13:45:58Z","commit_verified":true,"created":"2026-10-07T13:44:41Z","cve":"CVE-2026-21589","head":"b1e96131abe70968708195a1561e00631f9b556a","history_paths":["CVE-2026-21589.py"],"history_version":3,"paths":["CVE-2026-21589.py"],"pushed_at":"2026-10-07T13:45:59Z","released":"2026-10-07T13:45:58Z","repo":1408857126,"rev":"a70f0486d8e3fd2de4a322121eed4619d9b3f124969e8f5272f0373012e74d1d","seen":"2026-10-07T16:09:53Z","sha":"b1e96131abe70968708195a1561e00631f9b556a","url":"https://github.com/BimBoxH4/CVE-2026-21589"}, -"CVE-2026-21589 github:gotr00t0day/cve-2026-21589?#":{"basis":"pending","checked":"2026-10-11T03:07:59Z","created":"2026-10-09T19:15:01Z","cve":"CVE-2026-21589","head":"c8693a427f8d2df54b3c1308cfef4eef52c032e5","pending":true,"pushed_at":"2026-10-09T19:17:27Z","released":null,"repo":1412343154,"seen":"2026-10-09T20:08:35Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"}, +"CVE-2026-21589 github:gotr00t0day/cve-2026-21589?#":{"basis":"pending","checked":"2026-10-11T15:08:37Z","created":"2026-10-09T19:15:01Z","cve":"CVE-2026-21589","head":"c8693a427f8d2df54b3c1308cfef4eef52c032e5","pending":true,"pushed_at":"2026-10-09T19:17:27Z","released":null,"repo":1412343154,"seen":"2026-10-09T20:08:35Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"}, "CVE-2026-21589 github:marcusprogram/cve-2026-21589?#":{"basis":"commit","blobs":["ea6d9269d791f32f99dced1a1ac1d3c83ba8a54a"],"checked":"2026-10-06T22:56:53Z","commit":"2026-10-06T15:51:43Z","commit_verified":true,"created":"2026-10-06T15:43:34Z","cve":"CVE-2026-21589","head":"52c0899dad92ea6a6a1f8d33818ec100843d0009","history_paths":["cve-2026-21589.py"],"history_version":3,"imported":true,"paths":["cve-2026-21589.py"],"pushed_at":"2026-10-06T15:51:43Z","released":"2026-10-06T15:51:43Z","repo":1407557235,"rev":"fe3cdf4367adb0a2c3026a3d954c204e7ec7c4ec39166ee2ceaeda7c0438ac43","sha":"52c0899dad92ea6a6a1f8d33818ec100843d0009","url":"https://github.com/MarcusProgram/CVE-2026-21589"}, "CVE-2026-21589 github:murrez/cve-2026-21589?#":{"basis":"commit","blobs":["136f712815092e8114cfff8de174fd243a3e49d2"],"checked":"2026-10-08T09:08:34Z","commit":"2026-10-08T08:31:47Z","commit_verified":true,"created":"2026-10-08T08:31:03Z","cve":"CVE-2026-21589","head":"fee5ad1221487ba4ee139a062c4b1582b1501310","history_paths":["poc.py"],"history_version":3,"paths":["poc.py"],"pushed_at":"2026-10-08T08:31:48Z","released":"2026-10-08T08:31:47Z","repo":1409993065,"rev":"e07b250487408e0be4668aaf8fc0c559a86b79dc22c678fc16cdb021077e009c","seen":"2026-10-08T09:08:36Z","sha":"fee5ad1221487ba4ee139a062c4b1582b1501310","url":"https://github.com/murrez/CVE-2026-21589"}, "CVE-2026-21589 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml?#":{"basis":"unknown","cve":"CVE-2026-21589","released":null,"seen":"2026-10-07T11:11:43Z","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml"}, @@ -5424,7 +5424,7 @@ "CVE-2026-3180 https://www.exploit-db.com/exploits/52609":{"basis":"source","cve":"CVE-2026-3180","imported":true,"released":"2026-06-05","source":"2026-06-05","url":"https://www.exploit-db.com/exploits/52609"}, "CVE-2026-31801 github:advisories/ghsa-85jx-fm8m-x8c6?#":{"basis":"unknown","cve":"CVE-2026-31801","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-85jx-fm8m-x8c6"}, "CVE-2026-31802 github:advisories/ghsa-9ppj-qmqm-q256?#":{"basis":"unknown","cve":"CVE-2026-31802","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-9ppj-qmqm-q256"}, -"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-11T12:08:01Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"9a10623150a162f32883e0f1bd373acdc139b93b","imported":true,"pending":true,"pushed_at":"2026-10-11T11:25:06Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"}, +"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-11T15:08:04Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"d112919c58acbefa20eba9048d3fafb0020d5721","imported":true,"pending":true,"pushed_at":"2026-10-11T14:25:19Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"}, "CVE-2026-31807 github:advisories/ghsa-5hc8-qmg8-pw27?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-5hc8-qmg8-pw27"}, "CVE-2026-31807 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml"}, "CVE-2026-31809 github:advisories/ghsa-pmc9-f5qr-2pcr?#":{"basis":"unknown","cve":"CVE-2026-31809","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-pmc9-f5qr-2pcr"}, @@ -7539,7 +7539,7 @@ "CVE-2026-43499 github:k-o-n-t-o-r/ghostlock-sabrina?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/k-o-n-t-o-r/ghostlock-sabrina"}, "CVE-2026-43499 github:kananosa/cve-2026-43499-for-xiaomi-17t-chagall?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall"}, "CVE-2026-43499 github:kelsidavis/lg-g710tm-unlock?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kelsidavis/lg-g710tm-unlock"}, -"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-11T14:08:01Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"a8da98894af723e1c9bff6523b1a9fc354293cd4","imported":true,"pending":true,"pushed_at":"2026-10-11T13:09:50Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, +"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-11T15:08:04Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"83f574eeabd1dd31c6c968fc8afaac2bfc2af30f","imported":true,"pending":true,"pushed_at":"2026-10-11T14:31:44Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, "CVE-2026-43499 github:kurtulusakyuz/ionstack_s21?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/kurtulusakyuz/IonStack_S21"}, "CVE-2026-43499 github:l-1124/rootmyvivo-exploit?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-Exploit"}, "CVE-2026-43499 github:l-1124/rootmyvivo-rs?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-rs"}, diff --git a/index/trending.json b/index/trending.json index dd598c55093..7a255db7d08 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.215428039572369, + "score": 3.2136396315188316, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -27,7 +27,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.6936776685401498, + "score": 1.6899614049199727, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -44,7 +44,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.6639593894189357, + "score": 1.663353222661706, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -61,7 +61,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.2688591927706485, + "score": 1.2681357926117063, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -78,7 +78,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.9008680665296941, + "score": 0.9000143190050764, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -95,7 +95,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.8678609179914992, + "score": 0.8670300473408519, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -112,7 +112,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.8675385264665322, + "score": 0.8656253769896873, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -129,29 +129,12 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.7576668489776524, + "score": 0.7572024225113181, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", "kev": false }, - { - "year": 2026, - "stars": 7, - "name": "cve-2026-43499-honor", - "url": "https://github.com/knowlily/cve-2026-43499-honor", - "artifact": false, - "source": "github.com", - "desc": "CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.", - "pushed": "2026-10-11T13:05:41Z", - "released": null, - "basis": "pending", - "score": 0.733820377207981, - "trending": true, - "created": "2026-08-15T15:18:19Z", - "cve": "CVE-2026-43499", - "kev": false - }, { "year": 2026, "stars": 86, @@ -163,12 +146,29 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7189754893949888, + "score": 0.7184317373500446, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", "kev": false }, + { + "year": 2026, + "stars": 7, + "name": "cve-2026-43499-honor", + "url": "https://github.com/knowlily/cve-2026-43499-honor", + "artifact": false, + "source": "github.com", + "desc": "CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.", + "pushed": "2026-10-11T13:05:41Z", + "released": null, + "basis": "pending", + "score": 0.7139081609870392, + "trending": true, + "created": "2026-08-15T15:18:19Z", + "cve": "CVE-2026-43499", + "kev": false + }, { "year": 2026, "stars": 108, @@ -180,7 +180,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5969713241477069, + "score": 0.5967212181392857, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -197,12 +197,29 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.5614585753436362, + "score": 0.5605692590921338, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", "kev": false }, + { + "year": 2026, + "stars": 109, + "name": "CVE-2026-43499-Poc-Analysis", + "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis", + "artifact": false, + "source": "github.com", + "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", + "pushed": "2026-07-18T21:09:06Z", + "released": null, + "basis": "pending", + "score": 0.5224092054904844, + "trending": true, + "created": "2026-07-14T14:21:27Z", + "cve": "CVE-2026-43499", + "kev": false + }, { "year": 2026, "stars": 39, @@ -214,29 +231,12 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.521988408007041, + "score": 0.5212158379884381, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", "kev": true }, - { - "year": 2026, - "stars": 108, - "name": "CVE-2026-43499-Poc-Analysis", - "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis", - "artifact": false, - "source": "github.com", - "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", - "pushed": "2026-07-18T21:09:06Z", - "released": null, - "basis": "pending", - "score": 0.5177935067017085, - "trending": true, - "created": "2026-07-14T14:21:27Z", - "cve": "CVE-2026-43499", - "kev": false - }, { "year": 2026, "stars": 31, @@ -248,7 +248,7 @@ "pushed": "2026-09-27T19:48:09Z", "released": "2026-09-27T19:47:52Z", "basis": "commit", - "score": 0.5090229441135781, + "score": 0.508014672553763, "trending": true, "created": "2026-09-27T19:41:06Z", "cve": "CVE-2026-34990", @@ -265,7 +265,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.4674978201537812, + "score": 0.46680790611795125, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -282,7 +282,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.43511797360610527, + "score": 0.4342324185150079, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -299,7 +299,7 @@ "pushed": "2026-09-11T16:38:12Z", "released": "2026-09-11T15:54:48Z", "basis": "commit", - "score": 0.4208035123772114, + "score": 0.4204050630523837, "trending": true, "created": "2026-09-11T15:24:22Z", "cve": "CVE-2026-85706", @@ -307,7 +307,7 @@ }, { "year": 2026, - "stars": 86, + "stars": 87, "name": "Android-CVE-2026-43499", "url": "https://github.com/CakesTwix/Android-CVE-2026-43499", "artifact": false, @@ -316,7 +316,7 @@ "pushed": "2026-07-13T13:32:26Z", "released": null, "basis": "pending", - "score": 0.3953061648135951, + "score": 0.3997739957097059, "trending": true, "created": "2026-07-13T13:31:55Z", "cve": "CVE-2026-43499", @@ -324,19 +324,19 @@ }, { "year": 2026, - "stars": 13, - "name": "watchTowr-vs-Atlassian-CVE-2026-21589", - "url": "https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589", + "stars": 44, + "name": "CVE-2026-28576-poc", + "url": "https://github.com/mobilehackinglab/CVE-2026-28576-poc", "artifact": false, "source": "github.com", - "desc": "h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. h3. Context This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. h3. Details: * The vulnerability must be addressed for affected versions of: Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.1, 7.2.4 Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 Crucible, fix versions 4.9.15 Fisheye, fix version 4.9.15 * Exploitation requires prior knowledge of the target file's exact name and path. * The vulnerability does not include the capability to enumerate or list directory contents.", - "pushed": "2026-10-06T10:48:38Z", - "released": "2026-10-06T10:48:38Z", - "basis": "commit", - "score": 0.39452324915642545, + "desc": "SQL injection vulnerability in Android 17 (AOSP)", + "pushed": "2026-09-07T08:42:12Z", + "released": null, + "basis": "pending", + "score": 0.39275600499143903, "trending": true, - "created": "2026-10-06T10:40:59Z", - "cve": "CVE-2026-21589", + "created": "2026-09-07T09:25:30Z", + "cve": "CVE-2026-28576", "kev": false }, { @@ -350,7 +350,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.3873349203016823, + "score": 0.3861109929687138, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -367,7 +367,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.13139190112809657, + "score": 0.13133040385474543, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -384,7 +384,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.08963285773995999, + "score": 0.08952988419577762, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -401,7 +401,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.0737929317649683, + "score": 0.07374621678455531, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -418,7 +418,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.04665560035083316, + "score": 0.04663005954342793, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -435,7 +435,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.041650072376883035, + "score": 0.04163404821420622, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -452,7 +452,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.039888739284284304, + "score": 0.03987128026654548, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -469,7 +469,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.029730333620853946, + "score": 0.029719671507433897, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -486,7 +486,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.025107911987549907, + "score": 0.025095292407376405, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -503,7 +503,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.024540735903549212, + "score": 0.024532056689110494, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -520,7 +520,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.022376229706838932, + "score": 0.02236184611687834, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -537,7 +537,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.019491742416742435, + "score": 0.019481453527581547, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -554,7 +554,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.019268419891535698, + "score": 0.019261785097115132, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -571,7 +571,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.018976297764235796, + "score": 0.018969904557434938, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -588,7 +588,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.015835367341115788, + "score": 0.015829152507017052, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -605,7 +605,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.015460761339705031, + "score": 0.015454896765870823, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -622,7 +622,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.01458424923151477, + "score": 0.014579161267018657, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -639,7 +639,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.009810316318049074, + "score": 0.009809594163086533, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",