diff --git a/README.md b/README.md index a49c994b74e..4d0df0829c0 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-12%20Sep%202026%2015%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609121507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C648-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C195-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609121507)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-12%20Sep%202026%2016%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609121607)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C649-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C196-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609121607)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,25 +12,25 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 5h ago | [CVE-2026-80099](https://github.com/Wayang1337/CVE-2026-80099) | Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated | -| 2⭐ | 17h ago | [CVE-2026-89013](https://github.com/Faceless0x7/CVE-2026-89013) | CVE-2026-89013 Exploit - Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated… | -| 2⭐ | 17h ago | [CVE-2026-89012](https://github.com/Faceless0x7/CVE-2026-89012) | CVE-2026-89012 Exploit - SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution… | -| 5⭐ | 22h ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | +| 0⭐ | 6h ago | [CVE-2026-80099](https://github.com/Wayang1337/CVE-2026-80099) | Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated | +| 2⭐ | 18h ago | [CVE-2026-89013](https://github.com/Faceless0x7/CVE-2026-89013) | CVE-2026-89013 Exploit - Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated… | +| 2⭐ | 18h ago | [CVE-2026-89012](https://github.com/Faceless0x7/CVE-2026-89012) | CVE-2026-89012 Exploit - SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution… | +| 5⭐ | 23h ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | | 0⭐ | 2d ago | KEV [CVE-2026-60137-and-CVE-2026-63030](https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030) | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the… | | 0⭐ | 2d ago | [CVE-2025-27636-RCE-in-Apache-Camel](https://github.com/AC8999/CVE-2025-27636-RCE-in-Apache-Camel) | CVE-2025-27636 PoC written in Python | | 2⭐ | 2d ago | [CVE-2026-11387-WooCommerce-SMS-OTP](https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP) | SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert… | | 2⭐ | 3d ago | [CVE-2026-67401](https://github.com/axedos/CVE-2026-67401) | poc in python for CVE-2026-67401 | -| 0⭐ | 3d ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. | +| 0⭐ | 3d ago | [CVE-2026-73318](https://github.com/BomboBombone/CVE-2026-73318) | Sanitized XenForo write-up and proof of concept for CVE-2026-73318. | | 0⭐ | 3d ago | KEV [CVE-2025-55182](https://github.com/r3vpwnx/CVE-2025-55182) | CVE-2025-55182 - React2Shell (CVE-2025-55182) unauthenticated RCE via React Server Components Flight… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 3⭐ | 21h ago | KEV [CVE-2026-85706](https://github.com/mhtsec/CVE-2026-85706) | GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC | -| 21⭐ | 22h ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | -| 27⭐ | 23h ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… | -| 6⭐ | 23h ago | KEV [CVE-2026-24061-PoC-Exploit](https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit) | 🚀 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control 💥 CRLF injection via NEW_ENVIRON… | +| 3⭐ | 22h ago | KEV [CVE-2026-85706](https://github.com/mhtsec/CVE-2026-85706) | GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC | +| 21⭐ | 23h ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | +| 27⭐ | 1d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… | +| 6⭐ | 1d ago | KEV [CVE-2026-24061-PoC-Exploit](https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit) | 🚀 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control 💥 CRLF injection via NEW_ENVIRON… | | 5⭐ | 3d ago | [CVE-2026-19089-WooCommerce-Tyche](https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche) | CVE-2026-19089 WooCommerce Tych Remote Command Execution | | 824⭐ | 4d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 532⭐ | 4d ago | KEV [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | @@ -42,7 +42,7 @@ | 11⭐ | 8d ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… | | 4⭐ | 9d ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… | | 3⭐ | 9d ago | [cve-2026-47627](https://github.com/AneKazek/cve-2026-47627) | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path… | -| 12⭐ | 9d ago | KEV [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | +| 12⭐ | 10d ago | KEV [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | | 4⭐ | 11d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | | 3⭐ | 12d ago | [CVE-2026-78905-Facebook-Account-Takeover](https://github.com/vxssroott/CVE-2026-78905-Facebook-Account-Takeover) | Social Media Infrastructure Vulnerability Research. CVE-2026-78905: OAuth token reuse and session hijacking… | | 4⭐ | 12d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | @@ -74,7 +74,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 17⭐ | 26d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | +| 17⭐ | 27d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 4⭐ | 28d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 44d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | | 3⭐ | 83d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | diff --git a/cves/2026/CVE-2026-75650.md b/cves/2026/CVE-2026-75650.md new file mode 100644 index 00000000000..7f7cc4ce13c --- /dev/null +++ b/cves/2026/CVE-2026-75650.md @@ -0,0 +1,21 @@ +### [CVE-2026-75650](https://www.cve.org/CVERecord?id=CVE-2026-75650) +**Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)** +![](https://img.shields.io/static/v1?label=Vendor&message=Adobe&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Adobe%20Commerce&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Adobe%20Commerce%20B2B&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Magento%20Open%20Source&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20Used%20in%20a%20Template%20Engine%20%28CWE-1336%29&color=brightgreen) +![](https://img.shields.io/static/v1?label=CISA%20KEV&message=Known%20Exploited&color=red) + +### Description + +Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/fortbridge/stylesmuggler diff --git a/cves/2026/CVE-2026-85706.md b/cves/2026/CVE-2026-85706.md index e521ab69fad..19e5613a528 100644 --- a/cves/2026/CVE-2026-85706.md +++ b/cves/2026/CVE-2026-85706.md @@ -22,3 +22,4 @@ GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 - https://github.com/ynsmroztas/GitLabSniper - https://github.com/mhtsec/CVE-2026-85706 - https://github.com/solivaquaant/CVE-2026-85706-PoC +- https://github.com/solivaquaant/CVE-2026-85706 diff --git a/docs/hero.svg b/docs/hero.svg index f8e21f7a706..c93887b1d10 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 82,649 CVEs with public proof-of-concept exploits"> @@ -19,13 +19,13 @@ pocindex.io 171,699 + fill="#e6edf3" letter-spacing="-0.5">171,700 CVES INDEXED82,648 + fill="#2f81f7" letter-spacing="-0.5">82,649 WITH POCS1,195 + fill="#f85149" letter-spacing="-0.5">1,196 KNOWN EXPLOITED diff --git a/docs/social-card.svg b/docs/social-card.svg index 97d23374f7a..ddf1a68dddd 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,13 +20,13 @@ 171,699 + fill="#e6edf3" letter-spacing="-0.5">171,700 CVES INDEXED82,648 + fill="#2f81f7" letter-spacing="-0.5">82,649 WITH POCS1,195 + fill="#f85149" letter-spacing="-0.5">1,196 KNOWN EXPLOITED diff --git a/docs/stats.json b/docs/stats.json index dac2c1be069..e1aa37a2c6b 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { - "kev": 1195, - "total_cves": 171699, - "with_pocs": 82648 + "kev": 1196, + "total_cves": 171700, + "with_pocs": 82649 } diff --git a/index/github.txt b/index/github.txt index 6626eb73e01..7c26ad7b4bb 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26637,3 +26637,5 @@ CVE-2026-80099 - https://github.com/Wayang1337/CVE-2026-80099 CVE-2026-78006 - https://github.com/DeadExpl0it/CVE-2026-78006-POC CVE-2026-43499 - https://github.com/huaguiqi/asus_i005-CVE-2026-43499 CVE-2026-43499 - https://github.com/mouseos/sh53d-temp-root +CVE-2026-75650 - https://github.com/fortbridge/stylesmuggler +CVE-2026-85706 - https://github.com/solivaquaant/CVE-2026-85706 diff --git a/index/trending.json b/index/trending.json index ee777666a5b..6de69b0268b 100644 --- a/index/trending.json +++ b/index/trending.json @@ -582,12 +582,12 @@ { "year": 2026, "stars": 0, - "name": "CVE-2026-73312", - "url": "https://github.com/BomboBombone/CVE-2026-73312", - "desc": "Sanitized XenForo write-up and proof of concept for CVE-2026-73312.", - "pushed": "2026-09-08T23:52:54Z", - "created": "2026-09-08T16:35:14Z", - "cve": "CVE-2026-73312", + "name": "CVE-2026-73318", + "url": "https://github.com/BomboBombone/CVE-2026-73318", + "desc": "Sanitized XenForo write-up and proof of concept for CVE-2026-73318.", + "pushed": "2026-09-08T23:53:19Z", + "created": "2026-09-08T16:35:46Z", + "cve": "CVE-2026-73318", "kev": false, "landed": true },