diff --git a/README.md b/README.md index 0bec014eaec..d8cd2f292ab 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-22%20Sep%202026%2014%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609221408)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C207-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C202-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609221408)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-22%20Sep%202026%2015%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609221507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C208-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C202-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609221507)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,8 +12,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 2⭐ | 19m ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… | -| 0⭐ | 9h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 2⭐ | 1h ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… | +| 0⭐ | 10h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | | 1⭐ | 1d ago | [CVE-2026-89026](https://github.com/AranFarzami/CVE-2026-89026) | PoC exploit and scanner for CVE-2026-89026, targeting the Issabel PBXAPI authentication vulnerability | | 1⭐ | 1d ago | [CVE-2025-6325_CVE-2025-6327](https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327) | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… | | 2⭐ | 1d ago | [CVE-2026-90817](https://github.com/murrez/CVE-2026-90817) | Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation. | @@ -27,18 +27,18 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 19⭐ | 23h ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | +| 5⭐ | 14m ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within… | +| 19⭐ | 1d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | | 3⭐ | 1d ago | [CVE-2026-94129](https://github.com/lzty/CVE-2026-94129) | A POC for CVE-2026-94129 | | 3⭐ | 1d ago | [CVE-2026-94128](https://github.com/lzty/CVE-2026-94128) | POC for CVE-2026-94128 | | 3⭐ | 1d ago | [CVE-2026-88854](https://github.com/murrez/CVE-2026-88854) | CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) | | 5⭐ | 1d ago | [CVE-2026-28609-matroska-pcm-oob](https://github.com/devrodT2/CVE-2026-28609-matroska-pcm-oob) | Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in… | -| 4⭐ | 1d ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within… | | 4⭐ | 2d ago | [CVE-2026-93958](https://github.com/HackSpeak/CVE-2026-93958) | D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized… | | 825⭐ | 2d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 2d ago | [CVE-2026-92229](https://github.com/murrez/CVE-2026-92229) | CVE-2026-92229 - Forminator ≤1.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC. | | 3⭐ | 5d ago | [CVE-2026-55781-poc](https://github.com/yzy0okrkv1hngo0r/CVE-2026-55781-poc) | Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field. | | 16⭐ | 5d ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | -| 5⭐ | 5d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | +| 5⭐ | 6d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | | 3⭐ | 6d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | | 3⭐ | 6d ago | [CVE-2026-12944](https://github.com/cflowsec/CVE-2026-12944) | Langflow 1.10.0 urllib SSRF POC | | 16⭐ | 8d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | @@ -58,7 +58,7 @@ | 5⭐ | 33d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 3⭐ | 35d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 21⭐ | 42d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | -| 6⭐ | 46d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | +| 6⭐ | 47d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 7⭐ | 51d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 62d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 3⭐ | 64d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation | diff --git a/cves/2026/CVE-2026-93485.md b/cves/2026/CVE-2026-93485.md new file mode 100644 index 00000000000..b647d5dbabc --- /dev/null +++ b/cves/2026/CVE-2026-93485.md @@ -0,0 +1,50 @@ +### [CVE-2026-93485](https://www.cve.org/CVERecord?id=CVE-2026-93485) +**WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=Automattic&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=WordPress&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=7.1&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=7.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.9&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.8&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.7&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.6&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.5&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.4&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.3&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.2&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.1&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.9&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.8&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.7&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.6&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.5&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.4&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.3&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.2&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.1&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=5.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=4.9&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=4.8&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=4.7&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Improper%20neutralization%20of%20input%20during%20web%20page%20generation%20%28%27cross-site%20scripting%27%29&color=brightgreen) + +### Description + +Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Automattic WordPress core allows DOM-Based XSS. + + +This issue affects WordPress versions 7.1 before 7.1.1; 7.0 through 7.0.4; 6.9 through 6.9.7; 6.8 through 6.8.8; 6.7 through 6.7.7; 6.6 through 6.6.7; 6.5 through 6.5.10; 6.4 through 6.4.10; 6.3 through 6.3.10; 6.2 through 6.2.11; 6.1 through 6.1.12; 6.0 through 6.0.14; 5.9 through 5.9.16; 5.8 through 5.8.15; 5.7 through 5.7.17; 5.6 through 5.6.19; 5.5 through 5.5.20; 5.4 through 5.4.21; 5.3 through 5.3.23; 5.2 through 5.2.26; 5.1 through 5.1.24; 5.0 through 5.0.27; 4.9 through 4.9.31; 4.8 through 4.8.30; and 4.7 through 4.7.35. + + + + +The Unauthenticated Stored XSS vulnerability in the WordPress core can be reproduced on a default WordPress installation. Comment moderation is disabled by default, and the requirement for commenters to have a previously approved comment can be bypassed. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/0xBlackash/CVE-2026-93485 diff --git a/docs/hero.svg b/docs/hero.svg index a1d2aaf0338..06980c1c68f 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 83,208 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 172,505 + fill="#e6edf3" letter-spacing="-0.5">172,506 CVES INDEXED83,207 + fill="#2f81f7" letter-spacing="-0.5">83,208 WITH POCS1,202 diff --git a/docs/social-card.svg b/docs/social-card.svg index abbc1eddd4c..e8e67dbd27a 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 172,505 + fill="#e6edf3" letter-spacing="-0.5">172,506 CVES INDEXED83,207 + fill="#2f81f7" letter-spacing="-0.5">83,208 WITH POCS1,202 diff --git a/docs/stats.json b/docs/stats.json index a028edd1537..072af5024fe 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1202, - "total_cves": 172505, - "with_pocs": 83207 + "total_cves": 172506, + "with_pocs": 83208 } diff --git a/index/github.txt b/index/github.txt index 9c63640a4bc..2066ba88d17 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26794,3 +26794,4 @@ CVE-2025-43520 - https://github.com/KrisButIAmAnOSDev/kawkaw CVE-2025-43529 - https://github.com/KrisButIAmAnOSDev/kawkaw CVE-2026-0412 - https://github.com/RazdoruNET/kraken_cve_explotations CVE-2026-20700 - https://github.com/KrisButIAmAnOSDev/kawkaw +CVE-2026-93485 - https://github.com/0xBlackash/CVE-2026-93485 diff --git a/index/trending.json b/index/trending.json index a2a9401249f..f23bdfe4a7d 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,4 +1,15 @@ [ + { + "year": 2026, + "stars": 5, + "name": "CVE-2026-78306", + "url": "https://github.com/Wh02m1/CVE-2026-78306", + "desc": "DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a known value and connect to the drone's internal Wi-Fi network, potentially gaining access to the flight control interface and issuing flight commands. Crafted DUML commands can also disable or restart the Wi-Fi and Bluetooth interfaces, disconnect Wi-Fi clients, or reset wireless configuration, resulting in a denial-of-service condition that can disrupt the operator's wireless control, video, and telemetry connections during flight. Affected models are DJI Neo until 01.00.0400, DJI Neo 2 until 01.00.0500, DJI Flip until 01.00.1200, DJI Air 3 until 01.00.1600, DJI Air 3S until 01.00.1400, DJI Avata 2 until 01.00.0400, DJI Avata 360 until 01.00.0300, DJI Mavic 3 until 01.00.1400, DJI Mavic 3 Classic until 01.00.0800, DJI Mavic 3 Pro until 01.01.0700, DJI Mavic 4 Pro until 01.00.0500, DJI Mini 2 until 01.07.0200, DJI Mini 3 until 01.00.0500, DJI Mini 3 Pro until 01.00.0900, DJI Mini 4 Pro until 01.00.1100, and DJI Mini 5 Pro until 01.00.0600. Remediation requires a firmware update from the vendor.", + "pushed": "2026-09-22T14:54:38Z", + "created": "2026-09-20T14:50:46Z", + "cve": "CVE-2026-78306", + "kev": false + }, { "year": 2026, "stars": 19, @@ -54,17 +65,6 @@ "cve": "CVE-2026-28609", "kev": false }, - { - "year": 2026, - "stars": 4, - "name": "CVE-2026-78306", - "url": "https://github.com/Wh02m1/CVE-2026-78306", - "desc": "DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a known value and connect to the drone's internal Wi-Fi network, potentially gaining access to the flight control interface and issuing flight commands. Crafted DUML commands can also disable or restart the Wi-Fi and Bluetooth interfaces, disconnect Wi-Fi clients, or reset wireless configuration, resulting in a denial-of-service condition that can disrupt the operator's wireless control, video, and telemetry connections during flight. Affected models are DJI Neo until 01.00.0400, DJI Neo 2 until 01.00.0500, DJI Flip until 01.00.1200, DJI Air 3 until 01.00.1600, DJI Air 3S until 01.00.1400, DJI Avata 2 until 01.00.0400, DJI Avata 360 until 01.00.0300, DJI Mavic 3 until 01.00.1400, DJI Mavic 3 Classic until 01.00.0800, DJI Mavic 3 Pro until 01.01.0700, DJI Mavic 4 Pro until 01.00.0500, DJI Mini 2 until 01.07.0200, DJI Mini 3 until 01.00.0500, DJI Mini 3 Pro until 01.00.0900, DJI Mini 4 Pro until 01.00.1100, and DJI Mini 5 Pro until 01.00.0600. Remediation requires a firmware update from the vendor.", - "pushed": "2026-09-20T14:56:26Z", - "created": "2026-09-20T14:50:46Z", - "cve": "CVE-2026-78306", - "kev": false - }, { "year": 2026, "stars": 4,