diff --git a/README.md b/README.md index 05d1687e2f8..1def6df541e 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-06%20Oct%202026%2010%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610061007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C116-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610061007)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-06%20Oct%202026%2011%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610061107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C118-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610061107)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,8 +12,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 13h ago | [CVE-2025-14659-DIR-860L](https://github.com/PeterLinccl/CVE-2025-14659-DIR-860L) | A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown… | -| 0⭐ | 22h ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… | +| 0⭐ | 14h ago | [CVE-2025-14659-DIR-860L](https://github.com/PeterLinccl/CVE-2025-14659-DIR-860L) | A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown… | +| 0⭐ | 23h ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… | | 0⭐ | 2d ago | KEV [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A Proof-of-Concept implementation for CVE-2025-55182, a critical unauthenticated Remote Code Execution… | | 0⭐ | 2d ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) | | 0⭐ | 2d ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… | @@ -40,7 +40,7 @@ | 7⭐ | 6d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88772](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772) | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before… | | 47⭐ | 7d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | | 4⭐ | 7d ago | KEV [CVE-2026-49869](https://github.com/EQSTLab/CVE-2026-49869) | Kestra Unauthenticated RCE | -| 3⭐ | 7d ago | [CVE-2026-56096](https://github.com/yairHinkis/CVE-2026-56096) | Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr) | +| 3⭐ | 8d ago | [CVE-2026-56096](https://github.com/yairHinkis/CVE-2026-56096) | Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr) | | 23⭐ | 8d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | | 25⭐ | 8d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 3⭐ | 8d ago | [CVE-2026-78006-CVE-2026-78159](https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159) | The Events Calendar Wordpress Plugin Mass Exploit CVE-2026-78006 & CVE-2026-78159 | @@ -63,7 +63,7 @@ | 7⭐ | 65d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 76d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 3⭐ | 77d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation | -| 4⭐ | 78d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | +| 4⭐ | 79d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | | 4⭐ | 80d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
diff --git a/cves/2026/CVE-2026-10196.md b/cves/2026/CVE-2026-10196.md new file mode 100644 index 00000000000..be7eef8f41b --- /dev/null +++ b/cves/2026/CVE-2026-10196.md @@ -0,0 +1,18 @@ +### [CVE-2026-10196](https://www.cve.org/CVERecord?id=CVE-2026-10196) +**Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields** +![](https://img.shields.io/static/v1?label=Vendor&message=getwpfunnels&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Mail%20Mint%20%E2%80%93%20Email%20Marketing%2C%20Newsletter%2C%20Email%20Automation%20%26%20WooCommerce%20Emails&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-502%20Deserialization%20of%20Untrusted%20Data&color=brightgreen) + +### Description + +The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.31.0 via deserialization of untrusted input in the 'handle_form_submission' function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code on the server. The vulnerability was partially patched in version 1.23.1. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/0xCyp1337/CVE-2026-10196 diff --git a/cves/2026/CVE-2026-105080.md b/cves/2026/CVE-2026-105080.md new file mode 100644 index 00000000000..905c816cf29 --- /dev/null +++ b/cves/2026/CVE-2026-105080.md @@ -0,0 +1,17 @@ +### [CVE-2026-105080](https://www.cve.org/CVERecord?id=CVE-2026-105080) +![](https://img.shields.io/static/v1?label=Vendor&message=C4illin&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=ConvertX&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-829%20Inclusion%20of%20Functionality%20from%20Untrusted%20Control%20Sphere&color=brightgreen) + +### Description + +In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/beyavuz/cve-2026-105080-poc diff --git a/docs/hero.svg b/docs/hero.svg index 24dcaea97ac..1376bca93bc 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 84,118 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 173,433 + fill="#e6edf3" letter-spacing="-0.5">173,435 CVES INDEXED84,116 + fill="#2f81f7" letter-spacing="-0.5">84,118 WITH POCS1,221 diff --git a/docs/social-card.svg b/docs/social-card.svg index 2ae70308102..68da9940af8 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 173,433 + fill="#e6edf3" letter-spacing="-0.5">173,435 CVES INDEXED84,116 + fill="#2f81f7" letter-spacing="-0.5">84,118 WITH POCS1,221 diff --git a/docs/stats.json b/docs/stats.json index bf13dd3acbb..f5e34ef5ddb 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1221, - "total_cves": 173433, - "with_pocs": 84116 + "total_cves": 173435, + "with_pocs": 84118 } diff --git a/index/github.txt b/index/github.txt index 42772b5f4b0..4f56fbb8493 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27196,3 +27196,5 @@ CVE-2020-25213 - https://github.com/w0rmgh4d/Wordpress---Auto-Exploit CVE-2021-1931 - https://github.com/stanw47/Blackberry-Key2-Research CVE-2024-25600 - https://github.com/w0rmgh4d/Wordpress---Auto-Exploit CVE-2024-40453 - https://github.com/AC8999/CVE-2024-40453 +CVE-2026-10196 - https://github.com/0xCyp1337/CVE-2026-10196 +CVE-2026-105080 - https://github.com/beyavuz/cve-2026-105080-poc