admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Trending CVEs update 2026-09-26 10:11 🤖

Browse Source
This commit is contained in:
CVE-BOT committed 2026-09-26 10:11:23 +00:00
1 parent eeeab190c4
commit 4777e6defc
3 files changed
+31 -52
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+7 -7
View File
@@ -2,7 +2,7 @@
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172837-83528-1211" alt="PoC Index" width="100%"></a>
[![last sync](https://img.shields.io/badge/last%20sync-26%20Sep%202026%2009%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609260907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C528-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609260907)](https://github.com/0xMarcio/pocindex/stargazers)
[![last sync](https://img.shields.io/badge/last%20sync-26%20Sep%202026%2010%3A09%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609261009)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C528-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609261009)](https://github.com/0xMarcio/pocindex/stargazers)
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
@@ -12,23 +12,23 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 0⭐ | 5h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 2⭐ | 5h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-67279](https://github.com/HackSpeak/CVE-2026-67279) | MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for… |
| 0⭐ | 6h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 2⭐ | 6h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-67279](https://github.com/HackSpeak/CVE-2026-67279) | MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for… |
| 0⭐ | 7h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 0⭐ | 1d ago | [CVE-2025-9974](https://github.com/HORKimhab/CVE-2025-9974) | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows… |
| 0⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 1⭐ | 2d ago | [CVE-2025-7771](https://github.com/yulisec/CVE-2025-7771) | ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write… |
| 0⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902](https://github.com/bhideki/CVE-2026-87902) | CVE-2026-87902: PoC for WordPress's critical path traversal |
| 0⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902](https://github.com/zer0dayf/CVE-2026-87902) | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable… |
| 2⭐ | 3d ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… |
| 1⭐ | 4d ago | [CVE-2026-77812](https://github.com/Wh02m1/CVE-2026-77812) | DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID - Proof of Concept for… |
| 1⭐ | 4d ago | [CVE-2025-6325_CVE-2025-6327](https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327) | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… |
| 2⭐ | 5d ago | [CVE-2026-90817](https://github.com/murrez/CVE-2026-90817) | Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation. |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 3⭐ | 3h ago | [CVE-2026-43682](https://github.com/petermalone/CVE-2026-43682) | CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS |
| 9⭐ | 22h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 |
| 3⭐ | 4h ago | [CVE-2026-43682](https://github.com/petermalone/CVE-2026-43682) | CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS |
| 9⭐ | 23h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 |
| 4⭐ | 1d ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… |
| 14⭐ | 1d ago | [CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit) | 🔓 CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) / Zero-click TLS type confusion to… |
| 11⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127](https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127) | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious… |
index/github.txt
-21
View File
@@ -26886,32 +26886,12 @@ CVE-2024-3651 - https://github.com/redhat-tssc-tmm/CVE-2024-3651-exploit
CVE-2024-6387 - https://github.com/domanhcuongkent1991-blip/security-tool
CVE-2026-14281 - https://github.com/langz337/CVE-2026-14281
CVE-2026-18143 - https://github.com/murrez/CVE-2026-18143
CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne
CVE-2017-3730 - https://github.com/HavocParasite/CVE-2017-3730
CVE-2018-15133 - https://github.com/pwnedshell/Larascript
CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600
CVE-2019-9053 - https://github.com/so1icitx/CVE-2019-9053
CVE-2020-24186 - https://github.com/wvverez/CVE-2020-24186
CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597
CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816
CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560
CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform
CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228
CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC
CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897
CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075
CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce
CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752
CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664
CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC
CVE-2024-25600 - https://github.com/so1icitx/CVE-2024-25600
CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc
CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063
CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
CVE-2025-0133 - https://github.com/inteleon404/CVE-2025-0133
CVE-2025-24813 - https://github.com/yym8538/CVE-2025-24813
CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651
CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123
CVE-2025-55182 - https://github.com/PedroPLCode/CVE-2025-55182_react2shell_exploit.py
CVE-2026-0603 - https://github.com/yym8538/CVE-2026-0603
CVE-2026-16723 - https://github.com/yym8538/CVE-2026-16723
@@ -26924,7 +26904,6 @@ CVE-2026-31431 - https://github.com/CybroZeus/Copy-Fail-Exploit-CVE-2026-31431
CVE-2026-33017 - https://github.com/yym8538/CVE-2026-33017
CVE-2026-33634 - https://github.com/joaovicdev/EXPLOIT-CVE-2026-33634
CVE-2026-40897 - https://github.com/yym8538/CVE-2026-40897
CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
CVE-2026-43499 - https://github.com/soralis0912/Root-My-Device
CVE-2026-49975 - https://github.com/yym8538/CVE-2026-49975
CVE-2026-5027 - https://github.com/yym8538/CVE-2026-5027
index/trending.json
+24 -24
View File
@@ -485,6 +485,18 @@
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "CVE-2025-39964",
"url": "https://github.com/suominen/CVE-2025-39964",
"desc": "In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.",
"pushed": "2026-09-26T02:44:04Z",
"created": "2026-09-20T05:55:14Z",
"cve": "CVE-2025-39964",
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 0,
@@ -497,18 +509,6 @@
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "CVE-2025-39964",
"url": "https://github.com/suominen/CVE-2025-39964",
"desc": "In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.",
"pushed": "2026-09-25T02:46:42Z",
"created": "2026-09-20T05:55:14Z",
"cve": "CVE-2025-39964",
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 1,
@@ -533,6 +533,18 @@
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-87902",
"url": "https://github.com/zer0dayf/CVE-2026-87902",
"desc": "An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.",
"pushed": "2026-09-23T11:04:46Z",
"created": "2026-09-23T11:03:07Z",
"cve": "CVE-2026-87902",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 2,
@@ -568,17 +580,5 @@
"cve": "CVE-2025-6325",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 2,
"name": "CVE-2026-90817",
"url": "https://github.com/murrez/CVE-2026-90817",
"desc": "Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation.",
"pushed": "2026-09-21T04:06:54Z",
"created": "2026-09-21T04:05:26Z",
"cve": "CVE-2026-90817",
"kev": false,
"landed": true
}
]