diff --git a/README.md b/README.md index d3720542c12..a8347093330 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-10%20Sep%202026%2021%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609102107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C701-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C188-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609102107)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-10%20Sep%202026%2022%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609102207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C702-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C189-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609102207)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,8 +12,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 13h ago | KEV [CVE-2026-60137-and-CVE-2026-63030](https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030) | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the… | -| 0⭐ | 21h ago | [CVE-2025-27636-RCE-in-Apache-Camel](https://github.com/AC8999/CVE-2025-27636-RCE-in-Apache-Camel) | CVE-2025-27636 PoC written in Python | +| 0⭐ | 14h ago | KEV [CVE-2026-60137-and-CVE-2026-63030](https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030) | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the… | +| 0⭐ | 22h ago | [CVE-2025-27636-RCE-in-Apache-Camel](https://github.com/AC8999/CVE-2025-27636-RCE-in-Apache-Camel) | CVE-2025-27636 PoC written in Python | +| 2⭐ | 1d ago | [CVE-2026-11387-WooCommerce-SMS-OTP](https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP) | SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert… | | 0⭐ | 1d ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. | | 0⭐ | 2d ago | KEV [CVE-2025-55182](https://github.com/r3vpwnx/CVE-2025-55182) | CVE-2025-55182 - React2Shell (CVE-2025-55182) unauthenticated RCE via React Server Components Flight… | | 2⭐ | 2d ago | KEV [CVE-2026-39987](https://github.com/Th3Purge/CVE-2026-39987) | Marimo Pre Authentication RCE | @@ -21,7 +22,6 @@ | 2⭐ | 2d ago | [CVE-2026-69451-PoC](https://github.com/fj016/CVE-2026-69451-PoC) | PoC for the CVE-2026-69451 - Fastprox EoP | | 2⭐ | 3d ago | KEV [CVE-2026-82329-JFrog-Artifactory-](https://github.com/0xTerror/CVE-2026-82329-JFrog-Artifactory-) | CVE-2026-82329 - JFrog Artifactory Auth Bypass | | 0⭐ | 4d ago | KEV [CVE-2025-57819](https://github.com/r3vpwnx/CVE-2025-57819) | CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC) | -| 0⭐ | 4d ago | [CVE-2025-24799](https://github.com/galisko/CVE-2025-24799) | GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection… | ## Trending in 2026 @@ -35,14 +35,14 @@ | 4⭐ | 4d ago | KEV [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via… | | 11⭐ | 5d ago | [xiaomi15-dada-cve-2026-64560](https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560) | Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8 | | 6⭐ | 5d ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… | -| 5⭐ | 5d ago | KEV [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… | +| 5⭐ | 6d ago | KEV [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… | | 10⭐ | 6d ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… | | 4⭐ | 7d ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… | | 3⭐ | 8d ago | [cve-2026-47627](https://github.com/AneKazek/cve-2026-47627) | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path… | | 12⭐ | 8d ago | KEV [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | | 4⭐ | 9d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | | 3⭐ | 10d ago | [CVE-2026-78905-Facebook-Account-Takeover](https://github.com/vxssroott/CVE-2026-78905-Facebook-Account-Takeover) | Social Media Infrastructure Vulnerability Research. CVE-2026-78905: OAuth token reuse and session hijacking… | -| 4⭐ | 10d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | +| 4⭐ | 11d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | | 16⭐ | 11d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | | 4⭐ | 12d ago | KEV [PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078) | Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078 | | 35⭐ | 14d ago | [CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735) | CVE 1-day in http.sys | @@ -76,7 +76,7 @@ | --- | --- | --- | --- | | 17⭐ | 25d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 4⭐ | 26d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | -| 3⭐ | 42d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | +| 3⭐ | 43d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | | 3⭐ | 81d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | ## Trending in 2023 diff --git a/cves/2026/CVE-2026-85046.md b/cves/2026/CVE-2026-85046.md index 180591441e8..20b88363bcb 100644 --- a/cves/2026/CVE-2026-85046.md +++ b/cves/2026/CVE-2026-85046.md @@ -19,3 +19,4 @@ No PoCs from references. - https://github.com/adriyansyah-mf/cve-2026-85046-poc - https://github.com/atiilla/CVE-2026-85046 - https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm +- https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter diff --git a/cves/2026/CVE-2026-87491.md b/cves/2026/CVE-2026-87491.md new file mode 100644 index 00000000000..afaf315748b --- /dev/null +++ b/cves/2026/CVE-2026-87491.md @@ -0,0 +1,18 @@ +### [CVE-2026-87491](https://www.cve.org/CVERecord?id=CVE-2026-87491) +![](https://img.shields.io/static/v1?label=Vendor&message=Google&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=153.0.8010.36&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Out%20of%20bounds%20write&color=brightgreen) +![](https://img.shields.io/static/v1?label=CISA%20KEV&message=Known%20Exploited&color=red) + +### Description + +Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter diff --git a/docs/hero.svg b/docs/hero.svg index d25b7646562..788b6e51f62 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 82,702 CVEs with public proof-of-concept exploits"> @@ -19,13 +19,13 @@ pocindex.io 171,571 + fill="#e6edf3" letter-spacing="-0.5">171,572 CVES INDEXED82,701 + fill="#2f81f7" letter-spacing="-0.5">82,702 WITH POCS1,188 + fill="#f85149" letter-spacing="-0.5">1,189 KNOWN EXPLOITED diff --git a/docs/social-card.svg b/docs/social-card.svg index 4f837e12689..d6eeb749176 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,13 +20,13 @@ 171,571 + fill="#e6edf3" letter-spacing="-0.5">171,572 CVES INDEXED82,701 + fill="#2f81f7" letter-spacing="-0.5">82,702 WITH POCS1,188 + fill="#f85149" letter-spacing="-0.5">1,189 KNOWN EXPLOITED diff --git a/docs/stats.json b/docs/stats.json index 368bd640673..6788b84b4d3 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { - "kev": 1188, - "total_cves": 171571, - "with_pocs": 82701 + "kev": 1189, + "total_cves": 171572, + "with_pocs": 82702 } diff --git a/index/github.txt b/index/github.txt index 342cf56cfb1..e7d1a0b6ef4 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26660,3 +26660,5 @@ CVE-2026-74239 - https://github.com/BomboBombone/CVE-2026-74239 CVE-2026-86060 - https://github.com/bahirul/cve-2026-86060 CVE-2026-63642 - https://github.com/hakaioffsec/CVE-2026-63642 CVE-2026-63643 - https://github.com/hakaioffsec/CVE-2026-63642 +CVE-2026-85046 - https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter +CVE-2026-87491 - https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter diff --git a/index/trending.json b/index/trending.json index 7dae5126aa6..2bf3b5ec976 100644 --- a/index/trending.json +++ b/index/trending.json @@ -507,6 +507,18 @@ "kev": false, "landed": true }, + { + "year": 2026, + "stars": 2, + "name": "CVE-2026-11387-WooCommerce-SMS-OTP", + "url": "https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP", + "desc": "SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert <3.9.6; Unauthenticated Privilege Escalation (Forced Password Reset)", + "pushed": "2026-09-09T17:21:20Z", + "created": "2026-09-09T17:06:12Z", + "cve": "CVE-2026-11387", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 0, @@ -590,17 +602,5 @@ "cve": "CVE-2025-57819", "kev": true, "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-24799", - "url": "https://github.com/galisko/CVE-2025-24799", - "desc": "GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18.", - "pushed": "2026-09-06T01:04:23Z", - "created": "2026-09-06T00:38:05Z", - "cve": "CVE-2025-24799", - "kev": false, - "landed": true } ]