diff --git a/README.md b/README.md
index a93408e1eae..229b02a7dbf 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -14,16 +14,16 @@
| Stars | Released | PoC | Description |
| --- | --- | --- | --- |
-| 2⭐ | 4h ago | [CVE-2026-96889-nextjs-rce](https://github.com/lion9453/CVE-2026-96889-nextjs-rce) | Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF… |
-| 0⭐ | 6h ago | [CVE-2026-111444](https://github.com/Syscallh00k/CVE-2026-111444) | Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled |
-| 0⭐ | 9h ago | [cve-2024-2961](https://github.com/Sib1110/cve-2024-2961) | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it… |
-| 0⭐ | 10h ago | [VsockDrop-Adapted-CVE-2026-53365](https://github.com/hoodoer/VsockDrop-Adapted-CVE-2026-53365) | A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. |
-| 0⭐ | 12h ago | [CVE-2026-64507](https://github.com/manalejandro/CVE-2026-64507) | CVE-2026-64507 - PoC: IBPB flush on BPF JIT allocation |
-| 1⭐ | 18h ago | [CVE-2026-108578](https://github.com/KernelDotDLL/CVE-2026-108578) | Neterbit NW-431F unauthenticated SMS disclosure |
-| 1⭐ | 19h ago | [CVE-2026-110912](https://github.com/0xBlackash/CVE-2026-110912) | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput()… |
-| 12⭐ | 20h ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
-| 0⭐ | 22h ago |

[CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation |
-| 1⭐ | 22h ago | [CVE-2026-85097](https://github.com/BlackHatExploitation/CVE-2026-85097) | CVE-2026-85097 - Bricksforge <= 3.1.8.9 unauth file upload to RCE. GIF/PHP polyglot +… |
+| 1⭐ | 25m ago | [CVE-2026-89079](https://github.com/murrez/CVE-2026-89079) | CVE-2026-89079 - WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit).… |
+| 1⭐ | 57m ago | [Gitlab-RCE-CVE-2026-97229](https://github.com/OppositDeer/Gitlab-RCE-CVE-2026-97229) | CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint |
+| 2⭐ | 5h ago | [CVE-2026-96889-nextjs-rce](https://github.com/lion9453/CVE-2026-96889-nextjs-rce) | Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF… |
+| 0⭐ | 7h ago | [CVE-2026-111444](https://github.com/Syscallh00k/CVE-2026-111444) | Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled |
+| 0⭐ | 10h ago | [cve-2024-2961](https://github.com/Sib1110/cve-2024-2961) | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it… |
+| 0⭐ | 11h ago | [VsockDrop-Adapted-CVE-2026-53365](https://github.com/hoodoer/VsockDrop-Adapted-CVE-2026-53365) | A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. |
+| 0⭐ | 13h ago | [CVE-2026-64507](https://github.com/manalejandro/CVE-2026-64507) | CVE-2026-64507 - PoC: IBPB flush on BPF JIT allocation |
+| 1⭐ | 19h ago | [CVE-2026-108578](https://github.com/KernelDotDLL/CVE-2026-108578) | Neterbit NW-431F unauthenticated SMS disclosure |
+| 1⭐ | 20h ago | [CVE-2026-110912](https://github.com/0xBlackash/CVE-2026-110912) | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput()… |
+| 12⭐ | 21h ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
## Trending in 2026
@@ -35,7 +35,7 @@
| 32⭐ | 2d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC |
| 96⭐ | 17d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
| 187⭐ | 55d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
-| 12⭐ | 20h ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
+| 12⭐ | 21h ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
| 92⭐ | 34d ago |

[CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… |
| 88⭐ | 34d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… |
| 51⭐ | 17d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE |
diff --git a/cves/2026/CVE-2026-89079.md b/cves/2026/CVE-2026-89079.md
new file mode 100644
index 00000000000..c843b5f1819
--- /dev/null
+++ b/cves/2026/CVE-2026-89079.md
@@ -0,0 +1,18 @@
+### [CVE-2026-89079](https://www.cve.org/CVERecord?id=CVE-2026-89079)
+**Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter**
+
+
+
+
+
+### Description
+
+The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/murrez/CVE-2026-89079
diff --git a/cves/2026/CVE-2026-97229.md b/cves/2026/CVE-2026-97229.md
index fc982582813..5258e570761 100644
--- a/cves/2026/CVE-2026-97229.md
+++ b/cves/2026/CVE-2026-97229.md
@@ -20,3 +20,4 @@ GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2
#### Github
- https://github.com/AmpedWasTaken/CVE-2026-97229-GitLab-CI-CD-Regex-Compiler-RCE
- https://github.com/jburgess-r7/CVE-2026-97229-PoC
+- https://github.com/OppositDeer/Gitlab-RCE-CVE-2026-97229
diff --git a/docs/hero.svg b/docs/hero.svg
index eb42aa959e0..3ed54fd82e4 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@