diff --git a/README.md b/README.md
index ab05a6e93d7..261fcf43de4 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -12,15 +12,15 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 0⭐ | 3h ago |

[Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
-| 1⭐ | 7h ago | [CVE-2026-32996](https://github.com/suce0155/CVE-2026-32996) | A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |
-| 2⭐ | 7h ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… |
-| 0⭐ | 12h ago |

[CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… |
-| 0⭐ | 21h ago | [CVE-2025-64512_PoC](https://github.com/Jinook-Kim/CVE-2025-64512_PoC) | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from… |
+| 0⭐ | 5h ago |

[Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
+| 2⭐ | 9h ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… |
+| 0⭐ | 14h ago |

[CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… |
+| 0⭐ | 23h ago | [CVE-2025-64512_PoC](https://github.com/Jinook-Kim/CVE-2025-64512_PoC) | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from… |
| 0⭐ | 1d ago | [CVE-2026-69328](https://github.com/0xf9b6a41ec/CVE-2026-69328) | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. |
| 0⭐ | 1d ago |

[CVE-2025-32432](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.… |
| 0⭐ | 2d ago | [CVE-2025-24071](https://github.com/BardLaudian/CVE-2025-24071) | Dependency-free PoC generator for CVE-2025-24071 - Windows File Explorer .library-ms NTLM hash disclosure via… |
| 0⭐ | 2d ago |

[CVE-2025-38352-PoC](https://github.com/longwasu/CVE-2025-38352-PoC) | PoC and GDB script assists in triggering CVE-2025-38352 |
+| 1⭐ | 3d ago | [CVE-2026-77770](https://github.com/cflowsec/CVE-2026-77770) | miniOrange 2FA CVE POC |
| 2⭐ | 3d ago | [CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.](https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.) | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker… |
## Trending in 2026
@@ -38,7 +38,7 @@
| 8⭐ | 4d ago |

[CVE-2026-85706](https://github.com/mhtsec/CVE-2026-85706) | GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC |
| 34⭐ | 4d ago |

[cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
| 28⭐ | 4d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… |
-| 6⭐ | 4d ago |

[CVE-2026-24061-PoC-Exploit](https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit) | 🚀 CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control 💥 CRLF injection via NEW_ENVIRON… |
+| 6⭐ | 4d ago |

[CVE-2026-24061-PoC-Exploit](https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit) | 🗡️ CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control with CRLF injection via… |
| 3⭐ | 6d ago | [CVE-2026-11387-WooCommerce-SMS-OTP](https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP) | SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert… |
| 5⭐ | 7d ago | [CVE-2026-19089-WooCommerce-Tyche](https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche) | CVE-2026-19089 WooCommerce Tych Remote Command Execution |
| 824⭐ | 8d ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
diff --git a/cves/2026/CVE-2026-40701.md b/cves/2026/CVE-2026-40701.md
index 67000b12e97..357ccf8b7e4 100644
--- a/cves/2026/CVE-2026-40701.md
+++ b/cves/2026/CVE-2026-40701.md
@@ -26,3 +26,4 @@ No PoCs from references.
- https://github.com/laohuang101/NginxRift-Poc
- https://github.com/F2u0a0d3/CVE-2026-42945-nginx-rift-poc
- https://github.com/jelasin/CVE-2026-42945
+- https://github.com/likecq/Nginx-Rift
diff --git a/cves/2026/CVE-2026-42934.md b/cves/2026/CVE-2026-42934.md
index 7393cc7e7e2..a0cae4a7f39 100644
--- a/cves/2026/CVE-2026-42934.md
+++ b/cves/2026/CVE-2026-42934.md
@@ -26,3 +26,4 @@ No PoCs from references.
- https://github.com/laohuang101/NginxRift-Poc
- https://github.com/F2u0a0d3/CVE-2026-42945-nginx-rift-poc
- https://github.com/jelasin/CVE-2026-42945
+- https://github.com/likecq/Nginx-Rift
diff --git a/cves/2026/CVE-2026-42945.md b/cves/2026/CVE-2026-42945.md
index f68ff61d701..081725fe4b4 100644
--- a/cves/2026/CVE-2026-42945.md
+++ b/cves/2026/CVE-2026-42945.md
@@ -44,3 +44,4 @@ No PoCs from references.
- https://github.com/Kentox493/CVE-2026-42945_NginxRift
- https://github.com/LiaoZiqi-GZFLS/CVE-2026-42945
- https://github.com/leojaguaribe/cve-zerolab
+- https://github.com/likecq/Nginx-Rift
diff --git a/cves/2026/CVE-2026-42946.md b/cves/2026/CVE-2026-42946.md
index 764a1843e54..d6ce899f8d4 100644
--- a/cves/2026/CVE-2026-42946.md
+++ b/cves/2026/CVE-2026-42946.md
@@ -23,3 +23,4 @@ No PoCs from references.
- https://github.com/laohuang101/NginxRift-Poc
- https://github.com/F2u0a0d3/CVE-2026-42945-nginx-rift-poc
- https://github.com/jelasin/CVE-2026-42945
+- https://github.com/likecq/Nginx-Rift
diff --git a/cves/2026/CVE-2026-65374.md b/cves/2026/CVE-2026-65374.md
new file mode 100644
index 00000000000..21662ac4454
--- /dev/null
+++ b/cves/2026/CVE-2026-65374.md
@@ -0,0 +1,17 @@
+### [CVE-2026-65374](https://www.cve.org/CVERecord?id=CVE-2026-65374)
+
+
+
+
+
+### Description
+
+A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/HORKimhab/CVE-2026-65374
diff --git a/docs/hero.svg b/docs/hero.svg
index 68ade60a2fc..905b0cbaf55 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@