diff --git a/README.md b/README.md
index a4385d9083b..429d7f9cbd4 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
@@ -14,16 +14,16 @@
| Stars | Released | PoC | Description |
| --- | --- | --- | --- |
-| 0⭐ | 28m ago | [CVE-2026-84520](https://github.com/csrXamfi/CVE-2026-84520) | AppleFDEKeyStore poc |
-| 0⭐ | 11h ago | [CVE-2025-34071](https://github.com/cppghoul/CVE-2025-34071) | RCE in Kerio Control 9.4.5 via unsigned firmware update. |
-| 0⭐ | 13h ago | [CVE-2024-36774-Monstra-CMS-RCE-PoC](https://github.com/PawFV/CVE-2024-36774-Monstra-CMS-RCE-PoC) | An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via… |
-| 2⭐ | 19h ago | [CVE-2026-80428](https://github.com/HackfutSecRoot/CVE-2026-80428) | ILIAS ≤ 9.21 / 10.9 / 11.2 - Unauthenticated PHP Object Injection (RCE) |
+| 0⭐ | 45m ago | [telegram-cve-2026-107181](https://github.com/SeanDishman/telegram-cve-2026-107181) | Telegram CVE-2026-107181 |
+| 0⭐ | 1h ago | [CVE-2026-84520](https://github.com/csrXamfi/CVE-2026-84520) | AppleFDEKeyStore poc |
+| 0⭐ | 12h ago | [CVE-2025-34071](https://github.com/cppghoul/CVE-2025-34071) | RCE in Kerio Control 9.4.5 via unsigned firmware update. |
+| 0⭐ | 14h ago | [CVE-2024-36774-Monstra-CMS-RCE-PoC](https://github.com/PawFV/CVE-2024-36774-Monstra-CMS-RCE-PoC) | An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via… |
+| 2⭐ | 20h ago | [CVE-2026-80428](https://github.com/HackfutSecRoot/CVE-2026-80428) | ILIAS ≤ 9.21 / 10.9 / 11.2 - Unauthenticated PHP Object Injection (RCE) |
| 0⭐ | 1d ago | [CVE-2026-55450](https://github.com/0xBlackash/CVE-2026-55450) | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1,… |
| 0⭐ | 1d ago | [CVE-2026-91940-crawl4ai-Arbitrary-File-Write](https://github.com/BiiTts/CVE-2026-91940-crawl4ai-Arbitrary-File-Write) | CVE-2026-91940: arbitrary file write in crawl4ai <=0.9.2 via the untrusted-config gate… |
| 2⭐ | 1d ago | [CVE-2023-54391-RCE](https://github.com/alexand0www/CVE-2023-54391-RCE) | CVE-2023-54391: Proxmox VE Authentication Bypass RCE Exploit |
| 0⭐ | 1d ago | 
[CVE-2026-67279-Mikrotik-6.42-POC](https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC) | Laboratory proof of concept and research notes for CVE-2026-67279 on MikroTik RouterOS 6.42. |
| 0⭐ | 1d ago | [CVE-2026-92555](https://github.com/Enay-Project/CVE-2026-92555) | CVE-2026-92555 Exploit |
-| 0⭐ | 1d ago | [CVE-2026-48908](https://github.com/theendofabbys/CVE-2026-48908) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files,… |
## Trending in 2026
@@ -57,12 +57,12 @@
| 22⭐ | 60d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 7⭐ | 22d ago | [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail |
| 10⭐ | 43d ago | [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
-| 7⭐ | 50d ago | [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
+| 7⭐ | 51d ago | [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
| 8⭐ | 68d ago | [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… |
| 7⭐ | 64d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
| 3⭐ | 43d ago | [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 4⭐ | 80d ago | [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
-| 3⭐ | 52d ago | [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 |
+| 3⭐ | 53d ago | [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 |
| 4⭐ | 82d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 4⭐ | 84d ago | [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
| 3⭐ | 81d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
diff --git a/cves/2026/CVE-2026-107181.md b/cves/2026/CVE-2026-107181.md
index ae4849542e8..e9156fbeb89 100644
--- a/cves/2026/CVE-2026-107181.md
+++ b/cves/2026/CVE-2026-107181.md
@@ -15,4 +15,4 @@ Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnera
- https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/SeanDishman/telegram-cve-2026-107181
diff --git a/index/github.txt b/index/github.txt
index 1750d91c8e5..981cff3cdaf 100644
--- a/index/github.txt
+++ b/index/github.txt
@@ -27371,3 +27371,4 @@ CVE-2026-64560 - https://github.com/sangsheng2026/honor-90gt-mag-an00-root-resea
CVE-2026-21589 - https://github.com/gotr00t0day/CVE-2026-21589
CVE-2026-43499 - https://github.com/cyrrp/honor90-ghostlock
CVE-2026-84520 - https://github.com/csrXamfi/CVE-2026-84520
+CVE-2026-107181 - https://github.com/SeanDishman/telegram-cve-2026-107181
diff --git a/index/releases/2011.json b/index/releases/2011.json
index cf07de09b33..0fe08038fce 100644
--- a/index/releases/2011.json
+++ b/index/releases/2011.json
@@ -675,7 +675,7 @@
"CVE-2011-2523 github:lock-0n/cve-2011-2523?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/LOCK-0N/CVE-2011-2523"},
"CVE-2011-2523 github:lychi3/vsftpd-backdoor?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/Lychi3/vsftpd-backdoor"},
"CVE-2011-2523 github:lynk4/cve-2011-2523?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/Lynk4/CVE-2011-2523"},
-"CVE-2011-2523 github:maalfer/cve-2011-2523-vsftpd-2.3.4-exploit?#":{"basis":"commit","blobs":["014ff9c30642af0f4ecf35b36f34453d85bc5cb9"],"checked":"2026-10-09T15:08:53Z","commit":"2025-11-19T09:10:29Z","commit_verified":true,"created":"2025-11-19T09:10:08Z","cve":"CVE-2011-2523","gone":"2026-10-10T01:11:30Z","head":"c4b202128d0f6b723b243ea9c997d74b95c79fdd","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-09T14:50:39Z","released":"2025-11-19T09:10:29Z","repo":1099648507,"rev":"2cbd58992454cb49f1fd9e390d61d69e5b5423b7a7a07af38869210576702fbd","seen":"2026-10-09T15:08:55Z","sha":"d7f6bafff4f24b9fd3dfed98575dc98226494582","url":"https://github.com/Maalfer/CVE-2011-2523-vsftpd-2.3.4-exploit"},
+"CVE-2011-2523 github:maalfer/cve-2011-2523-vsftpd-2.3.4-exploit?#":{"basis":"commit","blobs":["014ff9c30642af0f4ecf35b36f34453d85bc5cb9"],"checked":"2026-10-09T15:08:53Z","commit":"2025-11-19T09:10:29Z","commit_verified":true,"created":"2025-11-19T09:10:08Z","cve":"CVE-2011-2523","gone":"2026-10-10T02:11:38Z","head":"c4b202128d0f6b723b243ea9c997d74b95c79fdd","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-09T14:50:39Z","released":"2025-11-19T09:10:29Z","repo":1099648507,"rev":"2cbd58992454cb49f1fd9e390d61d69e5b5423b7a7a07af38869210576702fbd","seen":"2026-10-09T15:08:55Z","sha":"d7f6bafff4f24b9fd3dfed98575dc98226494582","url":"https://github.com/Maalfer/CVE-2011-2523-vsftpd-2.3.4-exploit"},
"CVE-2011-2523 github:maalfer/vsftpd-2.3.4-exploit?#":{"basis":"unknown","cve":"CVE-2011-2523","released":null,"seen":"2026-10-08T12:05:02Z","url":"https://github.com/Maalfer/vsftpd-2.3.4-exploit"},
"CVE-2011-2523 github:madanokr001/cve-2011-2523?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/madanokr001/CVE-2011-2523"},
"CVE-2011-2523 github:maherjas/ai-vsftpd-exploit?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/maherjas/AI-VSFTPD-Exploit"},
diff --git a/index/releases/2023.json b/index/releases/2023.json
index 785617624e9..ec2bcdcecd9 100644
--- a/index/releases/2023.json
+++ b/index/releases/2023.json
@@ -5384,7 +5384,7 @@
"CVE-2023-37759 https://www.exploit-db.com/exploits/51688":{"basis":"source","cve":"CVE-2023-37759","imported":true,"released":"2023-08-21","source":"2023-08-21","url":"https://www.exploit-db.com/exploits/51688"},
"CVE-2023-3776 github:google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation?#":{"basis":"commit","blobs":["55d79687ed0e1c3ccc627fe396d3dda1ecaf5850","a8ea1f00177ec8ffeb977ccd057d468ec2cfc408"],"checked":"2026-10-06T22:39:00Z","commit":"2024-01-11T16:06:38Z","commit_verified":true,"created":"2020-06-15T09:19:51Z","cve":"CVE-2023-3776","head":"c9856c7eab06c9c4dfbc7fa64741185367591343","history_paths":["pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/cos-93-16623.341.29/poc.c"],"history_version":3,"imported":true,"paths":["pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/cos-93-16623.341.29/poc.c","pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/mitigation-6.1/poc.c"],"pushed_at":"2026-10-06T15:11:02Z","released":"2024-01-11T16:06:38Z","repo":272394704,"rev":"9c58edd820b4d642abbae87825a7f8718b9297e6be99c8a923aada09b1cf5513","sha":"8342ff4443771e4b70d62f408363c5f93a476be4","url":"https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation"},
"CVE-2023-3776 github:google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_lts?#":{"basis":"commit","blobs":["55d79687ed0e1c3ccc627fe396d3dda1ecaf5850"],"checked":"2026-10-06T22:39:00Z","commit":"2023-11-13T15:11:02Z","commit_verified":true,"created":"2020-06-15T09:19:51Z","cve":"CVE-2023-3776","head":"c9856c7eab06c9c4dfbc7fa64741185367591343","history_paths":["pocs/linux/kernelctf/CVE-2023-3776_lts/exploit/lts-6.1.36/poc.c"],"history_version":3,"imported":true,"paths":["pocs/linux/kernelctf/CVE-2023-3776_lts/exploit/lts-6.1.36/poc.c"],"pushed_at":"2026-10-06T15:11:02Z","released":"2023-11-13T15:11:02Z","repo":272394704,"rev":"d52792fc513e0874226a5aebc4b2eb034f8c23affe1fd1dbe794901aeb442d16","sha":"45de264fffb1581f2d2fccdc482a88249fa9b5c2","url":"https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_lts"},
-"CVE-2023-3776 github:sakura999999999/cve-2023-3776_repro?#":{"basis":"pending","checked":"2026-10-09T21:09:11Z","created":"2026-09-30T05:49:23Z","cve":"CVE-2023-3776","head":"b63059fc7d7e1da5dd4e890d56d681850b3a7dbd","imported":true,"pending":true,"pushed_at":"2026-10-08T09:34:58Z","released":null,"repo":1397099307,"url":"https://github.com/Sakura999999999/CVE-2023-3776_repro"},
+"CVE-2023-3776 github:sakura999999999/cve-2023-3776_repro?#":{"basis":"pending","checked":"2026-10-10T02:08:18Z","created":"2026-09-30T05:49:23Z","cve":"CVE-2023-3776","head":"b63059fc7d7e1da5dd4e890d56d681850b3a7dbd","imported":true,"pending":true,"pushed_at":"2026-10-08T09:34:58Z","released":null,"repo":1397099307,"url":"https://github.com/Sakura999999999/CVE-2023-3776_repro"},
"CVE-2023-37765 github:gpac/gpac/issues/2515?#":{"basis":"unknown","cve":"CVE-2023-37765","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2515"},
"CVE-2023-37766 github:gpac/gpac/issues/2516?#":{"basis":"unknown","cve":"CVE-2023-37766","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2516"},
"CVE-2023-37767 github:gpac/gpac/issues/2514?#":{"basis":"unknown","cve":"CVE-2023-37767","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2514"},
diff --git a/index/releases/2025.json b/index/releases/2025.json
index 2a1e11dd6ec..13852c8e250 100644
--- a/index/releases/2025.json
+++ b/index/releases/2025.json
@@ -5433,7 +5433,7 @@
"CVE-2025-34066 https://www.exploit-db.com/exploits/40500":{"basis":"source","cve":"CVE-2025-34066","imported":true,"released":"2016-10-11","source":"2016-10-11","url":"https://www.exploit-db.com/exploits/40500"},
"CVE-2025-34067 github:peiqi0/peiqi-wiki-book/blob/main/docs/wiki/iot/HIKVISION/HIKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20applyCT%20Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md?#":{"basis":"unknown","cve":"CVE-2025-34067","imported":true,"released":null,"url":"https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/iot/HIKVISION/HIKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20applyCT%20Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md"},
"CVE-2025-34068 https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba":{"basis":"unknown","cve":"CVE-2025-34068","imported":true,"released":null,"url":"https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba"},
-"CVE-2025-34069 github:cppghoul/cve-2025-34069?#":{"basis":"pending","checked":"2026-10-09T21:09:05Z","created":"2026-10-06T12:42:26Z","cve":"CVE-2025-34069","head":"fe7a71d39668e540d6e76279214004ed50113c35","imported":true,"pending":true,"pushed_at":"2026-10-09T04:03:05Z","released":null,"repo":1407284291,"url":"https://github.com/cppghoul/CVE-2025-34069"},
+"CVE-2025-34069 github:cppghoul/cve-2025-34069?#":{"basis":"pending","checked":"2026-10-10T02:08:13Z","created":"2026-10-06T12:42:26Z","cve":"CVE-2025-34069","head":"fe7a71d39668e540d6e76279214004ed50113c35","imported":true,"pending":true,"pushed_at":"2026-10-09T04:03:05Z","released":null,"repo":1407284291,"url":"https://github.com/cppghoul/CVE-2025-34069"},
"CVE-2025-34069 https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce":{"basis":"unknown","cve":"CVE-2025-34069","imported":true,"released":null,"url":"https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/"},
"CVE-2025-34070 https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce":{"basis":"unknown","cve":"CVE-2025-34070","imported":true,"released":null,"url":"https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/"},
"CVE-2025-34071 github:cppghoul/cve-2025-34071?#":{"basis":"commit","blobs":["44f5acbeda7554ccac392746ac5276dc50c97095"],"checked":"2026-10-09T15:08:53Z","commit":"2026-10-09T14:01:07Z","commit_verified":true,"created":"2026-10-09T14:00:31Z","cve":"CVE-2025-34071","head":"f37d66bc6031f6c6f041fdb18d78ccc4c24f2484","history_paths":["PoC.py"],"history_version":3,"paths":["PoC.py"],"pushed_at":"2026-10-09T14:01:08Z","released":"2026-10-09T14:01:07Z","repo":1411939032,"rev":"22a1fa000780498ed8b19828c34fde98066a5efd5587b39d20e264e7694c754a","seen":"2026-10-09T15:08:55Z","sha":"f37d66bc6031f6c6f041fdb18d78ccc4c24f2484","url":"https://github.com/cppghoul/CVE-2025-34071"},
diff --git a/index/releases/2026.json b/index/releases/2026.json
index aa1f5152277..edf0bd5fcdf 100644
--- a/index/releases/2026.json
+++ b/index/releases/2026.json
@@ -953,6 +953,7 @@
"CVE-2026-10704 github:nuiifornet/a033/blob/main/pizzafy-vulnerability.md?#":{"basis":"unknown","cve":"CVE-2026-10704","imported":true,"released":null,"url":"https://github.com/nuiifornet/A033/blob/main/pizzafy-vulnerability.md"},
"CVE-2026-10712 https://hackerone.com/reports/3688717":{"basis":"unknown","cve":"CVE-2026-10712","imported":true,"released":null,"url":"https://hackerone.com/reports/3688717"},
"CVE-2026-107166 github:open5gs/open5gs/issues/4792?#":{"basis":"unknown","cve":"CVE-2026-107166","released":null,"seen":"2026-10-09T09:31:09Z","url":"https://github.com/open5gs/open5gs/issues/4792"},
+"CVE-2026-107181 github:seandishman/telegram-cve-2026-107181?#":{"basis":"commit","blobs":["d0d80aa39848c24484dbc80976c2196439544009"],"checked":"2026-10-10T02:07:44Z","commit":"2026-10-10T01:25:43Z","commit_verified":true,"created":"2026-10-10T01:12:57Z","cve":"CVE-2026-107181","head":"efd0d2f005af595db3530f88553a38fba4737023","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-10T01:28:11Z","released":"2026-10-10T01:25:43Z","repo":1412613916,"rev":"6528e42957781424058a395e30708bd32228f2b24ed1b38c623bf16aa65d18e9","seen":"2026-10-10T02:07:46Z","sha":"b3e29a556af94195f3603d08007e66d10d3a5548","url":"https://github.com/SeanDishman/telegram-cve-2026-107181"},
"CVE-2026-107181 https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover":{"basis":"unknown","cve":"CVE-2026-107181","released":null,"seen":"2026-10-09T09:31:09Z","url":"https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/"},
"CVE-2026-107212 github:advisories/ghsa-jw42-f3rr-4cc3?#":{"basis":"unknown","cve":"CVE-2026-107212","released":null,"seen":"2026-10-09T10:25:35Z","url":"https://github.com/advisories/GHSA-jw42-f3rr-4cc3"},
"CVE-2026-10722 https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815":{"basis":"unknown","cve":"CVE-2026-10722","imported":true,"released":null,"url":"https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815"},
@@ -5384,7 +5385,7 @@
"CVE-2026-3180 https://www.exploit-db.com/exploits/52609":{"basis":"source","cve":"CVE-2026-3180","imported":true,"released":"2026-06-05","source":"2026-06-05","url":"https://www.exploit-db.com/exploits/52609"},
"CVE-2026-31801 github:advisories/ghsa-85jx-fm8m-x8c6?#":{"basis":"unknown","cve":"CVE-2026-31801","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-85jx-fm8m-x8c6"},
"CVE-2026-31802 github:advisories/ghsa-9ppj-qmqm-q256?#":{"basis":"unknown","cve":"CVE-2026-31802","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-9ppj-qmqm-q256"},
-"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-09T21:08:59Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"5f1957652938073f323a1d69c3d23a5d6421e40d","imported":true,"pending":true,"pushed_at":"2026-10-09T07:20:02Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"},
+"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-10T02:08:08Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"5f1957652938073f323a1d69c3d23a5d6421e40d","imported":true,"pending":true,"pushed_at":"2026-10-09T07:20:02Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"},
"CVE-2026-31807 github:advisories/ghsa-5hc8-qmg8-pw27?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-5hc8-qmg8-pw27"},
"CVE-2026-31807 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml"},
"CVE-2026-31809 github:advisories/ghsa-pmc9-f5qr-2pcr?#":{"basis":"unknown","cve":"CVE-2026-31809","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-pmc9-f5qr-2pcr"},
diff --git a/index/trending.json b/index/trending.json
index 932456c8b11..2f6a46c5790 100644
--- a/index/trending.json
+++ b/index/trending.json
@@ -10,7 +10,7 @@
"pushed": "2026-08-20T21:56:15Z",
"released": null,
"basis": "pending",
- "score": 3.4275287464343656,
+ "score": 3.425574224355285,
"trending": true,
"created": "2026-08-15T20:57:13Z",
"cve": "CVE-2026-9830",
@@ -27,7 +27,7 @@
"pushed": "2026-09-29T06:20:46Z",
"released": "2026-09-29T06:20:46Z",
"basis": "commit",
- "score": 1.845917918974841,
+ "score": 1.8413608828564807,
"trending": true,
"created": "2026-02-05T10:21:22Z",
"cve": "CVE-2026-41096",
@@ -44,7 +44,7 @@
"pushed": "2026-07-27T19:12:07Z",
"released": "2026-07-24T03:30:17Z",
"basis": "commit",
- "score": 1.686654748052878,
+ "score": 1.6860312790607637,
"trending": true,
"created": "2026-07-23T18:54:34Z",
"cve": "CVE-2026-54121",
@@ -61,7 +61,7 @@
"pushed": "2026-08-22T04:49:54Z",
"released": "2026-08-22T04:49:54Z",
"basis": "commit",
- "score": 1.2962073695960523,
+ "score": 1.295449142942542,
"trending": true,
"created": "2026-08-22T04:49:33Z",
"cve": "CVE-2026-62911",
@@ -78,7 +78,7 @@
"pushed": "2026-09-29T07:52:23Z",
"released": "2026-09-29T07:57:18Z",
"basis": "created",
- "score": 0.9459573841025171,
+ "score": 0.9436087690559397,
"trending": true,
"created": "2026-09-29T07:57:18Z",
"cve": "CVE-2026-94545",
@@ -95,7 +95,7 @@
"pushed": "2026-09-11T16:33:14Z",
"released": null,
"basis": "pending",
- "score": 0.9337314746024384,
+ "score": 0.9328045735425996,
"trending": true,
"created": "2026-09-10T11:28:38Z",
"cve": "CVE-2026-20805",
@@ -112,7 +112,7 @@
"pushed": "2026-09-12T00:03:49Z",
"released": null,
"basis": "pending",
- "score": 0.899858675375967,
+ "score": 0.8989557880204251,
"trending": true,
"created": "2026-09-12T00:03:07Z",
"cve": "CVE-2026-21858",
@@ -129,7 +129,7 @@
"pushed": "2026-08-26T02:23:55Z",
"released": "2026-08-25T19:06:37Z",
"basis": "created",
- "score": 0.7752601717023702,
+ "score": 0.7747714565568667,
"trending": true,
"created": "2026-08-25T19:06:37Z",
"cve": "CVE-2026-75604",
@@ -146,7 +146,7 @@
"pushed": "2026-09-03T20:38:35Z",
"released": null,
"basis": "pending",
- "score": 0.7397147548064739,
+ "score": 0.7391349032584124,
"trending": true,
"created": "2026-09-02T20:12:10Z",
"cve": "CVE-2026-65343",
@@ -163,7 +163,7 @@
"pushed": "2026-08-03T15:31:59Z",
"released": null,
"basis": "pending",
- "score": 0.6063595047475902,
+ "score": 0.6061009722692314,
"trending": true,
"created": "2026-08-03T15:29:22Z",
"cve": "CVE-2026-47301",
@@ -180,7 +180,7 @@
"pushed": "2026-09-24T02:47:40Z",
"released": "2026-09-24T02:47:40Z",
"basis": "commit",
- "score": 0.5967774012553357,
+ "score": 0.5957511214057053,
"trending": true,
"created": "2026-09-24T00:22:30Z",
"cve": "CVE-2026-84543",
@@ -197,7 +197,7 @@
"pushed": "2026-09-27T19:48:09Z",
"released": "2026-09-27T19:47:52Z",
"basis": "commit",
- "score": 0.5498770666740135,
+ "score": 0.5486669585143961,
"trending": true,
"created": "2026-09-27T19:41:06Z",
"cve": "CVE-2026-34990",
@@ -214,7 +214,7 @@
"pushed": "2026-09-22T19:36:47Z",
"released": null,
"basis": "pending",
- "score": 0.538345331395475,
+ "score": 0.5374853841169814,
"trending": true,
"created": "2026-09-22T18:40:26Z",
"cve": "CVE-2026-87902",
@@ -231,7 +231,7 @@
"pushed": "2026-07-18T21:09:06Z",
"released": null,
"basis": "pending",
- "score": 0.5195596291203498,
+ "score": 0.5193795828493042,
"trending": true,
"created": "2026-07-14T14:21:27Z",
"cve": "CVE-2026-43499",
@@ -248,7 +248,7 @@
"pushed": "2026-10-07T01:07:28Z",
"released": "2026-09-22T18:13:48Z",
"basis": "created",
- "score": 0.4947502120999809,
+ "score": 0.4939623885964464,
"trending": true,
"created": "2026-09-22T18:13:48Z",
"cve": "CVE-2026-87902",
@@ -265,7 +265,7 @@
"pushed": "2026-09-28T05:17:40Z",
"released": "2026-09-28T05:17:40Z",
"basis": "commit",
- "score": 0.4710998009314179,
+ "score": 0.4700311656210052,
"trending": true,
"created": "2026-09-28T04:47:10Z",
"cve": "CVE-2026-85706",
@@ -282,7 +282,7 @@
"pushed": "2026-10-06T10:48:38Z",
"released": "2026-10-06T10:48:38Z",
"basis": "commit",
- "score": 0.44588286373237535,
+ "score": 0.4430750112240978,
"trending": true,
"created": "2026-10-06T10:40:59Z",
"cve": "CVE-2026-21589",
@@ -299,7 +299,7 @@
"pushed": "2026-10-03T08:14:17Z",
"released": null,
"basis": "pending",
- "score": 0.4400878560749021,
+ "score": 0.4384275110198004,
"trending": true,
"created": "2026-04-07T12:02:52Z",
"cve": "CVE-2024-56426",
@@ -316,7 +316,7 @@
"pushed": "2026-09-11T16:38:12Z",
"released": "2026-09-11T15:54:48Z",
"basis": "commit",
- "score": 0.43614046674782886,
+ "score": 0.43570790948159493,
"trending": true,
"created": "2026-09-11T15:24:22Z",
"cve": "CVE-2026-85706",
@@ -333,7 +333,7 @@
"pushed": "2026-09-28T09:24:46Z",
"released": "2026-09-28T09:24:46Z",
"basis": "commit",
- "score": 0.4206892900941289,
+ "score": 0.419722103015679,
"trending": true,
"created": "2026-09-27T18:15:38Z",
"cve": "CVE-2026-88771",
@@ -350,7 +350,7 @@
"pushed": "2026-09-21T15:02:37Z",
"released": "2026-09-21T15:02:37Z",
"basis": "commit",
- "score": 0.40660258637472113,
+ "score": 0.405992820107881,
"trending": true,
"created": "2026-09-21T15:02:05Z",
"cve": "CVE-2026-43786",
@@ -367,7 +367,7 @@
"pushed": null,
"released": "2026-10-09T06:06:02Z",
"basis": "commit",
- "score": 0.14356498940938542,
+ "score": 0.14127339728159458,
"trending": false,
"created": "2026-10-09T06:02:44Z",
"cve": "CVE-2026-80428",
@@ -385,7 +385,7 @@
"pushed": "2026-08-10T23:15:22Z",
"released": "2026-08-10T23:15:36Z",
"basis": "created",
- "score": 0.13370500296566662,
+ "score": 0.13364112723788238,
"trending": true,
"created": "2026-08-10T23:15:36Z",
"cve": "CVE-2025-7771",
@@ -402,7 +402,7 @@
"pushed": null,
"released": "2026-10-08T20:42:15Z",
"basis": "commit",
- "score": 0.12504453178055328,
+ "score": 0.1234002771540519,
"trending": false,
"created": "2026-10-06T08:49:34Z",
"cve": "CVE-2023-54391",
@@ -420,7 +420,7 @@
"pushed": "2026-09-17T02:22:58Z",
"released": "2026-09-17T02:22:58Z",
"basis": "commit",
- "score": 0.08193006551003834,
+ "score": 0.08183033189924553,
"trending": true,
"created": "2026-09-16T23:32:09Z",
"cve": "CVE-2025-32432",
@@ -437,7 +437,7 @@
"pushed": "2026-08-27T07:13:42Z",
"released": null,
"basis": "pending",
- "score": 0.07556377416715583,
+ "score": 0.07551450938376757,
"trending": true,
"created": "2026-08-19T09:39:46Z",
"cve": "CVE-2025-21479",
@@ -454,7 +454,7 @@
"pushed": "2026-08-20T01:33:10Z",
"released": "2026-08-20T01:20:07Z",
"basis": "commit",
- "score": 0.04761986964615461,
+ "score": 0.04759314680358531,
"trending": true,
"created": "2026-08-20T01:13:39Z",
"cve": "CVE-2025-21479",
@@ -471,7 +471,7 @@
"pushed": "2026-08-02T06:48:32Z",
"released": "2026-07-28T09:37:42Z",
"basis": "commit",
- "score": 0.04225043875917641,
+ "score": 0.04223392121046049,
"trending": true,
"created": "2026-07-28T06:41:38Z",
"cve": "CVE-2025-21479",
@@ -488,7 +488,7 @@
"pushed": "2026-08-06T14:58:53Z",
"released": "2026-08-06T14:58:53Z",
"basis": "commit",
- "score": 0.040544490769935784,
+ "score": 0.04052640686283187,
"trending": true,
"created": "2026-08-06T13:52:33Z",
"cve": "CVE-2025-8045",
@@ -505,7 +505,7 @@
"pushed": "2026-07-22T19:46:33Z",
"released": null,
"basis": "pending",
- "score": 0.030129175247546214,
+ "score": 0.030118209472373644,
"trending": true,
"created": "2026-07-22T19:43:34Z",
"cve": "CVE-2023-36003",
@@ -522,7 +522,7 @@
"pushed": "2026-08-15T06:21:41Z",
"released": null,
"basis": "pending",
- "score": 0.02558323279127745,
+ "score": 0.025570083104541803,
"trending": true,
"created": "2026-08-15T06:12:04Z",
"cve": "CVE-2024-56426",
@@ -539,7 +539,7 @@
"pushed": "2026-08-28T00:05:41Z",
"released": "2026-08-28T00:05:42Z",
"basis": "created",
- "score": 0.022921726251029877,
+ "score": 0.02290654387760729,
"trending": true,
"created": "2026-08-28T00:05:42Z",
"cve": "CVE-2025-3248",
@@ -556,7 +556,7 @@
"pushed": "2026-07-21T16:55:33Z",
"released": null,
"basis": "pending",
- "score": 0.019892353439742768,
+ "score": 0.01988521652872907,
"trending": true,
"created": "2026-07-21T16:52:22Z",
"cve": "CVE-2025-32432",
@@ -573,7 +573,7 @@
"pushed": "2026-08-18T01:39:34Z",
"released": null,
"basis": "pending",
- "score": 0.019879831092137847,
+ "score": 0.019869085406360253,
"trending": true,
"created": "2026-08-18T02:31:53Z",
"cve": "CVE-2025-21479",
@@ -590,7 +590,7 @@
"pushed": "2026-07-19T11:00:00Z",
"released": "2026-07-19T11:00:00Z",
"basis": "commit",
- "score": 0.019516531936620663,
+ "score": 0.019509717997539748,
"trending": true,
"created": "2026-07-19T10:49:05Z",
"cve": "CVE-2025-64512",
@@ -607,7 +607,7 @@
"pushed": "2026-07-17T13:55:11Z",
"released": null,
"basis": "pending",
- "score": 0.019215292523598985,
+ "score": 0.01920873113555095,
"trending": true,
"created": "2026-07-17T13:46:16Z",
"cve": "CVE-2025-8110",
@@ -624,7 +624,7 @@
"pushed": "2026-07-29T21:15:12Z",
"released": "2026-07-29T21:15:12Z",
"basis": "commit",
- "score": 0.016068243318206867,
+ "score": 0.0160618324021952,
"trending": true,
"created": "2026-07-29T19:59:36Z",
"cve": "CVE-2024-36104",
@@ -641,7 +641,7 @@
"pushed": "2026-07-27T07:00:54Z",
"released": "2026-07-27T06:52:27Z",
"basis": "commit",
- "score": 0.01568035203947081,
+ "score": 0.015674309052109557,
"trending": true,
"created": "2026-07-27T06:51:21Z",
"cve": "CVE-2023-52076",
@@ -658,7 +658,7 @@
"pushed": "2026-07-20T13:33:10Z",
"released": "2026-07-20T13:33:10Z",
"basis": "commit",
- "score": 0.014774556960820912,
+ "score": 0.014769329460035409,
"trending": true,
"created": "2026-02-13T22:26:25Z",
"cve": "CVE-2025-6019",
@@ -675,12 +675,30 @@
"pushed": "2026-10-08T15:42:17Z",
"released": "2025-09-09T01:31:54Z",
"basis": "commit",
- "score": 0.00983697316296402,
+ "score": 0.009836249344366941,
"trending": true,
"created": "2025-09-08T21:12:19Z",
"cve": "CVE-2022-22077",
"kev": false
},
+ {
+ "year": 2026,
+ "stars": 0,
+ "name": "telegram-cve-2026-107181",
+ "url": "https://github.com/SeanDishman/telegram-cve-2026-107181",
+ "artifact": false,
+ "source": "github.com",
+ "desc": "Telegram CVE-2026-107181",
+ "pushed": null,
+ "released": "2026-10-10T01:25:43Z",
+ "basis": "commit",
+ "score": 0.0,
+ "trending": false,
+ "created": "2026-10-10T01:12:57Z",
+ "cve": "CVE-2026-107181",
+ "kev": false,
+ "landed": true
+ },
{
"year": 2026,
"stars": 0,
@@ -806,23 +824,5 @@
"cve": "CVE-2026-92555",
"kev": false,
"landed": true
- },
- {
- "year": 2026,
- "stars": 0,
- "name": "CVE-2026-48908",
- "url": "https://github.com/theendofabbys/CVE-2026-48908",
- "artifact": false,
- "source": "github.com",
- "desc": "A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.",
- "pushed": null,
- "released": "2026-10-08T12:09:11Z",
- "basis": "commit",
- "score": 0.0,
- "trending": false,
- "created": "2026-10-08T12:08:56Z",
- "cve": "CVE-2026-48908",
- "kev": true,
- "landed": true
}
]