From 53ca123dd1109b3d57431a94b628f4c4fa9a8c71 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Sat, 10 Oct 2026 02:12:19 +0000 Subject: [PATCH] Trending CVEs update 2026-10-10 02:12 :robot: --- README.md | 16 ++--- cves/2026/CVE-2026-107181.md | 2 +- index/github.txt | 1 + index/releases/2011.json | 2 +- index/releases/2023.json | 2 +- index/releases/2025.json | 2 +- index/releases/2026.json | 3 +- index/trending.json | 116 +++++++++++++++++------------------ 8 files changed, 73 insertions(+), 71 deletions(-) diff --git a/README.md b/README.md index a4385d9083b..429d7f9cbd4 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-10%20Oct%202026%2001%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610100107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C305-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610100107)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-10%20Oct%202026%2002%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610100207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C305-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610100207)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,16 +14,16 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 28m ago | [CVE-2026-84520](https://github.com/csrXamfi/CVE-2026-84520) | AppleFDEKeyStore poc | -| 0⭐ | 11h ago | [CVE-2025-34071](https://github.com/cppghoul/CVE-2025-34071) | RCE in Kerio Control 9.4.5 via unsigned firmware update. | -| 0⭐ | 13h ago | [CVE-2024-36774-Monstra-CMS-RCE-PoC](https://github.com/PawFV/CVE-2024-36774-Monstra-CMS-RCE-PoC) | An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via… | -| 2⭐ | 19h ago | [CVE-2026-80428](https://github.com/HackfutSecRoot/CVE-2026-80428) | ILIAS ≤ 9.21 / 10.9 / 11.2 - Unauthenticated PHP Object Injection (RCE) | +| 0⭐ | 45m ago | [telegram-cve-2026-107181](https://github.com/SeanDishman/telegram-cve-2026-107181) | Telegram CVE-2026-107181 | +| 0⭐ | 1h ago | [CVE-2026-84520](https://github.com/csrXamfi/CVE-2026-84520) | AppleFDEKeyStore poc | +| 0⭐ | 12h ago | [CVE-2025-34071](https://github.com/cppghoul/CVE-2025-34071) | RCE in Kerio Control 9.4.5 via unsigned firmware update. | +| 0⭐ | 14h ago | [CVE-2024-36774-Monstra-CMS-RCE-PoC](https://github.com/PawFV/CVE-2024-36774-Monstra-CMS-RCE-PoC) | An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via… | +| 2⭐ | 20h ago | [CVE-2026-80428](https://github.com/HackfutSecRoot/CVE-2026-80428) | ILIAS ≤ 9.21 / 10.9 / 11.2 - Unauthenticated PHP Object Injection (RCE) | | 0⭐ | 1d ago | [CVE-2026-55450](https://github.com/0xBlackash/CVE-2026-55450) | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1,… | | 0⭐ | 1d ago | [CVE-2026-91940-crawl4ai-Arbitrary-File-Write](https://github.com/BiiTts/CVE-2026-91940-crawl4ai-Arbitrary-File-Write) | CVE-2026-91940: arbitrary file write in crawl4ai <=0.9.2 via the untrusted-config gate… | | 2⭐ | 1d ago | [CVE-2023-54391-RCE](https://github.com/alexand0www/CVE-2023-54391-RCE) | CVE-2023-54391: Proxmox VE Authentication Bypass RCE Exploit | | 0⭐ | 1d ago | KEV [CVE-2026-67279-Mikrotik-6.42-POC](https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC) | Laboratory proof of concept and research notes for CVE-2026-67279 on MikroTik RouterOS 6.42. | | 0⭐ | 1d ago | [CVE-2026-92555](https://github.com/Enay-Project/CVE-2026-92555) | CVE-2026-92555 Exploit | -| 0⭐ | 1d ago | KEV [CVE-2026-48908](https://github.com/theendofabbys/CVE-2026-48908) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files,… | ## Trending in 2026 @@ -57,12 +57,12 @@ | 22⭐ | 60d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 7⭐ | 22d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 10⭐ | 43d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | -| 7⭐ | 50d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | +| 7⭐ | 51d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 8⭐ | 68d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 7⭐ | 64d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 3⭐ | 43d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 4⭐ | 80d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | -| 3⭐ | 52d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | +| 3⭐ | 53d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 4⭐ | 82d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | | 4⭐ | 84d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | | 3⭐ | 81d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation | diff --git a/cves/2026/CVE-2026-107181.md b/cves/2026/CVE-2026-107181.md index ae4849542e8..e9156fbeb89 100644 --- a/cves/2026/CVE-2026-107181.md +++ b/cves/2026/CVE-2026-107181.md @@ -15,4 +15,4 @@ Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnera - https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SeanDishman/telegram-cve-2026-107181 diff --git a/index/github.txt b/index/github.txt index 1750d91c8e5..981cff3cdaf 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27371,3 +27371,4 @@ CVE-2026-64560 - https://github.com/sangsheng2026/honor-90gt-mag-an00-root-resea CVE-2026-21589 - https://github.com/gotr00t0day/CVE-2026-21589 CVE-2026-43499 - https://github.com/cyrrp/honor90-ghostlock CVE-2026-84520 - https://github.com/csrXamfi/CVE-2026-84520 +CVE-2026-107181 - https://github.com/SeanDishman/telegram-cve-2026-107181 diff --git a/index/releases/2011.json b/index/releases/2011.json index cf07de09b33..0fe08038fce 100644 --- a/index/releases/2011.json +++ b/index/releases/2011.json @@ -675,7 +675,7 @@ "CVE-2011-2523 github:lock-0n/cve-2011-2523?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/LOCK-0N/CVE-2011-2523"}, "CVE-2011-2523 github:lychi3/vsftpd-backdoor?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/Lychi3/vsftpd-backdoor"}, "CVE-2011-2523 github:lynk4/cve-2011-2523?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/Lynk4/CVE-2011-2523"}, -"CVE-2011-2523 github:maalfer/cve-2011-2523-vsftpd-2.3.4-exploit?#":{"basis":"commit","blobs":["014ff9c30642af0f4ecf35b36f34453d85bc5cb9"],"checked":"2026-10-09T15:08:53Z","commit":"2025-11-19T09:10:29Z","commit_verified":true,"created":"2025-11-19T09:10:08Z","cve":"CVE-2011-2523","gone":"2026-10-10T01:11:30Z","head":"c4b202128d0f6b723b243ea9c997d74b95c79fdd","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-09T14:50:39Z","released":"2025-11-19T09:10:29Z","repo":1099648507,"rev":"2cbd58992454cb49f1fd9e390d61d69e5b5423b7a7a07af38869210576702fbd","seen":"2026-10-09T15:08:55Z","sha":"d7f6bafff4f24b9fd3dfed98575dc98226494582","url":"https://github.com/Maalfer/CVE-2011-2523-vsftpd-2.3.4-exploit"}, +"CVE-2011-2523 github:maalfer/cve-2011-2523-vsftpd-2.3.4-exploit?#":{"basis":"commit","blobs":["014ff9c30642af0f4ecf35b36f34453d85bc5cb9"],"checked":"2026-10-09T15:08:53Z","commit":"2025-11-19T09:10:29Z","commit_verified":true,"created":"2025-11-19T09:10:08Z","cve":"CVE-2011-2523","gone":"2026-10-10T02:11:38Z","head":"c4b202128d0f6b723b243ea9c997d74b95c79fdd","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-09T14:50:39Z","released":"2025-11-19T09:10:29Z","repo":1099648507,"rev":"2cbd58992454cb49f1fd9e390d61d69e5b5423b7a7a07af38869210576702fbd","seen":"2026-10-09T15:08:55Z","sha":"d7f6bafff4f24b9fd3dfed98575dc98226494582","url":"https://github.com/Maalfer/CVE-2011-2523-vsftpd-2.3.4-exploit"}, "CVE-2011-2523 github:maalfer/vsftpd-2.3.4-exploit?#":{"basis":"unknown","cve":"CVE-2011-2523","released":null,"seen":"2026-10-08T12:05:02Z","url":"https://github.com/Maalfer/vsftpd-2.3.4-exploit"}, "CVE-2011-2523 github:madanokr001/cve-2011-2523?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/madanokr001/CVE-2011-2523"}, "CVE-2011-2523 github:maherjas/ai-vsftpd-exploit?#":{"basis":"unknown","cve":"CVE-2011-2523","imported":true,"released":null,"url":"https://github.com/maherjas/AI-VSFTPD-Exploit"}, diff --git a/index/releases/2023.json b/index/releases/2023.json index 785617624e9..ec2bcdcecd9 100644 --- a/index/releases/2023.json +++ b/index/releases/2023.json @@ -5384,7 +5384,7 @@ "CVE-2023-37759 https://www.exploit-db.com/exploits/51688":{"basis":"source","cve":"CVE-2023-37759","imported":true,"released":"2023-08-21","source":"2023-08-21","url":"https://www.exploit-db.com/exploits/51688"}, "CVE-2023-3776 github:google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation?#":{"basis":"commit","blobs":["55d79687ed0e1c3ccc627fe396d3dda1ecaf5850","a8ea1f00177ec8ffeb977ccd057d468ec2cfc408"],"checked":"2026-10-06T22:39:00Z","commit":"2024-01-11T16:06:38Z","commit_verified":true,"created":"2020-06-15T09:19:51Z","cve":"CVE-2023-3776","head":"c9856c7eab06c9c4dfbc7fa64741185367591343","history_paths":["pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/cos-93-16623.341.29/poc.c"],"history_version":3,"imported":true,"paths":["pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/cos-93-16623.341.29/poc.c","pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/mitigation-6.1/poc.c"],"pushed_at":"2026-10-06T15:11:02Z","released":"2024-01-11T16:06:38Z","repo":272394704,"rev":"9c58edd820b4d642abbae87825a7f8718b9297e6be99c8a923aada09b1cf5513","sha":"8342ff4443771e4b70d62f408363c5f93a476be4","url":"https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation"}, "CVE-2023-3776 github:google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_lts?#":{"basis":"commit","blobs":["55d79687ed0e1c3ccc627fe396d3dda1ecaf5850"],"checked":"2026-10-06T22:39:00Z","commit":"2023-11-13T15:11:02Z","commit_verified":true,"created":"2020-06-15T09:19:51Z","cve":"CVE-2023-3776","head":"c9856c7eab06c9c4dfbc7fa64741185367591343","history_paths":["pocs/linux/kernelctf/CVE-2023-3776_lts/exploit/lts-6.1.36/poc.c"],"history_version":3,"imported":true,"paths":["pocs/linux/kernelctf/CVE-2023-3776_lts/exploit/lts-6.1.36/poc.c"],"pushed_at":"2026-10-06T15:11:02Z","released":"2023-11-13T15:11:02Z","repo":272394704,"rev":"d52792fc513e0874226a5aebc4b2eb034f8c23affe1fd1dbe794901aeb442d16","sha":"45de264fffb1581f2d2fccdc482a88249fa9b5c2","url":"https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_lts"}, -"CVE-2023-3776 github:sakura999999999/cve-2023-3776_repro?#":{"basis":"pending","checked":"2026-10-09T21:09:11Z","created":"2026-09-30T05:49:23Z","cve":"CVE-2023-3776","head":"b63059fc7d7e1da5dd4e890d56d681850b3a7dbd","imported":true,"pending":true,"pushed_at":"2026-10-08T09:34:58Z","released":null,"repo":1397099307,"url":"https://github.com/Sakura999999999/CVE-2023-3776_repro"}, +"CVE-2023-3776 github:sakura999999999/cve-2023-3776_repro?#":{"basis":"pending","checked":"2026-10-10T02:08:18Z","created":"2026-09-30T05:49:23Z","cve":"CVE-2023-3776","head":"b63059fc7d7e1da5dd4e890d56d681850b3a7dbd","imported":true,"pending":true,"pushed_at":"2026-10-08T09:34:58Z","released":null,"repo":1397099307,"url":"https://github.com/Sakura999999999/CVE-2023-3776_repro"}, "CVE-2023-37765 github:gpac/gpac/issues/2515?#":{"basis":"unknown","cve":"CVE-2023-37765","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2515"}, "CVE-2023-37766 github:gpac/gpac/issues/2516?#":{"basis":"unknown","cve":"CVE-2023-37766","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2516"}, "CVE-2023-37767 github:gpac/gpac/issues/2514?#":{"basis":"unknown","cve":"CVE-2023-37767","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2514"}, diff --git a/index/releases/2025.json b/index/releases/2025.json index 2a1e11dd6ec..13852c8e250 100644 --- a/index/releases/2025.json +++ b/index/releases/2025.json @@ -5433,7 +5433,7 @@ "CVE-2025-34066 https://www.exploit-db.com/exploits/40500":{"basis":"source","cve":"CVE-2025-34066","imported":true,"released":"2016-10-11","source":"2016-10-11","url":"https://www.exploit-db.com/exploits/40500"}, "CVE-2025-34067 github:peiqi0/peiqi-wiki-book/blob/main/docs/wiki/iot/HIKVISION/HIKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20applyCT%20Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md?#":{"basis":"unknown","cve":"CVE-2025-34067","imported":true,"released":null,"url":"https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/iot/HIKVISION/HIKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20applyCT%20Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md"}, "CVE-2025-34068 https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba":{"basis":"unknown","cve":"CVE-2025-34068","imported":true,"released":null,"url":"https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba"}, -"CVE-2025-34069 github:cppghoul/cve-2025-34069?#":{"basis":"pending","checked":"2026-10-09T21:09:05Z","created":"2026-10-06T12:42:26Z","cve":"CVE-2025-34069","head":"fe7a71d39668e540d6e76279214004ed50113c35","imported":true,"pending":true,"pushed_at":"2026-10-09T04:03:05Z","released":null,"repo":1407284291,"url":"https://github.com/cppghoul/CVE-2025-34069"}, +"CVE-2025-34069 github:cppghoul/cve-2025-34069?#":{"basis":"pending","checked":"2026-10-10T02:08:13Z","created":"2026-10-06T12:42:26Z","cve":"CVE-2025-34069","head":"fe7a71d39668e540d6e76279214004ed50113c35","imported":true,"pending":true,"pushed_at":"2026-10-09T04:03:05Z","released":null,"repo":1407284291,"url":"https://github.com/cppghoul/CVE-2025-34069"}, "CVE-2025-34069 https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce":{"basis":"unknown","cve":"CVE-2025-34069","imported":true,"released":null,"url":"https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/"}, "CVE-2025-34070 https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce":{"basis":"unknown","cve":"CVE-2025-34070","imported":true,"released":null,"url":"https://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/"}, "CVE-2025-34071 github:cppghoul/cve-2025-34071?#":{"basis":"commit","blobs":["44f5acbeda7554ccac392746ac5276dc50c97095"],"checked":"2026-10-09T15:08:53Z","commit":"2026-10-09T14:01:07Z","commit_verified":true,"created":"2026-10-09T14:00:31Z","cve":"CVE-2025-34071","head":"f37d66bc6031f6c6f041fdb18d78ccc4c24f2484","history_paths":["PoC.py"],"history_version":3,"paths":["PoC.py"],"pushed_at":"2026-10-09T14:01:08Z","released":"2026-10-09T14:01:07Z","repo":1411939032,"rev":"22a1fa000780498ed8b19828c34fde98066a5efd5587b39d20e264e7694c754a","seen":"2026-10-09T15:08:55Z","sha":"f37d66bc6031f6c6f041fdb18d78ccc4c24f2484","url":"https://github.com/cppghoul/CVE-2025-34071"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index aa1f5152277..edf0bd5fcdf 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -953,6 +953,7 @@ "CVE-2026-10704 github:nuiifornet/a033/blob/main/pizzafy-vulnerability.md?#":{"basis":"unknown","cve":"CVE-2026-10704","imported":true,"released":null,"url":"https://github.com/nuiifornet/A033/blob/main/pizzafy-vulnerability.md"}, "CVE-2026-10712 https://hackerone.com/reports/3688717":{"basis":"unknown","cve":"CVE-2026-10712","imported":true,"released":null,"url":"https://hackerone.com/reports/3688717"}, "CVE-2026-107166 github:open5gs/open5gs/issues/4792?#":{"basis":"unknown","cve":"CVE-2026-107166","released":null,"seen":"2026-10-09T09:31:09Z","url":"https://github.com/open5gs/open5gs/issues/4792"}, +"CVE-2026-107181 github:seandishman/telegram-cve-2026-107181?#":{"basis":"commit","blobs":["d0d80aa39848c24484dbc80976c2196439544009"],"checked":"2026-10-10T02:07:44Z","commit":"2026-10-10T01:25:43Z","commit_verified":true,"created":"2026-10-10T01:12:57Z","cve":"CVE-2026-107181","head":"efd0d2f005af595db3530f88553a38fba4737023","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-10T01:28:11Z","released":"2026-10-10T01:25:43Z","repo":1412613916,"rev":"6528e42957781424058a395e30708bd32228f2b24ed1b38c623bf16aa65d18e9","seen":"2026-10-10T02:07:46Z","sha":"b3e29a556af94195f3603d08007e66d10d3a5548","url":"https://github.com/SeanDishman/telegram-cve-2026-107181"}, "CVE-2026-107181 https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover":{"basis":"unknown","cve":"CVE-2026-107181","released":null,"seen":"2026-10-09T09:31:09Z","url":"https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/"}, "CVE-2026-107212 github:advisories/ghsa-jw42-f3rr-4cc3?#":{"basis":"unknown","cve":"CVE-2026-107212","released":null,"seen":"2026-10-09T10:25:35Z","url":"https://github.com/advisories/GHSA-jw42-f3rr-4cc3"}, "CVE-2026-10722 https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815":{"basis":"unknown","cve":"CVE-2026-10722","imported":true,"released":null,"url":"https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815"}, @@ -5384,7 +5385,7 @@ "CVE-2026-3180 https://www.exploit-db.com/exploits/52609":{"basis":"source","cve":"CVE-2026-3180","imported":true,"released":"2026-06-05","source":"2026-06-05","url":"https://www.exploit-db.com/exploits/52609"}, "CVE-2026-31801 github:advisories/ghsa-85jx-fm8m-x8c6?#":{"basis":"unknown","cve":"CVE-2026-31801","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-85jx-fm8m-x8c6"}, "CVE-2026-31802 github:advisories/ghsa-9ppj-qmqm-q256?#":{"basis":"unknown","cve":"CVE-2026-31802","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-9ppj-qmqm-q256"}, -"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-09T21:08:59Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"5f1957652938073f323a1d69c3d23a5d6421e40d","imported":true,"pending":true,"pushed_at":"2026-10-09T07:20:02Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"}, +"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-10T02:08:08Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"5f1957652938073f323a1d69c3d23a5d6421e40d","imported":true,"pending":true,"pushed_at":"2026-10-09T07:20:02Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"}, "CVE-2026-31807 github:advisories/ghsa-5hc8-qmg8-pw27?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-5hc8-qmg8-pw27"}, "CVE-2026-31807 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml"}, "CVE-2026-31809 github:advisories/ghsa-pmc9-f5qr-2pcr?#":{"basis":"unknown","cve":"CVE-2026-31809","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-pmc9-f5qr-2pcr"}, diff --git a/index/trending.json b/index/trending.json index 932456c8b11..2f6a46c5790 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.4275287464343656, + "score": 3.425574224355285, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -27,7 +27,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.845917918974841, + "score": 1.8413608828564807, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -44,7 +44,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.686654748052878, + "score": 1.6860312790607637, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -61,7 +61,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.2962073695960523, + "score": 1.295449142942542, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -78,7 +78,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.9459573841025171, + "score": 0.9436087690559397, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -95,7 +95,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.9337314746024384, + "score": 0.9328045735425996, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -112,7 +112,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.899858675375967, + "score": 0.8989557880204251, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -129,7 +129,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.7752601717023702, + "score": 0.7747714565568667, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -146,7 +146,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7397147548064739, + "score": 0.7391349032584124, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -163,7 +163,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.6063595047475902, + "score": 0.6061009722692314, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -180,7 +180,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.5967774012553357, + "score": 0.5957511214057053, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -197,7 +197,7 @@ "pushed": "2026-09-27T19:48:09Z", "released": "2026-09-27T19:47:52Z", "basis": "commit", - "score": 0.5498770666740135, + "score": 0.5486669585143961, "trending": true, "created": "2026-09-27T19:41:06Z", "cve": "CVE-2026-34990", @@ -214,7 +214,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.538345331395475, + "score": 0.5374853841169814, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -231,7 +231,7 @@ "pushed": "2026-07-18T21:09:06Z", "released": null, "basis": "pending", - "score": 0.5195596291203498, + "score": 0.5193795828493042, "trending": true, "created": "2026-07-14T14:21:27Z", "cve": "CVE-2026-43499", @@ -248,7 +248,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.4947502120999809, + "score": 0.4939623885964464, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -265,7 +265,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.4710998009314179, + "score": 0.4700311656210052, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -282,7 +282,7 @@ "pushed": "2026-10-06T10:48:38Z", "released": "2026-10-06T10:48:38Z", "basis": "commit", - "score": 0.44588286373237535, + "score": 0.4430750112240978, "trending": true, "created": "2026-10-06T10:40:59Z", "cve": "CVE-2026-21589", @@ -299,7 +299,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.4400878560749021, + "score": 0.4384275110198004, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -316,7 +316,7 @@ "pushed": "2026-09-11T16:38:12Z", "released": "2026-09-11T15:54:48Z", "basis": "commit", - "score": 0.43614046674782886, + "score": 0.43570790948159493, "trending": true, "created": "2026-09-11T15:24:22Z", "cve": "CVE-2026-85706", @@ -333,7 +333,7 @@ "pushed": "2026-09-28T09:24:46Z", "released": "2026-09-28T09:24:46Z", "basis": "commit", - "score": 0.4206892900941289, + "score": 0.419722103015679, "trending": true, "created": "2026-09-27T18:15:38Z", "cve": "CVE-2026-88771", @@ -350,7 +350,7 @@ "pushed": "2026-09-21T15:02:37Z", "released": "2026-09-21T15:02:37Z", "basis": "commit", - "score": 0.40660258637472113, + "score": 0.405992820107881, "trending": true, "created": "2026-09-21T15:02:05Z", "cve": "CVE-2026-43786", @@ -367,7 +367,7 @@ "pushed": null, "released": "2026-10-09T06:06:02Z", "basis": "commit", - "score": 0.14356498940938542, + "score": 0.14127339728159458, "trending": false, "created": "2026-10-09T06:02:44Z", "cve": "CVE-2026-80428", @@ -385,7 +385,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.13370500296566662, + "score": 0.13364112723788238, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -402,7 +402,7 @@ "pushed": null, "released": "2026-10-08T20:42:15Z", "basis": "commit", - "score": 0.12504453178055328, + "score": 0.1234002771540519, "trending": false, "created": "2026-10-06T08:49:34Z", "cve": "CVE-2023-54391", @@ -420,7 +420,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.08193006551003834, + "score": 0.08183033189924553, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -437,7 +437,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.07556377416715583, + "score": 0.07551450938376757, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -454,7 +454,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.04761986964615461, + "score": 0.04759314680358531, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -471,7 +471,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.04225043875917641, + "score": 0.04223392121046049, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -488,7 +488,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.040544490769935784, + "score": 0.04052640686283187, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -505,7 +505,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.030129175247546214, + "score": 0.030118209472373644, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -522,7 +522,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.02558323279127745, + "score": 0.025570083104541803, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -539,7 +539,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.022921726251029877, + "score": 0.02290654387760729, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -556,7 +556,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.019892353439742768, + "score": 0.01988521652872907, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -573,7 +573,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.019879831092137847, + "score": 0.019869085406360253, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -590,7 +590,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.019516531936620663, + "score": 0.019509717997539748, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -607,7 +607,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.019215292523598985, + "score": 0.01920873113555095, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -624,7 +624,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.016068243318206867, + "score": 0.0160618324021952, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -641,7 +641,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.01568035203947081, + "score": 0.015674309052109557, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -658,7 +658,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.014774556960820912, + "score": 0.014769329460035409, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -675,12 +675,30 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.00983697316296402, + "score": 0.009836249344366941, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077", "kev": false }, + { + "year": 2026, + "stars": 0, + "name": "telegram-cve-2026-107181", + "url": "https://github.com/SeanDishman/telegram-cve-2026-107181", + "artifact": false, + "source": "github.com", + "desc": "Telegram CVE-2026-107181", + "pushed": null, + "released": "2026-10-10T01:25:43Z", + "basis": "commit", + "score": 0.0, + "trending": false, + "created": "2026-10-10T01:12:57Z", + "cve": "CVE-2026-107181", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 0, @@ -806,23 +824,5 @@ "cve": "CVE-2026-92555", "kev": false, "landed": true - }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-48908", - "url": "https://github.com/theendofabbys/CVE-2026-48908", - "artifact": false, - "source": "github.com", - "desc": "A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.", - "pushed": null, - "released": "2026-10-08T12:09:11Z", - "basis": "commit", - "score": 0.0, - "trending": false, - "created": "2026-10-08T12:08:56Z", - "cve": "CVE-2026-48908", - "kev": true, - "landed": true } ]