diff --git a/.github/getTrending.py b/.github/getTrending.py
index 65e1924e7b0..44926c7aa2f 100644
--- a/.github/getTrending.py
+++ b/.github/getTrending.py
@@ -18,7 +18,9 @@ YEARS = 5
 PER_YEAR = 20
 MIN_STARS = 2
 USER_AGENT = "0xMarcio-cve-trending"
-README = os.path.join(os.path.dirname(os.path.abspath(__file__)), os.pardir, "README.md")
+ROOT = os.path.join(os.path.dirname(os.path.abspath(__file__)), os.pardir)
+README = os.path.join(ROOT, "README.md")
+TRENDING = os.path.join(ROOT, "trending.json")
 
 
 def search_year(year: int) -> tuple[int, list[dict]]:
@@ -69,6 +71,7 @@ def cell(value: str) -> str:
 def main() -> int:
     current_year = datetime.now(timezone.utc).year
     lines = ['<h1 align="center">Recently updated Proof-of-Concepts</h1>']
+    items: list[dict] = []
 
     for year in range(current_year, current_year - YEARS, -1):
         total, repositories = search_year(year)
@@ -80,14 +83,30 @@ def main() -> int:
         lines.append("| Stars | Updated | Name | Description |")
         lines.append("| --- | --- | --- | --- |")
         for repo in repositories:
+            # pushed_at is the last commit. updated_at also moves when a repository
+            # only gains a star, which is why the table used to claim that a
+            # four-month-old exploit had been updated three hours ago.
+            pushed = str(repo.get("pushed_at") or repo.get("updated_at") or "")
+            items.append({
+                "year": year,
+                "stars": int(repo.get("stargazers_count") or 0),
+                "name": cell(repo.get("name")),
+                "url": repo.get("html_url") or "",
+                "desc": cell(repo.get("description")),
+                "pushed": pushed,
+                "created": str(repo.get("created_at") or ""),
+            })
             lines.append(
-                f"| {repo.get('stargazers_count', 0)}⭐ | {time_ago(repo['updated_at'])} "
+                f"| {repo.get('stargazers_count', 0)}⭐ | {time_ago(pushed)} "
                 f"| [{cell(repo.get('name'))}]({repo.get('html_url')}) | {cell(repo.get('description'))} |"
             )
 
     with open(README, "w", encoding="utf-8") as handle:
         handle.write("\n".join(lines))
-    print(f"Wrote {README}")
+    with open(TRENDING, "w", encoding="utf-8") as handle:
+        json.dump(items, handle, ensure_ascii=False, indent=1)
+        handle.write("\n")
+    print(f"Wrote {README} and {TRENDING} ({len(items)} repositories)")
     return 0
 
 
diff --git a/.github/workflows/hot_cves.yml b/.github/workflows/hot_cves.yml
index 0ed67cc6436..34d40073551 100644
--- a/.github/workflows/hot_cves.yml
+++ b/.github/workflows/hot_cves.yml
@@ -33,7 +33,7 @@ jobs:
         run: |
           git config user.name 'CVE-BOT'
           git config user.email 'cve@codepwn.win'
-          git add -- README.md
+          git add -- README.md trending.json
           if git diff --cached --quiet; then
             echo "No changes to commit"
             exit 0
diff --git a/README.md b/README.md
index 235a49a4694..04400431044 100644
--- a/README.md
+++ b/README.md
@@ -3,30 +3,30 @@
 
 ## 2026
 
-### Latest 20 of 523 Repositories
+### Latest 20 of 525 Repositories
 
 | Stars | Updated | Name | Description |
 | --- | --- | --- | --- |
-| 4056⭐ | 3 hours ago | [copy-fail-CVE-2026-31431](https://github.com/theori-io/copy-fail-CVE-2026-31431) | Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code |
-| 571⭐ | 3 days ago | [cve_2026_31431](https://github.com/rootsecdev/cve_2026_31431) | Exploit POC for CVE_2026_31431 |
-| 325⭐ | 2 days ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
-| 531⭐ | 2 days ago | [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool |
-| 235⭐ | 2 hours ago | [CVE-2026-43499-popsicle](https://github.com/x-spy/CVE-2026-43499-popsicle) | CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k |
-| 212⭐ | 6 days ago | [CVE-2026-41089](https://github.com/0xABCD01/CVE-2026-41089) | CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) |
-| 260⭐ | 1 day ago | [CVE-2026-21858](https://github.com/Chocapikk/CVE-2026-21858) | n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0) |
-| 262⭐ | 8 hours ago | [CVE-2026-40369-EXPLOIT](https://github.com/orinimron123/CVE-2026-40369-EXPLOIT) | Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox |
-| 207⭐ | 6 days ago | [CVE-2026-24061](https://github.com/SafeBreach-Labs/CVE-2026-24061) | Exploitation of CVE-2026-24061 |
-| 154⭐ | 6 days ago | [CVE-2026-43499](https://github.com/MobiusM/CVE-2026-43499) | CVE-2026-43499 PoC |
-| 824⭐ | 1 day ago | [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
-| 146⭐ | 1 hour ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
-| 128⭐ | 11 days ago | [CVE-2026-20817](https://github.com/oxfemale/CVE-2026-20817) | Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. |
-| 77⭐ | 8 hours ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
-| 100⭐ | 6 days ago | [CVE-2026-42980-POC](https://github.com/G4sp4rCS/CVE-2026-42980-POC) | CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH |
-| 111⭐ | 1 hour ago | [CVE-2026-31431-Advanced-Exploit](https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit) | CVE-2026-31431 纯文件利用 |
-| 119⭐ | 2 hours ago | [CVE-2026-41651](https://github.com/Vozec/CVE-2026-41651) |  |
-| 18⭐ | 2 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
-| 63⭐ | 4 days ago | [CVE-2026-45504](https://github.com/hawktrace/CVE-2026-45504) | CVE-2026-45504 Microsoft Exchange File Read |
-| 80⭐ | 2 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
+| 4056⭐ | 122 days ago | [copy-fail-CVE-2026-31431](https://github.com/theori-io/copy-fail-CVE-2026-31431) | Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code |
+| 571⭐ | 123 days ago | [cve_2026_31431](https://github.com/rootsecdev/cve_2026_31431) | Exploit POC for CVE_2026_31431 |
+| 325⭐ | 33 days ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
+| 531⭐ | 10 days ago | [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool |
+| 235⭐ | 45 days ago | [CVE-2026-43499-popsicle](https://github.com/x-spy/CVE-2026-43499-popsicle) | CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k |
+| 212⭐ | 89 days ago | [CVE-2026-41089](https://github.com/0xABCD01/CVE-2026-41089) | CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) |
+| 260⭐ | 157 days ago | [CVE-2026-21858](https://github.com/Chocapikk/CVE-2026-21858) | n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0) |
+| 262⭐ | 103 days ago | [CVE-2026-40369-EXPLOIT](https://github.com/orinimron123/CVE-2026-40369-EXPLOIT) | Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox |
+| 207⭐ | 220 days ago | [CVE-2026-24061](https://github.com/SafeBreach-Labs/CVE-2026-24061) | Exploitation of CVE-2026-24061 |
+| 154⭐ | 64 days ago | [CVE-2026-43499](https://github.com/MobiusM/CVE-2026-43499) | CVE-2026-43499 PoC |
+| 824⭐ | 10 days ago | [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
+| 146⭐ | 8 days ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
+| 79⭐ | 2 days ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
+| 128⭐ | 192 days ago | [CVE-2026-20817](https://github.com/oxfemale/CVE-2026-20817) | Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. |
+| 100⭐ | 54 days ago | [CVE-2026-42980-POC](https://github.com/G4sp4rCS/CVE-2026-42980-POC) | CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH |
+| 111⭐ | 122 days ago | [CVE-2026-31431-Advanced-Exploit](https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit) | CVE-2026-31431 纯文件利用 |
+| 119⭐ | 129 days ago | [CVE-2026-41651](https://github.com/Vozec/CVE-2026-41651) |  |
+| 18⭐ | 47 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
+| 63⭐ | 67 days ago | [CVE-2026-45504](https://github.com/hawktrace/CVE-2026-45504) | CVE-2026-45504 Microsoft Exchange File Read |
+| 80⭐ | 31 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. |
 
 
 ## 2025
@@ -35,26 +35,26 @@
 
 | Stars | Updated | Name | Description |
 | --- | --- | --- | --- |
-| 1430⭐ | 2 days ago | [CVE-2025-55182](https://github.com/msanft/CVE-2025-55182) | Explanation and full RCE PoC for CVE-2025-55182 |
-| 793⭐ | 6 days ago | [CVE-2025-55182-research](https://github.com/ejpir/CVE-2025-55182-research) | CVE-2025-55182 POC |
-| 715⭐ | 6 days ago | [CVE-2025-33073](https://github.com/mverschu/CVE-2025-33073) | PoC Exploit for the NTLM reflection SMB flaw. |
-| 529⭐ | 5 days ago | [CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot) | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 |
-| 475⭐ | 6 days ago | [CVE-2025-32463](https://github.com/kh4sh3i/CVE-2025-32463) | Local Privilege Escalation to Root via Sudo chroot in Linux |
-| 268⭐ | 6 days ago | [CVE-2025-48799](https://github.com/Wh04m1001/CVE-2025-48799) |  |
-| 315⭐ | 14 days ago | [CVE-2025-53770-Exploit](https://github.com/soltanali0/CVE-2025-53770-Exploit) | SharePoint WebPart Injection Exploit Tool |
-| 316⭐ | 1 day ago | [CVE-2025-55182](https://github.com/emredavut/CVE-2025-55182) | RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478 |
-| 1058⭐ | 1 day ago | [React2Shell-CVE-2025-55182-original-poc](https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc) | Original Proof-of-Concepts for React2Shell CVE-2025-55182 |
-| 408⭐ | 2 days ago | [CVE-2025-24071_PoC](https://github.com/0x6rss/CVE-2025-24071_PoC) | CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File |
-| 215⭐ | 13 days ago | [CVE-2025-32023](https://github.com/leesh3288/CVE-2025-32023) | PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo" |
-| 385⭐ | 19 days ago | [ColorOS-CVE-2025-10184](https://github.com/yuuouu/ColorOS-CVE-2025-10184) | ColorOS短信漏洞，以及用户自救方案 |
-| 282⭐ | 2 days ago | [CVE-2025-55182-advanced-scanner-](https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-) |  |
-| 431⭐ | 7 days ago | [Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478) | A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. |
-| 197⭐ | 3 days ago | [POC-CVE-2025-24813](https://github.com/absholi7ly/POC-CVE-2025-24813) | his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met. |
-| 233⭐ | 11 days ago | [CVE-2025-21333-POC](https://github.com/MrAle98/CVE-2025-21333-POC) | POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY |
-| 190⭐ | 157 days ago | [RSC-Detect-CVE-2025-55182](https://github.com/alptexans/RSC-Detect-CVE-2025-55182) | RSC Detect CVE 2025 55182 |
-| 196⭐ | 40 days ago | [CVE-2025-30208-EXP](https://github.com/ThumpBo/CVE-2025-30208-EXP) | CVE-2025-30208-EXP |
-| 161⭐ | 14 days ago | [CVE-2025-21756](https://github.com/hoefler02/CVE-2025-21756) | Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit! |
-| 143⭐ | 9 days ago | [CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433) | CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 |
+| 1430⭐ | 265 days ago | [CVE-2025-55182](https://github.com/msanft/CVE-2025-55182) | Explanation and full RCE PoC for CVE-2025-55182 |
+| 793⭐ | 264 days ago | [CVE-2025-55182-research](https://github.com/ejpir/CVE-2025-55182-research) | CVE-2025-55182 POC |
+| 715⭐ | 193 days ago | [CVE-2025-33073](https://github.com/mverschu/CVE-2025-33073) | PoC Exploit for the NTLM reflection SMB flaw. |
+| 529⭐ | 284 days ago | [CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot) | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 |
+| 475⭐ | 424 days ago | [CVE-2025-32463](https://github.com/kh4sh3i/CVE-2025-32463) | Local Privilege Escalation to Root via Sudo chroot in Linux |
+| 268⭐ | 418 days ago | [CVE-2025-48799](https://github.com/Wh04m1001/CVE-2025-48799) |  |
+| 315⭐ | 274 days ago | [CVE-2025-53770-Exploit](https://github.com/soltanali0/CVE-2025-53770-Exploit) | SharePoint WebPart Injection Exploit Tool |
+| 316⭐ | 267 days ago | [CVE-2025-55182](https://github.com/emredavut/CVE-2025-55182) | RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478 |
+| 1058⭐ | 268 days ago | [React2Shell-CVE-2025-55182-original-poc](https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc) | Original Proof-of-Concepts for React2Shell CVE-2025-55182 |
+| 408⭐ | 527 days ago | [CVE-2025-24071_PoC](https://github.com/0x6rss/CVE-2025-24071_PoC) | CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File |
+| 215⭐ | 420 days ago | [CVE-2025-32023](https://github.com/leesh3288/CVE-2025-32023) | PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo" |
+| 385⭐ | 319 days ago | [ColorOS-CVE-2025-10184](https://github.com/yuuouu/ColorOS-CVE-2025-10184) | ColorOS短信漏洞，以及用户自救方案 |
+| 282⭐ | 266 days ago | [CVE-2025-55182-advanced-scanner-](https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-) |  |
+| 431⭐ | 257 days ago | [Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478) | A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. |
+| 197⭐ | 534 days ago | [POC-CVE-2025-24813](https://github.com/absholi7ly/POC-CVE-2025-24813) | his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met. |
+| 233⭐ | 504 days ago | [CVE-2025-21333-POC](https://github.com/MrAle98/CVE-2025-21333-POC) | POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY |
+| 190⭐ | 186 days ago | [RSC-Detect-CVE-2025-55182](https://github.com/alptexans/RSC-Detect-CVE-2025-55182) | RSC Detect CVE 2025 55182 |
+| 196⭐ | 516 days ago | [CVE-2025-30208-EXP](https://github.com/ThumpBo/CVE-2025-30208-EXP) | CVE-2025-30208-EXP |
+| 143⭐ | 393 days ago | [CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433) | CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 |
+| 161⭐ | 450 days ago | [CVE-2025-21756](https://github.com/hoefler02/CVE-2025-21756) | Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit! |
 
 
 ## 2024
@@ -63,26 +63,26 @@
 
 | Stars | Updated | Name | Description |
 | --- | --- | --- | --- |
-| 2457⭐ | 9 days ago | [CVE-2024-1086](https://github.com/Notselwyn/CVE-2024-1086) | Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. |
-| 693⭐ | 10 days ago | [CVE-2024-38063](https://github.com/ynwarcs/CVE-2024-38063) | poc for CVE-2024-38063 (RCE in tcpip.sys) |
-| 496⭐ | 21 hours ago | [cve-2024-6387-poc](https://github.com/zgzhang/cve-2024-6387-poc) | a signal handler race condition in OpenSSH's server (sshd) |
-| 520⭐ | 8 days ago | [CVE-2024-49113](https://github.com/SafeBreach-Labs/CVE-2024-49113) | LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113 |
-| 527⭐ | 4 days ago | [CVE-2024-6387_Check](https://github.com/xaitax/CVE-2024-6387_Check) | CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH |
-| 224⭐ | 6 days ago | [CVE-2024-38077](https://github.com/qi4L/CVE-2024-38077) | RDL的堆溢出导致的RCE |
-| 380⭐ | 52 days ago | [cve-2024-6387-poc](https://github.com/acrono/cve-2024-6387-poc) | 32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc |
-| 335⭐ | 14 days ago | [CVE-2024-21338](https://github.com/hakaioffsec/CVE-2024-21338) | Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. |
-| 330⭐ | 18 days ago | [CVE-2024-0044](https://github.com/0xbinder/CVE-2024-0044) | CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 |
-| 321⭐ | 4 days ago | [CVE-2024-4577](https://github.com/watchtowrlabs/CVE-2024-4577) | PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC |
-| 289⭐ | 14 days ago | [CVE-2024-30088](https://github.com/tykawaii98/CVE-2024-30088) |  |
-| 278⭐ | 29 minutes ago | [CVE-2024-21413](https://github.com/CMNatic/CVE-2024-21413) | CVE-2024-21413 PoC for THM Lab |
-| 769⭐ | 9 days ago | [CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability](https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability) | Microsoft-Outlook-Remote-Code-Execution-Vulnerability |
-| 271⭐ | 2 days ago | [CVE-2024-49138-POC](https://github.com/MrAle98/CVE-2024-49138-POC) | POC exploit for CVE-2024-49138 |
-| 194⭐ | 1 day ago | [CVE-2024-6387](https://github.com/Karmakstylez/CVE-2024-6387) | Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) |
-| 9⭐ | 14 days ago | [CVE-2024-38077-POC](https://github.com/SecStarBot/CVE-2024-38077-POC) |  |
-| 235⭐ | 34 days ago | [CVE_2024_30078_POC_WIFI](https://github.com/blkph0x/CVE_2024_30078_POC_WIFI) | basic concept for the latest windows wifi driver CVE |
-| 180⭐ | 20 days ago | [CVE-2024-25600](https://github.com/Chocapikk/CVE-2024-25600) | Unauthenticated Remote Code Execution – Bricks <= 1.9.6 |
-| 217⭐ | 8 days ago | [CVE-2024-21111](https://github.com/mansk1es/CVE-2024-21111) | Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability |
-| 136⭐ | 14 days ago | [CVE-2024-7479_CVE-2024-7481](https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481) | TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006. |
+| 2457⭐ | 865 days ago | [CVE-2024-1086](https://github.com/Notselwyn/CVE-2024-1086) | Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. |
+| 693⭐ | 733 days ago | [CVE-2024-38063](https://github.com/ynwarcs/CVE-2024-38063) | poc for CVE-2024-38063 (RCE in tcpip.sys) |
+| 496⭐ | 790 days ago | [cve-2024-6387-poc](https://github.com/zgzhang/cve-2024-6387-poc) | a signal handler race condition in OpenSSH's server (sshd) |
+| 520⭐ | 605 days ago | [CVE-2024-49113](https://github.com/SafeBreach-Labs/CVE-2024-49113) | LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113 |
+| 527⭐ | 93 days ago | [CVE-2024-6387_Check](https://github.com/xaitax/CVE-2024-6387_Check) | CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH |
+| 224⭐ | 746 days ago | [CVE-2024-38077](https://github.com/qi4L/CVE-2024-38077) | RDL的堆溢出导致的RCE |
+| 335⭐ | 865 days ago | [CVE-2024-21338](https://github.com/hakaioffsec/CVE-2024-21338) | Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. |
+| 380⭐ | 790 days ago | [cve-2024-6387-poc](https://github.com/acrono/cve-2024-6387-poc) | 32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc |
+| 330⭐ | 636 days ago | [CVE-2024-0044](https://github.com/0xbinder/CVE-2024-0044) | CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 |
+| 321⭐ | 799 days ago | [CVE-2024-4577](https://github.com/watchtowrlabs/CVE-2024-4577) | PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC |
+| 289⭐ | 760 days ago | [CVE-2024-30088](https://github.com/tykawaii98/CVE-2024-30088) |  |
+| 278⭐ | 900 days ago | [CVE-2024-21413](https://github.com/CMNatic/CVE-2024-21413) | CVE-2024-21413 PoC for THM Lab |
+| 769⭐ | 922 days ago | [CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability](https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability) | Microsoft-Outlook-Remote-Code-Execution-Vulnerability |
+| 271⭐ | 561 days ago | [CVE-2024-49138-POC](https://github.com/MrAle98/CVE-2024-49138-POC) | POC exploit for CVE-2024-49138 |
+| 194⭐ | 738 days ago | [CVE-2024-6387](https://github.com/Karmakstylez/CVE-2024-6387) | Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) |
+| 9⭐ | 751 days ago | [CVE-2024-38077-POC](https://github.com/SecStarBot/CVE-2024-38077-POC) |  |
+| 235⭐ | 668 days ago | [CVE_2024_30078_POC_WIFI](https://github.com/blkph0x/CVE_2024_30078_POC_WIFI) | basic concept for the latest windows wifi driver CVE |
+| 180⭐ | 916 days ago | [CVE-2024-25600](https://github.com/Chocapikk/CVE-2024-25600) | Unauthenticated Remote Code Execution – Bricks <= 1.9.6 |
+| 217⭐ | 843 days ago | [CVE-2024-21111](https://github.com/mansk1es/CVE-2024-21111) | Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability |
+| 136⭐ | 615 days ago | [CVE-2024-7479_CVE-2024-7481](https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481) | TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006. |
 
 
 ## 2023
@@ -91,26 +91,26 @@
 
 | Stars | Updated | Name | Description |
 | --- | --- | --- | --- |
-| 782⭐ | 31 days ago | [CVE-2023-38831-winrar-exploit](https://github.com/b1tg/CVE-2023-38831-winrar-exploit) | CVE-2023-38831 winrar exploit generator |
-| 382⭐ | 52 days ago | [CVE-2023-32233](https://github.com/Liuk3r/CVE-2023-32233) | CVE-2023-32233: Linux内核中的安全漏洞 |
-| 506⭐ | 9 days ago | [Windows_LPE_AFD_CVE-2023-21768](https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768) | LPE exploit for CVE-2023-21768 |
-| 418⭐ | 34 days ago | [CVE-2023-0386](https://github.com/xkaneiki/CVE-2023-0386) | CVE-2023-0386在ubuntu22.04上的提权 |
-| 116⭐ | 6 days ago | [CVE-2023-21839](https://github.com/ASkyeye/CVE-2023-21839) | Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE) |
-| 328⭐ | 11 days ago | [CVE-2023-21752](https://github.com/Wh04m1001/CVE-2023-21752) |  |
-| 393⭐ | 5 days ago | [CVE-2023-4911](https://github.com/leesh3288/CVE-2023-4911) | PoC for CVE-2023-4911 |
-| 283⭐ | 31 days ago | [CVE-2023-21608](https://github.com/hacksysteam/CVE-2023-21608) | Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit |
-| 317⭐ | 9 days ago | [CVE-2023-4863](https://github.com/mistymntncop/CVE-2023-4863) |  |
-| 242⭐ | 9 days ago | [CVE-2023-36874](https://github.com/Wh04m1001/CVE-2023-36874) |  |
-| 247⭐ | 16 days ago | [CVE-2023-44487](https://github.com/bcdannyboy/CVE-2023-44487) | Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 |
-| 245⭐ | 20 days ago | [CVE-2023-7028](https://github.com/Vozec/CVE-2023-7028) | This repository presents a proof-of-concept of CVE-2023-7028 |
-| 228⭐ | 31 days ago | [CVE-2023-3519](https://github.com/BishopFox/CVE-2023-3519) | RCE exploit for CVE-2023-3519 |
-| 169⭐ | 48 days ago | [CVE-2023-36745](https://github.com/N1k0la-T/CVE-2023-36745) |  |
-| 228⭐ | 5 days ago | [CVE-2023-20887](https://github.com/sinsinology/CVE-2023-20887) | VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887) |
-| 346⭐ | 44 days ago | [CVE-2023-23397-POC-Powershell](https://github.com/api0cradle/CVE-2023-23397-POC-Powershell) |  |
-| 183⭐ | 14 days ago | [CVE-2023-28252](https://github.com/fortra/CVE-2023-28252) |  |
-| 136⭐ | 14 days ago | [CVE-2023-2640-CVE-2023-32629](https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629) | GameOver(lay) Ubuntu Privilege Escalation |
-| 241⭐ | 24 days ago | [Weblogic-CVE-2023-21839](https://github.com/DXask88MA/Weblogic-CVE-2023-21839) |  |
-| 207⭐ | 6 days ago | [CVE-2023-46747-RCE](https://github.com/W01fh4cker/CVE-2023-46747-RCE) | exploit for f5-big-ip RCE cve-2023-46747 |
+| 782⭐ | 1008 days ago | [CVE-2023-38831-winrar-exploit](https://github.com/b1tg/CVE-2023-38831-winrar-exploit) | CVE-2023-38831 winrar exploit generator |
+| 382⭐ | 1202 days ago | [CVE-2023-32233](https://github.com/Liuk3r/CVE-2023-32233) | CVE-2023-32233: Linux内核中的安全漏洞 |
+| 506⭐ | 1147 days ago | [Windows_LPE_AFD_CVE-2023-21768](https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768) | LPE exploit for CVE-2023-21768 |
+| 418⭐ | 1174 days ago | [CVE-2023-0386](https://github.com/xkaneiki/CVE-2023-0386) | CVE-2023-0386在ubuntu22.04上的提权 |
+| 116⭐ | 19 days ago | [CVE-2023-21839](https://github.com/ASkyeye/CVE-2023-21839) | Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE) |
+| 328⭐ | 1325 days ago | [CVE-2023-21752](https://github.com/Wh04m1001/CVE-2023-21752) |  |
+| 393⭐ | 1061 days ago | [CVE-2023-4911](https://github.com/leesh3288/CVE-2023-4911) | PoC for CVE-2023-4911 |
+| 283⭐ | 999 days ago | [CVE-2023-21608](https://github.com/hacksysteam/CVE-2023-21608) | Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit |
+| 317⭐ | 986 days ago | [CVE-2023-4863](https://github.com/mistymntncop/CVE-2023-4863) |  |
+| 242⭐ | 1103 days ago | [CVE-2023-36874](https://github.com/Wh04m1001/CVE-2023-36874) |  |
+| 247⭐ | 965 days ago | [CVE-2023-44487](https://github.com/bcdannyboy/CVE-2023-44487) | Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 |
+| 245⭐ | 960 days ago | [CVE-2023-7028](https://github.com/Vozec/CVE-2023-7028) | This repository presents a proof-of-concept of CVE-2023-7028 |
+| 228⭐ | 1103 days ago | [CVE-2023-3519](https://github.com/BishopFox/CVE-2023-3519) | RCE exploit for CVE-2023-3519 |
+| 169⭐ | 1036 days ago | [CVE-2023-36745](https://github.com/N1k0la-T/CVE-2023-36745) |  |
+| 346⭐ | 1262 days ago | [CVE-2023-23397-POC-Powershell](https://github.com/api0cradle/CVE-2023-23397-POC-Powershell) |  |
+| 228⭐ | 1174 days ago | [CVE-2023-20887](https://github.com/sinsinology/CVE-2023-20887) | VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887) |
+| 183⭐ | 1147 days ago | [CVE-2023-28252](https://github.com/fortra/CVE-2023-28252) |  |
+| 136⭐ | 1055 days ago | [CVE-2023-2640-CVE-2023-32629](https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629) | GameOver(lay) Ubuntu Privilege Escalation |
+| 241⭐ | 1281 days ago | [Weblogic-CVE-2023-21839](https://github.com/DXask88MA/Weblogic-CVE-2023-21839) |  |
+| 207⭐ | 679 days ago | [CVE-2023-46747-RCE](https://github.com/W01fh4cker/CVE-2023-46747-RCE) | exploit for f5-big-ip RCE cve-2023-46747 |
 
 
 ## 2022
@@ -119,23 +119,23 @@
 
 | Stars | Updated | Name | Description |
 | --- | --- | --- | --- |
-| 461⭐ | 2 days ago | [CVE-2022-21882](https://github.com/KaLendsi/CVE-2022-21882) | win32k LPE |
-| 1133⭐ | 4 days ago | [CVE-2022-0847-DirtyPipe-Exploit](https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit) | A root exploit for CVE-2022-0847 (Dirty Pipe) |
-| 573⭐ | 6 days ago | [CVE-2022-23222](https://github.com/tr3ee/CVE-2022-23222) | CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation |
-| 360⭐ | 11 days ago | [CVE-2022-21907](https://github.com/ZZ-SOCMAP/CVE-2022-21907) | HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907 |
-| 377⭐ | 9 days ago | [CVE-2022-29464](https://github.com/hakivvi/CVE-2022-29464) | WSO2 RCE (CVE-2022-29464) exploit and writeup. |
-| 729⭐ | 15 hours ago | [CVE-2022-0847-DirtyPipe-Exploits](https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits) | A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability. |
-| 358⭐ | 35 days ago | [CVE-2022-40684](https://github.com/horizon3ai/CVE-2022-40684) | A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager |
-| 437⭐ | 15 days ago | [CVE-2022-25636](https://github.com/Bonfee/CVE-2022-25636) | CVE-2022-25636 |
-| 487⭐ | 9 days ago | [CVE-2022-2588](https://github.com/Markakd/CVE-2022-2588) | exploit for CVE-2022-2588 |
-| 497⭐ | 21 hours ago | [CVE-2022-0995](https://github.com/Bonfee/CVE-2022-0995) | CVE-2022-0995 exploit |
-| 415⭐ | 49 days ago | [CVE-2022-33679](https://github.com/Bdenneu/CVE-2022-33679) | One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html |
-| 387⭐ | 34 days ago | [CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197) | CobaltStrike <= 4.7.1 RCE |
-| 282⭐ | 69 days ago | [CVE-2022-0847](https://github.com/r1is/CVE-2022-0847) | CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe” |
-| 353⭐ | 10 days ago | [CVE-2022-21894](https://github.com/Wack0/CVE-2022-21894) | baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability |
-| 379⭐ | 49 days ago | [CVE-2022-0185](https://github.com/Crusaders-of-Rust/CVE-2022-0185) | CVE-2022-0185 |
-| 595⭐ | 6 hours ago | [CVE-2022-38694_unlock_bootloader](https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader) | This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692 |
-| 284⭐ | 6 days ago | [cve-2022-27255](https://github.com/infobyte/cve-2022-27255) |  |
-| 265⭐ | 147 days ago | [CVE-2022-39952](https://github.com/horizon3ai/CVE-2022-39952) | POC for CVE-2022-39952 |
-| 238⭐ | 6 days ago | [CVE-2022-20699](https://github.com/Audiobahn/CVE-2022-20699) | Cisco Anyconnect VPN unauth RCE (rwx stack) |
-| 219⭐ | 89 days ago | [CVE-2022-34918](https://github.com/veritas501/CVE-2022-34918) | CVE-2022-34918 netfilter nf_tables 本地提权 POC |
\ No newline at end of file
+| 461⭐ | 1676 days ago | [CVE-2022-21882](https://github.com/KaLendsi/CVE-2022-21882) | win32k LPE |
+| 1133⭐ | 1636 days ago | [CVE-2022-0847-DirtyPipe-Exploit](https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit) | A root exploit for CVE-2022-0847 (Dirty Pipe) |
+| 573⭐ | 1545 days ago | [CVE-2022-23222](https://github.com/tr3ee/CVE-2022-23222) | CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation |
+| 360⭐ | 1683 days ago | [CVE-2022-21907](https://github.com/ZZ-SOCMAP/CVE-2022-21907) | HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907 |
+| 377⭐ | 1586 days ago | [CVE-2022-29464](https://github.com/hakivvi/CVE-2022-29464) | WSO2 RCE (CVE-2022-29464) exploit and writeup. |
+| 358⭐ | 1417 days ago | [CVE-2022-40684](https://github.com/horizon3ai/CVE-2022-40684) | A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager |
+| 729⭐ | 1198 days ago | [CVE-2022-0847-DirtyPipe-Exploits](https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits) | A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability. |
+| 437⭐ | 1637 days ago | [CVE-2022-25636](https://github.com/Bonfee/CVE-2022-25636) | CVE-2022-25636 |
+| 487⭐ | 1275 days ago | [CVE-2022-2588](https://github.com/Markakd/CVE-2022-2588) | exploit for CVE-2022-2588 |
+| 415⭐ | 658 days ago | [CVE-2022-33679](https://github.com/Bdenneu/CVE-2022-33679) | One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html |
+| 497⭐ | 1617 days ago | [CVE-2022-0995](https://github.com/Bonfee/CVE-2022-0995) | CVE-2022-0995 exploit |
+| 387⭐ | 1405 days ago | [CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197) | CobaltStrike <= 4.7.1 RCE |
+| 282⭐ | 1305 days ago | [CVE-2022-0847](https://github.com/r1is/CVE-2022-0847) | CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe” |
+| 353⭐ | 1068 days ago | [CVE-2022-21894](https://github.com/Wack0/CVE-2022-21894) | baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability |
+| 379⭐ | 1588 days ago | [CVE-2022-0185](https://github.com/Crusaders-of-Rust/CVE-2022-0185) | CVE-2022-0185 |
+| 595⭐ | 442 days ago | [CVE-2022-38694_unlock_bootloader](https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader) | This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692 |
+| 284⭐ | 1461 days ago | [cve-2022-27255](https://github.com/infobyte/cve-2022-27255) |  |
+| 265⭐ | 1282 days ago | [CVE-2022-39952](https://github.com/horizon3ai/CVE-2022-39952) | POC for CVE-2022-39952 |
+| 238⭐ | 1665 days ago | [CVE-2022-20699](https://github.com/Audiobahn/CVE-2022-20699) | Cisco Anyconnect VPN unauth RCE (rwx stack) |
+| 235⭐ | 1379 days ago | [CVE-2022-30075](https://github.com/aaronsvk/CVE-2022-30075) | Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075) |
\ No newline at end of file
diff --git a/scripts/build_site.py b/scripts/build_site.py
index 3f34e13c5a1..c5fcb7c5a25 100644
--- a/scripts/build_site.py
+++ b/scripts/build_site.py
@@ -11,15 +11,11 @@ from urllib.parse import urlparse
 ROOT = Path(__file__).resolve().parents[1]
 DOCS_DIR = ROOT / "docs"
 BLACKLIST = ROOT / "blacklist.txt"
-README_PATH = ROOT / "README.md"
+TRENDING_INPUT = ROOT / "trending.json"
 CVE_OUTPUT = DOCS_DIR / "CVE_list.json"
 TRENDING_OUTPUT = DOCS_DIR / "trending_poc.json"
-TREND_ROW_RE = re.compile(
-    r"^\|\s*(?P<stars>\d+)\s*⭐\s*\|\s*(?P<updated>[^|]+)\|\s*"
-    r"\[(?P<name>[^\]]+)\]\((?P<url>[^)]+)\)\s*\|\s*(?P<desc>.*)\|$"
-)
-
-
+REPO_META = ROOT / "repo_meta.json"
+REPO_META_OUTPUT = DOCS_DIR / "repo_meta.json"
 def load_blacklist() -> set[str]:
     if not BLACKLIST.exists():
         return set()
@@ -30,25 +26,6 @@ def load_blacklist() -> set[str]:
     }
 
 
-def parse_trending_from_readme(readme_path: Path) -> List[Dict[str, str]]:
-    """Read the trending table the hot-CVEs job writes into README.md."""
-    if not readme_path.exists():
-        return []
-    rows: List[Dict[str, str]] = []
-    year: Optional[str] = None
-    for raw in readme_path.read_text(encoding="utf-8").splitlines():
-        line = raw.strip()
-        if line.startswith("## ") and line[3:].strip().isdigit():
-            year = line[3:].strip()
-            continue
-        match = TREND_ROW_RE.match(line)
-        if match and year:
-            row = match.groupdict()
-            row["year"] = year
-            rows.append(row)
-    return rows
-
-
 def normalise_block(text: str) -> str:
     text = text.replace("\r\n", "\n")
     text = re.sub(r"\n{2,}", "\n", text.strip())
@@ -129,10 +106,12 @@ def collect_links(block: str, *, blacklist: Optional[Collection[str]] = None) ->
     return links
 
 
-def build_cve_list(blacklist: Collection[str]) -> List[Dict[str, object]]:
+def build_cve_list(blacklist: Collection[str]) -> tuple[List[Dict[str, object]], int]:
     cve_entries = []
+    total = 0
 
     for md_path in sorted(ROOT.glob("[12][0-9][0-9][0-9]/CVE-*.md")):
+        total += 1
         content = md_path.read_text(encoding="utf-8")
         sections = parse_sections(content)
         description = normalise_block(sections.get("### Description", ""))
@@ -157,47 +136,41 @@ def build_cve_list(blacklist: Collection[str]) -> List[Dict[str, object]]:
             "poc": poc_entries,
         })
 
-    return cve_entries
+    return cve_entries, total
+
+
+def build_repo_meta(cve_entries: List[Dict[str, object]]) -> Dict[str, object]:
+    """Star count and last-push date for the repositories the index actually links."""
+    try:
+        stored = json.loads(REPO_META.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return {}
+    linked = {
+        repo_from_url(url)
+        for entry in cve_entries
+        for url in entry["poc"]
+        if repo_from_url(url)
+    }
+    return {name: value for name, value in stored.items() if name in linked}
 
 
 def build_trending(blacklist: Collection[str]) -> List[Dict[str, object]]:
-    rows = parse_trending_from_readme(README_PATH)
-    if not rows:
+    """The trending job's own output, minus anything the blacklist covers."""
+    try:
+        rows = json.loads(TRENDING_INPUT.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
         return []
-
-    by_year: Dict[int, List[Dict[str, object]]] = {}
-    for row in rows:
-        year_text = row.get("year") or ""
-        if not str(year_text).isdigit():
-            continue
-        year = int(year_text)
-        url = (row.get("url") or "").strip()
-        if url and is_blacklisted(url, blacklist):
-            continue
-        stars_text = str(row.get("stars") or "").strip()
-        stars = int(re.sub(r"\D", "", stars_text) or 0)
-        item = {
-            "year": year,
-            "stars": stars,
-            "updated": (row.get("updated") or "").strip(),
-            "name": (row.get("name") or "").strip(),
-            "url": url,
-            "desc": (row.get("desc") or "").strip(),
-        }
-        by_year.setdefault(year, []).append(item)
-
-    if not by_year:
-        return []
-
-    current_year = datetime.now(timezone.utc).year
-    target_year = current_year if current_year in by_year else max(by_year)
-    return by_year.get(target_year, [])
+    return [
+        row for row in rows
+        if row.get("url") and not is_blacklisted(str(row["url"]), blacklist)
+    ]
 
 
 def write_json(path: Path, data, *, indent: Optional[int] = None) -> None:
     path.parent.mkdir(parents=True, exist_ok=True)
     with path.open("w", encoding="utf-8") as handle:
-        json.dump(data, handle, ensure_ascii=False, indent=indent)
+        json.dump(data, handle, ensure_ascii=False, indent=indent,
+                  separators=None if indent else (",", ":"))
 
 
 def main() -> int:
@@ -206,20 +179,28 @@ def main() -> int:
     DOCS_DIR.mkdir(parents=True, exist_ok=True)
     blacklist = load_blacklist()
 
-    cve_payload = build_cve_list(blacklist)
+    cve_payload, total_cves = build_cve_list(blacklist)
     write_json(CVE_OUTPUT, cve_payload)
 
+    repo_meta = build_repo_meta(cve_payload)
+    write_json(REPO_META_OUTPUT, repo_meta)
+
     trending_items = build_trending(blacklist)
     write_json(
         TRENDING_OUTPUT,
         {
             "generated": datetime.now(timezone.utc).isoformat(),
+            "total_cves": total_cves,
+            "with_pocs": len(cve_payload),
             "items": trending_items,
         },
         indent=2,
     )
 
-    print(f"Wrote {CVE_OUTPUT.name} ({len(cve_payload)} CVEs) and {TRENDING_OUTPUT.name}")
+    print(
+        f"Wrote {CVE_OUTPUT.name} ({len(cve_payload)} of {total_cves} CVEs), "
+        f"{REPO_META_OUTPUT.name} ({len(repo_meta)} repositories) and {TRENDING_OUTPUT.name}"
+    )
     return 0
 
 
diff --git a/trending.json b/trending.json
new file mode 100644
index 00000000000..2b4e38e66a5
--- /dev/null
+++ b/trending.json
@@ -0,0 +1,902 @@
+[
+ {
+  "year": 2026,
+  "stars": 4056,
+  "name": "copy-fail-CVE-2026-31431",
+  "url": "https://github.com/theori-io/copy-fail-CVE-2026-31431",
+  "desc": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
+  "pushed": "2026-04-29T21:21:46Z",
+  "created": "2026-04-29T12:15:28Z"
+ },
+ {
+  "year": 2026,
+  "stars": 571,
+  "name": "cve_2026_31431",
+  "url": "https://github.com/rootsecdev/cve_2026_31431",
+  "desc": "Exploit POC for CVE_2026_31431",
+  "pushed": "2026-04-29T18:24:24Z",
+  "created": "2026-04-29T17:46:43Z"
+ },
+ {
+  "year": 2026,
+  "stars": 325,
+  "name": "CVE-2026-54121",
+  "url": "https://github.com/aniqfakhrul/CVE-2026-54121",
+  "desc": "Certighost POC",
+  "pushed": "2026-07-28T15:44:50Z",
+  "created": "2026-07-23T18:54:34Z"
+ },
+ {
+  "year": 2026,
+  "stars": 531,
+  "name": "cve-2026-41940-PoC",
+  "url": "https://github.com/lanicer/cve-2026-41940-PoC",
+  "desc": "A cPanel and WHM authentication bypassing tool",
+  "pushed": "2026-08-20T10:15:12Z",
+  "created": "2026-08-19T12:46:46Z"
+ },
+ {
+  "year": 2026,
+  "stars": 235,
+  "name": "CVE-2026-43499-popsicle",
+  "url": "https://github.com/x-spy/CVE-2026-43499-popsicle",
+  "desc": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
+  "pushed": "2026-07-15T22:46:59Z",
+  "created": "2026-07-12T10:15:03Z"
+ },
+ {
+  "year": 2026,
+  "stars": 212,
+  "name": "CVE-2026-41089",
+  "url": "https://github.com/0xABCD01/CVE-2026-41089",
+  "desc": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
+  "pushed": "2026-06-02T08:30:55Z",
+  "created": "2026-06-01T04:22:29Z"
+ },
+ {
+  "year": 2026,
+  "stars": 260,
+  "name": "CVE-2026-21858",
+  "url": "https://github.com/Chocapikk/CVE-2026-21858",
+  "desc": "n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)",
+  "pushed": "2026-03-26T13:11:41Z",
+  "created": "2026-01-07T19:32:42Z"
+ },
+ {
+  "year": 2026,
+  "stars": 262,
+  "name": "CVE-2026-40369-EXPLOIT",
+  "url": "https://github.com/orinimron123/CVE-2026-40369-EXPLOIT",
+  "desc": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
+  "pushed": "2026-05-18T21:29:59Z",
+  "created": "2026-05-13T20:56:15Z"
+ },
+ {
+  "year": 2026,
+  "stars": 207,
+  "name": "CVE-2026-24061",
+  "url": "https://github.com/SafeBreach-Labs/CVE-2026-24061",
+  "desc": "Exploitation of CVE-2026-24061",
+  "pushed": "2026-01-22T19:37:20Z",
+  "created": "2026-01-22T18:30:17Z"
+ },
+ {
+  "year": 2026,
+  "stars": 154,
+  "name": "CVE-2026-43499",
+  "url": "https://github.com/MobiusM/CVE-2026-43499",
+  "desc": "CVE-2026-43499 PoC",
+  "pushed": "2026-06-27T05:04:04Z",
+  "created": "2026-06-27T04:09:11Z"
+ },
+ {
+  "year": 2026,
+  "stars": 824,
+  "name": "CVE-2026-24061",
+  "url": "https://github.com/jacubes/CVE-2026-24061",
+  "desc": "CVE-2026-24061 exploit PoC",
+  "pushed": "2026-08-20T10:06:17Z",
+  "created": "2026-03-08T11:25:39Z"
+ },
+ {
+  "year": 2026,
+  "stars": 146,
+  "name": "CVE-2026-62911",
+  "url": "https://github.com/hypnguyen1209/CVE-2026-62911",
+  "desc": "POC pre-auth RCE on Exchange",
+  "pushed": "2026-08-22T04:49:54Z",
+  "created": "2026-08-22T04:49:33Z"
+ },
+ {
+  "year": 2026,
+  "stars": 79,
+  "name": "CVE-2026-75604-poc",
+  "url": "https://github.com/rafabd1/CVE-2026-75604-poc",
+  "desc": "CVE-2026-75604 Next.js Windows RCE poc",
+  "pushed": "2026-08-28T02:53:24Z",
+  "created": "2026-08-25T19:06:37Z"
+ },
+ {
+  "year": 2026,
+  "stars": 128,
+  "name": "CVE-2026-20817",
+  "url": "https://github.com/oxfemale/CVE-2026-20817",
+  "desc": "Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service.",
+  "pushed": "2026-02-19T13:37:06Z",
+  "created": "2026-02-18T13:56:17Z"
+ },
+ {
+  "year": 2026,
+  "stars": 100,
+  "name": "CVE-2026-42980-POC",
+  "url": "https://github.com/G4sp4rCS/CVE-2026-42980-POC",
+  "desc": "CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH",
+  "pushed": "2026-07-07T03:53:22Z",
+  "created": "2026-07-07T03:52:26Z"
+ },
+ {
+  "year": 2026,
+  "stars": 111,
+  "name": "CVE-2026-31431-Advanced-Exploit",
+  "url": "https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit",
+  "desc": "CVE-2026-31431 纯文件利用",
+  "pushed": "2026-04-30T16:24:17Z",
+  "created": "2026-04-30T02:55:03Z"
+ },
+ {
+  "year": 2026,
+  "stars": 119,
+  "name": "CVE-2026-41651",
+  "url": "https://github.com/Vozec/CVE-2026-41651",
+  "desc": "",
+  "pushed": "2026-04-23T13:55:33Z",
+  "created": "2026-04-23T08:57:29Z"
+ },
+ {
+  "year": 2026,
+  "stars": 18,
+  "name": "CVE-2026-43499-Poc-Analysis",
+  "url": "https://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis",
+  "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
+  "pushed": "2026-07-14T16:28:49Z",
+  "created": "2026-07-14T17:24:44Z"
+ },
+ {
+  "year": 2026,
+  "stars": 63,
+  "name": "CVE-2026-45504",
+  "url": "https://github.com/hawktrace/CVE-2026-45504",
+  "desc": "CVE-2026-45504 Microsoft Exchange File Read",
+  "pushed": "2026-06-24T01:45:46Z",
+  "created": "2026-06-24T01:05:34Z"
+ },
+ {
+  "year": 2026,
+  "stars": 80,
+  "name": "CVE-2026-43499-Poc-Analysis",
+  "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
+  "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
+  "pushed": "2026-07-30T11:28:07Z",
+  "created": "2026-07-14T14:21:27Z"
+ },
+ {
+  "year": 2025,
+  "stars": 1430,
+  "name": "CVE-2025-55182",
+  "url": "https://github.com/msanft/CVE-2025-55182",
+  "desc": "Explanation and full RCE PoC for CVE-2025-55182",
+  "pushed": "2025-12-08T13:51:04Z",
+  "created": "2025-12-04T11:49:55Z"
+ },
+ {
+  "year": 2025,
+  "stars": 793,
+  "name": "CVE-2025-55182-research",
+  "url": "https://github.com/ejpir/CVE-2025-55182-research",
+  "desc": "CVE-2025-55182 POC",
+  "pushed": "2025-12-08T21:21:26Z",
+  "created": "2025-12-03T21:16:22Z"
+ },
+ {
+  "year": 2025,
+  "stars": 715,
+  "name": "CVE-2025-33073",
+  "url": "https://github.com/mverschu/CVE-2025-33073",
+  "desc": "PoC Exploit for the NTLM reflection SMB flaw.",
+  "pushed": "2026-02-18T09:15:40Z",
+  "created": "2025-06-13T12:15:14Z"
+ },
+ {
+  "year": 2025,
+  "stars": 529,
+  "name": "CVE-2025-32463_chwoot",
+  "url": "https://github.com/pr0v3rbs/CVE-2025-32463_chwoot",
+  "desc": "Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463",
+  "pushed": "2025-11-19T13:30:29Z",
+  "created": "2025-07-01T11:26:15Z"
+ },
+ {
+  "year": 2025,
+  "stars": 475,
+  "name": "CVE-2025-32463",
+  "url": "https://github.com/kh4sh3i/CVE-2025-32463",
+  "desc": "Local Privilege Escalation to Root via Sudo chroot in Linux",
+  "pushed": "2025-07-02T08:04:44Z",
+  "created": "2025-07-02T07:20:20Z"
+ },
+ {
+  "year": 2025,
+  "stars": 268,
+  "name": "CVE-2025-48799",
+  "url": "https://github.com/Wh04m1001/CVE-2025-48799",
+  "desc": "",
+  "pushed": "2025-07-08T19:35:55Z",
+  "created": "2025-07-08T15:26:04Z"
+ },
+ {
+  "year": 2025,
+  "stars": 315,
+  "name": "CVE-2025-53770-Exploit",
+  "url": "https://github.com/soltanali0/CVE-2025-53770-Exploit",
+  "desc": "SharePoint WebPart Injection Exploit Tool",
+  "pushed": "2025-11-28T20:11:11Z",
+  "created": "2025-07-21T13:48:37Z"
+ },
+ {
+  "year": 2025,
+  "stars": 316,
+  "name": "CVE-2025-55182",
+  "url": "https://github.com/emredavut/CVE-2025-55182",
+  "desc": "RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478",
+  "pushed": "2025-12-06T01:27:19Z",
+  "created": "2025-12-06T00:36:16Z"
+ },
+ {
+  "year": 2025,
+  "stars": 1058,
+  "name": "React2Shell-CVE-2025-55182-original-poc",
+  "url": "https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc",
+  "desc": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
+  "pushed": "2025-12-05T08:56:15Z",
+  "created": "2025-12-05T08:00:07Z"
+ },
+ {
+  "year": 2025,
+  "stars": 408,
+  "name": "CVE-2025-24071_PoC",
+  "url": "https://github.com/0x6rss/CVE-2025-24071_PoC",
+  "desc": "CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File",
+  "pushed": "2025-03-20T21:22:23Z",
+  "created": "2025-03-16T20:10:19Z"
+ },
+ {
+  "year": 2025,
+  "stars": 215,
+  "name": "CVE-2025-32023",
+  "url": "https://github.com/leesh3288/CVE-2025-32023",
+  "desc": "PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 \"Zerodeo\"",
+  "pushed": "2025-07-06T18:58:01Z",
+  "created": "2025-07-06T18:09:11Z"
+ },
+ {
+  "year": 2025,
+  "stars": 385,
+  "name": "ColorOS-CVE-2025-10184",
+  "url": "https://github.com/yuuouu/ColorOS-CVE-2025-10184",
+  "desc": "ColorOS短信漏洞，以及用户自救方案",
+  "pushed": "2025-10-15T11:32:43Z",
+  "created": "2025-09-24T11:48:03Z"
+ },
+ {
+  "year": 2025,
+  "stars": 282,
+  "name": "CVE-2025-55182-advanced-scanner-",
+  "url": "https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-",
+  "desc": "",
+  "pushed": "2025-12-06T19:52:21Z",
+  "created": "2025-12-06T14:36:55Z"
+ },
+ {
+  "year": 2025,
+  "stars": 431,
+  "name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+  "url": "https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+  "desc": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.",
+  "pushed": "2025-12-16T03:18:16Z",
+  "created": "2025-12-04T13:13:33Z"
+ },
+ {
+  "year": 2025,
+  "stars": 197,
+  "name": "POC-CVE-2025-24813",
+  "url": "https://github.com/absholi7ly/POC-CVE-2025-24813",
+  "desc": "his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.",
+  "pushed": "2025-03-14T07:57:27Z",
+  "created": "2025-03-14T07:36:58Z"
+ },
+ {
+  "year": 2025,
+  "stars": 233,
+  "name": "CVE-2025-21333-POC",
+  "url": "https://github.com/MrAle98/CVE-2025-21333-POC",
+  "desc": "POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY",
+  "pushed": "2025-04-12T22:14:58Z",
+  "created": "2025-02-27T12:36:55Z"
+ },
+ {
+  "year": 2025,
+  "stars": 190,
+  "name": "RSC-Detect-CVE-2025-55182",
+  "url": "https://github.com/alptexans/RSC-Detect-CVE-2025-55182",
+  "desc": "RSC Detect CVE 2025 55182",
+  "pushed": "2026-02-25T15:37:19Z",
+  "created": "2026-02-25T15:36:22Z"
+ },
+ {
+  "year": 2025,
+  "stars": 196,
+  "name": "CVE-2025-30208-EXP",
+  "url": "https://github.com/ThumpBo/CVE-2025-30208-EXP",
+  "desc": "CVE-2025-30208-EXP",
+  "pushed": "2025-04-01T07:52:49Z",
+  "created": "2025-03-26T15:42:31Z"
+ },
+ {
+  "year": 2025,
+  "stars": 143,
+  "name": "CVE-2025-32433",
+  "url": "https://github.com/ProDefense/CVE-2025-32433",
+  "desc": "CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2",
+  "pushed": "2025-08-02T18:24:05Z",
+  "created": "2025-04-18T00:35:11Z"
+ },
+ {
+  "year": 2025,
+  "stars": 161,
+  "name": "CVE-2025-21756",
+  "url": "https://github.com/hoefler02/CVE-2025-21756",
+  "desc": "Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!",
+  "pushed": "2025-06-05T21:32:05Z",
+  "created": "2025-04-18T14:22:15Z"
+ },
+ {
+  "year": 2024,
+  "stars": 2457,
+  "name": "CVE-2024-1086",
+  "url": "https://github.com/Notselwyn/CVE-2024-1086",
+  "desc": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.",
+  "pushed": "2024-04-17T16:09:54Z",
+  "created": "2024-03-20T21:16:41Z"
+ },
+ {
+  "year": 2024,
+  "stars": 693,
+  "name": "CVE-2024-38063",
+  "url": "https://github.com/ynwarcs/CVE-2024-38063",
+  "desc": "poc for CVE-2024-38063 (RCE in tcpip.sys)",
+  "pushed": "2024-08-27T12:22:39Z",
+  "created": "2024-08-24T18:25:46Z"
+ },
+ {
+  "year": 2024,
+  "stars": 496,
+  "name": "cve-2024-6387-poc",
+  "url": "https://github.com/zgzhang/cve-2024-6387-poc",
+  "desc": "a signal handler race condition in OpenSSH's server (sshd)",
+  "pushed": "2024-07-01T10:54:02Z",
+  "created": "2024-07-01T10:55:29Z"
+ },
+ {
+  "year": 2024,
+  "stars": 520,
+  "name": "CVE-2024-49113",
+  "url": "https://github.com/SafeBreach-Labs/CVE-2024-49113",
+  "desc": "LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113",
+  "pushed": "2025-01-02T16:07:23Z",
+  "created": "2025-01-01T15:48:38Z"
+ },
+ {
+  "year": 2024,
+  "stars": 527,
+  "name": "CVE-2024-6387_Check",
+  "url": "https://github.com/xaitax/CVE-2024-6387_Check",
+  "desc": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH",
+  "pushed": "2026-05-29T11:44:40Z",
+  "created": "2024-07-01T20:33:20Z"
+ },
+ {
+  "year": 2024,
+  "stars": 224,
+  "name": "CVE-2024-38077",
+  "url": "https://github.com/qi4L/CVE-2024-38077",
+  "desc": "RDL的堆溢出导致的RCE",
+  "pushed": "2024-08-14T04:43:05Z",
+  "created": "2024-08-09T05:00:44Z"
+ },
+ {
+  "year": 2024,
+  "stars": 335,
+  "name": "CVE-2024-21338",
+  "url": "https://github.com/hakaioffsec/CVE-2024-21338",
+  "desc": "Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.",
+  "pushed": "2024-04-16T21:00:14Z",
+  "created": "2024-04-13T05:53:02Z"
+ },
+ {
+  "year": 2024,
+  "stars": 380,
+  "name": "cve-2024-6387-poc",
+  "url": "https://github.com/acrono/cve-2024-6387-poc",
+  "desc": "32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc",
+  "pushed": "2024-07-01T12:25:01Z",
+  "created": "2024-07-01T12:16:21Z"
+ },
+ {
+  "year": 2024,
+  "stars": 330,
+  "name": "CVE-2024-0044",
+  "url": "https://github.com/0xbinder/CVE-2024-0044",
+  "desc": "CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13",
+  "pushed": "2024-12-02T06:29:52Z",
+  "created": "2024-06-18T12:30:53Z"
+ },
+ {
+  "year": 2024,
+  "stars": 321,
+  "name": "CVE-2024-4577",
+  "url": "https://github.com/watchtowrlabs/CVE-2024-4577",
+  "desc": "PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC",
+  "pushed": "2024-06-22T15:13:52Z",
+  "created": "2024-06-07T09:52:54Z"
+ },
+ {
+  "year": 2024,
+  "stars": 289,
+  "name": "CVE-2024-30088",
+  "url": "https://github.com/tykawaii98/CVE-2024-30088",
+  "desc": "",
+  "pushed": "2024-07-31T19:11:55Z",
+  "created": "2024-06-24T10:37:26Z"
+ },
+ {
+  "year": 2024,
+  "stars": 278,
+  "name": "CVE-2024-21413",
+  "url": "https://github.com/CMNatic/CVE-2024-21413",
+  "desc": "CVE-2024-21413 PoC for THM Lab",
+  "pushed": "2024-03-13T02:44:28Z",
+  "created": "2024-02-17T14:52:52Z"
+ },
+ {
+  "year": 2024,
+  "stars": 769,
+  "name": "CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability",
+  "url": "https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability",
+  "desc": "Microsoft-Outlook-Remote-Code-Execution-Vulnerability",
+  "pushed": "2024-02-19T20:00:35Z",
+  "created": "2024-02-16T15:17:59Z"
+ },
+ {
+  "year": 2024,
+  "stars": 271,
+  "name": "CVE-2024-49138-POC",
+  "url": "https://github.com/MrAle98/CVE-2024-49138-POC",
+  "desc": "POC exploit for CVE-2024-49138",
+  "pushed": "2025-02-14T22:04:41Z",
+  "created": "2025-01-15T00:43:37Z"
+ },
+ {
+  "year": 2024,
+  "stars": 194,
+  "name": "CVE-2024-6387",
+  "url": "https://github.com/Karmakstylez/CVE-2024-6387",
+  "desc": "Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)",
+  "pushed": "2024-08-22T08:50:25Z",
+  "created": "2024-07-08T11:27:49Z"
+ },
+ {
+  "year": 2024,
+  "stars": 9,
+  "name": "CVE-2024-38077-POC",
+  "url": "https://github.com/SecStarBot/CVE-2024-38077-POC",
+  "desc": "",
+  "pushed": "2024-08-09T01:19:08Z",
+  "created": "2024-08-09T01:24:59Z"
+ },
+ {
+  "year": 2024,
+  "stars": 235,
+  "name": "CVE_2024_30078_POC_WIFI",
+  "url": "https://github.com/blkph0x/CVE_2024_30078_POC_WIFI",
+  "desc": "basic concept for the latest windows wifi driver CVE",
+  "pushed": "2024-10-31T14:05:40Z",
+  "created": "2024-06-20T05:58:45Z"
+ },
+ {
+  "year": 2024,
+  "stars": 180,
+  "name": "CVE-2024-25600",
+  "url": "https://github.com/Chocapikk/CVE-2024-25600",
+  "desc": "Unauthenticated Remote Code Execution – Bricks <= 1.9.6",
+  "pushed": "2024-02-25T21:50:09Z",
+  "created": "2024-02-20T20:16:09Z"
+ },
+ {
+  "year": 2024,
+  "stars": 217,
+  "name": "CVE-2024-21111",
+  "url": "https://github.com/mansk1es/CVE-2024-21111",
+  "desc": "Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability",
+  "pushed": "2024-05-09T16:39:55Z",
+  "created": "2024-04-22T07:05:04Z"
+ },
+ {
+  "year": 2024,
+  "stars": 136,
+  "name": "CVE-2024-7479_CVE-2024-7481",
+  "url": "https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481",
+  "desc": "TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.",
+  "pushed": "2024-12-22T21:34:26Z",
+  "created": "2024-09-29T10:58:15Z"
+ },
+ {
+  "year": 2023,
+  "stars": 782,
+  "name": "CVE-2023-38831-winrar-exploit",
+  "url": "https://github.com/b1tg/CVE-2023-38831-winrar-exploit",
+  "desc": "CVE-2023-38831 winrar exploit generator",
+  "pushed": "2023-11-26T06:46:44Z",
+  "created": "2023-08-25T09:44:08Z"
+ },
+ {
+  "year": 2023,
+  "stars": 382,
+  "name": "CVE-2023-32233",
+  "url": "https://github.com/Liuk3r/CVE-2023-32233",
+  "desc": "CVE-2023-32233: Linux内核中的安全漏洞",
+  "pushed": "2023-05-16T04:34:16Z",
+  "created": "2023-05-16T03:06:40Z"
+ },
+ {
+  "year": 2023,
+  "stars": 506,
+  "name": "Windows_LPE_AFD_CVE-2023-21768",
+  "url": "https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768",
+  "desc": "LPE exploit for CVE-2023-21768",
+  "pushed": "2023-07-10T16:35:49Z",
+  "created": "2023-03-07T23:00:27Z"
+ },
+ {
+  "year": 2023,
+  "stars": 418,
+  "name": "CVE-2023-0386",
+  "url": "https://github.com/xkaneiki/CVE-2023-0386",
+  "desc": "CVE-2023-0386在ubuntu22.04上的提权",
+  "pushed": "2023-06-13T08:58:53Z",
+  "created": "2023-05-05T03:02:13Z"
+ },
+ {
+  "year": 2023,
+  "stars": 116,
+  "name": "CVE-2023-21839",
+  "url": "https://github.com/ASkyeye/CVE-2023-21839",
+  "desc": "Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)",
+  "pushed": "2026-08-11T13:17:49Z",
+  "created": "2023-02-24T13:54:42Z"
+ },
+ {
+  "year": 2023,
+  "stars": 328,
+  "name": "CVE-2023-21752",
+  "url": "https://github.com/Wh04m1001/CVE-2023-21752",
+  "desc": "",
+  "pushed": "2023-01-13T09:01:20Z",
+  "created": "2023-01-10T15:59:26Z"
+ },
+ {
+  "year": 2023,
+  "stars": 393,
+  "name": "CVE-2023-4911",
+  "url": "https://github.com/leesh3288/CVE-2023-4911",
+  "desc": "PoC for CVE-2023-4911",
+  "pushed": "2023-10-04T14:16:36Z",
+  "created": "2023-10-04T14:12:16Z"
+ },
+ {
+  "year": 2023,
+  "stars": 283,
+  "name": "CVE-2023-21608",
+  "url": "https://github.com/hacksysteam/CVE-2023-21608",
+  "desc": "Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit",
+  "pushed": "2023-12-05T12:21:02Z",
+  "created": "2023-01-30T12:57:48Z"
+ },
+ {
+  "year": 2023,
+  "stars": 317,
+  "name": "CVE-2023-4863",
+  "url": "https://github.com/mistymntncop/CVE-2023-4863",
+  "desc": "",
+  "pushed": "2023-12-18T04:25:00Z",
+  "created": "2023-09-21T05:22:51Z"
+ },
+ {
+  "year": 2023,
+  "stars": 242,
+  "name": "CVE-2023-36874",
+  "url": "https://github.com/Wh04m1001/CVE-2023-36874",
+  "desc": "",
+  "pushed": "2023-08-23T16:46:53Z",
+  "created": "2023-08-23T12:07:40Z"
+ },
+ {
+  "year": 2023,
+  "stars": 247,
+  "name": "CVE-2023-44487",
+  "url": "https://github.com/bcdannyboy/CVE-2023-44487",
+  "desc": "Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487",
+  "pushed": "2024-01-08T11:12:08Z",
+  "created": "2023-10-10T14:20:42Z"
+ },
+ {
+  "year": 2023,
+  "stars": 245,
+  "name": "CVE-2023-7028",
+  "url": "https://github.com/Vozec/CVE-2023-7028",
+  "desc": "This repository presents a proof-of-concept of CVE-2023-7028",
+  "pushed": "2024-01-13T13:50:20Z",
+  "created": "2024-01-12T18:29:27Z"
+ },
+ {
+  "year": 2023,
+  "stars": 228,
+  "name": "CVE-2023-3519",
+  "url": "https://github.com/BishopFox/CVE-2023-3519",
+  "desc": "RCE exploit for CVE-2023-3519",
+  "pushed": "2023-08-23T16:27:28Z",
+  "created": "2023-07-21T20:17:43Z"
+ },
+ {
+  "year": 2023,
+  "stars": 169,
+  "name": "CVE-2023-36745",
+  "url": "https://github.com/N1k0la-T/CVE-2023-36745",
+  "desc": "",
+  "pushed": "2023-10-29T11:12:26Z",
+  "created": "2023-10-23T19:06:36Z"
+ },
+ {
+  "year": 2023,
+  "stars": 346,
+  "name": "CVE-2023-23397-POC-Powershell",
+  "url": "https://github.com/api0cradle/CVE-2023-23397-POC-Powershell",
+  "desc": "",
+  "pushed": "2023-03-17T07:47:40Z",
+  "created": "2023-03-16T19:43:39Z"
+ },
+ {
+  "year": 2023,
+  "stars": 228,
+  "name": "CVE-2023-20887",
+  "url": "https://github.com/sinsinology/CVE-2023-20887",
+  "desc": "VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)",
+  "pushed": "2023-06-13T14:39:17Z",
+  "created": "2023-06-13T13:17:23Z"
+ },
+ {
+  "year": 2023,
+  "stars": 183,
+  "name": "CVE-2023-28252",
+  "url": "https://github.com/fortra/CVE-2023-28252",
+  "desc": "",
+  "pushed": "2023-07-10T16:57:44Z",
+  "created": "2023-06-27T12:22:05Z"
+ },
+ {
+  "year": 2023,
+  "stars": 136,
+  "name": "CVE-2023-2640-CVE-2023-32629",
+  "url": "https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629",
+  "desc": "GameOver(lay) Ubuntu Privilege Escalation",
+  "pushed": "2023-10-09T22:44:21Z",
+  "created": "2023-10-09T22:02:42Z"
+ },
+ {
+  "year": 2023,
+  "stars": 241,
+  "name": "Weblogic-CVE-2023-21839",
+  "url": "https://github.com/DXask88MA/Weblogic-CVE-2023-21839",
+  "desc": "",
+  "pushed": "2023-02-26T06:43:18Z",
+  "created": "2023-02-21T16:08:56Z"
+ },
+ {
+  "year": 2023,
+  "stars": 207,
+  "name": "CVE-2023-46747-RCE",
+  "url": "https://github.com/W01fh4cker/CVE-2023-46747-RCE",
+  "desc": "exploit for f5-big-ip RCE cve-2023-46747",
+  "pushed": "2024-10-20T10:27:37Z",
+  "created": "2023-11-01T09:31:05Z"
+ },
+ {
+  "year": 2022,
+  "stars": 461,
+  "name": "CVE-2022-21882",
+  "url": "https://github.com/KaLendsi/CVE-2022-21882",
+  "desc": "win32k LPE",
+  "pushed": "2022-01-27T04:18:18Z",
+  "created": "2022-01-27T03:44:10Z"
+ },
+ {
+  "year": 2022,
+  "stars": 1133,
+  "name": "CVE-2022-0847-DirtyPipe-Exploit",
+  "url": "https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit",
+  "desc": "A root exploit for CVE-2022-0847 (Dirty Pipe)",
+  "pushed": "2022-03-08T06:20:05Z",
+  "created": "2022-03-07T18:55:20Z"
+ },
+ {
+  "year": 2022,
+  "stars": 573,
+  "name": "CVE-2022-23222",
+  "url": "https://github.com/tr3ee/CVE-2022-23222",
+  "desc": "CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation",
+  "pushed": "2022-06-07T03:41:13Z",
+  "created": "2022-06-07T03:20:23Z"
+ },
+ {
+  "year": 2022,
+  "stars": 360,
+  "name": "CVE-2022-21907",
+  "url": "https://github.com/ZZ-SOCMAP/CVE-2022-21907",
+  "desc": "HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907",
+  "pushed": "2022-01-20T02:07:59Z",
+  "created": "2022-01-17T02:28:50Z"
+ },
+ {
+  "year": 2022,
+  "stars": 377,
+  "name": "CVE-2022-29464",
+  "url": "https://github.com/hakivvi/CVE-2022-29464",
+  "desc": "WSO2 RCE (CVE-2022-29464) exploit and writeup.",
+  "pushed": "2022-04-27T05:52:43Z",
+  "created": "2022-04-20T21:23:52Z"
+ },
+ {
+  "year": 2022,
+  "stars": 358,
+  "name": "CVE-2022-40684",
+  "url": "https://github.com/horizon3ai/CVE-2022-40684",
+  "desc": "A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager",
+  "pushed": "2022-10-13T15:25:00Z",
+  "created": "2022-10-13T14:24:12Z"
+ },
+ {
+  "year": 2022,
+  "stars": 729,
+  "name": "CVE-2022-0847-DirtyPipe-Exploits",
+  "url": "https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits",
+  "desc": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.",
+  "pushed": "2023-05-20T05:55:45Z",
+  "created": "2022-03-12T20:57:24Z"
+ },
+ {
+  "year": 2022,
+  "stars": 437,
+  "name": "CVE-2022-25636",
+  "url": "https://github.com/Bonfee/CVE-2022-25636",
+  "desc": "CVE-2022-25636",
+  "pushed": "2022-03-07T17:18:19Z",
+  "created": "2022-03-07T13:38:41Z"
+ },
+ {
+  "year": 2022,
+  "stars": 487,
+  "name": "CVE-2022-2588",
+  "url": "https://github.com/Markakd/CVE-2022-2588",
+  "desc": "exploit for CVE-2022-2588",
+  "pushed": "2023-03-04T05:52:28Z",
+  "created": "2022-08-11T06:01:24Z"
+ },
+ {
+  "year": 2022,
+  "stars": 415,
+  "name": "CVE-2022-33679",
+  "url": "https://github.com/Bdenneu/CVE-2022-33679",
+  "desc": "One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html",
+  "pushed": "2024-11-10T17:21:28Z",
+  "created": "2022-11-02T18:38:01Z"
+ },
+ {
+  "year": 2022,
+  "stars": 497,
+  "name": "CVE-2022-0995",
+  "url": "https://github.com/Bonfee/CVE-2022-0995",
+  "desc": "CVE-2022-0995 exploit",
+  "pushed": "2022-03-27T09:07:01Z",
+  "created": "2022-03-26T21:46:09Z"
+ },
+ {
+  "year": 2022,
+  "stars": 387,
+  "name": "CVE-2022-39197",
+  "url": "https://github.com/its-arun/CVE-2022-39197",
+  "desc": "CobaltStrike <= 4.7.1 RCE",
+  "pushed": "2022-10-25T05:32:54Z",
+  "created": "2022-10-14T11:46:01Z"
+ },
+ {
+  "year": 2022,
+  "stars": 282,
+  "name": "CVE-2022-0847",
+  "url": "https://github.com/r1is/CVE-2022-0847",
+  "desc": "CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”",
+  "pushed": "2023-02-02T02:17:30Z",
+  "created": "2022-03-07T18:36:50Z"
+ },
+ {
+  "year": 2022,
+  "stars": 353,
+  "name": "CVE-2022-21894",
+  "url": "https://github.com/Wack0/CVE-2022-21894",
+  "desc": "baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability",
+  "pushed": "2023-09-27T06:44:27Z",
+  "created": "2022-08-09T15:53:48Z"
+ },
+ {
+  "year": 2022,
+  "stars": 379,
+  "name": "CVE-2022-0185",
+  "url": "https://github.com/Crusaders-of-Rust/CVE-2022-0185",
+  "desc": "CVE-2022-0185",
+  "pushed": "2022-04-25T04:11:33Z",
+  "created": "2022-01-19T06:19:38Z"
+ },
+ {
+  "year": 2022,
+  "stars": 595,
+  "name": "CVE-2022-38694_unlock_bootloader",
+  "url": "https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader",
+  "desc": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692",
+  "pushed": "2025-06-14T16:55:26Z",
+  "created": "2023-06-10T08:31:26Z"
+ },
+ {
+  "year": 2022,
+  "stars": 284,
+  "name": "cve-2022-27255",
+  "url": "https://github.com/infobyte/cve-2022-27255",
+  "desc": "",
+  "pushed": "2022-08-30T13:23:51Z",
+  "created": "2022-07-06T17:29:04Z"
+ },
+ {
+  "year": 2022,
+  "stars": 265,
+  "name": "CVE-2022-39952",
+  "url": "https://github.com/horizon3ai/CVE-2022-39952",
+  "desc": "POC for CVE-2022-39952",
+  "pushed": "2023-02-25T08:52:03Z",
+  "created": "2023-02-20T15:12:33Z"
+ },
+ {
+  "year": 2022,
+  "stars": 238,
+  "name": "CVE-2022-20699",
+  "url": "https://github.com/Audiobahn/CVE-2022-20699",
+  "desc": "Cisco Anyconnect VPN unauth RCE (rwx stack)",
+  "pushed": "2022-02-07T15:55:03Z",
+  "created": "2022-02-07T15:53:21Z"
+ },
+ {
+  "year": 2022,
+  "stars": 235,
+  "name": "CVE-2022-30075",
+  "url": "https://github.com/aaronsvk/CVE-2022-30075",
+  "desc": "Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)",
+  "pushed": "2022-11-20T03:03:53Z",
+  "created": "2022-06-07T23:26:47Z"
+ }
+]