From 577652fb467f902ea83be3ad173d3dcdb9c7fd2e Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Mon, 19 Oct 2026 01:11:07 +0000 Subject: [PATCH] Trending CVEs update 2026-10-19 01:11 :robot: --- README.md | 22 +++++++------- index/trending.json | 74 ++++++++++++++++++++++----------------------- 2 files changed, 48 insertions(+), 48 deletions(-) diff --git a/README.md b/README.md index 223f0378c09..6ffac542415 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-19%20Oct%202026%2000%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610190007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C081-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C237-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610190007)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-19%20Oct%202026%2001%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610190107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C081-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C237-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610190107)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,22 +14,22 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 33m ago | [InfinityCore-Android-CVE-2026-97941](https://github.com/ylh440104/InfinityCore-Android-CVE-2026-97941) | Android/ARM64 port | -| 0⭐ | 2h ago | KEV [CVE-2025-3248-CTF-Lab](https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab) | Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경 | -| 0⭐ | 3h ago | [CVE-2026-104736](https://github.com/murrez/CVE-2026-104736) | PoC for CVE-2026-104736 - LearnPress ≤4.4.10 unauthenticated PHP object injection via checkout-email… | -| 0⭐ | 4h ago | [mariadb-cve-2026-92262](https://github.com/SeanDishman/mariadb-cve-2026-92262) | PoC for CVE-2026-92262, CVE-2026-85746, CVE-2026-85748 against MariaDB 13.0.1 | -| 0⭐ | 6h ago | [CVE-2026-53787-poc](https://github.com/MRdark-ops/CVE-2026-53787-poc) | CVE-2026-53787 Amasty Order Attribute (AOA) file upload exploit, modified to support the upload of HTML files… | -| 0⭐ | 9h ago | [CVE-2020-36847](https://github.com/K52-ai/CVE-2020-36847) | PoC for CVE-2020-36847: unauthenticated file upload to RCE in WordPress Simple File List <=4.2.2. Uploads PHP… | -| 0⭐ | 10h ago | [CVE-2024-25600](https://github.com/K52-ai/CVE-2024-25600) | PoC for CVE-2024-25600: unauthenticated RCE in WordPress Bricks Builder <=1.9.6. Extracts the render_element… | -| 0⭐ | 10h ago | [CVE-2026-99999](https://github.com/01luyicheng/CVE-2026-99999) | CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS… | -| 1⭐ | 16h ago | [CVE-2025-6440-BypassExt](https://github.com/0xCyp1337/CVE-2025-6440-BypassExt) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | +| 0⭐ | 1h ago | [InfinityCore-Android-CVE-2026-97941](https://github.com/ylh440104/InfinityCore-Android-CVE-2026-97941) | Android/ARM64 port | +| 0⭐ | 3h ago | KEV [CVE-2025-3248-CTF-Lab](https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab) | Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경 | +| 0⭐ | 4h ago | [CVE-2026-104736](https://github.com/murrez/CVE-2026-104736) | PoC for CVE-2026-104736 - LearnPress ≤4.4.10 unauthenticated PHP object injection via checkout-email… | +| 0⭐ | 5h ago | [mariadb-cve-2026-92262](https://github.com/SeanDishman/mariadb-cve-2026-92262) | PoC for CVE-2026-92262, CVE-2026-85746, CVE-2026-85748 against MariaDB 13.0.1 | +| 0⭐ | 7h ago | [CVE-2026-53787-poc](https://github.com/MRdark-ops/CVE-2026-53787-poc) | CVE-2026-53787 Amasty Order Attribute (AOA) file upload exploit, modified to support the upload of HTML files… | +| 0⭐ | 10h ago | [CVE-2020-36847](https://github.com/K52-ai/CVE-2020-36847) | PoC for CVE-2020-36847: unauthenticated file upload to RCE in WordPress Simple File List <=4.2.2. Uploads PHP… | +| 0⭐ | 11h ago | [CVE-2024-25600](https://github.com/K52-ai/CVE-2024-25600) | PoC for CVE-2024-25600: unauthenticated RCE in WordPress Bricks Builder <=1.9.6. Extracts the render_element… | +| 0⭐ | 11h ago | [CVE-2026-99999](https://github.com/01luyicheng/CVE-2026-99999) | CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS… | +| 1⭐ | 17h ago | [CVE-2025-6440-BypassExt](https://github.com/0xCyp1337/CVE-2025-6440-BypassExt) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | | | 1d ago | [CVE-2026-50229](https://github.com/flvzx/CVE-2026-50229) | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 372⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | +| 376⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | | 477⭐ | 59d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 59⭐ | 5d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | | 334⭐ | 83d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | diff --git a/index/trending.json b/index/trending.json index b2e098b9f85..8400560ad2b 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,7 @@ [ { "year": 2026, - "stars": 372, + "stars": 376, "name": "CVE-2026-41940-PoC", "url": "https://github.com/sakidekin/CVE-2026-41940-PoC", "artifact": false, @@ -10,7 +10,7 @@ "pushed": "2026-10-17T16:48:15Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 14.08367512207263, + "score": 14.1453893838608, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -27,7 +27,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.9321782402122376, + "score": 2.930791609509246, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -44,7 +44,7 @@ "pushed": "2026-10-13T16:00:26Z", "released": "2026-10-13T16:00:26Z", "basis": "commit", - "score": 1.7506715139300675, + "score": 1.7428632677022717, "trending": true, "created": "2026-10-13T09:39:17Z", "cve": "CVE-2026-97229", @@ -61,7 +61,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5737612392289553, + "score": 1.5732521226501774, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -78,7 +78,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.2425349332941071, + "score": 1.2408345108313417, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -95,7 +95,7 @@ "pushed": "2026-10-16T18:34:43Z", "released": null, "basis": "pending", - "score": 1.2360675718944336, + "score": 1.2253130608114247, "trending": true, "created": "2026-09-28T19:01:45Z", "cve": "CVE-2026-75604", @@ -112,7 +112,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.1670686943965956, + "score": 1.1665047121363765, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -129,7 +129,7 @@ "pushed": "2026-10-16T18:03:54Z", "released": null, "basis": "pending", - "score": 1.1357292069450196, + "score": 1.12591198405491, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -146,7 +146,7 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 1.131051645731803, + "score": 1.1213317289883744, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", @@ -163,7 +163,7 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 1.0283238582736158, + "score": 1.0236111725495383, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", @@ -180,7 +180,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7749220593269354, + "score": 0.7743475292179955, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -197,7 +197,7 @@ "pushed": "2026-10-15T14:24:25Z", "released": "2026-10-15T14:24:25Z", "basis": "commit", - "score": 0.7655101629752344, + "score": 0.7606098388368658, "trending": true, "created": "2026-10-15T14:19:23Z", "cve": "CVE-2026-64560", @@ -214,7 +214,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7454964458559422, + "score": 0.7449391855097827, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -231,7 +231,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.6875389463486815, + "score": 0.686594996348832, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -248,7 +248,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.6848900716745674, + "score": 0.6845375639228418, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -265,7 +265,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.6359838977180449, + "score": 0.6355923174884159, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -282,7 +282,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5563041329365674, + "score": 0.5560997485368132, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -299,7 +299,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.44330678164760723, + "score": 0.4428205755582215, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -316,7 +316,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.41766144134078836, + "score": 0.4172252226107004, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -333,7 +333,7 @@ "pushed": "2026-10-10T01:25:53Z", "released": "2026-10-10T01:25:43Z", "basis": "commit", - "score": 0.41132410023021543, + "score": 0.4101524895918011, "trending": true, "created": "2026-10-10T01:12:57Z", "cve": "CVE-2026-107181", @@ -350,7 +350,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.2564744547721129, + "score": 0.25603784284241904, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -367,7 +367,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.13344082933221044, + "score": 0.1329289324888177, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -384,7 +384,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.12148939317286729, + "score": 0.12144009710122988, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -401,7 +401,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07495940214267852, + "score": 0.07489470457905804, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -418,7 +418,7 @@ "pushed": null, "released": "2026-10-18T07:21:00Z", "basis": "commit", - "score": 0.07450725465627556, + "score": 0.07328814104066297, "trending": false, "created": "2026-10-18T07:18:01Z", "cve": "CVE-2025-6440", @@ -436,7 +436,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.06650166957930491, + "score": 0.06646648509055005, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -453,7 +453,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.04390622563082979, + "score": 0.04389130003084481, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -470,7 +470,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.037060916582954254, + "score": 0.037046756583941694, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -487,7 +487,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.03651832895516884, + "score": 0.036501303392711675, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -504,7 +504,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.02797710375992945, + "score": 0.027968190392167615, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -521,7 +521,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.023089699477774447, + "score": 0.023079720463464334, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -538,7 +538,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.020135301179066152, + "score": 0.020124506901229324, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -555,7 +555,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.01785381637162164, + "score": 0.01784575514638922, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -572,7 +572,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.014820079073262618, + "score": 0.014814951020864607, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -589,7 +589,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.014500328412981326, + "score": 0.014495465449211315, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -606,7 +606,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.00968449508647589, + "score": 0.009683817128826636, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",