Trending CVEs update 2026-10-05 13:10 🤖

This commit is contained in:
CVE-BOT committed 2026-10-05 13:10:10 +00:00
1 parent 9fff77a7f3
commit 5862405b66
4 files changed
+8 -29

No files matched your search

+4 -4
View File
@@ -2,7 +2,7 @@
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173331-84015-1221" alt="PoC Index" width="100%"></a>
[![last sync](https://img.shields.io/badge/last%20sync-05%20Oct%202026%2012%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610051207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C015-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610051207)](https://github.com/0xMarcio/pocindex/stargazers)
[![last sync](https://img.shields.io/badge/last%20sync-05%20Oct%202026%2013%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610051307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C015-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610051307)](https://github.com/0xMarcio/pocindex/stargazers)
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
@@ -12,7 +12,7 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 0⭐ | 6m ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… |
| 0⭐ | 1h ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… |
| 0⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A Proof-of-Concept implementation for CVE-2025-55182, a critical unauthenticated Remote Code Execution… |
| 0⭐ | 1d ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) |
| 0⭐ | 1d ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… |
@@ -27,8 +27,8 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 6⭐ | 1d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… |
| 189⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
| 7⭐ | 1d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… |
| 195⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
| 825⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 3⭐ | 2d ago | [CVE-2026-40281-exploit](https://github.com/MRdark-ops/CVE-2026-40281-exploit) | Gotenberg 8.30.1 unauthenticated RCE exploit |
| 4⭐ | 3d ago | [CVE-2026-100520-laranode-path-traversal](https://github.com/wvllxe/CVE-2026-100520-laranode-path-traversal) | Path Traversal -> RCE in Laranode < 1.2.1 (CWE-22). PoC + advisory writeup. |
+1
View File
@@ -17,3 +17,4 @@ No PoCs from references.
#### Github
- https://github.com/DeAurity/CVE-2026-86950-POC
- https://github.com/0xBlackash/CVE-2026-86950
+1 -23
View File
@@ -27172,33 +27172,11 @@ CVE-2026-40281 - https://github.com/rabakuku/CVE-2026-40281
CVE-2025-26936 - https://github.com/w0rmgh4d/Wordpress---Auto-Exploit
CVE-2026-46333 - https://github.com/dr4mohamed/CVE-2026-46333
CVE-2025-54769 - https://github.com/tunahantekeoglu/CVE-2025-54769
CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne
CVE-2018-15133 - https://github.com/pwnedshell/Larascript
CVE-2018-7600 - https://github.com/K52-ai/CVE-2018-7600
CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600
CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597
CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816
CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560
CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform
CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228
CVE-2022-0543 - https://github.com/fulxey/CVE-2022-0543
CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC
CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897
CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075
CVE-2022-40684 - https://github.com/gotr00t0day/CVE-2022-40684
CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce
CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752
CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664
CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC
CVE-2024-30088 - https://github.com/repo4Chu/CVE-2024-30088__Windows-TOCTOU-exploit
CVE-2024-31317 - https://github.com/nianfan555/PoC-Deployer-System
CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc
CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063
CVE-2025-0133 - https://github.com/inteleon404/CVE-2025-0133
CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651
CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123
CVE-2025-63353 - https://github.com/zvckster/CVE-2025-63353
CVE-2025-66034 - https://github.com/Liquid-Sec/Variatype.htb-CVE-2025-66034
CVE-2026-41089 - https://github.com/1posix/CVE-2026-41089-PoC
CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
CVE-2026-46215 - https://github.com/0xCyberstan/CVE-2026-46215-POC
CVE-2026-86950 - https://github.com/0xBlackash/CVE-2026-86950
+2 -2
View File
@@ -1,7 +1,7 @@
[
{
"year": 2026,
"stars": 6,
"stars": 7,
"name": "cve-2026-103956-loom-unauth",
"url": "https://github.com/abraxas/cve-2026-103956-loom-unauth",
"desc": "CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured",
@@ -12,7 +12,7 @@
},
{
"year": 2026,
"stars": 189,
"stars": 195,
"name": "cve-2026-41940-PoC",
"url": "https://github.com/yasouxken/cve-2026-41940-PoC",
"desc": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header - no credentials required.",