mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Trending CVEs update 2026-10-05 13:10 🤖
This commit is contained in:
1 parent
9fff77a7f3
commit
5862405b66
4 files changed
+8
-29
No files matched your search
@@ -2,7 +2,7 @@
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173331-84015-1221" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
@@ -12,7 +12,7 @@
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 0⭐ | 6m ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… |
|
||||
| 0⭐ | 1h ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… |
|
||||
| 0⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A Proof-of-Concept implementation for CVE-2025-55182, a critical unauthenticated Remote Code Execution… |
|
||||
| 0⭐ | 1d ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) |
|
||||
| 0⭐ | 1d ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… |
|
||||
@@ -27,8 +27,8 @@
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 6⭐ | 1d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… |
|
||||
| 189⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
|
||||
| 7⭐ | 1d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… |
|
||||
| 195⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
|
||||
| 825⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
|
||||
| 3⭐ | 2d ago | [CVE-2026-40281-exploit](https://github.com/MRdark-ops/CVE-2026-40281-exploit) | Gotenberg 8.30.1 unauthenticated RCE exploit |
|
||||
| 4⭐ | 3d ago | [CVE-2026-100520-laranode-path-traversal](https://github.com/wvllxe/CVE-2026-100520-laranode-path-traversal) | Path Traversal -> RCE in Laranode < 1.2.1 (CWE-22). PoC + advisory writeup. |
|
||||
|
||||
@@ -17,3 +17,4 @@ No PoCs from references.
|
||||
|
||||
#### Github
|
||||
- https://github.com/DeAurity/CVE-2026-86950-POC
|
||||
- https://github.com/0xBlackash/CVE-2026-86950
|
||||
+1
-23
@@ -27172,33 +27172,11 @@ CVE-2026-40281 - https://github.com/rabakuku/CVE-2026-40281
|
||||
CVE-2025-26936 - https://github.com/w0rmgh4d/Wordpress---Auto-Exploit
|
||||
CVE-2026-46333 - https://github.com/dr4mohamed/CVE-2026-46333
|
||||
CVE-2025-54769 - https://github.com/tunahantekeoglu/CVE-2025-54769
|
||||
CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne
|
||||
CVE-2018-15133 - https://github.com/pwnedshell/Larascript
|
||||
CVE-2018-7600 - https://github.com/K52-ai/CVE-2018-7600
|
||||
CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600
|
||||
CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597
|
||||
CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816
|
||||
CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560
|
||||
CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform
|
||||
CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228
|
||||
CVE-2022-0543 - https://github.com/fulxey/CVE-2022-0543
|
||||
CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC
|
||||
CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897
|
||||
CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075
|
||||
CVE-2022-40684 - https://github.com/gotr00t0day/CVE-2022-40684
|
||||
CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce
|
||||
CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752
|
||||
CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664
|
||||
CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC
|
||||
CVE-2024-30088 - https://github.com/repo4Chu/CVE-2024-30088__Windows-TOCTOU-exploit
|
||||
CVE-2024-31317 - https://github.com/nianfan555/PoC-Deployer-System
|
||||
CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc
|
||||
CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063
|
||||
CVE-2025-0133 - https://github.com/inteleon404/CVE-2025-0133
|
||||
CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651
|
||||
CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123
|
||||
CVE-2025-63353 - https://github.com/zvckster/CVE-2025-63353
|
||||
CVE-2025-66034 - https://github.com/Liquid-Sec/Variatype.htb-CVE-2025-66034
|
||||
CVE-2026-41089 - https://github.com/1posix/CVE-2026-41089-PoC
|
||||
CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
|
||||
CVE-2026-46215 - https://github.com/0xCyberstan/CVE-2026-46215-POC
|
||||
CVE-2026-86950 - https://github.com/0xBlackash/CVE-2026-86950
|
||||
+2
-2
@@ -1,7 +1,7 @@
|
||||
[
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 6,
|
||||
"stars": 7,
|
||||
"name": "cve-2026-103956-loom-unauth",
|
||||
"url": "https://github.com/abraxas/cve-2026-103956-loom-unauth",
|
||||
"desc": "CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured",
|
||||
@@ -12,7 +12,7 @@
|
||||
},
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 189,
|
||||
"stars": 195,
|
||||
"name": "cve-2026-41940-PoC",
|
||||
"url": "https://github.com/yasouxken/cve-2026-41940-PoC",
|
||||
"desc": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header - no credentials required.",
|
||||
|
||||
Reference in new issue
Block a user