From 5862405b66e84beda736e3ba0c8fe2d70a5a7892 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Mon, 5 Oct 2026 13:10:10 +0000 Subject: [PATCH] Trending CVEs update 2026-10-05 13:10 :robot: --- README.md | 8 ++++---- cves/2026/CVE-2026-86950.md | 1 + index/github.txt | 24 +----------------------- index/trending.json | 4 ++-- 4 files changed, 8 insertions(+), 29 deletions(-) diff --git a/README.md b/README.md index bb5fdb86075..5edf386817a 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-05%20Oct%202026%2012%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610051207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C015-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610051207)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-05%20Oct%202026%2013%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610051307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C015-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610051307)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,7 +12,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 6m ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… | +| 0⭐ | 1h ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… | | 0⭐ | 1d ago | KEV [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A Proof-of-Concept implementation for CVE-2025-55182, a critical unauthenticated Remote Code Execution… | | 0⭐ | 1d ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) | | 0⭐ | 1d ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… | @@ -27,8 +27,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 6⭐ | 1d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… | -| 189⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | +| 7⭐ | 1d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… | +| 195⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | | 825⭐ | 1d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 2d ago | [CVE-2026-40281-exploit](https://github.com/MRdark-ops/CVE-2026-40281-exploit) | Gotenberg 8.30.1 unauthenticated RCE exploit | | 4⭐ | 3d ago | [CVE-2026-100520-laranode-path-traversal](https://github.com/wvllxe/CVE-2026-100520-laranode-path-traversal) | Path Traversal -> RCE in Laranode < 1.2.1 (CWE-22). PoC + advisory writeup. | diff --git a/cves/2026/CVE-2026-86950.md b/cves/2026/CVE-2026-86950.md index da36e7a7f63..a654e459131 100644 --- a/cves/2026/CVE-2026-86950.md +++ b/cves/2026/CVE-2026-86950.md @@ -17,3 +17,4 @@ No PoCs from references. #### Github - https://github.com/DeAurity/CVE-2026-86950-POC +- https://github.com/0xBlackash/CVE-2026-86950 diff --git a/index/github.txt b/index/github.txt index ee5c9e232b1..9f19ce9b4e9 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27172,33 +27172,11 @@ CVE-2026-40281 - https://github.com/rabakuku/CVE-2026-40281 CVE-2025-26936 - https://github.com/w0rmgh4d/Wordpress---Auto-Exploit CVE-2026-46333 - https://github.com/dr4mohamed/CVE-2026-46333 CVE-2025-54769 - https://github.com/tunahantekeoglu/CVE-2025-54769 -CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne -CVE-2018-15133 - https://github.com/pwnedshell/Larascript CVE-2018-7600 - https://github.com/K52-ai/CVE-2018-7600 -CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600 -CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597 -CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816 -CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560 -CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform -CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228 CVE-2022-0543 - https://github.com/fulxey/CVE-2022-0543 -CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC -CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897 -CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075 CVE-2022-40684 - https://github.com/gotr00t0day/CVE-2022-40684 -CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce -CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752 -CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664 -CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC CVE-2024-30088 - https://github.com/repo4Chu/CVE-2024-30088__Windows-TOCTOU-exploit CVE-2024-31317 - https://github.com/nianfan555/PoC-Deployer-System -CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc -CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063 -CVE-2025-0133 - https://github.com/inteleon404/CVE-2025-0133 -CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651 -CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123 -CVE-2025-63353 - https://github.com/zvckster/CVE-2025-63353 CVE-2025-66034 - https://github.com/Liquid-Sec/Variatype.htb-CVE-2025-66034 -CVE-2026-41089 - https://github.com/1posix/CVE-2026-41089-PoC -CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC CVE-2026-46215 - https://github.com/0xCyberstan/CVE-2026-46215-POC +CVE-2026-86950 - https://github.com/0xBlackash/CVE-2026-86950 diff --git a/index/trending.json b/index/trending.json index 690d6b60ee5..464771fbe87 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,7 @@ [ { "year": 2026, - "stars": 6, + "stars": 7, "name": "cve-2026-103956-loom-unauth", "url": "https://github.com/abraxas/cve-2026-103956-loom-unauth", "desc": "CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured", @@ -12,7 +12,7 @@ }, { "year": 2026, - "stars": 189, + "stars": 195, "name": "cve-2026-41940-PoC", "url": "https://github.com/yasouxken/cve-2026-41940-PoC", "desc": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header - no credentials required.",