From 5bfe97c5ecafecdf44e10b3d78416e360ba4b018 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Wed, 7 Oct 2026 07:11:16 +0000 Subject: [PATCH] Trending CVEs update 2026-10-07 07:11 :robot: --- README.md | 34 +++++++-------- cves/2026/CVE-2026-40369.md | 1 + cves/2026/CVE-2026-85046.md | 1 + cves/2026/CVE-2026-87491.md | 1 + index/github.txt | 3 ++ index/releases/2020.json | 2 +- index/releases/2024.json | 2 +- index/releases/2026.json | 3 ++ index/trending.json | 86 ++++++++++++++++++------------------- 9 files changed, 71 insertions(+), 62 deletions(-) diff --git a/README.md b/README.md index 41b74213d35..7d13ada81d3 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-07%20Oct%202026%2006%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610070607)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C150-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C225-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610070607)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-07%20Oct%202026%2007%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610070707)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C150-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C225-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610070707)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,25 +14,25 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 3h ago | [CVE-2026-59358](https://github.com/abraxas/CVE-2026-59358) | CVE-2026-59358 - Cloud Foundry UAA - High - Remote - Privilege leftover - user PKCE token as… | -| 0⭐ | 4h ago | KEV [CVE-2022-0185](https://github.com/secjuhl/CVE-2022-0185) | This is a PoC exploit I created for CVE-2022-0185 as practice. It is not a very stable exploit and it was… | -| 0⭐ | 8h ago | KEV [CVE-2025-55182](https://github.com/Frizzardsecurity/CVE-2025-55182) | PoC for CVE-2025-55182 | -| 0⭐ | 9h ago | [CVE-2026-57967](https://github.com/c0dem4sters/CVE-2026-57967) | CVE-2026-57967 PoC - Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH… | -| 0⭐ | 11h ago | [CVE-2026-21589-PoC-Exploit](https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit) | CVE-2026-21589 - Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) / Red/Blue Team suite. 2 tools:… | -| 1⭐ | 14h ago | [CVE-2026-3888-snap-confine-privilege-escalation](https://github.com/AlanNewberry/CVE-2026-3888-snap-confine-privilege-escalation) | Exploit para CVE-2026-3888: race condition en snap-confine con hijack del loader para escalar a root en Linux. | -| 5⭐ | 14h ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | -| 3⭐ | 19h ago | [watchTowr-vs-Atlassian-CVE-2026-21589](https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | -| 0⭐ | 19h ago | [CVE-2026-10196](https://github.com/0xCyp1337/CVE-2026-10196) | The Mail Mint - Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is… | -| 0⭐ | 19h ago | [cve-2026-105080-poc](https://github.com/beyavuz/cve-2026-105080-poc) | In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the… | +| 0⭐ | 4h ago | [CVE-2026-59358](https://github.com/abraxas/CVE-2026-59358) | CVE-2026-59358 - Cloud Foundry UAA - High - Remote - Privilege leftover - user PKCE token as… | +| 0⭐ | 5h ago | KEV [CVE-2022-0185](https://github.com/secjuhl/CVE-2022-0185) | This is a PoC exploit I created for CVE-2022-0185 as practice. It is not a very stable exploit and it was… | +| 0⭐ | 9h ago | KEV [CVE-2025-55182](https://github.com/Frizzardsecurity/CVE-2025-55182) | PoC for CVE-2025-55182 | +| 0⭐ | 10h ago | [CVE-2026-57967](https://github.com/c0dem4sters/CVE-2026-57967) | CVE-2026-57967 PoC - Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH… | +| 0⭐ | 12h ago | [CVE-2026-21589-PoC-Exploit](https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit) | CVE-2026-21589 - Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) / Red/Blue Team suite. 2 tools:… | +| 1⭐ | 15h ago | [CVE-2026-3888-snap-confine-privilege-escalation](https://github.com/AlanNewberry/CVE-2026-3888-snap-confine-privilege-escalation) | Exploit para CVE-2026-3888: race condition en snap-confine con hijack del loader para escalar a root en Linux. | +| 6⭐ | 15h ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | +| 3⭐ | 20h ago | [watchTowr-vs-Atlassian-CVE-2026-21589](https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | +| 0⭐ | 20h ago | [CVE-2026-10196](https://github.com/0xCyp1337/CVE-2026-10196) | The Mail Mint - Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is… | +| 0⭐ | 20h ago | [cve-2026-105080-poc](https://github.com/beyavuz/cve-2026-105080-poc) | In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 826⭐ | 3d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | -| 282⭐ | 3d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | +| 288⭐ | 3d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | | 498⭐ | 47d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | -| 96⭐ | 7d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | +| 96⭐ | 8d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 332⭐ | 71d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | | 184⭐ | 46d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | | 48⭐ | 7d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | @@ -44,7 +44,7 @@ | 31⭐ | 9d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | | 108⭐ | 64d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… | | 38⭐ | 14d ago | KEV [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | -| 35⭐ | 5h ago | KEV [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | +| 35⭐ | 6h ago | KEV [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | | 25⭐ | 9d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 105⭐ | 80d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… | | 23⭐ | 8d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | @@ -60,7 +60,7 @@ | 10⭐ | 40d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 6⭐ | 48d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 7⭐ | 61d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | -| 7⭐ | 65d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | +| 7⭐ | 66d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 3⭐ | 40d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 3⭐ | 50d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 4⭐ | 77d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | @@ -76,7 +76,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 17⭐ | 3d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | -| 4⭐ | 52d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | +| 4⭐ | 53d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 69d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | ## Trending in 2023 @@ -84,7 +84,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 6⭐ | 76d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | -| 3⭐ | 71d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | +| 3⭐ | 72d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | diff --git a/cves/2026/CVE-2026-40369.md b/cves/2026/CVE-2026-40369.md index dd7c545522f..ba921561db3 100644 --- a/cves/2026/CVE-2026-40369.md +++ b/cves/2026/CVE-2026-40369.md @@ -28,3 +28,4 @@ No PoCs from references. - https://github.com/CCELEND/CVE-2026-40369 - https://github.com/ercihan/CVE-2026-40369 - https://github.com/dbgbgtf1/cve-2026-40369-exploit +- https://github.com/kwpwn/mtgt diff --git a/cves/2026/CVE-2026-85046.md b/cves/2026/CVE-2026-85046.md index f07b293a8dc..09efe1856aa 100644 --- a/cves/2026/CVE-2026-85046.md +++ b/cves/2026/CVE-2026-85046.md @@ -21,3 +21,4 @@ No PoCs from references. - https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm - https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter - https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass. +- https://github.com/kwpwn/mtgt diff --git a/cves/2026/CVE-2026-87491.md b/cves/2026/CVE-2026-87491.md index 4faff9e2f6f..dfb0835c16f 100644 --- a/cves/2026/CVE-2026-87491.md +++ b/cves/2026/CVE-2026-87491.md @@ -17,3 +17,4 @@ No PoCs from references. #### Github - https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter - https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass. +- https://github.com/kwpwn/mtgt diff --git a/index/github.txt b/index/github.txt index 07adda97545..6412bf42c24 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27295,3 +27295,6 @@ CVE-2022-0185 - https://github.com/secjuhl/CVE-2022-0185 CVE-2026-33439 - https://github.com/amis13/openam-clean CVE-2026-59358 - https://github.com/abraxas/CVE-2026-59358 CVE-2026-102422 - https://github.com/DevVaibhav07/CVE-2026-102422 +CVE-2026-40369 - https://github.com/kwpwn/mtgt +CVE-2026-85046 - https://github.com/kwpwn/mtgt +CVE-2026-87491 - https://github.com/kwpwn/mtgt diff --git a/index/releases/2020.json b/index/releases/2020.json index 9721ec734ae..ff61cf83e7e 100644 --- a/index/releases/2020.json +++ b/index/releases/2020.json @@ -6624,7 +6624,7 @@ "CVE-2020-8290 https://youtu.be/OpC6neWd2aM":{"basis":"unknown","cve":"CVE-2020-8290","imported":true,"released":null,"url":"https://youtu.be/OpC6neWd2aM"}, "CVE-2020-8298 github:pillys/fs-path/pull/6?#":{"basis":"unknown","cve":"CVE-2020-8298","imported":true,"released":null,"url":"https://github.com/pillys/fs-path/pull/6"}, "CVE-2020-8300 github:stuartcarroll/citrixadc-cve-2020-8300?#":{"basis":"unknown","cve":"CVE-2020-8300","imported":true,"released":null,"url":"https://github.com/stuartcarroll/CitrixADC-CVE-2020-8300"}, -"CVE-2020-8394 github:tzwlhack/vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md?#":{"basis":"unknown","cve":"CVE-2020-8394","imported":true,"released":null,"url":"https://github.com/tzwlhack/Vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md"}, +"CVE-2020-8394 github:tzwlhack/vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md?#":{"basis":"unknown","cve":"CVE-2020-8394","gone":"2026-10-07T07:10:53Z","imported":true,"released":null,"url":"https://github.com/tzwlhack/Vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md"}, "CVE-2020-8416 https://pastebin.com/wqNWnCuN":{"basis":"unknown","cve":"CVE-2020-8416","imported":true,"released":null,"url":"https://pastebin.com/wqNWnCuN"}, "CVE-2020-8416 https://www.exploit-db.com/exploits/47987":{"basis":"source","cve":"CVE-2020-8416","imported":true,"released":"2020-02-03","source":"2020-02-03","url":"https://www.exploit-db.com/exploits/47987"}, "CVE-2020-8417 github:rapidsafeguard/codesnippets_cve-2020-8417?#":{"basis":"unknown","cve":"CVE-2020-8417","imported":true,"released":null,"url":"https://github.com/Rapidsafeguard/codesnippets_CVE-2020-8417"}, diff --git a/index/releases/2024.json b/index/releases/2024.json index 62cd46d6a81..215a7c19d8a 100644 --- a/index/releases/2024.json +++ b/index/releases/2024.json @@ -330,7 +330,7 @@ "CVE-2024-0710 github:karlemilnikka/cve-2024-0710?#":{"basis":"unknown","cve":"CVE-2024-0710","imported":true,"released":null,"url":"https://github.com/karlemilnikka/CVE-2024-0710"}, "CVE-2024-0711 https://wpscan.com/vulnerability/8e286c04-ef32-4af0-be78-d978999b2a90":{"basis":"unknown","cve":"CVE-2024-0711","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/8e286c04-ef32-4af0-be78-d978999b2a90/"}, "CVE-2024-0712 github:gta12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.md?#":{"basis":"unknown","cve":"CVE-2024-0712","imported":true,"released":null,"url":"https://github.com/GTA12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.md"}, -"CVE-2024-0713 github:zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml?#":{"basis":"unknown","cve":"CVE-2024-0713","imported":true,"released":null,"url":"https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml"}, +"CVE-2024-0713 github:zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml?#":{"basis":"unknown","cve":"CVE-2024-0713","gone":"2026-10-07T07:10:53Z","imported":true,"released":null,"url":"https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml"}, "CVE-2024-0716 github:gta12138/vul/blob/main/smart%20s150/s150%20Download%20any%20file/smart%20s150%20download%20any%20file.md?#":{"basis":"unknown","cve":"CVE-2024-0716","imported":true,"released":null,"url":"https://github.com/GTA12138/vul/blob/main/smart%20s150/s150%20Download%20any%20file/smart%20s150%20download%20any%20file.md"}, "CVE-2024-0717 github:999zzzzz/d-link?#":{"basis":"unknown","cve":"CVE-2024-0717","imported":true,"released":null,"url":"https://github.com/999zzzzz/D-Link"}, "CVE-2024-0718 github:biantaibao/zhglxt_xss/blob/main/xss.md?#":{"basis":"unknown","cve":"CVE-2024-0718","imported":true,"released":null,"url":"https://github.com/biantaibao/zhglxt_xss/blob/main/xss.md"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index 1898e432810..c15fee0e5eb 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -6612,6 +6612,7 @@ "CVE-2026-40369 github:dbgbgtf1/cve-2026-40369-exploit?#":{"basis":"unknown","cve":"CVE-2026-40369","imported":true,"released":null,"url":"https://github.com/dbgbgtf1/cve-2026-40369-exploit"}, "CVE-2026-40369 github:ercihan/cve-2026-40369?#":{"basis":"unknown","cve":"CVE-2026-40369","imported":true,"released":null,"url":"https://github.com/ercihan/CVE-2026-40369"}, "CVE-2026-40369 github:joe1sn/cve_2026_40369?#":{"basis":"pending","checked":"2026-10-07T04:09:29Z","created":"2026-05-29T15:03:46Z","cve":"CVE-2026-40369","head":"4738472b9fd7bc5c58df49f40a40da4325450948","imported":true,"pending":true,"pushed_at":"2026-07-23T13:57:16Z","released":null,"repo":1253533462,"url":"https://github.com/Joe1sn/CVE_2026_40369"}, +"CVE-2026-40369 github:kwpwn/mtgt?#":{"basis":"unknown","cve":"CVE-2026-40369","released":null,"seen":"2026-10-07T07:10:53Z","url":"https://github.com/kwpwn/mtgt"}, "CVE-2026-40369 github:orinimron123/cve-2026-40369-exploit?#":{"basis":"unknown","cve":"CVE-2026-40369","imported":true,"released":null,"url":"https://github.com/orinimron123/CVE-2026-40369-EXPLOIT"}, "CVE-2026-40369 github:piffd0s/ntoskrnl-metadata?#":{"basis":"unknown","cve":"CVE-2026-40369","imported":true,"released":null,"url":"https://github.com/piffd0s/ntoskrnl-metadata"}, "CVE-2026-4040 github:george0papasotiriou/cve-2026-4040-race-condition-in-file-upload-leading-to-rce?#":{"basis":"unknown","cve":"CVE-2026-4040","imported":true,"released":null,"url":"https://github.com/George0Papasotiriou/CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE"}, @@ -12636,6 +12637,7 @@ "CVE-2026-85046 github:adriyansyah-mf/cve-2026-85046-poc?#":{"basis":"commit","blobs":["97f6173246a66c83b772748dd26dc7d277721cde"],"checked":"2026-10-06T22:58:33Z","commit":"2026-09-05T14:27:33Z","commit_verified":true,"created":"2026-09-05T14:27:18Z","cve":"CVE-2026-85046","head":"22adee2405b50120c45f7c2b5642416aaac9c9ee","history_paths":["poc.html"],"history_version":3,"imported":true,"paths":["poc.html"],"pushed_at":"2026-09-05T14:27:34Z","released":"2026-09-05T14:27:33Z","repo":1358271090,"rev":"26a9fc3de57651d47be0301a63049f1b5f6f21b0c419d53163e535211243db47","sha":"22adee2405b50120c45f7c2b5642416aaac9c9ee","url":"https://github.com/adriyansyah-mf/cve-2026-85046-poc"}, "CVE-2026-85046 github:atiilla/cve-2026-85046?#":{"basis":"pending","checked":"2026-10-07T03:09:36Z","created":"2026-09-08T19:18:57Z","cve":"CVE-2026-85046","head":"b6f4a444a71182bb05143193d2f5bd884c064e4e","imported":true,"pending":true,"pushed_at":"2026-09-08T19:19:04Z","released":null,"repo":1361812202,"url":"https://github.com/atiilla/CVE-2026-85046"}, "CVE-2026-85046 github:horkimhab/cve-2026-85046?#":{"basis":"unknown","cve":"CVE-2026-85046","imported":true,"released":null,"url":"https://github.com/HORKimhab/CVE-2026-85046"}, +"CVE-2026-85046 github:kwpwn/mtgt?#":{"basis":"unknown","cve":"CVE-2026-85046","released":null,"seen":"2026-10-07T07:10:53Z","url":"https://github.com/kwpwn/mtgt"}, "CVE-2026-85046 github:sneakynachos/cve-2026-85046-who-put-the-silverback-guerilla-in-the-wasm?#":{"basis":"unknown","cve":"CVE-2026-85046","imported":true,"released":null,"url":"https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm"}, "CVE-2026-85046 github:sneakynachos/cve-2026-87491-and-cve-2026-85046-the-bagel-fell-off-the-counter?#":{"basis":"unknown","cve":"CVE-2026-85046","imported":true,"released":null,"url":"https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter"}, "CVE-2026-85046 github:sneakynachos/cve-2026-87575-cve-2026-87606-cve-2026-87491-and-cve-2026-85046.-escape-the-v8-carcass.?#":{"basis":"unknown","cve":"CVE-2026-85046","imported":true,"released":null,"url":"https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass."}, @@ -12985,6 +12987,7 @@ "CVE-2026-8744 github:open5gs/open5gs/issues/4466?#":{"basis":"unknown","cve":"CVE-2026-8744","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4466"}, "CVE-2026-8745 github:open5gs/open5gs/issues/4472?#":{"basis":"unknown","cve":"CVE-2026-8745","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4472"}, "CVE-2026-8746 github:open5gs/open5gs/issues/4476?#":{"basis":"unknown","cve":"CVE-2026-8746","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4476"}, +"CVE-2026-87491 github:kwpwn/mtgt?#":{"basis":"unknown","cve":"CVE-2026-87491","released":null,"seen":"2026-10-07T07:10:53Z","url":"https://github.com/kwpwn/mtgt"}, "CVE-2026-87491 github:sneakynachos/cve-2026-87491-and-cve-2026-85046-the-bagel-fell-off-the-counter?#":{"basis":"commit","blobs":["beb9f1fd3698e23a5958d5d0bac2b4af1211669f"],"checked":"2026-10-06T22:58:33Z","commit":"2026-09-10T21:48:30Z","commit_verified":true,"created":"2026-09-10T21:47:12Z","cve":"CVE-2026-87491","head":"43fd23e60fadd7bae511824db14bcf6f07bef9d8","history_paths":["poc.js"],"history_version":3,"imported":true,"paths":["poc.js"],"pushed_at":"2026-09-11T19:05:49Z","released":"2026-09-10T21:48:30Z","repo":1364967006,"rev":"e993b7365114d60d99edbeb5dbe43d3d34ff527c161e12bb3d5392cc40664d31","sha":"d6225a2268e5784b6bdadc061f82fab2def25ebf","url":"https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter"}, "CVE-2026-87491 github:sneakynachos/cve-2026-87575-cve-2026-87606-cve-2026-87491-and-cve-2026-85046.-escape-the-v8-carcass.?#":{"basis":"unknown","cve":"CVE-2026-87491","imported":true,"released":null,"url":"https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass."}, "CVE-2026-8754 https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504":{"basis":"unknown","cve":"CVE-2026-8754","imported":true,"released":null,"url":"https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504"}, diff --git a/index/trending.json b/index/trending.json index 792811aba86..719d28edee1 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-10-03T16:24:22Z", "released": null, "basis": "pending", - "score": 30.8069193563459, + "score": 30.61354080603019, "trending": true, "created": "2026-03-08T11:25:39Z", "cve": "CVE-2026-24061", @@ -18,7 +18,7 @@ }, { "year": 2026, - "stars": 282, + "stars": 288, "name": "cve-2026-41940-PoC", "url": "https://github.com/yasouxken/cve-2026-41940-PoC", "artifact": false, @@ -27,7 +27,7 @@ "pushed": "2026-10-03T16:48:21Z", "released": null, "basis": "pending", - "score": 10.544509971339679, + "score": 10.701018706470652, "trending": true, "created": "2026-09-21T18:23:02Z", "cve": "CVE-2026-41940", @@ -44,7 +44,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.5648960056206103, + "score": 3.562764235025995, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -61,7 +61,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 2.230470165176376, + "score": 2.2233226977320517, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -78,7 +78,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.7297215379389748, + "score": 1.7290643775091494, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -95,7 +95,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.342270325512033, + "score": 1.3414457206699346, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -112,7 +112,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 1.1210916784792484, + "score": 1.117472301775735, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -129,7 +129,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 1.0013700200341247, + "score": 1.000281053748329, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -146,7 +146,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.9658088669462309, + "score": 0.9647460717770291, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -163,7 +163,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.8020766065478253, + "score": 0.8015431368947862, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -180,7 +180,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7812413585290516, + "score": 0.780584965121932, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -197,7 +197,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.6600623149380439, + "score": 0.6587152834506433, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -214,7 +214,7 @@ "pushed": "2026-09-27T19:48:09Z", "released": "2026-09-27T19:47:52Z", "basis": "commit", - "score": 0.6491528218876798, + "score": 0.6473587070607, "trending": true, "created": "2026-09-27T19:41:06Z", "cve": "CVE-2026-34990", @@ -231,7 +231,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.6243048994293156, + "score": 0.6240297692236234, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -248,7 +248,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.6047586996124544, + "score": 0.6036281452092066, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -265,7 +265,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.6029576176096239, + "score": 0.5994355919058403, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -282,7 +282,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.5555639183780222, + "score": 0.5545291834170917, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -299,7 +299,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.537873910262355, + "score": 0.5363289422700058, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -316,7 +316,7 @@ "pushed": "2026-07-18T21:09:06Z", "released": null, "basis": "pending", - "score": 0.5220286099576859, + "score": 0.5218431051501953, "trending": true, "created": "2026-07-14T14:21:27Z", "cve": "CVE-2026-43499", @@ -333,7 +333,7 @@ "pushed": "2026-09-28T09:24:46Z", "released": "2026-09-28T09:24:46Z", "basis": "commit", - "score": 0.500853682834023, + "score": 0.49939011478082085, "trending": true, "created": "2026-09-27T18:15:38Z", "cve": "CVE-2026-88771", @@ -350,7 +350,7 @@ "pushed": "2026-09-11T16:38:12Z", "released": "2026-09-11T15:54:48Z", "basis": "commit", - "score": 0.46770278991855435, + "score": 0.46719468395426067, "trending": true, "created": "2026-09-11T15:24:22Z", "cve": "CVE-2026-85706", @@ -358,7 +358,7 @@ }, { "year": 2026, - "stars": 5, + "stars": 6, "name": "CVE-2026-21589", "url": "https://github.com/MarcusProgram/CVE-2026-21589", "artifact": false, @@ -367,7 +367,7 @@ "pushed": null, "released": "2026-10-06T15:51:43Z", "basis": "commit", - "score": 0.38952759077212107, + "score": 0.4591789589849892, "trending": false, "created": "2026-10-06T15:43:34Z", "cve": "CVE-2026-21589", @@ -385,7 +385,7 @@ "pushed": "2026-10-02T13:52:42Z", "released": "2026-10-02T13:48:22Z", "basis": "created", - "score": 0.2883625092400662, + "score": 0.2869039126707656, "trending": true, "created": "2026-10-02T13:48:22Z", "cve": "CVE-2025-45737", @@ -402,7 +402,7 @@ "pushed": null, "released": "2026-10-06T10:48:38Z", "basis": "commit", - "score": 0.21431321226043754, + "score": 0.2109611437619114, "trending": false, "created": "2026-10-06T10:40:59Z", "cve": "CVE-2026-21589", @@ -420,7 +420,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.13815558918049398, + "score": 0.1380870867660078, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -437,7 +437,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.08935461801571896, + "score": 0.08923269087220895, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -454,7 +454,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.07904876066434954, + "score": 0.07899432100406152, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -471,7 +471,7 @@ "pushed": null, "released": "2026-10-06T16:07:23Z", "basis": "created", - "score": 0.07827923352872064, + "score": 0.07688766436397058, "trending": false, "created": "2026-10-06T16:07:23Z", "cve": "CVE-2026-3888", @@ -489,7 +489,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.042424549168091415, + "score": 0.04239963154248903, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -506,7 +506,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.04180106268782572, + "score": 0.04178177326189367, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -523,7 +523,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.037968665835267756, + "score": 0.0379533926868989, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -540,7 +540,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.030885406588920264, + "score": 0.030873880890052264, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -557,7 +557,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.026502055403933723, + "score": 0.02648787430632776, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -574,7 +574,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.023996706503309664, + "score": 0.023979899048317075, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -591,7 +591,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.02063262379325113, + "score": 0.02062097539515978, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -608,7 +608,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.020384574186778266, + "score": 0.020377073013808044, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -625,7 +625,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.019986091791617915, + "score": 0.019978941684109266, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -642,7 +642,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.01966715334959464, + "score": 0.0196602771266404, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -659,7 +659,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.016511787667087725, + "score": 0.016505007766701642, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -676,7 +676,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.01609785689802223, + "score": 0.01609148236808446, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -693,7 +693,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.015134936475042238, + "score": 0.015129446751456966, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019",