diff --git a/README.md b/README.md index 1b55bd5e4f7..349711048fd 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-20%20Oct%202026%2006%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610200607)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C103-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C235-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610200607)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-20%20Oct%202026%2007%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610200707)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C103-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C235-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610200707)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,28 +14,28 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 1h ago | [CVE-2026-111058-CVE-2026-111057-mercury-rce](https://github.com/ExDev994/CVE-2026-111058-CVE-2026-111057-mercury-rce) | Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994).… | -| 0⭐ | 9h ago | [CVE-2026-103663](https://github.com/striga-ai/CVE-2026-103663) | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer… | -| 0⭐ | 9h ago | KEV [CVE-2026-63030](https://github.com/K52-ai/CVE-2026-63030) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion… | -| 0⭐ | 14h ago | [CVE-2026-52856-PoC](https://github.com/lisbickq/CVE-2026-52856-PoC) | PoC For CVE-2026-52856 | -| 0⭐ | 15h ago | [CVE-2026-105105](https://github.com/Mothra-1/CVE-2026-105105) | CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8).… | -| 0⭐ | 20h ago | [CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC](https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC) | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before… | -| 0⭐ | 21h ago | [CVE-2026-84178](https://github.com/oscerd/CVE-2026-84178) | Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code… | -| 4⭐ | 21h ago | [CVE-2026-23111](https://github.com/kinokopio/CVE-2026-23111) | CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus… | -| 0⭐ | 22h ago | [CVE-2023-54391-POC](https://github.com/Lewis1766/CVE-2023-54391-POC) | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in… | -| 0⭐ | 22h ago | [CVE-2026-80344](https://github.com/oscerd/CVE-2026-80344) | Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure - the… | +| 0⭐ | 2h ago | [CVE-2026-111058-CVE-2026-111057-mercury-rce](https://github.com/ExDev994/CVE-2026-111058-CVE-2026-111057-mercury-rce) | Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994).… | +| 0⭐ | 10h ago | [CVE-2026-103663](https://github.com/striga-ai/CVE-2026-103663) | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer… | +| 0⭐ | 10h ago | KEV [CVE-2026-63030](https://github.com/K52-ai/CVE-2026-63030) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion… | +| 0⭐ | 15h ago | [CVE-2026-52856-PoC](https://github.com/lisbickq/CVE-2026-52856-PoC) | PoC For CVE-2026-52856 | +| 0⭐ | 16h ago | [CVE-2026-105105](https://github.com/Mothra-1/CVE-2026-105105) | CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8).… | +| 0⭐ | 21h ago | [CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC](https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC) | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before… | +| 0⭐ | 22h ago | [CVE-2026-84178](https://github.com/oscerd/CVE-2026-84178) | Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code… | +| 4⭐ | 22h ago | [CVE-2026-23111](https://github.com/kinokopio/CVE-2026-23111) | CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus… | +| 0⭐ | 23h ago | [CVE-2023-54391-POC](https://github.com/Lewis1766/CVE-2023-54391-POC) | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in… | +| 0⭐ | 23h ago | [CVE-2026-80344](https://github.com/oscerd/CVE-2026-80344) | Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure - the… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 425⭐ | 2d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | -| 60⭐ | 16h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | +| 426⭐ | 2d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | +| 59⭐ | 17h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | | 477⭐ | 60d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | -| 28⭐ | 22h ago | KEV [CVE-2026-41940-PoC](https://github.com/ZeroDayEvil/CVE-2026-41940-PoC) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that… | +| 28⭐ | 23h ago | KEV [CVE-2026-41940-PoC](https://github.com/ZeroDayEvil/CVE-2026-41940-PoC) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that… | +| 60⭐ | 6d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | | 335⭐ | 84d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | -| 59⭐ | 6d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | -| 96⭐ | 20d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | +| 96⭐ | 21d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 188⭐ | 59d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | | 16⭐ | 1d ago | [CVE-2026-64560-public](https://github.com/Feng1586/CVE-2026-64560-public) | CVE-2026-64560 staged security research package | | 35⭐ | 6d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC | @@ -58,7 +58,7 @@ | 5⭐ | 7d ago | KEV [CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | | 8⭐ | 33d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 10⭐ | 53d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | -| 9⭐ | 78d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | +| 9⭐ | 79d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 7⭐ | 74d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 6⭐ | 61d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 3⭐ | 53d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | @@ -72,14 +72,14 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 17⭐ | 16d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | -| 4⭐ | 65d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | +| 4⭐ | 66d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 82d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | ## Trending in 2023 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 3⭐ | 84d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | +| 3⭐ | 85d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | ## Trending in 2022 diff --git a/index/releases/2023.json b/index/releases/2023.json index 5a351ccd221..68fe4000d45 100644 --- a/index/releases/2023.json +++ b/index/releases/2023.json @@ -1229,7 +1229,7 @@ "CVE-2023-20198 github:tounsi007/cve-2023-20198?#":{"basis":"unknown","cve":"CVE-2023-20198","imported":true,"released":null,"url":"https://github.com/Tounsi007/CVE-2023-20198"}, "CVE-2023-20198 github:vulnmachines/cisco_cve-2023-20198?#":{"basis":"unknown","cve":"CVE-2023-20198","imported":true,"released":null,"url":"https://github.com/Vulnmachines/Cisco_CVE-2023-20198"}, "CVE-2023-20198 github:w01fh4cker/cve-2023-20198-rce?#":{"basis":"unknown","cve":"CVE-2023-20198","imported":true,"released":null,"url":"https://github.com/W01fh4cker/CVE-2023-20198-RCE"}, -"CVE-2023-20198 github:waynec1eated-bot/cve-2023-20198-cisco-ios-xe?#":{"basis":"pending","checked":"2026-10-20T06:08:26Z","created":"2026-10-19T07:59:02Z","cve":"CVE-2023-20198","gone":"2026-10-20T06:12:12Z","head":"2b6155b727e0bea4e02a7d0ec3375436c24aab85","pending":true,"pushed_at":"2026-10-19T08:02:31Z","released":null,"repo":1425294445,"seen":"2026-10-19T08:09:03Z","url":"https://github.com/waynec1eated-bot/CVE-2023-20198-Cisco-IOS-XE"}, +"CVE-2023-20198 github:waynec1eated-bot/cve-2023-20198-cisco-ios-xe?#":{"basis":"pending","checked":"2026-10-20T06:08:26Z","created":"2026-10-19T07:59:02Z","cve":"CVE-2023-20198","gone":"2026-10-20T07:11:13Z","head":"2b6155b727e0bea4e02a7d0ec3375436c24aab85","pending":true,"pushed_at":"2026-10-19T08:02:31Z","released":null,"repo":1425294445,"seen":"2026-10-19T08:09:03Z","url":"https://github.com/waynec1eated-bot/CVE-2023-20198-Cisco-IOS-XE"}, "CVE-2023-20209 github:peter5he1by/cve-2023-20209?#":{"basis":"unknown","cve":"CVE-2023-20209","imported":true,"released":null,"url":"https://github.com/peter5he1by/CVE-2023-20209"}, "CVE-2023-2021 https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0":{"basis":"unknown","cve":"CVE-2023-2021","imported":true,"released":null,"url":"https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0"}, "CVE-2023-2022 https://hackerone.com/reports/1936572":{"basis":"unknown","cve":"CVE-2023-2022","imported":true,"released":null,"url":"https://hackerone.com/reports/1936572"}, diff --git a/index/releases/2024.json b/index/releases/2024.json index 9c91ccd7363..432c6fb9159 100644 --- a/index/releases/2024.json +++ b/index/releases/2024.json @@ -5468,7 +5468,7 @@ "CVE-2024-35250 github:brentlyw/givemekernel?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/Brentlyw/GiveMeKernel"}, "CVE-2024-35250 github:cli0xfa/simple-krw-vuln?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/cli0xfa/simple-krw-vuln"}, "CVE-2024-35250 github:crackercat/cve-2024-35250?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/CrackerCat/CVE-2024-35250"}, -"CVE-2024-35250 github:m01000xd/cve-2024-35250?#":{"basis":"pending","checked":"2026-10-20T06:08:15Z","created":"2026-10-19T16:52:16Z","cve":"CVE-2024-35250","gone":"2026-10-20T06:12:12Z","head":"7e432f4829697f1432b6a0df58eef3cbeee1ee86","pending":true,"pushed_at":"2026-10-19T16:54:13Z","released":null,"repo":1425913814,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/m01000xd/CVE-2024-35250"}, +"CVE-2024-35250 github:m01000xd/cve-2024-35250?#":{"basis":"pending","checked":"2026-10-20T06:08:15Z","created":"2026-10-19T16:52:16Z","cve":"CVE-2024-35250","gone":"2026-10-20T07:11:13Z","head":"7e432f4829697f1432b6a0df58eef3cbeee1ee86","pending":true,"pushed_at":"2026-10-19T16:54:13Z","released":null,"repo":1425913814,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/m01000xd/CVE-2024-35250"}, "CVE-2024-35250 github:rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_35250_ks_driver.rb?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_35250_ks_driver.rb"}, "CVE-2024-35250 github:ro0tmylove/cve-2024-35250-bof?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/ro0tmylove/CVE-2024-35250-BOF"}, "CVE-2024-35250 github:sunny-boy-fqy/windows-exploit?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/sunny-boy-fqy/windows-exploit"}, @@ -9206,7 +9206,7 @@ "CVE-2024-58296 https://www.exploit-db.com/exploits/52015":{"basis":"source","cve":"CVE-2024-58296","imported":true,"released":"2024-05-13","source":"2024-05-13","url":"https://www.exploit-db.com/exploits/52015"}, "CVE-2024-58297 https://www.exploit-db.com/exploits/52016":{"basis":"source","cve":"CVE-2024-58297","imported":true,"released":"2024-05-13","source":"2024-05-13","url":"https://www.exploit-db.com/exploits/52016"}, "CVE-2024-58298 https://www.exploit-db.com/exploits/51991":{"basis":"source","cve":"CVE-2024-58298","imported":true,"released":"2024-04-13","source":"2024-04-13","url":"https://www.exploit-db.com/exploits/51991"}, -"CVE-2024-58299 github:cyberwarrior10101/cve-2024-58299?#":{"basis":"pending","checked":"2026-10-20T06:08:15Z","created":"2026-10-19T15:53:31Z","cve":"CVE-2024-58299","gone":"2026-10-20T06:12:12Z","head":"dbd98c4bc4bb630ec1477fc230cf6546b77ba068","pending":true,"pushed_at":"2026-10-19T15:57:53Z","released":null,"repo":1425848185,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/CyberWarrior10101/CVE-2024-58299"}, +"CVE-2024-58299 github:cyberwarrior10101/cve-2024-58299?#":{"basis":"pending","checked":"2026-10-20T06:08:15Z","created":"2026-10-19T15:53:31Z","cve":"CVE-2024-58299","gone":"2026-10-20T07:11:13Z","head":"dbd98c4bc4bb630ec1477fc230cf6546b77ba068","pending":true,"pushed_at":"2026-10-19T15:57:53Z","released":null,"repo":1425848185,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/CyberWarrior10101/CVE-2024-58299"}, "CVE-2024-58299 https://www.exploit-db.com/exploits/51767":{"basis":"source","cve":"CVE-2024-58299","imported":true,"released":"2024-02-02","source":"2024-02-02","url":"https://www.exploit-db.com/exploits/51767"}, "CVE-2024-5830 github:github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE_2024_5830?#":{"basis":"commit","blobs":["6370e6d7b6e02d1de73b85faf7accdd5778e2703"],"checked":"2026-10-06T22:39:16Z","commit":"2024-08-12T12:07:46Z","commit_verified":true,"created":"2019-11-12T01:14:24Z","cve":"CVE-2024-5830","head":"c63e6adecf23cd5b23d3df72d32d7c7b41b747ff","history_paths":["SecurityExploits/Chrome/v8/CVE_2024_5830/calc.html"],"history_version":3,"imported":true,"paths":["SecurityExploits/Chrome/v8/CVE_2024_5830/calc.html"],"pushed_at":"2026-06-08T08:08:15Z","released":"2024-08-12T12:07:46Z","repo":221101274,"rev":"02bf4f8b8f3b1a4a21d02fd5ea8ce87e41c5eae6b2fdff4751e5cea740ab4ded","sha":"6dae42c0a60bf80ee16fa849590e37807b2527b8","url":"https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE_2024_5830"}, "CVE-2024-5830 github:l1m3syc/cve-2024-4947-poc?#":{"basis":"unknown","cve":"CVE-2024-5830","imported":true,"released":null,"url":"https://github.com/l1m3syc/CVE-2024-4947-PoC"}, diff --git a/index/trending.json b/index/trending.json index 4bacffce3b6..494cd6520ae 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,7 @@ [ { "year": 2026, - "stars": 425, + "stars": 426, "name": "CVE-2026-41940-PoC", "url": "https://github.com/sakidekin/CVE-2026-41940-PoC", "artifact": false, @@ -10,7 +10,7 @@ "pushed": "2026-10-17T16:48:15Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 13.543034448404422, + "score": 13.506952771699263, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -18,7 +18,7 @@ }, { "year": 2026, - "stars": 60, + "stars": 59, "name": "CVE-2026-20817", "url": "https://github.com/ZeroDayEvil/CVE-2026-20817", "artifact": false, @@ -27,7 +27,7 @@ "pushed": "2026-10-19T13:57:31Z", "released": null, "basis": "pending", - "score": 4.5189546732689525, + "score": 4.368734037724153, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -44,7 +44,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.8902340694558846, + "score": 2.8888760851429827, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -61,12 +61,29 @@ "pushed": "2026-10-19T07:44:03Z", "released": null, "basis": "pending", - "score": 1.9067821751615752, + "score": 1.8788714667432618, "trending": true, "created": "2026-09-28T18:52:52Z", "cve": "CVE-2026-41940", "kev": true }, + { + "year": 2026, + "stars": 60, + "name": "CVE-2026-97229-PoC", + "url": "https://github.com/jburgess-r7/CVE-2026-97229-PoC", + "artifact": false, + "source": "github.com", + "desc": "GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image", + "pushed": "2026-10-13T16:00:26Z", + "released": "2026-10-13T16:00:26Z", + "basis": "commit", + "score": 1.5637550355074394, + "trending": true, + "created": "2026-10-13T09:39:17Z", + "cve": "CVE-2026-97229", + "kev": false + }, { "year": 2026, "stars": 335, @@ -78,29 +95,12 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5629444340127308, + "score": 1.5624388225513786, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", "kev": false }, - { - "year": 2026, - "stars": 59, - "name": "CVE-2026-97229-PoC", - "url": "https://github.com/jburgess-r7/CVE-2026-97229-PoC", - "artifact": false, - "source": "github.com", - "desc": "GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image", - "pushed": "2026-10-13T16:00:26Z", - "released": "2026-10-13T16:00:26Z", - "basis": "commit", - "score": 1.5435299110831082, - "trending": true, - "created": "2026-10-13T09:39:17Z", - "cve": "CVE-2026-97229", - "kev": false - }, { "year": 2026, "stars": 96, @@ -112,7 +112,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.1926792206995551, + "score": 1.191117782207057, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -129,7 +129,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.1561648732518723, + "score": 1.1556100091887558, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -146,7 +146,7 @@ "pushed": "2026-10-19T05:30:19Z", "released": null, "basis": "pending", - "score": 1.0544186138476082, + "score": 1.039679253527858, "trending": true, "created": "2026-10-19T05:30:01Z", "cve": "CVE-2026-64560", @@ -163,7 +163,7 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 0.930352407183775, + "score": 0.92675333112648, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", @@ -180,7 +180,7 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 0.9019809903156795, + "score": 0.8962753457188903, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", @@ -197,7 +197,7 @@ "pushed": "2026-10-15T14:24:25Z", "released": "2026-10-15T14:24:25Z", "basis": "commit", - "score": 0.8034751931877119, + "score": 0.7994044726131148, "trending": true, "created": "2026-10-15T14:19:23Z", "cve": "CVE-2026-64560", @@ -214,7 +214,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7577069257674539, + "score": 0.7571551615885007, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -231,7 +231,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7288023529866887, + "score": 0.7282674105618628, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -248,7 +248,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.6742428477828379, + "score": 0.6738986766954639, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -265,7 +265,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.6598669034706957, + "score": 0.6590003781571339, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -282,7 +282,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.6241986572438363, + "score": 0.6238191451857864, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -299,7 +299,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5500984892792703, + "score": 0.5498967709987749, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -316,7 +316,7 @@ "pushed": "2026-10-17T07:35:29Z", "released": "2026-10-17T06:21:55Z", "basis": "created", - "score": 0.4922451863282659, + "score": 0.48872025255087354, "trending": true, "created": "2026-10-17T06:21:55Z", "cve": "CVE-2026-99999", @@ -333,7 +333,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.4289174515701746, + "score": 0.4284622907263396, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -350,7 +350,7 @@ "pushed": null, "released": "2026-10-19T08:41:50Z", "basis": "created", - "score": 0.27637299915606456, + "score": 0.27225403415990135, "trending": false, "created": "2026-10-19T08:41:50Z", "cve": "CVE-2026-23111", @@ -368,7 +368,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.24381498133778418, + "score": 0.24342347947448126, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -385,7 +385,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.1199946047967159, + "score": 0.11994610665705355, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -402,7 +402,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.11959557964907998, + "score": 0.11919757779053505, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -419,7 +419,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07302896146863544, + "score": 0.07296739420066162, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -436,7 +436,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.06543943848240184, + "score": 0.06540513483143101, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -453,7 +453,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.04345257969379439, + "score": 0.04343782441864744, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -470,7 +470,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.036631185611571464, + "score": 0.03661723053743757, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -487,7 +487,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.036003175774438234, + "score": 0.0359864999209454, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -504,7 +504,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.022787338868743286, + "score": 0.022777540308459226, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -521,7 +521,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.019809499255625022, + "score": 0.019798980600031525, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -538,7 +538,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.017609775474971296, + "score": 0.017601871313754593, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -555,7 +555,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.014664223696533805, + "score": 0.014659156377021422, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -572,7 +572,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.01435245648694171, + "score": 0.014347647131164471, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -589,7 +589,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.011274292987639788, + "score": 0.011273495212269126, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",