diff --git a/README.md b/README.md
index 8abc5d74771..29a564c3ad9 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -14,14 +14,14 @@
| Stars | Released | PoC | Description |
| --- | --- | --- | --- |
-| 0⭐ | 3h ago | [CVE-2026-111058-CVE-2026-111057-mercury-rce](https://github.com/ExDev994/CVE-2026-111058-CVE-2026-111057-mercury-rce) | Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994).… |
-| 0⭐ | 11h ago | [CVE-2026-103663](https://github.com/striga-ai/CVE-2026-103663) | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer… |
-| 0⭐ | 11h ago |

[CVE-2026-63030](https://github.com/K52-ai/CVE-2026-63030) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion… |
-| 0⭐ | 16h ago | [CVE-2026-52856-PoC](https://github.com/lisbickq/CVE-2026-52856-PoC) | PoC For CVE-2026-52856 |
-| 0⭐ | 17h ago | [CVE-2026-105105](https://github.com/Mothra-1/CVE-2026-105105) | CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8).… |
-| 0⭐ | 22h ago | [CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC](https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC) | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before… |
-| 0⭐ | 23h ago | [CVE-2026-84178](https://github.com/oscerd/CVE-2026-84178) | Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code… |
-| 4⭐ | 23h ago | [CVE-2026-23111](https://github.com/kinokopio/CVE-2026-23111) | CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus… |
+| 0⭐ | 4h ago | [CVE-2026-111058-CVE-2026-111057-mercury-rce](https://github.com/ExDev994/CVE-2026-111058-CVE-2026-111057-mercury-rce) | Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994).… |
+| 0⭐ | 12h ago | [CVE-2026-103663](https://github.com/striga-ai/CVE-2026-103663) | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer… |
+| 0⭐ | 12h ago |

[CVE-2026-63030](https://github.com/K52-ai/CVE-2026-63030) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion… |
+| 0⭐ | 17h ago | [CVE-2026-52856-PoC](https://github.com/lisbickq/CVE-2026-52856-PoC) | PoC For CVE-2026-52856 |
+| 0⭐ | 18h ago | [CVE-2026-105105](https://github.com/Mothra-1/CVE-2026-105105) | CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8).… |
+| 0⭐ | 23h ago | [CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC](https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC) | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before… |
+| 0⭐ | 1d ago | [CVE-2026-84178](https://github.com/oscerd/CVE-2026-84178) | Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code… |
+| 4⭐ | 1d ago | [CVE-2026-23111](https://github.com/kinokopio/CVE-2026-23111) | CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus… |
| 0⭐ | 1d ago | [CVE-2023-54391-POC](https://github.com/Lewis1766/CVE-2023-54391-POC) | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in… |
| 0⭐ | 1d ago | [CVE-2026-80344](https://github.com/oscerd/CVE-2026-80344) | Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure - the… |
@@ -29,8 +29,8 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 433⭐ | 2d ago |

[CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation |
-| 61⭐ | 18h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… |
+| 441⭐ | 2d ago |

[CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation |
+| 63⭐ | 19h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… |
| 477⭐ | 60d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
| 28⭐ | 1d ago |

[CVE-2026-41940-PoC](https://github.com/ZeroDayEvil/CVE-2026-41940-PoC) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that… |
| 335⭐ | 84d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
@@ -71,7 +71,7 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 17⭐ | 16d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
+| 17⭐ | 17d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
| 4⭐ | 66d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
| 3⭐ | 82d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
diff --git a/cves/2025/CVE-2025-31324.md b/cves/2025/CVE-2025-31324.md
index cdf1e5a192d..91e24a195bf 100644
--- a/cves/2025/CVE-2025-31324.md
+++ b/cves/2025/CVE-2025-31324.md
@@ -35,6 +35,7 @@ SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper a
- https://github.com/sug4r-wr41th/CVE-2025-31324
- https://github.com/aristois913/CVE-2025-31324
- https://github.com/HKenzoKimura/CVE-2025-31324
+- https://github.com/CyberGramps007/CYB-403
#### Nuclei
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yaml
diff --git a/cves/2026/CVE-2026-105484.md b/cves/2026/CVE-2026-105484.md
new file mode 100644
index 00000000000..2201255b058
--- /dev/null
+++ b/cves/2026/CVE-2026-105484.md
@@ -0,0 +1,19 @@
+### [CVE-2026-105484](https://www.cve.org/CVERecord?id=CVE-2026-105484)
+**TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection**
+
+
+
+
+
+
+### Description
+
+A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/xiaobai718-ab/CVE-2026-105484
diff --git a/docs/hero.svg b/docs/hero.svg
index 43d963e36e1..f1543ff022a 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@