From 63ca128ff502d2dfc3d40860052a5e2ebe8ab57e Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Tue, 20 Oct 2026 03:10:54 +0000 Subject: [PATCH] Trending CVEs update 2026-10-20 03:10 :robot: --- README.md | 38 ++++----- index/releases/2023.json | 2 +- index/releases/2024.json | 4 +- index/trending.json | 168 +++++++++++++++++++-------------------- 4 files changed, 106 insertions(+), 106 deletions(-) diff --git a/README.md b/README.md index 4ca8f1bede0..b28cae7bdf7 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-20%20Oct%202026%2002%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610200207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C101-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C235-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610200207)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-20%20Oct%202026%2003%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610200307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C101-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C235-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610200307)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,41 +14,41 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 5h ago | [CVE-2026-103663](https://github.com/striga-ai/CVE-2026-103663) | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer… | -| 0⭐ | 5h ago | KEV [CVE-2026-63030](https://github.com/K52-ai/CVE-2026-63030) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion… | -| 0⭐ | 10h ago | [CVE-2026-52856-PoC](https://github.com/lisbickq/CVE-2026-52856-PoC) | PoC For CVE-2026-52856 | -| 0⭐ | 11h ago | [CVE-2026-105105](https://github.com/Mothra-1/CVE-2026-105105) | CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8).… | -| 0⭐ | 16h ago | [CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC](https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC) | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before… | -| 0⭐ | 17h ago | [CVE-2026-84178](https://github.com/oscerd/CVE-2026-84178) | Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code… | -| 4⭐ | 17h ago | [CVE-2026-23111](https://github.com/kinokopio/CVE-2026-23111) | CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus… | -| 0⭐ | 18h ago | [CVE-2023-54391-POC](https://github.com/Lewis1766/CVE-2023-54391-POC) | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in… | -| 0⭐ | 18h ago | [CVE-2026-80344](https://github.com/oscerd/CVE-2026-80344) | Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure - the… | -| 0⭐ | 22h ago | KEV [CVE-2025-55182](https://github.com/0xRAM-bit/CVE-2025-55182) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0,… | +| 0⭐ | 6h ago | [CVE-2026-103663](https://github.com/striga-ai/CVE-2026-103663) | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer… | +| 0⭐ | 6h ago | KEV [CVE-2026-63030](https://github.com/K52-ai/CVE-2026-63030) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion… | +| 0⭐ | 11h ago | [CVE-2026-52856-PoC](https://github.com/lisbickq/CVE-2026-52856-PoC) | PoC For CVE-2026-52856 | +| 0⭐ | 12h ago | [CVE-2026-105105](https://github.com/Mothra-1/CVE-2026-105105) | CVE-2026-105105 - NASA-AMMOS AIT-Core unauthenticated ZeroMQ command/telemetry bus (CWE-306, CVSS 9.8).… | +| 0⭐ | 17h ago | [CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC](https://github.com/shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC) | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before… | +| 0⭐ | 18h ago | [CVE-2026-84178](https://github.com/oscerd/CVE-2026-84178) | Reproducer for CVE-2026-84178 (Apache Camel camel-oauth): the authorization-code callback redeems the code… | +| 4⭐ | 18h ago | [CVE-2026-23111](https://github.com/kinokopio/CVE-2026-23111) | CVE-2026-23111 nf_tables UAF exploit for Ubuntu 6.8.0-101-generic: unprivileged user → host root, plus… | +| 0⭐ | 19h ago | [CVE-2023-54391-POC](https://github.com/Lewis1766/CVE-2023-54391-POC) | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in… | +| 0⭐ | 19h ago | [CVE-2026-80344](https://github.com/oscerd/CVE-2026-80344) | Reproducer for CVE-2026-80344 (Apache Camel camel-as2): asynchronous MDN SSRF + credential disclosure - the… | +| 0⭐ | 23h ago | KEV [CVE-2025-55182](https://github.com/0xRAM-bit/CVE-2025-55182) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0,… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 425⭐ | 2d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | -| 56⭐ | 12h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | +| 58⭐ | 13h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | | 477⭐ | 60d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | -| 28⭐ | 18h ago | KEV [CVE-2026-41940-PoC](https://github.com/ZeroDayEvil/CVE-2026-41940-PoC) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that… | -| 59⭐ | 6d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | +| 28⭐ | 19h ago | KEV [CVE-2026-41940-PoC](https://github.com/ZeroDayEvil/CVE-2026-41940-PoC) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that… | | 335⭐ | 84d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | +| 59⭐ | 6d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | | 96⭐ | 20d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 188⭐ | 58d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | +| 15⭐ | 21h ago | [CVE-2026-64560-public](https://github.com/Feng1586/CVE-2026-64560-public) | CVE-2026-64560 staged security research package | | 35⭐ | 6d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC | | 24⭐ | 3d ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | -| 13⭐ | 20h ago | [CVE-2026-64560-public](https://github.com/Feng1586/CVE-2026-64560-public) | CVE-2026-64560 staged security research package | | 25⭐ | 4d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | | 92⭐ | 38d ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | | 88⭐ | 38d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… | -| 105⭐ | 54d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | +| 105⭐ | 55d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | | 53⭐ | 20d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | | 86⭐ | 46d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | | 108⭐ | 77d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… | -| 40⭐ | 25d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | -| 10⭐ | 2d ago | [CVE-2026-99999](https://github.com/PeronGH/CVE-2026-99999) | PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP. | +| 12⭐ | 2d ago | [CVE-2026-99999](https://github.com/PeronGH/CVE-2026-99999) | PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP. | +| 40⭐ | 26d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | ## Trending in 2025 @@ -56,7 +56,7 @@ | --- | --- | --- | --- | | 5⭐ | 7d ago | KEV [CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | | 22⭐ | 70d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | -| 8⭐ | 32d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | +| 8⭐ | 33d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 10⭐ | 53d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 9⭐ | 78d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 7⭐ | 74d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | diff --git a/index/releases/2023.json b/index/releases/2023.json index 3fb1408cd35..a522c84b07a 100644 --- a/index/releases/2023.json +++ b/index/releases/2023.json @@ -1229,7 +1229,7 @@ "CVE-2023-20198 github:tounsi007/cve-2023-20198?#":{"basis":"unknown","cve":"CVE-2023-20198","imported":true,"released":null,"url":"https://github.com/Tounsi007/CVE-2023-20198"}, "CVE-2023-20198 github:vulnmachines/cisco_cve-2023-20198?#":{"basis":"unknown","cve":"CVE-2023-20198","imported":true,"released":null,"url":"https://github.com/Vulnmachines/Cisco_CVE-2023-20198"}, "CVE-2023-20198 github:w01fh4cker/cve-2023-20198-rce?#":{"basis":"unknown","cve":"CVE-2023-20198","imported":true,"released":null,"url":"https://github.com/W01fh4cker/CVE-2023-20198-RCE"}, -"CVE-2023-20198 github:waynec1eated-bot/cve-2023-20198-cisco-ios-xe?#":{"basis":"pending","checked":"2026-10-20T02:08:07Z","created":"2026-10-19T07:59:02Z","cve":"CVE-2023-20198","gone":"2026-10-20T02:11:47Z","head":"2b6155b727e0bea4e02a7d0ec3375436c24aab85","pending":true,"pushed_at":"2026-10-19T08:02:31Z","released":null,"repo":1425294445,"seen":"2026-10-19T08:09:03Z","url":"https://github.com/waynec1eated-bot/CVE-2023-20198-Cisco-IOS-XE"}, +"CVE-2023-20198 github:waynec1eated-bot/cve-2023-20198-cisco-ios-xe?#":{"basis":"pending","checked":"2026-10-20T02:08:07Z","created":"2026-10-19T07:59:02Z","cve":"CVE-2023-20198","gone":"2026-10-20T03:10:30Z","head":"2b6155b727e0bea4e02a7d0ec3375436c24aab85","pending":true,"pushed_at":"2026-10-19T08:02:31Z","released":null,"repo":1425294445,"seen":"2026-10-19T08:09:03Z","url":"https://github.com/waynec1eated-bot/CVE-2023-20198-Cisco-IOS-XE"}, "CVE-2023-20209 github:peter5he1by/cve-2023-20209?#":{"basis":"unknown","cve":"CVE-2023-20209","imported":true,"released":null,"url":"https://github.com/peter5he1by/CVE-2023-20209"}, "CVE-2023-2021 https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0":{"basis":"unknown","cve":"CVE-2023-2021","imported":true,"released":null,"url":"https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0"}, "CVE-2023-2022 https://hackerone.com/reports/1936572":{"basis":"unknown","cve":"CVE-2023-2022","imported":true,"released":null,"url":"https://hackerone.com/reports/1936572"}, diff --git a/index/releases/2024.json b/index/releases/2024.json index 2bc3c9e8919..6be259e0fd0 100644 --- a/index/releases/2024.json +++ b/index/releases/2024.json @@ -5468,7 +5468,7 @@ "CVE-2024-35250 github:brentlyw/givemekernel?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/Brentlyw/GiveMeKernel"}, "CVE-2024-35250 github:cli0xfa/simple-krw-vuln?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/cli0xfa/simple-krw-vuln"}, "CVE-2024-35250 github:crackercat/cve-2024-35250?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/CrackerCat/CVE-2024-35250"}, -"CVE-2024-35250 github:m01000xd/cve-2024-35250?#":{"basis":"pending","checked":"2026-10-20T02:07:44Z","created":"2026-10-19T16:52:16Z","cve":"CVE-2024-35250","gone":"2026-10-20T02:11:47Z","head":"7e432f4829697f1432b6a0df58eef3cbeee1ee86","pending":true,"pushed_at":"2026-10-19T16:54:13Z","released":null,"repo":1425913814,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/m01000xd/CVE-2024-35250"}, +"CVE-2024-35250 github:m01000xd/cve-2024-35250?#":{"basis":"pending","checked":"2026-10-20T02:07:44Z","created":"2026-10-19T16:52:16Z","cve":"CVE-2024-35250","gone":"2026-10-20T03:10:30Z","head":"7e432f4829697f1432b6a0df58eef3cbeee1ee86","pending":true,"pushed_at":"2026-10-19T16:54:13Z","released":null,"repo":1425913814,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/m01000xd/CVE-2024-35250"}, "CVE-2024-35250 github:rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_35250_ks_driver.rb?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_35250_ks_driver.rb"}, "CVE-2024-35250 github:ro0tmylove/cve-2024-35250-bof?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/ro0tmylove/CVE-2024-35250-BOF"}, "CVE-2024-35250 github:sunny-boy-fqy/windows-exploit?#":{"basis":"unknown","cve":"CVE-2024-35250","imported":true,"released":null,"url":"https://github.com/sunny-boy-fqy/windows-exploit"}, @@ -9206,7 +9206,7 @@ "CVE-2024-58296 https://www.exploit-db.com/exploits/52015":{"basis":"source","cve":"CVE-2024-58296","imported":true,"released":"2024-05-13","source":"2024-05-13","url":"https://www.exploit-db.com/exploits/52015"}, "CVE-2024-58297 https://www.exploit-db.com/exploits/52016":{"basis":"source","cve":"CVE-2024-58297","imported":true,"released":"2024-05-13","source":"2024-05-13","url":"https://www.exploit-db.com/exploits/52016"}, "CVE-2024-58298 https://www.exploit-db.com/exploits/51991":{"basis":"source","cve":"CVE-2024-58298","imported":true,"released":"2024-04-13","source":"2024-04-13","url":"https://www.exploit-db.com/exploits/51991"}, -"CVE-2024-58299 github:cyberwarrior10101/cve-2024-58299?#":{"basis":"pending","checked":"2026-10-20T02:07:44Z","created":"2026-10-19T15:53:31Z","cve":"CVE-2024-58299","gone":"2026-10-20T02:11:47Z","head":"dbd98c4bc4bb630ec1477fc230cf6546b77ba068","pending":true,"pushed_at":"2026-10-19T15:57:53Z","released":null,"repo":1425848185,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/CyberWarrior10101/CVE-2024-58299"}, +"CVE-2024-58299 github:cyberwarrior10101/cve-2024-58299?#":{"basis":"pending","checked":"2026-10-20T02:07:44Z","created":"2026-10-19T15:53:31Z","cve":"CVE-2024-58299","gone":"2026-10-20T03:10:30Z","head":"dbd98c4bc4bb630ec1477fc230cf6546b77ba068","pending":true,"pushed_at":"2026-10-19T15:57:53Z","released":null,"repo":1425848185,"seen":"2026-10-19T21:09:39Z","url":"https://github.com/CyberWarrior10101/CVE-2024-58299"}, "CVE-2024-58299 https://www.exploit-db.com/exploits/51767":{"basis":"source","cve":"CVE-2024-58299","imported":true,"released":"2024-02-02","source":"2024-02-02","url":"https://www.exploit-db.com/exploits/51767"}, "CVE-2024-5830 github:github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE_2024_5830?#":{"basis":"commit","blobs":["6370e6d7b6e02d1de73b85faf7accdd5778e2703"],"checked":"2026-10-06T22:39:16Z","commit":"2024-08-12T12:07:46Z","commit_verified":true,"created":"2019-11-12T01:14:24Z","cve":"CVE-2024-5830","head":"c63e6adecf23cd5b23d3df72d32d7c7b41b747ff","history_paths":["SecurityExploits/Chrome/v8/CVE_2024_5830/calc.html"],"history_version":3,"imported":true,"paths":["SecurityExploits/Chrome/v8/CVE_2024_5830/calc.html"],"pushed_at":"2026-06-08T08:08:15Z","released":"2024-08-12T12:07:46Z","repo":221101274,"rev":"02bf4f8b8f3b1a4a21d02fd5ea8ce87e41c5eae6b2fdff4751e5cea740ab4ded","sha":"6dae42c0a60bf80ee16fa849590e37807b2527b8","url":"https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE_2024_5830"}, "CVE-2024-5830 github:l1m3syc/cve-2024-4947-poc?#":{"basis":"unknown","cve":"CVE-2024-5830","imported":true,"released":null,"url":"https://github.com/l1m3syc/CVE-2024-4947-PoC"}, diff --git a/index/trending.json b/index/trending.json index c1c5233c365..8a5e906ace8 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-10-17T16:48:15Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 13.826176028134322, + "score": 13.755236928081953, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -18,7 +18,7 @@ }, { "year": 2026, - "stars": 56, + "stars": 58, "name": "CVE-2026-20817", "url": "https://github.com/ZeroDayEvil/CVE-2026-20817", "artifact": false, @@ -27,7 +27,7 @@ "pushed": "2026-10-19T13:57:31Z", "released": null, "basis": "pending", - "score": 4.538845631088402, + "score": 4.613544091761609, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -44,7 +44,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.8957478210780736, + "score": 2.8943898813865916, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -61,29 +61,12 @@ "pushed": "2026-10-19T07:44:03Z", "released": null, "basis": "pending", - "score": 2.030961111983296, + "score": 1.9986312885668247, "trending": true, "created": "2026-09-28T18:52:52Z", "cve": "CVE-2026-41940", "kev": true }, - { - "year": 2026, - "stars": 59, - "name": "CVE-2026-97229-PoC", - "url": "https://github.com/jburgess-r7/CVE-2026-97229-PoC", - "artifact": false, - "source": "github.com", - "desc": "GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image", - "pushed": "2026-10-13T16:00:26Z", - "released": "2026-10-13T16:00:26Z", - "basis": "commit", - "score": 1.56772457115121, - "trending": true, - "created": "2026-10-13T09:39:17Z", - "cve": "CVE-2026-97229", - "kev": false - }, { "year": 2026, "stars": 335, @@ -95,12 +78,29 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5649954955280634, + "score": 1.5644906300861798, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", "kev": false }, + { + "year": 2026, + "stars": 59, + "name": "CVE-2026-97229-PoC", + "url": "https://github.com/jburgess-r7/CVE-2026-97229-PoC", + "artifact": false, + "source": "github.com", + "desc": "GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image", + "pushed": "2026-10-13T16:00:26Z", + "released": "2026-10-13T16:00:26Z", + "basis": "commit", + "score": 1.5616910900813363, + "trending": true, + "created": "2026-10-13T09:39:17Z", + "cve": "CVE-2026-97229", + "kev": false + }, { "year": 2026, "stars": 96, @@ -112,7 +112,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.1990519445737122, + "score": 1.197477532331462, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -129,12 +129,29 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.158417897833299, + "score": 1.1578629968855132, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", "kev": false }, + { + "year": 2026, + "stars": 15, + "name": "CVE-2026-64560-public", + "url": "https://github.com/Feng1586/CVE-2026-64560-public", + "artifact": false, + "source": "github.com", + "desc": "CVE-2026-64560 staged security research package", + "pushed": "2026-10-19T05:30:19Z", + "released": null, + "basis": "pending", + "score": 1.0338313771131142, + "trending": true, + "created": "2026-10-19T05:30:01Z", + "cve": "CVE-2026-64560", + "kev": false + }, { "year": 2026, "stars": 35, @@ -146,7 +163,7 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 0.945277712691178, + "score": 0.9415545241542873, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", @@ -163,29 +180,12 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 0.9260138695550355, + "score": 0.9199618146685798, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", "kev": false }, - { - "year": 2026, - "stars": 13, - "name": "CVE-2026-64560-public", - "url": "https://github.com/Feng1586/CVE-2026-64560-public", - "artifact": false, - "source": "github.com", - "desc": "CVE-2026-64560 staged security research package", - "pushed": "2026-10-19T05:30:19Z", - "released": null, - "basis": "pending", - "score": 0.909759853145891, - "trending": true, - "created": "2026-10-19T05:30:01Z", - "cve": "CVE-2026-64560", - "kev": false - }, { "year": 2026, "stars": 25, @@ -197,7 +197,7 @@ "pushed": "2026-10-15T14:24:25Z", "released": "2026-10-15T14:24:25Z", "basis": "commit", - "score": 0.8204846019693486, + "score": 0.8162220164850689, "trending": true, "created": "2026-10-15T14:19:23Z", "cve": "CVE-2026-64560", @@ -214,7 +214,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7599507896194487, + "score": 0.7593976337328603, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -231,7 +231,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7309778853969092, + "score": 0.7304415629433003, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -248,7 +248,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.6756406164167661, + "score": 0.6752963186821723, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -265,7 +265,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.6634035545336604, + "score": 0.6625297947390429, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -282,7 +282,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.6257408801251418, + "score": 0.625360862532429, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -299,12 +299,29 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5509169961262865, + "score": 0.5507154896603471, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", "kev": false }, + { + "year": 2026, + "stars": 12, + "name": "CVE-2026-99999", + "url": "https://github.com/PeronGH/CVE-2026-99999", + "artifact": false, + "source": "github.com", + "desc": "PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP.", + "pushed": "2026-10-17T07:35:29Z", + "released": "2026-10-17T06:21:55Z", + "basis": "created", + "score": 0.5034011307811755, + "trending": true, + "created": "2026-10-17T06:21:55Z", + "cve": "CVE-2026-99999", + "kev": false + }, { "year": 2026, "stars": 40, @@ -316,29 +333,12 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.4307722626165433, + "score": 0.4303144473213769, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", "kev": false }, - { - "year": 2026, - "stars": 10, - "name": "CVE-2026-99999", - "url": "https://github.com/PeronGH/CVE-2026-99999", - "artifact": false, - "source": "github.com", - "desc": "PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP.", - "pushed": "2026-10-17T07:35:29Z", - "released": "2026-10-17T06:21:55Z", - "basis": "created", - "score": 0.4226436737084977, - "trending": true, - "created": "2026-10-17T06:21:55Z", - "cve": "CVE-2026-99999", - "kev": false - }, { "year": 2026, "stars": 4, @@ -350,7 +350,7 @@ "pushed": null, "released": "2026-10-19T08:41:50Z", "basis": "created", - "score": 0.2947835329898655, + "score": 0.28999821238553775, "trending": false, "created": "2026-10-19T08:41:50Z", "cve": "CVE-2026-23111", @@ -368,7 +368,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.24541656499324366, + "score": 0.24502068377102365, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -385,7 +385,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.12124111718788534, + "score": 0.12083161431936199, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -402,7 +402,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.1201915132797672, + "score": 0.12014304696762158, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -419,7 +419,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07327960867448777, + "score": 0.07321781435111852, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -436,7 +436,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.0655788184459077, + "score": 0.06554449665801228, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -453,7 +453,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.043512464163667906, + "score": 0.04349772796677368, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -470,7 +470,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.03668783686608911, + "score": 0.036673894143569745, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -487,7 +487,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.03607090638950099, + "score": 0.03605423177067602, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -504,7 +504,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.022827133588541902, + "score": 0.022817340212419546, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -521,7 +521,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.01985223963548518, + "score": 0.01984171471309422, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -538,7 +538,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.017641876172272124, + "score": 0.017633973714122536, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -555,7 +555,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.01468479282951215, + "score": 0.014679732409905798, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -572,7 +572,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.014371976603312622, + "score": 0.014367176547560733, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -589,7 +589,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.011277526176353074, + "score": 0.011276732067522607, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",