diff --git a/README.md b/README.md
index 21de401b83e..c75ed36f1b5 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -12,7 +12,7 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 0⭐ | 19h ago |

[CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
+| 0⭐ | 20h ago |

[CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 2⭐ | 1d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 |
| 2⭐ | 1d ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… |
| 1⭐ | 2d ago | [CVE-2025-6325_CVE-2025-6327](https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327) | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… |
@@ -27,8 +27,8 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 7⭐ | 3h ago | [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress |
-| 5⭐ | 3h ago | [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console |
+| 7⭐ | 4h ago | [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress |
+| 5⭐ | 4h ago | [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console |
| 24⭐ | 1d ago | [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
| 19⭐ | 1d ago | [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
| 825⭐ | 1d ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
diff --git a/cves/2026/CVE-2026-87899.md b/cves/2026/CVE-2026-87899.md
new file mode 100644
index 00000000000..cf9c59863c2
--- /dev/null
+++ b/cves/2026/CVE-2026-87899.md
@@ -0,0 +1,19 @@
+### [CVE-2026-87899](https://www.cve.org/CVERecord?id=CVE-2026-87899)
+
+
+
+
+
+
+
+### Description
+
+Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/cyeezy08/iamtired
diff --git a/cves/2026/CVE-2026-87902.md b/cves/2026/CVE-2026-87902.md
index 26bdf3c573e..d789343ed7b 100644
--- a/cves/2026/CVE-2026-87902.md
+++ b/cves/2026/CVE-2026-87902.md
@@ -22,6 +22,7 @@ No PoCs from references.
- https://github.com/bhideki/CVE-2026-87902
- https://github.com/oliveiralimajr/CVE_2026_87902
- https://github.com/tc4dy/CVE-2026-87902-Toolkit
+- https://github.com/nextco/wordpress-cve-2026-87902
#### Nuclei
- https://github.com/topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2026/CVE-2026-87902-wordpress-6ff76d9b-aa12-4391-90cd-f9df36d4a3a5.yaml
diff --git a/cves/2026/CVE-2026-95675.md b/cves/2026/CVE-2026-95675.md
index cdce7d1b189..329315ec9e4 100644
--- a/cves/2026/CVE-2026-95675.md
+++ b/cves/2026/CVE-2026-95675.md
@@ -15,4 +15,4 @@ D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated re
- https://www.d6fault.dev/blog/dlink-dap1360-os-command-injection
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/d6fault/CVE-2026-95675
diff --git a/docs/hero.svg b/docs/hero.svg
index 5ac16155f5d..4693606142c 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@