diff --git a/README.md b/README.md index 5a78628b054..9c521bdb362 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-08%20Oct%202026%2001%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610080107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C155-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C225-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610080107)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-08%20Oct%202026%2002%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610080207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C155-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C225-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610080207)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,23 +14,23 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 1h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… | -| 0⭐ | 3h ago | [CVE_2024_38063_homelab](https://github.com/ntru0/CVE_2024_38063_homelab) | Windows TCP/IP Remote Code Execution Vulnerability | -| 0⭐ | 5h ago | [CVE-2026-105844](https://github.com/murrez/CVE-2026-105844) | CVE-2026-105844 - Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321,… | -| 1⭐ | 5h ago | [CVE-2026-102782](https://github.com/murrez/CVE-2026-102782) | CVE-2026-102782 - OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC:… | -| 0⭐ | 6h ago | [CVE-2026-102253-POC](https://github.com/Ravi-lk/CVE-2026-102253-POC) | DOS infinite-loop Vulnerability POC | -| 0⭐ | 6h ago | KEV [CVE-2026-24061-Telnet-Authentication-Bypass](https://github.com/Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass) | Telnet 2.7 Authentication Bypass and Privilege Escalation / Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki… | -| 0⭐ | 8h ago | [CVE-2026-101162-xss-wp-ultimate-review](https://github.com/Hasyros/CVE-2026-101162-xss-wp-ultimate-review) | The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings… | -| 0⭐ | 8h ago | [wpexploit-CVE-2026-96451](https://github.com/MRdark-ops/wpexploit-CVE-2026-96451) | Privilege Escalation vulnerability | -| 0⭐ | 8h ago | [CVE-2021-38759](https://github.com/Hu2ie/CVE-2021-38759) | CVE-2021-38759 - Raspberry Pi OS Default Credentials Exploit | -| 0⭐ | 9h ago | [CVE-2026-13043](https://github.com/TheMalwareGuardian/CVE-2026-13043) | CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access,… | +| 0⭐ | 2h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… | +| 0⭐ | 4h ago | [CVE_2024_38063_homelab](https://github.com/ntru0/CVE_2024_38063_homelab) | Windows TCP/IP Remote Code Execution Vulnerability | +| 0⭐ | 6h ago | [CVE-2026-105844](https://github.com/murrez/CVE-2026-105844) | CVE-2026-105844 - Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321,… | +| 1⭐ | 6h ago | [CVE-2026-102782](https://github.com/murrez/CVE-2026-102782) | CVE-2026-102782 - OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC:… | +| 0⭐ | 7h ago | [CVE-2026-102253-POC](https://github.com/Ravi-lk/CVE-2026-102253-POC) | DOS infinite-loop Vulnerability POC | +| 0⭐ | 7h ago | KEV [CVE-2026-24061-Telnet-Authentication-Bypass](https://github.com/Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass) | Telnet 2.7 Authentication Bypass and Privilege Escalation / Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki… | +| 0⭐ | 9h ago | [CVE-2026-101162-xss-wp-ultimate-review](https://github.com/Hasyros/CVE-2026-101162-xss-wp-ultimate-review) | The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings… | +| 0⭐ | 9h ago | [wpexploit-CVE-2026-96451](https://github.com/MRdark-ops/wpexploit-CVE-2026-96451) | Privilege Escalation vulnerability | +| 0⭐ | 9h ago | [CVE-2021-38759](https://github.com/Hu2ie/CVE-2021-38759) | CVE-2021-38759 - Raspberry Pi OS Default Credentials Exploit | +| 0⭐ | 10h ago | [CVE-2026-13043](https://github.com/TheMalwareGuardian/CVE-2026-13043) | CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access,… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 826⭐ | 4d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | -| 394⭐ | 4d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | +| 399⭐ | 4d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | | 498⭐ | 48d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 96⭐ | 8d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 332⭐ | 72d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | @@ -48,7 +48,7 @@ | 107⭐ | 81d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… | | 25⭐ | 9d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 24⭐ | 9d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | -| 43⭐ | 26d ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | +| 8⭐ | 1d ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | ## Trending in 2025 @@ -58,11 +58,11 @@ | 22⭐ | 58d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 7⭐ | 20d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 10⭐ | 41d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | -| 7⭐ | 48d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | +| 7⭐ | 49d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 7⭐ | 62d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 7⭐ | 66d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 3⭐ | 41d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | -| 3⭐ | 50d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | +| 3⭐ | 51d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 4⭐ | 78d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 4⭐ | 80d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | | 4⭐ | 82d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | diff --git a/index/releases/2025.json b/index/releases/2025.json index 5037799f1cb..8607f0652e3 100644 --- a/index/releases/2025.json +++ b/index/releases/2025.json @@ -3761,7 +3761,7 @@ "CVE-2025-2611 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml?#":{"basis":"unknown","cve":"CVE-2025-2611","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml"}, "CVE-2025-2611 github:rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb?#":{"basis":"unknown","cve":"CVE-2025-2611","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb"}, "CVE-2025-2611 https://www.vulncheck.com/blog/ictbroadcast-kev":{"basis":"unknown","cve":"CVE-2025-2611","imported":true,"released":null,"url":"https://www.vulncheck.com/blog/ictbroadcast-kev"}, -"CVE-2025-26125 github:zeromemoryex/cve-2025-26125?#":{"basis":"pending","checked":"2026-10-07T22:09:12Z","created":"2025-01-08T05:50:07Z","cve":"CVE-2025-26125","head":"bd32f9eb2cfae367eff7977a8479b25fe0c6dc6d","imported":true,"pending":true,"pushed_at":"2026-10-07T10:43:43Z","released":null,"repo":913663551,"url":"https://github.com/ZeroMemoryEx/CVE-2025-26125"}, +"CVE-2025-26125 github:zeromemoryex/cve-2025-26125?#":{"basis":"pending","checked":"2026-10-08T02:10:14Z","created":"2025-01-08T05:50:07Z","cve":"CVE-2025-26125","head":"bd32f9eb2cfae367eff7977a8479b25fe0c6dc6d","imported":true,"pending":true,"pushed_at":"2026-10-07T10:43:43Z","released":null,"repo":913663551,"url":"https://github.com/ZeroMemoryEx/CVE-2025-26125"}, "CVE-2025-2614 https://hackerone.com/reports/3015894":{"basis":"unknown","cve":"CVE-2025-2614","imported":true,"released":null,"url":"https://hackerone.com/reports/3015894"}, "CVE-2025-2615 https://hackerone.com/reports/3049150":{"basis":"unknown","cve":"CVE-2025-2615","imported":true,"released":null,"url":"https://hackerone.com/reports/3049150"}, "CVE-2025-26153 github:mexeck88/csrf-via-stored-xss-for-privesc?#":{"basis":"unknown","cve":"CVE-2025-26153","imported":true,"released":null,"url":"https://github.com/mexeck88/CSRF-via-stored-XSS-for-PrivEsc"}, @@ -8398,7 +8398,7 @@ "CVE-2025-55182 github:eynaexp/cve-2025-55182-poc?#":{"basis":"unknown","cve":"CVE-2025-55182","imported":true,"released":null,"url":"https://github.com/EynaExp/CVE-2025-55182-POC"}, "CVE-2025-55182 github:eytannatye/r2s_cve-2025-55182?#":{"basis":"unknown","cve":"CVE-2025-55182","imported":true,"released":null,"url":"https://github.com/eytannatye/R2S_CVE-2025-55182"}, "CVE-2025-55182 github:faithtiannn/cve-2025-55182?#":{"basis":"unknown","cve":"CVE-2025-55182","imported":true,"released":null,"url":"https://github.com/Faithtiannn/CVE-2025-55182"}, -"CVE-2025-55182 github:farhan9488/cve-2025-55182-research?#":{"basis":"pending","checked":"2026-10-08T00:08:57Z","created":"2025-12-24T14:48:19Z","cve":"CVE-2025-55182","head":"d2a48606cddfa05e434929bb1f8e5119e2206d29","imported":true,"pending":true,"pushed_at":"2026-10-07T23:22:33Z","released":null,"repo":1122350558,"url":"https://github.com/Farhan9488/CVE-2025-55182-research"}, +"CVE-2025-55182 github:farhan9488/cve-2025-55182-research?#":{"basis":"pending","checked":"2026-10-08T02:08:02Z","created":"2025-12-24T14:48:19Z","cve":"CVE-2025-55182","head":"87589dbf8b0e2ccec60f88871584e5aba44741b3","imported":true,"pending":true,"pushed_at":"2026-10-08T01:15:05Z","released":null,"repo":1122350558,"url":"https://github.com/Farhan9488/CVE-2025-55182-research"}, "CVE-2025-55182 github:fhwang0926/seo-labs?#":{"basis":"unknown","cve":"CVE-2025-55182","imported":true,"released":null,"url":"https://github.com/Fhwang0926/seo-labs"}, "CVE-2025-55182 github:fomovet/cve-2025-55182?#":{"basis":"unknown","cve":"CVE-2025-55182","imported":true,"released":null,"url":"https://github.com/Fomovet/cve-2025-55182"}, "CVE-2025-55182 github:frizzardsecurity/cve-2025-55182?#":{"basis":"commit","blobs":["ca2997accc3aa878c33997e7ca402c05b88bf128"],"checked":"2026-10-06T22:56:53Z","commit":"2026-10-06T21:55:39Z","commit_verified":true,"created":"2026-10-06T21:46:00Z","cve":"CVE-2025-55182","head":"7acda2536396e9367368581244ec429981e23f2d","history_paths":["CVE-2025-55182.py"],"history_version":3,"imported":true,"paths":["CVE-2025-55182.py"],"pushed_at":"2026-10-06T21:59:01Z","released":"2026-10-06T21:55:39Z","repo":1407949516,"rev":"f3a054c965d17704c985f2c4632b35c8ba42289bb511922dd2914af86c5c88d1","sha":"151e3556404cb25551a85c7e4357ba29c20469f8","url":"https://github.com/Frizzardsecurity/CVE-2025-55182"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index fb7fbc33090..a3fc07ebddc 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -3299,7 +3299,7 @@ "CVE-2026-2083 github:6justdododo6/cve/issues/1?#":{"basis":"unknown","cve":"CVE-2026-2083","imported":true,"released":null,"url":"https://github.com/6Justdododo6/CVE/issues/1"}, "CVE-2026-2084 github:master-abc/cve/issues/24?#":{"basis":"unknown","cve":"CVE-2026-2084","imported":true,"released":null,"url":"https://github.com/master-abc/cve/issues/24"}, "CVE-2026-20841 github:0xblackash/cve-2026-20841?#":{"basis":"unknown","cve":"CVE-2026-20841","imported":true,"released":null,"url":"https://github.com/0xBlackash/CVE-2026-20841"}, -"CVE-2026-20841 github:404godd/cve-2026-20841-poc?#":{"basis":"pending","checked":"2026-10-08T00:08:57Z","created":"2026-02-26T05:21:28Z","cve":"CVE-2026-20841","head":"fc1d29be61c60163873f6e4a6c108948fb23af86","imported":true,"pending":true,"pushed_at":"2026-10-07T23:33:31Z","released":null,"repo":1167260052,"url":"https://github.com/404godd/CVE-2026-20841-PoC"}, +"CVE-2026-20841 github:404godd/cve-2026-20841-poc?#":{"basis":"pending","checked":"2026-10-08T02:08:02Z","created":"2026-02-26T05:21:28Z","cve":"CVE-2026-20841","head":"e77da424b0de89fb75913ef526cd99e64a346a7a","imported":true,"pending":true,"pushed_at":"2026-10-08T01:25:19Z","released":null,"repo":1167260052,"url":"https://github.com/404godd/CVE-2026-20841-PoC"}, "CVE-2026-20841 github:atiilla/cve-2026-20841?#":{"basis":"unknown","cve":"CVE-2026-20841","imported":true,"released":null,"url":"https://github.com/atiilla/CVE-2026-20841"}, "CVE-2026-20841 github:bttea/cve-2026-20841-poc?#":{"basis":"unknown","cve":"CVE-2026-20841","imported":true,"released":null,"url":"https://github.com/BTtea/CVE-2026-20841-PoC"}, "CVE-2026-20841 github:dogukankurnaz/cve-2026-20841-poc?#":{"basis":"unknown","cve":"CVE-2026-20841","imported":true,"released":null,"url":"https://github.com/dogukankurnaz/CVE-2026-20841-PoC"}, @@ -7263,7 +7263,7 @@ "CVE-2026-42946 github:laohuang101/nginxrift-poc?#":{"basis":"unknown","cve":"CVE-2026-42946","imported":true,"released":null,"url":"https://github.com/laohuang101/NginxRift-Poc"}, "CVE-2026-42946 github:likecq/nginx-rift?#":{"basis":"unknown","cve":"CVE-2026-42946","imported":true,"released":null,"url":"https://github.com/likecq/Nginx-Rift"}, "CVE-2026-42946 github:p3nt3st3r-star/cve-2026-42945-poc?#":{"basis":"unknown","cve":"CVE-2026-42946","imported":true,"released":null,"url":"https://github.com/p3Nt3st3r-sTAr/CVE-2026-42945-POC"}, -"CVE-2026-42978 github:coactionbrittlemaidenhair51/cve-2026-42978-poc-research?#":{"basis":"pending","checked":"2026-10-08T00:08:57Z","created":"2026-09-21T23:14:36Z","cve":"CVE-2026-42978","head":"fec84bda92a2d0c6765264e4290b1c9f4ce4751c","imported":true,"pending":true,"pushed_at":"2026-10-07T23:56:48Z","released":null,"repo":1380635492,"url":"https://github.com/coactionbrittlemaidenhair51/CVE-2026-42978-PoC-Research"}, +"CVE-2026-42978 github:coactionbrittlemaidenhair51/cve-2026-42978-poc-research?#":{"basis":"pending","checked":"2026-10-08T02:08:02Z","created":"2026-09-21T23:14:36Z","cve":"CVE-2026-42978","head":"085c9472df0e872a16a544598c1ceaebb5498b85","imported":true,"pending":true,"pushed_at":"2026-10-08T01:48:10Z","released":null,"repo":1380635492,"url":"https://github.com/coactionbrittlemaidenhair51/CVE-2026-42978-PoC-Research"}, "CVE-2026-42978 github:grizzzer/cve-2026-42978-poc-research?#":{"basis":"unknown","cve":"CVE-2026-42978","imported":true,"released":null,"url":"https://github.com/grizzzer/CVE-2026-42978-PoC-Research"}, "CVE-2026-42980 github:g4sp4rcs/cve-2026-42980-poc?#":{"basis":"unknown","cve":"CVE-2026-42980","imported":true,"released":null,"url":"https://github.com/G4sp4rCS/CVE-2026-42980-POC"}, "CVE-2026-4307 https://gist.github.com/YLChen-007/1819c843ad26aaaaecdc768a789df022":{"basis":"unknown","cve":"CVE-2026-4307","imported":true,"released":null,"url":"https://gist.github.com/YLChen-007/1819c843ad26aaaaecdc768a789df022"}, diff --git a/index/trending.json b/index/trending.json index 5d095f40161..707faf2d978 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-10-03T16:24:22Z", "released": null, "basis": "pending", - "score": 27.550323565993917, + "score": 27.4014805303906, "trending": true, "created": "2026-03-08T11:25:39Z", "cve": "CVE-2026-24061", @@ -18,7 +18,7 @@ }, { "year": 2026, - "stars": 394, + "stars": 399, "name": "cve-2026-41940-PoC", "url": "https://github.com/yasouxken/cve-2026-41940-PoC", "artifact": false, @@ -27,7 +27,7 @@ "pushed": "2026-10-03T16:48:21Z", "released": null, "basis": "pending", - "score": 13.170069941340849, + "score": 13.264924497517283, "trending": true, "created": "2026-09-21T18:23:02Z", "cve": "CVE-2026-41940", @@ -44,7 +44,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.5246014006795794, + "score": 3.5225099500609325, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -61,7 +61,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 2.1025823731965225, + "score": 2.096335064295974, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -78,7 +78,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.7172408058149844, + "score": 1.716589585168805, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -95,7 +95,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.326689223180078, + "score": 1.3258808200663463, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -112,7 +112,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 1.0563627785868177, + "score": 1.0532024804401383, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -129,7 +129,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.981002798792225, + "score": 0.9799579652524681, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -146,7 +146,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.9459366503516538, + "score": 0.9449175239003833, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -163,7 +163,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.792007669350002, + "score": 0.7914858946476603, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -180,7 +180,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7688991444099649, + "score": 0.7682622475904783, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -197,7 +197,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.6516644499481266, + "score": 0.650394146262245, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -214,7 +214,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.6190865748865936, + "score": 0.6188146929739851, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -231,7 +231,7 @@ "pushed": "2026-09-27T19:48:09Z", "released": "2026-09-27T19:47:52Z", "basis": "commit", - "score": 0.6167596167865822, + "score": 0.6151613619087708, "trending": true, "created": "2026-09-27T19:41:06Z", "cve": "CVE-2026-34990", @@ -248,7 +248,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.5839622356728785, + "score": 0.5829148228508781, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -265,7 +265,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.5431129574251485, + "score": 0.540347809785465, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -282,7 +282,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.5365272652213018, + "score": 0.5355683303630662, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -299,7 +299,7 @@ "pushed": "2026-07-18T21:09:06Z", "released": null, "basis": "pending", - "score": 0.5283798876964467, + "score": 0.5281923459162712, "trending": true, "created": "2026-07-14T14:21:27Z", "cve": "CVE-2026-43499", @@ -316,7 +316,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.5100414285636603, + "score": 0.5086715783296208, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -333,7 +333,7 @@ "pushed": "2026-09-28T09:24:46Z", "released": "2026-09-28T09:24:46Z", "basis": "commit", - "score": 0.49514565638096497, + "score": 0.49379446967094365, "trending": true, "created": "2026-09-27T18:15:38Z", "cve": "CVE-2026-88771", @@ -341,20 +341,20 @@ }, { "year": 2026, - "stars": 43, - "name": "cve-2026-85706", - "url": "https://github.com/guneykabel/cve-2026-85706", + "stars": 8, + "name": "CVE-2026-21589", + "url": "https://github.com/MarcusProgram/CVE-2026-21589", "artifact": false, "source": "github.com", - "desc": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7-19.1.7; 19.2.0-19.2.5; 19.3.0-19.3.1", - "pushed": "2026-09-11T16:38:12Z", - "released": "2026-09-11T15:54:48Z", + "desc": "h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. h3. Context This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. h3. Details: * The vulnerability must be addressed for affected versions of: Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.1, 7.2.4 Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 Crucible, fix versions 4.9.15 Fisheye, fix version 4.9.15 * Exploitation requires prior knowledge of the target file's exact name and path. * The vulnerability does not include the capability to enumerate or list directory contents.", + "pushed": "2026-10-06T15:51:43Z", + "released": "2026-10-06T15:51:43Z", "basis": "commit", - "score": 0.45819932852468986, + "score": 0.4646048397291771, "trending": true, - "created": "2026-09-11T15:24:22Z", - "cve": "CVE-2026-85706", - "kev": true + "created": "2026-10-06T15:43:34Z", + "cve": "CVE-2026-21589", + "kev": false }, { "year": 2025, @@ -367,7 +367,7 @@ "pushed": "2026-10-02T13:52:42Z", "released": "2026-10-02T13:48:22Z", "basis": "created", - "score": 0.2632055956151522, + "score": 0.2620238916335289, "trending": true, "created": "2026-10-02T13:48:22Z", "cve": "CVE-2025-45737", @@ -384,7 +384,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.13685742341388263, + "score": 0.13678976856489852, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -401,7 +401,7 @@ "pushed": null, "released": "2026-10-07T19:43:16Z", "basis": "commit", - "score": 0.09365725680838649, + "score": 0.09149161679805538, "trending": false, "created": "2026-10-07T19:42:43Z", "cve": "CVE-2026-102782", @@ -419,7 +419,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.08708687152465404, + "score": 0.08697111236728755, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -436,7 +436,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.07802140718254995, + "score": 0.07796811412593686, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -453,7 +453,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.04894549666169819, + "score": 0.048916906072108406, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -470,7 +470,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.04143524146844974, + "score": 0.04141616058274931, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -487,7 +487,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.03767863844694153, + "score": 0.03766348920615297, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -504,7 +504,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.0306663352896375, + "score": 0.030654879739937684, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -521,7 +521,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.026233464529216866, + "score": 0.026219476903931328, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -538,7 +538,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.023679606593415697, + "score": 0.023663161947418628, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -555,7 +555,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.02041220887864906, + "score": 0.02040074083433737, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -572,7 +572,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.020242025015961188, + "score": 0.020234572940554293, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -589,7 +589,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.01985018374965742, + "score": 0.019843077091753786, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -606,7 +606,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.019536428048704882, + "score": 0.019529591050325857, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -623,7 +623,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.016383026999353827, + "score": 0.01637630121020608, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -640,7 +640,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.015976755274045774, + "score": 0.015970426198357708, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -657,7 +657,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.015030600050882168, + "score": 0.015025144935721896, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019",