diff --git a/README.md b/README.md
index aa59a70f72b..11081eaae83 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -12,7 +12,7 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 0⭐ | 3h ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… |
+| 0⭐ | 4h ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… |
| 0⭐ | 1d ago | [CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE](https://github.com/kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE) | GLPI is a free asset and IT management software package. An authenticated user can upload and force the… |
| 0⭐ | 2d ago | [CVE-2025-47947](https://github.com/yel1337/CVE-2025-47947) | POC for libapache2-mod-security2 |
| 0⭐ | 2d ago |

[CVE-2025-8110](https://github.com/Makis6/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. |
@@ -27,7 +27,7 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 825⭐ | 4h ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
+| 825⭐ | 5h ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 3⭐ | 4d ago |

[CVE-2026-87902](https://github.com/tonydelouvre/CVE-2026-87902) | XWP_RCE - CVE-2026-87902 Hacker Console |
| 4⭐ | 4d ago |

[CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM - via… |
| 29⭐ | 4d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework / Rogue DC + LDAP spoofing, certificate abuse,… |
@@ -74,9 +74,9 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 17⭐ | 12h ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
+| 17⭐ | 13h ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
| 4⭐ | 49d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
-| 3⭐ | 65d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
+| 3⭐ | 66d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
## Trending in 2023
diff --git a/cves/2026/CVE-2026-103956.md b/cves/2026/CVE-2026-103956.md
new file mode 100644
index 00000000000..78218bd0307
--- /dev/null
+++ b/cves/2026/CVE-2026-103956.md
@@ -0,0 +1,23 @@
+### [CVE-2026-103956](https://www.cve.org/CVERecord?id=CVE-2026-103956)
+**Missing authentication for critical function in Loom for AWS**
+
+
+
+
+
+
+### Description
+
+Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role policies attached to managed agent roles, via any request to the application API in a deployment where no identity provider is configured.
+
+
+
+To remediate this issue, users should upgrade to version 1.6.1 or later.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/abraxas/cve-2026-103956-loom-unauth
diff --git a/cves/2026/CVE-2026-40281.md b/cves/2026/CVE-2026-40281.md
index 2d6c236e445..67682fce91a 100644
--- a/cves/2026/CVE-2026-40281.md
+++ b/cves/2026/CVE-2026-40281.md
@@ -17,6 +17,7 @@ Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 an
#### Github
- https://github.com/0xgh057r3c0n/CVE-2026-40281
- https://github.com/MRdark-ops/CVE-2026-40281-exploit
+- https://github.com/HackfutSecRoot/-GOTENBERG-RCE-CHAIN
#### Vulhub
- https://github.com/vulhub/vulhub/tree/master/gotenberg/CVE-2026-40281
diff --git a/cves/2026/CVE-2026-42589.md b/cves/2026/CVE-2026-42589.md
index b23ac37417a..da9d2e3ad35 100644
--- a/cves/2026/CVE-2026-42589.md
+++ b/cves/2026/CVE-2026-42589.md
@@ -16,6 +16,7 @@ No PoCs from references.
#### Github
- https://github.com/fineman999/POC_CVE-2026-42589
+- https://github.com/HackfutSecRoot/-GOTENBERG-RCE-CHAIN
#### Nuclei
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42589.yaml
diff --git a/cves/2026/CVE-2026-43499.md b/cves/2026/CVE-2026-43499.md
index cb1cbf38c23..090790c74ec 100644
--- a/cves/2026/CVE-2026-43499.md
+++ b/cves/2026/CVE-2026-43499.md
@@ -190,3 +190,4 @@ No PoCs from references.
- https://github.com/HaSiyo/Root-My-Galaxy-Payloads-SM-S938N
- https://github.com/quik71/s24-e1q-root
- https://github.com/litianyuan-91/Ghostlock-Honor70Pro
+- https://github.com/PyeProof/Root-My-Galaxy-S938NKSUCDZIF
diff --git a/docs/hero.svg b/docs/hero.svg
index 012c4f3fa99..16fea331cca 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@