From 7725df45eb2c16ade64f5fd8a2f38384b2e979ed Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Mon, 28 Sep 2026 01:09:38 +0000 Subject: [PATCH] Trending CVEs update 2026-09-28 01:09 :robot: --- README.md | 22 +++++++++++----------- cves/2025/CVE-2025-54253.md | 1 + cves/2025/CVE-2025-54254.md | 2 +- cves/2026/CVE-2026-75650.md | 1 + cves/2026/CVE-2026-78006.md | 1 + cves/2026/CVE-2026-78159.md | 1 + docs/hero.svg | 4 ++-- docs/social-card.svg | 2 +- docs/stats.json | 2 +- index/github.txt | 5 +++++ index/trending.json | 24 ++++++++++++------------ 11 files changed, 37 insertions(+), 28 deletions(-) diff --git a/README.md b/README.md index 32899b9f794..9c3daec0a54 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-28%20Sep%202026%2000%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609280007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C568-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609280007)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-28%20Sep%202026%2001%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609280107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C569-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609280107)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,13 +12,13 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 1h ago | [ply-cve-2025-56005-lab](https://github.com/gdfurr98/ply-cve-2025-56005-lab) | Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the… | -| 2⭐ | 3h ago | [CVE-2026-88772](https://github.com/murrez/CVE-2026-88772) | CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints… | -| 0⭐ | 4h ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | -| 2⭐ | 13h ago | KEV [CVE-2025-21479-FX5P](https://github.com/diyiqiuye/CVE-2025-21479-FX5P) | Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable) | -| 0⭐ | 14h ago | KEV [Reproduce-CVE-2025-32433](https://github.com/X-Bulow/Reproduce-CVE-2025-32433) | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3,… | -| 0⭐ | 17h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | -| 0⭐ | 22h ago | [POC-CVE-2025-11201](https://github.com/rmhowe425/POC-CVE-2025-11201) | PoC for MLFlow unauth RCE | +| 0⭐ | 22m ago | [CVE-2026-78006-CVE-2026-78159](https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159) | CVE-2026-78006 + CVE-2026-78159 Mass Exploit | +| 0⭐ | 2h ago | [ply-cve-2025-56005-lab](https://github.com/gdfurr98/ply-cve-2025-56005-lab) | Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the… | +| 2⭐ | 4h ago | [CVE-2026-88772](https://github.com/murrez/CVE-2026-88772) | CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints… | +| 2⭐ | 14h ago | KEV [CVE-2025-21479-FX5P](https://github.com/diyiqiuye/CVE-2025-21479-FX5P) | Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable) | +| 0⭐ | 15h ago | KEV [Reproduce-CVE-2025-32433](https://github.com/X-Bulow/Reproduce-CVE-2025-32433) | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3,… | +| 0⭐ | 18h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 0⭐ | 23h ago | [POC-CVE-2025-11201](https://github.com/rmhowe425/POC-CVE-2025-11201) | PoC for MLFlow unauth RCE | | 0⭐ | 1d ago | [CVE-2026-13249](https://github.com/murrez/CVE-2026-13249) | Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040-before… | | 0⭐ | 1d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 1⭐ | 2d ago | [opace6-cve-2026-64560](https://github.com/Wangs-official/opace6-cve-2026-64560) | 针对 OnePlus Ace6 设备的 cve-2026-64560 复现 | @@ -27,8 +27,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 7⭐ | 13h ago | KEV [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… | -| 6⭐ | 14h ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | +| 7⭐ | 14h ago | KEV [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… | +| 6⭐ | 15h ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | | 825⭐ | 1d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 1d ago | KEV [CVE-2026-mikrotik-poc](https://github.com/gagaltotal/CVE-2026-mikrotik-poc) | CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH | | 10⭐ | 1d ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 | diff --git a/cves/2025/CVE-2025-54253.md b/cves/2025/CVE-2025-54253.md index 8b25dc44f4c..dd76544a306 100644 --- a/cves/2025/CVE-2025-54253.md +++ b/cves/2025/CVE-2025-54253.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/Shivshantp/CVE-2025-54253-Exploit-Demo - https://github.com/AdityaBhatt3010/CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day +- https://github.com/CTIresource/Vendor-Verbiage diff --git a/cves/2025/CVE-2025-54254.md b/cves/2025/CVE-2025-54254.md index 0ee4c740c21..b38747f6003 100644 --- a/cves/2025/CVE-2025-54254.md +++ b/cves/2025/CVE-2025-54254.md @@ -15,5 +15,5 @@ Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/CTIresource/Vendor-Verbiage diff --git a/cves/2026/CVE-2026-75650.md b/cves/2026/CVE-2026-75650.md index ac12140d342..ece5bb8f17b 100644 --- a/cves/2026/CVE-2026-75650.md +++ b/cves/2026/CVE-2026-75650.md @@ -20,3 +20,4 @@ No PoCs from references. #### Github - https://github.com/fortbridge/stylesmuggler - https://github.com/abraxas/CVE-2026-75650 +- https://github.com/CTIresource/Vendor-Verbiage diff --git a/cves/2026/CVE-2026-78006.md b/cves/2026/CVE-2026-78006.md index 039408e181b..5f3b7cd3433 100644 --- a/cves/2026/CVE-2026-78006.md +++ b/cves/2026/CVE-2026-78006.md @@ -16,3 +16,4 @@ No PoCs from references. #### Github - https://github.com/DeadExpl0it/CVE-2026-78006-POC +- https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159 diff --git a/cves/2026/CVE-2026-78159.md b/cves/2026/CVE-2026-78159.md index 49f51dd4780..a6ada182b5b 100644 --- a/cves/2026/CVE-2026-78159.md +++ b/cves/2026/CVE-2026-78159.md @@ -16,3 +16,4 @@ No PoCs from references. #### Github - https://github.com/abraxas/CVE-2026-78159 +- https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159 diff --git a/docs/hero.svg b/docs/hero.svg index 452e4dcb8c4..f3fbb47e192 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 83,569 CVEs with public proof-of-concept exploits"> @@ -22,7 +22,7 @@ fill="#e6edf3" letter-spacing="-0.5">172,879 CVES INDEXED83,568 + fill="#2f81f7" letter-spacing="-0.5">83,569 WITH POCS1,211 diff --git a/docs/social-card.svg b/docs/social-card.svg index 4298b46e149..25a17d25508 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -23,7 +23,7 @@ fill="#e6edf3" letter-spacing="-0.5">172,879 CVES INDEXED83,568 + fill="#2f81f7" letter-spacing="-0.5">83,569 WITH POCS1,211 diff --git a/docs/stats.json b/docs/stats.json index 6257d102815..a8252cd738a 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1211, "total_cves": 172879, - "with_pocs": 83568 + "with_pocs": 83569 } diff --git a/index/github.txt b/index/github.txt index 92789c23a9a..778b6810b93 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26964,3 +26964,8 @@ CVE-2025-56005 - https://github.com/gdfurr98/ply-safepickle CVE-2026-44011 - https://github.com/khush-613/CVE-2026-44011-poc CVE-2026-71963 - https://github.com/Boreas37/CVE-2026-71963-PoC CVE-2026-88008 - https://github.com/Boreas37/CVE-2026-88008-PoC +CVE-2025-54253 - https://github.com/CTIresource/Vendor-Verbiage +CVE-2025-54254 - https://github.com/CTIresource/Vendor-Verbiage +CVE-2026-75650 - https://github.com/CTIresource/Vendor-Verbiage +CVE-2026-78006 - https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159 +CVE-2026-78159 - https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159 diff --git a/index/trending.json b/index/trending.json index fe50099c991..1c57038d7d9 100644 --- a/index/trending.json +++ b/index/trending.json @@ -461,6 +461,18 @@ "cve": "CVE-2023-32315", "kev": true }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-78006-CVE-2026-78159", + "url": "https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159", + "desc": "CVE-2026-78006 + CVE-2026-78159 Mass Exploit", + "pushed": "2026-09-28T00:47:20Z", + "created": "2026-09-28T00:45:37Z", + "cve": "CVE-2026-78006", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -485,18 +497,6 @@ "kev": false, "landed": true }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-34990", - "url": "https://github.com/predyy/CVE-2026-34990", - "desc": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.", - "pushed": "2026-09-27T19:48:09Z", - "created": "2026-09-27T19:41:06Z", - "cve": "CVE-2026-34990", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 2,