Update CVE PoCs 2026-09-27

2026-10-27 16:51:03 +00:00 · 2026-09-27 08:19:33 +00:00
1 parent 21d49520b9
commit 7a0f043d87
@@ -1,3 +1,3 @@
 {
-  "cvelist_fetch_time": "2026-09-26T06:45:11.258Z"
+  "cvelist_fetch_time": "2026-09-27T07:24:24.021Z"
 }
@@ -1,8 +1,8 @@
 <div align="center">

-<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172849-83540-1211" alt="PoC Index" width="100%"></a>
+<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172874-83565-1211" alt="PoC Index" width="100%"></a>

-[![last sync](https://img.shields.io/badge/last%20sync-27%20Sep%202026%2008%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609270807)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C540-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609270807)](https://github.com/0xMarcio/pocindex/stargazers)
+[![last sync](https://img.shields.io/badge/last%20sync-27%20Sep%202026%2008%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609270807)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C565-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609270807)](https://github.com/0xMarcio/pocindex/stargazers)

 <a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>

@@ -16,5 +16,4 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor
 #### Github
 - https://github.com/FenrirSec/CVE-2018-17240_exploit
 - https://github.com/Xewdy444/Netgrave
- https://github.com/BBge/CVE-2018-17240

@@ -16,6 +16,7 @@ Zoho ManageEngine Applications Manager 14710 and before allows an authenticated
 #### Github
 - https://github.com/JackHars/cve-2020-14008
 - https://github.com/0x0d3ad/CVE-2020-14008
+- https://github.com/raflesiait/CVE-2020-14008---ManageEngine

 #### ExploitDB
 - https://www.exploit-db.com/exploits/48793
@@ -0,0 +1,16 @@
+### [CVE-2023-41612](https://www.cve.org/CVERecord?id=CVE-2023-41612)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/4onurdemir/anyka-ak3918-gt111a-root-decloud
@@ -20,4 +20,5 @@ No PoCs from references.
 - https://github.com/tristanqtn/CVE-2024-37054
 - https://github.com/ClearLotus-git/CVE-2024-37054-PoC
 - https://github.com/BardLaudian/CVE-2024-37054
+- https://github.com/0o176/CVE-2024-37054_PoC_HTB_SmartHire

@@ -116,7 +116,6 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
 - https://github.com/Panche1/SSHPentest
 - https://github.com/hungln105-cell/skill-bug-app
 - https://github.com/domanhcuongkent1991-blip/security-tool
- https://github.com/zgzhang/cve-2024-6387-poc

 #### ExploitDB
 - https://www.exploit-db.com/exploits/52269
@@ -0,0 +1,19 @@
+### [CVE-2026-100311](https://www.cve.org/CVERecord?id=CVE-2026-100311)
+**mathurvishal CloudClassroom-PHP-Project Faculty Video Management managevideos2.php cross site scripting**
+![](https://img.shields.io/static/v1?label=Vendor&message=mathurvishal&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=CloudClassroom-PHP-Project&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5dadec098bfbbf3300d60c3494db3fb95b66e7be&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20Site%20Scripting&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Code%20Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The affected element is an unknown function of the file managevideos2.php of the component Faculty Video Management. Such manipulation of the argument V_Title/V_Url/V_Remarks leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://github.com/raffarj/CVE/tree/main
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,19 @@
+### [CVE-2026-100739](https://www.cve.org/CVERecord?id=CVE-2026-100739)
+**mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection**
+![](https://img.shields.io/static/v1?label=Vendor&message=mathurvishal&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=CloudClassroom-PHP-Project&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5dadec098bfbbf3300d60c3494db3fb95b66e7be&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen)
+
+### Description
+
+A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
+
+### POC
+
+#### Reference
+- https://github.com/vinniboy021-blip/Advisory/blob/main/viewresult-sqli.md
+
+#### Github
+No PoCs found on GitHub currently.
@@ -13,7 +13,7 @@ A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the funct
 ### POC

 #### Reference
-No PoCs from references.
+- https://tzh00203.notion.site/D-Link-DIR-895L-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a8061b139cacc39d58fff

 #### Github
 - https://github.com/murrez/CVE-2026-100740
@@ -0,0 +1,21 @@
+### [CVE-2026-100744](https://www.cve.org/CVERecord?id=CVE-2026-100744)
+**coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization**
+![](https://img.shields.io/static/v1?label=Vendor&message=coollabsio&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Coolify&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.1.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.1.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.1.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Missing%20Authorization&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Incorrect%20Authorization&color=brightgreen)
+
+### Description
+
+A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The exploit has been published and may be used. Upgrading to version 4.2.0 is sufficient to fix this issue. This patch is called 39ae16de4248075de8c08f3259114e064b20d52d. It is advisable to upgrade the affected component.
+
+### POC
+
+#### Reference
+- https://github.com/lakshayyverma/CVE-Discovery/blob/main/coolify-missing-authorization-route-middleware.7z
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,19 @@
+### [CVE-2026-100745](https://www.cve.org/CVERecord?id=CVE-2026-100745)
+**Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow**
+![](https://img.shields.io/static/v1?label=Vendor&message=Edimax&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=BR-6428nC&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.16&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Stack-based%20Buffer%20Overflow&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+
+### Description
+
+A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
+
+### POC
+
+#### Reference
+- https://tzh00203.notion.site/Edimax-BR-6428nC-formWizSurvey-Interface-Stack-Overflow-33db5c52018a80b5b950feb29846006c
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,20 @@
+### [CVE-2026-100746](https://www.cve.org/CVERecord?id=CVE-2026-100746)
+**coollabsio Coolify GitHub App Setup redirect missing authentication**
+![](https://img.shields.io/static/v1?label=Vendor&message=coollabsio&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Coolify&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=4.1.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Missing%20Authentication&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Authentication&color=brightgreen)
+
+### Description
+
+A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentication. The attack can be executed remotely. The exploit has been made public and could be used. Upgrading to version 4.1.1 mitigates this issue. The patch is identified as fc89e357feed5180ed1ab5eb9cb330578f025539. The affected component should be upgraded.
+
+### POC
+
+#### Reference
+- https://github.com/lakshayyverma/CVE-Discovery/blob/main/coolify-unauth-secret-overwrite-github-app-redirect.7z
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-81655](https://www.cve.org/CVERecord?id=CVE-2026-81655)
+**Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields**
+![](https://img.shields.io/static/v1?label=Product&message=Ad%20Inserter&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.8.12&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20%28%27Code%20Injection%27%29&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Ad Inserter  WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to store code which is then executed as PHP or served unescaped to site visitors.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/b189ce9a-a930-41e6-bdd1-fdcc3bfb66be/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,18 @@
+### [CVE-2026-82841](https://www.cve.org/CVERecord?id=CVE-2026-82841)
+**UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice**
+![](https://img.shields.io/static/v1?label=Product&message=UpdraftPlus%3A%20WP%20Backup%20%26%20Migration%20Plugin&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.23.8&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2.23.8&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
+
+### Description
+
+The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a particular post-migration state, allowing any authenticated user, such as a subscriber, to retrieve the credentials of the configured backup destinations, such as passwords and secret keys.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/52f39a82-89ee-43f1-ba9c-3ea646fb0a0e/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-84069](https://www.cve.org/CVERecord?id=CVE-2026-84069)
+**WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.php**
+![](https://img.shields.io/static/v1?label=Product&message=WebFacing%E2%84%A2&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=5.3&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20%28%27Path%20Traversal%27%29&color=brightgreen)
+
+### Description
+
+The WebFacing™  WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate a user-supplied path before using it to include a local file, allowing unauthenticated users to perform Local File Inclusion.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/04965370-b4f4-4629-a9b1-7450fcf6aeee/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-85002](https://www.cve.org/CVERecord?id=CVE-2026-85002)
+**EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes**
+![](https://img.shields.io/static/v1?label=Product&message=EmbedPress&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The EmbedPress  WordPress plugin before 4.6.7 does not escape one of its block attributes before outputting it inside an HTML attribute, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks against higher privileged users viewing the post.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/ad155ea2-c804-4906-956e-e2da8050d0de/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86609](https://www.cve.org/CVERecord?id=CVE-2026-86609)
+**Download Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock Subscription**
+![](https://img.shields.io/static/v1?label=Product&message=Download%20Manager&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=4.0.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked download subscription form before outputting it back in an admin page, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against administrators. This affects the commercial Pro edition only; the free Download Manager WordPress plugin before 7.5.6 published under the same slug does not ship the affected feature.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/85ebf2d8-af69-434c-b733-8156210d6d6a/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86839](https://www.cve.org/CVERecord?id=CVE-2026-86839)
+**Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR**
+![](https://img.shields.io/static/v1?label=Product&message=Online%20Scheduling%20and%20Appointment%20Booking%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brightgreen)
+
+### Description
+
+The Online Scheduling and Appointment Booking System  WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify and delete other staff members' appointments and payments, including the associated customer's personal information.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/3ab8b879-3ef7-4aa4-8620-1bde99697dcb/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-86841](https://www.cve.org/CVERecord?id=CVE-2026-86841)
+**Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options**
+![](https://img.shields.io/static/v1?label=Product&message=Online%20Scheduling%20and%20Appointment%20Booking%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=23.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-502%20Deserialization%20of%20Untrusted%20Data&color=brightgreen)
+
+### Description
+
+The Online Scheduling and Appointment Booking System  WordPress plugin before 28.3 does not prevent deserialization of untrusted input and does not correctly restrict a privileged maintenance feature to administrators, allowing users granted a custom booking-management capability, which an administrator must explicitly assign, to inject arbitrary PHP objects, overwrite privileged site options, and read stored integration secrets.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/2150717e-7564-4b29-b2e7-362dd3b480c3/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-89000](https://www.cve.org/CVERecord?id=CVE-2026-89000)
+**WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run**
+![](https://img.shields.io/static/v1?label=Product&message=WPeMatico%20RSS%20Feed%20Fetcher&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%20Server-Side%20Request%20Forgery%20%28SSRF%29&color=brightgreen)
+
+### Description
+
+The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to internal-only resources and read the responses back.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/2622b685-d2a9-4bb5-aeef-3aa4ca7adcc4/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-89001](https://www.cve.org/CVERecord?id=CVE-2026-89001)
+**WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings**
+![](https://img.shields.io/static/v1?label=Product&message=WPeMatico%20RSS%20Feed%20Fetcher&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%20Improper%20Privilege%20Management&color=brightgreen)
+
+### Description
+
+The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user, including an administrator, as the post author.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/829bfdc3-7a15-4d6a-9782-72d34fd114b7/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-89003](https://www.cve.org/CVERecord?id=CVE-2026-89003)
+**WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview**
+![](https://img.shields.io/static/v1?label=Product&message=WPeMatico%20RSS%20Feed%20Fetcher&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%20Server-Side%20Request%20Forgery%20%28SSRF%29&color=brightgreen)
+
+### Description
+
+The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the responses back.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/9b891cf0-c663-48ae-adf4-4693b46d0529/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-89006](https://www.cve.org/CVERecord?id=CVE-2026-89006)
+**WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import**
+![](https://img.shields.io/static/v1?label=Product&message=WPeMatico%20RSS%20Feed%20Fetcher&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/680091de-610a-4665-a028-515ca6c33055/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-92436](https://www.cve.org/CVERecord?id=CVE-2026-92436)
+**Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR**
+![](https://img.shields.io/static/v1?label=Product&message=Mailchimp%20for%20WooCommerce&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brightgreen)
+
+### Description
+
+The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loading a saved cart from a request-supplied identifier that is derived from a customer's email address, allowing an unauthenticated attacker who knows a customer's email address to confirm that the customer shops at the store and to read that customer's saved cart contents.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/f4d7b94a-7699-464c-a646-5946837b363a/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-92995](https://www.cve.org/CVERecord?id=CVE-2026-92995)
+**Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file**
+![](https://img.shields.io/static/v1?label=Product&message=Verge3D%20Publishing%20and%20E-Commerce&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
+
+### Description
+
+The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/184e6a19-92d4-48f6-8e54-2511e0f3f316/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -15,4 +15,4 @@ Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in
 - https://github.com/SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection

 #### Github
- https://github.com/SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-96895](https://www.cve.org/CVERecord?id=CVE-2026-96895)
+**WP YouTube Lyte < 1.7.31 - Contributor+ Stored XSS via Embed Block Attributes**
+![](https://img.shields.io/static/v1?label=Product&message=WP%20YouTube%20Lyte&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before outputting them in an HTML attribute when rendering the block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/15978f11-a7bd-41f0-94bf-069be4d03987/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-96896](https://www.cve.org/CVERecord?id=CVE-2026-96896)
+**Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request**
+![](https://img.shields.io/static/v1?label=Product&message=Malcure%20Malware%20Shield%20%E2%80%94%20Removal%2C%20Repair%2C%20Monitor&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation check on one of its AJAX actions, allowing users with a subsite administrator role on a multisite network to write and delete arbitrary files in the network's shared filesystem, which can lead to remote code execution.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/7ab467f9-4340-464c-a436-978a5acbad3a/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-96897](https://www.cve.org/CVERecord?id=CVE-2026-96897)
+**Optima Express 8.5.0 - 8.7.5 - Unauthenticated Author Account Creation & Application Password Rotation via ihf_clear_cache**
+![](https://img.shields.io/static/v1?label=Product&message=Optima%20Express%20IDX&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=8.5.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that is available to logged-out users, allowing unauthenticated attackers to force the creation of a fixed author-role account and to repeatedly rotate its application password on any connected install.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/f9fd04f4-282d-486f-8561-dbf02250282a/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-96899](https://www.cve.org/CVERecord?id=CVE-2026-96899)
+**Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script**
+![](https://img.shields.io/static/v1?label=Product&message=Optima%20Express%20IDX&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=8.6.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The Optima Express IDX WordPress plugin before 8.7.6 does not properly neutralise a script value submitted through one of its REST endpoints before storing it and echoing it into the document head when the post is rendered, allowing users with a role as low as author to perform Stored Cross-Site Scripting attacks.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/649584c7-0549-4080-92f0-bf4b9e8ee789/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-97227](https://www.cve.org/CVERecord?id=CVE-2026-97227)
+**NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data Deletion**
+![](https://img.shields.io/static/v1?label=Product&message=NextScripts%3A%20Social%20Networks%20Auto-Poster&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
+
+### Description
+
+The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions, relying on a nonce alone, allowing users an administrator has granted access to its posting features to export the site's configured social account credentials, delete arbitrary posts and reset the NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8's configuration.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/df187bfb-47f1-4259-b955-3c676f3d8cc1/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -0,0 +1,17 @@
+### [CVE-2026-97319](https://www.cve.org/CVERecord?id=CVE-2026-97319)
+**PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block**
+![](https://img.shields.io/static/v1?label=Product&message=PowerPress%20Podcasting%20plugin%20by%20Blubrry&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20%28XSS%29&color=brightgreen)
+
+### Description
+
+The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/
+
+#### Github
+No PoCs found on GitHub currently.
@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
-     role="img" aria-label="PoC Index, 83,540 CVEs with public proof-of-concept exploits">
+     role="img" aria-label="PoC Index, 83,565 CVEs with public proof-of-concept exploits">
  <clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
  <rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
  <g clip-path="url(#card)" opacity="0.6"><g>
@@ -19,10 +19,10 @@
  <text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>

  <text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">172,849</text>
+        fill="#e6edf3" letter-spacing="-0.5">172,874</text>
  <text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
        fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">83,540</text>
+        fill="#2f81f7" letter-spacing="-0.5">83,565</text>
  <text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
        fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
        fill="#f85149" letter-spacing="-0.5">1,211</text>
@@ -20,10 +20,10 @@

  <rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
  <text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">172,849</text>
+        fill="#e6edf3" letter-spacing="-0.5">172,874</text>
  <text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
        fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">83,540</text>
+        fill="#2f81f7" letter-spacing="-0.5">83,565</text>
  <text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
        fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
        fill="#f85149" letter-spacing="-0.5">1,211</text>
@@ -1,5 +1,5 @@
 {
 "kev": 1211,
- "total_cves": 172849,
- "with_pocs": 83540
+ "total_cves": 172874,
+ "with_pocs": 83565
 }
@@ -1 +1 @@
-{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
+{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
@@ -26482,7 +26482,6 @@ CVE-2023-25136 - https://github.com/Panche1/SSHPentest
 CVE-2023-38408 - https://github.com/Panche1/SSHPentest
 CVE-2024-2044 - https://github.com/hanzzly/CVE-2024-2044
 CVE-2024-6387 - https://github.com/Panche1/SSHPentest
-CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240
 CVE-2024-32019 - https://github.com/ayub0x7/cve-2024-32019-PoC
 CVE-2026-32202 - https://github.com/f0xox/CVE-2026-32202
 CVE-2025-38352 - https://github.com/longwasu/CVE-2025-38352-PoC
@@ -26890,7 +26889,6 @@ CVE-2017-3730 - https://github.com/HavocParasite/CVE-2017-3730
 CVE-2019-9053 - https://github.com/so1icitx/CVE-2019-9053
 CVE-2020-24186 - https://github.com/wvverez/CVE-2020-24186
 CVE-2024-25600 - https://github.com/so1icitx/CVE-2024-25600
-CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
 CVE-2025-24813 - https://github.com/yym8538/CVE-2025-24813
 CVE-2025-55182 - https://github.com/PedroPLCode/CVE-2025-55182_react2shell_exploit.py
 CVE-2026-0603 - https://github.com/yym8538/CVE-2026-0603
@@ -26911,7 +26909,6 @@ CVE-2026-53625 - https://github.com/7h30th3r0n3/CVE-2026-53625-GLPI-PoC
 CVE-2026-53629 - https://github.com/5kr1pt/glpi-logbleed
 CVE-2026-60004 - https://github.com/yym8538/CVE-2026-60004
 CVE-2026-63030 - https://github.com/z3rodayhacks/CVE-2026-63030-CVE-2026-60137
-CVE-2026-93349 - https://github.com/SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection
 CVE-2026-43499 - https://github.com/CKwasd/zf9-ghostlock
 CVE-2026-64600 - https://github.com/k4ntux/COWSlip
 CVE-2026-13249 - https://github.com/murrez/CVE-2026-13249
@@ -26936,3 +26933,6 @@ CVE-2026-100740 - https://github.com/murrez/CVE-2026-100740
 CVE-2026-44011 - https://github.com/4xura/CVE-2026-44011-craftcms-auth-rce
 CVE-2026-8712 - https://github.com/rahulreddykarne/CVE-2026-8712-Wyoming
 CVE-2026-8452 - https://github.com/techupdate24/citrix-netscaler-cve-2026-8452-rce
+CVE-2020-14008 - https://github.com/raflesiait/CVE-2020-14008---ManageEngine
+CVE-2023-41612 - https://github.com/4onurdemir/anyka-ak3918-gt111a-root-decloud
+CVE-2024-37054 - https://github.com/0o176/CVE-2024-37054_PoC_HTB_SmartHire
@@ -38944,3 +38944,28 @@ CVE-2026-97885 - https://github.com/luan-oliveira01/Advisory-CloudClassroom-PHP-
 CVE-2026-97886 - https://github.com/Rita-Cerejo/CVE/blob/main/README.md
 CVE-2026-97895 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-01-privesc.md
 CVE-2026-97896 - https://github.com/carlosalbertotuma/advisory/blob/main/advisory-02-config-upload-xss.md
+CVE-2026-100311 - https://github.com/raffarj/CVE/tree/main
+CVE-2026-100739 - https://github.com/vinniboy021-blip/Advisory/blob/main/viewresult-sqli.md
+CVE-2026-100740 - https://tzh00203.notion.site/D-Link-DIR-895L-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a8061b139cacc39d58fff
+CVE-2026-100744 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/coolify-missing-authorization-route-middleware.7z
+CVE-2026-100745 - https://tzh00203.notion.site/Edimax-BR-6428nC-formWizSurvey-Interface-Stack-Overflow-33db5c52018a80b5b950feb29846006c
+CVE-2026-100746 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/coolify-unauth-secret-overwrite-github-app-redirect.7z
+CVE-2026-81655 - https://wpscan.com/vulnerability/b189ce9a-a930-41e6-bdd1-fdcc3bfb66be/
+CVE-2026-82841 - https://wpscan.com/vulnerability/52f39a82-89ee-43f1-ba9c-3ea646fb0a0e/
+CVE-2026-84069 - https://wpscan.com/vulnerability/04965370-b4f4-4629-a9b1-7450fcf6aeee/
+CVE-2026-85002 - https://wpscan.com/vulnerability/ad155ea2-c804-4906-956e-e2da8050d0de/
+CVE-2026-86609 - https://wpscan.com/vulnerability/85ebf2d8-af69-434c-b733-8156210d6d6a/
+CVE-2026-86839 - https://wpscan.com/vulnerability/3ab8b879-3ef7-4aa4-8620-1bde99697dcb/
+CVE-2026-86841 - https://wpscan.com/vulnerability/2150717e-7564-4b29-b2e7-362dd3b480c3/
+CVE-2026-89000 - https://wpscan.com/vulnerability/2622b685-d2a9-4bb5-aeef-3aa4ca7adcc4/
+CVE-2026-89001 - https://wpscan.com/vulnerability/829bfdc3-7a15-4d6a-9782-72d34fd114b7/
+CVE-2026-89003 - https://wpscan.com/vulnerability/9b891cf0-c663-48ae-adf4-4693b46d0529/
+CVE-2026-89006 - https://wpscan.com/vulnerability/680091de-610a-4665-a028-515ca6c33055/
+CVE-2026-92436 - https://wpscan.com/vulnerability/f4d7b94a-7699-464c-a646-5946837b363a/
+CVE-2026-92995 - https://wpscan.com/vulnerability/184e6a19-92d4-48f6-8e54-2511e0f3f316/
+CVE-2026-96895 - https://wpscan.com/vulnerability/15978f11-a7bd-41f0-94bf-069be4d03987/
+CVE-2026-96896 - https://wpscan.com/vulnerability/7ab467f9-4340-464c-a436-978a5acbad3a/
+CVE-2026-96897 - https://wpscan.com/vulnerability/f9fd04f4-282d-486f-8561-dbf02250282a/
+CVE-2026-96899 - https://wpscan.com/vulnerability/649584c7-0549-4080-92f0-bf4b9e8ee789/
+CVE-2026-97227 - https://wpscan.com/vulnerability/df187bfb-47f1-4259-b955-3c676f3d8cc1/
+CVE-2026-97319 - https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/
@@ -117667,3 +117667,28 @@ CVE-2026-97896 - https://github.com/carlosalbertotuma/advisory/blob/main/advisor
 CVE-2026-57440 - https://github.com/advisories/GHSA-v65j-hff3-753c
 CVE-2026-57443 - https://github.com/advisories/GHSA-q986-4x7x-gx39
 CVE-2026-65838 - https://github.com/advisories/GHSA-8qqm-fp2q-v734
+CVE-2026-100311 - https://github.com/raffarj/CVE/tree/main
+CVE-2026-100739 - https://github.com/vinniboy021-blip/Advisory/blob/main/viewresult-sqli.md
+CVE-2026-100740 - https://tzh00203.notion.site/D-Link-DIR-895L-L2TP-Host-Name-AVP-Out-of-Bounds-Write-33cb5c52018a8061b139cacc39d58fff
+CVE-2026-100744 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/coolify-missing-authorization-route-middleware.7z
+CVE-2026-100745 - https://tzh00203.notion.site/Edimax-BR-6428nC-formWizSurvey-Interface-Stack-Overflow-33db5c52018a80b5b950feb29846006c
+CVE-2026-100746 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/coolify-unauth-secret-overwrite-github-app-redirect.7z
+CVE-2026-81655 - https://wpscan.com/vulnerability/b189ce9a-a930-41e6-bdd1-fdcc3bfb66be/
+CVE-2026-82841 - https://wpscan.com/vulnerability/52f39a82-89ee-43f1-ba9c-3ea646fb0a0e/
+CVE-2026-84069 - https://wpscan.com/vulnerability/04965370-b4f4-4629-a9b1-7450fcf6aeee/
+CVE-2026-85002 - https://wpscan.com/vulnerability/ad155ea2-c804-4906-956e-e2da8050d0de/
+CVE-2026-86609 - https://wpscan.com/vulnerability/85ebf2d8-af69-434c-b733-8156210d6d6a/
+CVE-2026-86839 - https://wpscan.com/vulnerability/3ab8b879-3ef7-4aa4-8620-1bde99697dcb/
+CVE-2026-86841 - https://wpscan.com/vulnerability/2150717e-7564-4b29-b2e7-362dd3b480c3/
+CVE-2026-89000 - https://wpscan.com/vulnerability/2622b685-d2a9-4bb5-aeef-3aa4ca7adcc4/
+CVE-2026-89001 - https://wpscan.com/vulnerability/829bfdc3-7a15-4d6a-9782-72d34fd114b7/
+CVE-2026-89003 - https://wpscan.com/vulnerability/9b891cf0-c663-48ae-adf4-4693b46d0529/
+CVE-2026-89006 - https://wpscan.com/vulnerability/680091de-610a-4665-a028-515ca6c33055/
+CVE-2026-92436 - https://wpscan.com/vulnerability/f4d7b94a-7699-464c-a646-5946837b363a/
+CVE-2026-92995 - https://wpscan.com/vulnerability/184e6a19-92d4-48f6-8e54-2511e0f3f316/
+CVE-2026-96895 - https://wpscan.com/vulnerability/15978f11-a7bd-41f0-94bf-069be4d03987/
+CVE-2026-96896 - https://wpscan.com/vulnerability/7ab467f9-4340-464c-a436-978a5acbad3a/
+CVE-2026-96897 - https://wpscan.com/vulnerability/f9fd04f4-282d-486f-8561-dbf02250282a/
+CVE-2026-96899 - https://wpscan.com/vulnerability/649584c7-0549-4080-92f0-bf4b9e8ee789/
+CVE-2026-97227 - https://wpscan.com/vulnerability/df187bfb-47f1-4259-b955-3c676f3d8cc1/
+CVE-2026-97319 - https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/