admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Trending CVEs update 2026-09-20 10:09 🤖

Browse Source
This commit is contained in:
CVE-BOT committed 2026-09-20 10:09:05 +00:00
1 parent c908b9a454
commit 7ab900944c
4 files changed
+21 -40
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+7 -7
View File
@@ -2,7 +2,7 @@
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172394-83148-1201" alt="PoC Index" width="100%"></a>
[![last sync](https://img.shields.io/badge/last%20sync-20%20Sep%202026%2008%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609200807)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C148-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C201-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609200807)](https://github.com/0xMarcio/pocindex/stargazers)
[![last sync](https://img.shields.io/badge/last%20sync-20%20Sep%202026%2010%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609201007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C148-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C201-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609201007)](https://github.com/0xMarcio/pocindex/stargazers)
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
@@ -12,23 +12,23 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 0⭐ | 38m ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 1⭐ | 12h ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… |
| 1⭐ | 12h ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… |
| 0⭐ | 2h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 1⭐ | 14h ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… |
| 1⭐ | 14h ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… |
| 0⭐ | 1d ago | [CVE-2025-20260](https://github.com/keyuraghao/CVE-2025-20260) | First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump… |
| 1⭐ | 2d ago | [CVE-2026-31802](https://github.com/Recorded-texteditor120/CVE-2026-31802) | Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file… |
| 2⭐ | 2d ago | [CVE-2026-93453](https://github.com/Faceless0x7/CVE-2026-93453) | CVE-2026-93453 Exploit - SOGo password reset link poisoning via attacker-controlled Origin header, enabling… |
| 0⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [lenovo_y700_tb320fc_on_CVE-2025-21479](https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
| 1⭐ | 3d ago | [CVE-2025-57231](https://github.com/anirbala98/CVE-2025-57231) | Docmost < 0.22.0 - Arbitrary File Read |
| 2⭐ | 4d ago | [POC-CVE-2026-49975](https://github.com/naheeju/POC-CVE-2026-49975) | Security research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache… |
| 0⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 2⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-82329-PoC-Exploit](https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit) | 🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted… |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 825⭐ | 11h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 527⭐ | 11h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool |
| 825⭐ | 13h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 527⭐ | 13h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool |
| 3⭐ | 3d ago | [CVE-2026-55781-poc](https://github.com/g17hubH4ck/CVE-2026-55781-poc) | Unbounded memory allocation in NanaZip's UFS handler via an attacker-controlled `fs_bsize` field. |
| 16⭐ | 3d ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass |
| 5⭐ | 3d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation |
cves/2026/CVE-2026-36213.md
+1
View File
@@ -14,6 +14,7 @@ No PoCs from references.
#### Github
- https://github.com/sec-zone/CVE-2026-36213
- https://github.com/g17hubH4ck/CVE-2026-36213-poc
#### ExploitDB
- https://www.exploit-db.com/exploits/52615
index/github.txt
+1 -21
View File
@@ -26717,30 +26717,10 @@ CVE-2017-14689 - https://github.com/nhaixb-bit/stdu-djvu-oobread
CVE-2023-21554 - https://github.com/TheArtist54/CVE-2023-21554-PoC
CVE-2024-37054 - https://github.com/ClearLotus-git/CVE-2024-37054-PoC
CVE-2025-39964 - https://github.com/suominen/CVE-2025-39964
CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne
CVE-2018-15133 - https://github.com/pwnedshell/Larascript
CVE-2018-7600 - https://github.com/a2u/CVE-2018-7600
CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600
CVE-2018-7600 - https://github.com/g0rx/CVE-2018-7600-Drupal-RCE
CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597
CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816
CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560
CVE-2021-43798 - https://github.com/elsanose01/CVE-2021-43798-Grafana-path-traversal-tester
CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform
CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228
CVE-2022-0847 - https://github.com/MingqiZhang7710/cve-2022-0847-poc-dockerimage
CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC
CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897
CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075
CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce
CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752
CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664
CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC
CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc
CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063
CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
CVE-2025-0133 - https://github.com/inteleon404/CVE-2025-0133
CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651
CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123
CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
CVE-2026-65647 - https://github.com/boomerangBS/CVE-2026-65647-PoC
CVE-2026-36213 - https://github.com/g17hubH4ck/CVE-2026-36213-poc
index/trending.json
+12 -12
View File
@@ -520,18 +520,6 @@
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 1,
"name": "CVE-2026-31802",
"url": "https://github.com/Recorded-texteditor120/CVE-2026-31802",
"desc": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"pushed": "2026-09-18T06:50:49Z",
"created": "2026-03-28T20:49:46Z",
"cve": "CVE-2026-31802",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 2,
@@ -591,5 +579,17 @@
"cve": "CVE-2025-3248",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 2,
"name": "CVE-2026-82329-PoC-Exploit",
"url": "https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit",
"desc": "🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V",
"pushed": "2026-09-15T20:28:01Z",
"created": "2026-09-15T20:15:28Z",
"cve": "CVE-2026-82329",
"kev": true,
"landed": true
}
]