diff --git a/README.md b/README.md index 6cf8bd030b5..bff8c5d007d 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-04%20Sep%202026%2009%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609040907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C585-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C184-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609040907)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-04%20Sep%202026%2010%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609041007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C585-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C184-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609041007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,26 +12,26 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 2⭐ | 3h ago | [CVE-2026-65349](https://github.com/ByteV0rtex/CVE-2026-65349) | CVE-2026-65349 PoC - getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71) | -| 4⭐ | 3h ago | [CVE-2026-64788](https://github.com/ByteV0rtex/CVE-2026-64788) | CVE-2026-64788 PoC - IOGPUFamily Use-After-Free (iOS 26.6 / 23G71) | -| 0⭐ | 7h ago | [CVE-2026-31787](https://github.com/0xAtharv/CVE-2026-31787) | Linux kernel double free in Xen privcmd driver | -| 63⭐ | 12h ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | -| 0⭐ | 19h ago | [CVE-2026-80428](https://github.com/Zipkoppie/CVE-2026-80428) | CVE-2026-80428 PoC | -| 0⭐ | 23h ago | [CVE-2026-78071](https://github.com/toanln-cov/CVE-2026-78071) | Stored XSS via Location Title in DPCalendar Free | +| 2⭐ | 4h ago | [CVE-2026-65349](https://github.com/ByteV0rtex/CVE-2026-65349) | CVE-2026-65349 PoC - getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71) | +| 4⭐ | 4h ago | [CVE-2026-64788](https://github.com/ByteV0rtex/CVE-2026-64788) | CVE-2026-64788 PoC - IOGPUFamily Use-After-Free (iOS 26.6 / 23G71) | +| 0⭐ | 8h ago | [CVE-2026-31787](https://github.com/0xAtharv/CVE-2026-31787) | Linux kernel double free in Xen privcmd driver | +| 65⭐ | 13h ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | +| 1⭐ | 15h ago | [CVE-2026-65643-PoC-Exploit](https://github.com/tc4dy/CVE-2026-65643-PoC-Exploit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… | +| 0⭐ | 20h ago | [CVE-2026-80428](https://github.com/Zipkoppie/CVE-2026-80428) | CVE-2026-80428 PoC | +| 0⭐ | 1d ago | [CVE-2026-78071](https://github.com/toanln-cov/CVE-2026-78071) | Stored XSS via Location Title in DPCalendar Free | | 0⭐ | 1d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | | 0⭐ | 1d ago | [CVE-2025-29009](https://github.com/katranSefa/CVE-2025-29009) | Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment… | | 0⭐ | 1d ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… | -| 2⭐ | 2d ago | [CVE-2026-43499-poc](https://github.com/lkeld/CVE-2026-43499-poc) | In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 3⭐ | 22h ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… | -| 6⭐ | 1d ago | [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | +| 3⭐ | 23h ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… | +| 7⭐ | 1d ago | [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | | 3⭐ | 4d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | | 16⭐ | 5d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | -| 16⭐ | 7d ago | [CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735) | CVE 1-day in http.sys | +| 16⭐ | 8d ago | [CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735) | CVE 1-day in http.sys | | 19⭐ | 8d ago | KEV [CVE-2026-72898](https://github.com/EQSTLab/CVE-2026-72898) | Metabase SQLi | | 4⭐ | 8d ago | [CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478) | GitLab Code injection | | 3⭐ | 8d ago | KEV [CVE-2026-21962](https://github.com/zeetee1235/CVE-2026-21962) | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion… | @@ -65,7 +65,7 @@ | 3⭐ | 63d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | | 4⭐ | 68d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 70d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 | -| 14⭐ | 83d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | +| 14⭐ | 84d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | | 7⭐ | 89d ago | KEV [CVE-2025-57819-poc](https://github.com/b4sh2/CVE-2025-57819-poc) | CVE-2025-57819 -> rce |
@@ -78,8 +78,8 @@ | 16⭐ | 18d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 3⭐ | 20d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 36d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | -| 3⭐ | 74d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | -| 7⭐ | 83d ago | [CVE-2024-27983-nodejs-http2](https://github.com/lirantal/CVE-2024-27983-nodejs-http2) | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on… | +| 3⭐ | 75d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | +| 7⭐ | 84d ago | [CVE-2024-27983-nodejs-http2](https://github.com/lirantal/CVE-2024-27983-nodejs-http2) | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on… | | 4⭐ | 89d ago | [CVE-2024-1065](https://github.com/kuzeyardabulut/CVE-2024-1065) | Page Cache Exploit for CVE-2024-1065 | ## Trending in 2023 diff --git a/cves/2026/CVE-2026-26211.md b/cves/2026/CVE-2026-26211.md index e03c355b6df..a311e312285 100644 --- a/cves/2026/CVE-2026-26211.md +++ b/cves/2026/CVE-2026-26211.md @@ -15,4 +15,4 @@ Ekushey Project Manager CRM stores the administrator-configured system name and - https://github.com/LindHunt/CVE-2026-26211 #### Github -- https://github.com/LindHunt/CVE-2026-26211 +No PoCs found on GitHub currently. diff --git a/cves/2026/CVE-2026-65643.md b/cves/2026/CVE-2026-65643.md index 80e09a28037..70fcf0b0210 100644 --- a/cves/2026/CVE-2026-65643.md +++ b/cves/2026/CVE-2026-65643.md @@ -20,3 +20,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-65643 - https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit +- https://github.com/tc4dy/CVE-2026-65643-PoC-Exploit diff --git a/index/github.txt b/index/github.txt index 250634c8b2d..d912f579f18 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26840,34 +26840,14 @@ CVE-2026-47627 - https://github.com/AneKazek/cve-2026-47627 CVE-2026-64788 - https://github.com/AmorCool/iOS26.6-CVE-2026-64788 CVE-2026-82329 - https://github.com/gagaltotal/CVE-2026-82329-poc CVE-2026-85046 - https://github.com/HORKimhab/CVE-2026-85046 -CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne -CVE-2018-15133 - https://github.com/pwnedshell/Larascript CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240 -CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600 CVE-2019-16098 - https://github.com/Barakat/CVE-2019-16098 -CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597 -CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816 -CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560 -CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform -CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228 -CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC -CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897 -CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075 -CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce -CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752 -CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664 CVE-2024-1086 - https://github.com/Notselwyn/CVE-2024-1086 -CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC -CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc -CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063 CVE-2024-4577 - https://github.com/11whoami99/CVE-2024-4577 CVE-2024-4577 - https://github.com/watchtowrlabs/CVE-2024-4577 CVE-2024-53027 - https://github.com/v3ilsm1th/CVE-2024-53027-WIP CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc CVE-2024-9465 - https://github.com/mustafaakalin/CVE-2024-9465 CVE-2025-24071 - https://github.com/buffertrychar/CVE-2025-24071-POC -CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651 -CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123 -CVE-2026-26211 - https://github.com/LindHunt/CVE-2026-26211 -CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC CVE-2026-52832 - https://github.com/mdvpat/CVE-2026-52832-PoC-exploit-nuclio-dashboard +CVE-2026-65643 - https://github.com/tc4dy/CVE-2026-65643-PoC-Exploit diff --git a/index/trending.json b/index/trending.json index 3cfa25e040a..dec53090328 100644 --- a/index/trending.json +++ b/index/trending.json @@ -12,7 +12,7 @@ }, { "year": 2026, - "stars": 6, + "stars": 7, "name": "CVE-2026-19490", "url": "https://github.com/TarPeg007/CVE-2026-19490", "desc": "NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC", @@ -554,7 +554,7 @@ }, { "year": 2026, - "stars": 63, + "stars": 65, "name": "CVE-2026-65343", "url": "https://github.com/ByteV0rtex/CVE-2026-65343", "desc": "CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)", @@ -564,6 +564,18 @@ "kev": false, "landed": true }, + { + "year": 2026, + "stars": 1, + "name": "CVE-2026-65643-PoC-Exploit", + "url": "https://github.com/tc4dy/CVE-2026-65643-PoC-Exploit", + "desc": "🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. 🦾 Only Use Ethically, Stay Legal <3", + "pushed": "2026-09-03T18:14:23Z", + "created": "2026-09-03T18:13:54Z", + "cve": "CVE-2026-65643", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 0, @@ -623,17 +635,5 @@ "cve": "CVE-2025-69080", "kev": false, "landed": true - }, - { - "year": 2026, - "stars": 2, - "name": "CVE-2026-43499-poc", - "url": "https://github.com/lkeld/CVE-2026-43499-poc", - "desc": "In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollback in rt_mutex_start_proxy_lock() when invoked from futex_requeue(). In the latter case waiter::task is not current, but remove_waiter() operates on current for the dequeue operation. That results in several problems: 1) the rbtree dequeue happens without waiter::task::pi_lock being held 2) the waiter task's pi_blocked_on state is not cleared, which leaves a dangling pointer primed for UAF around. 3) rt_mutex_adjust_prio_chain() operates on the wrong top priority waiter task Use waiter::task instead of current in all related operations in remove_waiter() to cure those problems. [ tglx: Fixup rt_mutex_adjust_prio_chain(), add a comment and amend the changelog ]", - "pushed": "2026-09-01T16:41:30Z", - "created": "2026-09-01T07:34:56Z", - "cve": "CVE-2026-43499", - "kev": false, - "landed": true } ]