diff --git a/README.md b/README.md index 33bc63e0f01..14f41036216 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-05%20Sep%202026%2019%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609051907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C649-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C186-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609051907)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-05%20Sep%202026%2020%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609052007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C649-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C186-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609052007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,36 +12,36 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 7h ago | [CVE-2025-29927-PoC](https://github.com/Ritinify/CVE-2025-29927-PoC) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | -| 0⭐ | 15h ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | -| 1⭐ | 20h ago | [CVE-2025-9974](https://github.com/Rajdave69/CVE-2025-9974) | Proof of Concept code for the CVE-2025-9974 affecting Nokia Beacon routers. | +| 0⭐ | 7m ago | KEV [POC-CVE-2025-68613](https://github.com/rmhowe425/POC-CVE-2025-68613) | n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4,… | +| 0⭐ | 59m ago | [CVE-2025-4255---Buffer-Overflow](https://github.com/Tenor-Z/CVE-2025-4255---Buffer-Overflow) | Exploit Framework for CVE-2025-4255 | +| 0⭐ | 8h ago | [CVE-2025-29927-PoC](https://github.com/Ritinify/CVE-2025-29927-PoC) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | +| 0⭐ | 16h ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | +| 1⭐ | 21h ago | [CVE-2025-9974](https://github.com/Rajdave69/CVE-2025-9974) | Proof of Concept code for the CVE-2025-9974 affecting Nokia Beacon routers. | | 0⭐ | 1d ago | [CVE-2026-19516](https://github.com/HORKimhab/CVE-2026-19516) | A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests,… | | 2⭐ | 1d ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… | | 2⭐ | 1d ago | [CVE-2026-65349](https://github.com/ByteV0rtex/CVE-2026-65349) | CVE-2026-65349 PoC - getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71) | | 4⭐ | 1d ago | [CVE-2026-64788](https://github.com/ByteV0rtex/CVE-2026-64788) | CVE-2026-64788 PoC - IOGPUFamily Use-After-Free (iOS 26.6 / 23G71) | -| 68⭐ | 1d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | -| 0⭐ | 2d ago | [CVE-2026-80428](https://github.com/Zipkoppie/CVE-2026-80428) | CVE-2026-80428 PoC | -| 0⭐ | 2d ago | [CVE-2026-78071](https://github.com/toanln-cov/CVE-2026-78071) | Stored XSS via Location Title in DPCalendar Free | +| 0⭐ | 1d ago | [CVE-2026-31787](https://github.com/0xAtharv/CVE-2026-31787) | Linux kernel double free in Xen privcmd driver | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 3⭐ | 7h ago | [xiaomi15-dada-cve-2026-64560](https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560) | Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8 | -| 5⭐ | 12h ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… | -| 5⭐ | 21h ago | KEV [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… | +| 3⭐ | 8h ago | [xiaomi15-dada-cve-2026-64560](https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560) | Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8 | +| 5⭐ | 13h ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… | +| 5⭐ | 22h ago | KEV [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… | | 3⭐ | 2d ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… | | 8⭐ | 3d ago | [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | | 3⭐ | 5d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | | 16⭐ | 6d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | | 3⭐ | 7d ago | KEV [PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078) | Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078 | | 20⭐ | 9d ago | [CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735) | CVE 1-day in http.sys | -| 19⭐ | 9d ago | KEV [CVE-2026-72898](https://github.com/EQSTLab/CVE-2026-72898) | Metabase SQLi | +| 20⭐ | 9d ago | KEV [CVE-2026-72898](https://github.com/EQSTLab/CVE-2026-72898) | Metabase SQLi | | 4⭐ | 9d ago | [CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478) | GitLab Code injection | | 3⭐ | 9d ago | KEV [CVE-2026-21962](https://github.com/zeetee1235/CVE-2026-21962) | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion… | | 4⭐ | 10d ago | KEV [CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570) | Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc) | | 88⭐ | 10d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | -| 5⭐ | 10d ago | KEV [CVE-2026-73570](https://github.com/HORKimhab/CVE-2026-73570) | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional… | +| 5⭐ | 11d ago | KEV [CVE-2026-73570](https://github.com/HORKimhab/CVE-2026-73570) | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional… | | 3⭐ | 11d ago | [CVE-2026-32475-PoC](https://github.com/Boreas37/CVE-2026-32475-PoC) | PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python. | | 13⭐ | 11d ago | [Keycloak_CVE-2026-18963_PoC](https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC) | This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). | | 19⭐ | 11d ago | [CVE-2026-18963-keycloak](https://github.com/Red-Darkin/CVE-2026-18963-keycloak) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… | @@ -62,7 +62,7 @@ | 5⭐ | 50d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | | 7⭐ | 59d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 64d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | -| 3⭐ | 64d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | +| 3⭐ | 65d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | | 4⭐ | 69d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 72d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 | | 14⭐ | 85d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | @@ -85,16 +85,16 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 3⭐ | 40d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | -| 5⭐ | 44d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | +| 5⭐ | 45d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | | 3⭐ | 59d ago | KEV [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… | | 15⭐ | 62d ago | KEV [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass | -| 6⭐ | 77d ago | [CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. | +| 6⭐ | 78d ago | [CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. | ## Trending in 2022 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 6⭐ | 79d ago | [NimbusPWN-CVE-2022-29799-29800](https://github.com/joshuavanderpoll/NimbusPWN-CVE-2022-29799-29800) | NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C. | +| 6⭐ | 80d ago | [NimbusPWN-CVE-2022-29799-29800](https://github.com/joshuavanderpoll/NimbusPWN-CVE-2022-29799-29800) | NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C. | diff --git a/cves/2025/CVE-2025-4255.md b/cves/2025/CVE-2025-4255.md index 3a82df9581f..6938c61d4c5 100644 --- a/cves/2025/CVE-2025-4255.md +++ b/cves/2025/CVE-2025-4255.md @@ -17,7 +17,7 @@ Es wurde eine Schwachstelle in PCMan FTP Server 2.0.7 entdeckt. Sie wurde als kr - https://fitoxs.com/exploit/exploit-52a33c7f018ae348f748582eae6aa7d38b2b5f1f3dc5d3b6793772e1f8223eb0.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/Tenor-Z/CVE-2025-4255---Buffer-Overflow #### ExploitDB - https://www.exploit-db.com/exploits/52326 diff --git a/cves/2025/CVE-2025-68613.md b/cves/2025/CVE-2025-68613.md index e3fb27dc143..ed49a85c847 100644 --- a/cves/2025/CVE-2025-68613.md +++ b/cves/2025/CVE-2025-68613.md @@ -49,6 +49,7 @@ No PoCs from references. - https://github.com/sec-dojo-com/CVE-2026-21858 - https://github.com/secjoker/CVE-2025-68613 - https://github.com/wioui/n8n-CVE-2025-68613-exploit +- https://github.com/rmhowe425/POC-CVE-2025-68613 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/n8n_workflow_expression_rce.rb diff --git a/cves/2026/CVE-2026-19598.md b/cves/2026/CVE-2026-19598.md index 884fdf2e5e1..bc7185e0101 100644 --- a/cves/2026/CVE-2026-19598.md +++ b/cves/2026/CVE-2026-19598.md @@ -26,6 +26,7 @@ No PoCs from references. - https://github.com/absholi7ly/PoC-Pods-Unauthenticated-Privilege-Escalation - https://github.com/HackfutSecRoot/multi_exploit_wp/blob/main/multi_exploit.py - https://github.com/HackfutSecRoot/multi_exploit_wp +- https://github.com/0xCyp1337/CVE-2026-19598- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19598.yaml diff --git a/index/github.txt b/index/github.txt index 55486fc1dd7..9450dc7c6b9 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26788,3 +26788,6 @@ CVE-2026-84645 - https://github.com/mhtsec/CVE-2026-84645 CVE-2026-0920 - https://github.com/K3ysTr0K3R/CVE-2026-0920 CVE-2026-43499 - https://github.com/rgnv/GhostUnlock-SM-S918U CVE-2026-58138 - https://github.com/0xBlackash/CVE-2026-58138 +CVE-2025-4255 - https://github.com/Tenor-Z/CVE-2025-4255---Buffer-Overflow +CVE-2025-68613 - https://github.com/rmhowe425/POC-CVE-2025-68613 +CVE-2026-19598 - https://github.com/0xCyp1337/CVE-2026-19598- diff --git a/index/trending.json b/index/trending.json index 69d7e3ff7d9..107d6c218fc 100644 --- a/index/trending.json +++ b/index/trending.json @@ -100,7 +100,7 @@ }, { "year": 2026, - "stars": 19, + "stars": 20, "name": "CVE-2026-72898", "url": "https://github.com/EQSTLab/CVE-2026-72898", "desc": "Metabase SQLi", @@ -494,6 +494,30 @@ "cve": "CVE-2022-29799", "kev": false }, + { + "year": 2025, + "stars": 0, + "name": "POC-CVE-2025-68613", + "url": "https://github.com/rmhowe425/POC-CVE-2025-68613", + "desc": "n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. This issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0. Users are strongly advised to upgrade to a patched version, which introduces additional safeguards to restrict expression evaluation. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only; and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully eliminate the risk and should only be used as short-term measures.", + "pushed": "2026-09-05T20:01:27Z", + "created": "2026-09-05T19:51:20Z", + "cve": "CVE-2025-68613", + "kev": true, + "landed": true + }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-4255---Buffer-Overflow", + "url": "https://github.com/Tenor-Z/CVE-2025-4255---Buffer-Overflow", + "desc": "Exploit Framework for CVE-2025-4255", + "pushed": "2026-09-05T19:09:52Z", + "created": "2026-09-05T04:10:06Z", + "cve": "CVE-2025-4255", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -578,39 +602,15 @@ "kev": false, "landed": true }, - { - "year": 2026, - "stars": 68, - "name": "CVE-2026-65343", - "url": "https://github.com/ByteV0rtex/CVE-2026-65343", - "desc": "CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)", - "pushed": "2026-09-03T20:38:35Z", - "created": "2026-09-02T20:12:10Z", - "cve": "CVE-2026-65343", - "kev": false, - "landed": true - }, { "year": 2026, "stars": 0, - "name": "CVE-2026-80428", - "url": "https://github.com/Zipkoppie/CVE-2026-80428", - "desc": "CVE-2026-80428 PoC", - "pushed": "2026-09-03T13:39:57Z", - "created": "2026-09-03T13:38:01Z", - "cve": "CVE-2026-80428", - "kev": false, - "landed": true - }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-78071", - "url": "https://github.com/toanln-cov/CVE-2026-78071", - "desc": "Stored XSS via Location Title in DPCalendar Free", - "pushed": "2026-09-03T10:01:38Z", - "created": "2026-09-03T10:01:02Z", - "cve": "CVE-2026-78071", + "name": "CVE-2026-31787", + "url": "https://github.com/0xAtharv/CVE-2026-31787", + "desc": "Linux kernel double free in Xen privcmd driver", + "pushed": "2026-09-04T01:21:16Z", + "created": "2026-09-04T01:08:31Z", + "cve": "CVE-2026-31787", "kev": false, "landed": true }