admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Trending CVEs update 2026-09-26 21:09 🤖

Browse Source
This commit is contained in:
CVE-BOT committed 2026-09-26 21:09:38 +00:00
1 parent eee63326c7
commit 7e8f9062b4
12 files changed
+147 -45
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+14 -14
View File
@@ -1,8 +1,8 @@
<div align="center">
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172839-83530-1211" alt="PoC Index" width="100%"></a>
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=172844-83535-1211" alt="PoC Index" width="100%"></a>
[![last sync](https://img.shields.io/badge/last%20sync-26%20Sep%202026%2020%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609262007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C530-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609262007)](https://github.com/0xMarcio/pocindex/stargazers)
[![last sync](https://img.shields.io/badge/last%20sync-26%20Sep%202026%2021%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609262107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C535-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609262107)](https://github.com/0xMarcio/pocindex/stargazers)
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
@@ -12,25 +12,26 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 2⭐ | 4h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-mikrotik-poc](https://github.com/gagaltotal/CVE-2026-mikrotik-poc) | CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH |
| 0⭐ | 9h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 0⭐ | 16h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 2⭐ | 16h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-67279](https://github.com/HackSpeak/CVE-2026-67279) | MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for… |
| 2⭐ | 5h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-mikrotik-poc](https://github.com/gagaltotal/CVE-2026-mikrotik-poc) | CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH |
| 0⭐ | 10h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… |
| 0⭐ | 17h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 0⭐ | 1d ago | [CVE-2025-9974](https://github.com/HORKimhab/CVE-2025-9974) | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows… |
| 1⭐ | 2d ago | [CVE-2025-7771](https://github.com/yulisec/CVE-2025-7771) | ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write… |
| 0⭐ | 3d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902](https://github.com/bhideki/CVE-2026-87902) | CVE-2026-87902: PoC for WordPress's critical path traversal |
| 2⭐ | 4d ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… |
| 1⭐ | 5d ago | [CVE-2026-77812](https://github.com/Wh02m1/CVE-2026-77812) | DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID - Proof of Concept for… |
| 1⭐ | 5d ago | [CVE-2025-6325_CVE-2025-6327](https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327) | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… |
| 2⭐ | 5d ago | [CVE-2026-90817](https://github.com/murrez/CVE-2026-90817) | Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation. |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 825⭐ | 4h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 9⭐ | 4h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 |
| 13⭐ | 6h ago | [CVE-2026-41089](https://github.com/hnytgl/CVE-2026-41089) | CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。 |
| 5⭐ | 14h ago | [CVE-2026-43682](https://github.com/petermalone/CVE-2026-43682) | CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS |
| 825⭐ | 5h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 9⭐ | 5h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 |
| 13⭐ | 7h ago | [CVE-2026-41089](https://github.com/hnytgl/CVE-2026-41089) | CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。 |
| 5⭐ | 15h ago | [CVE-2026-43682](https://github.com/petermalone/CVE-2026-43682) | CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS |
| 3⭐ | 17h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-67279](https://github.com/HackSpeak/CVE-2026-67279) | MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for… |
| 3⭐ | 1d ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… |
| 14⭐ | 1d ago | [CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit) | 🔓 CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) / Zero-click TLS type confusion to… |
| 12⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127](https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127) | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious… |
@@ -41,12 +42,11 @@
| 4⭐ | 3d ago | [CVE-2026-94129](https://github.com/lzty/CVE-2026-94129) | A POC for CVE-2026-94129 |
| 4⭐ | 3d ago | [CVE-2026-94128](https://github.com/lzty/CVE-2026-94128) | POC for CVE-2026-94128 |
| 32⭐ | 3d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
| 4⭐ | 3d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 |
| 4⭐ | 4d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 |
| 31⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
| 24⭐ | 5d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… |
| 3⭐ | 6d ago | [CVE-2026-88854](https://github.com/murrez/CVE-2026-88854) | CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) |
| 6⭐ | 6d ago | [CVE-2026-28609-matroska-pcm-oob](https://github.com/devrodT2/CVE-2026-28609-matroska-pcm-oob) | Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in… |
| 4⭐ | 6d ago | [CVE-2026-93958](https://github.com/HackSpeak/CVE-2026-93958) | D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized… |
## Trending in 2025
@@ -65,7 +65,7 @@
| 4⭐ | 69d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 4⭐ | 71d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
| 7⭐ | 80d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… |
| 4⭐ | 85d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… |
| 4⭐ | 86d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… |
| 3⭐ | 86d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) |
<details>
@@ -85,7 +85,7 @@
| --- | --- | --- | --- |
| 3⭐ | 61d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… |
| 6⭐ | 66d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 4⭐ | 80d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… |
| 4⭐ | 81d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… |
| 15⭐ | 83d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
</details>
cves/2026/CVE-2026-94130.md
+18
View File
@@ -0,0 +1,18 @@
### [CVE-2026-94130](https://www.cve.org/CVERecord?id=CVE-2026-94130)
**Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3**
![](https://img.shields.io/static/v1?label=Vendor&message=joomlaboat.com&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=YouTube%20Gallery%20extension%20for%20Joomla&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.0.0-5.7.2&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20%28%27SQL%20Injection%27%29&color=brightgreen)
### Description
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/murrez/CVE-2026-94130
cves/2026/CVE-2026-94132.md
+18
View File
@@ -0,0 +1,18 @@
### [CVE-2026-94132](https://www.cve.org/CVERecord?id=CVE-2026-94132)
**Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0**
![](https://img.shields.io/static/v1?label=Vendor&message=acymailing.com&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=AcyMailing%20Enterprise%20extension%20for%20Joomla&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.0.0-11.0.5&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-434%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type&color=brightgreen)
### Description
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/murrez/CVE-2026-94132
cves/2026/CVE-2026-97160.md
+19
View File
@@ -0,0 +1,19 @@
### [CVE-2026-97160](https://www.cve.org/CVERecord?id=CVE-2026-97160)
**Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29**
![](https://img.shields.io/static/v1?label=Vendor&message=lomart.fr&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=UP%20plugin%20for%20Joomla&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.0.0-5.2.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0.0-6.0.29&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20%28%27Code%20Injection%27%29&color=brightgreen)
### Description
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/murrez/CVE-2026-97160
cves/2026/CVE-2026-97161.md
+20
View File
@@ -0,0 +1,20 @@
### [CVE-2026-97161](https://www.cve.org/CVERecord?id=CVE-2026-97161)
**Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29**
![](https://img.shields.io/static/v1?label=Vendor&message=lomart.fr&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=UP%20plugin%20for%20Joomla&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.0.0-5.2.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0.0-6.0.29&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brightgreen)
### Description
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/murrez/CVE-2026-97161
cves/2026/CVE-2026-97163.md
+21
View File
@@ -0,0 +1,21 @@
### [CVE-2026-97163](https://www.cve.org/CVERecord?id=CVE-2026-97163)
**Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29**
![](https://img.shields.io/static/v1?label=Vendor&message=lomart.fr&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=UP%20plugin%20for%20Joomla&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5.0.0-5.2.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0.0-6.0.29&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%20Improper%20Access%20Control&color=brightgreen)
### Description
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/murrez/CVE-2026-97163
- https://github.com/qeize/cve-2026-97163-payload
docs/hero.svg
+3 -3
View File
@@ -1,5 +1,5 @@
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
role="img" aria-label="PoC Index, 83,530 CVEs with public proof-of-concept exploits">
role="img" aria-label="PoC Index, 83,535 CVEs with public proof-of-concept exploits">
<clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
<rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
<g clip-path="url(#card)" opacity="0.6"><g>
@@ -19,10 +19,10 @@
<text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
<text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
fill="#e6edf3" letter-spacing="-0.5">172,839</text>
fill="#e6edf3" letter-spacing="-0.5">172,844</text>
<text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
fill="#2f81f7" letter-spacing="-0.5">83,530</text>
fill="#2f81f7" letter-spacing="-0.5">83,535</text>
<text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
fill="#f85149" letter-spacing="-0.5">1,211</text>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 2.6 KiB

After

Width:  |  Height:  |  Size: 2.6 KiB

docs/social-card.svg
+2 -2
View File
@@ -20,10 +20,10 @@
<rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
<text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
fill="#e6edf3" letter-spacing="-0.5">172,839</text>
fill="#e6edf3" letter-spacing="-0.5">172,844</text>
<text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
fill="#2f81f7" letter-spacing="-0.5">83,530</text>
fill="#2f81f7" letter-spacing="-0.5">83,535</text>
<text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
fill="#f85149" letter-spacing="-0.5">1,211</text>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 2.7 KiB

After

Width:  |  Height:  |  Size: 2.7 KiB

docs/stats.json
+2 -2
View File
@@ -1,5 +1,5 @@
{
"kev": 1211,
"total_cves": 172839,
"with_pocs": 83530
"total_cves": 172844,
"with_pocs": 83535
}
index/cve_dates.json
+1 -1
View File
@@ -1 +1 @@
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
index/github.txt
+6
View File
@@ -26923,3 +26923,9 @@ CVE-2026-61500 - https://github.com/aramosf/CVE-2026-61500
CVE-2026-41089 - https://github.com/1posix/CVE-2026-41089-POC
CVE-2026-41940 - https://github.com/hitechcloud-vietnam/cve-2026-41940-PoC
CVE-2026-63030 - https://github.com/langz337/CVE-2026-63030
CVE-2026-94130 - https://github.com/murrez/CVE-2026-94130
CVE-2026-94132 - https://github.com/murrez/CVE-2026-94132
CVE-2026-97160 - https://github.com/murrez/CVE-2026-97160
CVE-2026-97161 - https://github.com/murrez/CVE-2026-97161
CVE-2026-97163 - https://github.com/murrez/CVE-2026-97163
CVE-2026-97163 - https://github.com/qeize/cve-2026-97163-payload
index/trending.json
+23 -23
View File
@@ -43,6 +43,17 @@
"cve": "CVE-2026-43682",
"kev": false
},
{
"year": 2026,
"stars": 3,
"name": "CVE-2026-67279",
"url": "https://github.com/HackSpeak/CVE-2026-67279",
"desc": "MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for authorized lab testing",
"pushed": "2026-09-26T03:47:01Z",
"created": "2026-09-26T03:46:49Z",
"cve": "CVE-2026-67279",
"kev": true
},
{
"year": 2026,
"stars": 3,
@@ -208,17 +219,6 @@
"cve": "CVE-2026-28609",
"kev": false
},
{
"year": 2026,
"stars": 4,
"name": "CVE-2026-93958",
"url": "https://github.com/HackSpeak/CVE-2026-93958",
"desc": "D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing",
"pushed": "2026-09-20T13:11:15Z",
"created": "2026-09-20T13:10:55Z",
"cve": "CVE-2026-93958",
"kev": false
},
{
"year": 2025,
"stars": 7,
@@ -497,18 +497,6 @@
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 2,
"name": "CVE-2026-67279",
"url": "https://github.com/HackSpeak/CVE-2026-67279",
"desc": "MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for authorized lab testing",
"pushed": "2026-09-26T03:47:01Z",
"created": "2026-09-26T03:46:49Z",
"cve": "CVE-2026-67279",
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 0,
@@ -580,5 +568,17 @@
"cve": "CVE-2025-6325",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 2,
"name": "CVE-2026-90817",
"url": "https://github.com/murrez/CVE-2026-90817",
"desc": "Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation.",
"pushed": "2026-09-21T04:06:54Z",
"created": "2026-09-21T04:05:26Z",
"cve": "CVE-2026-90817",
"kev": false,
"landed": true
}
]