admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Trending CVEs update 2026-09-08 19:09 🤖

Browse Source
This commit is contained in:
CVE-BOT committed 2026-09-08 19:09:52 +00:00
1 parent 89f8648a19
commit 8d20590604
11 files changed
+136 -45
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+11 -11
View File
@@ -1,8 +1,8 @@
<div align="center">
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171438-82676-1186" alt="PoC Index" width="100%"></a>
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171440-82678-1186" alt="PoC Index" width="100%"></a>
[![last sync](https://img.shields.io/badge/last%20sync-08%20Sep%202026%2017%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609081707)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C676-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C186-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609081707)](https://github.com/0xMarcio/pocindex/stargazers)
[![last sync](https://img.shields.io/badge/last%20sync-08%20Sep%202026%2019%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609081907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C678-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C186-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609081907)](https://github.com/0xMarcio/pocindex/stargazers)
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
@@ -12,32 +12,33 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 0⭐ | 35m ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. |
| 0⭐ | 17m ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-85046](https://github.com/atiilla/CVE-2026-85046) | V8 Type Confusion Exploit Research |
| 0⭐ | 2h ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. |
| 0⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819](https://github.com/r3vpwnx/CVE-2025-57819) | CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC) |
| 0⭐ | 2d ago | [CVE-2025-24799](https://github.com/galisko/CVE-2025-24799) | GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection… |
| 0⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [POC-CVE-2025-68613](https://github.com/rmhowe425/POC-CVE-2025-68613) | n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4,… |
| 0⭐ | 2d ago | [CVE-2025-4255---Buffer-Overflow](https://github.com/Tenor-Z/CVE-2025-4255---Buffer-Overflow) | Exploit Framework for CVE-2025-4255 |
| 2⭐ | 2d ago | [CVE-2026-58138](https://github.com/0xBlackash/CVE-2026-58138) | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that… |
| 2⭐ | 3d ago | [CVE-2026-58138](https://github.com/0xBlackash/CVE-2026-58138) | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that… |
| 4⭐ | 3d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-85046-poc](https://github.com/adriyansyah-mf/cve-2026-85046-poc) | Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary… |
| 0⭐ | 3d ago | [CVE-2025-29927-PoC](https://github.com/Ritinify/CVE-2025-29927-PoC) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… |
| 1⭐ | 3d ago | [CVE-2026-32475](https://github.com/4minx/CVE-2026-32475) | CVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary File Upload to RCE |
| 0⭐ | 3d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 824⭐ | 23h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 824⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 532⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool |
| 13⭐ | 1d ago | [CVE-2026-28576-poc](https://github.com/mobilehackinglab/CVE-2026-28576-poc) | SQL injection vulnerability in Android 17 (AOSP) |
| 14⭐ | 1d ago | [CVE-2026-28576-poc](https://github.com/mobilehackinglab/CVE-2026-28576-poc) | SQL injection vulnerability in Android 17 (AOSP) |
| 4⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via… |
| 10⭐ | 3d ago | [xiaomi15-dada-cve-2026-64560](https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560) | Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8 |
| 6⭐ | 3d ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… |
| 5⭐ | 3d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… |
| 4⭐ | 4d ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… |
| 5⭐ | 4d ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… |
| 4⭐ | 5d ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… |
| 3⭐ | 6d ago | [cve-2026-47627](https://github.com/AneKazek/cve-2026-47627) | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path… |
| 12⭐ | 6d ago | [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… |
| 3⭐ | 7d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass |
| 4⭐ | 8d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… |
| 16⭐ | 9d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. |
| 3⭐ | 10d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078) | Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078 |
@@ -46,7 +47,6 @@
| 4⭐ | 12d ago | [CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478) | GitLab Code injection |
| 3⭐ | 12d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-21962](https://github.com/zeetee1235/CVE-2026-21962) | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion… |
| 4⭐ | 13d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570) | Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc) |
| 88⭐ | 13d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
## Trending in 2025
@@ -87,8 +87,8 @@
| 3⭐ | 43d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… |
| 5⭐ | 47d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 3⭐ | 62d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… |
| 15⭐ | 64d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
| 6⭐ | 80d ago | [CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. |
| 15⭐ | 65d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass |
| 6⭐ | 81d ago | [CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. |
## Trending in 2022
cves/2026/CVE-2026-29782.md
+1 -1
View File
@@ -15,4 +15,4 @@ OpenSTAManager is an open source management software for technical assistance an
- https://github.com/advisories/GHSA-whv5-4q2f-q68g
#### Github
No PoCs found on GitHub currently.
- https://github.com/hackerking24/CVE-2026-29782-OpenSTAManager-RCE
cves/2026/CVE-2026-69267.md
+37
View File
@@ -0,0 +1,37 @@
### [CVE-2026-69267](https://www.cve.org/CVERecord?id=CVE-2026-69267)
**Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability**
![](https://img.shields.io/static/v1?label=Vendor&message=Microsoft&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201809&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2021H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2022H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2023H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2023H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2024H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2025H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2026H1&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202022&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202025&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202025%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=10.0.17763.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.19044.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.19045.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.22631.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.26100.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.26200.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.28000.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.20348.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-1220%3A%20Insufficient%20Granularity%20of%20Access%20Control&color=brightgreen)
### Description
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/redroot97/windows
cves/2026/CVE-2026-69451.md
+47
View File
@@ -0,0 +1,47 @@
### [CVE-2026-69451](https://www.cve.org/CVERecord?id=CVE-2026-69451)
**Windows Management Instrumentation Elevation of Privilege Vulnerability**
![](https://img.shields.io/static/v1?label=Vendor&message=Microsoft&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201607&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201809&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2021H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2022H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2023H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2023H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2024H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2025H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2026H1&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20R2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20R2%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202016&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202016%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202022&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202025&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202025%20%28Server%20Core%20installation%29&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=10.0.14393.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.17763.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.19044.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.19045.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.22631.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.26100.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.26200.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.28000.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.2.9200.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.3.9600.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=10.0.20348.0&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416%3A%20Use%20After%20Free&color=brightgreen)
### Description
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fj016/CVE-2026-69451-PoC
cves/2026/CVE-2026-85046.md
+2
View File
@@ -17,3 +17,5 @@ No PoCs from references.
#### Github
- https://github.com/HORKimhab/CVE-2026-85046
- https://github.com/adriyansyah-mf/cve-2026-85046-poc
- https://github.com/atiilla/CVE-2026-85046
- https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm
docs/hero.svg
+3 -3
View File
@@ -1,5 +1,5 @@
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
role="img" aria-label="PoC Index, 82,676 CVEs with public proof-of-concept exploits">
role="img" aria-label="PoC Index, 82,678 CVEs with public proof-of-concept exploits">
<clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
<rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
<g clip-path="url(#card)" opacity="0.6"><g>
@@ -19,10 +19,10 @@
<text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
<text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
fill="#e6edf3" letter-spacing="-0.5">171,438</text>
fill="#e6edf3" letter-spacing="-0.5">171,440</text>
<text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
fill="#2f81f7" letter-spacing="-0.5">82,676</text>
fill="#2f81f7" letter-spacing="-0.5">82,678</text>
<text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
fill="#f85149" letter-spacing="-0.5">1,186</text>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 2.6 KiB

After

Width:  |  Height:  |  Size: 2.6 KiB

docs/social-card.svg
+2 -2
View File
@@ -20,10 +20,10 @@
<rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
<text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
fill="#e6edf3" letter-spacing="-0.5">171,438</text>
fill="#e6edf3" letter-spacing="-0.5">171,440</text>
<text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
fill="#2f81f7" letter-spacing="-0.5">82,676</text>
fill="#2f81f7" letter-spacing="-0.5">82,678</text>
<text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
fill="#f85149" letter-spacing="-0.5">1,186</text>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 2.7 KiB

After

Width:  |  Height:  |  Size: 2.7 KiB

docs/stats.json
+2 -2
View File
@@ -1,5 +1,5 @@
{
"kev": 1186,
"total_cves": 171438,
"with_pocs": 82676
"total_cves": 171440,
"with_pocs": 82678
}
index/cve_dates.json
+1 -1
View File
@@ -1 +1 @@
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-04","2024-08-01"],"CVE-1999-0236":["1999-09-Line truncated
index/github.txt
+5
View File
@@ -26739,3 +26739,8 @@ CVE-2026-73319 - https://github.com/BomboBombone/CVE-2026-73319
CVE-2026-73320 - https://github.com/BomboBombone/CVE-2026-73320
CVE-2026-73321 - https://github.com/BomboBombone/CVE-2026-73321
CVE-2026-74239 - https://github.com/BomboBombone/CVE-2026-74239
CVE-2026-29782 - https://github.com/hackerking24/CVE-2026-29782-OpenSTAManager-RCE
CVE-2026-69267 - https://github.com/redroot97/windows
CVE-2026-69451 - https://github.com/fj016/CVE-2026-69451-PoC
CVE-2026-85046 - https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm
CVE-2026-85046 - https://github.com/atiilla/CVE-2026-85046
index/trending.json
+25 -25
View File
@@ -23,7 +23,7 @@
},
{
"year": 2026,
"stars": 13,
"stars": 14,
"name": "CVE-2026-28576-poc",
"url": "https://github.com/mobilehackinglab/CVE-2026-28576-poc",
"desc": "SQL injection vulnerability in Android 17 (AOSP)",
@@ -78,7 +78,7 @@
},
{
"year": 2026,
"stars": 4,
"stars": 5,
"name": "CVE-2026-65643-PoC-Toolkit",
"url": "https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit",
"desc": "🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. 🦾 Only Use Ethically, Stay Legal <3",
@@ -120,6 +120,17 @@
"cve": "CVE-2026-19490",
"kev": false
},
{
"year": 2026,
"stars": 3,
"name": "CVE-2026-18963",
"url": "https://github.com/EQSTLab/CVE-2026-18963",
"desc": "Keycloak reset-credentials flow bypass",
"pushed": "2026-09-01T10:47:41Z",
"created": "2026-09-01T09:08:39Z",
"cve": "CVE-2026-18963",
"kev": false
},
{
"year": 2026,
"stars": 4,
@@ -208,17 +219,6 @@
"cve": "CVE-2026-73570",
"kev": true
},
{
"year": 2026,
"stars": 88,
"name": "CVE-2026-75604-poc",
"url": "https://github.com/rafabd1/CVE-2026-75604-poc",
"desc": "CVE-2026-75604 Next.js Windows RCE poc",
"pushed": "2026-08-26T02:23:55Z",
"created": "2026-08-25T19:06:37Z",
"cve": "CVE-2026-75604",
"kev": false
},
{
"year": 2025,
"stars": 6,
@@ -494,6 +494,18 @@
"cve": "CVE-2022-29799",
"kev": false
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-85046",
"url": "https://github.com/atiilla/CVE-2026-85046",
"desc": "V8 Type Confusion Exploit Research",
"pushed": "2026-09-08T18:52:50Z",
"created": "2026-09-08T18:45:09Z",
"cve": "CVE-2026-85046",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
@@ -601,17 +613,5 @@
"cve": "CVE-2026-32475",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "Langflow-RCE-CVE-2025-3248",
"url": "https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-09-05T03:09:17Z",
"created": "2026-09-05T03:01:58Z",
"cve": "CVE-2025-3248",
"kev": true,
"landed": true
}
]