diff --git a/README.md b/README.md
index 959a0e37956..6dcef29df79 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

diff --git a/cves/2018/CVE-2018-17240.md b/cves/2018/CVE-2018-17240.md
index 00506d1c661..5515c530a7b 100644
--- a/cves/2018/CVE-2018-17240.md
+++ b/cves/2018/CVE-2018-17240.md
@@ -17,4 +17,5 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor
#### Github
- https://github.com/FenrirSec/CVE-2018-17240_exploit
- https://github.com/Xewdy444/Netgrave
+- https://github.com/BBge/CVE-2018-17240
diff --git a/cves/2024/CVE-2024-6387.md b/cves/2024/CVE-2024-6387.md
index 65b8ad29721..69e4e152354 100644
--- a/cves/2024/CVE-2024-6387.md
+++ b/cves/2024/CVE-2024-6387.md
@@ -113,6 +113,7 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
- https://github.com/hackingyseguridad/ssha
- https://github.com/jasonnorman66994-dot/sovereign-command-center
- https://github.com/ptn1411/skill
+- https://github.com/zgzhang/cve-2024-6387-poc
#### ExploitDB
- https://www.exploit-db.com/exploits/52269
diff --git a/cves/2025/CVE-2025-54352.md b/cves/2025/CVE-2025-54352.md
index d687291acc7..0169f9c132a 100644
--- a/cves/2025/CVE-2025-54352.md
+++ b/cves/2025/CVE-2025-54352.md
@@ -17,4 +17,5 @@ WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private a
- https://github.com/yohannslm/CVE-2025-54352
- https://github.com/limmmw/CVE-2025-54352
- https://github.com/mufasa-noir/XML-RPC-Pingback-Vulnerability
+- https://github.com/mufasa-noir/XMLRPC-Pingback-vulnerability-POC
diff --git a/cves/2026/CVE-2026-1337.md b/cves/2026/CVE-2026-1337.md
index 79de58bc371..4272fbbd7c9 100644
--- a/cves/2026/CVE-2026-1337.md
+++ b/cves/2026/CVE-2026-1337.md
@@ -20,3 +20,4 @@ Proof of concept exploit: https://github.com/JoakimBulow/CVE-2026-1337
#### Github
- https://github.com/George0Papasotiriou/CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape
- https://github.com/Bangkah/apache-auth-bypass-poc
+- https://github.com/JoakimBulow/CVE-2026-1337
diff --git a/cves/2026/CVE-2026-26211.md b/cves/2026/CVE-2026-26211.md
index a311e312285..e03c355b6df 100644
--- a/cves/2026/CVE-2026-26211.md
+++ b/cves/2026/CVE-2026-26211.md
@@ -15,4 +15,4 @@ Ekushey Project Manager CRM stores the administrator-configured system name and
- https://github.com/LindHunt/CVE-2026-26211
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/LindHunt/CVE-2026-26211
diff --git a/cves/2026/CVE-2026-35194.md b/cves/2026/CVE-2026-35194.md
new file mode 100644
index 00000000000..325272f6257
--- /dev/null
+++ b/cves/2026/CVE-2026-35194.md
@@ -0,0 +1,20 @@
+### [CVE-2026-35194](https://www.cve.org/CVERecord?id=CVE-2026-35194)
+**Apache Flink: Remote code execution via SQL injection in code generation**
+
+
+
+
+
+### Description
+
+Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions (1.15.0+) and LIKE expressions with ESCAPE clauses (1.17.0+). User-controlled strings are interpolated into generated Java code without proper escaping, allowing attackers to break out of string literals and inject arbitrary expressions.
+
+Users are recommended to upgrade to either version 1.20.4, 2.0.2, 2.1.2 or 2.2.1, which fixes this issue.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/DexSemon/CVE-2026-35194
diff --git a/cves/2026/CVE-2026-46215.md b/cves/2026/CVE-2026-46215.md
index 2700798c4e9..2dec5f78374 100644
--- a/cves/2026/CVE-2026-46215.md
+++ b/cves/2026/CVE-2026-46215.md
@@ -42,3 +42,4 @@ v2: cleanups of error paths
- https://github.com/bluedragonsecurity/CVE-2026-46215-exploit-linux-7.0-uaf-stable
- https://github.com/bluedragonsecurity/sheaf_uaf
- https://github.com/bluedragonsecurity/exploits
+- https://github.com/0xCyberstan/CVE-2026-46215-POC
diff --git a/cves/2026/CVE-2026-73309.md b/cves/2026/CVE-2026-73309.md
index 2dac8cfa74b..55aa26dc253 100644
--- a/cves/2026/CVE-2026-73309.md
+++ b/cves/2026/CVE-2026-73309.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAu
- https://github.com/BomboBombone/CVE-2026-73309
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73309
diff --git a/cves/2026/CVE-2026-73310.md b/cves/2026/CVE-2026-73310.md
index b5e10604736..8f8d5f2b456 100644
--- a/cves/2026/CVE-2026-73310.md
+++ b/cves/2026/CVE-2026-73310.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoin
- https://github.com/BomboBombone/CVE-2026-73310
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73310
diff --git a/cves/2026/CVE-2026-73311.md b/cves/2026/CVE-2026-73311.md
index b9ab6b4bc62..9216b3b42ea 100644
--- a/cves/2026/CVE-2026-73311.md
+++ b/cves/2026/CVE-2026-73311.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability
- https://github.com/BomboBombone/CVE-2026-73311
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73311
diff --git a/cves/2026/CVE-2026-73313.md b/cves/2026/CVE-2026-73313.md
index 0f959a1c19a..a38f81fcf4a 100644
--- a/cves/2026/CVE-2026-73313.md
+++ b/cves/2026/CVE-2026-73313.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerabilit
- https://github.com/BomboBombone/CVE-2026-73313
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73313
diff --git a/cves/2026/CVE-2026-73314.md b/cves/2026/CVE-2026-73314.md
index b679f2575a2..e1511bb661f 100644
--- a/cves/2026/CVE-2026-73314.md
+++ b/cves/2026/CVE-2026-73314.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a signature verification logic error in the PayPa
- https://github.com/BomboBombone/CVE-2026-73314
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73314
diff --git a/cves/2026/CVE-2026-73315.md b/cves/2026/CVE-2026-73315.md
index e8ae9c44171..c409136a9f1 100644
--- a/cves/2026/CVE-2026-73315.md
+++ b/cves/2026/CVE-2026-73315.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a server-side request forgery vulnerability in th
- https://github.com/BomboBombone/CVE-2026-73315
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73315
diff --git a/cves/2026/CVE-2026-73316.md b/cves/2026/CVE-2026-73316.md
index c77dec9a10e..ea55039abfe 100644
--- a/cves/2026/CVE-2026-73316.md
+++ b/cves/2026/CVE-2026-73316.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST
- https://github.com/BomboBombone/CVE-2026-73316
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73316
diff --git a/cves/2026/CVE-2026-73317.md b/cves/2026/CVE-2026-73317.md
index db54d28315f..401ade525da 100644
--- a/cves/2026/CVE-2026-73317.md
+++ b/cves/2026/CVE-2026-73317.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP
- https://github.com/BomboBombone/CVE-2026-73317
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73317
diff --git a/cves/2026/CVE-2026-73319.md b/cves/2026/CVE-2026-73319.md
index 47786ba79f7..56779738628 100644
--- a/cves/2026/CVE-2026-73319.md
+++ b/cves/2026/CVE-2026-73319.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynam
- https://github.com/BomboBombone/CVE-2026-73319
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73319
diff --git a/cves/2026/CVE-2026-73320.md b/cves/2026/CVE-2026-73320.md
index 91a8f4b5a99..622cdff6680 100644
--- a/cves/2026/CVE-2026-73320.md
+++ b/cves/2026/CVE-2026-73320.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an unauthenticated information disclosure vulnera
- https://github.com/BomboBombone/CVE-2026-73320
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73320
diff --git a/cves/2026/CVE-2026-73321.md b/cves/2026/CVE-2026-73321.md
index 9767e8a24af..5e88b887a47 100644
--- a/cves/2026/CVE-2026-73321.md
+++ b/cves/2026/CVE-2026-73321.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BB
- https://github.com/BomboBombone/CVE-2026-73321
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-73321
diff --git a/cves/2026/CVE-2026-74239.md b/cves/2026/CVE-2026-74239.md
index 0e0cd4195e1..945ea7e2c1c 100644
--- a/cves/2026/CVE-2026-74239.md
+++ b/cves/2026/CVE-2026-74239.md
@@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a path traversal vulnerability in the style archi
- https://github.com/BomboBombone/CVE-2026-74239
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/BomboBombone/CVE-2026-74239
diff --git a/docs/hero.svg b/docs/hero.svg
index 563ad4bbc06..9cfa17cf515 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@