diff --git a/README.md b/README.md index 33099472b69..c7898657fc6 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-20%20Sep%202026%2023%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609202307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C154-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C201-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609202307)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-21%20Sep%202026%2000%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609210007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C154-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C201-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609210007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,16 +12,16 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 11h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 1⭐ | 31m ago | [CVE-2026-31802](https://github.com/Recorded-texteditor120/CVE-2026-31802) | Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file… | +| 1⭐ | 9h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within… | +| 2⭐ | 10h ago | [CVE-2026-93958](https://github.com/HackSpeak/CVE-2026-93958) | D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized… | +| 0⭐ | 12h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 0⭐ | 1d ago | [CVE-2026-94036](https://github.com/djzzlim/CVE-2026-94036) | A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The… | | 1⭐ | 1d ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… | | 1⭐ | 1d ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… | +| 0⭐ | 1d ago | [CVE-2026-75816](https://github.com/abraxas/CVE-2026-75816) | CVE-2026-75816 - Frontend Admin by DynamiApps for Wordpress - Critical 9.8 - Unauthenticated POST… | | 0⭐ | 2d ago | [CVE-2025-20260](https://github.com/keyuraghao/CVE-2025-20260) | First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump… | | 2⭐ | 2d ago | [CVE-2026-93453](https://github.com/Faceless0x7/CVE-2026-93453) | CVE-2026-93453 Exploit - SOGo password reset link poisoning via attacker-controlled Origin header, enabling… | -| 0⭐ | 2d ago | KEV [lenovo_y700_tb320fc_on_CVE-2025-21479](https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | -| 1⭐ | 4d ago | [CVE-2025-57231](https://github.com/anirbala98/CVE-2025-57231) | Docmost < 0.22.0 - Arbitrary File Read | -| 2⭐ | 4d ago | [POC-CVE-2026-49975](https://github.com/naheeju/POC-CVE-2026-49975) | Security research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache… | -| 0⭐ | 4d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | -| 2⭐ | 5d ago | KEV [CVE-2026-82329-PoC-Exploit](https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit) | 🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted… | ## Trending in 2026 @@ -53,11 +53,11 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 7⭐ | 3d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | -| 3⭐ | 23d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | +| 3⭐ | 24d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 7⭐ | 24d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 5⭐ | 31d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 3⭐ | 33d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | -| 20⭐ | 40d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | +| 20⭐ | 41d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 6⭐ | 45d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 7⭐ | 49d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 61d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | @@ -67,7 +67,7 @@ | 7⭐ | 74d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 80d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | | 3⭐ | 80d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | -| 4⭐ | 84d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | +| 4⭐ | 85d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 87d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 |
diff --git a/cves/2026/CVE-2026-41452.md b/cves/2026/CVE-2026-41452.md index 490a3ccff6b..dd0d87af2be 100644 --- a/cves/2026/CVE-2026-41452.md +++ b/cves/2026/CVE-2026-41452.md @@ -17,6 +17,7 @@ Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installe #### Github - https://github.com/Boreas37/CVE-2026-41452-PoC +- https://github.com/o-sec/CVE-2026-41452-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41452.yaml diff --git a/index/github.txt b/index/github.txt index 8f2604fc8b2..e226a46533b 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26739,3 +26739,4 @@ CVE-2026-78306 - https://github.com/Wh02m1/CVE-2026-78306 CVE-2026-77812 - https://github.com/Wh02m1/CVE-2026-77812 CVE-2026-43499 - https://github.com/LiamJ74/Root-My-Galaxy-Payloads CVE-2026-33439 - https://github.com/rh33t/CVE-2026-33439-Poc +CVE-2026-41452 - https://github.com/o-sec/CVE-2026-41452-poc diff --git a/index/trending.json b/index/trending.json index aa1734c05b5..e4f6e610b47 100644 --- a/index/trending.json +++ b/index/trending.json @@ -483,6 +483,42 @@ "cve": "CVE-2023-32315", "kev": true }, + { + "year": 2026, + "stars": 1, + "name": "CVE-2026-31802", + "url": "https://github.com/Recorded-texteditor120/CVE-2026-31802", + "desc": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", + "pushed": "2026-09-20T23:36:53Z", + "created": "2026-03-28T20:49:46Z", + "cve": "CVE-2026-31802", + "kev": false, + "landed": true + }, + { + "year": 2026, + "stars": 1, + "name": "CVE-2026-78306", + "url": "https://github.com/Wh02m1/CVE-2026-78306", + "desc": "DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a known value and connect to the drone's internal Wi-Fi network, potentially gaining access to the flight control interface and issuing flight commands. Crafted DUML commands can also disable or restart the Wi-Fi and Bluetooth interfaces, disconnect Wi-Fi clients, or reset wireless configuration, resulting in a denial-of-service condition that can disrupt the operator's wireless control, video, and telemetry connections during flight. Affected models are DJI Neo until 01.00.0400, DJI Neo 2 until 01.00.0500, DJI Flip until 01.00.1200, DJI Air 3 until 01.00.1600, DJI Air 3S until 01.00.1400, DJI Avata 2 until 01.00.0400, DJI Avata 360 until 01.00.0300, DJI Mavic 3 until 01.00.1400, DJI Mavic 3 Classic until 01.00.0800, DJI Mavic 3 Pro until 01.01.0700, DJI Mavic 4 Pro until 01.00.0500, DJI Mini 2 until 01.07.0200, DJI Mini 3 until 01.00.0500, DJI Mini 3 Pro until 01.00.0900, DJI Mini 4 Pro until 01.00.1100, and DJI Mini 5 Pro until 01.00.0600. Remediation requires a firmware update from the vendor.", + "pushed": "2026-09-20T14:56:26Z", + "created": "2026-09-20T14:50:46Z", + "cve": "CVE-2026-78306", + "kev": false, + "landed": true + }, + { + "year": 2026, + "stars": 2, + "name": "CVE-2026-93958", + "url": "https://github.com/HackSpeak/CVE-2026-93958", + "desc": "D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing", + "pushed": "2026-09-20T13:11:15Z", + "created": "2026-09-20T13:10:55Z", + "cve": "CVE-2026-93958", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -495,6 +531,18 @@ "kev": true, "landed": true }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-94036", + "url": "https://github.com/djzzlim/CVE-2026-94036", + "desc": "A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.", + "pushed": "2026-09-19T23:18:16Z", + "created": "2026-09-19T23:17:06Z", + "cve": "CVE-2026-94036", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 1, @@ -519,6 +567,18 @@ "kev": false, "landed": true }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-75816", + "url": "https://github.com/abraxas/CVE-2026-75816", + "desc": "CVE-2026-75816 - Frontend Admin by DynamiApps for Wordpress - Critical 9.8 - Unauthenticated POST /wp-admin/admin-ajax.php - Account Takeover", + "pushed": "2026-09-19T18:58:21Z", + "created": "2026-09-19T18:58:33Z", + "cve": "CVE-2026-75816", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -542,65 +602,5 @@ "cve": "CVE-2026-93453", "kev": false, "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "lenovo_y700_tb320fc_on_CVE-2025-21479", - "url": "https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479", - "desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", - "pushed": "2026-09-17T23:13:37Z", - "created": "2026-09-16T11:58:06Z", - "cve": "CVE-2025-21479", - "kev": true, - "landed": true - }, - { - "year": 2025, - "stars": 1, - "name": "CVE-2025-57231", - "url": "https://github.com/anirbala98/CVE-2025-57231", - "desc": "Docmost < 0.22.0 - Arbitrary File Read", - "pushed": "2026-09-16T11:12:10Z", - "created": "2026-09-12T12:17:38Z", - "cve": "CVE-2025-57231", - "kev": false, - "landed": true - }, - { - "year": 2026, - "stars": 2, - "name": "POC-CVE-2026-49975", - "url": "https://github.com/naheeju/POC-CVE-2026-49975", - "desc": "Security research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2", - "pushed": "2026-09-16T07:28:35Z", - "created": "2026-09-16T07:21:14Z", - "cve": "CVE-2026-49975", - "kev": false, - "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "Langflow-RCE-CVE-2025-3248", - "url": "https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248", - "desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.", - "pushed": "2026-09-15T23:49:56Z", - "created": "2026-09-05T03:01:58Z", - "cve": "CVE-2025-3248", - "kev": true, - "landed": true - }, - { - "year": 2026, - "stars": 2, - "name": "CVE-2026-82329-PoC-Exploit", - "url": "https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit", - "desc": "🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V", - "pushed": "2026-09-15T20:28:01Z", - "created": "2026-09-15T20:15:28Z", - "cve": "CVE-2026-82329", - "kev": true, - "landed": true } ]