diff --git a/README.md b/README.md index 8e31dd977ca..300e47baa17 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-17%20Oct%202026%2009%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610170907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C047-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C236-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610170907)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-17%20Oct%202026%2010%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610171007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C048-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C236-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610171007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,34 +14,34 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 2h ago | [CVE-2026-99999](https://github.com/PeronGH/CVE-2026-99999) | PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP. | -| 0⭐ | 6h ago | [CVE-2026-59970-poc](https://github.com/asvorg/CVE-2026-59970-poc) | PoC for CVE-2026-59970 Blind SSRF in Tandoor Recipes, CWE-918 | -| 0⭐ | 7h ago | [CVE-2026-8933](https://github.com/songzzzz/CVE-2026-8933) | A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used… | -| 0⭐ | 10h ago | KEV [CVE-2026-31431-Copy-Fail](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-31431-Copy-Fail) | CVE-2026-31431 Exploit / by infrar3d | -| 0⭐ | 10h ago | KEV [CVE-2014-6271-Shellshock](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock) | CVE-2014-6271 Exploit / by infrar3d | -| 0⭐ | 10h ago | KEV [CVE-2025-55182-React2Shell](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell) | CVE-2025-55182 Exploit / by infrar3d | -| 0⭐ | 10h ago | [CVE-2026-38526-KrayinCRM-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-38526-KrayinCRM-RCE) | CVE-2026-38526 Exploit / by infrar3d | -| 0⭐ | 10h ago | KEV [CVE-2026-33017-Langflow-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE) | CVE-2026-33017 Exploit / by infrar3d | -| 0⭐ | 19h ago | [POC-CVE-2026-94134](https://github.com/MosesOX/POC-CVE-2026-94134) | Exploitation POC for CVE-2026-94134 | -| 0⭐ | 19h ago | [CVE-2026-110896](https://github.com/azqzazq1/CVE-2026-110896) | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly… | +| 0⭐ | 15m ago | [CVE-2026-111823](https://github.com/murrez/CVE-2026-111823) | PoC for CVE-2026-111823 - Mage AI OAuth session auth bypass (POST /api/sessions). Check + exploit modes.… | +| 0⭐ | 3h ago | [CVE-2026-99999](https://github.com/PeronGH/CVE-2026-99999) | PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP. | +| 0⭐ | 7h ago | [CVE-2026-59970-poc](https://github.com/asvorg/CVE-2026-59970-poc) | PoC for CVE-2026-59970 Blind SSRF in Tandoor Recipes, CWE-918 | +| 0⭐ | 8h ago | [CVE-2026-8933](https://github.com/songzzzz/CVE-2026-8933) | A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used… | +| 0⭐ | 11h ago | KEV [CVE-2026-31431-Copy-Fail](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-31431-Copy-Fail) | CVE-2026-31431 Exploit / by infrar3d | +| 0⭐ | 11h ago | KEV [CVE-2014-6271-Shellshock](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock) | CVE-2014-6271 Exploit / by infrar3d | +| 0⭐ | 11h ago | KEV [CVE-2025-55182-React2Shell](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell) | CVE-2025-55182 Exploit / by infrar3d | +| 0⭐ | 11h ago | [CVE-2026-38526-KrayinCRM-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-38526-KrayinCRM-RCE) | CVE-2026-38526 Exploit / by infrar3d | +| 0⭐ | 11h ago | KEV [CVE-2026-33017-Langflow-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE) | CVE-2026-33017 Exploit / by infrar3d | +| 0⭐ | 20h ago | [POC-CVE-2026-94134](https://github.com/MosesOX/POC-CVE-2026-94134) | Exploitation POC for CVE-2026-94134 | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 100⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | +| 109⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | | 477⭐ | 57d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 59⭐ | 3d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | -| 26⭐ | 14h ago | [CVE-2026-75604-PoC](https://github.com/ZeroDayEvil/CVE-2026-75604-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-75604 (Next.js Unauthenticated RCE PoC in Windows-Hosted… | -| 24⭐ | 15h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | -| 24⭐ | 15h ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | +| 26⭐ | 15h ago | [CVE-2026-75604-PoC](https://github.com/ZeroDayEvil/CVE-2026-75604-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-75604 (Next.js Unauthenticated RCE PoC in Windows-Hosted… | +| 24⭐ | 16h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | +| 24⭐ | 16h ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | | 333⭐ | 81d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | | 96⭐ | 18d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 33⭐ | 3d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC | | 187⭐ | 56d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | | 92⭐ | 35d ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | +| 15⭐ | 1d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | | 88⭐ | 35d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… | -| 14⭐ | 1d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | | 106⭐ | 52d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | | 51⭐ | 18d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | | 86⭐ | 43d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | diff --git a/cves/2026/CVE-2026-111823.md b/cves/2026/CVE-2026-111823.md new file mode 100644 index 00000000000..481b4f54da6 --- /dev/null +++ b/cves/2026/CVE-2026-111823.md @@ -0,0 +1,17 @@ +### [CVE-2026-111823](https://www.cve.org/CVERecord?id=CVE-2026-111823) +![](https://img.shields.io/static/v1?label=Vendor&message=Mage&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=mage-ai&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-390%20Detection%20of%20Error%20Condition%20Without%20Action&color=brightgreen) + +### Description + +Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/murrez/CVE-2026-111823 diff --git a/docs/hero.svg b/docs/hero.svg index 3fce6496510..e3a5d792f37 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 85,048 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 174,491 + fill="#e6edf3" letter-spacing="-0.5">174,492 CVES INDEXED85,047 + fill="#2f81f7" letter-spacing="-0.5">85,048 WITH POCS1,236 diff --git a/docs/social-card.svg b/docs/social-card.svg index fdb1b3d94b7..83e4a512d36 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 174,491 + fill="#e6edf3" letter-spacing="-0.5">174,492 CVES INDEXED85,047 + fill="#2f81f7" letter-spacing="-0.5">85,048 WITH POCS1,236 diff --git a/docs/stats.json b/docs/stats.json index d14a67661d9..6656a294c9b 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1236, - "total_cves": 174491, - "with_pocs": 85047 + "total_cves": 174492, + "with_pocs": 85048 } diff --git a/index/github.txt b/index/github.txt index 88307801086..cdbd7c91545 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27439,33 +27439,11 @@ CVE-2024-54772 - https://github.com/deauther890/RouterOS-RADIUS-InfoLeak CVE-2026-104736 - https://github.com/BIBILZERODAY/CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details CVE-2026-89282 - https://github.com/dorkerdevil/CVE-2026-89282 CVE-2026-99999 - https://github.com/PeronGH/CVE-2026-99999 -CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne -CVE-2018-15133 - https://github.com/pwnedshell/Larascript -CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600 -CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597 -CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816 -CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560 -CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform -CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228 CVE-2022-1388 - https://github.com/jermainlaforce/CVE-2022-1388-POC -CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC -CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897 -CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075 -CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce -CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752 -CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664 -CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC CVE-2024-38063 - https://github.com/KernelKraze/CVE-2024-38063_PoC -CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc -CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063 -CVE-2025-0133 - https://github.com/Inteleon404/CVE-2025-0133 -CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651 -CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123 CVE-2025-52097 - https://github.com/rwilsonecs/CVE-2025-52097 -CVE-2025-63353 - https://github.com/zvckster/CVE-2025-63353 CVE-2026-102607 - https://github.com/d4kw1n/CVE-2026-102607-ZoneMinder CVE-2026-33017 - https://github.com/1337or420/CVE-2026-33017-Langflow-RCE CVE-2026-36213 - https://github.com/NT2DEV/CVE-2026-36213-poc -CVE-2026-41089 - https://github.com/1posix/CVE-2026-41089-PoC -CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC CVE-2026-55781 - https://github.com/NT2DEV/CVE-2026-55781-poc +CVE-2026-111823 - https://github.com/murrez/CVE-2026-111823 diff --git a/index/releases/2022.json b/index/releases/2022.json index 8875e975b6b..4a915a7127d 100644 --- a/index/releases/2022.json +++ b/index/releases/2022.json @@ -3826,7 +3826,7 @@ "CVE-2022-26134 github:rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb"}, "CVE-2022-26134 github:reph0r/poc-exp?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reph0r/poc-exp"}, "CVE-2022-26134 github:reubensammut/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reubensammut/cve-2022-26134"}, -"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-17T06:07:52Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"26d9676bb35f03a3ce7e443b1788cdd36f7f3efe","imported":true,"pending":true,"pushed_at":"2026-10-16T23:02:31Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, +"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-17T10:08:08Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"26d9676bb35f03a3ce7e443b1788cdd36f7f3efe","imported":true,"pending":true,"pushed_at":"2026-10-16T23:02:31Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, "CVE-2022-26134 github:secjia/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/secjia/CVE-2022-26134"}, "CVE-2022-26134 github:shamo0/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shamo0/CVE-2022-26134"}, "CVE-2022-26134 github:shiftsansan/cve-2022-26134-console?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shiftsansan/CVE-2022-26134-Console"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index a7e69f56ce7..01e4c8fa18d 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -1616,6 +1616,7 @@ "CVE-2026-111444 github:syscallh00k/cve-2026-111444?#":{"basis":"commit","blobs":["ce6de7170c032fad127f92452506cbe48d5b7339"],"checked":"2026-10-16T05:08:08Z","commit":"2026-10-16T04:39:46Z","commit_verified":true,"created":"2026-10-16T04:33:20Z","cve":"CVE-2026-111444","head":"09b4f27610f16cffaa13233424f37f9e9174ed00","history_paths":["cve_2026_111444.py"],"history_version":3,"paths":["cve_2026_111444.py"],"pushed_at":"2026-10-16T04:40:37Z","released":"2026-10-16T04:39:46Z","repo":1421646133,"rev":"6c814aa45bc3b9118b5be7c199da83d45933f713e3e96ff14ffc95748a80fd80","seen":"2026-10-16T05:08:09Z","sha":"2c210211d33f459f8421cc71089d9ce1d6980742","url":"https://github.com/Syscallh00k/CVE-2026-111444"}, "CVE-2026-1115 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1115.yaml?#":{"basis":"unknown","cve":"CVE-2026-1115","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1115.yaml"}, "CVE-2026-1118 github:ariazzzz/cve/issues/2?#":{"basis":"unknown","cve":"CVE-2026-1118","imported":true,"released":null,"url":"https://github.com/AriazzzZ/CVE/issues/2"}, +"CVE-2026-111823 github:murrez/cve-2026-111823?#":{"basis":"commit","blobs":["233aadbd929201a21ef4a0a3da0d5c6e11ffff62"],"checked":"2026-10-17T10:08:01Z","commit":"2026-10-17T09:54:56Z","commit_verified":true,"created":"2026-10-17T09:53:31Z","cve":"CVE-2026-111823","head":"a237b2d7ec3750d9f454385ab179dd4613c9847b","history_paths":["poc.py"],"history_version":3,"paths":["poc.py"],"pushed_at":"2026-10-17T09:54:58Z","released":"2026-10-17T09:54:56Z","repo":1423181144,"rev":"53e8178782d85684a3f4c7e824361bf762ee216ba5811197bab746b8e320572f","seen":"2026-10-17T10:08:03Z","sha":"a237b2d7ec3750d9f454385ab179dd4613c9847b","url":"https://github.com/murrez/CVE-2026-111823"}, "CVE-2026-1119 github:ariazzzz/cve/issues/1?#":{"basis":"unknown","cve":"CVE-2026-1119","imported":true,"released":null,"url":"https://github.com/AriazzzZ/CVE/issues/1"}, "CVE-2026-1120 github:lx-66-lx/cve/issues/6?#":{"basis":"unknown","cve":"CVE-2026-1120","imported":true,"released":null,"url":"https://github.com/LX-66-LX/cve/issues/6"}, "CVE-2026-1121 github:lx-66-lx/cve/issues/7?#":{"basis":"unknown","cve":"CVE-2026-1121","imported":true,"released":null,"url":"https://github.com/LX-66-LX/cve/issues/7"}, @@ -8097,7 +8098,7 @@ "CVE-2026-43499 github:k-o-n-t-o-r/ghostlock-sabrina?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/k-o-n-t-o-r/ghostlock-sabrina"}, "CVE-2026-43499 github:kananosa/cve-2026-43499-for-xiaomi-17t-chagall?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall"}, "CVE-2026-43499 github:kelsidavis/lg-g710tm-unlock?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kelsidavis/lg-g710tm-unlock"}, -"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-17T06:09:14Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"75f651141f7aec5e1dafcb461f5ced295cbd5ab3","imported":true,"pending":true,"pushed_at":"2026-10-16T09:19:16Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, +"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-17T10:09:26Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"75f651141f7aec5e1dafcb461f5ced295cbd5ab3","imported":true,"pending":true,"pushed_at":"2026-10-16T09:19:16Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, "CVE-2026-43499 github:kurtulusakyuz/ionstack_s21?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/kurtulusakyuz/IonStack_S21"}, "CVE-2026-43499 github:l-1124/rootmyvivo-exploit?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-Exploit"}, "CVE-2026-43499 github:l-1124/rootmyvivo-rs?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-rs"}, @@ -12320,7 +12321,7 @@ "CVE-2026-75604 github:hackspeak/cve-2026-75604?#":{"basis":"unknown","cve":"CVE-2026-75604","imported":true,"released":null,"url":"https://github.com/HackSpeak/CVE-2026-75604"}, "CVE-2026-75604 github:rafabd1/cve-2026-75604-poc?#":{"basis":"created","blobs":["362c73dec89bf1a84bd9ec7f436f52c38535417f"],"checked":"2026-10-06T22:58:33Z","commit":"2026-08-25T18:13:45Z","commit_verified":true,"created":"2026-08-25T19:06:37Z","cve":"CVE-2026-75604","head":"371b778eaf590610b0d4648a6385beb8e3950976","history_paths":["poc.py"],"history_version":3,"imported":true,"paths":["poc.py"],"pushed_at":"2026-08-28T02:53:24Z","released":"2026-08-25T19:06:37Z","repo":1346528145,"rev":"8e306ee94c850bc5d79a903a7ba13d35eba2d89c2c7151800dfe17a68fa2942f","sha":"3e0f72d14e447956a8685283e247ec8cb51c35cc","url":"https://github.com/rafabd1/CVE-2026-75604-poc"}, "CVE-2026-75604 github:rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/nextjs_unauth_rce_cve_2026_75604.rb?#":{"basis":"unknown","cve":"CVE-2026-75604","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/nextjs_unauth_rce_cve_2026_75604.rb"}, -"CVE-2026-75604 github:zerodayevil/cve-2026-75604-poc?#":{"basis":"pending","checked":"2026-10-17T06:09:14Z","created":"2026-09-28T19:01:45Z","cve":"CVE-2026-75604","head":"e2579790bb672f2a9f2406d1111c8d68ad034a1f","pending":true,"pushed_at":"2026-10-16T18:34:44Z","released":null,"repo":1393667095,"seen":"2026-10-16T21:09:15Z","url":"https://github.com/ZeroDayEvil/CVE-2026-75604-PoC"}, +"CVE-2026-75604 github:zerodayevil/cve-2026-75604-poc?#":{"basis":"pending","checked":"2026-10-17T10:09:26Z","created":"2026-09-28T19:01:45Z","cve":"CVE-2026-75604","head":"e2579790bb672f2a9f2406d1111c8d68ad034a1f","pending":true,"pushed_at":"2026-10-16T18:34:44Z","released":null,"repo":1393667095,"seen":"2026-10-16T21:09:15Z","url":"https://github.com/ZeroDayEvil/CVE-2026-75604-PoC"}, "CVE-2026-75616 github:totekuh/cve-2026-75616?#":{"basis":"unknown","cve":"CVE-2026-75616","imported":true,"released":null,"url":"https://github.com/totekuh/CVE-2026-75616"}, "CVE-2026-75650 github:abraxas/cve-2026-75650?#":{"basis":"created","blobs":["611aaaea97d23c0e5f799dfb7a2fa661258026f1","d0a934504309d327b7fb7b883e37364d241594db"],"checked":"2026-10-07T01:08:04Z","commit":"2026-09-26T02:32:25Z","commit_verified":true,"created":"2026-09-26T02:32:55Z","cve":"CVE-2026-75650","head":"5319aea56040ec67c9f3acdc2ca803b33b194566","history_paths":["CVE-2026-75650-Abraxas-Labs.py"],"history_version":3,"imported":true,"paths":["CVE-2026-75650-Abraxas-Labs.py","lab/poc.py"],"pushed_at":"2026-10-07T01:06:50Z","released":"2026-09-26T02:32:55Z","repo":1388400437,"rev":"e260c9ee9f3f6016a6b421ce6f50a0a0399e66ca094a7d75696b4971a799078c","sha":"cdec23e4ddc3c5429f70e1c9de9fc7cfa326200d","url":"https://github.com/abraxas/CVE-2026-75650"}, "CVE-2026-75650 github:ctiresource/vendor-verbiage?#":{"basis":"unknown","cve":"CVE-2026-75650","imported":true,"released":null,"url":"https://github.com/CTIresource/Vendor-Verbiage"}, @@ -14165,7 +14166,7 @@ "CVE-2026-89274 github:hassham1/cve-2026-89274-wp-recipe-maker-poc/blob/99dbe1e18ea8473525bfac54cdd19ea28135670e/poc/poc_cve_2026_89274.py?#":{"basis":"created","blobs":["443d6c01db604c09427702bc5209870ff5cfae7d"],"checked":"2026-10-06T22:40:02Z","commit":"2026-09-23T16:14:00Z","commit_verified":true,"created":"2026-09-23T16:18:56Z","cve":"CVE-2026-89274","head":"99dbe1e18ea8473525bfac54cdd19ea28135670e","history_paths":["poc/poc_cve_2026_89274.py"],"history_version":3,"imported":true,"paths":["poc/poc_cve_2026_89274.py"],"pushed_at":"2026-09-23T16:29:07Z","released":"2026-09-23T16:18:56Z","repo":1383802860,"rev":"64b84b0dac875ff04eeb4643a3d945e79b3f1ba66c3b6529dca083a3cc7edd1f","sha":"f821b2b65de5bb5bcbf2365c1de921c5700ff4c9","url":"https://github.com/Hassham1/CVE-2026-89274-wp-recipe-maker-poc/blob/99dbe1e18ea8473525bfac54cdd19ea28135670e/poc/poc_cve_2026_89274.py"}, "CVE-2026-89274 github:murrez/cve-2026-89274?#":{"basis":"commit","blobs":["433096955407a02da5f0d8349081c563c586030e"],"checked":"2026-10-06T22:58:33Z","commit":"2026-09-19T20:26:22Z","commit_verified":true,"created":"2026-09-19T20:25:18Z","cve":"CVE-2026-89274","head":"5157ead849837ee9ff001a41722b9b2eeda64acb","history_paths":["poc.py"],"history_version":3,"imported":true,"paths":["poc.py"],"pushed_at":"2026-09-19T20:26:22Z","released":"2026-09-19T20:26:22Z","repo":1377585665,"rev":"7656aa7db6d4a1ebf399cd2d04238033a0469e2043463aebf6c3f4ed0e4a4687","sha":"5157ead849837ee9ff001a41722b9b2eeda64acb","url":"https://github.com/murrez/CVE-2026-89274"}, "CVE-2026-89274 github:polosss/by-poloss..-.cve-2026-89274?#":{"basis":"unknown","cve":"CVE-2026-89274","imported":true,"released":null,"url":"https://github.com/Polosss/By-Poloss..-.CVE-2026-89274"}, -"CVE-2026-89282 github:dorkerdevil/cve-2026-89282?#":{"basis":"pending","checked":"2026-10-17T06:07:52Z","created":"2026-10-17T06:06:51Z","cve":"CVE-2026-89282","head":"33a494684fcb4e431432090ed9b4a23899bd6397","pending":true,"pushed_at":"2026-10-17T06:06:56Z","released":null,"repo":1423009292,"seen":"2026-10-17T06:07:58Z","url":"https://github.com/dorkerdevil/CVE-2026-89282"}, +"CVE-2026-89282 github:dorkerdevil/cve-2026-89282?#":{"basis":"pending","checked":"2026-10-17T10:08:01Z","created":"2026-10-17T06:06:51Z","cve":"CVE-2026-89282","head":"33a494684fcb4e431432090ed9b4a23899bd6397","pending":true,"pushed_at":"2026-10-17T06:06:56Z","released":null,"repo":1423009292,"seen":"2026-10-17T06:07:58Z","url":"https://github.com/dorkerdevil/CVE-2026-89282"}, "CVE-2026-89283 https://wpscan.com/vulnerability/38498e0f-1770-4fff-a882-b11b29b15213":{"basis":"unknown","cve":"CVE-2026-89283","released":null,"seen":"2026-10-12T09:28:02Z","url":"https://wpscan.com/vulnerability/38498e0f-1770-4fff-a882-b11b29b15213/"}, "CVE-2026-89285 https://wpscan.com/vulnerability/27135434-79e0-4f9e-aecf-c7092faec29b":{"basis":"unknown","cve":"CVE-2026-89285","released":null,"seen":"2026-10-12T09:28:02Z","url":"https://wpscan.com/vulnerability/27135434-79e0-4f9e-aecf-c7092faec29b/"}, "CVE-2026-89287 https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d":{"basis":"unknown","cve":"CVE-2026-89287","released":null,"seen":"2026-10-12T09:28:02Z","url":"https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d/"}, diff --git a/index/trending.json b/index/trending.json index 705915d53f8..da72cb9013b 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,7 @@ [ { "year": 2026, - "stars": 100, + "stars": 109, "name": "CVE-2026-41940-PoC", "url": "https://github.com/sakidekin/CVE-2026-41940-PoC", "artifact": false, @@ -10,7 +10,7 @@ "pushed": "2026-10-15T12:44:31Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 5.1923670091151, + "score": 5.602259238685504, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -27,7 +27,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.9890216759545583, + "score": 2.987525485960022, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -44,7 +44,7 @@ "pushed": "2026-10-13T16:00:26Z", "released": "2026-10-13T16:00:26Z", "basis": "commit", - "score": 2.154156352135005, + "score": 2.1408767058568596, "trending": true, "created": "2026-10-13T09:39:17Z", "cve": "CVE-2026-97229", @@ -61,7 +61,7 @@ "pushed": "2026-10-16T18:34:43Z", "released": null, "basis": "pending", - "score": 2.015960666665637, + "score": 1.9800332413906363, "trending": true, "created": "2026-09-28T19:01:45Z", "cve": "CVE-2026-75604", @@ -78,7 +78,7 @@ "pushed": "2026-10-16T18:03:54Z", "released": null, "basis": "pending", - "score": 1.8437411477572612, + "score": 1.8113053715811607, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -95,7 +95,7 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 1.828644116170556, + "score": 1.7968416693317082, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", @@ -112,7 +112,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5896998135859293, + "score": 1.589160195287373, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -129,7 +129,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.31559856361602, + "score": 1.3135870362276427, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -146,7 +146,7 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 1.236381656782946, + "score": 1.2284756177244012, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", @@ -163,7 +163,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.1902007847212843, + "score": 1.1895916119909014, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -180,12 +180,29 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7988025947345144, + "score": 0.7981656749405229, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", "kev": true }, + { + "year": 2026, + "stars": 15, + "name": "plz110-6.12.69-cve-2026-64560-ksu", + "url": "https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu", + "artifact": false, + "source": "github.com", + "desc": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。", + "pushed": "2026-10-15T14:24:25Z", + "released": "2026-10-15T14:24:25Z", + "basis": "commit", + "score": 0.7841653578522915, + "trending": true, + "created": "2026-10-15T14:19:23Z", + "cve": "CVE-2026-64560", + "kev": false + }, { "year": 2026, "stars": 88, @@ -197,29 +214,12 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7686664993707412, + "score": 0.7680483419196836, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", "kev": false }, - { - "year": 2026, - "stars": 14, - "name": "plz110-6.12.69-cve-2026-64560-ksu", - "url": "https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu", - "artifact": false, - "source": "github.com", - "desc": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。", - "pushed": "2026-10-15T14:24:25Z", - "released": "2026-10-15T14:24:25Z", - "basis": "commit", - "score": 0.7395758893295898, - "trending": true, - "created": "2026-10-15T14:19:23Z", - "cve": "CVE-2026-64560", - "kev": false - }, { "year": 2026, "stars": 106, @@ -231,7 +231,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.7060323968718166, + "score": 0.7056468058239721, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -248,7 +248,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.7006324294046659, + "score": 0.6995574119133433, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -265,7 +265,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.6521544983588659, + "score": 0.6517258804685249, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -282,7 +282,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5646376848328171, + "score": 0.5644194571962915, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -299,7 +299,7 @@ "pushed": "2026-10-10T01:25:53Z", "released": "2026-10-10T01:25:43Z", "basis": "commit", - "score": 0.4660537423589727, + "score": 0.4644207643192342, "trending": true, "created": "2026-10-10T01:12:57Z", "cve": "CVE-2026-107181", @@ -316,7 +316,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.46389665383155837, + "score": 0.46333762215087243, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -333,7 +333,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.4360833082945618, + "score": 0.4355844640697811, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -350,7 +350,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.27558184782373774, + "score": 0.27504866313753085, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -367,7 +367,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.158844400060316, + "score": 0.1580420020425477, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -384,7 +384,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.1235033368311456, + "score": 0.12345059062337646, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -401,7 +401,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07766572279391554, + "score": 0.07759322778015675, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -418,7 +418,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.06794819215911774, + "score": 0.06791007858303683, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -435,7 +435,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.044513958366489886, + "score": 0.04449809222477157, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -452,7 +452,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.037638712160200524, + "score": 0.03762359678561132, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -469,7 +469,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.03721604205868103, + "score": 0.03719771477333694, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -486,7 +486,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.028339729990535828, + "score": 0.028330296414411704, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -503,7 +503,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.023497985295017815, + "score": 0.023487302605505796, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -520,7 +520,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.02340752068186919, + "score": 0.023399807258684204, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -537,7 +537,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.020579240750806173, + "score": 0.02056753963274858, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -554,7 +554,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.018183919745628278, + "score": 0.01817525491566994, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -571,7 +571,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.015028971895549501, + "score": 0.01502352907152982, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -588,7 +588,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.014698338874822636, + "score": 0.01469318353380202, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -605,7 +605,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.013919432381975232, + "score": 0.013914903768301711, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -622,12 +622,30 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.009711737490341092, + "score": 0.009711037340857633, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077", "kev": false }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-111823", + "url": "https://github.com/murrez/CVE-2026-111823", + "artifact": false, + "source": "github.com", + "desc": "PoC for CVE-2026-111823 - Mage AI OAuth session auth bypass (POST /api/sessions). Check + exploit modes. Authorized testing only.", + "pushed": null, + "released": "2026-10-17T09:54:56Z", + "basis": "commit", + "score": 0.0, + "trending": false, + "created": "2026-10-17T09:53:31Z", + "cve": "CVE-2026-111823", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 0, @@ -789,23 +807,5 @@ "cve": "CVE-2026-94134", "kev": false, "landed": true - }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-110896", - "url": "https://github.com/azqzazq1/CVE-2026-110896", - "artifact": false, - "source": "github.com", - "desc": "Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.", - "pushed": null, - "released": "2026-10-16T13:36:55Z", - "basis": "commit", - "score": 0.0, - "trending": false, - "created": "2026-10-16T13:20:52Z", - "cve": "CVE-2026-110896", - "kev": false, - "landed": true } ]