diff --git a/README.md b/README.md index 69d2b69fc00..a45fe3cab40 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-17%20Sep%202026%2013%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609171307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C955-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C198-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609171307)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-17%20Sep%202026%2014%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609171407)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C957-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C199-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609171407)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,9 +12,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 6h ago | [CVE-2026-67401](https://github.com/imbas007/CVE-2026-67401) | PoC for CVE-2026-67401 - cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE.… | -| 0⭐ | 9h ago | [CVE-2026-12793](https://github.com/abraxas/CVE-2026-12793) | CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8) | -| 2⭐ | 10h ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | +| 0⭐ | 7h ago | [CVE-2026-67401](https://github.com/imbas007/CVE-2026-67401) | PoC for CVE-2026-67401 - cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE.… | +| 2⭐ | 11h ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | +| 2⭐ | 23h ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | | 0⭐ | 1d ago | KEV [lenovo_y700_tb320fc_on_CVE-2025-21479](https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 1⭐ | 1d ago | [CVE-2025-57231](https://github.com/anirbala98/CVE-2025-57231) | Docmost < 0.22.0 - Arbitrary File Read | | 0⭐ | 1d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | @@ -27,8 +27,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 15⭐ | 17h ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | -| 266⭐ | 23h ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | +| 15⭐ | 18h ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | +| 287⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | | 3⭐ | 1d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | | 3⭐ | 1d ago | [CVE-2026-12944](https://github.com/cflowsec/CVE-2026-12944) | Langflow 1.10.0 urllib SSRF POC | | 16⭐ | 3d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | @@ -61,7 +61,7 @@ | 7⭐ | 46d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 57d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 4⭐ | 60d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | -| 4⭐ | 61d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | +| 4⭐ | 62d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | | 7⭐ | 71d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 76d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | | 3⭐ | 76d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | diff --git a/cves/2026/CVE-2026-49179.md b/cves/2026/CVE-2026-49179.md new file mode 100644 index 00000000000..a0905d2295a --- /dev/null +++ b/cves/2026/CVE-2026-49179.md @@ -0,0 +1,47 @@ +### [CVE-2026-49179](https://www.cve.org/CVERecord?id=CVE-2026-49179) +**Windows Active Directory Domain Services Remote Code Execution Vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=Microsoft&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201607&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201809&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2021H2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2022H2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2023H2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2023H2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2024H2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20Version%2025H2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2026H1&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20%28Server%20Core%20installation%29&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20R2&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20R2%20%28Server%20Core%20installation%29&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202016&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202016%20%28Server%20Core%20installation%29&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019%20%28Server%20Core%20installation%29&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202022&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202025&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202025%20%28Server%20Core%20installation%29&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=10.0.14393.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.17763.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.19044.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.19045.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.22631.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.26100.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.26200.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.28000.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.2.9200.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=6.3.9600.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.0.20348.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-77%3A%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20a%20Command%20%28%27Command%20Injection%27%29&color=brightgreen) + +### Description + +Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/overgrowncarrot1/CVE-2026-49179-Active-Directory-WriteSPNScript-Command-Injection diff --git a/cves/2026/CVE-2026-76461.md b/cves/2026/CVE-2026-76461.md new file mode 100644 index 00000000000..93df0eb91ff --- /dev/null +++ b/cves/2026/CVE-2026-76461.md @@ -0,0 +1,43 @@ +### [CVE-2026-76461](https://www.cve.org/CVERecord?id=CVE-2026-76461) +**Cisco Secure Email Gateway SQL Injection Vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=Cisco&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Cisco%20Secure%20Email&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=14.0.0-698&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=13.5.1-277&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=13.0.0-392&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=14.2.0-620&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=13.0.5-007&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=13.5.4-038&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=14.2.1-020&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=14.3.0-032&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.0.0-104&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.0.1-030&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.5.0-048&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.5.1-055&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.5.2-018&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=16.0.0-050&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.0.3-002&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=16.0.0-054&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.5.3-022&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=16.0.1-017&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.5.4-012&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=16.0.4-016&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=15.0.5-016&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=16.0.2-112&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=16.0.3-044&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20%28%27SQL%20Injection%27%29&color=brightgreen) +![](https://img.shields.io/static/v1?label=CISA%20KEV&message=Known%20Exploited&color=red) + +### Description + +A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. + +This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/S3v3n-JG/CVE-2026-76461 diff --git a/docs/hero.svg b/docs/hero.svg index 245ea0b90a3..5c0a6824f27 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 82,957 CVEs with public proof-of-concept exploits"> @@ -19,13 +19,13 @@ pocindex.io 172,175 + fill="#e6edf3" letter-spacing="-0.5">172,177 CVES INDEXED82,955 + fill="#2f81f7" letter-spacing="-0.5">82,957 WITH POCS1,198 + fill="#f85149" letter-spacing="-0.5">1,199 KNOWN EXPLOITED diff --git a/docs/social-card.svg b/docs/social-card.svg index b3236d8dec9..0299d5620eb 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,13 +20,13 @@ 172,175 + fill="#e6edf3" letter-spacing="-0.5">172,177 CVES INDEXED82,955 + fill="#2f81f7" letter-spacing="-0.5">82,957 WITH POCS1,198 + fill="#f85149" letter-spacing="-0.5">1,199 KNOWN EXPLOITED diff --git a/docs/stats.json b/docs/stats.json index 6aefe473dc5..2fee18f74a0 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { - "kev": 1198, - "total_cves": 172175, - "with_pocs": 82955 + "kev": 1199, + "total_cves": 172177, + "with_pocs": 82957 } diff --git a/index/github.txt b/index/github.txt index a59941a43bd..4583faf6309 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26663,3 +26663,5 @@ CVE-2024-0670 - https://github.com/taktak0x/HTB-NanoCorp-CVE-2024-0670 CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc CVE-2026-27739 - https://github.com/mr-redoo7/CVE-2026-27739-POC CVE-2026-76460 - https://github.com/S3v3n-JG/CVE-2026-76460 +CVE-2026-49179 - https://github.com/overgrowncarrot1/CVE-2026-49179-Active-Directory-WriteSPNScript-Command-Injection +CVE-2026-76461 - https://github.com/S3v3n-JG/CVE-2026-76461 diff --git a/index/trending.json b/index/trending.json index f86e9c33090..a9e5bf8f672 100644 --- a/index/trending.json +++ b/index/trending.json @@ -12,7 +12,7 @@ }, { "year": 2026, - "stars": 266, + "stars": 287, "name": "cve-2026-41940-PoC", "url": "https://github.com/ctdal/cve-2026-41940-PoC", "desc": "A cPanel and WHM authentication bypassing tool", @@ -484,18 +484,6 @@ "kev": false, "landed": true }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-12793", - "url": "https://github.com/abraxas/CVE-2026-12793", - "desc": "CVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)", - "pushed": "2026-09-17T03:18:59Z", - "created": "2026-09-17T02:44:56Z", - "cve": "CVE-2026-12793", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 2, @@ -508,6 +496,18 @@ "kev": true, "landed": true }, + { + "year": 2026, + "stars": 2, + "name": "CVE-2026-12793", + "url": "https://github.com/murrez/CVE-2026-12793", + "desc": "CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation", + "pushed": "2026-09-16T14:44:04Z", + "created": "2026-09-16T14:43:36Z", + "cve": "CVE-2026-12793", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0,