diff --git a/README.md b/README.md
index 72c591cbffc..768a2a65a25 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -14,41 +14,41 @@
| Stars | Released | PoC | Description |
| --- | --- | --- | --- |
-| 0⭐ | 21m ago | [CVE-2026-13043](https://github.com/TheMalwareGuardian/CVE-2026-13043) | CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access,… |
-| 0⭐ | 1h ago | [CVE-2026-23744-POC](https://github.com/01xJB/CVE-2026-23744-POC) | MCPJam Inspector Remote Code Execution |
-| 0⭐ | 1h ago |

[CVE-2026-10520-POC](https://github.com/01xJB/CVE-2026-10520-POC) | Exploit for CVE-2026-10520 / Ivanti Sentry - OS Command Injection |
-| 0⭐ | 2h ago | [CVE-2026-21589](https://github.com/BimBoxH4/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… |
-| 0⭐ | 3h ago | [CVE-2026-81780](https://github.com/0xCyp1337/CVE-2026-81780) | Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. |
-| 0⭐ | 4h ago |

[cve-2024-7971-poc](https://github.com/pepoc3/cve-2024-7971-poc) | CVE-2024-7971 OPPO Browser (Chromium 115) remote DoS PoC - OSRC verification only |
-| 0⭐ | 5h ago |

[CVE-2026-102489](https://github.com/horizon3ai/CVE-2026-102489) | Zammad Session Leak to Remote Code Execution |
-| 0⭐ | 7h ago | [CVE-2026-21589](https://github.com/aduli198/CVE-2026-21589) | Atlassian Arbitrary File Read |
-| 0⭐ | 7h ago | [CVE-2025-29927](https://github.com/sungue1/CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… |
-| 0⭐ | 8h ago |

[CVE-2026-85102](https://github.com/aduli198/CVE-2026-85102) | Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN |
+| 0⭐ | 28m ago | [CVE_2024_38063_homelab](https://github.com/ntru0/CVE_2024_38063_homelab) | Windows TCP/IP Remote Code Execution Vulnerability |
+| 0⭐ | 2h ago | [CVE-2026-105844](https://github.com/murrez/CVE-2026-105844) | CVE-2026-105844 - Payload CMS @payloadcms/plugin-import-export <3.88.0 unauth prototype pollution (CWE-1321,… |
+| 1⭐ | 2h ago | [CVE-2026-102782](https://github.com/murrez/CVE-2026-102782) | CVE-2026-102782 - OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC:… |
+| 0⭐ | 3h ago | [CVE-2026-102253-POC](https://github.com/Ravi-lk/CVE-2026-102253-POC) | DOS infinite-loop Vulnerability POC |
+| 0⭐ | 3h ago |

[CVE-2026-24061-Telnet-Authentication-Bypass](https://github.com/Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass) | Telnet 2.7 Authentication Bypass and Privilege Escalation / Telnet 2.7 Kimlik doğrulama Zafiyeti Ve Yetki… |
+| 0⭐ | 5h ago | [CVE-2026-101162-xss-wp-ultimate-review](https://github.com/Hasyros/CVE-2026-101162-xss-wp-ultimate-review) | The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings… |
+| 0⭐ | 5h ago | [wpexploit-CVE-2026-96451](https://github.com/MRdark-ops/wpexploit-CVE-2026-96451) | Privilege Escalation vulnerability |
+| 0⭐ | 5h ago | [CVE-2021-38759](https://github.com/Hu2ie/CVE-2021-38759) | CVE-2021-38759 - Raspberry Pi OS Default Credentials Exploit |
+| 0⭐ | 6h ago | [CVE-2026-13043](https://github.com/TheMalwareGuardian/CVE-2026-13043) | CVE-2026-13043 - Exploiting Panda / WatchGuard pskmad.sys authentication bypass for privileged IOCTL access,… |
+| 0⭐ | 7h ago | [CVE-2026-23744-POC](https://github.com/01xJB/CVE-2026-23744-POC) | MCPJam Inspector Remote Code Execution |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 826⭐ | 3d ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
-| 350⭐ | 3d ago |

[cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
-| 498⭐ | 47d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
+| 826⭐ | 4d ago |

[CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
+| 382⭐ | 4d ago |

[cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
+| 498⭐ | 48d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
| 96⭐ | 8d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
-| 332⭐ | 71d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
+| 332⭐ | 72d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
| 184⭐ | 46d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
| 48⭐ | 8d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE |
-| 92⭐ | 25d ago |

[CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… |
+| 92⭐ | 26d ago |

[CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… |
| 88⭐ | 25d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… |
| 104⭐ | 42d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
-| 86⭐ | 33d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) |
+| 86⭐ | 34d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) |
| 40⭐ | 13d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability |
-| 31⭐ | 9d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. |
+| 31⭐ | 10d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. |
| 108⭐ | 65d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… |
-| 38⭐ | 14d ago |

[cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
-| 35⭐ | 15h ago |

[CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
-| 107⭐ | 80d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
+| 38⭐ | 15d ago |

[cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… |
+| 35⭐ | 21h ago |

[CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
+| 107⭐ | 81d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
| 25⭐ | 9d ago |

[CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read |
| 24⭐ | 9d ago |

[watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… |
-| 43⭐ | 25d ago |

[cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
+| 43⭐ | 26d ago |

[cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
## Trending in 2025
@@ -63,7 +63,7 @@
| 7⭐ | 66d ago |

[SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… |
| 3⭐ | 40d ago |

[CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 3⭐ | 50d ago |

[vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 |
-| 4⭐ | 77d ago |

[CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
+| 4⭐ | 78d ago |

[CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
| 4⭐ | 80d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 4⭐ | 82d ago |

[CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
| 3⭐ | 79d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
@@ -77,13 +77,13 @@
| --- | --- | --- | --- |
| 17⭐ | 4d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
| 4⭐ | 53d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
-| 3⭐ | 69d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
+| 3⭐ | 70d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
## Trending in 2023
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 6⭐ | 76d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
+| 6⭐ | 77d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. |
| 3⭐ | 72d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… |
diff --git a/cves/2021/CVE-2021-38759.md b/cves/2021/CVE-2021-38759.md
index 47f8447bbb5..9c66b5ef849 100644
--- a/cves/2021/CVE-2021-38759.md
+++ b/cves/2021/CVE-2021-38759.md
@@ -13,7 +13,7 @@ Raspberry Pi OS through 5.10 has the raspberry default password for the pi accou
- http://packetstormsecurity.com/files/165211/Raspberry-Pi-5.10-Default-Credentials.html
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Hu2ie/CVE-2021-38759
#### ExploitDB
- https://www.exploit-db.com/exploits/50576
diff --git a/cves/2024/CVE-2024-38063.md b/cves/2024/CVE-2024-38063.md
index e7e26481877..541c6ee5238 100644
--- a/cves/2024/CVE-2024-38063.md
+++ b/cves/2024/CVE-2024-38063.md
@@ -85,4 +85,5 @@ No PoCs from references.
- https://github.com/cleverg0d/CVEs
- https://github.com/tijldeneut/Security
- https://github.com/izaan-sh/CVE-2024-38063-Exploitation-Detection-Mitigation-Lab/blob/76fe4a058a7a48e578bb5d4547437bb1118fcfbc/scripts/cve-2024-38063.py
+- https://github.com/ntru0/CVE_2024_38063_homelab
diff --git a/cves/2026/CVE-2026-101160.md b/cves/2026/CVE-2026-101160.md
index 55335c6c5a5..393595e8cea 100644
--- a/cves/2026/CVE-2026-101160.md
+++ b/cves/2026/CVE-2026-101160.md
@@ -14,4 +14,4 @@ The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a su
- https://wpscan.com/vulnerability/d728523f-1f33-470f-b64f-e9e286d29b6b/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Hasyros/CVE-2026-101160-dos-wp-ultimate-review-rating
diff --git a/cves/2026/CVE-2026-101161.md b/cves/2026/CVE-2026-101161.md
index 78faa52f714..61ecec7d0ef 100644
--- a/cves/2026/CVE-2026-101161.md
+++ b/cves/2026/CVE-2026-101161.md
@@ -14,4 +14,4 @@ The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenti
- https://wpscan.com/vulnerability/c1c3e2d7-4833-4e51-a3c7-45e6d036a525/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Hasyros/CVE-2026-101161-dos-wp-ultimate-review-shortcode
diff --git a/cves/2026/CVE-2026-101162.md b/cves/2026/CVE-2026-101162.md
index dffd6fb5da3..6b84e7784d3 100644
--- a/cves/2026/CVE-2026-101162.md
+++ b/cves/2026/CVE-2026-101162.md
@@ -14,4 +14,4 @@ The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its
- https://wpscan.com/vulnerability/b7a66222-4e30-4d70-9e2f-b91d421d285f/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Hasyros/CVE-2026-101162-xss-wp-ultimate-review
diff --git a/cves/2026/CVE-2026-102253.md b/cves/2026/CVE-2026-102253.md
new file mode 100644
index 00000000000..70ca3769383
--- /dev/null
+++ b/cves/2026/CVE-2026-102253.md
@@ -0,0 +1,18 @@
+### [CVE-2026-102253](https://www.cve.org/CVERecord?id=CVE-2026-102253)
+**iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS**
+
+
+
+
+
+### Description
+
+iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagram. Attackers can permanently pin the affected per-stream receive thread at approximately 100% CPU usage, rendering the server unusable until forcibly killed with SIGKILL, as the process does not respond to normal control-channel closure.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/Ravi-lk/CVE-2026-102253-POC
diff --git a/cves/2026/CVE-2026-102782.md b/cves/2026/CVE-2026-102782.md
new file mode 100644
index 00000000000..4f83f0bc04c
--- /dev/null
+++ b/cves/2026/CVE-2026-102782.md
@@ -0,0 +1,18 @@
+### [CVE-2026-102782](https://www.cve.org/CVERecord?id=CVE-2026-102782)
+**Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0**
+
+
+
+
+
+### Description
+
+Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request parameter through Joomla’s generic, non-sanitizing input filter, which strips HTML/script tags but never touches quotes or SQL syntax, and concatenates it directly into a query string with no escaping or parameterization:
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/murrez/CVE-2026-102782
diff --git a/cves/2026/CVE-2026-105844.md b/cves/2026/CVE-2026-105844.md
index 01802c83089..da5292bcc25 100644
--- a/cves/2026/CVE-2026-105844.md
+++ b/cves/2026/CVE-2026-105844.md
@@ -20,4 +20,4 @@ Payload is a free and open source headless content management system. In version
- https://github.com/payloadcms/payload/releases/tag/v3.88.0
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/murrez/CVE-2026-105844
diff --git a/cves/2026/CVE-2026-24061.md b/cves/2026/CVE-2026-24061.md
index 50b20eaf73d..5da360abe01 100644
--- a/cves/2026/CVE-2026-24061.md
+++ b/cves/2026/CVE-2026-24061.md
@@ -73,6 +73,7 @@ No PoCs from references.
- https://github.com/LKSTA/LKSDIKMEN-Cybersecurity-2026
- https://github.com/ridpath/Terrminus-CVE-2026-2406
- https://github.com/Ish3ng0m4/CVE-2026-24061-Telnetd
+- https://github.com/Yoksulcvt/CVE-2026-24061-Telnet-Authentication-Bypass
#### Nuclei
- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml
diff --git a/cves/2026/CVE-2026-60137.md b/cves/2026/CVE-2026-60137.md
index e015d60dfe8..0a474070a4d 100644
--- a/cves/2026/CVE-2026-60137.md
+++ b/cves/2026/CVE-2026-60137.md
@@ -66,6 +66,7 @@ No PoCs from references.
- https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-
- https://github.com/pedroMPMartins/wordpress_exploit
- https://github.com/hitechcloud-vietnam/wp2shell-PoC
+- https://github.com/manpisetsu/wp2shell
#### Metasploit
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb
diff --git a/cves/2026/CVE-2026-63030.md b/cves/2026/CVE-2026-63030.md
index 90cfac8df5b..e4a46ca09a9 100644
--- a/cves/2026/CVE-2026-63030.md
+++ b/cves/2026/CVE-2026-63030.md
@@ -84,6 +84,7 @@ No PoCs from references.
- https://github.com/MRdark-ops/WP2Shell--CVE-2026-63030-CVE-2026-60137-
- https://github.com/pedroMPMartins/wordpress_exploit
- https://github.com/hitechcloud-vietnam/wp2shell-PoC
+- https://github.com/manpisetsu/wp2shell
#### Nuclei
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml
diff --git a/cves/2026/CVE-2026-76555.md b/cves/2026/CVE-2026-76555.md
index 7ac2c331a4d..51064115eab 100644
--- a/cves/2026/CVE-2026-76555.md
+++ b/cves/2026/CVE-2026-76555.md
@@ -14,4 +14,4 @@ The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a use
- https://wpscan.com/vulnerability/aadc28e6-6176-45ca-80b6-a8186fba835f/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Hasyros/CVE-2026-76555-path-traversal-wp-import-export-lite
diff --git a/cves/2026/CVE-2026-88771.md b/cves/2026/CVE-2026-88771.md
index eefa3792048..92e39e806f0 100644
--- a/cves/2026/CVE-2026-88771.md
+++ b/cves/2026/CVE-2026-88771.md
@@ -22,3 +22,4 @@ No PoCs from references.
- https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771
- https://github.com/craigsblackie/cve-2026-88771-netscaler
- https://github.com/srrelitz2/CyberWeather
+- https://github.com/watchtowrlabs/citrix-netscaler-cve-2026-88771-iocs
diff --git a/cves/2026/CVE-2026-93661.md b/cves/2026/CVE-2026-93661.md
index 94842a7888d..2221b37e77a 100644
--- a/cves/2026/CVE-2026-93661.md
+++ b/cves/2026/CVE-2026-93661.md
@@ -14,4 +14,4 @@ The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update
- https://wpscan.com/vulnerability/8f1c665e-15e4-4b5d-853d-919723614611/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Hasyros/CVE-2026-93661-idor-events-manager
diff --git a/cves/2026/CVE-2026-96451.md b/cves/2026/CVE-2026-96451.md
index bd37c4be8cd..a43fd28daac 100644
--- a/cves/2026/CVE-2026-96451.md
+++ b/cves/2026/CVE-2026-96451.md
@@ -16,3 +16,4 @@ No PoCs from references.
#### Github
- https://github.com/Nxploited/CVE-2026-96451
+- https://github.com/MRdark-ops/wpexploit-CVE-2026-96451
diff --git a/cves/2026/CVE-2026-97332.md b/cves/2026/CVE-2026-97332.md
index 2dfc19ed15e..b54d6989426 100644
--- a/cves/2026/CVE-2026-97332.md
+++ b/cves/2026/CVE-2026-97332.md
@@ -14,4 +14,4 @@ The User Private Files WordPress plugin before 2.2.0 does not properly protect
- https://wpscan.com/vulnerability/d6a144b3-84e3-43eb-92d3-fd4505dd0e1c/
#### Github
-No PoCs found on GitHub currently.
+- https://github.com/Kolya080808/CVE-2026-97332-PoC
diff --git a/docs/hero.svg b/docs/hero.svg
index a433b0fa5d0..0dd4503dc20 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@