mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Trending CVEs update 2026-10-08 14:14 🤖
This commit is contained in:
1 parent
f1a2efe7d4
commit
a5cdb22aa8
9 files changed
+83
-80
No files matched your search
@@ -2,7 +2,7 @@
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173639-84192-1225" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
@@ -14,23 +14,23 @@
|
||||
|
||||
| Stars | Released | PoC | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 0⭐ | 1h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-48908](https://github.com/theendofabbys/CVE-2026-48908) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files,… |
|
||||
| 0⭐ | 3h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [wso2_cve-2026-5430_lab](https://github.com/getdrive/wso2_cve-2026-5430_lab) | Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход… |
|
||||
| 0⭐ | 3h ago | [Keycloak-CVE-2026-18963-Exploit](https://github.com/hardeep-sudo/Keycloak-CVE-2026-18963-Exploit) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… |
|
||||
| 0⭐ | 4h ago | [-CVE-2026-18963-POC](https://github.com/SonOfABot/-CVE-2026-18963-POC) | PoC for keycloak 1.26 vulnerability |
|
||||
| 1⭐ | 4h ago | [CVE-2026-21589](https://github.com/murrez/CVE-2026-21589) | CVE-2026-21589 - Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC:… |
|
||||
| 0⭐ | 7h ago | [CVE-2026-21589](https://github.com/rxsklife/CVE-2026-21589) | CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight… |
|
||||
| 0⭐ | 7h ago | [CVE-2026-105192](https://github.com/rxsklife/CVE-2026-105192) | CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache… |
|
||||
| 0⭐ | 9h ago | [CVE-2026-61424](https://github.com/theendofabbys/CVE-2026-61424) | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The… |
|
||||
| 0⭐ | 9h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-56291](https://github.com/theendofabbys/CVE-2026-56291) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla… |
|
||||
| 0⭐ | 13h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… |
|
||||
| 0⭐ | 2h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-48908](https://github.com/theendofabbys/CVE-2026-48908) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files,… |
|
||||
| 0⭐ | 4h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [wso2_cve-2026-5430_lab](https://github.com/getdrive/wso2_cve-2026-5430_lab) | Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход… |
|
||||
| 0⭐ | 4h ago | [Keycloak-CVE-2026-18963-Exploit](https://github.com/hardeep-sudo/Keycloak-CVE-2026-18963-Exploit) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… |
|
||||
| 0⭐ | 5h ago | [-CVE-2026-18963-POC](https://github.com/SonOfABot/-CVE-2026-18963-POC) | PoC for keycloak 1.26 vulnerability |
|
||||
| 1⭐ | 5h ago | [CVE-2026-21589](https://github.com/murrez/CVE-2026-21589) | CVE-2026-21589 - Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC:… |
|
||||
| 0⭐ | 8h ago | [CVE-2026-21589](https://github.com/rxsklife/CVE-2026-21589) | CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight… |
|
||||
| 0⭐ | 8h ago | [CVE-2026-105192](https://github.com/rxsklife/CVE-2026-105192) | CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache… |
|
||||
| 0⭐ | 10h ago | [CVE-2026-61424](https://github.com/theendofabbys/CVE-2026-61424) | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The… |
|
||||
| 0⭐ | 10h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-56291](https://github.com/theendofabbys/CVE-2026-56291) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla… |
|
||||
| 0⭐ | 14h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… |
|
||||
|
||||
## Trending in 2026
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 826⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
|
||||
| 464⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
|
||||
| 467⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… |
|
||||
| 498⭐ | 48d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
|
||||
| 96⭐ | 9d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
|
||||
| 332⭐ | 72d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
|
||||
@@ -47,8 +47,8 @@
|
||||
| 107⭐ | 81d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
|
||||
| 35⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… |
|
||||
| 25⭐ | 10d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read |
|
||||
| 23⭐ | 10d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… |
|
||||
| 42⭐ | 26d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… |
|
||||
| 10⭐ | 2d ago | [watchTowr-vs-Atlassian-CVE-2026-21589](https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… |
|
||||
| 9⭐ | 1d ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… |
|
||||
|
||||
## Trending in 2025
|
||||
|
||||
@@ -64,8 +64,8 @@
|
||||
| 3⭐ | 51d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 |
|
||||
| 4⭐ | 78d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
|
||||
| 4⭐ | 81d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
|
||||
| 4⭐ | 82d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
|
||||
| 3⭐ | 79d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
|
||||
| 4⭐ | 83d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink |
|
||||
| 3⭐ | 80d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
|
||||
|
||||
<details>
|
||||
<summary>2024, 2023, 2022</summary>
|
||||
@@ -89,7 +89,7 @@
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 7⭐ | 11h ago | [CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver… |
|
||||
| 7⭐ | 12h ago | [CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver… |
|
||||
|
||||
</details>
|
||||
|
||||
|
||||
@@ -41,6 +41,7 @@ No PoCs from references.
|
||||
- https://github.com/nullxall/cve-2025-62215-exploit-poc
|
||||
- https://github.com/theman001/CVE-2025-62215
|
||||
- https://github.com/vikhegde/Kernel-Exploitation-dbgman
|
||||
- https://github.com/Hu2ie/CVE-2025-62215-Windows-Kernel---Elevation-of-Privilege
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/52494
|
||||
@@ -27339,3 +27339,4 @@ CVE-2022-0847 - https://github.com/osungjinwoo/CVE-2022-0847-Dirty-Pipe
|
||||
CVE-2022-22965 - https://github.com/osungjinwoo/CVE-2022-22965
|
||||
CVE-2026-43499 - https://github.com/THORBHAIxTRUSTED/RootMyVivo-Exploit
|
||||
CVE-2026-48908 - https://github.com/theendofabbys/CVE-2026-48908
|
||||
CVE-2025-62215 - https://github.com/Hu2ie/CVE-2025-62215-Windows-Kernel---Elevation-of-Privilege
|
||||
@@ -6624,7 +6624,7 @@
|
||||
"CVE-2020-8290 https://youtu.be/OpC6neWd2aM":{"basis":"unknown","cve":"CVE-2020-8290","imported":true,"released":null,"url":"https://youtu.be/OpC6neWd2aM"},
|
||||
"CVE-2020-8298 github:pillys/fs-path/pull/6?#":{"basis":"unknown","cve":"CVE-2020-8298","imported":true,"released":null,"url":"https://github.com/pillys/fs-path/pull/6"},
|
||||
"CVE-2020-8300 github:stuartcarroll/citrixadc-cve-2020-8300?#":{"basis":"unknown","cve":"CVE-2020-8300","imported":true,"released":null,"url":"https://github.com/stuartcarroll/CitrixADC-CVE-2020-8300"},
|
||||
"CVE-2020-8394 github:tzwlhack/vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md?#":{"basis":"unknown","cve":"CVE-2020-8394","imported":true,"released":null,"url":"https://github.com/tzwlhack/Vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md"},
|
||||
"CVE-2020-8394 github:tzwlhack/vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md?#":{"basis":"unknown","cve":"CVE-2020-8394","gone":"2026-10-08T14:13:50Z","imported":true,"released":null,"url":"https://github.com/tzwlhack/Vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md"},
|
||||
"CVE-2020-8416 https://pastebin.com/wqNWnCuN":{"basis":"unknown","cve":"CVE-2020-8416","imported":true,"released":null,"url":"https://pastebin.com/wqNWnCuN"},
|
||||
"CVE-2020-8416 https://www.exploit-db.com/exploits/47987":{"basis":"source","cve":"CVE-2020-8416","imported":true,"released":"2020-02-03","source":"2020-02-03","url":"https://www.exploit-db.com/exploits/47987"},
|
||||
"CVE-2020-8417 github:rapidsafeguard/codesnippets_cve-2020-8417?#":{"basis":"unknown","cve":"CVE-2020-8417","imported":true,"released":null,"url":"https://github.com/Rapidsafeguard/codesnippets_CVE-2020-8417"},
|
||||
|
||||
@@ -5383,7 +5383,7 @@
|
||||
"CVE-2023-37759 https://www.exploit-db.com/exploits/51688":{"basis":"source","cve":"CVE-2023-37759","imported":true,"released":"2023-08-21","source":"2023-08-21","url":"https://www.exploit-db.com/exploits/51688"},
|
||||
"CVE-2023-3776 github:google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation?#":{"basis":"commit","blobs":["55d79687ed0e1c3ccc627fe396d3dda1ecaf5850","a8ea1f00177ec8ffeb977ccd057d468ec2cfc408"],"checked":"2026-10-06T22:39:00Z","commit":"2024-01-11T16:06:38Z","commit_verified":true,"created":"2020-06-15T09:19:51Z","cve":"CVE-2023-3776","head":"c9856c7eab06c9c4dfbc7fa64741185367591343","history_paths":["pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/cos-93-16623.341.29/poc.c"],"history_version":3,"imported":true,"paths":["pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/cos-93-16623.341.29/poc.c","pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation/exploit/mitigation-6.1/poc.c"],"pushed_at":"2026-10-06T15:11:02Z","released":"2024-01-11T16:06:38Z","repo":272394704,"rev":"9c58edd820b4d642abbae87825a7f8718b9297e6be99c8a923aada09b1cf5513","sha":"8342ff4443771e4b70d62f408363c5f93a476be4","url":"https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_cos_mitigation"},
|
||||
"CVE-2023-3776 github:google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_lts?#":{"basis":"commit","blobs":["55d79687ed0e1c3ccc627fe396d3dda1ecaf5850"],"checked":"2026-10-06T22:39:00Z","commit":"2023-11-13T15:11:02Z","commit_verified":true,"created":"2020-06-15T09:19:51Z","cve":"CVE-2023-3776","head":"c9856c7eab06c9c4dfbc7fa64741185367591343","history_paths":["pocs/linux/kernelctf/CVE-2023-3776_lts/exploit/lts-6.1.36/poc.c"],"history_version":3,"imported":true,"paths":["pocs/linux/kernelctf/CVE-2023-3776_lts/exploit/lts-6.1.36/poc.c"],"pushed_at":"2026-10-06T15:11:02Z","released":"2023-11-13T15:11:02Z","repo":272394704,"rev":"d52792fc513e0874226a5aebc4b2eb034f8c23affe1fd1dbe794901aeb442d16","sha":"45de264fffb1581f2d2fccdc482a88249fa9b5c2","url":"https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-3776_lts"},
|
||||
"CVE-2023-3776 github:sakura999999999/cve-2023-3776_repro?#":{"basis":"pending","checked":"2026-10-08T10:09:05Z","created":"2026-09-30T05:49:23Z","cve":"CVE-2023-3776","head":"b63059fc7d7e1da5dd4e890d56d681850b3a7dbd","imported":true,"pending":true,"pushed_at":"2026-10-08T09:34:58Z","released":null,"repo":1397099307,"url":"https://github.com/Sakura999999999/CVE-2023-3776_repro"},
|
||||
"CVE-2023-3776 github:sakura999999999/cve-2023-3776_repro?#":{"basis":"pending","checked":"2026-10-08T14:09:37Z","created":"2026-09-30T05:49:23Z","cve":"CVE-2023-3776","head":"b63059fc7d7e1da5dd4e890d56d681850b3a7dbd","imported":true,"pending":true,"pushed_at":"2026-10-08T09:34:58Z","released":null,"repo":1397099307,"url":"https://github.com/Sakura999999999/CVE-2023-3776_repro"},
|
||||
"CVE-2023-37765 github:gpac/gpac/issues/2515?#":{"basis":"unknown","cve":"CVE-2023-37765","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2515"},
|
||||
"CVE-2023-37766 github:gpac/gpac/issues/2516?#":{"basis":"unknown","cve":"CVE-2023-37766","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2516"},
|
||||
"CVE-2023-37767 github:gpac/gpac/issues/2514?#":{"basis":"unknown","cve":"CVE-2023-37767","imported":true,"released":null,"url":"https://github.com/gpac/gpac/issues/2514"},
|
||||
|
||||
@@ -330,7 +330,7 @@
|
||||
"CVE-2024-0710 github:karlemilnikka/cve-2024-0710?#":{"basis":"unknown","cve":"CVE-2024-0710","imported":true,"released":null,"url":"https://github.com/karlemilnikka/CVE-2024-0710"},
|
||||
"CVE-2024-0711 https://wpscan.com/vulnerability/8e286c04-ef32-4af0-be78-d978999b2a90":{"basis":"unknown","cve":"CVE-2024-0711","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/8e286c04-ef32-4af0-be78-d978999b2a90/"},
|
||||
"CVE-2024-0712 github:gta12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.md?#":{"basis":"unknown","cve":"CVE-2024-0712","imported":true,"released":null,"url":"https://github.com/GTA12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.md"},
|
||||
"CVE-2024-0713 github:zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml?#":{"basis":"unknown","cve":"CVE-2024-0713","imported":true,"released":null,"url":"https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml"},
|
||||
"CVE-2024-0713 github:zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml?#":{"basis":"unknown","cve":"CVE-2024-0713","gone":"2026-10-08T14:13:50Z","imported":true,"released":null,"url":"https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml"},
|
||||
"CVE-2024-0716 github:gta12138/vul/blob/main/smart%20s150/s150%20Download%20any%20file/smart%20s150%20download%20any%20file.md?#":{"basis":"unknown","cve":"CVE-2024-0716","imported":true,"released":null,"url":"https://github.com/GTA12138/vul/blob/main/smart%20s150/s150%20Download%20any%20file/smart%20s150%20download%20any%20file.md"},
|
||||
"CVE-2024-0717 github:999zzzzz/d-link?#":{"basis":"unknown","cve":"CVE-2024-0717","imported":true,"released":null,"url":"https://github.com/999zzzzz/D-Link"},
|
||||
"CVE-2024-0718 github:biantaibao/zhglxt_xss/blob/main/xss.md?#":{"basis":"unknown","cve":"CVE-2024-0718","imported":true,"released":null,"url":"https://github.com/biantaibao/zhglxt_xss/blob/main/xss.md"},
|
||||
|
||||
@@ -3761,7 +3761,7 @@
|
||||
"CVE-2025-2611 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml?#":{"basis":"unknown","cve":"CVE-2025-2611","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml"},
|
||||
"CVE-2025-2611 github:rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb?#":{"basis":"unknown","cve":"CVE-2025-2611","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb"},
|
||||
"CVE-2025-2611 https://www.vulncheck.com/blog/ictbroadcast-kev":{"basis":"unknown","cve":"CVE-2025-2611","imported":true,"released":null,"url":"https://www.vulncheck.com/blog/ictbroadcast-kev"},
|
||||
"CVE-2025-26125 github:zeromemoryex/cve-2025-26125?#":{"basis":"pending","checked":"2026-10-08T10:11:22Z","created":"2025-01-08T05:50:07Z","cve":"CVE-2025-26125","head":"bd32f9eb2cfae367eff7977a8479b25fe0c6dc6d","imported":true,"pending":true,"pushed_at":"2026-10-07T10:43:43Z","released":null,"repo":913663551,"url":"https://github.com/ZeroMemoryEx/CVE-2025-26125"},
|
||||
"CVE-2025-26125 github:zeromemoryex/cve-2025-26125?#":{"basis":"pending","checked":"2026-10-08T14:12:16Z","created":"2025-01-08T05:50:07Z","cve":"CVE-2025-26125","head":"bd32f9eb2cfae367eff7977a8479b25fe0c6dc6d","imported":true,"pending":true,"pushed_at":"2026-10-07T10:43:43Z","released":null,"repo":913663551,"url":"https://github.com/ZeroMemoryEx/CVE-2025-26125"},
|
||||
"CVE-2025-2614 https://hackerone.com/reports/3015894":{"basis":"unknown","cve":"CVE-2025-2614","imported":true,"released":null,"url":"https://hackerone.com/reports/3015894"},
|
||||
"CVE-2025-2615 https://hackerone.com/reports/3049150":{"basis":"unknown","cve":"CVE-2025-2615","imported":true,"released":null,"url":"https://hackerone.com/reports/3049150"},
|
||||
"CVE-2025-26153 github:mexeck88/csrf-via-stored-xss-for-privesc?#":{"basis":"unknown","cve":"CVE-2025-26153","imported":true,"released":null,"url":"https://github.com/mexeck88/CSRF-via-stored-XSS-for-PrivEsc"},
|
||||
@@ -9784,6 +9784,7 @@
|
||||
"CVE-2025-6220 https://ryankozak.com/posts/cve-2025-6220":{"basis":"unknown","cve":"CVE-2025-6220","imported":true,"released":null,"url":"https://ryankozak.com/posts/cve-2025-6220/"},
|
||||
"CVE-2025-62215 github:abrewer251/cve-2025-62215_windows_kernel_pe?#":{"basis":"unknown","cve":"CVE-2025-62215","imported":true,"released":null,"url":"https://github.com/abrewer251/CVE-2025-62215_Windows_Kernel_PE"},
|
||||
"CVE-2025-62215 github:gowonisgood/cve-2025-62215-poc?#":{"basis":"unknown","cve":"CVE-2025-62215","imported":true,"released":null,"url":"https://github.com/gowonisgood/CVE-2025-62215-POC"},
|
||||
"CVE-2025-62215 github:hu2ie/cve-2025-62215-windows-kernel---elevation-of-privilege?#":{"basis":"pending","checked":"2026-10-08T14:09:37Z","created":"2026-10-08T13:26:00Z","cve":"CVE-2025-62215","head":"be4e43525ffb3faf8e52c547f13ae16eda091d94","pending":true,"pushed_at":"2026-10-08T13:33:16Z","released":null,"repo":1410383704,"seen":"2026-10-08T14:09:42Z","url":"https://github.com/Hu2ie/CVE-2025-62215-Windows-Kernel---Elevation-of-Privilege"},
|
||||
"CVE-2025-62215 github:nullxall/cve-2025-62215-exploit-poc?#":{"basis":"unknown","cve":"CVE-2025-62215","imported":true,"released":null,"url":"https://github.com/nullxall/cve-2025-62215-exploit-poc"},
|
||||
"CVE-2025-62215 github:theman001/cve-2025-62215?#":{"basis":"unknown","cve":"CVE-2025-62215","imported":true,"released":null,"url":"https://github.com/theman001/CVE-2025-62215"},
|
||||
"CVE-2025-62215 github:vikhegde/kernel-exploitation-dbgman?#":{"basis":"unknown","cve":"CVE-2025-62215","imported":true,"released":null,"url":"https://github.com/vikhegde/Kernel-Exploitation-dbgman"},
|
||||
|
||||
@@ -9117,7 +9117,7 @@
|
||||
"CVE-2026-54284 github:advisories/ghsa-pwgv-4x5q-6m9f?#":{"basis":"unknown","cve":"CVE-2026-54284","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-pwgv-4x5q-6m9f"},
|
||||
"CVE-2026-54298 github:advisories/ghsa-jrpj-wcv7-9fh9?#":{"basis":"unknown","cve":"CVE-2026-54298","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-jrpj-wcv7-9fh9"},
|
||||
"CVE-2026-5430 github:abraxas/cve-2026-5430?#":{"basis":"created","blobs":["c70219a5f074b7171dec0dd47315a0c13dac3922","dc683e85e50835a75c9fdf610bcb8883bdf2be96"],"checked":"2026-10-07T01:08:04Z","commit":"2026-09-25T20:52:44Z","commit_verified":true,"created":"2026-09-25T20:53:51Z","cve":"CVE-2026-5430","head":"d43be2e455fe1434e40a65a603590df5a635cf37","history_paths":["CVE-2026-5430-Abraxas-Labs.py"],"history_version":3,"imported":true,"paths":["CVE-2026-5430-Abraxas-Labs.py","lab/poc.py"],"pushed_at":"2026-10-07T01:07:31Z","released":"2026-09-25T20:53:51Z","repo":1388178590,"rev":"1d0f95bf1c5f12610e4ae1d814d79c2f2eca268a743a9540afc7a5248019db14","sha":"268cc97f86806cb1fd6763602871b6a3c1e1503b","url":"https://github.com/abraxas/CVE-2026-5430"},
|
||||
"CVE-2026-5430 github:davidvrns/cve-2026-5430-wso2?#":{"basis":"pending","checked":"2026-10-08T10:09:17Z","created":"2026-10-08T00:42:07Z","cve":"CVE-2026-5430","head":"27648e7429efb03c5d469d707dca768af5075abf","pending":true,"pushed_at":"2026-10-08T00:43:30Z","released":null,"repo":1409530346,"seen":"2026-10-08T01:08:17Z","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"},
|
||||
"CVE-2026-5430 github:davidvrns/cve-2026-5430-wso2?#":{"basis":"pending","checked":"2026-10-08T14:09:48Z","created":"2026-10-08T00:42:07Z","cve":"CVE-2026-5430","head":"27648e7429efb03c5d469d707dca768af5075abf","pending":true,"pushed_at":"2026-10-08T00:43:30Z","released":null,"repo":1409530346,"seen":"2026-10-08T01:08:17Z","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"},
|
||||
"CVE-2026-5430 github:getdrive/wso2_cve-2026-5430_lab?#":{"basis":"commit","blobs":["3f462cf7b714a397659624f93df6b253a8d8d269"],"checked":"2026-10-08T10:09:05Z","commit":"2026-10-08T09:40:28Z","commit_verified":true,"created":"2026-10-08T09:28:12Z","cve":"CVE-2026-5430","head":"4e0055a50c3a8df0820806de5546f42a8c76c98e","history_paths":["wso_api_exploit.py"],"history_version":3,"paths":["wso_api_exploit.py"],"pushed_at":"2026-10-08T09:40:28Z","released":"2026-10-08T09:40:28Z","repo":1410070096,"rev":"49ce55a2b2a66508e33f65b2b5a872a927d00e72df0cd81cc5f1add8e4f06f65","seen":"2026-10-08T10:09:12Z","sha":"4e0055a50c3a8df0820806de5546f42a8c76c98e","url":"https://github.com/getdrive/wso2_cve-2026-5430_lab"},
|
||||
"CVE-2026-54300 github:advisories/ghsa-529g-xq4f-cw38?#":{"basis":"unknown","cve":"CVE-2026-54300","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-529g-xq4f-cw38"},
|
||||
"CVE-2026-54337 github:4qu4r1um/cve-2026-54337-poc?#":{"basis":"unknown","cve":"CVE-2026-54337","imported":true,"released":null,"url":"https://github.com/4qu4r1um/CVE-2026-54337-PoC"},
|
||||
|
||||
+58
-58
@@ -10,7 +10,7 @@
|
||||
"pushed": "2026-10-03T16:24:22Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 25.881595538985458,
|
||||
"score": 25.752162656332338,
|
||||
"trending": true,
|
||||
"created": "2026-03-08T11:25:39Z",
|
||||
"cve": "CVE-2026-24061",
|
||||
@@ -18,7 +18,7 @@
|
||||
},
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 464,
|
||||
"stars": 467,
|
||||
"name": "cve-2026-41940-PoC",
|
||||
"url": "https://github.com/yasouxken/cve-2026-41940-PoC",
|
||||
"artifact": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pushed": "2026-10-03T16:48:21Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 14.567779330427605,
|
||||
"score": 14.588436105570429,
|
||||
"trending": true,
|
||||
"created": "2026-09-21T18:23:02Z",
|
||||
"cve": "CVE-2026-41940",
|
||||
@@ -44,7 +44,7 @@
|
||||
"pushed": "2026-08-20T21:56:15Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 3.499664700431869,
|
||||
"score": 3.4975851832780447,
|
||||
"trending": true,
|
||||
"created": "2026-08-15T20:57:13Z",
|
||||
"cve": "CVE-2026-9830",
|
||||
@@ -61,7 +61,7 @@
|
||||
"pushed": "2026-09-29T06:20:46Z",
|
||||
"released": "2026-09-29T06:20:46Z",
|
||||
"basis": "commit",
|
||||
"score": 2.030366624455951,
|
||||
"score": 2.024560400289033,
|
||||
"trending": true,
|
||||
"created": "2026-02-05T10:21:22Z",
|
||||
"cve": "CVE-2026-41096",
|
||||
@@ -78,7 +78,7 @@
|
||||
"pushed": "2026-07-27T19:12:07Z",
|
||||
"released": "2026-07-24T03:30:17Z",
|
||||
"basis": "commit",
|
||||
"score": 1.7094540828909222,
|
||||
"score": 1.7088025479105613,
|
||||
"trending": true,
|
||||
"created": "2026-07-23T18:54:34Z",
|
||||
"cve": "CVE-2026-54121",
|
||||
@@ -95,7 +95,7 @@
|
||||
"pushed": "2026-08-22T04:49:54Z",
|
||||
"released": "2026-08-22T04:49:54Z",
|
||||
"basis": "commit",
|
||||
"score": 1.3170525417875467,
|
||||
"score": 1.3162491220026158,
|
||||
"trending": true,
|
||||
"created": "2026-08-22T04:49:33Z",
|
||||
"cve": "CVE-2026-62911",
|
||||
@@ -112,7 +112,7 @@
|
||||
"pushed": "2026-09-29T07:52:23Z",
|
||||
"released": "2026-09-29T07:57:18Z",
|
||||
"basis": "created",
|
||||
"score": 1.0198408688010956,
|
||||
"score": 1.0169053709126272,
|
||||
"trending": true,
|
||||
"created": "2026-09-29T07:57:18Z",
|
||||
"cve": "CVE-2026-94545",
|
||||
@@ -129,7 +129,7 @@
|
||||
"pushed": "2026-09-11T16:33:14Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.9686224737547535,
|
||||
"score": 0.9675976255864616,
|
||||
"trending": true,
|
||||
"created": "2026-09-10T11:28:38Z",
|
||||
"cve": "CVE-2026-20805",
|
||||
@@ -146,7 +146,7 @@
|
||||
"pushed": "2026-09-12T00:03:49Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.9338628869410474,
|
||||
"score": 0.9328636071691511,
|
||||
"trending": true,
|
||||
"created": "2026-09-12T00:03:07Z",
|
||||
"cve": "CVE-2026-21858",
|
||||
@@ -163,7 +163,7 @@
|
||||
"pushed": "2026-08-26T02:23:55Z",
|
||||
"released": "2026-08-25T19:06:37Z",
|
||||
"basis": "created",
|
||||
"score": 0.7857918568501749,
|
||||
"score": 0.7852740393917066,
|
||||
"trending": true,
|
||||
"created": "2026-08-25T19:06:37Z",
|
||||
"cve": "CVE-2026-75604",
|
||||
@@ -180,7 +180,7 @@
|
||||
"pushed": "2026-09-03T20:38:35Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.7613288979329319,
|
||||
"score": 0.7606999155278839,
|
||||
"trending": true,
|
||||
"created": "2026-09-02T20:12:10Z",
|
||||
"cve": "CVE-2026-65343",
|
||||
@@ -197,7 +197,7 @@
|
||||
"pushed": "2026-09-24T02:47:40Z",
|
||||
"released": "2026-09-24T02:47:40Z",
|
||||
"basis": "commit",
|
||||
"score": 0.636785580383791,
|
||||
"score": 0.6355705899566272,
|
||||
"trending": true,
|
||||
"created": "2026-09-24T00:22:30Z",
|
||||
"cve": "CVE-2026-84543",
|
||||
@@ -214,7 +214,7 @@
|
||||
"pushed": "2026-08-03T15:31:59Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.6158382402925018,
|
||||
"score": 0.6155666997076377,
|
||||
"trending": true,
|
||||
"created": "2026-08-03T15:29:22Z",
|
||||
"cve": "CVE-2026-47301",
|
||||
@@ -231,7 +231,7 @@
|
||||
"pushed": "2026-09-27T19:48:09Z",
|
||||
"released": "2026-09-27T19:47:52Z",
|
||||
"basis": "commit",
|
||||
"score": 0.5981942927343685,
|
||||
"score": 0.5966930282627358,
|
||||
"trending": true,
|
||||
"created": "2026-09-27T19:41:06Z",
|
||||
"cve": "CVE-2026-34990",
|
||||
@@ -248,7 +248,7 @@
|
||||
"pushed": "2026-09-22T19:36:47Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.5716691812108645,
|
||||
"score": 0.5706629457736195,
|
||||
"trending": true,
|
||||
"created": "2026-09-22T18:40:26Z",
|
||||
"cve": "CVE-2026-87902",
|
||||
@@ -265,7 +265,7 @@
|
||||
"pushed": "2026-07-18T21:09:06Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.5261367035655576,
|
||||
"score": 0.5259489389332873,
|
||||
"trending": true,
|
||||
"created": "2026-07-14T14:21:27Z",
|
||||
"cve": "CVE-2026-43499",
|
||||
@@ -282,7 +282,7 @@
|
||||
"pushed": "2026-10-07T01:07:28Z",
|
||||
"released": "2026-09-22T18:13:48Z",
|
||||
"basis": "created",
|
||||
"score": 0.5252717122556475,
|
||||
"score": 0.5243503108650335,
|
||||
"trending": true,
|
||||
"created": "2026-09-22T18:13:48Z",
|
||||
"cve": "CVE-2026-87902",
|
||||
@@ -299,7 +299,7 @@
|
||||
"pushed": "2026-10-03T08:14:17Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.5120302456492878,
|
||||
"score": 0.5096192854173546,
|
||||
"trending": true,
|
||||
"created": "2026-04-07T12:02:52Z",
|
||||
"cve": "CVE-2024-56426",
|
||||
@@ -316,7 +316,7 @@
|
||||
"pushed": "2026-09-28T05:17:40Z",
|
||||
"released": "2026-09-28T05:17:40Z",
|
||||
"basis": "commit",
|
||||
"score": 0.4941485583575851,
|
||||
"score": 0.49286523470007887,
|
||||
"trending": true,
|
||||
"created": "2026-09-28T04:47:10Z",
|
||||
"cve": "CVE-2026-85706",
|
||||
@@ -324,37 +324,37 @@
|
||||
},
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 23,
|
||||
"name": "watchTowr-vs-Citrix-Netscaler-CVE-2026-88771",
|
||||
"url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771",
|
||||
"stars": 10,
|
||||
"name": "watchTowr-vs-Atlassian-CVE-2026-21589",
|
||||
"url": "https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589",
|
||||
"artifact": false,
|
||||
"source": "github.com",
|
||||
"desc": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.",
|
||||
"pushed": "2026-09-28T09:24:46Z",
|
||||
"released": "2026-09-28T09:24:46Z",
|
||||
"desc": "h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. h3. Context This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. h3. Details: * The vulnerability must be addressed for affected versions of: Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.1, 7.2.4 Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 Crucible, fix versions 4.9.15 Fisheye, fix version 4.9.15 * Exploitation requires prior knowledge of the target file's exact name and path. * The vulnerability does not include the capability to enumerate or list directory contents.",
|
||||
"pushed": "2026-10-06T10:48:38Z",
|
||||
"released": "2026-10-06T10:48:38Z",
|
||||
"basis": "commit",
|
||||
"score": 0.45949974865129534,
|
||||
"score": 0.48514457826346175,
|
||||
"trending": true,
|
||||
"created": "2026-09-27T18:15:38Z",
|
||||
"cve": "CVE-2026-88771",
|
||||
"kev": true
|
||||
"created": "2026-10-06T10:40:59Z",
|
||||
"cve": "CVE-2026-21589",
|
||||
"kev": false
|
||||
},
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 42,
|
||||
"name": "cve-2026-85706",
|
||||
"url": "https://github.com/guneykabel/cve-2026-85706",
|
||||
"stars": 9,
|
||||
"name": "CVE-2026-21589",
|
||||
"url": "https://github.com/MarcusProgram/CVE-2026-21589",
|
||||
"artifact": false,
|
||||
"source": "github.com",
|
||||
"desc": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7-19.1.7; 19.2.0-19.2.5; 19.3.0-19.3.1",
|
||||
"pushed": "2026-09-11T16:38:12Z",
|
||||
"released": "2026-09-11T15:54:48Z",
|
||||
"desc": "h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. h3. Context This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. h3. Details: * The vulnerability must be addressed for affected versions of: Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.1, 7.2.4 Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 Crucible, fix versions 4.9.15 Fisheye, fix version 4.9.15 * Exploitation requires prior knowledge of the target file's exact name and path. * The vulnerability does not include the capability to enumerate or list directory contents.",
|
||||
"pushed": "2026-10-06T15:51:43Z",
|
||||
"released": "2026-10-06T15:51:43Z",
|
||||
"basis": "commit",
|
||||
"score": 0.44190091943560295,
|
||||
"score": 0.45834975060020533,
|
||||
"trending": true,
|
||||
"created": "2026-09-11T15:24:22Z",
|
||||
"cve": "CVE-2026-85706",
|
||||
"kev": true
|
||||
"created": "2026-10-06T15:43:34Z",
|
||||
"cve": "CVE-2026-21589",
|
||||
"kev": false
|
||||
},
|
||||
{
|
||||
"year": 2025,
|
||||
@@ -367,7 +367,7 @@
|
||||
"pushed": "2026-08-10T23:15:22Z",
|
||||
"released": "2026-08-10T23:15:36Z",
|
||||
"basis": "created",
|
||||
"score": 0.1360507852434045,
|
||||
"score": 0.1359835234489036,
|
||||
"trending": true,
|
||||
"created": "2026-08-10T23:15:36Z",
|
||||
"cve": "CVE-2025-7771",
|
||||
@@ -384,7 +384,7 @@
|
||||
"pushed": null,
|
||||
"released": "2026-10-08T08:31:47Z",
|
||||
"basis": "commit",
|
||||
"score": 0.09543296821595432,
|
||||
"score": 0.09315346575748465,
|
||||
"trending": false,
|
||||
"created": "2026-10-08T08:31:03Z",
|
||||
"cve": "CVE-2026-21589",
|
||||
@@ -402,7 +402,7 @@
|
||||
"pushed": "2026-09-17T02:22:58Z",
|
||||
"released": "2026-09-17T02:22:58Z",
|
||||
"basis": "commit",
|
||||
"score": 0.08572179321930505,
|
||||
"score": 0.0856094346871559,
|
||||
"trending": true,
|
||||
"created": "2026-09-16T23:32:09Z",
|
||||
"cve": "CVE-2025-32432",
|
||||
@@ -419,7 +419,7 @@
|
||||
"pushed": "2026-08-27T07:13:42Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.07738758807416375,
|
||||
"score": 0.07733489263450012,
|
||||
"trending": true,
|
||||
"created": "2026-08-19T09:39:46Z",
|
||||
"cve": "CVE-2025-21479",
|
||||
@@ -436,7 +436,7 @@
|
||||
"pushed": "2026-08-20T01:33:10Z",
|
||||
"released": "2026-08-20T01:20:07Z",
|
||||
"basis": "commit",
|
||||
"score": 0.04860502084370697,
|
||||
"score": 0.04857667003210675,
|
||||
"trending": true,
|
||||
"created": "2026-08-20T01:13:39Z",
|
||||
"cve": "CVE-2025-21479",
|
||||
@@ -453,7 +453,7 @@
|
||||
"pushed": "2026-08-02T06:48:32Z",
|
||||
"released": "2026-07-28T09:37:42Z",
|
||||
"basis": "commit",
|
||||
"score": 0.042854623003639555,
|
||||
"score": 0.042837364129817944,
|
||||
"trending": true,
|
||||
"created": "2026-07-28T06:41:38Z",
|
||||
"cve": "CVE-2025-21479",
|
||||
@@ -470,7 +470,7 @@
|
||||
"pushed": "2026-08-06T14:58:53Z",
|
||||
"released": "2026-08-06T14:58:53Z",
|
||||
"basis": "commit",
|
||||
"score": 0.04120764091241021,
|
||||
"score": 0.04118865229494517,
|
||||
"trending": true,
|
||||
"created": "2026-08-06T13:52:33Z",
|
||||
"cve": "CVE-2025-8045",
|
||||
@@ -487,7 +487,7 @@
|
||||
"pushed": "2026-07-22T19:46:33Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.030529546988223438,
|
||||
"score": 0.030518153765114787,
|
||||
"trending": true,
|
||||
"created": "2026-07-22T19:43:34Z",
|
||||
"cve": "CVE-2023-36003",
|
||||
@@ -504,7 +504,7 @@
|
||||
"pushed": "2026-08-15T06:21:41Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.02606677217917329,
|
||||
"score": 0.026052922210792293,
|
||||
"trending": true,
|
||||
"created": "2026-08-15T06:12:04Z",
|
||||
"cve": "CVE-2024-56426",
|
||||
@@ -521,7 +521,7 @@
|
||||
"pushed": "2026-08-28T00:05:41Z",
|
||||
"released": "2026-08-28T00:05:42Z",
|
||||
"basis": "created",
|
||||
"score": 0.02348405843632002,
|
||||
"score": 0.02346780354516617,
|
||||
"trending": true,
|
||||
"created": "2026-08-28T00:05:42Z",
|
||||
"cve": "CVE-2025-3248",
|
||||
@@ -538,7 +538,7 @@
|
||||
"pushed": "2026-08-18T01:39:34Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.020275599401118786,
|
||||
"score": 0.0202642202034281,
|
||||
"trending": true,
|
||||
"created": "2026-08-18T02:31:53Z",
|
||||
"cve": "CVE-2025-21479",
|
||||
@@ -555,7 +555,7 @@
|
||||
"pushed": "2026-07-21T16:55:33Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.020153026151734844,
|
||||
"score": 0.020145590249198563,
|
||||
"trending": true,
|
||||
"created": "2026-07-21T16:52:22Z",
|
||||
"cve": "CVE-2025-32432",
|
||||
@@ -572,7 +572,7 @@
|
||||
"pushed": "2026-07-19T11:00:00Z",
|
||||
"released": "2026-07-19T11:00:00Z",
|
||||
"basis": "commit",
|
||||
"score": 0.019765298719891643,
|
||||
"score": 0.0197582054018307,
|
||||
"trending": true,
|
||||
"created": "2026-07-19T10:49:05Z",
|
||||
"cve": "CVE-2025-64512",
|
||||
@@ -589,7 +589,7 @@
|
||||
"pushed": "2026-07-17T13:55:11Z",
|
||||
"released": null,
|
||||
"basis": "pending",
|
||||
"score": 0.01945475521125556,
|
||||
"score": 0.019447929453109736,
|
||||
"trending": true,
|
||||
"created": "2026-07-17T13:46:16Z",
|
||||
"cve": "CVE-2025-8110",
|
||||
@@ -606,7 +606,7 @@
|
||||
"pushed": "2026-07-29T21:15:12Z",
|
||||
"released": "2026-07-29T21:15:12Z",
|
||||
"basis": "commit",
|
||||
"score": 0.016302744376084654,
|
||||
"score": 0.01629606109959681,
|
||||
"trending": true,
|
||||
"created": "2026-07-29T19:59:36Z",
|
||||
"cve": "CVE-2024-36104",
|
||||
@@ -623,7 +623,7 @@
|
||||
"pushed": "2026-07-27T07:00:54Z",
|
||||
"released": "2026-07-27T06:52:27Z",
|
||||
"basis": "commit",
|
||||
"score": 0.015901203783200504,
|
||||
"score": 0.015894913260078965,
|
||||
"trending": true,
|
||||
"created": "2026-07-27T06:51:21Z",
|
||||
"cve": "CVE-2023-52076",
|
||||
@@ -640,7 +640,7 @@
|
||||
"pushed": "2026-07-20T13:33:10Z",
|
||||
"released": "2026-07-20T13:33:10Z",
|
||||
"basis": "commit",
|
||||
"score": 0.01496544602842273,
|
||||
"score": 0.014960001929402285,
|
||||
"trending": true,
|
||||
"created": "2026-02-13T22:26:25Z",
|
||||
"cve": "CVE-2025-6019",
|
||||
@@ -657,7 +657,7 @@
|
||||
"pushed": "2026-10-08T01:42:58Z",
|
||||
"released": "2025-09-09T01:31:54Z",
|
||||
"basis": "commit",
|
||||
"score": 0.01150689523305601,
|
||||
"score": 0.011506040305790714,
|
||||
"trending": true,
|
||||
"created": "2025-09-08T21:12:19Z",
|
||||
"cve": "CVE-2022-22077",
|
||||
|
||||
Reference in new issue
Block a user