admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-29 17:01:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Trending CVEs update 2026-09-29 10:10 🤖

Browse Source
This commit is contained in:
CVE-BOT committed 2026-09-29 10:10:05 +00:00
1 parent ecacabae9c
commit aeddc8c0ab
5 files changed
+51 -43
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+7 -7
View File
@@ -2,7 +2,7 @@
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=173031-83724-1216" alt="PoC Index" width="100%"></a>
[![last sync](https://img.shields.io/badge/last%20sync-29%20Sep%202026%2009%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609290907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C724-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C216-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609290907)](https://github.com/0xMarcio/pocindex/stargazers)
[![last sync](https://img.shields.io/badge/last%20sync-29%20Sep%202026%2010%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609291007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C724-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C216-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609291007)](https://github.com/0xMarcio/pocindex/stargazers)
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
@@ -12,22 +12,22 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 94⭐ | 2h ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
| 0⭐ | 23m ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8088-WinRAR-PoC-3](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… |
| 0⭐ | 24m ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8088-WinRAR-PoC-2](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… |
| 0⭐ | 24m ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8088-WinRAR-PoC-1](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… |
| 94⭐ | 3h ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
| 1⭐ | 1d ago | [HTB-Pterodactyl-RCE-CVE-2025-49132](https://github.com/symphony2colour/HTB-Pterodactyl-RCE-CVE-2025-49132) | This repo contains RCE exploit for Pterodactyl htb machine |
| 0⭐ | 1d ago | [ply-cve-2025-56005-lab](https://github.com/gdfurr98/ply-cve-2025-56005-lab) | Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the… |
| 2⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-21479-FX5P](https://github.com/diyiqiuye/CVE-2025-21479-FX5P) | Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable) |
| 0⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | Tracking CVE-2025-39964, the Linux kernel AF_ALG concurrent-write race |
| 0⭐ | 2d ago | [POC-CVE-2025-11201](https://github.com/rmhowe425/POC-CVE-2025-11201) | PoC for MLFlow unauth RCE |
| 0⭐ | 3d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 1⭐ | 3d ago | [opace6-cve-2026-64560](https://github.com/Wangs-official/opace6-cve-2026-64560) | 针对 OnePlus Ace6 设备的 cve-2026-64560 复现 |
| 1⭐ | 9d ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… |
| 1⭐ | 9d ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… |
## Trending in 2026
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
| 15⭐ | 23h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… |
| 15⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… |
| 20⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read |
| 3⭐ | 1d ago | [CVE-2026-78006-CVE-2026-78159](https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159) | The Events Calendar Wordpress Plugin Mass Exploit CVE-2026-78006 & CVE-2026-78159 |
| 11⭐ | 1d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass |
@@ -35,7 +35,7 @@
| 28⭐ | 1d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. |
| 13⭐ | 1d ago | [CVE-2026-28695](https://github.com/predyy/CVE-2026-28695) | CVE-2026-28695 PoC - Authenticated blind remote code execution in Craft CMS. |
| 9⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… |
| 9⭐ | 1d ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… |
| 9⭐ | 2d ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… |
| 3⭐ | 2d ago | [CVE-2026-44011-craftcms-auth-rce](https://github.com/4xura/CVE-2026-44011-craftcms-auth-rce) | The PoC of CVE-2026-44011: Craft CMS RCE with an authenticated user. |
| 825⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
| 3⭐ | 2d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-mikrotik-poc](https://github.com/gagaltotal/CVE-2026-mikrotik-poc) | CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH |
cves/2025/CVE-2025-8088.md
+3
View File
@@ -52,4 +52,7 @@ A path traversal vulnerability affecting the Windows version of WinRAR allows th
- https://github.com/UnHackerEnCapital/BatiRaR
- https://github.com/UnHackerEnCapital/PepRaR
- https://github.com/k1tbro/Homework-No.-10-HSE-University
- https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2
- https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3
- https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1
cves/2026/CVE-2026-43499.md
+1
View File
@@ -182,3 +182,4 @@ No PoCs from references.
- https://github.com/a2333c/DFRoot
- https://github.com/L-1124/RootMyVivo-rs
- https://github.com/L-1124/RootMyVivo-Exploit
- https://github.com/shubhampathak65/CVE-2026-43499
index/github.txt
+4
View File
@@ -27019,3 +27019,7 @@ CVE-2020-13664 - https://github.com/lorenzog/CVE-2020-13664
CVE-2024-54767 - https://github.com/sysadmin420/AVM-FRITZ-Box-CVE-2024-54767-Exploit
CVE-2026-82901 - https://github.com/tonydelouvre/CVE-2026-82901
CVE-2026-86950 - https://github.com/DeAurity/CVE-2026-86950-POC
CVE-2025-8088 - https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1
CVE-2025-8088 - https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2
CVE-2025-8088 - https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3
CVE-2026-43499 - https://github.com/shubhampathak65/CVE-2026-43499
index/trending.json
+36 -36
View File
@@ -461,6 +461,42 @@
"cve": "CVE-2023-32315",
"kev": true
},
{
"year": 2025,
"stars": 0,
"name": "CVE-2025-8088-WinRAR-PoC-3",
"url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3",
"desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.",
"pushed": "2026-09-29T09:46:43Z",
"created": "2026-09-29T09:46:25Z",
"cve": "CVE-2025-8088",
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "CVE-2025-8088-WinRAR-PoC-2",
"url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2",
"desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.",
"pushed": "2026-09-29T09:45:59Z",
"created": "2026-09-29T09:45:40Z",
"cve": "CVE-2025-8088",
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "CVE-2025-8088-WinRAR-PoC-1",
"url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1",
"desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.",
"pushed": "2026-09-29T09:45:10Z",
"created": "2026-09-29T09:43:19Z",
"cve": "CVE-2025-8088",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 94,
@@ -533,30 +569,6 @@
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "Langflow-RCE-CVE-2025-3248",
"url": "https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-09-26T04:06:23Z",
"created": "2026-09-05T03:01:58Z",
"cve": "CVE-2025-3248",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 1,
"name": "opace6-cve-2026-64560",
"url": "https://github.com/Wangs-official/opace6-cve-2026-64560",
"desc": "针对 OnePlus Ace6 设备的 cve-2026-64560 复现",
"pushed": "2026-09-25T16:30:48Z",
"created": "2026-09-25T13:42:42Z",
"cve": "CVE-2026-64560",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 1,
@@ -568,17 +580,5 @@
"cve": "CVE-2025-59528",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 1,
"name": "Flowise-CVE-2025-58434-PasswordReset",
"url": "https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset",
"desc": "Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-concept script and mitigation guidelines.",
"pushed": "2026-09-19T19:41:07Z",
"created": "2026-04-15T12:40:16Z",
"cve": "CVE-2025-58434",
"kev": false,
"landed": true
}
]