From aeddc8c0ab633dd5b9ecdedb262bd58416ef6ce6 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Tue, 29 Sep 2026 10:10:05 +0000 Subject: [PATCH] Trending CVEs update 2026-09-29 10:10 :robot: --- README.md | 14 ++++---- cves/2025/CVE-2025-8088.md | 3 ++ cves/2026/CVE-2026-43499.md | 1 + index/github.txt | 4 +++ index/trending.json | 72 ++++++++++++++++++------------------- 5 files changed, 51 insertions(+), 43 deletions(-) diff --git a/README.md b/README.md index 8ee83289f5e..0dd197facfe 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-29%20Sep%202026%2009%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609290907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C724-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C216-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609290907)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-29%20Sep%202026%2010%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609291007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C724-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C216-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609291007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,22 +12,22 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 94⭐ | 2h ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | +| 0⭐ | 23m ago | KEV [CVE-2025-8088-WinRAR-PoC-3](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… | +| 0⭐ | 24m ago | KEV [CVE-2025-8088-WinRAR-PoC-2](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… | +| 0⭐ | 24m ago | KEV [CVE-2025-8088-WinRAR-PoC-1](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… | +| 94⭐ | 3h ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 1⭐ | 1d ago | [HTB-Pterodactyl-RCE-CVE-2025-49132](https://github.com/symphony2colour/HTB-Pterodactyl-RCE-CVE-2025-49132) | This repo contains RCE exploit for Pterodactyl htb machine | | 0⭐ | 1d ago | [ply-cve-2025-56005-lab](https://github.com/gdfurr98/ply-cve-2025-56005-lab) | Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the… | | 2⭐ | 1d ago | KEV [CVE-2025-21479-FX5P](https://github.com/diyiqiuye/CVE-2025-21479-FX5P) | Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable) | | 0⭐ | 2d ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | Tracking CVE-2025-39964, the Linux kernel AF_ALG concurrent-write race | | 0⭐ | 2d ago | [POC-CVE-2025-11201](https://github.com/rmhowe425/POC-CVE-2025-11201) | PoC for MLFlow unauth RCE | -| 0⭐ | 3d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | -| 1⭐ | 3d ago | [opace6-cve-2026-64560](https://github.com/Wangs-official/opace6-cve-2026-64560) | 针对 OnePlus Ace6 设备的 cve-2026-64560 复现 | | 1⭐ | 9d ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… | -| 1⭐ | 9d ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 15⭐ | 23h ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | +| 15⭐ | 1d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | | 20⭐ | 1d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 3⭐ | 1d ago | [CVE-2026-78006-CVE-2026-78159](https://github.com/antid00t/CVE-2026-78006-CVE-2026-78159) | The Events Calendar Wordpress Plugin Mass Exploit CVE-2026-78006 & CVE-2026-78159 | | 11⭐ | 1d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | @@ -35,7 +35,7 @@ | 28⭐ | 1d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | | 13⭐ | 1d ago | [CVE-2026-28695](https://github.com/predyy/CVE-2026-28695) | CVE-2026-28695 PoC - Authenticated blind remote code execution in Craft CMS. | | 9⭐ | 1d ago | KEV [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… | -| 9⭐ | 1d ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | +| 9⭐ | 2d ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | | 3⭐ | 2d ago | [CVE-2026-44011-craftcms-auth-rce](https://github.com/4xura/CVE-2026-44011-craftcms-auth-rce) | The PoC of CVE-2026-44011: Craft CMS RCE with an authenticated user. | | 825⭐ | 2d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 2d ago | KEV [CVE-2026-mikrotik-poc](https://github.com/gagaltotal/CVE-2026-mikrotik-poc) | CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH | diff --git a/cves/2025/CVE-2025-8088.md b/cves/2025/CVE-2025-8088.md index b0824b66f70..01bb33f80f8 100644 --- a/cves/2025/CVE-2025-8088.md +++ b/cves/2025/CVE-2025-8088.md @@ -52,4 +52,7 @@ A path traversal vulnerability affecting the Windows version of WinRAR allows th - https://github.com/UnHackerEnCapital/BatiRaR - https://github.com/UnHackerEnCapital/PepRaR - https://github.com/k1tbro/Homework-No.-10-HSE-University +- https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2 +- https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3 +- https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1 diff --git a/cves/2026/CVE-2026-43499.md b/cves/2026/CVE-2026-43499.md index d7d727bc38f..c892e84f0d6 100644 --- a/cves/2026/CVE-2026-43499.md +++ b/cves/2026/CVE-2026-43499.md @@ -182,3 +182,4 @@ No PoCs from references. - https://github.com/a2333c/DFRoot - https://github.com/L-1124/RootMyVivo-rs - https://github.com/L-1124/RootMyVivo-Exploit +- https://github.com/shubhampathak65/CVE-2026-43499 diff --git a/index/github.txt b/index/github.txt index 72d931af903..c427f1cf2df 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27019,3 +27019,7 @@ CVE-2020-13664 - https://github.com/lorenzog/CVE-2020-13664 CVE-2024-54767 - https://github.com/sysadmin420/AVM-FRITZ-Box-CVE-2024-54767-Exploit CVE-2026-82901 - https://github.com/tonydelouvre/CVE-2026-82901 CVE-2026-86950 - https://github.com/DeAurity/CVE-2026-86950-POC +CVE-2025-8088 - https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1 +CVE-2025-8088 - https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2 +CVE-2025-8088 - https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3 +CVE-2026-43499 - https://github.com/shubhampathak65/CVE-2026-43499 diff --git a/index/trending.json b/index/trending.json index 000007156ed..085f6498b80 100644 --- a/index/trending.json +++ b/index/trending.json @@ -461,6 +461,42 @@ "cve": "CVE-2023-32315", "kev": true }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-8088-WinRAR-PoC-3", + "url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3", + "desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.", + "pushed": "2026-09-29T09:46:43Z", + "created": "2026-09-29T09:46:25Z", + "cve": "CVE-2025-8088", + "kev": true, + "landed": true + }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-8088-WinRAR-PoC-2", + "url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-2", + "desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.", + "pushed": "2026-09-29T09:45:59Z", + "created": "2026-09-29T09:45:40Z", + "cve": "CVE-2025-8088", + "kev": true, + "landed": true + }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-8088-WinRAR-PoC-1", + "url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-1", + "desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.", + "pushed": "2026-09-29T09:45:10Z", + "created": "2026-09-29T09:43:19Z", + "cve": "CVE-2025-8088", + "kev": true, + "landed": true + }, { "year": 2026, "stars": 94, @@ -533,30 +569,6 @@ "kev": false, "landed": true }, - { - "year": 2025, - "stars": 0, - "name": "Langflow-RCE-CVE-2025-3248", - "url": "https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248", - "desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.", - "pushed": "2026-09-26T04:06:23Z", - "created": "2026-09-05T03:01:58Z", - "cve": "CVE-2025-3248", - "kev": true, - "landed": true - }, - { - "year": 2026, - "stars": 1, - "name": "opace6-cve-2026-64560", - "url": "https://github.com/Wangs-official/opace6-cve-2026-64560", - "desc": "针对 OnePlus Ace6 设备的 cve-2026-64560 复现", - "pushed": "2026-09-25T16:30:48Z", - "created": "2026-09-25T13:42:42Z", - "cve": "CVE-2026-64560", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 1, @@ -568,17 +580,5 @@ "cve": "CVE-2025-59528", "kev": false, "landed": true - }, - { - "year": 2025, - "stars": 1, - "name": "Flowise-CVE-2025-58434-PasswordReset", - "url": "https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset", - "desc": "Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-concept script and mitigation guidelines.", - "pushed": "2026-09-19T19:41:07Z", - "created": "2026-04-15T12:40:16Z", - "cve": "CVE-2025-58434", - "kev": false, - "landed": true } ]