diff --git a/README.md b/README.md index 0188abb5e9f..a0788bbe96a 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-17%20Sep%202026%2015%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609171507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C960-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C199-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609171507)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-17%20Sep%202026%2016%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609171607)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C961-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C199-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609171607)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,29 +12,31 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 8h ago | [CVE-2026-67401](https://github.com/imbas007/CVE-2026-67401) | PoC for CVE-2026-67401 - cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE.… | -| 2⭐ | 12h ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | -| 2⭐ | 1d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | +| 0⭐ | 9h ago | [CVE-2026-67401](https://github.com/imbas007/CVE-2026-67401) | PoC for CVE-2026-67401 - cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE.… | | 0⭐ | 1d ago | KEV [lenovo_y700_tb320fc_on_CVE-2025-21479](https://github.com/xjoker/lenovo_y700_tb320fc_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 1⭐ | 1d ago | [CVE-2025-57231](https://github.com/anirbala98/CVE-2025-57231) | Docmost < 0.22.0 - Arbitrary File Read | | 0⭐ | 1d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | +| 2⭐ | 1d ago | KEV [CVE-2026-82329-PoC-Exploit](https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit) | 🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted… | | 1⭐ | 1d ago | [langflow-CVE-2026-17633-PoC](https://github.com/Oscar-Collado/langflow-CVE-2026-17633-PoC) | PoC for CVE-2026-17633 - Authenticated RCE in IBM Langflow OSS 1.0.0-1.10.3 via custom_component endpoint.… | | 0⭐ | 2d ago | KEV [CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | | 0⭐ | 2d ago | [CVE-2025-64512_PoC](https://github.com/Jinook-Kim/CVE-2025-64512_PoC) | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from… | | 0⭐ | 2d ago | KEV [CVE-2026-33017](https://github.com/Oieua/CVE-2026-33017) | My implementation of the | +| 0⭐ | 3d ago | KEV [CVE-2025-32432](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 15⭐ | 19h ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | -| 303⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | +| 15⭐ | 20h ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | +| 3⭐ | 1d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | +| 310⭐ | 1d ago | KEV [cve-2026-41940-PoC](https://github.com/ctdal/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | | 3⭐ | 1d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | | 3⭐ | 1d ago | [CVE-2026-12944](https://github.com/cflowsec/CVE-2026-12944) | Langflow 1.10.0 urllib SSRF POC | | 16⭐ | 3d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | | 4⭐ | 3d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | | 4⭐ | 3d ago | KEV [CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570) | Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc) | | 7⭐ | 3d ago | [CVE-2026-42536-PoC](https://github.com/erberkan/CVE-2026-42536-PoC) | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and… | +| 3⭐ | 4d ago | [CVE-2026-33439-Python-PoC](https://github.com/infernosalex/CVE-2026-33439-Python-PoC) | Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization | | 3⭐ | 4d ago | KEV [cve-2026-85706-poc-exploit-gitlab](https://github.com/0xlyvio/cve-2026-85706-poc-exploit-gitlab) | cve-2026-85706-poc-exploit-gitlab | | 4⭐ | 4d ago | [CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.](https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.) | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker… | | 4⭐ | 5d ago | [CVE-2026-78006-POC](https://github.com/DeadExpl0it/CVE-2026-78006-POC) | POC for CVE-2026-78006 The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code… | @@ -43,15 +45,14 @@ | 3⭐ | 5d ago | KEV [CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter](https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter) | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute… | | 10⭐ | 5d ago | KEV [CVE-2026-85706](https://github.com/mhtsec/CVE-2026-85706) | GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC | | 35⭐ | 5d ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | -| 28⭐ | 5d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… | -| 6⭐ | 5d ago | KEV [CVE-2026-24061-PoC-Exploit](https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit) | 🗡️ CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control with CRLF injection via… | -| 3⭐ | 7d ago | [CVE-2026-11387-WooCommerce-SMS-OTP](https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP) | SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert… | -| 5⭐ | 8d ago | [CVE-2026-19089-WooCommerce-Tyche](https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche) | CVE-2026-19089 WooCommerce Tych Remote Command Execution | +| 28⭐ | 6d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… | +| 6⭐ | 6d ago | KEV [CVE-2026-24061-PoC-Exploit](https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit) | 🗡️ CVE-2026-24061 - GNU inetutils-telnetd Auth Bypass Exploit - Full Control with CRLF injection via… | ## Trending in 2025 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | +| 4⭐ | 13h ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 3⭐ | 20d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 7⭐ | 21d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 4⭐ | 28d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | @@ -75,7 +76,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 17⭐ | 31d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | +| 17⭐ | 32d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 4⭐ | 33d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 49d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | | 3⭐ | 88d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | diff --git a/cves/2026/CVE-2026-23744.md b/cves/2026/CVE-2026-23744.md index e157352b87b..97b72813efe 100644 --- a/cves/2026/CVE-2026-23744.md +++ b/cves/2026/CVE-2026-23744.md @@ -56,6 +56,7 @@ No PoCs from references. - https://github.com/BabaCrow-byte/mcp-rce-poc - https://github.com/migg123/web_exploit_journey - https://github.com/unRony/MCPJam-inspector-RCE +- https://github.com/wvverez/CVE-2026-23744 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23744.yaml diff --git a/cves/2026/CVE-2026-85045.md b/cves/2026/CVE-2026-85045.md new file mode 100644 index 00000000000..bdf5859b986 --- /dev/null +++ b/cves/2026/CVE-2026-85045.md @@ -0,0 +1,17 @@ +### [CVE-2026-85045](https://www.cve.org/CVERecord?id=CVE-2026-85045) +![](https://img.shields.io/static/v1?label=Vendor&message=Google&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=152.0.7977.82&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Race%20condition&color=brightgreen) + +### Description + +Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/SneakyNachos/CVE-2026-85045 diff --git a/docs/hero.svg b/docs/hero.svg index 276c8cea6b8..db10195316d 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 82,961 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 172,180 + fill="#e6edf3" letter-spacing="-0.5">172,181 CVES INDEXED82,960 + fill="#2f81f7" letter-spacing="-0.5">82,961 WITH POCS1,199 diff --git a/docs/social-card.svg b/docs/social-card.svg index e6392c1ebaf..a7e4c08eb02 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 172,180 + fill="#e6edf3" letter-spacing="-0.5">172,181 CVES INDEXED82,960 + fill="#2f81f7" letter-spacing="-0.5">82,961 WITH POCS1,199 diff --git a/docs/stats.json b/docs/stats.json index 3da22c0e48a..30ebe019703 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1199, - "total_cves": 172180, - "with_pocs": 82960 + "total_cves": 172181, + "with_pocs": 82961 } diff --git a/index/github.txt b/index/github.txt index 1b0878d1a76..18128fa9736 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26668,3 +26668,5 @@ CVE-2026-76461 - https://github.com/S3v3n-JG/CVE-2026-76461 CVE-2026-72708 - https://github.com/ambionics/spip-exploits CVE-2026-72709 - https://github.com/ambionics/spip-exploits CVE-2026-72710 - https://github.com/ambionics/spip-exploits +CVE-2026-23744 - https://github.com/wvverez/CVE-2026-23744 +CVE-2026-85045 - https://github.com/SneakyNachos/CVE-2026-85045 diff --git a/index/trending.json b/index/trending.json index e6be1c2aeb6..3999726a500 100644 --- a/index/trending.json +++ b/index/trending.json @@ -12,7 +12,18 @@ }, { "year": 2026, - "stars": 303, + "stars": 3, + "name": "CVE-2026-12793", + "url": "https://github.com/murrez/CVE-2026-12793", + "desc": "CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation", + "pushed": "2026-09-16T14:44:04Z", + "created": "2026-09-16T14:43:36Z", + "cve": "CVE-2026-12793", + "kev": false + }, + { + "year": 2026, + "stars": 310, "name": "cve-2026-41940-PoC", "url": "https://github.com/ctdal/cve-2026-41940-PoC", "desc": "A cPanel and WHM authentication bypassing tool", @@ -87,6 +98,17 @@ "cve": "CVE-2026-42536", "kev": false }, + { + "year": 2026, + "stars": 3, + "name": "CVE-2026-33439-Python-PoC", + "url": "https://github.com/infernosalex/CVE-2026-33439-Python-PoC", + "desc": "Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization", + "pushed": "2026-09-12T22:10:00Z", + "created": "2026-09-12T22:10:46Z", + "cve": "CVE-2026-33439", + "kev": false + }, { "year": 2026, "stars": 3, @@ -198,26 +220,15 @@ "kev": true }, { - "year": 2026, - "stars": 3, - "name": "CVE-2026-11387-WooCommerce-SMS-OTP", - "url": "https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP", - "desc": "SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert <3.9.6; Unauthenticated Privilege Escalation (Forced Password Reset)", - "pushed": "2026-09-09T17:21:20Z", - "created": "2026-09-09T17:06:12Z", - "cve": "CVE-2026-11387", - "kev": false - }, - { - "year": 2026, - "stars": 5, - "name": "CVE-2026-19089-WooCommerce-Tyche", - "url": "https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche", - "desc": "CVE-2026-19089 WooCommerce Tych Remote Command Execution", - "pushed": "2026-09-09T01:26:55Z", - "created": "2026-09-09T01:00:18Z", - "cve": "CVE-2026-19089", - "kev": false + "year": 2025, + "stars": 4, + "name": "CVE-2025-32432-exploit-by-P34NUT", + "url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT", + "desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail", + "pushed": "2026-09-17T02:22:58Z", + "created": "2026-09-16T23:32:09Z", + "cve": "CVE-2025-32432", + "kev": true }, { "year": 2025, @@ -484,30 +495,6 @@ "kev": false, "landed": true }, - { - "year": 2025, - "stars": 2, - "name": "CVE-2025-32432-exploit-by-P34NUT", - "url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT", - "desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail", - "pushed": "2026-09-17T02:22:58Z", - "created": "2026-09-16T23:32:09Z", - "cve": "CVE-2025-32432", - "kev": true, - "landed": true - }, - { - "year": 2026, - "stars": 2, - "name": "CVE-2026-12793", - "url": "https://github.com/murrez/CVE-2026-12793", - "desc": "CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation", - "pushed": "2026-09-16T14:44:04Z", - "created": "2026-09-16T14:43:36Z", - "cve": "CVE-2026-12793", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 0, @@ -544,6 +531,18 @@ "kev": true, "landed": true }, + { + "year": 2026, + "stars": 2, + "name": "CVE-2026-82329-PoC-Exploit", + "url": "https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit", + "desc": "🧰 CVE-2026-82329 - JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) / Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V", + "pushed": "2026-09-15T20:28:01Z", + "created": "2026-09-15T20:15:28Z", + "cve": "CVE-2026-82329", + "kev": true, + "landed": true + }, { "year": 2026, "stars": 1, @@ -591,5 +590,17 @@ "cve": "CVE-2026-33017", "kev": true, "landed": true + }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-32432", + "url": "https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432", + "desc": "Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.", + "pushed": "2026-09-14T10:28:44Z", + "created": "2026-09-14T10:19:44Z", + "cve": "CVE-2025-32432", + "kev": true, + "landed": true } ]