diff --git a/README.md b/README.md index 50a0199af1d..d9e8353cda3 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-25%20Sep%202026%2021%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609252107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C472-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C208-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609252107)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-25%20Sep%202026%2022%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609252207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C474-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C208-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609252207)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,8 +12,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 16h ago | [CVE-2025-9974](https://github.com/HORKimhab/CVE-2025-9974) | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows… | -| 0⭐ | 18h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 0⭐ | 10m ago | [CVE-2026-86350](https://github.com/abraxas/CVE-2026-86350) | CVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header… | +| 0⭐ | 17h ago | [CVE-2025-9974](https://github.com/HORKimhab/CVE-2025-9974) | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows… | +| 0⭐ | 19h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | | 1⭐ | 1d ago | [CVE-2025-7771](https://github.com/yulisec/CVE-2025-7771) | ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write… | | 0⭐ | 2d ago | [CVE-2026-87902](https://github.com/zer0dayf/CVE-2026-87902) | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable… | | 2⭐ | 3d ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… | @@ -21,15 +22,14 @@ | 2⭐ | 4d ago | [CVE-2026-90817](https://github.com/murrez/CVE-2026-90817) | Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation. | | 2⭐ | 6d ago | [CVE-2026-89274](https://github.com/murrez/CVE-2026-89274) | PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe… | | 1⭐ | 6d ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… | -| 1⭐ | 6d ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 9⭐ | 10h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 | -| 3⭐ | 14h ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | -| 14⭐ | 21h ago | [CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit) | 🔓 CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) / Zero-click TLS type confusion to… | +| 9⭐ | 11h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 | +| 3⭐ | 15h ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | +| 14⭐ | 22h ago | [CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit) | 🔓 CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) / Zero-click TLS type confusion to… | | 11⭐ | 1d ago | KEV [watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127](https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127) | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious… | | 5⭐ | 1d ago | [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… | | 32⭐ | 1d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | @@ -37,7 +37,7 @@ | 5⭐ | 2d ago | [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console | | 4⭐ | 2d ago | [CVE-2026-94129](https://github.com/lzty/CVE-2026-94129) | A POC for CVE-2026-94129 | | 4⭐ | 2d ago | [CVE-2026-94128](https://github.com/lzty/CVE-2026-94128) | POC for CVE-2026-94128 | -| 29⭐ | 2d ago | [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | +| 29⭐ | 3d ago | [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | | 3⭐ | 3d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 | | 30⭐ | 3d ago | [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | | 825⭐ | 3d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | @@ -78,7 +78,7 @@ | --- | --- | --- | --- | | 17⭐ | 40d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 4⭐ | 41d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | -| 3⭐ | 57d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | +| 3⭐ | 58d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | ## Trending in 2023 diff --git a/cves/2026/CVE-2026-62062.md b/cves/2026/CVE-2026-62062.md new file mode 100644 index 00000000000..c2fbf0c01c6 --- /dev/null +++ b/cves/2026/CVE-2026-62062.md @@ -0,0 +1,20 @@ +### [CVE-2026-62062](https://www.cve.org/CVERecord?id=CVE-2026-62062) +**WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=Elementor&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Elementor%20Website%20Builder&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-352%20Cross-Site%20Request%20Forgery%20%28CSRF%29&color=brightgreen) + +### Description + +Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. + +This issue affects Elementor Website Builder: from n/a through 4.3.1. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/abraxas/CVE-2026-62062 diff --git a/cves/2026/CVE-2026-86350.md b/cves/2026/CVE-2026-86350.md new file mode 100644 index 00000000000..0cfb3582ac6 --- /dev/null +++ b/cves/2026/CVE-2026-86350.md @@ -0,0 +1,28 @@ +### [CVE-2026-86350](https://www.cve.org/CVERecord?id=CVE-2026-86350) +**Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up** +![](https://img.shields.io/static/v1?label=Vendor&message=Apache%20Software%20Foundation&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Apache%20Tomcat&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=11.0.22&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=10.1.55&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=9.0.118&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-444%20Inconsistent%20interpretation%20of%20HTTP%20requests%20%28%27HTTP%20Request%2FResponse%20smuggling%27%29&color=brightgreen) + +### Description + +Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. + + + +This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from 9.0.118 through 9.0.121. + + + +Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/abraxas/CVE-2026-86350 diff --git a/docs/hero.svg b/docs/hero.svg index d6cf2bec0b9..38c2d953d09 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 83,474 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 172,781 + fill="#e6edf3" letter-spacing="-0.5">172,783 CVES INDEXED83,472 + fill="#2f81f7" letter-spacing="-0.5">83,474 WITH POCS1,208 diff --git a/docs/social-card.svg b/docs/social-card.svg index db0b393a1af..859686ff6c1 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 172,781 + fill="#e6edf3" letter-spacing="-0.5">172,783 CVES INDEXED83,472 + fill="#2f81f7" letter-spacing="-0.5">83,474 WITH POCS1,208 diff --git a/docs/stats.json b/docs/stats.json index 39ceffd11f9..bd9d7f7f34a 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1208, - "total_cves": 172781, - "with_pocs": 83472 + "total_cves": 172783, + "with_pocs": 83474 } diff --git a/index/github.txt b/index/github.txt index 5b42319f8c9..884510cf1f5 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26867,3 +26867,5 @@ CVE-2026-96512 - https://github.com/Ermensonx/sudotimewarp-cve-2026-96512- CVE-2026-16764 - https://github.com/hakaioffsec/CVE-2026-16764 CVE-2026-5430 - https://github.com/abraxas/CVE-2026-5430 CVE-2026-65660 - https://github.com/ShadowForge-Cyber/CVE-2026-65660-Poc +CVE-2026-62062 - https://github.com/abraxas/CVE-2026-62062 +CVE-2026-86350 - https://github.com/abraxas/CVE-2026-86350 diff --git a/index/trending.json b/index/trending.json index 1587e729956..ca925d83399 100644 --- a/index/trending.json +++ b/index/trending.json @@ -472,6 +472,18 @@ "cve": "CVE-2023-32315", "kev": true }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-86350", + "url": "https://github.com/abraxas/CVE-2026-86350", + "desc": "CVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header Mix-up (Request Smuggling)", + "pushed": "2026-09-25T21:59:06Z", + "created": "2026-09-25T21:58:58Z", + "cve": "CVE-2026-86350", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -579,17 +591,5 @@ "cve": "CVE-2025-59528", "kev": false, "landed": true - }, - { - "year": 2025, - "stars": 1, - "name": "Flowise-CVE-2025-58434-PasswordReset", - "url": "https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset", - "desc": "Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-concept script and mitigation guidelines.", - "pushed": "2026-09-19T19:41:07Z", - "created": "2026-04-15T12:40:16Z", - "cve": "CVE-2025-58434", - "kev": false, - "landed": true } ]