mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Trending CVEs update 2026-09-05 09:09 🤖
This commit is contained in:
1 parent
d0e9950636
commit
bf21bf50b7
3 files changed
+9
-30
No files matched your search
@@ -2,7 +2,7 @@
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=171279-82646-1186" alt="PoC Index" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
|
||||
|
||||
<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
|
||||
|
||||
@@ -12,11 +12,11 @@
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 2⭐ | 1h ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… |
|
||||
| 0⭐ | 4h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
|
||||
| 1⭐ | 9h ago | [CVE-2025-9974](https://github.com/Rajdave69/CVE-2025-9974) | Proof of Concept code for the CVE-2025-9974 affecting Nokia Beacon routers. |
|
||||
| 0⭐ | 19h ago | [CVE-2026-19516](https://github.com/HORKimhab/CVE-2026-19516) | A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests,… |
|
||||
| 2⭐ | 21h ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… |
|
||||
| 2⭐ | 2h ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… |
|
||||
| 0⭐ | 5h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
|
||||
| 1⭐ | 10h ago | [CVE-2025-9974](https://github.com/Rajdave69/CVE-2025-9974) | Proof of Concept code for the CVE-2025-9974 affecting Nokia Beacon routers. |
|
||||
| 0⭐ | 20h ago | [CVE-2026-19516](https://github.com/HORKimhab/CVE-2026-19516) | A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests,… |
|
||||
| 2⭐ | 22h ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… |
|
||||
| 2⭐ | 1d ago | [CVE-2026-65349](https://github.com/ByteV0rtex/CVE-2026-65349) | CVE-2026-65349 PoC - getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71) |
|
||||
| 4⭐ | 1d ago | [CVE-2026-64788](https://github.com/ByteV0rtex/CVE-2026-64788) | CVE-2026-64788 PoC - IOGPUFamily Use-After-Free (iOS 26.6 / 23G71) |
|
||||
| 0⭐ | 1d ago | [CVE-2026-31787](https://github.com/0xAtharv/CVE-2026-31787) | Linux kernel double free in Xen privcmd driver |
|
||||
@@ -27,7 +27,7 @@
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 5⭐ | 10h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… |
|
||||
| 5⭐ | 11h ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… |
|
||||
| 3⭐ | 1d ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… |
|
||||
| 7⭐ | 2d ago | [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… |
|
||||
| 3⭐ | 5d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… |
|
||||
@@ -43,7 +43,7 @@
|
||||
| 13⭐ | 11d ago | [Keycloak_CVE-2026-18963_PoC](https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC) | This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). |
|
||||
| 19⭐ | 11d ago | [CVE-2026-18963-keycloak](https://github.com/Red-Darkin/CVE-2026-18963-keycloak) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… |
|
||||
| 4⭐ | 11d ago | [CVE-2026-20079](https://github.com/CyberAuth/CVE-2026-20079) | Python proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center. |
|
||||
| 4⭐ | 13d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-65400](https://github.com/acheong08/CVE-2026-65400) | Apple MacOS Screen Sharing Arbitrary File read/write -> RCE |
|
||||
| 4⭐ | 14d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-65400](https://github.com/acheong08/CVE-2026-65400) | Apple MacOS Screen Sharing Arbitrary File read/write -> RCE |
|
||||
| 174⭐ | 14d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
|
||||
| 5⭐ | 14d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-65400-poc](https://github.com/panchocosil/CVE-2026-65400-poc) | Read-only PoC for CVE-2026-65400 - macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file… |
|
||||
| 7⭐ | 14d ago | <img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-34910-PoC](https://github.com/Boreas37/CVE-2026-34910-PoC) | CVE-2026-34910/34909 - UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW) |
|
||||
|
||||
@@ -15,4 +15,4 @@ Ekushey Project Manager CRM stores the administrator-configured system name and
|
||||
- https://github.com/LindHunt/CVE-2026-26211
|
||||
|
||||
#### Github
|
||||
- https://github.com/LindHunt/CVE-2026-26211
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -26767,28 +26767,7 @@ CVE-2026-32475 - https://github.com/4minx/CVE-2026-32475
|
||||
CVE-2026-32475 - https://github.com/dinosn/cve-2026-32475-elementor-pro-lab
|
||||
CVE-2026-78839 - https://github.com/nabeelmkhan/CVE-2026-78839
|
||||
CVE-2026-75865 - https://github.com/ghostpels/CVE-2026-75865
|
||||
CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne
|
||||
CVE-2018-15133 - https://github.com/pwnedshell/Larascript
|
||||
CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600
|
||||
CVE-2019-16098 - https://github.com/Barakat/CVE-2019-16098
|
||||
CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597
|
||||
CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816
|
||||
CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560
|
||||
CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform
|
||||
CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228
|
||||
CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC
|
||||
CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897
|
||||
CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075
|
||||
CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce
|
||||
CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752
|
||||
CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664
|
||||
CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC
|
||||
CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc
|
||||
CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063
|
||||
CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc
|
||||
CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651
|
||||
CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123
|
||||
CVE-2026-26211 - https://github.com/LindHunt/CVE-2026-26211
|
||||
CVE-2026-43499 - https://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
|
||||
CVE-2026-44402 - https://github.com/Virgula0/CVE-2026-44402
|
||||
CVE-2026-64468 - https://github.com/aramosf/CVE-2026-64468
|
||||
Reference in new issue
Block a user