diff --git a/README.md b/README.md index ecb89459d00..1bea3f54a03 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2012%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610111207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C370-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610111207)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2013%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610111307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C370-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610111307)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,13 +14,13 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 32m ago | [CVE-2026-27626](https://github.com/Shisones/CVE-2026-27626) | CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root… | -| 0⭐ | 3h ago | [Exploit-CVE-2026-40224](https://github.com/0xparad0x/Exploit-CVE-2026-40224) | CVE-2026-40224: systemd-machined local privilege escalation | -| 0⭐ | 5h ago | KEV [CVE-2025-57819](https://github.com/Wayang1337/CVE-2025-57819) | FreePBX unauthenticated SQLi (endpoint module) | -| 0⭐ | 5h ago | [CVE-2026-104335](https://github.com/Farih123/CVE-2026-104335) | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code… | -| 0⭐ | 7h ago | KEV [cve-2025-24813](https://github.com/toyplan/cve-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | -| 0⭐ | 10h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… | -| 0⭐ | 12h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent | +| 0⭐ | 1h ago | [CVE-2026-27626](https://github.com/Shisones/CVE-2026-27626) | CVE-2026-27626 - OliveTin <3000.10.0 OS command injection via password-typed arguments, escalating to root… | +| 0⭐ | 4h ago | [Exploit-CVE-2026-40224](https://github.com/0xparad0x/Exploit-CVE-2026-40224) | CVE-2026-40224: systemd-machined local privilege escalation | +| 0⭐ | 6h ago | KEV [CVE-2025-57819](https://github.com/Wayang1337/CVE-2025-57819) | FreePBX unauthenticated SQLi (endpoint module) | +| 0⭐ | 6h ago | [CVE-2026-104335](https://github.com/Farih123/CVE-2026-104335) | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code… | +| 0⭐ | 8h ago | KEV [cve-2025-24813](https://github.com/toyplan/cve-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | +| 0⭐ | 11h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… | +| 0⭐ | 13h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent | | 0⭐ | 1d ago | [CVE-2026-102428](https://github.com/murrez/CVE-2026-102428) | CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi - order_field/order_direction… | | 0⭐ | 1d ago | [CVE-2026-106445](https://github.com/murrez/CVE-2026-106445) | CVE-2026-106445 - Handlebars 4.0.0-4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f).… | | 0⭐ | 1d ago | [CVE-2026-107806](https://github.com/murrez/CVE-2026-107806) | CVE-2026-107806 - nginx-ui 2.3.8-2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET… | diff --git a/index/trending.json b/index/trending.json index 81948d0eb10..9bd3a06c291 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.2189934421413327, + "score": 3.21722586328392, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -27,7 +27,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.701130896306841, + "score": 1.697428467762373, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -44,7 +44,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.6651670113545975, + "score": 1.6645684627442274, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -61,7 +61,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.270301449433684, + "score": 1.2695864261865315, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -78,7 +78,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.9025725406107787, + "score": 0.9017271283879331, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -95,7 +95,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.8713756375889037, + "score": 0.8694695073503493, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -112,7 +112,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.8695197777927567, + "score": 0.8686969803205593, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -129,7 +129,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.7585929292360373, + "score": 0.7581337851776453, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -146,7 +146,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7200603129642913, + "score": 0.7195223708582752, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -163,7 +163,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5974696911998348, + "score": 0.5972226628872392, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -180,7 +180,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.5632381863578634, + "score": 0.5623548181217337, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -197,7 +197,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.5235338117724994, + "score": 0.5227667977319419, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -214,7 +214,7 @@ "pushed": "2026-07-18T21:09:06Z", "released": null, "basis": "pending", - "score": 0.5181461943301617, + "score": 0.5179713921742691, "trending": true, "created": "2026-07-14T14:21:27Z", "cve": "CVE-2026-43499", @@ -231,7 +231,7 @@ "pushed": "2026-09-27T19:48:09Z", "released": "2026-09-27T19:47:52Z", "basis": "commit", - "score": 0.5110435252412321, + "score": 0.5100400547153094, "trending": true, "created": "2026-09-27T19:41:06Z", "cve": "CVE-2026-34990", @@ -248,7 +248,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.4688778621218391, + "score": 0.46819292397964657, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -265,7 +265,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.43689298357056255, + "score": 0.43601141080747396, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -282,7 +282,7 @@ "pushed": "2026-09-11T16:38:12Z", "released": "2026-09-11T15:54:48Z", "basis": "commit", - "score": 0.4215989987718449, + "score": 0.4212044411610565, "trending": true, "created": "2026-09-11T15:24:22Z", "cve": "CVE-2026-85706", @@ -299,7 +299,7 @@ "pushed": "2026-10-06T10:48:38Z", "released": "2026-10-06T10:48:38Z", "basis": "commit", - "score": 0.3983150164865017, + "score": 0.39642548134266936, "trending": true, "created": "2026-10-06T10:40:59Z", "cve": "CVE-2026-21589", @@ -316,7 +316,7 @@ "pushed": "2026-07-13T13:32:26Z", "released": null, "basis": "pending", - "score": 0.3955596815499699, + "score": 0.3954340344096626, "trending": true, "created": "2026-07-13T13:31:55Z", "cve": "CVE-2026-43499", @@ -333,7 +333,7 @@ "pushed": "2026-09-07T08:42:12Z", "released": null, "basis": "pending", - "score": 0.39373500507338255, + "score": 0.393411567937327, "trending": true, "created": "2026-09-07T09:25:30Z", "cve": "CVE-2026-28576", @@ -350,7 +350,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.38979146621416205, + "score": 0.3885713174656043, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -367,7 +367,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.1315143011268049, + "score": 0.1314536834858078, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -384,7 +384,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.08983831754433133, + "score": 0.08973648046117702, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -401,7 +401,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.07388596587063112, + "score": 0.07383988217290287, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -418,7 +418,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.04670644970803797, + "score": 0.04668126452117621, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -435,7 +435,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.041681956131421095, + "score": 0.04166616755762069, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -452,7 +452,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.039923484696591634, + "score": 0.039906277941140544, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -469,7 +469,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.029751511131797276, + "score": 0.029741029543066077, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -486,7 +486,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.025132996368156156, + "score": 0.02512057767199048, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -503,7 +503,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.024558003246939266, + "score": 0.024549452924302672, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -520,7 +520,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.022404876018925636, + "score": 0.022390686129397933, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -537,7 +537,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.01951222517556092, + "score": 0.019502080509186236, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -554,7 +554,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.019281619403468654, + "score": 0.019275083435784914, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -571,7 +571,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.01898901630939701, + "score": 0.018982718557881872, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -588,7 +588,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.01584771584614514, + "score": 0.015841603208281728, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -605,7 +605,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.015472410662516357, + "score": 0.015466644805981556, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -622,7 +622,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.014594371587890141, + "score": 0.014589359299551876, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -639,7 +639,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.009811749091168944, + "score": 0.009811040250636137, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",