diff --git a/README.md b/README.md index bbcdeb69916..39145e02b04 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-15%20Sep%202026%2022%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609152207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C774-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C196-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609152207)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-15%20Sep%202026%2023%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609152308)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C774-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C196-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609152308)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,16 +12,16 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 2h ago | [CVE-2026-32996](https://github.com/suce0155/CVE-2026-32996) | A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. | -| 2⭐ | 2h ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | -| 0⭐ | 7h ago | KEV [CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | -| 0⭐ | 16h ago | [CVE-2025-64512_PoC](https://github.com/Jinook-Kim/CVE-2025-64512_PoC) | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from… | -| 0⭐ | 21h ago | [CVE-2026-69328](https://github.com/0xf9b6a41ec/CVE-2026-69328) | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. | +| 0⭐ | 3h ago | [CVE-2026-32996](https://github.com/suce0155/CVE-2026-32996) | A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. | +| 2⭐ | 3h ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | +| 0⭐ | 8h ago | KEV [CVE-2025-24813](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813) | Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure… | +| 0⭐ | 17h ago | [CVE-2025-64512_PoC](https://github.com/Jinook-Kim/CVE-2025-64512_PoC) | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from… | +| 0⭐ | 22h ago | [CVE-2026-69328](https://github.com/0xf9b6a41ec/CVE-2026-69328) | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. | | 0⭐ | 1d ago | KEV [CVE-2025-32432](https://github.com/e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-32432) | Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.… | | 0⭐ | 2d ago | [CVE-2025-24071](https://github.com/BardLaudian/CVE-2025-24071) | Dependency-free PoC generator for CVE-2025-24071 - Windows File Explorer .library-ms NTLM hash disclosure via… | | 0⭐ | 2d ago | KEV [CVE-2025-38352-PoC](https://github.com/longwasu/CVE-2025-38352-PoC) | PoC and GDB script assists in triggering CVE-2025-38352 | -| 1⭐ | 2d ago | [CVE-2026-77770](https://github.com/cflowsec/CVE-2026-77770) | miniOrange 2FA CVE POC | | 2⭐ | 3d ago | [CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.](https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.) | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker… | +| 1⭐ | 3d ago | [CVE-2026-80099](https://github.com/Wayang1337/CVE-2026-80099) | Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated | ## Trending in 2026 @@ -30,7 +30,7 @@ | 17⭐ | 1d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | | 4⭐ | 1d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | | 4⭐ | 1d ago | KEV [CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570) | Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc) | -| 3⭐ | 2d ago | [CVE-2026-42536-PoC](https://github.com/erberkan/CVE-2026-42536-PoC) | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and… | +| 4⭐ | 2d ago | [CVE-2026-42536-PoC](https://github.com/erberkan/CVE-2026-42536-PoC) | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and… | | 3⭐ | 3d ago | KEV [cve-2026-85706-poc-exploit-gitlab](https://github.com/0xlyvio/cve-2026-85706-poc-exploit-gitlab) | cve-2026-85706-poc-exploit-gitlab | | 4⭐ | 3d ago | [CVE-2026-78006-POC](https://github.com/DeadExpl0it/CVE-2026-78006-POC) | POC for CVE-2026-78006 The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code… | | 4⭐ | 4d ago | [CVE-2026-89013](https://github.com/Faceless0x7/CVE-2026-89013) | CVE-2026-89013 Exploit - Authorization bypass in Dolibarr via the hashp parameter, enabling unauthenticated… | diff --git a/cves/2026/CVE-2026-43499.md b/cves/2026/CVE-2026-43499.md index ebbc8078717..83e6b879fb2 100644 --- a/cves/2026/CVE-2026-43499.md +++ b/cves/2026/CVE-2026-43499.md @@ -168,3 +168,4 @@ No PoCs from references. - https://github.com/k-o-n-t-o-r/ghostlock-sabrina - https://github.com/Bobikl/CVE-2026-43499-T807D - https://github.com/kurtulusakyuz/IonStack_S21 +- https://github.com/RiosWesley/Tab-S10-FE-Plus-Root diff --git a/index/github.txt b/index/github.txt index 617668f06a9..4ad734de192 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26608,3 +26608,4 @@ CVE-2026-32996 - https://github.com/suce0155/CVE-2026-32996 CVE-2026-65013 - https://github.com/isaca0315/CVE-2026-65013-BOLA-IDOR CVE-2026-44351 - https://github.com/isaca0315/CVE-2026-44351-poc CVE-2026-82329 - https://github.com/tc4dy/CVE-2026-82329-PoC-Exploit +CVE-2026-43499 - https://github.com/RiosWesley/Tab-S10-FE-Plus-Root diff --git a/index/trending.json b/index/trending.json index 986619d7b0e..8aae65563ec 100644 --- a/index/trending.json +++ b/index/trending.json @@ -34,7 +34,7 @@ }, { "year": 2026, - "stars": 3, + "stars": 4, "name": "CVE-2026-42536-PoC", "url": "https://github.com/erberkan/CVE-2026-42536-PoC", "desc": "Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content", @@ -579,18 +579,6 @@ "kev": true, "landed": true }, - { - "year": 2026, - "stars": 1, - "name": "CVE-2026-77770", - "url": "https://github.com/cflowsec/CVE-2026-77770", - "desc": "miniOrange 2FA CVE POC", - "pushed": "2026-09-13T03:50:52Z", - "created": "2026-09-13T03:50:21Z", - "cve": "CVE-2026-77770", - "kev": false, - "landed": true - }, { "year": 2026, "stars": 2, @@ -602,5 +590,17 @@ "cve": "CVE-2026-87575", "kev": false, "landed": true + }, + { + "year": 2026, + "stars": 1, + "name": "CVE-2026-80099", + "url": "https://github.com/Wayang1337/CVE-2026-80099", + "desc": "Newfold plugins (wp-module-data <= 2.9.7) Unauthenticated", + "pushed": "2026-09-12T09:42:41Z", + "created": "2026-09-12T09:42:06Z", + "cve": "CVE-2026-80099", + "kev": false, + "landed": true } ]