diff --git a/README.md b/README.md index 11081eaae83..08cb2c9e4b3 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-03%20Oct%202026%2022%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610032207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C966-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C220-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610032207)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-03%20Oct%202026%2023%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610032307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C966-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C220-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610032307)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,7 +12,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 4h ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… | +| 0⭐ | 36m ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) | +| 0⭐ | 5h ago | [CVE-2025-21065](https://github.com/Pealeap/CVE-2025-21065) | A PoC for CVE-2025-21065 that allows any self-attacker to execute commands with Retail Mode privileges (UID… | | 0⭐ | 1d ago | [CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE](https://github.com/kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE) | GLPI is a free asset and IT management software package. An authenticated user can upload and force the… | | 0⭐ | 2d ago | [CVE-2025-47947](https://github.com/yel1337/CVE-2025-47947) | POC for libapache2-mod-security2 | | 0⭐ | 2d ago | KEV [CVE-2025-8110](https://github.com/Makis6/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | @@ -21,13 +22,12 @@ | 1⭐ | 3d ago | KEV [CVE-2025-31161](https://github.com/0xBlackash/CVE-2025-31161) | CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin… | | 0⭐ | 3d ago | [cve-2025-30208](https://github.com/Minseo9503/cve-2025-30208) | Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,… | | 0⭐ | 4d ago | KEV [CVE-2025-32463](https://github.com/klvlo/CVE-2025-32463) | PoC / Exploit for CVE-2025-32463(sudo LPE) | -| 0⭐ | 4d ago | KEV [CVE-2025-8088-WinRAR-PoC-3](https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3) | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 825⭐ | 5h ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | +| 825⭐ | 6h ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 4d ago | KEV [CVE-2026-87902](https://github.com/tonydelouvre/CVE-2026-87902) | XWP_RCE - CVE-2026-87902 Hacker Console | | 4⭐ | 4d ago | KEV [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM - via… | | 29⭐ | 4d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework / Rogue DC + LDAP spoofing, certificate abuse,… | @@ -74,7 +74,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 17⭐ | 13h ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | +| 17⭐ | 14h ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 4⭐ | 49d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 66d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | diff --git a/cves/2025/CVE-2025-60787.md b/cves/2025/CVE-2025-60787.md index 3740bf84292..4b2ffdf63fa 100644 --- a/cves/2025/CVE-2025-60787.md +++ b/cves/2025/CVE-2025-60787.md @@ -20,6 +20,7 @@ MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configur - https://github.com/lil0xplorer/CVE-2025-60787_PoC - https://github.com/ozcanpng/CVE-2025-60787 - https://github.com/prabhatverma47/CVE-2025-60787 +- https://github.com/diamorphine666/CVE-2025-60787 #### ExploitDB - https://www.exploit-db.com/exploits/52481 diff --git a/cves/2026/CVE-2026-27944.md b/cves/2026/CVE-2026-27944.md index c6825a0a897..cf00c57ec02 100644 --- a/cves/2026/CVE-2026-27944.md +++ b/cves/2026/CVE-2026-27944.md @@ -21,6 +21,7 @@ Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3. - https://github.com/Goultarde/CVE-2026-27944-poc - https://github.com/jake-young-dev/CVE-2026-27944 - https://github.com/BimaBalance/Cve-2026-27944-Tools-Exploit +- https://github.com/diamorphine666/CVE-2026-27944 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27944.yaml diff --git a/index/github.txt b/index/github.txt index d48392e5d6e..d9d7e238e2e 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27155,3 +27155,5 @@ CVE-2026-103956 - https://github.com/abraxas/cve-2026-103956-loom-unauth CVE-2026-40281 - https://github.com/HackfutSecRoot/-GOTENBERG-RCE-CHAIN CVE-2026-42589 - https://github.com/HackfutSecRoot/-GOTENBERG-RCE-CHAIN CVE-2026-43499 - https://github.com/PyeProof/Root-My-Galaxy-S938NKSUCDZIF +CVE-2025-60787 - https://github.com/diamorphine666/CVE-2025-60787 +CVE-2026-27944 - https://github.com/diamorphine666/CVE-2026-27944 diff --git a/index/trending.json b/index/trending.json index 84c4789ba22..665fefa9839 100644 --- a/index/trending.json +++ b/index/trending.json @@ -439,6 +439,18 @@ "cve": "CVE-2023-4911", "kev": true }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-60787", + "url": "https://github.com/diamorphine666/CVE-2025-60787", + "desc": "MotionEye OS Command Injection (CVE-2025-60787)", + "pushed": "2026-10-03T22:33:03Z", + "created": "2026-10-03T22:32:40Z", + "cve": "CVE-2025-60787", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -546,17 +558,5 @@ "cve": "CVE-2025-32463", "kev": true, "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-8088-WinRAR-PoC-3", - "url": "https://github.com/roof1948576qwd/CVE-2025-8088-WinRAR-PoC-3", - "desc": "A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.", - "pushed": "2026-09-29T09:46:43Z", - "created": "2026-09-29T09:46:25Z", - "cve": "CVE-2025-8088", - "kev": true, - "landed": true } ]