diff --git a/README.md b/README.md index 6e3ae606e97..539a08bc190 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-10%20Sep%202026%2007%3A06%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609100706)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C699-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C187-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609100706)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-10%20Sep%202026%2009%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609100907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C699-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C187-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609100907)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,16 +12,16 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 7h ago | [CVE-2025-27636-RCE-in-Apache-Camel](https://github.com/AC8999/CVE-2025-27636-RCE-in-Apache-Camel) | CVE-2025-27636 PoC written in Python | -| 0⭐ | 1d ago | [CVE-2026-73318](https://github.com/BomboBombone/CVE-2026-73318) | Sanitized XenForo write-up and proof of concept for CVE-2026-73318. | +| 0⭐ | 1h ago | [CVE-2026-28496](https://github.com/ivanesk315/CVE-2026-28496) | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a… | +| 0⭐ | 1h ago | KEV [CVE-2026-60137-and-CVE-2026-63030](https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030) | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the… | +| 0⭐ | 9h ago | [CVE-2025-27636-RCE-in-Apache-Camel](https://github.com/AC8999/CVE-2025-27636-RCE-in-Apache-Camel) | CVE-2025-27636 PoC written in Python | | 0⭐ | 1d ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. | | 0⭐ | 1d ago | KEV [CVE-2025-55182](https://github.com/r3vpwnx/CVE-2025-55182) | CVE-2025-55182 - React2Shell (CVE-2025-55182) unauthenticated RCE via React Server Components Flight… | | 2⭐ | 1d ago | KEV [CVE-2026-39987](https://github.com/Th3Purge/CVE-2026-39987) | Marimo Pre Authentication RCE | | 2⭐ | 1d ago | [CVE-2026-69451-PoC](https://github.com/fj016/CVE-2026-69451-PoC) | PoC for the CVE-2026-69451 - Fastprox EoP | | 0⭐ | 3d ago | KEV [CVE-2025-57819](https://github.com/r3vpwnx/CVE-2025-57819) | CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC) | -| 0⭐ | 3d ago | [CVE-2026-49777](https://github.com/katranSefa/CVE-2026-49777) | Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for… | | 0⭐ | 4d ago | [CVE-2025-24799](https://github.com/galisko/CVE-2025-24799) | GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection… | -| 0⭐ | 4d ago | KEV [POC-CVE-2025-68613](https://github.com/rmhowe425/POC-CVE-2025-68613) | n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4,… | +| 0⭐ | 4d ago | [CVE-2026-64747](https://github.com/eddinos2/CVE-2026-64747) | AppleAVE2 kernel driver wire-format research and macOS reachability PoC for CVE-2026-64747. | ## Trending in 2026 @@ -32,14 +32,14 @@ | 824⭐ | 2d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 532⭐ | 2d ago | KEV [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | | 27⭐ | 2d ago | [CVE-2026-28576-poc](https://github.com/mobilehackinglab/CVE-2026-28576-poc) | SQL injection vulnerability in Android 17 (AOSP) | -| 4⭐ | 3d ago | KEV [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via… | -| 10⭐ | 4d ago | [xiaomi15-dada-cve-2026-64560](https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560) | Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8 | +| 4⭐ | 4d ago | KEV [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via… | +| 11⭐ | 4d ago | [xiaomi15-dada-cve-2026-64560](https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560) | Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8 | | 6⭐ | 5d ago | [cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) | A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via… | | 5⭐ | 5d ago | KEV [CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) | CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features:… | | 9⭐ | 5d ago | [CVE-2026-65643-PoC-Toolkit](https://github.com/tc4dy/CVE-2026-65643-PoC-Toolkit) | 🧰 CVE-2026-65643 - cPanel Domain Parking RCE Toolkit (CVSS 8.7) / Red/Blue Team suite for unpatched cPanel &… | | 4⭐ | 6d ago | [CVE-2026-62735](https://github.com/HackSpeak/CVE-2026-62735) | Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM… | | 3⭐ | 7d ago | [cve-2026-47627](https://github.com/AneKazek/cve-2026-47627) | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path… | -| 12⭐ | 7d ago | [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | +| 12⭐ | 7d ago | KEV [CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490) | NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause… | | 4⭐ | 8d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | | 3⭐ | 10d ago | [CVE-2026-78905-Facebook-Account-Takeover](https://github.com/vxssroott/CVE-2026-78905-Facebook-Account-Takeover) | Social Media Infrastructure Vulnerability Research. CVE-2026-78905: OAuth token reuse and session hijacking… | | 4⭐ | 10d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | @@ -52,7 +52,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 6⭐ | 13d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | +| 6⭐ | 14d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 4⭐ | 21d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 20⭐ | 30d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 6⭐ | 34d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | @@ -60,7 +60,7 @@ | 4⭐ | 50d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 4⭐ | 52d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | | 5⭐ | 54d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | -| 7⭐ | 63d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | +| 7⭐ | 64d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 69d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | | 3⭐ | 69d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | | 4⭐ | 74d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | diff --git a/cves/2026/CVE-2026-73312.md b/cves/2026/CVE-2026-73312.md index a2ebbf84309..a09979a4cc1 100644 --- a/cves/2026/CVE-2026-73312.md +++ b/cves/2026/CVE-2026-73312.md @@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a refresh token replay vulnerability that allows - https://github.com/BomboBombone/CVE-2026-73312 #### Github -No PoCs found on GitHub currently. +- https://github.com/BomboBombone/CVE-2026-73312 diff --git a/cves/2026/CVE-2026-73318.md b/cves/2026/CVE-2026-73318.md index c228e598b84..b8f230d2cac 100644 --- a/cves/2026/CVE-2026-73318.md +++ b/cves/2026/CVE-2026-73318.md @@ -15,4 +15,4 @@ XenForo before 2.3.13 contains a missing authorization vulnerability in the forc - https://github.com/BomboBombone/CVE-2026-73318 #### Github -No PoCs found on GitHub currently. +- https://github.com/BomboBombone/CVE-2026-73318 diff --git a/index/github.txt b/index/github.txt index 40094860864..e4ede4bcd63 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26559,7 +26559,6 @@ CVE-2026-27831 - https://github.com/bluedragonsecurity/exploits CVE-2026-57811 - https://github.com/0xCyp1337/CVE-2026-57811 CVE-2026-84118 - https://github.com/SneakyNachos/CVE-2026-84118-who-labeled-the-crit-as-a-high CVE-2026-52307 - https://github.com/linan-OO/CVE-2026-52307 -CVE-2026-73312 - https://github.com/BomboBombone/CVE-2026-73312 CVE-2026-29782 - https://github.com/hackerking24/CVE-2026-29782-OpenSTAManager-RCE CVE-2026-69267 - https://github.com/redroot97/windows CVE-2026-69451 - https://github.com/fj016/CVE-2026-69451-PoC @@ -26606,7 +26605,6 @@ CVE-2026-76578 - https://github.com/BrainBob/CVE-2026-76578 CVE-2025-27636 - https://github.com/AC8999/CVE-2025-27636-RCE-in-Apache-Camel CVE-2026-72815 - https://github.com/Saku0512/CVE-2026-72815-poc CVE-2026-43499 - https://github.com/zenyxx-xd/RootMyVivo-Exploit -CVE-2026-73318 - https://github.com/BomboBombone/CVE-2026-73318 CVE-2012-10023 - https://github.com/bluedragonsecurity/exploits CVE-2015-5736 - https://github.com/RainbowDynamix/FortiLOL CVE-2017-1001002 - https://github.com/DuyPhuc-hust/SecWeave @@ -26637,16 +26635,6 @@ CVE-2026-53519 - https://github.com/ivanesk315/CVE-2026-53519 CVE-2026-60137 - https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030 CVE-2026-63030 - https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030 CVE-2026-66066 - https://github.com/ivanesk315/CVE-2026-66066 -CVE-2026-73309 - https://github.com/BomboBombone/CVE-2026-73309 -CVE-2026-73310 - https://github.com/BomboBombone/CVE-2026-73310 -CVE-2026-73311 - https://github.com/BomboBombone/CVE-2026-73311 -CVE-2026-73313 - https://github.com/BomboBombone/CVE-2026-73313 -CVE-2026-73314 - https://github.com/BomboBombone/CVE-2026-73314 -CVE-2026-73315 - https://github.com/BomboBombone/CVE-2026-73315 -CVE-2026-73316 - https://github.com/BomboBombone/CVE-2026-73316 -CVE-2026-73317 - https://github.com/BomboBombone/CVE-2026-73317 -CVE-2026-73319 - https://github.com/BomboBombone/CVE-2026-73319 -CVE-2026-73320 - https://github.com/BomboBombone/CVE-2026-73320 -CVE-2026-73321 - https://github.com/BomboBombone/CVE-2026-73321 CVE-2026-73570 - https://github.com/hainhc/CVE-2026-73570 -CVE-2026-74239 - https://github.com/BomboBombone/CVE-2026-74239 +CVE-2026-73312 - https://github.com/BomboBombone/CVE-2026-73312 +CVE-2026-73318 - https://github.com/BomboBombone/CVE-2026-73318 diff --git a/index/trending.json b/index/trending.json index 88e2c5a80c4..4ed2a738a8a 100644 --- a/index/trending.json +++ b/index/trending.json @@ -67,7 +67,7 @@ }, { "year": 2026, - "stars": 10, + "stars": 11, "name": "xiaomi15-dada-cve-2026-64560", "url": "https://github.com/quyicheng03-boop/xiaomi15-dada-cve-2026-64560", "desc": "Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8", @@ -140,7 +140,7 @@ "pushed": "2026-09-02T15:42:44Z", "created": "2026-09-02T15:43:53Z", "cve": "CVE-2026-19490", - "kev": false + "kev": true }, { "year": 2026, @@ -483,6 +483,30 @@ "cve": "CVE-2022-29799", "kev": false }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-28496", + "url": "https://github.com/ivanesk315/CVE-2026-28496", + "desc": "FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection (SSTI) vulnerability in the template rendering system. Administrators with access to features that render Twig templates (email templates, mass mail campaigns, custom payment adapters, and the `string_render` API endpoint) can inject arbitrary Twig expressions, leading to information disclosure and remote code execution. The vulnerability exists because Twig templates are rendered without a sandbox, allowing access to the full Twig environment, API context, and the application's dependency injection container. Version 0.8.0 patches the issue. Some workarounds are available. Audit existing email templates for suspicious Twig expressions, rotate all admin and client API tokens, and/or block external access to /api/system/* at reverse proxy/WAF to mitigate chaining with GHSA-78x5-c8gw-8279.", + "pushed": "2026-09-10T07:18:20Z", + "created": "2026-09-10T07:18:20Z", + "cve": "CVE-2026-28496", + "kev": false, + "landed": true + }, + { + "year": 2026, + "stars": 0, + "name": "CVE-2026-60137-and-CVE-2026-63030", + "url": "https://github.com/ivanesk315/CVE-2026-60137-and-CVE-2026-63030", + "desc": "WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.", + "pushed": "2026-09-10T07:17:21Z", + "created": "2026-09-10T07:17:21Z", + "cve": "CVE-2026-60137", + "kev": true, + "landed": true + }, { "year": 2025, "stars": 0, @@ -495,18 +519,6 @@ "kev": false, "landed": true }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-73318", - "url": "https://github.com/BomboBombone/CVE-2026-73318", - "desc": "Sanitized XenForo write-up and proof of concept for CVE-2026-73318.", - "pushed": "2026-09-08T23:53:19Z", - "created": "2026-09-08T16:35:46Z", - "cve": "CVE-2026-73318", - "kev": false, - "landed": true - }, { "year": 2026, "stars": 0, @@ -567,18 +579,6 @@ "kev": true, "landed": true }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-49777", - "url": "https://github.com/katranSefa/CVE-2026-49777", - "desc": "Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.", - "pushed": "2026-09-06T11:31:19Z", - "created": "2026-09-06T11:31:01Z", - "cve": "CVE-2026-49777", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 0, @@ -592,15 +592,15 @@ "landed": true }, { - "year": 2025, + "year": 2026, "stars": 0, - "name": "POC-CVE-2025-68613", - "url": "https://github.com/rmhowe425/POC-CVE-2025-68613", - "desc": "n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. This issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0. Users are strongly advised to upgrade to a patched version, which introduces additional safeguards to restrict expression evaluation. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only; and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully eliminate the risk and should only be used as short-term measures.", - "pushed": "2026-09-05T20:01:27Z", - "created": "2026-09-05T19:51:20Z", - "cve": "CVE-2025-68613", - "kev": true, + "name": "CVE-2026-64747", + "url": "https://github.com/eddinos2/CVE-2026-64747", + "desc": "AppleAVE2 kernel driver wire-format research and macOS reachability PoC for CVE-2026-64747.", + "pushed": "2026-09-05T20:23:43Z", + "created": "2026-09-05T20:23:44Z", + "cve": "CVE-2026-64747", + "kev": false, "landed": true } ]