diff --git a/README.md b/README.md index 57ab5c4d43b..6732668fe77 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-17%20Oct%202026%2014%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610171407)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C048-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C236-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610171407)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-17%20Oct%202026%2015%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610171507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C050-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C236-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610171507)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,32 +14,32 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 1h ago | [prague-CVE-2026-64560-OS4.0](https://github.com/ChaYeWuu/prague-CVE-2026-64560-OS4.0) | REDMI K90 Max在OS4.0.0.14.XAACNXM利用CVE-2026-64560获取ROOT权限。 | -| 0⭐ | 4h ago | [CVE-2026-111823](https://github.com/murrez/CVE-2026-111823) | PoC for CVE-2026-111823 - Mage AI OAuth session auth bypass (POST /api/sessions). Check + exploit modes.… | -| 0⭐ | 7h ago | [CVE-2026-99999](https://github.com/PeronGH/CVE-2026-99999) | PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP. | -| 0⭐ | 11h ago | [CVE-2026-59970-poc](https://github.com/asvorg/CVE-2026-59970-poc) | PoC for CVE-2026-59970 Blind SSRF in Tandoor Recipes, CWE-918 | -| 0⭐ | 12h ago | [CVE-2026-8933](https://github.com/songzzzz/CVE-2026-8933) | A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used… | -| 0⭐ | 15h ago | KEV [CVE-2026-31431-Copy-Fail](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-31431-Copy-Fail) | CVE-2026-31431 Exploit / by infrar3d | -| 0⭐ | 15h ago | KEV [CVE-2014-6271-Shellshock](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock) | CVE-2014-6271 Exploit / by infrar3d | -| 0⭐ | 15h ago | KEV [CVE-2025-55182-React2Shell](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell) | CVE-2025-55182 Exploit / by infrar3d | -| 0⭐ | 15h ago | [CVE-2026-38526-KrayinCRM-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-38526-KrayinCRM-RCE) | CVE-2026-38526 Exploit / by infrar3d | -| 0⭐ | 15h ago | KEV [CVE-2026-33017-Langflow-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE) | CVE-2026-33017 Exploit / by infrar3d | +| 0⭐ | 14m ago | [CVE-2024-32507](https://github.com/4minx/CVE-2024-32507) | CVE-2024-32507: login-with-phone-number Unauthenticated Password Reset (Account Takeover) | +| 0⭐ | 2h ago | [prague-CVE-2026-64560-OS4.0](https://github.com/ChaYeWuu/prague-CVE-2026-64560-OS4.0) | REDMI K90 Max在OS4.0.0.14.XAACNXM利用CVE-2026-64560获取ROOT权限。 | +| 0⭐ | 5h ago | [CVE-2026-111823](https://github.com/murrez/CVE-2026-111823) | PoC for CVE-2026-111823 - Mage AI OAuth session auth bypass (POST /api/sessions). Check + exploit modes.… | +| 0⭐ | 8h ago | [CVE-2026-99999](https://github.com/PeronGH/CVE-2026-99999) | PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP. | +| 0⭐ | 13h ago | [CVE-2026-59970-poc](https://github.com/asvorg/CVE-2026-59970-poc) | PoC for CVE-2026-59970 Blind SSRF in Tandoor Recipes, CWE-918 | +| 0⭐ | 13h ago | [CVE-2026-8933](https://github.com/songzzzz/CVE-2026-8933) | A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used… | +| 0⭐ | 16h ago | KEV [CVE-2026-31431-Copy-Fail](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-31431-Copy-Fail) | CVE-2026-31431 Exploit / by infrar3d | +| 0⭐ | 16h ago | KEV [CVE-2014-6271-Shellshock](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock) | CVE-2014-6271 Exploit / by infrar3d | +| 0⭐ | 16h ago | KEV [CVE-2025-55182-React2Shell](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell) | CVE-2025-55182 Exploit / by infrar3d | +| 0⭐ | 16h ago | [CVE-2026-38526-KrayinCRM-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-38526-KrayinCRM-RCE) | CVE-2026-38526 Exploit / by infrar3d | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 137⭐ | 2d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | +| 145⭐ | 2d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | | 477⭐ | 57d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 59⭐ | 3d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | -| 26⭐ | 19h ago | [CVE-2026-75604-PoC](https://github.com/ZeroDayEvil/CVE-2026-75604-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-75604 (Next.js Unauthenticated RCE PoC in Windows-Hosted… | -| 24⭐ | 20h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | -| 24⭐ | 20h ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | +| 26⭐ | 20h ago | [CVE-2026-75604-PoC](https://github.com/ZeroDayEvil/CVE-2026-75604-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-75604 (Next.js Unauthenticated RCE PoC in Windows-Hosted… | +| 24⭐ | 21h ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | +| 24⭐ | 21h ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | | 333⭐ | 81d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | | 96⭐ | 18d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 33⭐ | 3d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC | | 187⭐ | 56d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | -| 18⭐ | 1d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | +| 18⭐ | 2d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | | 92⭐ | 35d ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | | 88⭐ | 35d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… | | 106⭐ | 52d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | @@ -54,12 +54,12 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 5⭐ | 4d ago | KEV [CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | +| 5⭐ | 5d ago | KEV [CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. | | 22⭐ | 67d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 8⭐ | 30d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 10⭐ | 51d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 9⭐ | 76d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | -| 7⭐ | 71d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | +| 7⭐ | 72d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 6⭐ | 58d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 5⭐ | 87d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | | 3⭐ | 50d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | diff --git a/cves/2024/CVE-2024-32507.md b/cves/2024/CVE-2024-32507.md index 36c0eeb5d16..5397d7140b3 100644 --- a/cves/2024/CVE-2024-32507.md +++ b/cves/2024/CVE-2024-32507.md @@ -15,4 +15,4 @@ Improper Privilege Management vulnerability in Hamid Alinia – idehweb Login wi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/4minx/CVE-2024-32507 diff --git a/cves/2026/CVE-2026-82270.md b/cves/2026/CVE-2026-82270.md new file mode 100644 index 00000000000..5838e1aeeff --- /dev/null +++ b/cves/2026/CVE-2026-82270.md @@ -0,0 +1,18 @@ +### [CVE-2026-82270](https://www.cve.org/CVERecord?id=CVE-2026-82270) +**Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*** +![](https://img.shields.io/static/v1?label=Vendor&message=Portkey-AI&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=gateway&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=1.14.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Server-Side%20Request%20Forgery%20%28SSRF%29&color=brightgreen) + +### Description + +Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal services and exfiltrate provider API keys. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/swordBone/portkey-security-research diff --git a/docs/hero.svg b/docs/hero.svg index e3a5d792f37..51933538ffa 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 85,050 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 174,492 + fill="#e6edf3" letter-spacing="-0.5">174,493 CVES INDEXED85,048 + fill="#2f81f7" letter-spacing="-0.5">85,050 WITH POCS1,236 diff --git a/docs/social-card.svg b/docs/social-card.svg index 83e4a512d36..4951f959a00 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 174,492 + fill="#e6edf3" letter-spacing="-0.5">174,493 CVES INDEXED85,048 + fill="#2f81f7" letter-spacing="-0.5">85,050 WITH POCS1,236 diff --git a/docs/stats.json b/docs/stats.json index 6656a294c9b..4d44b104ff6 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1236, - "total_cves": 174492, - "with_pocs": 85048 + "total_cves": 174493, + "with_pocs": 85050 } diff --git a/index/github.txt b/index/github.txt index 7140ccff068..b844c0b89e8 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27450,3 +27450,5 @@ CVE-2026-111823 - https://github.com/murrez/CVE-2026-111823 CVE-2025-43529 - https://github.com/mingxian947/ios CVE-2026-64560 - https://github.com/ChaYeWuu/prague-CVE-2026-64560-OS4.0 CVE-2026-64560 - https://github.com/totsiaw/cve-2026-64560-rmx6699 +CVE-2026-82270 - https://github.com/swordBone/portkey-security-research +CVE-2024-32507 - https://github.com/4minx/CVE-2024-32507 diff --git a/index/releases/2022.json b/index/releases/2022.json index 4a915a7127d..d6c51eb39d9 100644 --- a/index/releases/2022.json +++ b/index/releases/2022.json @@ -3826,7 +3826,7 @@ "CVE-2022-26134 github:rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb"}, "CVE-2022-26134 github:reph0r/poc-exp?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reph0r/poc-exp"}, "CVE-2022-26134 github:reubensammut/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reubensammut/cve-2022-26134"}, -"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-17T10:08:08Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"26d9676bb35f03a3ce7e443b1788cdd36f7f3efe","imported":true,"pending":true,"pushed_at":"2026-10-16T23:02:31Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, +"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-17T15:08:21Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"26d9676bb35f03a3ce7e443b1788cdd36f7f3efe","imported":true,"pending":true,"pushed_at":"2026-10-17T12:01:24Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, "CVE-2022-26134 github:secjia/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/secjia/CVE-2022-26134"}, "CVE-2022-26134 github:shamo0/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shamo0/CVE-2022-26134"}, "CVE-2022-26134 github:shiftsansan/cve-2022-26134-console?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shiftsansan/CVE-2022-26134-Console"}, diff --git a/index/releases/2024.json b/index/releases/2024.json index cdc10c07b3d..09359b1a200 100644 --- a/index/releases/2024.json +++ b/index/releases/2024.json @@ -4932,6 +4932,7 @@ "CVE-2024-32480 github:advisories/ghsa-jh57-j3vq-h438?#":{"basis":"unknown","cve":"CVE-2024-32480","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-jh57-j3vq-h438"}, "CVE-2024-32480 github:librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438?#":{"basis":"unknown","cve":"CVE-2024-32480","imported":true,"released":null,"url":"https://github.com/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438"}, "CVE-2024-32481 github:vyperlang/vyper/security/advisories/GHSA-ppx5-q359-pvwj?#":{"basis":"unknown","cve":"CVE-2024-32481","imported":true,"released":null,"url":"https://github.com/vyperlang/vyper/security/advisories/GHSA-ppx5-q359-pvwj"}, +"CVE-2024-32507 github:4minx/cve-2024-32507?#":{"basis":"commit","blobs":["b12fa550afe458042c6613eedbb1576f9605289f"],"checked":"2026-10-17T15:08:21Z","commit":"2026-10-17T14:56:08Z","commit_verified":true,"created":"2026-10-17T14:55:18Z","cve":"CVE-2024-32507","head":"84a3774939c875d5ed743272adb49be5aade3248","history_paths":["poc_lwp_reset.py"],"history_version":3,"paths":["poc_lwp_reset.py"],"pushed_at":"2026-10-17T14:56:09Z","released":"2026-10-17T14:56:08Z","repo":1423438399,"rev":"d27d3f8ee46238ab08fe8a73c28f4f2b5e5851bda6faaff347c64da8aa4144cb","seen":"2026-10-17T15:08:30Z","sha":"84a3774939c875d5ed743272adb49be5aade3248","url":"https://github.com/4minx/CVE-2024-32507"}, "CVE-2024-3251 github:0xalmighty/vulnerability-research/blob/main/SourceCodester/CLMS/SourceCodester-CLMS-SQLi.md?#":{"basis":"unknown","cve":"CVE-2024-3251","imported":true,"released":null,"url":"https://github.com/0xAlmighty/Vulnerability-Research/blob/main/SourceCodester/CLMS/SourceCodester-CLMS-SQLi.md"}, "CVE-2024-3252 github:thisissuperann/vul/blob/main/Internship-Portal-Management-System-01?#":{"basis":"unknown","cve":"CVE-2024-3252","imported":true,"released":null,"url":"https://github.com/thisissuperann/Vul/blob/main/Internship-Portal-Management-System-01"}, "CVE-2024-3253 github:thisissuperann/vul/blob/main/Internship-Portal-Management-System-03?#":{"basis":"unknown","cve":"CVE-2024-3253","imported":true,"released":null,"url":"https://github.com/thisissuperann/Vul/blob/main/Internship-Portal-Management-System-03"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index 72daea2017b..59f52ab16a1 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -8098,7 +8098,7 @@ "CVE-2026-43499 github:k-o-n-t-o-r/ghostlock-sabrina?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/k-o-n-t-o-r/ghostlock-sabrina"}, "CVE-2026-43499 github:kananosa/cve-2026-43499-for-xiaomi-17t-chagall?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall"}, "CVE-2026-43499 github:kelsidavis/lg-g710tm-unlock?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/Kelsidavis/lg-g710tm-unlock"}, -"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-17T10:09:26Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"75f651141f7aec5e1dafcb461f5ced295cbd5ab3","imported":true,"pending":true,"pushed_at":"2026-10-16T09:19:16Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, +"CVE-2026-43499 github:knowlily/cve-2026-43499-honor?#":{"basis":"pending","checked":"2026-10-17T15:09:43Z","created":"2026-08-15T15:18:19Z","cve":"CVE-2026-43499","head":"75f651141f7aec5e1dafcb461f5ced295cbd5ab3","imported":true,"pending":true,"pushed_at":"2026-10-16T09:19:16Z","released":null,"repo":1335190790,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, "CVE-2026-43499 github:kurtulusakyuz/ionstack_s21?#":{"basis":"unknown","cve":"CVE-2026-43499","imported":true,"released":null,"url":"https://github.com/kurtulusakyuz/IonStack_S21"}, "CVE-2026-43499 github:l-1124/rootmyvivo-exploit?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-Exploit"}, "CVE-2026-43499 github:l-1124/rootmyvivo-rs?#":{"basis":"unknown","cve":"CVE-2026-43499","gone":"2026-10-10T10:18:28Z","imported":true,"released":null,"url":"https://github.com/L-1124/RootMyVivo-rs"}, @@ -12323,7 +12323,7 @@ "CVE-2026-75604 github:hackspeak/cve-2026-75604?#":{"basis":"unknown","cve":"CVE-2026-75604","imported":true,"released":null,"url":"https://github.com/HackSpeak/CVE-2026-75604"}, "CVE-2026-75604 github:rafabd1/cve-2026-75604-poc?#":{"basis":"created","blobs":["362c73dec89bf1a84bd9ec7f436f52c38535417f"],"checked":"2026-10-06T22:58:33Z","commit":"2026-08-25T18:13:45Z","commit_verified":true,"created":"2026-08-25T19:06:37Z","cve":"CVE-2026-75604","head":"371b778eaf590610b0d4648a6385beb8e3950976","history_paths":["poc.py"],"history_version":3,"imported":true,"paths":["poc.py"],"pushed_at":"2026-08-28T02:53:24Z","released":"2026-08-25T19:06:37Z","repo":1346528145,"rev":"8e306ee94c850bc5d79a903a7ba13d35eba2d89c2c7151800dfe17a68fa2942f","sha":"3e0f72d14e447956a8685283e247ec8cb51c35cc","url":"https://github.com/rafabd1/CVE-2026-75604-poc"}, "CVE-2026-75604 github:rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/nextjs_unauth_rce_cve_2026_75604.rb?#":{"basis":"unknown","cve":"CVE-2026-75604","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/nextjs_unauth_rce_cve_2026_75604.rb"}, -"CVE-2026-75604 github:zerodayevil/cve-2026-75604-poc?#":{"basis":"pending","checked":"2026-10-17T10:09:26Z","created":"2026-09-28T19:01:45Z","cve":"CVE-2026-75604","head":"e2579790bb672f2a9f2406d1111c8d68ad034a1f","pending":true,"pushed_at":"2026-10-16T18:34:44Z","released":null,"repo":1393667095,"seen":"2026-10-16T21:09:15Z","url":"https://github.com/ZeroDayEvil/CVE-2026-75604-PoC"}, +"CVE-2026-75604 github:zerodayevil/cve-2026-75604-poc?#":{"basis":"pending","checked":"2026-10-17T15:09:43Z","created":"2026-09-28T19:01:45Z","cve":"CVE-2026-75604","head":"e2579790bb672f2a9f2406d1111c8d68ad034a1f","pending":true,"pushed_at":"2026-10-16T18:34:44Z","released":null,"repo":1393667095,"seen":"2026-10-16T21:09:15Z","url":"https://github.com/ZeroDayEvil/CVE-2026-75604-PoC"}, "CVE-2026-75616 github:totekuh/cve-2026-75616?#":{"basis":"unknown","cve":"CVE-2026-75616","imported":true,"released":null,"url":"https://github.com/totekuh/CVE-2026-75616"}, "CVE-2026-75650 github:abraxas/cve-2026-75650?#":{"basis":"created","blobs":["611aaaea97d23c0e5f799dfb7a2fa661258026f1","d0a934504309d327b7fb7b883e37364d241594db"],"checked":"2026-10-07T01:08:04Z","commit":"2026-09-26T02:32:25Z","commit_verified":true,"created":"2026-09-26T02:32:55Z","cve":"CVE-2026-75650","head":"5319aea56040ec67c9f3acdc2ca803b33b194566","history_paths":["CVE-2026-75650-Abraxas-Labs.py"],"history_version":3,"imported":true,"paths":["CVE-2026-75650-Abraxas-Labs.py","lab/poc.py"],"pushed_at":"2026-10-07T01:06:50Z","released":"2026-09-26T02:32:55Z","repo":1388400437,"rev":"e260c9ee9f3f6016a6b421ce6f50a0a0399e66ca094a7d75696b4971a799078c","sha":"cdec23e4ddc3c5429f70e1c9de9fc7cfa326200d","url":"https://github.com/abraxas/CVE-2026-75650"}, "CVE-2026-75650 github:ctiresource/vendor-verbiage?#":{"basis":"unknown","cve":"CVE-2026-75650","imported":true,"released":null,"url":"https://github.com/CTIresource/Vendor-Verbiage"}, @@ -13109,6 +13109,7 @@ "CVE-2026-8225 github:open5gs/open5gs/issues/4440?#":{"basis":"unknown","cve":"CVE-2026-8225","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4440"}, "CVE-2026-8226 github:open5gs/open5gs/issues/4441?#":{"basis":"unknown","cve":"CVE-2026-8226","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4441"}, "CVE-2026-8227 github:wudipjq/my_vuln/blob/main/Wavlink/vuln_6/6.md?#":{"basis":"unknown","cve":"CVE-2026-8227","imported":true,"released":null,"url":"https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_6/6.md"}, +"CVE-2026-82270 github:swordbone/portkey-security-research?#":{"basis":"unknown","cve":"CVE-2026-82270","released":null,"seen":"2026-10-17T15:11:38Z","url":"https://github.com/swordBone/portkey-security-research"}, "CVE-2026-8228 github:wudipjq/my_vuln/blob/main/Wavlink/vuln_7/7.md?#":{"basis":"unknown","cve":"CVE-2026-8228","imported":true,"released":null,"url":"https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_7/7.md"}, "CVE-2026-82286 github:biitts/cve-2026-82286-gpt-crawler-arbitrary-file-write?#":{"basis":"unknown","cve":"CVE-2026-82286","imported":true,"released":null,"url":"https://github.com/BiiTts/CVE-2026-82286-gpt-crawler-Arbitrary-File-Write"}, "CVE-2026-8229 github:wudipjq/my_vuln/blob/main/Wavlink/vuln_8/8.md?#":{"basis":"unknown","cve":"CVE-2026-8229","imported":true,"released":null,"url":"https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_8/8.md"}, diff --git a/index/trending.json b/index/trending.json index 7f258277ded..64b0d389ce2 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,7 @@ [ { "year": 2026, - "stars": 137, + "stars": 145, "name": "CVE-2026-41940-PoC", "url": "https://github.com/sakidekin/CVE-2026-41940-PoC", "artifact": false, @@ -10,7 +10,7 @@ "pushed": "2026-10-15T12:44:31Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 6.77077349285481, + "score": 7.097964640777745, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -27,7 +27,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.9815865940972017, + "score": 2.9800911426715353, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -44,7 +44,7 @@ "pushed": "2026-10-13T16:00:26Z", "released": "2026-10-13T16:00:26Z", "basis": "commit", - "score": 2.089915189070353, + "score": 2.0775047429161284, "trending": true, "created": "2026-10-13T09:39:17Z", "cve": "CVE-2026-97229", @@ -61,7 +61,7 @@ "pushed": "2026-10-16T18:34:43Z", "released": null, "basis": "pending", - "score": 1.851093942222674, + "score": 1.821657687909638, "trending": true, "created": "2026-09-28T19:01:45Z", "cve": "CVE-2026-75604", @@ -78,7 +78,7 @@ "pushed": "2026-10-16T18:03:54Z", "released": null, "basis": "pending", - "score": 1.694747315384792, + "score": 1.668105195128511, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -95,7 +95,7 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 1.6824302435299607, + "score": 1.6562507586306452, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", @@ -112,7 +112,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5870161804164813, + "score": 1.5864757783259007, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -129,7 +129,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.305651885318409, + "score": 1.3036660712779977, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -146,7 +146,7 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 1.1981766815428736, + "score": 1.1908078919389204, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", @@ -163,7 +163,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.1871737605581116, + "score": 1.1865649712745236, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -180,7 +180,7 @@ "pushed": "2026-10-15T14:24:25Z", "released": "2026-10-15T14:24:25Z", "basis": "commit", - "score": 0.9039897108812885, + "score": 0.8951914638241025, "trending": true, "created": "2026-10-15T14:19:23Z", "cve": "CVE-2026-64560", @@ -197,7 +197,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7956420428326572, + "score": 0.79500771124756, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -214,7 +214,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7655991519735262, + "score": 0.7649835572986808, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -231,7 +231,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.704116683432084, + "score": 0.7037314946063595, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -248,7 +248,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.695316778221936, + "score": 0.6942555710297443, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -265,7 +265,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.6500261562540932, + "score": 0.649598558752547, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -282,7 +282,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5635526400566199, + "score": 0.5633342195861675, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -299,7 +299,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.46112803373752165, + "score": 0.4605739981668039, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -316,7 +316,7 @@ "pushed": "2026-10-10T01:25:53Z", "released": "2026-10-10T01:25:43Z", "basis": "commit", - "score": 0.4580545798743973, + "score": 0.456479986301233, "trending": true, "created": "2026-10-10T01:12:57Z", "cve": "CVE-2026-107181", @@ -333,7 +333,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.4336120425354347, + "score": 0.4331172930103732, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -350,7 +350,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.2729393812760186, + "score": 0.2724159349407413, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -367,7 +367,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.15493545058149563, + "score": 0.15417604967287254, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -384,7 +384,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.12324064642626757, + "score": 0.12318789593326031, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -401,7 +401,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07730555933599546, + "score": 0.0772335003920926, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -418,7 +418,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.06775849894663007, + "score": 0.06772044390036308, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -435,7 +435,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.04443491368747614, + "score": 0.044419032689346806, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -452,7 +452,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.03756342422411103, + "score": 0.03754830296004725, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -469,7 +469,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.03712479604874921, + "score": 0.03710648175827446, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -486,7 +486,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.028292602068673345, + "score": 0.02828315822110661, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -503,7 +503,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.02344466217949601, + "score": 0.02343398561028713, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -520,7 +520,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.023369087620819497, + "score": 0.02336136446120989, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -537,7 +537,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.02052100584613362, + "score": 0.020509323779534242, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -554,7 +554,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.018140776853944635, + "score": 0.018132116498190846, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -571,7 +571,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.015001791615643325, + "score": 0.014996345807919123, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -588,7 +588,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.0146725862396728, + "score": 0.01466742640418778, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -605,7 +605,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.013896867561817638, + "score": 0.013892333002250961, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -622,12 +622,30 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.009708234526926892, + "score": 0.009707531289833794, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077", "kev": false }, + { + "year": 2024, + "stars": 0, + "name": "CVE-2024-32507", + "url": "https://github.com/4minx/CVE-2024-32507", + "artifact": false, + "source": "github.com", + "desc": "CVE-2024-32507: login-with-phone-number Unauthenticated Password Reset (Account Takeover)", + "pushed": null, + "released": "2026-10-17T14:56:08Z", + "basis": "commit", + "score": 0.0, + "trending": false, + "created": "2026-10-17T14:55:18Z", + "cve": "CVE-2024-32507", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 0, @@ -789,23 +807,5 @@ "cve": "CVE-2026-38526", "kev": false, "landed": true - }, - { - "year": 2026, - "stars": 0, - "name": "CVE-2026-33017-Langflow-RCE", - "url": "https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE", - "artifact": false, - "source": "github.com", - "desc": "CVE-2026-33017 Exploit / by infrar3d", - "pushed": null, - "released": "2026-10-16T22:12:17Z", - "basis": "commit", - "score": 0.0, - "trending": false, - "created": "2026-10-16T22:10:44Z", - "cve": "CVE-2026-33017", - "kev": true, - "landed": true } ]