From dc35db438aefb6172900a68227fae7e43eea8c5b Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Sun, 11 Oct 2026 04:11:52 +0000 Subject: [PATCH] Trending CVEs update 2026-10-11 04:11 :robot: --- README.md | 20 +++--- index/trending.json | 144 ++++++++++++++++++++++---------------------- 2 files changed, 82 insertions(+), 82 deletions(-) diff --git a/README.md b/README.md index 5edc60e0160..cf6a230e418 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2003%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610110307)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C368-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610110307)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-11%20Oct%202026%2004%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610110407)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C368-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610110407)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,13 +14,13 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 1h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… | -| 0⭐ | 3h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent | -| 0⭐ | 18h ago | [CVE-2026-102428](https://github.com/murrez/CVE-2026-102428) | CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi - order_field/order_direction… | -| 0⭐ | 18h ago | [CVE-2026-106445](https://github.com/murrez/CVE-2026-106445) | CVE-2026-106445 - Handlebars 4.0.0-4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f).… | -| 0⭐ | 18h ago | [CVE-2026-107806](https://github.com/murrez/CVE-2026-107806) | CVE-2026-107806 - nginx-ui 2.3.8-2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET… | -| 0⭐ | 22h ago | [CVE-2026-94503](https://github.com/Wayang1337/CVE-2026-94503) | Zombify <= 1.7.7 Unauthenticated Arbitrary File Upload | -| 0⭐ | 22h ago | [CVE-2026-85097](https://github.com/Wayang1337/CVE-2026-85097) | Bricksforge <= 3.1.8.9 Unauthenticated Arbitrary File Upload | +| 0⭐ | 2h ago | [RuoYi-CVE-2026-38812-UNFIX](https://github.com/YYF1337/RuoYi-CVE-2026-38812-UNFIX) | RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the… | +| 0⭐ | 4h ago | [CVE-2026-108592-poc](https://github.com/asvorg/CVE-2026-108592-poc) | CVE-2026-108592 - Environment Variable Exposure PoC in mini-swe-agent | +| 0⭐ | 19h ago | [CVE-2026-102428](https://github.com/murrez/CVE-2026-102428) | CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi - order_field/order_direction… | +| 0⭐ | 19h ago | [CVE-2026-106445](https://github.com/murrez/CVE-2026-106445) | CVE-2026-106445 - Handlebars 4.0.0-4.7.9 RCE via Function.prototype.constructor bypass (GHSA-p8wg-vrv2-v86f).… | +| 0⭐ | 19h ago | [CVE-2026-107806](https://github.com/murrez/CVE-2026-107806) | CVE-2026-107806 - nginx-ui 2.3.8-2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET… | +| 0⭐ | 23h ago | [CVE-2026-94503](https://github.com/Wayang1337/CVE-2026-94503) | Zombify <= 1.7.7 Unauthenticated Arbitrary File Upload | +| 0⭐ | 23h ago | [CVE-2026-85097](https://github.com/Wayang1337/CVE-2026-85097) | Bricksforge <= 3.1.8.9 Unauthenticated Arbitrary File Upload | | 1⭐ | 1d ago | [telegram-cve-2026-107181](https://github.com/SeanDishman/telegram-cve-2026-107181) | Telegram CVE-2026-107181 | | 1⭐ | 1d ago | [CVE-2026-84520](https://github.com/csrXamfi/CVE-2026-84520) | AppleFDEKeyStore poc | | 0⭐ | 1d ago | [CVE-2025-34071](https://github.com/cppghoul/CVE-2025-34071) | RCE in Kerio Control 9.4.5 via unsigned firmware update. | @@ -41,13 +41,13 @@ | 108⭐ | 68d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… | | 40⭐ | 17d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | | 39⭐ | 18d ago | KEV [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | -| 31⭐ | 13d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | | 108⭐ | 84d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… | +| 31⭐ | 13d ago | [CVE-2026-34990](https://github.com/predyy/CVE-2026-34990) | CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc. | | 35⭐ | 4d ago | KEV [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | | 26⭐ | 12d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 43⭐ | 29d ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | -| 23⭐ | 12d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | | 86⭐ | 89d ago | [Android-CVE-2026-43499](https://github.com/CakesTwix/Android-CVE-2026-43499) | Android version CVE-2026-43499 tester | +| 23⭐ | 12d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | | 30⭐ | 19d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | ## Trending in 2025 diff --git a/index/trending.json b/index/trending.json index 8e346b1df1d..8b52616ca30 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.235171624474737, + "score": 3.2333722262098346, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -27,7 +27,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.7357136361221372, + "score": 1.731803987520292, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -44,7 +44,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.670632574137686, + "score": 1.6700258121745206, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -61,7 +61,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.2768469808532386, + "score": 1.2761188630084241, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -78,7 +78,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.9103475813882942, + "score": 0.9094794788824251, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -95,7 +95,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.8891824357480008, + "score": 0.8871691157116578, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -112,7 +112,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.8770877378321431, + "score": 0.8762426756603717, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -129,7 +129,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.7627982685266165, + "score": 0.7623302747472929, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -146,7 +146,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7249960185214143, + "score": 0.7244459724508159, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -163,7 +163,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5997268966785256, + "score": 0.59947617831051, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -180,7 +180,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.5714265122544777, + "score": 0.5705064706750267, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -197,29 +197,12 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.5306344190383703, + "score": 0.5298374208622679, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", "kev": true }, - { - "year": 2026, - "stars": 31, - "name": "CVE-2026-34990", - "url": "https://github.com/predyy/CVE-2026-34990", - "artifact": false, - "source": "github.com", - "desc": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.", - "pushed": "2026-09-27T19:48:09Z", - "released": "2026-09-27T19:47:52Z", - "basis": "commit", - "score": 0.5203913833814184, - "trending": true, - "created": "2026-09-27T19:41:06Z", - "cve": "CVE-2026-34990", - "kev": false - }, { "year": 2026, "stars": 108, @@ -231,12 +214,29 @@ "pushed": "2026-07-18T21:09:06Z", "released": null, "basis": "pending", - "score": 0.5197419417250801, + "score": 0.5195648277080902, "trending": true, "created": "2026-07-14T14:21:27Z", "cve": "CVE-2026-43499", "kev": false }, + { + "year": 2026, + "stars": 31, + "name": "CVE-2026-34990", + "url": "https://github.com/predyy/CVE-2026-34990", + "artifact": false, + "source": "github.com", + "desc": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.", + "pushed": "2026-09-27T19:48:09Z", + "released": "2026-09-27T19:47:52Z", + "basis": "commit", + "score": 0.5193368645271765, + "trending": true, + "created": "2026-09-27T19:41:06Z", + "cve": "CVE-2026-34990", + "kev": false + }, { "year": 2026, "stars": 35, @@ -248,7 +248,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.47521831628669337, + "score": 0.4745066709468913, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -265,7 +265,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.44511091077577064, + "score": 0.4441833490805711, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -282,7 +282,7 @@ "pushed": "2026-09-11T16:38:12Z", "released": "2026-09-11T15:54:48Z", "basis": "commit", - "score": 0.4252276082634005, + "score": 0.42482246830479276, "trending": true, "created": "2026-09-11T15:24:22Z", "cve": "CVE-2026-85706", @@ -299,12 +299,29 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.4013701585067638, + "score": 0.40005410934948826, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", "kev": false }, + { + "year": 2026, + "stars": 86, + "name": "Android-CVE-2026-43499", + "url": "https://github.com/CakesTwix/Android-CVE-2026-43499", + "artifact": false, + "source": "github.com", + "desc": "Android version CVE-2026-43499 tester", + "pushed": "2026-07-13T13:32:26Z", + "released": null, + "basis": "pending", + "score": 0.39657916732396675, + "trending": true, + "created": "2026-07-13T13:31:55Z", + "cve": "CVE-2026-43499", + "kev": false + }, { "year": 2026, "stars": 23, @@ -316,29 +333,12 @@ "pushed": "2026-09-28T09:24:46Z", "released": "2026-09-28T09:24:46Z", "basis": "commit", - "score": 0.3971878865972288, + "score": 0.3963498804069995, "trending": true, "created": "2026-09-27T18:15:38Z", "cve": "CVE-2026-88771", "kev": true }, - { - "year": 2026, - "stars": 86, - "name": "Android-CVE-2026-43499", - "url": "https://github.com/CakesTwix/Android-CVE-2026-43499", - "artifact": false, - "source": "github.com", - "desc": "Android version CVE-2026-43499 tester", - "pushed": "2026-07-13T13:32:26Z", - "released": null, - "basis": "pending", - "score": 0.396706420578451, - "trending": true, - "created": "2026-07-13T13:31:55Z", - "cve": "CVE-2026-43499", - "kev": false - }, { "year": 2026, "stars": 30, @@ -350,7 +350,7 @@ "pushed": "2026-09-21T15:02:37Z", "released": "2026-09-21T15:02:37Z", "basis": "commit", - "score": 0.3914446828797935, + "score": 0.39089081715736473, "trending": true, "created": "2026-09-21T15:02:05Z", "cve": "CVE-2026-43786", @@ -367,7 +367,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.13206964010347444, + "score": 0.13200804701669555, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -384,7 +384,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.09077910169311591, + "score": 0.09067405738807222, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -401,7 +401,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.07430900517964655, + "score": 0.07426200972587638, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -418,7 +418,7 @@ "pushed": null, "released": "2026-10-10T01:25:43Z", "basis": "commit", - "score": 0.0649003726939293, + "score": 0.06400686923157349, "trending": false, "created": "2026-10-10T01:12:57Z", "cve": "CVE-2026-107181", @@ -436,7 +436,7 @@ "pushed": null, "released": "2026-10-10T00:42:30Z", "basis": "commit", - "score": 0.06425062109764756, + "score": 0.06337847920779477, "trending": false, "created": "2026-10-10T00:40:47Z", "cve": "CVE-2026-84520", @@ -454,7 +454,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.04693740322975993, + "score": 0.04691176809999411, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -471,7 +471,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.041826454076267054, + "score": 0.041810440722279005, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -488,7 +488,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.04008106343117308, + "score": 0.040063591428421856, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -505,7 +505,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.02984758030433406, + "score": 0.029836966002897588, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -522,7 +522,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.02524699384638465, + "score": 0.02523437817556388, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -539,7 +539,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.02463622674565169, + "score": 0.02462756059330667, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -556,7 +556,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.022535151949115196, + "score": 0.02252067820687149, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -573,7 +573,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.019605231719544546, + "score": 0.01959491025613627, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -590,7 +590,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.019341407591405922, + "score": 0.019334784435371892, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -607,7 +607,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.019046620198564908, + "score": 0.019040239474531616, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -624,7 +624,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.015903751660987345, + "score": 0.015897557056157707, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -641,7 +641,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.015525271004384281, + "score": 0.015519429496654257, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -658,7 +658,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.014640224345715927, + "score": 0.014635144690388352, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -675,7 +675,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.009818224105916545, + "score": 0.009817510631161966, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",