diff --git a/README.md b/README.md index 28ff6372d09..11e467ae4f4 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-23%20Sep%202026%2011%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609231108)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C327-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C204-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609231108)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-23%20Sep%202026%2012%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609231207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C328-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C205-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609231207)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,8 +12,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 8h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | -| 2⭐ | 21h ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… | +| 0⭐ | 9h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 2⭐ | 15h ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 | +| 2⭐ | 22h ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… | | 1⭐ | 2d ago | [CVE-2025-6325_CVE-2025-6327](https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327) | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… | | 2⭐ | 2d ago | [CVE-2026-90817](https://github.com/murrez/CVE-2026-90817) | Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation. | | 2⭐ | 3d ago | [CVE-2026-89274](https://github.com/murrez/CVE-2026-89274) | PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe… | @@ -21,17 +22,16 @@ | 1⭐ | 3d ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… | | 1⭐ | 3d ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… | | 0⭐ | 4d ago | [CVE-2025-20260](https://github.com/keyuraghao/CVE-2025-20260) | First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump… | -| 2⭐ | 5d ago | [CVE-2026-93453](https://github.com/Faceless0x7/CVE-2026-93453) | CVE-2026-93453 Exploit - SOGo password reset link poisoning via attacker-controlled Origin header, enabling… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 5⭐ | 4h ago | [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress | -| 18⭐ | 13h ago | [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | -| 11⭐ | 15h ago | [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | -| 825⭐ | 18h ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | -| 5⭐ | 20h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within… | +| 5⭐ | 5h ago | [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress | +| 18⭐ | 14h ago | [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | +| 12⭐ | 16h ago | [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | +| 825⭐ | 19h ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | +| 5⭐ | 21h ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within… | | 21⭐ | 1d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | | 4⭐ | 1d ago | [CVE-2026-94129](https://github.com/lzty/CVE-2026-94129) | A POC for CVE-2026-94129 | | 4⭐ | 1d ago | [CVE-2026-94128](https://github.com/lzty/CVE-2026-94128) | POC for CVE-2026-94128 | diff --git a/cves/2026/CVE-2026-94127.md b/cves/2026/CVE-2026-94127.md new file mode 100644 index 00000000000..d1fd0b4a98d --- /dev/null +++ b/cves/2026/CVE-2026-94127.md @@ -0,0 +1,29 @@ +### [CVE-2026-94127](https://www.cve.org/CVERecord?id=CVE-2026-94127) +**BIG-IP APM OAuth vulnerability** +![](https://img.shields.io/static/v1?label=Vendor&message=F5&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=BIG-IP&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=21.1.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=17.5.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=17.1.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-122%20Heap-based%20Buffer%20Overflow&color=brightgreen) +![](https://img.shields.io/static/v1?label=CISA%20KEV&message=Known%20Exploited&color=red) + +### Description + +When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth Client / Resource Server (without OAuth authorization server profiles configured) are not affected by this vulnerability. + +Impact: +This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure. + + + + +Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/FurkanKAYAPINAR/CVE-2026-94127 diff --git a/docs/hero.svg b/docs/hero.svg index 3a52a184d14..7017665bb84 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 83,328 CVEs with public proof-of-concept exploits"> @@ -19,13 +19,13 @@ pocindex.io 172,637 + fill="#e6edf3" letter-spacing="-0.5">172,638 CVES INDEXED83,327 + fill="#2f81f7" letter-spacing="-0.5">83,328 WITH POCS1,204 + fill="#f85149" letter-spacing="-0.5">1,205 KNOWN EXPLOITED diff --git a/docs/social-card.svg b/docs/social-card.svg index 1e95c7e3378..7199ddd8a94 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,13 +20,13 @@ 172,637 + fill="#e6edf3" letter-spacing="-0.5">172,638 CVES INDEXED83,327 + fill="#2f81f7" letter-spacing="-0.5">83,328 WITH POCS1,204 + fill="#f85149" letter-spacing="-0.5">1,205 KNOWN EXPLOITED diff --git a/docs/stats.json b/docs/stats.json index 8275503857b..707eeb315d2 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { - "kev": 1204, - "total_cves": 172637, - "with_pocs": 83327 + "kev": 1205, + "total_cves": 172638, + "with_pocs": 83328 } diff --git a/index/github.txt b/index/github.txt index 9c0268f341e..e311bc8da77 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26817,3 +26817,4 @@ CVE-2026-14856 - https://github.com/jonastrikex/CVE-2026-14856-TastyIgniter CVE-2026-18322 - https://github.com/I3IT/CVE-2026-18322 CVE-2026-77262 - https://github.com/romain-deperne/CVE-2026-77262 CVE-2026-87902 - https://github.com/zer0dayf/CVE-2026-87902 +CVE-2026-94127 - https://github.com/FurkanKAYAPINAR/CVE-2026-94127 diff --git a/index/trending.json b/index/trending.json index 73b36c31442..96468489f85 100644 --- a/index/trending.json +++ b/index/trending.json @@ -23,7 +23,7 @@ }, { "year": 2026, - "stars": 11, + "stars": 12, "name": "cve-2026-87902-poc", "url": "https://github.com/ressl/cve-2026-87902-poc", "desc": "PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab", @@ -484,6 +484,18 @@ "kev": true, "landed": true }, + { + "year": 2026, + "stars": 2, + "name": "CVE-2026-23921", + "url": "https://github.com/qucklecrabik/CVE-2026-23921", + "desc": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921", + "pushed": "2026-09-22T20:10:52Z", + "created": "2026-09-22T20:10:03Z", + "cve": "CVE-2026-23921", + "kev": false, + "landed": true + }, { "year": 2026, "stars": 2, @@ -579,17 +591,5 @@ "cve": "CVE-2025-20260", "kev": false, "landed": true - }, - { - "year": 2026, - "stars": 2, - "name": "CVE-2026-93453", - "url": "https://github.com/Faceless0x7/CVE-2026-93453", - "desc": "CVE-2026-93453 Exploit - SOGo password reset link poisoning via attacker-controlled Origin header, enabling password reset token interception and account takeover.", - "pushed": "2026-09-18T02:00:00Z", - "created": "2026-09-18T06:40:15Z", - "cve": "CVE-2026-93453", - "kev": false, - "landed": true } ]