From e6e56d32e797cf970bc1ca15594a11d8064df6df Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Wed, 2 Sep 2026 14:23:45 +0000 Subject: [PATCH] Trending CVEs update 2026-09-02 14:23 :robot: --- README.md | 40 ++++++++++++++++++++-------------------- index/github.txt | 19 ------------------- index/trending.json | 32 ++++++++++++++++---------------- 3 files changed, 36 insertions(+), 55 deletions(-) diff --git a/README.md b/README.md index 66c9827fd72..3d449a821cb 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-02%20Sep%202026%2009%3A28%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609020928)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C468-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C181-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609020928)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-02%20Sep%202026%2014%3A21%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609021421)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C468-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C181-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609021421)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,15 +12,15 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 22h ago | [CVE-2025-39401](https://github.com/katranSefa/CVE-2025-39401) | Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows… | -| 2⭐ | 22h ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | -| 0⭐ | 1d ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… | -| 0⭐ | 1d ago | KEV [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… | +| 0⭐ | 20m ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… | +| 0⭐ | 1d ago | [CVE-2025-39401](https://github.com/katranSefa/CVE-2025-39401) | Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows… | +| 2⭐ | 1d ago | [CVE-2026-18963](https://github.com/EQSTLab/CVE-2026-18963) | Keycloak reset-credentials flow bypass | +| 0⭐ | 2d ago | KEV [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… | | 10⭐ | 2d ago | KEV [cve-2025-21479-iqoo11pro](https://github.com/Type010/cve-2025-21479-iqoo11pro) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 2⭐ | 2d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | -| 0⭐ | 2d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | +| 0⭐ | 3d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | | 2⭐ | 3d ago | [CVE-2026-19745](https://github.com/drbloop2000/CVE-2026-19745) | Learn how I found my first two CVEs by pure accident. | -| 2⭐ | 3d ago | KEV [PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078) | Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078 | +| 2⭐ | 4d ago | KEV [PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078) | Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078 | | 0⭐ | 4d ago | [cve-2025-29927](https://github.com/kuyrathdaro/cve-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | ## Trending in 2026 @@ -28,25 +28,25 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 10⭐ | 3d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | -| 6⭐ | 6d ago | [CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735) | CVE 1-day in http.sys | -| 18⭐ | 6d ago | KEV [CVE-2026-72898](https://github.com/EQSTLab/CVE-2026-72898) | Metabase SQLi | +| 10⭐ | 6d ago | [CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735) | CVE 1-day in http.sys | +| 19⭐ | 6d ago | KEV [CVE-2026-72898](https://github.com/EQSTLab/CVE-2026-72898) | Metabase SQLi | | 4⭐ | 6d ago | [CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478) | GitLab Code injection | | 3⭐ | 6d ago | KEV [CVE-2026-21962](https://github.com/zeetee1235/CVE-2026-21962) | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion… | | 4⭐ | 7d ago | KEV [CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570) | Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc) | | 82⭐ | 7d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | | 5⭐ | 7d ago | KEV [CVE-2026-73570](https://github.com/HORKimhab/CVE-2026-73570) | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional… | -| 3⭐ | 7d ago | [CVE-2026-32475-PoC](https://github.com/Boreas37/CVE-2026-32475-PoC) | PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python. | +| 3⭐ | 8d ago | [CVE-2026-32475-PoC](https://github.com/Boreas37/CVE-2026-32475-PoC) | PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python. | | 13⭐ | 8d ago | [Keycloak_CVE-2026-18963_PoC](https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC) | This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). | | 19⭐ | 8d ago | [CVE-2026-18963-keycloak](https://github.com/Red-Darkin/CVE-2026-18963-keycloak) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… | | 4⭐ | 8d ago | [CVE-2026-20079](https://github.com/CyberAuth/CVE-2026-20079) | Python proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center. | | 4⭐ | 11d ago | KEV [CVE-2026-65400](https://github.com/acheong08/CVE-2026-65400) | Apple MacOS Screen Sharing Arbitrary File read/write -> RCE | -| 163⭐ | 11d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | +| 164⭐ | 11d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | | 4⭐ | 11d ago | KEV [CVE-2026-65400-poc](https://github.com/panchocosil/CVE-2026-65400-poc) | Read-only PoC for CVE-2026-65400 - macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file… | -| 6⭐ | 11d ago | KEV [CVE-2026-34910-PoC](https://github.com/Boreas37/CVE-2026-34910-PoC) | CVE-2026-34910/34909 - UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW) | -| 53⭐ | 11d ago | [CVE-2026-64638-PoC-XSS2Shell-](https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-) | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain - PoC exploit + defensive audit tool + nuclei… | +| 6⭐ | 12d ago | KEV [CVE-2026-34910-PoC](https://github.com/Boreas37/CVE-2026-34910-PoC) | CVE-2026-34910/34909 - UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW) | +| 53⭐ | 12d ago | [CVE-2026-64638-PoC-XSS2Shell-](https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-) | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain - PoC exploit + defensive audit tool + nuclei… | | 37⭐ | 12d ago | [CVE-2026-18963-Exploit](https://github.com/Snizi/CVE-2026-18963-Exploit) | Exploit for KeyCloak CVE-2026-18963 | -| 434⭐ | 12d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | -| 531⭐ | 12d ago | KEV [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | +| 441⭐ | 12d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | +| 531⭐ | 13d ago | KEV [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | ## Trending in 2025 @@ -58,14 +58,14 @@ | 6⭐ | 26d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 6⭐ | 31d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | | 4⭐ | 42d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | -| 4⭐ | 44d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | -| 5⭐ | 46d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | +| 4⭐ | 45d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads | +| 5⭐ | 47d ago | KEV [CVE-2025-8110-gogs-poc](https://github.com/Shirouuu/CVE-2025-8110-gogs-poc) | PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink | | 7⭐ | 56d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… | | 4⭐ | 61d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… | | 3⭐ | 61d ago | KEV [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) | | 4⭐ | 66d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 68d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 | -| 14⭐ | 81d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | +| 14⭐ | 82d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | | 14⭐ | 87d ago | KEV [FreePBX-CVE-2025-57819-RCE](https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE) | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable… | | 7⭐ | 87d ago | KEV [CVE-2025-57819-poc](https://github.com/b4sh2/CVE-2025-57819-poc) | CVE-2025-57819 -> rce | @@ -80,8 +80,8 @@ | 3⭐ | 18d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | | 3⭐ | 34d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | | 3⭐ | 73d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | -| 7⭐ | 81d ago | [CVE-2024-27983-nodejs-http2](https://github.com/lirantal/CVE-2024-27983-nodejs-http2) | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on… | -| 4⭐ | 87d ago | [CVE-2024-1065](https://github.com/kuzeyardabulut/CVE-2024-1065) | Page Cache Exploit for CVE-2024-1065 | +| 7⭐ | 82d ago | [CVE-2024-27983-nodejs-http2](https://github.com/lirantal/CVE-2024-27983-nodejs-http2) | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on… | +| 4⭐ | 88d ago | [CVE-2024-1065](https://github.com/kuzeyardabulut/CVE-2024-1065) | Page Cache Exploit for CVE-2024-1065 | ## Trending in 2023 diff --git a/index/github.txt b/index/github.txt index 121b4a22a46..05ad9a739eb 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26844,32 +26844,13 @@ CVE-2026-39987 - https://github.com/Ghxstsec/CVE-2026-39987 CVE-2026-43499 - https://github.com/abdgalaxy36-code/rmgp-complete-handoff CVE-2026-82221 - https://github.com/gabrielftanaka/CVE-2026-82221-PoC CVE-2026-84361 - https://github.com/Saku0512/CVE-2026-84361-poc -CVE-2017-0781 - https://github.com/x3ero0/android712-blueborne -CVE-2018-15133 - https://github.com/pwnedshell/Larascript CVE-2018-17240 - https://github.com/BBge/CVE-2018-17240 -CVE-2018-7600 - https://github.com/firefart/CVE-2018-7600 CVE-2019-10068 - https://github.com/crukz404/CVE-2019-10068-PoC -CVE-2020-8597 - https://github.com/winmin/CVE-2020-8597 -CVE-2020-8816 - https://github.com/martinsohn/CVE-2020-8816 -CVE-2021-3560 - https://github.com/winmin/CVE-2021-3560 -CVE-2021-44228 - https://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform -CVE-2021-44228 - https://github.com/nikolas-charalambidis/cve-2021-44228 -CVE-2022-24713 - https://github.com/jpeisach/CVE-2022-24713-POC -CVE-2022-31897 - https://github.com/angelopioamirante/CVE-2022-31897 -CVE-2022-33075 - https://github.com/angelopioamirante/CVE-2022-33075 -CVE-2023-23638 - https://github.com/X1r0z/dubbo-rce -CVE-2023-23752 - https://github.com/yusinomy/CVE-2023-23752 -CVE-2023-36664 - https://github.com/jeanchpt/CVE-2023-36664 CVE-2024-1086 - https://github.com/Notselwyn/CVE-2024-1086 -CVE-2024-21006 - https://github.com/d3fudd/CVE-2024-21006_PoC CVE-2024-21907 - https://github.com/iSecurityTW/seal-security-nuget-demo-net7 -CVE-2024-38063 - https://github.com/Sachinart/CVE-2024-38063-poc -CVE-2024-38063 - https://github.com/brownpanda29/Cve-2024-38063 CVE-2024-4577 - https://github.com/11whoami99/CVE-2024-4577 CVE-2024-4577 - https://github.com/watchtowrlabs/CVE-2024-4577 CVE-2024-6387 - https://github.com/zgzhang/cve-2024-6387-poc -CVE-2025-31651 - https://github.com/gregk4sec/cve-2025-31651 -CVE-2025-4123 - https://github.com/NightBloodZ/CVE-2025-4123 CVE-2026-43499 - https://github.com/slapah/ghostlock-h8q CVE-2026-75604 - https://github.com/HackSpeak/CVE-2026-75604 CVE-2026-75604 - https://github.com/e4zyy/Project-CVE-2026-75604 diff --git a/index/trending.json b/index/trending.json index d9db3e01e8b..fcbb171a0b2 100644 --- a/index/trending.json +++ b/index/trending.json @@ -12,7 +12,7 @@ }, { "year": 2026, - "stars": 6, + "stars": 10, "name": "CVE-2026-62735", "url": "https://github.com/nhh9905/CVE-2026-62735", "desc": "CVE 1-day in http.sys", @@ -23,7 +23,7 @@ }, { "year": 2026, - "stars": 18, + "stars": 19, "name": "CVE-2026-72898", "url": "https://github.com/EQSTLab/CVE-2026-72898", "desc": "Metabase SQLi", @@ -144,7 +144,7 @@ }, { "year": 2026, - "stars": 163, + "stars": 164, "name": "CVE-2026-62911", "url": "https://github.com/hypnguyen1209/CVE-2026-62911", "desc": "POC pre-auth RCE on Exchange", @@ -199,7 +199,7 @@ }, { "year": 2026, - "stars": 434, + "stars": 441, "name": "CVE-2026-9830", "url": "https://github.com/opaxial/CVE-2026-9830", "desc": "CVE-2026-9830 Proof of Concept", @@ -527,6 +527,18 @@ "cve": "CVE-2022-29799", "kev": false }, + { + "year": 2025, + "stars": 0, + "name": "CVE-2025-69080", + "url": "https://github.com/AndrielSec/CVE-2025-69080", + "desc": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through <= 1.9.8.", + "pushed": "2026-09-02T14:03:02Z", + "created": "2026-08-31T21:00:26Z", + "cve": "CVE-2025-69080", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -551,18 +563,6 @@ "kev": false, "landed": true }, - { - "year": 2025, - "stars": 0, - "name": "CVE-2025-69080", - "url": "https://github.com/AndrielSec/CVE-2025-69080", - "desc": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through <= 1.9.8.", - "pushed": "2026-08-31T21:38:27Z", - "created": "2026-08-31T21:00:26Z", - "cve": "CVE-2025-69080", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 0,