From f2ad51f8e5d2a24c5c736aa45b43a64a9f4b052f Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Tue, 6 Oct 2026 20:10:04 +0000 Subject: [PATCH] Trending CVEs update 2026-10-06 20:10 :robot: --- README.md | 12 ++++++------ cves/2026/CVE-2026-57967.md | 28 ++++++++++++++++++++++++++++ docs/hero.svg | 6 +++--- docs/social-card.svg | 4 ++-- docs/stats.json | 4 ++-- index/github.txt | 2 +- 6 files changed, 42 insertions(+), 14 deletions(-) create mode 100644 cves/2026/CVE-2026-57967.md diff --git a/README.md b/README.md index 1888e5f5925..1dc60fc01a6 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-06%20Oct%202026%2019%3A09%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610061909)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C186-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610061909)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-06%20Oct%202026%2020%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610062007)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C187-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C221-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610062007)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,8 +14,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 6h ago | [CVE-2025-34069](https://github.com/cppghoul/CVE-2025-34069) | Kerio Control 9.4.5 Auth Bypass PoC | -| 0⭐ | 22h ago | [CVE-2025-14659-DIR-860L](https://github.com/PeterLinccl/CVE-2025-14659-DIR-860L) | A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown… | +| 0⭐ | 7h ago | [CVE-2025-34069](https://github.com/cppghoul/CVE-2025-34069) | Kerio Control 9.4.5 Auth Bypass PoC | +| 0⭐ | 23h ago | [CVE-2025-14659-DIR-860L](https://github.com/PeterLinccl/CVE-2025-14659-DIR-860L) | A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown… | | 0⭐ | 1d ago | [CVE-2025-54769](https://github.com/tunahantekeoglu/CVE-2025-54769) | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded… | | 0⭐ | 2d ago | KEV [React2Shell_CVE-2025-55182](https://github.com/RashmithaDeSilva/React2Shell_CVE-2025-55182) | A Proof-of-Concept implementation for CVE-2025-55182, a critical unauthenticated Remote Code Execution… | | 0⭐ | 2d ago | [CVE-2025-60787](https://github.com/diamorphine666/CVE-2025-60787) | MotionEye OS Command Injection (CVE-2025-60787) | @@ -29,7 +29,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 5⭐ | 3h ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | +| 5⭐ | 4h ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | | 8⭐ | 2d ago | [cve-2026-103956-loom-unauth](https://github.com/abraxas/cve-2026-103956-loom-unauth) | CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is… | | 277⭐ | 3d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | | 826⭐ | 3d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | @@ -84,7 +84,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 3⭐ | 71d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | -| 6⭐ | 75d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | +| 6⭐ | 76d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | diff --git a/cves/2026/CVE-2026-57967.md b/cves/2026/CVE-2026-57967.md new file mode 100644 index 00000000000..5757a5a9562 --- /dev/null +++ b/cves/2026/CVE-2026-57967.md @@ -0,0 +1,28 @@ +### [CVE-2026-57967](https://www.cve.org/CVERecord?id=CVE-2026-57967) +**Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment** +![](https://img.shields.io/static/v1?label=Vendor&message=Apache%20Software%20Foundation&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Apache%20Artemis&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Apache%20ActiveMQ%20Artemis&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=2.50.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=1.0.0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-306%20Missing%20authentication%20for%20critical%20function&color=brightgreen) + +### Description + +An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session. + + + +This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. + + + +Users are recommended to upgrade to version 2.57.0, which fixes the issue. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/c0dem4sters/CVE-2026-57967 diff --git a/docs/hero.svg b/docs/hero.svg index bc697a97fda..2ad6dbacdd1 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 84,187 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 173,503 + fill="#e6edf3" letter-spacing="-0.5">173,504 CVES INDEXED84,186 + fill="#2f81f7" letter-spacing="-0.5">84,187 WITH POCS1,221 diff --git a/docs/social-card.svg b/docs/social-card.svg index 6051e10c745..30ebcc4e994 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 173,503 + fill="#e6edf3" letter-spacing="-0.5">173,504 CVES INDEXED84,186 + fill="#2f81f7" letter-spacing="-0.5">84,187 WITH POCS1,221 diff --git a/docs/stats.json b/docs/stats.json index 3d08059e31b..48f89863e6e 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1221, - "total_cves": 173503, - "with_pocs": 84186 + "total_cves": 173504, + "with_pocs": 84187 } diff --git a/index/github.txt b/index/github.txt index 56fa95a4286..398ef3fa93c 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27211,4 +27211,4 @@ CVE-2026-65330 - https://github.com/xanstomper/coreprobe CVE-2011-4825 - https://github.com/XavLimSG/Zenphoto-1.4.1.4-CVE-2011-4825-RCE CVE-2021-42013 - https://github.com/lmcewen9/cve-2021-42013 CVE-2024-1234 - https://github.com/hansaes/VulnClaw -CVE-2026-86238 - https://github.com/CyberShailendra1/Online-Examination-System-Project +CVE-2026-57967 - https://github.com/c0dem4sters/CVE-2026-57967