diff --git a/README.md b/README.md index 3be3f216801..1d05a600f9d 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-21%20Oct%202026%2004%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610210407)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C256-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C235-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610210407)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-21%20Oct%202026%2005%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610210507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C256-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C235-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610210507)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,29 +14,29 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 3⭐ | 2h ago | [CVE-2026-98260-android](https://github.com/yanoo1222/CVE-2026-98260-android) | a complete exploit chain for CVE-2026-982600, | -| 0⭐ | 4h ago | [cve-2018-16763](https://github.com/fahise/cve-2018-16763) | cve-2018-16763-exploit | -| 0⭐ | 4h ago | [cve-2026-62911](https://github.com/fahise/cve-2026-62911) | cve-2026-62911-exploit | +| 3⭐ | 3h ago | [CVE-2026-98260-android](https://github.com/yanoo1222/CVE-2026-98260-android) | a complete exploit chain for CVE-2026-982600, | +| 0⭐ | 5h ago | [cve-2018-16763](https://github.com/fahise/cve-2018-16763) | cve-2018-16763-exploit | +| 0⭐ | 5h ago | [cve-2026-62911](https://github.com/fahise/cve-2026-62911) | cve-2026-62911-exploit | | 0⭐ | 8h ago | [CVE-2026-87690-POC](https://github.com/h00die/CVE-2026-87690-POC) | Exploit and writeup for CVE-2026-87690 | -| 0⭐ | 9h ago | [CVE-2026-113468](https://github.com/yuwkaaa/CVE-2026-113468) | forgeable PayPal payment callback in TYPO3 EXT:shop | -| 0⭐ | 9h ago | [CVE-2026-112071](https://github.com/yuwkaaa/CVE-2026-112071) | unauthenticated order cancellation in TYPO3 EXT:shop | -| 2⭐ | 11h ago | [CVE-2026-105810](https://github.com/M0ud4/CVE-2026-105810) | CVE-2026-105810 TP-Link Tapo C320WS authenticated connectAp stack overflow (RCE as root) | -| 0⭐ | 13h ago | [CVE-2026-106173](https://github.com/0xBlackash/CVE-2026-106173) | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… | +| 0⭐ | 10h ago | [CVE-2026-113468](https://github.com/yuwkaaa/CVE-2026-113468) | forgeable PayPal payment callback in TYPO3 EXT:shop | +| 0⭐ | 10h ago | [CVE-2026-112071](https://github.com/yuwkaaa/CVE-2026-112071) | unauthenticated order cancellation in TYPO3 EXT:shop | +| 2⭐ | 12h ago | [CVE-2026-105810](https://github.com/M0ud4/CVE-2026-105810) | CVE-2026-105810 TP-Link Tapo C320WS authenticated connectAp stack overflow (RCE as root) | +| 0⭐ | 14h ago | [CVE-2026-106173](https://github.com/0xBlackash/CVE-2026-106173) | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… | | 0⭐ | 15h ago | [CVE-2026-85313](https://github.com/oscerd/CVE-2026-85313) | Reproducer for CVE-2026-85313 - Apache Camel camel-jetty enableCORS credentialed any-origin CORS (CWE-942).… | -| 4⭐ | 15h ago | [CVE-2026-106173](https://github.com/horizon3ai/CVE-2026-106173) | Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet… | +| 5⭐ | 16h ago | [CVE-2026-106173](https://github.com/horizon3ai/CVE-2026-106173) | Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 532⭐ | 10h ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | +| 532⭐ | 11h ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | | 69⭐ | 1d ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | | 477⭐ | 61d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 335⭐ | 85d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | | 28⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/ZeroDayEvil/CVE-2026-41940-PoC) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that… | | 59⭐ | 7d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | | 96⭐ | 21d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | -| 188⭐ | 59d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | +| 188⭐ | 60d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | | 18⭐ | 1d ago | [CVE-2026-64560-public](https://github.com/Feng1586/CVE-2026-64560-public) | CVE-2026-64560 staged security research package | | 35⭐ | 7d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC | | 24⭐ | 4d ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | diff --git a/index/releases/2023.json b/index/releases/2023.json index 438d3a99fb4..2a92748908d 100644 --- a/index/releases/2023.json +++ b/index/releases/2023.json @@ -2120,7 +2120,7 @@ "CVE-2023-24329 github:h4r335hr/cve-2023-24329-poc?#":{"basis":"unknown","cve":"CVE-2023-24329","imported":true,"released":null,"url":"https://github.com/H4R335HR/CVE-2023-24329-PoC"}, "CVE-2023-24329 github:pandante-central/cve-2023-24329-codeql-test?#":{"basis":"unknown","cve":"CVE-2023-24329","imported":true,"released":null,"url":"https://github.com/Pandante-Central/CVE-2023-24329-codeql-test"}, "CVE-2023-24329 github:pentestmano/cve-2023-24329-exploit?#":{"basis":"unknown","cve":"CVE-2023-24329","imported":true,"released":null,"url":"https://github.com/PenTestMano/CVE-2023-24329-Exploit"}, -"CVE-2023-24329 github:upwguyy/cve-2023-24329-poc?#":{"basis":"pending","checked":"2026-10-21T02:08:05Z","created":"2026-10-20T08:53:11Z","cve":"CVE-2023-24329","gone":"2026-10-21T04:11:36Z","head":"eb78e92851e40956d4b57a43d36dfed55394e540","pending":true,"pushed_at":"2026-10-20T12:56:51Z","released":null,"repo":1426752587,"seen":"2026-10-20T16:09:33Z","url":"https://github.com/UpWguyy/CVE-2023-24329-PoC"}, +"CVE-2023-24329 github:upwguyy/cve-2023-24329-poc?#":{"basis":"pending","checked":"2026-10-21T02:08:05Z","created":"2026-10-20T08:53:11Z","cve":"CVE-2023-24329","gone":"2026-10-21T05:10:34Z","head":"eb78e92851e40956d4b57a43d36dfed55394e540","pending":true,"pushed_at":"2026-10-20T12:56:51Z","released":null,"repo":1426752587,"seen":"2026-10-20T16:09:33Z","url":"https://github.com/UpWguyy/CVE-2023-24329-PoC"}, "CVE-2023-24330 github:caoyebo/cve/tree/main/dlink%20882%20-%20CVE-2023-24330?#":{"basis":"unknown","cve":"CVE-2023-24330","imported":true,"released":null,"url":"https://github.com/caoyebo/CVE/tree/main/dlink%20882%20-%20CVE-2023-24330"}, "CVE-2023-24331 github:caoyebo/cve/tree/main/Dlink%20816%20-%20CVE-2023-24331?#":{"basis":"unknown","cve":"CVE-2023-24331","imported":true,"released":null,"url":"https://github.com/caoyebo/CVE/tree/main/Dlink%20816%20-%20CVE-2023-24331"}, "CVE-2023-24332 github:caoyebo/cve/tree/main/Tenda%20AC6%20-%20CVE-2023-24332?#":{"basis":"unknown","cve":"CVE-2023-24332","imported":true,"released":null,"url":"https://github.com/caoyebo/CVE/tree/main/Tenda%20AC6%20-%20CVE-2023-24332"}, diff --git a/index/trending.json b/index/trending.json index b562dca0f8e..d8fd253fca4 100644 --- a/index/trending.json +++ b/index/trending.json @@ -10,7 +10,7 @@ "pushed": "2026-10-20T17:26:07Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 15.279785298928418, + "score": 15.213644986284756, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -27,7 +27,7 @@ "pushed": "2026-10-19T13:57:31Z", "released": null, "basis": "pending", - "score": 3.8295044808339966, + "score": 3.7873697934852153, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -44,7 +44,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.8603933191703317, + "score": 2.859066036641157, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -61,7 +61,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5517924399239416, + "score": 1.5512943848442797, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -78,7 +78,7 @@ "pushed": "2026-10-19T07:44:03Z", "released": null, "basis": "pending", - "score": 1.453656311958437, + "score": 1.439099300698841, "trending": true, "created": "2026-09-28T18:52:52Z", "cve": "CVE-2026-41940", @@ -95,7 +95,7 @@ "pushed": "2026-10-13T16:00:26Z", "released": "2026-10-13T16:00:26Z", "basis": "commit", - "score": 1.4251781407847643, + "score": 1.4203552635198688, "trending": true, "created": "2026-10-13T09:39:17Z", "cve": "CVE-2026-97229", @@ -112,7 +112,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.1590841926741349, + "score": 1.157623942199357, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -129,7 +129,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.1439752471804487, + "score": 1.14343321819714, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -146,7 +146,7 @@ "pushed": "2026-10-19T05:30:19Z", "released": null, "basis": "pending", - "score": 0.9137613308805631, + "score": 0.9048960923459669, "trending": true, "created": "2026-10-19T05:30:01Z", "cve": "CVE-2026-64560", @@ -163,7 +163,7 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 0.8575293902290878, + "score": 0.8545682770775161, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", @@ -180,7 +180,7 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 0.7927369942768852, + "score": 0.7885518931075028, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", @@ -197,7 +197,7 @@ "pushed": "2026-10-15T14:24:25Z", "released": "2026-10-15T14:24:25Z", "basis": "commit", - "score": 0.7522645309124911, + "score": 0.7489740836160778, "trending": true, "created": "2026-10-15T14:19:23Z", "cve": "CVE-2026-64560", @@ -214,7 +214,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7456614429104463, + "score": 0.7451294923692162, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -231,7 +231,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7171258136558192, + "score": 0.7166102387858494, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -248,7 +248,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.6666877346909151, + "score": 0.6663520707646955, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -265,7 +265,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.6291264988445219, + "score": 0.6283315831246935, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -282,7 +282,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.6158883505182409, + "score": 0.6155201313879577, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -299,7 +299,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5456542047038607, + "score": 0.5454559593283043, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -316,7 +316,7 @@ "pushed": "2026-10-17T07:35:29Z", "released": "2026-10-17T06:21:55Z", "basis": "created", - "score": 0.5324497734680081, + "score": 0.5293364451107743, "trending": true, "created": "2026-10-17T06:21:55Z", "cve": "CVE-2026-99999", @@ -333,7 +333,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.419063727814027, + "score": 0.41863252605952356, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -341,7 +341,7 @@ }, { "year": 2026, - "stars": 4, + "stars": 5, "name": "CVE-2026-106173", "url": "https://github.com/horizon3ai/CVE-2026-106173", "artifact": false, @@ -350,7 +350,7 @@ "pushed": null, "released": "2026-10-20T12:43:34Z", "basis": "commit", - "score": 0.30532756364629765, + "score": 0.3751307696647641, "trending": false, "created": "2026-10-20T12:29:09Z", "cve": "CVE-2026-106173", @@ -368,7 +368,7 @@ "pushed": null, "released": "2026-10-21T01:16:50Z", "basis": "commit", - "score": 0.2994024252420935, + "score": 0.2919627504433457, "trending": false, "created": "2026-10-18T21:04:03Z", "cve": "CVE-2026-98260", @@ -386,7 +386,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.23544682541155387, + "score": 0.23508783316836304, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -403,7 +403,7 @@ "pushed": null, "released": "2026-10-20T17:07:42Z", "basis": "created", - "score": 0.16584367436029063, + "score": 0.16265877484506708, "trending": false, "created": "2026-10-20T17:07:42Z", "cve": "CVE-2026-105810", @@ -421,7 +421,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.11892655741235329, + "score": 0.11887908544873126, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -438,7 +438,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.11143627392834403, + "score": 0.1111007967063146, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -455,7 +455,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07168809900517245, + "score": 0.07162922069054461, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -472,7 +472,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.06468629375413922, + "score": 0.06465292999743298, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -489,7 +489,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.04312709620126104, + "score": 0.04311260319952923, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -506,7 +506,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.03632367879643535, + "score": 0.03631000206155158, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -523,7 +523,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.03563648462207398, + "score": 0.03562021289984958, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -540,7 +540,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.02257163360367369, + "score": 0.02256207755875255, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -557,7 +557,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.019578599521967322, + "score": 0.0195683727606996, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -574,7 +574,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.017435904693934336, + "score": 0.017428186195529622, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -591,7 +591,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.014552431147011276, + "score": 0.014547466902936339, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -608,7 +608,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.014246317533339905, + "score": 0.014241605020441389, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -625,7 +625,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.011256564452809157, + "score": 0.011255771528809662, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",