From f9cecd2fb77fde7dc42d3e6891d42c9b683d4acd Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Thu, 8 Oct 2026 15:12:43 +0000 Subject: [PATCH] Trending CVEs update 2026-10-08 15:12 :robot: --- README.md | 32 ++++---- cves/2026/CVE-2026-100389.md | 2 +- cves/2026/CVE-2026-102372.md | 2 +- cves/2026/CVE-2026-102373.md | 2 +- cves/2026/CVE-2026-102374.md | 2 +- cves/2026/CVE-2026-42945.md | 1 + cves/2026/CVE-2026-46300.md | 1 + index/github.txt | 6 ++ index/releases/2026.json | 20 +++-- index/trending.json | 144 +++++++++++++++++------------------ 10 files changed, 113 insertions(+), 99 deletions(-) diff --git a/README.md b/README.md index 679c13a5d46..71e99dec612 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-08%20Oct%202026%2014%3A09%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610081409)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C192-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C225-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610081409)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-08%20Oct%202026%2015%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610081508)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C192-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C225-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610081508)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,23 +14,21 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 2h ago | KEV [CVE-2026-48908](https://github.com/theendofabbys/CVE-2026-48908) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files,… | -| 0⭐ | 4h ago | KEV [wso2_cve-2026-5430_lab](https://github.com/getdrive/wso2_cve-2026-5430_lab) | Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход… | -| 0⭐ | 4h ago | [Keycloak-CVE-2026-18963-Exploit](https://github.com/hardeep-sudo/Keycloak-CVE-2026-18963-Exploit) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… | -| 0⭐ | 5h ago | [-CVE-2026-18963-POC](https://github.com/SonOfABot/-CVE-2026-18963-POC) | PoC for keycloak 1.26 vulnerability | -| 1⭐ | 5h ago | [CVE-2026-21589](https://github.com/murrez/CVE-2026-21589) | CVE-2026-21589 - Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC:… | -| 0⭐ | 8h ago | [CVE-2026-21589](https://github.com/rxsklife/CVE-2026-21589) | CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight… | -| 0⭐ | 8h ago | [CVE-2026-105192](https://github.com/rxsklife/CVE-2026-105192) | CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache… | -| 0⭐ | 10h ago | [CVE-2026-61424](https://github.com/theendofabbys/CVE-2026-61424) | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The… | -| 0⭐ | 10h ago | KEV [CVE-2026-56291](https://github.com/theendofabbys/CVE-2026-56291) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla… | -| 0⭐ | 14h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… | +| 0⭐ | 3h ago | KEV [CVE-2026-48908](https://github.com/theendofabbys/CVE-2026-48908) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files,… | +| 0⭐ | 5h ago | KEV [wso2_cve-2026-5430_lab](https://github.com/getdrive/wso2_cve-2026-5430_lab) | Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход… | +| 0⭐ | 5h ago | [Keycloak-CVE-2026-18963-Exploit](https://github.com/hardeep-sudo/Keycloak-CVE-2026-18963-Exploit) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… | +| 0⭐ | 6h ago | [-CVE-2026-18963-POC](https://github.com/SonOfABot/-CVE-2026-18963-POC) | PoC for keycloak 1.26 vulnerability | +| 1⭐ | 6h ago | [CVE-2026-21589](https://github.com/murrez/CVE-2026-21589) | CVE-2026-21589 - Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC:… | +| 0⭐ | 9h ago | [CVE-2026-21589](https://github.com/rxsklife/CVE-2026-21589) | CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight… | +| 0⭐ | 9h ago | [CVE-2026-105192](https://github.com/rxsklife/CVE-2026-105192) | CVE-2026-105192 is a critical (CVSS 9.8) vulnerability in LMCache, an open-source distributed key-value cache… | +| 0⭐ | 11h ago | [CVE-2026-61424](https://github.com/theendofabbys/CVE-2026-61424) | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The… | +| 0⭐ | 11h ago | KEV [CVE-2026-56291](https://github.com/theendofabbys/CVE-2026-56291) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla… | +| 0⭐ | 15h ago | [CVE-2025-58226-PoC](https://github.com/QASIM1401/CVE-2025-58226-PoC) | CVE-2025-58226 - 3D FlipBook <= 1.16.16 unauthenticated sensitive data exposure: two-stage PoC (enumerate ->… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 826⭐ | 4d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | -| 467⭐ | 4d ago | KEV [cve-2026-41940-PoC](https://github.com/yasouxken/cve-2026-41940-PoC) | A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing… | | 498⭐ | 48d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 96⭐ | 9d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… | | 332⭐ | 72d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | @@ -38,7 +36,7 @@ | 48⭐ | 9d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | | 92⭐ | 26d ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | | 88⭐ | 26d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… | -| 104⭐ | 43d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | +| 105⭐ | 43d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | | 86⭐ | 34d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | | 40⭐ | 14d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | | 108⭐ | 65d ago | [SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit](https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit) | Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a… | @@ -48,7 +46,9 @@ | 35⭐ | 1d ago | KEV [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | | 25⭐ | 10d ago | KEV [CVE-2026-85706](https://github.com/EQSTLab/CVE-2026-85706) | GitLab Unauthenticated Arbitrary File Read | | 10⭐ | 2d ago | [watchTowr-vs-Atlassian-CVE-2026-21589](https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | +| 23⭐ | 10d ago | KEV [watchTowr-vs-Citrix-Netscaler-CVE-2026-88771](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771) | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue… | | 9⭐ | 1d ago | [CVE-2026-21589](https://github.com/MarcusProgram/CVE-2026-21589) | h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management… | +| 42⭐ | 26d ago | KEV [cve-2026-85706](https://github.com/guneykabel/cve-2026-85706) | Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions:… | ## Trending in 2025 @@ -59,7 +59,7 @@ | 10⭐ | 42d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | | 7⭐ | 49d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | | 8⭐ | 67d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | -| 7⭐ | 62d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | +| 7⭐ | 63d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 3⭐ | 41d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 3⭐ | 51d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 4⭐ | 78d ago | KEV [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell | @@ -89,7 +89,7 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 7⭐ | 12h ago | [CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver… | +| 7⭐ | 13h ago | [CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) | CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver… | diff --git a/cves/2026/CVE-2026-100389.md b/cves/2026/CVE-2026-100389.md index 1aab2bc2918..d299b9e2ead 100644 --- a/cves/2026/CVE-2026-100389.md +++ b/cves/2026/CVE-2026-100389.md @@ -15,4 +15,4 @@ GestSup versions before 3.2.62 contain a remote code execution vulnerability in - https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiizN/cves diff --git a/cves/2026/CVE-2026-102372.md b/cves/2026/CVE-2026-102372.md index 7c3b9bb4e15..d186c0fe27b 100644 --- a/cves/2026/CVE-2026-102372.md +++ b/cves/2026/CVE-2026-102372.md @@ -15,4 +15,4 @@ GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in th - https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiizN/cves diff --git a/cves/2026/CVE-2026-102373.md b/cves/2026/CVE-2026-102373.md index 92b9cdac07c..dc006089565 100644 --- a/cves/2026/CVE-2026-102373.md +++ b/cves/2026/CVE-2026-102373.md @@ -15,4 +15,4 @@ GestSup versions before 3.2.62 fail to validate ticket ownership when loading co - https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiizN/cves diff --git a/cves/2026/CVE-2026-102374.md b/cves/2026/CVE-2026-102374.md index 260fd16141f..0316da90341 100644 --- a/cves/2026/CVE-2026-102374.md +++ b/cves/2026/CVE-2026-102374.md @@ -15,4 +15,4 @@ GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerabili - https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiizN/cves diff --git a/cves/2026/CVE-2026-42945.md b/cves/2026/CVE-2026-42945.md index 2f4f1e01d08..122b26dad08 100644 --- a/cves/2026/CVE-2026-42945.md +++ b/cves/2026/CVE-2026-42945.md @@ -46,3 +46,4 @@ No PoCs from references. - https://github.com/leojaguaribe/cve-zerolab - https://github.com/likecq/Nginx-Rift - https://github.com/dinosn/cve-2026-42945-nginx32-lab/blob/f6529346a40cfe915dea492cb493692509e54ea4/exploit/remote_bruteforce.py +- https://github.com/porcumarcooo/THM-CVE-2026-42945-Nginx-Rift-Exploit diff --git a/cves/2026/CVE-2026-46300.md b/cves/2026/CVE-2026-46300.md index 428736302ed..c756cc63a0e 100644 --- a/cves/2026/CVE-2026-46300.md +++ b/cves/2026/CVE-2026-46300.md @@ -44,6 +44,7 @@ No PoCs from references. - https://github.com/nonameuserosint-hue/Fragnesia-go - https://github.com/1neptune/Fragnesia - https://github.com/0xdeadroot/fragnesia-python-exploit +- https://github.com/porcumarcooo/THM-CVE-2026-46300-Fragnesia-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52591 diff --git a/index/github.txt b/index/github.txt index 62c5dd6d708..94cad6e8eeb 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27340,3 +27340,9 @@ CVE-2022-22965 - https://github.com/osungjinwoo/CVE-2022-22965 CVE-2026-43499 - https://github.com/THORBHAIxTRUSTED/RootMyVivo-Exploit CVE-2026-48908 - https://github.com/theendofabbys/CVE-2026-48908 CVE-2025-62215 - https://github.com/Hu2ie/CVE-2025-62215-Windows-Kernel---Elevation-of-Privilege +CVE-2026-100389 - https://github.com/SpiizN/cves +CVE-2026-102372 - https://github.com/SpiizN/cves +CVE-2026-102373 - https://github.com/SpiizN/cves +CVE-2026-102374 - https://github.com/SpiizN/cves +CVE-2026-42945 - https://github.com/porcumarcooo/THM-CVE-2026-42945-Nginx-Rift-Exploit +CVE-2026-46300 - https://github.com/porcumarcooo/THM-CVE-2026-46300-Fragnesia-Exploit diff --git a/index/releases/2026.json b/index/releases/2026.json index e9465c749a1..0c7ce2aaad1 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -195,6 +195,7 @@ "CVE-2026-100372 https://hackmd.io/@leediay/S1AIRjzqfx":{"basis":"unknown","cve":"CVE-2026-100372","imported":true,"released":null,"url":"https://hackmd.io/@leediay/S1AIRjzqfx"}, "CVE-2026-100373 https://gist.github.com/naif-alfardan/8a69e0648e11b07abe63f949346179c1":{"basis":"unknown","cve":"CVE-2026-100373","imported":true,"released":null,"url":"https://gist.github.com/naif-alfardan/8a69e0648e11b07abe63f949346179c1"}, "CVE-2026-100382 github:nth347/mediawiki-cve-2026-100382?#":{"basis":"created","blobs":["0a96222475ff08a34f35b8972ea6cf978b819f05"],"checked":"2026-10-06T22:58:33Z","commit":"2026-09-27T15:20:01Z","commit_verified":true,"created":"2026-09-27T15:31:44Z","cve":"CVE-2026-100382","head":"207c8115eae2209d07f51a6cfef178fc32982b74","history_paths":["exploit.py"],"history_version":3,"imported":true,"paths":["exploit.py"],"pushed_at":"2026-09-27T15:52:43Z","released":"2026-09-27T15:31:44Z","repo":1391042181,"rev":"8b0589820b56b2ee68e8428689c2f59ef1ec550a8798f311f59f336e929fc9c4","sha":"207c8115eae2209d07f51a6cfef178fc32982b74","url":"https://github.com/nth347/mediawiki-CVE-2026-100382"}, +"CVE-2026-100389 github:spiizn/cves?#":{"basis":"unknown","cve":"CVE-2026-100389","released":null,"seen":"2026-10-08T15:12:21Z","url":"https://github.com/SpiizN/cves"}, "CVE-2026-100389 https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue":{"basis":"unknown","cve":"CVE-2026-100389","imported":true,"released":null,"url":"https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/"}, "CVE-2026-10050 github:advisories/ghsa-2fvj-hgj9-j2gr?#":{"basis":"unknown","cve":"CVE-2026-10050","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-2fvj-hgj9-j2gr"}, "CVE-2026-100520 github:wvllxe/cve-2026-100520-laranode-path-traversal?#":{"basis":"created","blobs":["27f03cfa4ec27b752775ab48a3655ee2282f08f5"],"checked":"2026-10-06T22:58:33Z","commit":"2026-10-02T09:02:05Z","commit_verified":true,"created":"2026-10-02T09:02:05Z","cve":"CVE-2026-100520","head":"ba4fb7db5b78c358941bebe238f1c67e4186bdba","history_paths":["poc.py"],"history_version":3,"imported":true,"paths":["poc.py"],"pushed_at":"2026-10-04T13:33:33Z","released":"2026-10-02T09:02:05Z","repo":1401420724,"rev":"567a8b9dfb2559967ebca4e82a0fa78cd0fefb18718e0da21be6d451b533c420","sha":"ba4fb7db5b78c358941bebe238f1c67e4186bdba","url":"https://github.com/wvllxe/CVE-2026-100520-laranode-path-traversal"}, @@ -321,9 +322,9 @@ "CVE-2026-10115 github:open5gs/open5gs/issues/4469?#":{"basis":"unknown","cve":"CVE-2026-10115","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4469"}, "CVE-2026-101159 https://wpscan.com/vulnerability/1eefa81e-6134-498b-9615-b9a42cd99749":{"basis":"unknown","cve":"CVE-2026-101159","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/1eefa81e-6134-498b-9615-b9a42cd99749/"}, "CVE-2026-10116 github:open5gs/open5gs/issues/4473?#":{"basis":"unknown","cve":"CVE-2026-10116","imported":true,"released":null,"url":"https://github.com/open5gs/open5gs/issues/4473"}, -"CVE-2026-101160 github:hasyros/cve-2026-101160-dos-wp-ultimate-review-rating?#":{"basis":"pending","checked":"2026-10-08T07:08:44Z","created":"2026-09-28T08:53:17Z","cve":"CVE-2026-101160","head":"2c0499b7892ed311597d0bfaa5c880a75e91854c","pending":true,"pushed_at":"2026-10-07T17:03:29Z","released":null,"repo":1392261004,"seen":"2026-10-07T22:09:16Z","url":"https://github.com/Hasyros/CVE-2026-101160-dos-wp-ultimate-review-rating"}, +"CVE-2026-101160 github:hasyros/cve-2026-101160-dos-wp-ultimate-review-rating?#":{"basis":"pending","checked":"2026-10-08T15:09:08Z","created":"2026-09-28T08:53:17Z","cve":"CVE-2026-101160","head":"2c0499b7892ed311597d0bfaa5c880a75e91854c","pending":true,"pushed_at":"2026-10-07T17:03:29Z","released":null,"repo":1392261004,"seen":"2026-10-07T22:09:16Z","url":"https://github.com/Hasyros/CVE-2026-101160-dos-wp-ultimate-review-rating"}, "CVE-2026-101160 https://wpscan.com/vulnerability/d728523f-1f33-470f-b64f-e9e286d29b6b":{"basis":"unknown","cve":"CVE-2026-101160","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/d728523f-1f33-470f-b64f-e9e286d29b6b/"}, -"CVE-2026-101161 github:hasyros/cve-2026-101161-dos-wp-ultimate-review-shortcode?#":{"basis":"pending","checked":"2026-10-08T07:08:44Z","created":"2026-09-28T08:53:23Z","cve":"CVE-2026-101161","head":"0eecd369b8ea2b24f3ae0f6ca791b29417f0a7ad","pending":true,"pushed_at":"2026-10-07T17:03:39Z","released":null,"repo":1392261153,"seen":"2026-10-07T22:09:08Z","url":"https://github.com/Hasyros/CVE-2026-101161-dos-wp-ultimate-review-shortcode"}, +"CVE-2026-101161 github:hasyros/cve-2026-101161-dos-wp-ultimate-review-shortcode?#":{"basis":"pending","checked":"2026-10-08T15:09:08Z","created":"2026-09-28T08:53:23Z","cve":"CVE-2026-101161","head":"0eecd369b8ea2b24f3ae0f6ca791b29417f0a7ad","pending":true,"pushed_at":"2026-10-07T17:03:39Z","released":null,"repo":1392261153,"seen":"2026-10-07T22:09:08Z","url":"https://github.com/Hasyros/CVE-2026-101161-dos-wp-ultimate-review-shortcode"}, "CVE-2026-101161 https://wpscan.com/vulnerability/c1c3e2d7-4833-4e51-a3c7-45e6d036a525":{"basis":"unknown","cve":"CVE-2026-101161","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/c1c3e2d7-4833-4e51-a3c7-45e6d036a525/"}, "CVE-2026-101162 github:hasyros/cve-2026-101162-xss-wp-ultimate-review?#":{"basis":"commit","blobs":["b9153980f17e27ee1d7ad209931da1effd245cea"],"checked":"2026-10-07T22:09:01Z","commit":"2026-10-07T17:03:45Z","commit_verified":true,"created":"2026-09-28T08:53:29Z","cve":"CVE-2026-101162","head":"ac24a27c9641264f97bc23b184dcaec2aa269dc1","history_paths":["exploit.py"],"history_version":3,"paths":["exploit.py"],"pushed_at":"2026-10-07T17:03:47Z","released":"2026-10-07T17:03:45Z","repo":1392261375,"rev":"4df2641580bd782a5a5e3ec5a84a60d1d193723fbe8a4c7bd90d3e3f9f420995","seen":"2026-10-07T22:09:08Z","sha":"ac24a27c9641264f97bc23b184dcaec2aa269dc1","url":"https://github.com/Hasyros/CVE-2026-101162-xss-wp-ultimate-review"}, "CVE-2026-101162 https://wpscan.com/vulnerability/b7a66222-4e30-4d70-9e2f-b91d421d285f":{"basis":"unknown","cve":"CVE-2026-101162","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/b7a66222-4e30-4d70-9e2f-b91d421d285f/"}, @@ -478,8 +479,11 @@ "CVE-2026-102366 github:linyuanyi1/cve-request-poc/blob/114b3f0d149e50a7678f591bf8043399fc9ac96c/mall4j/A03_admin_file_upload_xss.py?#":{"basis":"unknown","cve":"CVE-2026-102366","imported":true,"released":null,"url":"https://github.com/LinYuanyi1/cve-request-poc/blob/114b3f0d149e50a7678f591bf8043399fc9ac96c/mall4j/A03_admin_file_upload_xss.py"}, "CVE-2026-102367 github:linyuanyi1/cve-request-poc/blob/114b3f0d149e50a7678f591bf8043399fc9ac96c/mall4j/T02_refresh_token_enabled_bypass.py?#":{"basis":"unknown","cve":"CVE-2026-102367","imported":true,"released":null,"url":"https://github.com/LinYuanyi1/cve-request-poc/blob/114b3f0d149e50a7678f591bf8043399fc9ac96c/mall4j/T02_refresh_token_enabled_bypass.py"}, "CVE-2026-10237 github:renzortega1337/security-research-/blob/main/Authenticated%20SQL%20Injection%20in%20User%20Management.md?#":{"basis":"unknown","cve":"CVE-2026-10237","imported":true,"released":null,"url":"https://github.com/renzortega1337/Security-Research-/blob/main/Authenticated%20SQL%20Injection%20in%20User%20Management.md"}, +"CVE-2026-102372 github:spiizn/cves?#":{"basis":"unknown","cve":"CVE-2026-102372","released":null,"seen":"2026-10-08T15:12:21Z","url":"https://github.com/SpiizN/cves"}, "CVE-2026-102372 https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue":{"basis":"unknown","cve":"CVE-2026-102372","imported":true,"released":null,"url":"https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/"}, +"CVE-2026-102373 github:spiizn/cves?#":{"basis":"unknown","cve":"CVE-2026-102373","released":null,"seen":"2026-10-08T15:12:21Z","url":"https://github.com/SpiizN/cves"}, "CVE-2026-102373 https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue":{"basis":"unknown","cve":"CVE-2026-102373","imported":true,"released":null,"url":"https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/"}, +"CVE-2026-102374 github:spiizn/cves?#":{"basis":"unknown","cve":"CVE-2026-102374","released":null,"seen":"2026-10-08T15:12:21Z","url":"https://github.com/SpiizN/cves"}, "CVE-2026-102374 https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue":{"basis":"unknown","cve":"CVE-2026-102374","imported":true,"released":null,"url":"https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/"}, "CVE-2026-10239 github:jeecgboot/jeecgboot/issues/9610?#":{"basis":"unknown","cve":"CVE-2026-10239","imported":true,"released":null,"url":"https://github.com/jeecgboot/JeecgBoot/issues/9610"}, "CVE-2026-10240 github:jeecgboot/jeecgboot/issues/9609?#":{"basis":"unknown","cve":"CVE-2026-10240","imported":true,"released":null,"url":"https://github.com/jeecgboot/JeecgBoot/issues/9609"}, @@ -5310,7 +5314,7 @@ "CVE-2026-3180 https://www.exploit-db.com/exploits/52609":{"basis":"source","cve":"CVE-2026-3180","imported":true,"released":"2026-06-05","source":"2026-06-05","url":"https://www.exploit-db.com/exploits/52609"}, "CVE-2026-31801 github:advisories/ghsa-85jx-fm8m-x8c6?#":{"basis":"unknown","cve":"CVE-2026-31801","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-85jx-fm8m-x8c6"}, "CVE-2026-31802 github:advisories/ghsa-9ppj-qmqm-q256?#":{"basis":"unknown","cve":"CVE-2026-31802","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-9ppj-qmqm-q256"}, -"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-08T12:09:10Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"dbc9c4c29ed941f0dae3c5e4073e780c983235c1","imported":true,"pending":true,"pushed_at":"2026-10-08T11:32:24Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"}, +"CVE-2026-31802 github:recorded-texteditor120/cve-2026-31802?#":{"basis":"pending","checked":"2026-10-08T15:08:57Z","created":"2026-03-28T20:49:46Z","cve":"CVE-2026-31802","head":"21178c4e0a3db4e826a1f2785273726d83de9a7a","imported":true,"pending":true,"pushed_at":"2026-10-08T14:50:37Z","released":null,"repo":1194805373,"url":"https://github.com/Recorded-texteditor120/CVE-2026-31802"}, "CVE-2026-31807 github:advisories/ghsa-5hc8-qmg8-pw27?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-5hc8-qmg8-pw27"}, "CVE-2026-31807 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml?#":{"basis":"unknown","cve":"CVE-2026-31807","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml"}, "CVE-2026-31809 github:advisories/ghsa-pmc9-f5qr-2pcr?#":{"basis":"unknown","cve":"CVE-2026-31809","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-pmc9-f5qr-2pcr"}, @@ -7286,6 +7290,7 @@ "CVE-2026-42945 github:likecq/nginx-rift?#":{"basis":"unknown","cve":"CVE-2026-42945","imported":true,"released":null,"url":"https://github.com/likecq/Nginx-Rift"}, "CVE-2026-42945 github:nanwinata/nginxrift-cve-2026-42945?#":{"basis":"unknown","cve":"CVE-2026-42945","imported":true,"released":null,"url":"https://github.com/nanwinata/nginxrift-CVE-2026-42945"}, "CVE-2026-42945 github:p3nt3st3r-star/cve-2026-42945-poc?#":{"basis":"unknown","cve":"CVE-2026-42945","imported":true,"released":null,"url":"https://github.com/p3Nt3st3r-sTAr/CVE-2026-42945-POC"}, +"CVE-2026-42945 github:porcumarcooo/thm-cve-2026-42945-nginx-rift-exploit?#":{"basis":"pending","checked":"2026-10-08T15:08:57Z","created":"2026-10-08T14:53:12Z","cve":"CVE-2026-42945","head":"a9f2b37c6276b6dc134297723f1ee3632deaf71a","pending":true,"pushed_at":"2026-10-08T14:54:11Z","released":null,"repo":1410519443,"seen":"2026-10-08T15:08:58Z","url":"https://github.com/porcumarcooo/THM-CVE-2026-42945-Nginx-Rift-Exploit"}, "CVE-2026-42945 github:quantumworld-dpdns-io/cve-2026-42945?#":{"basis":"unknown","cve":"CVE-2026-42945","imported":true,"released":null,"url":"https://github.com/quantumworld-dpdns-io/CVE-2026-42945"}, "CVE-2026-42945 github:redcrazyghost/cve-2026-42945?#":{"basis":"unknown","cve":"CVE-2026-42945","imported":true,"released":null,"url":"https://github.com/RedCrazyGhost/CVE-2026-42945"}, "CVE-2026-42945 github:renison-gohel/cve-2026-42945-nginx-rift?#":{"basis":"unknown","cve":"CVE-2026-42945","imported":true,"released":null,"url":"https://github.com/Renison-Gohel/CVE-2026-42945-NGINX-Rift"}, @@ -8050,6 +8055,7 @@ "CVE-2026-46300 github:madexploits/cve-2026-46300?#":{"basis":"unknown","cve":"CVE-2026-46300","imported":true,"released":null,"url":"https://github.com/MadExploits/CVE-2026-46300"}, "CVE-2026-46300 github:maxime288/fragnesia-cve-2026-46300?#":{"basis":"unknown","cve":"CVE-2026-46300","imported":true,"released":null,"url":"https://github.com/Maxime288/Fragnesia-CVE-2026-46300"}, "CVE-2026-46300 github:nonameuserosint-hue/fragnesia-go?#":{"basis":"unknown","cve":"CVE-2026-46300","imported":true,"released":null,"url":"https://github.com/nonameuserosint-hue/Fragnesia-go"}, +"CVE-2026-46300 github:porcumarcooo/thm-cve-2026-46300-fragnesia-exploit?#":{"basis":"pending","checked":"2026-10-08T15:08:57Z","created":"2026-10-08T14:40:35Z","cve":"CVE-2026-46300","head":"0be350f3415dc8234aaeba7d1c9a76b8f7a3958c","pending":true,"pushed_at":"2026-10-08T14:40:53Z","released":null,"repo":1410499890,"seen":"2026-10-08T15:08:58Z","url":"https://github.com/porcumarcooo/THM-CVE-2026-46300-Fragnesia-Exploit"}, "CVE-2026-46300 github:rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2026_46300_fragnesia.rb?#":{"basis":"unknown","cve":"CVE-2026-46300","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2026_46300_fragnesia.rb"}, "CVE-2026-46300 github:sentebale/cve-2026-46300?#":{"basis":"unknown","cve":"CVE-2026-46300","imported":true,"released":null,"url":"https://github.com/Sentebale/CVE-2026-46300"}, "CVE-2026-46300 https://www.exploit-db.com/exploits/52591":{"basis":"source","cve":"CVE-2026-46300","imported":true,"released":"2026-05-29","source":"2026-05-29","url":"https://www.exploit-db.com/exploits/52591"}, @@ -11677,7 +11683,7 @@ "CVE-2026-76552 https://wpscan.com/vulnerability/e858099a-c3ce-453d-9b98-75087dddc381":{"basis":"unknown","cve":"CVE-2026-76552","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/e858099a-c3ce-453d-9b98-75087dddc381/"}, "CVE-2026-76553 https://wpscan.com/vulnerability/cf4c5303-4efe-40b3-9ec0-5e6406b5ec9f":{"basis":"unknown","cve":"CVE-2026-76553","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/cf4c5303-4efe-40b3-9ec0-5e6406b5ec9f/"}, "CVE-2026-76554 https://wpscan.com/vulnerability/e28c78be-e2f7-4580-9f16-488955914be3":{"basis":"unknown","cve":"CVE-2026-76554","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/e28c78be-e2f7-4580-9f16-488955914be3/"}, -"CVE-2026-76555 github:hasyros/cve-2026-76555-path-traversal-wp-import-export-lite?#":{"basis":"pending","checked":"2026-10-08T07:08:44Z","created":"2026-09-18T14:23:26Z","cve":"CVE-2026-76555","head":"56ddd14dc54cf2138e81b82ec49ff41f287748d6","pending":true,"pushed_at":"2026-10-07T17:03:55Z","released":null,"repo":1375982393,"seen":"2026-10-07T22:09:08Z","url":"https://github.com/Hasyros/CVE-2026-76555-path-traversal-wp-import-export-lite"}, +"CVE-2026-76555 github:hasyros/cve-2026-76555-path-traversal-wp-import-export-lite?#":{"basis":"pending","checked":"2026-10-08T15:09:08Z","created":"2026-09-18T14:23:26Z","cve":"CVE-2026-76555","head":"56ddd14dc54cf2138e81b82ec49ff41f287748d6","pending":true,"pushed_at":"2026-10-07T17:03:55Z","released":null,"repo":1375982393,"seen":"2026-10-07T22:09:08Z","url":"https://github.com/Hasyros/CVE-2026-76555-path-traversal-wp-import-export-lite"}, "CVE-2026-76555 https://wpscan.com/vulnerability/aadc28e6-6176-45ca-80b6-a8186fba835f":{"basis":"unknown","cve":"CVE-2026-76555","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/aadc28e6-6176-45ca-80b6-a8186fba835f/"}, "CVE-2026-76556 https://wpscan.com/vulnerability/a8192a4e-4fea-423f-9d65-f9229f9b1922":{"basis":"unknown","cve":"CVE-2026-76556","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/a8192a4e-4fea-423f-9d65-f9229f9b1922/"}, "CVE-2026-76557 https://wpscan.com/vulnerability/a261a153-679a-4300-a36e-28085650f315":{"basis":"unknown","cve":"CVE-2026-76557","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/a261a153-679a-4300-a36e-28085650f315/"}, @@ -12542,7 +12548,7 @@ "CVE-2026-83547 https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67":{"basis":"unknown","cve":"CVE-2026-83547","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/a8298cc0-9e5b-41e2-ba44-b6f1bad30a67/"}, "CVE-2026-83548 github:projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-83548.yaml?#":{"basis":"unknown","cve":"CVE-2026-83548","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-83548.yaml"}, "CVE-2026-83548 github:rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_couchdb_rce.rb?#":{"basis":"unknown","cve":"CVE-2026-83548","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_couchdb_rce.rb"}, -"CVE-2026-83548 github:xcoy0te/cve-2026-83548-checker?#":{"basis":"pending","checked":"2026-10-08T07:08:44Z","created":"2026-09-04T16:30:21Z","cve":"CVE-2026-83548","head":"2ecfda55afbcc03a0d7613df4574ffc8aae3878f","imported":true,"pending":true,"pushed_at":"2026-10-07T20:14:06Z","released":null,"repo":1357367026,"url":"https://github.com/xcoy0te/CVE-2026-83548-checker"}, +"CVE-2026-83548 github:xcoy0te/cve-2026-83548-checker?#":{"basis":"pending","checked":"2026-10-08T15:09:08Z","created":"2026-09-04T16:30:21Z","cve":"CVE-2026-83548","head":"2ecfda55afbcc03a0d7613df4574ffc8aae3878f","imported":true,"pending":true,"pushed_at":"2026-10-07T20:14:06Z","released":null,"repo":1357367026,"url":"https://github.com/xcoy0te/CVE-2026-83548-checker"}, "CVE-2026-83549 github:rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_couchdb_rce.rb?#":{"basis":"unknown","cve":"CVE-2026-83549","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_couchdb_rce.rb"}, "CVE-2026-83555 https://wpscan.com/vulnerability/54cb2a98-7860-40dd-817e-1294317084aa":{"basis":"unknown","cve":"CVE-2026-83555","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/54cb2a98-7860-40dd-817e-1294317084aa/"}, "CVE-2026-83557 github:advisories/ghsa-gx83-3vf8-gh7j?#":{"basis":"unknown","cve":"CVE-2026-83557","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-gx83-3vf8-gh7j"}, @@ -13790,7 +13796,7 @@ "CVE-2026-9365 github:ettercap/ettercap/issues/1306?#":{"basis":"unknown","cve":"CVE-2026-9365","imported":true,"released":null,"url":"https://github.com/Ettercap/ettercap/issues/1306"}, "CVE-2026-93650 github:zast-ai/vulnerability-reports/blob/main/saleor/bruteforce.md?#":{"basis":"unknown","cve":"CVE-2026-93650","imported":true,"released":null,"url":"https://github.com/zast-ai/vulnerability-reports/blob/main/saleor/bruteforce.md"}, "CVE-2026-9366 https://gist.github.com/YLChen-007/581fd92de5548fbaacb2092e848a75cc":{"basis":"unknown","cve":"CVE-2026-9366","imported":true,"released":null,"url":"https://gist.github.com/YLChen-007/581fd92de5548fbaacb2092e848a75cc"}, -"CVE-2026-93661 github:hasyros/cve-2026-93661-idor-events-manager?#":{"basis":"pending","checked":"2026-10-08T07:08:44Z","created":"2026-09-19T21:16:57Z","cve":"CVE-2026-93661","head":"1e7f6409f2c19bc70eec3ec854b9a01632741901","pending":true,"pushed_at":"2026-10-07T16:15:25Z","released":null,"repo":1377621286,"seen":"2026-10-07T22:09:16Z","url":"https://github.com/Hasyros/CVE-2026-93661-idor-events-manager"}, +"CVE-2026-93661 github:hasyros/cve-2026-93661-idor-events-manager?#":{"basis":"pending","checked":"2026-10-08T15:09:08Z","created":"2026-09-19T21:16:57Z","cve":"CVE-2026-93661","head":"1e7f6409f2c19bc70eec3ec854b9a01632741901","pending":true,"pushed_at":"2026-10-07T16:15:25Z","released":null,"repo":1377621286,"seen":"2026-10-07T22:09:16Z","url":"https://github.com/Hasyros/CVE-2026-93661-idor-events-manager"}, "CVE-2026-93661 https://wpscan.com/vulnerability/8f1c665e-15e4-4b5d-853d-919723614611":{"basis":"unknown","cve":"CVE-2026-93661","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/8f1c665e-15e4-4b5d-853d-919723614611/"}, "CVE-2026-93662 https://wpscan.com/vulnerability/5669c4e6-edec-4963-8eb9-fc66d2488049":{"basis":"unknown","cve":"CVE-2026-93662","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/5669c4e6-edec-4963-8eb9-fc66d2488049/"}, "CVE-2026-9367 https://gist.github.com/YLChen-007/75fb10319693e86106ced2ef3a472c80":{"basis":"unknown","cve":"CVE-2026-9367","imported":true,"released":null,"url":"https://gist.github.com/YLChen-007/75fb10319693e86106ced2ef3a472c80"}, @@ -14176,7 +14182,7 @@ "CVE-2026-97318 https://wpscan.com/vulnerability/a171b0f1-b2d2-4482-b44f-bd4a1f3b223b":{"basis":"unknown","cve":"CVE-2026-97318","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/a171b0f1-b2d2-4482-b44f-bd4a1f3b223b/"}, "CVE-2026-97319 https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32":{"basis":"unknown","cve":"CVE-2026-97319","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/"}, "CVE-2026-97326 github:hazyx0/cve/issues/1?#":{"basis":"unknown","cve":"CVE-2026-97326","imported":true,"released":null,"url":"https://github.com/HazyX0/cve/issues/1"}, -"CVE-2026-97332 github:kolya080808/cve-2026-97332-poc?#":{"basis":"pending","checked":"2026-10-08T11:09:27Z","created":"2026-10-07T20:29:45Z","cve":"CVE-2026-97332","head":"b9cc63193abb7e839a3d5d38f5ad4dbc62b27210","pending":true,"pushed_at":"2026-10-07T20:49:30Z","released":null,"repo":1409342788,"seen":"2026-10-07T22:09:08Z","url":"https://github.com/Kolya080808/CVE-2026-97332-PoC"}, +"CVE-2026-97332 github:kolya080808/cve-2026-97332-poc?#":{"basis":"pending","checked":"2026-10-08T15:10:34Z","created":"2026-10-07T20:29:45Z","cve":"CVE-2026-97332","head":"b9cc63193abb7e839a3d5d38f5ad4dbc62b27210","pending":true,"pushed_at":"2026-10-07T20:49:30Z","released":null,"repo":1409342788,"seen":"2026-10-07T22:09:08Z","url":"https://github.com/Kolya080808/CVE-2026-97332-PoC"}, "CVE-2026-97332 https://wpscan.com/vulnerability/d6a144b3-84e3-43eb-92d3-fd4505dd0e1c":{"basis":"unknown","cve":"CVE-2026-97332","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/d6a144b3-84e3-43eb-92d3-fd4505dd0e1c/"}, "CVE-2026-97347 github:jailbr3ak/cve-2026-97347?#":{"basis":"unknown","cve":"CVE-2026-97347","imported":true,"released":null,"url":"https://github.com/JailBr3ak/CVE-2026-97347"}, "CVE-2026-97359 github:wgetnz/hfs2/blob/master/advisories/hfs2-upload-filename-template-injection/README.md?#":{"basis":"unknown","cve":"CVE-2026-97359","imported":true,"released":null,"url":"https://github.com/wgetnz/hfs2/blob/master/advisories/hfs2-upload-filename-template-injection/README.md"}, diff --git a/index/trending.json b/index/trending.json index e7a1046653f..017d086eaa8 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,38 +1,4 @@ [ - { - "year": 2026, - "stars": 826, - "name": "CVE-2026-24061", - "url": "https://github.com/jacubes/CVE-2026-24061", - "artifact": false, - "source": "github.com", - "desc": "CVE-2026-24061 exploit PoC", - "pushed": "2026-10-03T16:24:22Z", - "released": null, - "basis": "pending", - "score": 25.752162656332338, - "trending": true, - "created": "2026-03-08T11:25:39Z", - "cve": "CVE-2026-24061", - "kev": true - }, - { - "year": 2026, - "stars": 467, - "name": "cve-2026-41940-PoC", - "url": "https://github.com/yasouxken/cve-2026-41940-PoC", - "artifact": false, - "source": "github.com", - "desc": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header - no credentials required.", - "pushed": "2026-10-03T16:48:21Z", - "released": null, - "basis": "pending", - "score": 14.588436105570429, - "trending": true, - "created": "2026-09-21T18:23:02Z", - "cve": "CVE-2026-41940", - "kev": true - }, { "year": 2026, "stars": 498, @@ -44,7 +10,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 3.4975851832780447, + "score": 3.4955587322318524, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -61,7 +27,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 2.024560400289033, + "score": 2.0189329925071657, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -78,7 +44,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.7088025479105613, + "score": 1.7081673145259593, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -95,7 +61,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.3162491220026158, + "score": 1.3154662339654712, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -112,7 +78,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 1.0169053709126272, + "score": 1.0140604061091063, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -129,7 +95,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.9675976255864616, + "score": 0.9666000404544509, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -146,7 +112,7 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.9328636071691511, + "score": 0.9318909382653278, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", @@ -154,7 +120,7 @@ }, { "year": 2026, - "stars": 104, + "stars": 105, "name": "CVE-2026-75604-poc", "url": "https://github.com/rafabd1/CVE-2026-75604-poc", "artifact": false, @@ -163,7 +129,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.7852740393917066, + "score": 0.7923153749644426, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -180,7 +146,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.7606999155278839, + "score": 0.7600873247393816, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -197,7 +163,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.6355705899566272, + "score": 0.6343903286825264, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -214,7 +180,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.6155666997076377, + "score": 0.6153019911243827, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -231,7 +197,7 @@ "pushed": "2026-09-27T19:48:09Z", "released": "2026-09-27T19:47:52Z", "basis": "commit", - "score": 0.5966930282627358, + "score": 0.5952367776201669, "trending": true, "created": "2026-09-27T19:41:06Z", "cve": "CVE-2026-34990", @@ -248,7 +214,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.5706629457736195, + "score": 0.5696851259506468, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -265,7 +231,7 @@ "pushed": "2026-07-18T21:09:06Z", "released": null, "basis": "pending", - "score": 0.5259489389332873, + "score": 0.5257658615773868, "trending": true, "created": "2026-07-14T14:21:27Z", "cve": "CVE-2026-43499", @@ -282,7 +248,7 @@ "pushed": "2026-10-07T01:07:28Z", "released": "2026-09-22T18:13:48Z", "basis": "created", - "score": 0.5243503108650335, + "score": 0.523454916479113, "trending": true, "created": "2026-09-22T18:13:48Z", "cve": "CVE-2026-87902", @@ -299,7 +265,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.5096192854173546, + "score": 0.5072864647112566, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -316,7 +282,7 @@ "pushed": "2026-09-28T05:17:40Z", "released": "2026-09-28T05:17:40Z", "basis": "commit", - "score": 0.49286523470007887, + "score": 0.49162065085235457, "trending": true, "created": "2026-09-28T04:47:10Z", "cve": "CVE-2026-85706", @@ -333,12 +299,29 @@ "pushed": "2026-10-06T10:48:38Z", "released": "2026-10-06T10:48:38Z", "basis": "commit", - "score": 0.48514457826346175, + "score": 0.480745262184929, "trending": true, "created": "2026-10-06T10:40:59Z", "cve": "CVE-2026-21589", "kev": false }, + { + "year": 2026, + "stars": 23, + "name": "watchTowr-vs-Citrix-Netscaler-CVE-2026-88771", + "url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771", + "artifact": false, + "source": "github.com", + "desc": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.", + "pushed": "2026-09-28T09:24:46Z", + "released": "2026-09-28T09:24:46Z", + "basis": "commit", + "score": 0.45711316905425314, + "trending": true, + "created": "2026-09-27T18:15:38Z", + "cve": "CVE-2026-88771", + "kev": true + }, { "year": 2026, "stars": 9, @@ -350,12 +333,29 @@ "pushed": "2026-10-06T15:51:43Z", "released": "2026-10-06T15:51:43Z", "basis": "commit", - "score": 0.45834975060020533, + "score": 0.4538984474745104, "trending": true, "created": "2026-10-06T15:43:34Z", "cve": "CVE-2026-21589", "kev": false }, + { + "year": 2026, + "stars": 42, + "name": "cve-2026-85706", + "url": "https://github.com/guneykabel/cve-2026-85706", + "artifact": false, + "source": "github.com", + "desc": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7-19.1.7; 19.2.0-19.2.5; 19.3.0-19.3.1", + "pushed": "2026-09-11T16:38:12Z", + "released": "2026-09-11T15:54:48Z", + "basis": "commit", + "score": 0.44097913415740025, + "trending": true, + "created": "2026-09-11T15:24:22Z", + "cve": "CVE-2026-85706", + "kev": true + }, { "year": 2025, "stars": 22, @@ -367,7 +367,7 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.1359835234489036, + "score": 0.13591793596265106, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", @@ -384,7 +384,7 @@ "pushed": null, "released": "2026-10-08T08:31:47Z", "basis": "commit", - "score": 0.09315346575748465, + "score": 0.09105546049835374, "trending": false, "created": "2026-10-08T08:31:03Z", "cve": "CVE-2026-21589", @@ -402,7 +402,7 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.0856094346871559, + "score": 0.08550008737818204, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", @@ -419,7 +419,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.07733489263450012, + "score": 0.07728353190238013, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -436,7 +436,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.04857667003210675, + "score": 0.04854903083625976, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -453,7 +453,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.042837364129817944, + "score": 0.0428205311696725, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -470,7 +470,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.04118865229494517, + "score": 0.0411701348580694, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -487,7 +487,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.030518153765114787, + "score": 0.03050701814803288, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -504,7 +504,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.026052922210792293, + "score": 0.026039386087892847, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -521,7 +521,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.02346780354516617, + "score": 0.02345196079705309, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -538,7 +538,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.0202642202034281, + "score": 0.020253126040878762, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -555,7 +555,7 @@ "pushed": "2026-07-21T16:55:33Z", "released": null, "basis": "pending", - "score": 0.020145590249198563, + "score": 0.020138337262181, "trending": true, "created": "2026-07-21T16:52:22Z", "cve": "CVE-2025-32432", @@ -572,7 +572,7 @@ "pushed": "2026-07-19T11:00:00Z", "released": "2026-07-19T11:00:00Z", "basis": "commit", - "score": 0.0197582054018307, + "score": 0.0197512864044958, "trending": true, "created": "2026-07-19T10:49:05Z", "cve": "CVE-2025-64512", @@ -589,7 +589,7 @@ "pushed": "2026-07-17T13:55:11Z", "released": null, "basis": "pending", - "score": 0.019447929453109736, + "score": 0.019441271312136275, "trending": true, "created": "2026-07-17T13:46:16Z", "cve": "CVE-2025-8110", @@ -606,7 +606,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.01629606109959681, + "score": 0.016289527363945143, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -623,7 +623,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.015894913260078965, + "score": 0.01588876529961128, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -640,7 +640,7 @@ "pushed": "2026-07-20T13:33:10Z", "released": "2026-07-20T13:33:10Z", "basis": "commit", - "score": 0.014960001929402285, + "score": 0.014954691683447142, "trending": true, "created": "2026-02-13T22:26:25Z", "cve": "CVE-2025-6019", @@ -657,7 +657,7 @@ "pushed": "2026-10-08T01:42:58Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.011506040305790714, + "score": 0.011505204102905496, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",