diff --git a/README.md b/README.md index 47f191b2e74..db0db8d9759 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-27%20Sep%202026%2018%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609271807)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C566-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609271807)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-27%20Sep%202026%2019%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609271907)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C566-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C211-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609271907)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,23 +12,23 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 2⭐ | 7h ago | KEV [CVE-2025-21479-FX5P](https://github.com/diyiqiuye/CVE-2025-21479-FX5P) | Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable) | -| 0⭐ | 8h ago | KEV [Reproduce-CVE-2025-32433](https://github.com/X-Bulow/Reproduce-CVE-2025-32433) | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3,… | -| 0⭐ | 11h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | -| 0⭐ | 16h ago | [POC-CVE-2025-11201](https://github.com/rmhowe425/POC-CVE-2025-11201) | PoC for MLFlow unauth RCE | -| 0⭐ | 1d ago | [CVE-2026-93399](https://github.com/josemour8/CVE-2026-93399) | Bookly <= 28.2 Unauth IDOR + PII Leak + RCE Mass exploitation scanner for CVE-2026-93399 (CVSS 9.1 Critical)… | +| 2⭐ | 8h ago | KEV [CVE-2025-21479-FX5P](https://github.com/diyiqiuye/CVE-2025-21479-FX5P) | Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable) | +| 0⭐ | 9h ago | KEV [Reproduce-CVE-2025-32433](https://github.com/X-Bulow/Reproduce-CVE-2025-32433) | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3,… | +| 0⭐ | 12h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | +| 0⭐ | 17h ago | [POC-CVE-2025-11201](https://github.com/rmhowe425/POC-CVE-2025-11201) | PoC for MLFlow unauth RCE | +| 0⭐ | 1d ago | [CVE-2026-13249](https://github.com/murrez/CVE-2026-13249) | Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040-before… | | 0⭐ | 1d ago | KEV [Langflow-RCE-CVE-2025-3248](https://github.com/LeotheGGman/Langflow-RCE-CVE-2025-3248) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | -| 1⭐ | 1d ago | [CVE-2026-86350](https://github.com/abraxas/CVE-2026-86350) | CVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header… | | 1⭐ | 2d ago | [opace6-cve-2026-64560](https://github.com/Wangs-official/opace6-cve-2026-64560) | 针对 OnePlus Ace6 设备的 cve-2026-64560 复现 | | 1⭐ | 2d ago | KEV [CVE-2026-59310-POC](https://github.com/ChinaRan0/CVE-2026-59310-POC) | CVE-2026-59310-POC 仅用于自测，请勿用于攻击 | +| 1⭐ | 2d ago | [CVE-2026-14281](https://github.com/murrez/CVE-2026-14281) | Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST… | | 0⭐ | 2d ago | [CVE-2025-9974](https://github.com/HORKimhab/CVE-2025-9974) | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 7⭐ | 7h ago | KEV [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… | -| 6⭐ | 8h ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | +| 7⭐ | 8h ago | KEV [CVE-2026-87902-Toolkit](https://github.com/tc4dy/CVE-2026-87902-Toolkit) | CVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2… | +| 6⭐ | 9h ago | [op13-cve-2026-64560](https://github.com/a23bc/op13-cve-2026-64560) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… | | 825⭐ | 1d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 3⭐ | 1d ago | KEV [CVE-2026-mikrotik-poc](https://github.com/gagaltotal/CVE-2026-mikrotik-poc) | CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH | | 10⭐ | 1d ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 | @@ -38,15 +38,15 @@ | 14⭐ | 2d ago | [CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit) | 🔓 CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) / Zero-click TLS type confusion to… | | 13⭐ | 2d ago | KEV [watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127](https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127) | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious… | | 37⭐ | 3d ago | [CVE-2026-84543](https://github.com/petermalone/CVE-2026-84543) | Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability | -| 9⭐ | 3d ago | KEV [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress | -| 5⭐ | 3d ago | KEV [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console | +| 9⭐ | 4d ago | KEV [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress | +| 5⭐ | 4d ago | KEV [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console | | 4⭐ | 4d ago | [CVE-2026-94129](https://github.com/lzty/CVE-2026-94129) | A POC for CVE-2026-94129 | | 4⭐ | 4d ago | [CVE-2026-94128](https://github.com/lzty/CVE-2026-94128) | POC for CVE-2026-94128 | | 32⭐ | 4d ago | KEV [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | | 4⭐ | 4d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 | -| 33⭐ | 4d ago | KEV [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | +| 34⭐ | 4d ago | KEV [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | | 24⭐ | 6d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | -| 3⭐ | 6d ago | [CVE-2026-88854](https://github.com/murrez/CVE-2026-88854) | CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) | +| 3⭐ | 7d ago | [CVE-2026-88854](https://github.com/murrez/CVE-2026-88854) | CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) | ## Trending in 2025 diff --git a/cves/2026/CVE-2026-28695.md b/cves/2026/CVE-2026-28695.md index 2d542fd611b..c181419a97a 100644 --- a/cves/2026/CVE-2026-28695.md +++ b/cves/2026/CVE-2026-28695.md @@ -16,4 +16,4 @@ Craft is a content management system (CMS). There is an authenticated admin RCE - https://github.com/advisories/GHSA-94rc-cqvm-m4pw #### Github -No PoCs found on GitHub currently. +- https://github.com/predyy/CVE-2026-28695 diff --git a/cves/2026/CVE-2026-34990.md b/cves/2026/CVE-2026-34990.md index 6f02740c798..7d0a0221517 100644 --- a/cves/2026/CVE-2026-34990.md +++ b/cves/2026/CVE-2026-34990.md @@ -18,3 +18,4 @@ No PoCs from references. - https://github.com/HORKimhab/CVE-2026-34990 - https://github.com/0xc4rc3l/CVE-2026-34990-poc - https://github.com/gbuyssens/CVE-2026-34990 +- https://github.com/DENNISDGR/CVE-2026-34990-poc diff --git a/index/github.txt b/index/github.txt index 92b88841730..9ae49dd9fb1 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26951,3 +26951,5 @@ CVE-2026-63030 - https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab CVE-2026-43499 - https://github.com/a2333c/DFRoot CVE-2026-100382 - https://github.com/nth347/mediawiki-CVE-2026-100382 CVE-2026-59310 - https://github.com/tijldeneut/Security +CVE-2026-28695 - https://github.com/predyy/CVE-2026-28695 +CVE-2026-34990 - https://github.com/DENNISDGR/CVE-2026-34990-poc diff --git a/index/trending.json b/index/trending.json index aad8ab2a5c7..1f041f1699f 100644 --- a/index/trending.json +++ b/index/trending.json @@ -188,7 +188,7 @@ }, { "year": 2026, - "stars": 33, + "stars": 34, "name": "cve-2026-87902-poc", "url": "https://github.com/ressl/cve-2026-87902-poc", "desc": "PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab", @@ -512,12 +512,12 @@ { "year": 2026, "stars": 0, - "name": "CVE-2026-93399", - "url": "https://github.com/josemour8/CVE-2026-93399", - "desc": "Bookly <= 28.2 Unauth IDOR + PII Leak + RCE Mass exploitation scanner for CVE-2026-93399 (CVSS 9.1 Critical) affecting the Bookly - Online Scheduling and Appointment Booking System WordPress plugin (versions <= 28.2).", - "pushed": "2026-09-26T05:29:03Z", - "created": "2026-09-26T04:58:47Z", - "cve": "CVE-2026-93399", + "name": "CVE-2026-13249", + "url": "https://github.com/murrez/CVE-2026-13249", + "desc": "Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040-before F10.22.030745) leading to RCE. Python check/exploit PoC", + "pushed": "2026-09-26T12:00:32Z", + "created": "2026-09-26T11:59:53Z", + "cve": "CVE-2026-13249", "kev": false, "landed": true }, @@ -533,18 +533,6 @@ "kev": true, "landed": true }, - { - "year": 2026, - "stars": 1, - "name": "CVE-2026-86350", - "url": "https://github.com/abraxas/CVE-2026-86350", - "desc": "CVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header Mix-up (Request Smuggling)", - "pushed": "2026-09-25T21:59:06Z", - "created": "2026-09-25T21:58:58Z", - "cve": "CVE-2026-86350", - "kev": false, - "landed": true - }, { "year": 2026, "stars": 1, @@ -569,6 +557,18 @@ "kev": true, "landed": true }, + { + "year": 2026, + "stars": 1, + "name": "CVE-2026-14281", + "url": "https://github.com/murrez/CVE-2026-14281", + "desc": "Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST signup and unsanitized wawp_custom_fields → admin. Python check/exploit PoC (PoCbit).", + "pushed": "2026-09-25T07:44:05Z", + "created": "2026-09-25T07:43:43Z", + "cve": "CVE-2026-14281", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0,