From 0bd6c7ceda0aeab40c4ec1f603f041b6626f7f11 Mon Sep 17 00:00:00 2001 From: 0xMarcio Date: Wed, 17 Dec 2025 20:24:46 +0100 Subject: [PATCH] Align trending PoCs and filter to recent data --- docs/assets/site.js | 19 +++- docs/cve/index.html | 1 - docs/diffs/index.html | 206 ---------------------------------------- docs/epss/index.html | 1 - docs/index.html | 139 +-------------------------- docs/kev/index.html | 3 +- docs/logic.js | 9 +- docs/search/index.html | 3 +- scripts/build_joined.py | 21 ++++ scripts/build_site.py | 26 ++++- templates/base.html | 1 - templates/index.html | 51 +++------- 12 files changed, 88 insertions(+), 392 deletions(-) delete mode 100644 docs/diffs/index.html diff --git a/docs/assets/site.js b/docs/assets/site.js index ddf0a6dd37..183403c4ba 100644 --- a/docs/assets/site.js +++ b/docs/assets/site.js @@ -59,6 +59,11 @@ async function filterTablesByData() { const { pocSet, descSet } = await ensureSets(); + const currentYear = new Date().getUTCFullYear(); + const isRecent = (text) => { + const m = /CVE-(\d{4})-/i.exec(text || ''); + return m ? parseInt(m[1], 10) >= currentYear - 1 : false; + }; document.querySelectorAll('table[data-require-poc], table[data-require-desc]').forEach(table => { for (const row of Array.from(table.querySelectorAll('tbody tr'))) { const link = row.querySelector('a'); @@ -67,7 +72,7 @@ const needsDesc = table.hasAttribute('data-require-desc'); const hasPoc = pocSet.has(idText); const hasDesc = descSet.has(idText); - if ((needsPoc && !hasPoc) || (needsDesc && !hasDesc)) { + if ((needsPoc && !hasPoc) || (needsDesc && !hasDesc) || !isRecent(idText)) { row.remove(); } } @@ -87,6 +92,11 @@ return match ? parseInt(match[1], 10) : Infinity; } + function cveYear(text) { + const m = /cve-(\d{4})-/i.exec(text || ''); + return m ? parseInt(m[1], 10) : null; + } + function parseTrendingMarkdown(text) { const rows = []; const regex = /^\|\s*(\d+)\s*⭐\s*\|\s*([^|]+)\|\s*\[([^\]]+)\]\(([^)]+)\)\s*\|\s*(.*?)\|$/; @@ -115,7 +125,12 @@ if (!res.ok) throw new Error('failed to load README'); const text = await res.text(); const entries = parseTrendingMarkdown(text) - .filter(item => item.ageDays <= 5) + .filter(item => item.ageDays <= 4) + .filter(item => { + const currentYear = new Date().getUTCFullYear(); + const yr = cveYear(item.name); + return yr !== null && yr >= currentYear - 1; + }) .sort((a, b) => b.stars - a.stars) .slice(0, 20); diff --git a/docs/cve/index.html b/docs/cve/index.html index f476cf1dc7..2f69da0747 100644 --- a/docs/cve/index.html +++ b/docs/cve/index.html @@ -15,7 +15,6 @@ PoC Search KEV EPSS - New KEV diff --git a/docs/diffs/index.html b/docs/diffs/index.html deleted file mode 100644 index 3c9ff8be9b..0000000000 --- a/docs/diffs/index.html +++ /dev/null @@ -1,206 +0,0 @@ - - - - - - CVE PoC Hub - - - - -
-
-
CVE PoC Hub
- -
-
-
-
-
-

New KEV entries

- Only the recent additions -
-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
CVEVendorProductEPSSPercentileDate AddedDue
CVE-2025-59718FortinetMultiple Products0.000 0th2025-12-162025-12-23
CVE-2025-14611GladinetCentreStack and Triofox0.000 0th2025-12-152026-01-05
CVE-2025-43529AppleMultiple Products0.000 0th2025-12-152026-01-05
CVE-2018-4063Sierra WirelessAirLink ALEOS0.000 0th2025-12-122026-01-02
CVE-2025-14174GoogleChromium0.000 0th2025-12-122026-01-02
CVE-2025-58360OSGeoGeoServer0.000 0th2025-12-112026-01-01
CVE-2025-6218RARLABWinRAR0.000 0th2025-12-092025-12-30
CVE-2025-62221MicrosoftWindows0.000 0th2025-12-092025-12-30
CVE-2022-37055D-LinkRouters0.000 0th2025-12-082025-12-29
CVE-2025-66644Array NetworksArrayOS AG0.000 0th2025-12-082025-12-29
CVE-2025-55182MetaReact Server Components0.000 0th2025-12-052025-12-12
CVE-2021-26828OpenPLCScadaBR0.000 0th2025-12-032025-12-24
CVE-2025-48572AndroidFramework0.000 0th2025-12-022025-12-23
CVE-2025-48633AndroidFramework0.000 0th2025-12-022025-12-23
CVE-2021-26829OpenPLCScadaBR0.000 0th2025-11-282025-12-19
CVE-2025-61757OracleFusion Middleware0.000 0th2025-11-212025-12-12
CVE-2025-13223GoogleChromium V80.000 0th2025-11-192025-12-10
CVE-2025-58034FortinetFortiWeb0.000 0th2025-11-182025-11-25
-
-
-
- - - diff --git a/docs/epss/index.html b/docs/epss/index.html index f9197cdf44..048d3f8df0 100644 --- a/docs/epss/index.html +++ b/docs/epss/index.html @@ -15,7 +15,6 @@ PoC Search KEV EPSS - New KEV diff --git a/docs/index.html b/docs/index.html index ed1501e461..7bcd270b96 100644 --- a/docs/index.html +++ b/docs/index.html @@ -15,7 +15,6 @@ PoC Search KEV EPSS - New KEV @@ -57,7 +56,7 @@

Trending PoCs

- Most starred PoCs in the past few days + Recent GitHub movement (last 4 days, sorted by stars)
@@ -71,13 +70,14 @@ +

Latest KEV additions

Last 30 days
-
+
@@ -333,139 +333,6 @@ -
-
-

Fresh PoCs

- Recent GitHub movement -
-
-
CVEVendorProductEPSSPercentileDate AddedDue
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
StarsUpdatedNameDescription
12412 hours ago CVE-2025-55182Explanation and full RCE PoC for CVE-2025-55182
7753 hours ago CVE-2025-55182-researchCVE-2025-55182 POC
4958 days ago CVE-2018-20250exp for https://research.checkpoint.com/extracting-code-execution-from-winrar
60720 hours ago CVE-2025-33073PoC Exploit for the NTLM reflection SMB flaw.
4964 days ago CVE-2025-32463_chwootEscalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463
4195 hours ago CVE-2025-32463Local Privilege Escalation to Root via Sudo chroot in Linux
3051 day ago CVE-2025-53770-ExploitSharePoint WebPart Injection Exploit Tool
2894 hours ago CVE-2025-55182RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478
9011 hour ago React2Shell-CVE-2025-55182-original-pocOriginal Proof-of-Concepts for React2Shell CVE-2025-55182
3864 days ago CVE-2025-24071_PoCCVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File
2071 day ago CVE-2025-32023PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
3966 days ago ColorOS-CVE-2025-10184ColorOS短信漏洞，以及用户自救方案
1806 days ago POC-CVE-2025-24813his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.
25615 minutes ago CVE-2025-55182-advanced-scanner-
3571 hour ago Next.js-RSC-RCE-Scanner-CVE-2025-66478A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.
1984 days ago CVE-2025-30208-EXPCVE-2025-30208-EXP
736 days ago cve-2025-8088Path traversal tool based on cve-2025-8088
1631 day ago CVE-2025-26125( 0day ) Local Privilege Escalation in IObit Malware Fighter
1538 days ago CVE-2025-21756Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!
13627 days ago CVE-2025-32433CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
-
-