diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml index f946ba518de..be527dafba0 100644 --- a/.github/workflows/site.yml +++ b/.github/workflows/site.yml @@ -11,6 +11,7 @@ on: - Sync Exploit Archives - Hot CVEs List - Audit PoC Links + - Sync PoC-in-GitHub types: - completed push: diff --git a/.github/workflows/sync_pocingithub.yml b/.github/workflows/sync_pocingithub.yml new file mode 100644 index 00000000000..1796480aa54 --- /dev/null +++ b/.github/workflows/sync_pocingithub.yml @@ -0,0 +1,57 @@ +name: Sync PoC-in-GitHub + +on: + schedule: + - cron: '10 5 * * 3' + workflow_dispatch: + +permissions: + contents: write + +concurrency: + group: repository-updates + cancel-in-progress: false + +jobs: + sync: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v7 + + - name: Set up Python + uses: actions/setup-python@v7 + with: + python-version: '3.13' + + # Every candidate is judged again each week rather than remembered as + # rejected: a repository that was an empty shell in March is often a + # working exploit by June, and re-reading 6,800 of them costs five + # minutes. + - name: Judge upstream PoC candidates + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: python3 scripts/sync_pocingithub.py + + - name: Check for changes and commit + run: | + git config user.name 'CVE-BOT' + git config user.email 'cve@codepwn.win' + git add --all -- cves/ + + if git diff --cached --quiet; then + echo "No changes to commit" + exit 0 + fi + + git commit -m "Add PoC repositories from upstream collection $(date -u +'%Y-%m-%d')" + + for attempt in 1 2 3; do + if git push origin HEAD:main; then + exit 0 + fi + echo "Push rejected; replaying onto the current main (attempt $attempt)" + git fetch --unshallow origin main 2>/dev/null || git fetch origin main + git rebase FETCH_HEAD + done + exit 1 diff --git a/cves/1999/CVE-1999-0524.md b/cves/1999/CVE-1999-0524.md index b63fee7b70a..e9a258cce51 100644 --- a/cves/1999/CVE-1999-0524.md +++ b/cves/1999/CVE-1999-0524.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Ransc0rp1on/ICMP-Timestamp-POC - https://github.com/threatlabindonesia/CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit +- https://github.com/biontdv/CVE-1999-0524-POC diff --git a/cves/1999/CVE-1999-0678.md b/cves/1999/CVE-1999-0678.md index 0335839af64..a14c9774e7a 100644 --- a/cves/1999/CVE-1999-0678.md +++ b/cves/1999/CVE-1999-0678.md @@ -13,7 +13,7 @@ A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /us No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/lto7777777/CVE-1999-0678 #### ExploitDB - https://www.exploit-db.com/exploits/19253 diff --git a/cves/2001/CVE-2001-0680.md b/cves/2001/CVE-2001-0680.md index 25ef87e2b70..ae68f0f60a6 100644 --- a/cves/2001/CVE-2001-0680.md +++ b/cves/2001/CVE-2001-0680.md @@ -13,5 +13,5 @@ Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 al No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0680 diff --git a/cves/2001/CVE-2001-0758.md b/cves/2001/CVE-2001-0758.md index 2c9db8ea4a9..73f0ee8de15 100644 --- a/cves/2001/CVE-2001-0758.md +++ b/cves/2001/CVE-2001-0758.md @@ -13,5 +13,5 @@ Directory traversal vulnerability in Shambala 4.5 allows remote attackers to esc - http://www.securiteam.com/windowsntfocus/5SP011P4KC.html #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0758 diff --git a/cves/2001/CVE-2001-0932.md b/cves/2001/CVE-2001-0932.md index 18bdbca15f8..8919827691f 100644 --- a/cves/2001/CVE-2001-0932.md +++ b/cves/2001/CVE-2001-0932.md @@ -13,7 +13,7 @@ Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cau - http://marc.info/?l=bugtraq&m=100698397818175&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0932 #### ExploitDB - https://www.exploit-db.com/exploits/21163 diff --git a/cves/2001/CVE-2001-0934.md b/cves/2001/CVE-2001-0934.md index f59ede0ae3a..5ea5f24bcaf 100644 --- a/cves/2001/CVE-2001-0934.md +++ b/cves/2001/CVE-2001-0934.md @@ -13,5 +13,5 @@ Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical pa - http://marc.info/?l=bugtraq&m=100698397818175&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0934 diff --git a/cves/2001/CVE-2001-1442.md b/cves/2001/CVE-2001-1442.md index 5a9faa3de5f..7aabc03c322 100644 --- a/cves/2001/CVE-2001-1442.md +++ b/cves/2001/CVE-2001-1442.md @@ -13,7 +13,7 @@ Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-1442 #### ExploitDB - https://www.exploit-db.com/exploits/20778 diff --git a/cves/2002/CVE-2002-0082.md b/cves/2002/CVE-2002-0082.md index 950e7e415e7..d500af5de9b 100644 --- a/cves/2002/CVE-2002-0082.md +++ b/cves/2002/CVE-2002-0082.md @@ -15,6 +15,7 @@ The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SS #### Github - https://github.com/Nishant-Pall/Kioptrix-exploit - https://github.com/ratiros01/CVE-2002-0082 +- https://github.com/anilkashyap01/Binary-Exploitation-and-Kernel-Escalation #### ExploitDB - https://www.exploit-db.com/exploits/21671 diff --git a/cves/2002/CVE-2002-0200.md b/cves/2002/CVE-2002-0200.md index c032b7b4ff4..e199269c4a7 100644 --- a/cves/2002/CVE-2002-0200.md +++ b/cves/2002/CVE-2002-0200.md @@ -13,5 +13,5 @@ Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial o - http://marc.info/?l=bugtraq&m=101174569103289&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0200 diff --git a/cves/2002/CVE-2002-0201.md b/cves/2002/CVE-2002-0201.md index 5a5519c6b6d..a9ac38b2244 100644 --- a/cves/2002/CVE-2002-0201.md +++ b/cves/2002/CVE-2002-0201.md @@ -13,7 +13,7 @@ Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial o - http://marc.info/?l=bugtraq&m=101174569103289&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0201 #### ExploitDB - https://www.exploit-db.com/exploits/21237 diff --git a/cves/2002/CVE-2002-0288.md b/cves/2002/CVE-2002-0288.md index c6c9de3e636..a84904125c4 100644 --- a/cves/2002/CVE-2002-0288.md +++ b/cves/2002/CVE-2002-0288.md @@ -13,7 +13,7 @@ Directory traversal vulnerability in Phusion web server 1.0 allows remote attack - http://marc.info/?l=bugtraq&m=101408906001958&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0288 #### ExploitDB - https://www.exploit-db.com/exploits/21292 diff --git a/cves/2002/CVE-2002-0289.md b/cves/2002/CVE-2002-0289.md index fb17b185a11..13c84e87fc5 100644 --- a/cves/2002/CVE-2002-0289.md +++ b/cves/2002/CVE-2002-0289.md @@ -13,7 +13,7 @@ Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a den - http://marc.info/?l=bugtraq&m=101408906001958&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0289 #### ExploitDB - https://www.exploit-db.com/exploits/21294 diff --git a/cves/2002/CVE-2002-0346.md b/cves/2002/CVE-2002-0346.md index 920a7d0d34b..a7b20f53dc6 100644 --- a/cves/2002/CVE-2002-0346.md +++ b/cves/2002/CVE-2002-0346.md @@ -13,5 +13,5 @@ Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to ex - http://marc.info/?l=bugtraq&m=101495944202452&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0346 diff --git a/cves/2002/CVE-2002-0347.md b/cves/2002/CVE-2002-0347.md index 83bb31ba3fb..ed710841792 100644 --- a/cves/2002/CVE-2002-0347.md +++ b/cves/2002/CVE-2002-0347.md @@ -13,5 +13,5 @@ Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to rea - http://marc.info/?l=bugtraq&m=101495944202452&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0347 diff --git a/cves/2002/CVE-2002-0348.md b/cves/2002/CVE-2002-0348.md index aab358fb64b..61c27871651 100644 --- a/cves/2002/CVE-2002-0348.md +++ b/cves/2002/CVE-2002-0348.md @@ -13,5 +13,5 @@ service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service - http://marc.info/?l=bugtraq&m=101495944202452&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0348 diff --git a/cves/2002/CVE-2002-0448.md b/cves/2002/CVE-2002-0448.md index 3715d18a44f..faa78ec68c2 100644 --- a/cves/2002/CVE-2002-0448.md +++ b/cves/2002/CVE-2002-0448.md @@ -13,7 +13,7 @@ Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denia No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0448 #### ExploitDB - https://www.exploit-db.com/exploits/21336 diff --git a/cves/2002/CVE-2002-0991.md b/cves/2002/CVE-2002-0991.md index 489d736d188..71c43112b99 100644 --- a/cves/2002/CVE-2002-0991.md +++ b/cves/2002/CVE-2002-0991.md @@ -13,7 +13,7 @@ Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and ea No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0991 #### ExploitDB - https://www.exploit-db.com/exploits/21577 diff --git a/cves/2002/CVE-2002-1120.md b/cves/2002/CVE-2002-1120.md index 8ffdf992b6b..d7b2571a5c8 100644 --- a/cves/2002/CVE-2002-1120.md +++ b/cves/2002/CVE-2002-1120.md @@ -13,7 +13,7 @@ Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to - https://www.exploit-db.com/exploits/16770/ #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2002-1120 #### ExploitDB - https://www.exploit-db.com/exploits/16770 diff --git a/cves/2003/CVE-2003-0127.md b/cves/2003/CVE-2003-0127.md index 990d1c99fc5..5b372061ff1 100644 --- a/cves/2003/CVE-2003-0127.md +++ b/cves/2003/CVE-2003-0127.md @@ -13,7 +13,7 @@ The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2 No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/anilkashyap01/Binary-Exploitation-and-Kernel-Escalation #### ExploitDB - https://www.exploit-db.com/exploits/22363 diff --git a/cves/2003/CVE-2003-0264.md b/cves/2003/CVE-2003-0264.md index aab73e0451e..1445660fab2 100644 --- a/cves/2003/CVE-2003-0264.md +++ b/cves/2003/CVE-2003-0264.md @@ -20,6 +20,7 @@ Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execut - https://github.com/pwncone/CVE-2003-0264-SLmail-5.5 - https://github.com/vrikodar/CVE-2003-0264_EXPLOIT - https://github.com/war4uthor/CVE-2003-0264 +- https://github.com/TheMalwareGuardian/CVE-2003-0264 #### ExploitDB - https://www.exploit-db.com/exploits/16399 diff --git a/cves/2004/CVE-2004-2549.md b/cves/2004/CVE-2004-2549.md index 5c159c5ff14..553ca0c9905 100644 --- a/cves/2004/CVE-2004-2549.md +++ b/cves/2004/CVE-2004-2549.md @@ -13,7 +13,7 @@ Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2004-2549 #### ExploitDB - https://www.exploit-db.com/exploits/23786 diff --git a/cves/2004/CVE-2004-2687.md b/cves/2004/CVE-2004-2687.md index 422c0ec61db..27986215991 100644 --- a/cves/2004/CVE-2004-2687.md +++ b/cves/2004/CVE-2004-2687.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/k4u5h41/distccd_rce_CVE-2004-2687 - https://github.com/n3ov4n1sh/distccd_rce_CVE-2004-2687 - https://github.com/n3rdh4x0r/distccd_rce_CVE-2004-2687 +- https://github.com/nulltrace1336/Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-2687.yaml diff --git a/cves/2005/CVE-2005-0575.md b/cves/2005/CVE-2005-0575.md index 2da516618ea..59590ee709c 100644 --- a/cves/2005/CVE-2005-0575.md +++ b/cves/2005/CVE-2005-0575.md @@ -16,6 +16,7 @@ Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers #### Github - https://github.com/3t3rn4lv01d/CVE-2005-0575 - https://github.com/MayaOfVeil/CVE-2005-0575 +- https://github.com/bluedragonsecurity/CVE-2005-0575-knet-exploit #### ExploitDB - https://www.exploit-db.com/exploits/24950 diff --git a/cves/2006/CVE-2006-3392.md b/cves/2006/CVE-2006-3392.md index 87f25d474a1..0cbdf6f1991 100644 --- a/cves/2006/CVE-2006-3392.md +++ b/cves/2006/CVE-2006-3392.md @@ -22,6 +22,7 @@ No PoCs from references. - https://github.com/gb21oc/ExploitWebmin - https://github.com/kernel-cyber/CVE-2006-3392 - https://github.com/windsormoreira/CVE-2006-3392 +- https://github.com/Adel-hx0d/CVE-2006-3392 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-3392.yaml diff --git a/cves/2007/CVE-2007-1567.md b/cves/2007/CVE-2007-1567.md index 2d57d9aec7b..2de1d521eb8 100644 --- a/cves/2007/CVE-2007-1567.md +++ b/cves/2007/CVE-2007-1567.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/war4uthor/CVE-2007-1567 +- https://github.com/TheMalwareGuardian/CVE-2007-1567 #### ExploitDB - https://www.exploit-db.com/exploits/3570 diff --git a/cves/2007/CVE-2007-2447.md b/cves/2007/CVE-2007-2447.md index 199bb35d453..e580d770378 100644 --- a/cves/2007/CVE-2007-2447.md +++ b/cves/2007/CVE-2007-2447.md @@ -61,6 +61,11 @@ The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote - https://github.com/xbufu/CVE-2007-2447 - https://github.com/xlcc4096/exploit-CVE-2007-2447 - https://github.com/ygbull/Capstone +- https://github.com/Daviddoctor/Samba-CVE-2007-2447-Exploit-Username-Map-Script +- https://github.com/abdulsaabir/CVE-2007-2447 +- https://github.com/nulltrace1336/Samba-Exploit-CVE-2007-2447 +- https://github.com/r3vpwnx/CVE-2007-2447 +- https://github.com/vig9610/Exploiting-Samba-on-Metasploitable-2 #### ExploitDB - https://www.exploit-db.com/exploits/16320 diff --git a/cves/2007/CVE-2007-3831.md b/cves/2007/CVE-2007-3831.md index f552a8f2fd8..0a567f21186 100644 --- a/cves/2007/CVE-2007-3831.md +++ b/cves/2007/CVE-2007-3831.md @@ -13,5 +13,5 @@ PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 an No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2007-3831 diff --git a/cves/2007/CVE-2007-4560.md b/cves/2007/CVE-2007-4560.md index 408d16bde69..d035ec16c32 100644 --- a/cves/2007/CVE-2007-4560.md +++ b/cves/2007/CVE-2007-4560.md @@ -15,6 +15,7 @@ clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remot #### Github - https://github.com/0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution - https://github.com/Sic4rio/-Sendmail-with-clamav-milter-0.91.2---Remote-Command-Execution +- https://github.com/Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-4560 #### ExploitDB - https://www.exploit-db.com/exploits/16924 diff --git a/cves/2007/CVE-2007-5036.md b/cves/2007/CVE-2007-5036.md index 9424c3be990..7016c44dc95 100644 --- a/cves/2007/CVE-2007-5036.md +++ b/cves/2007/CVE-2007-5036.md @@ -13,7 +13,7 @@ Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 - https://www.exploit-db.com/exploits/4426 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2007-5036 #### ExploitDB - https://www.exploit-db.com/exploits/4426 diff --git a/cves/2007/CVE-2007-6638.md b/cves/2007/CVE-2007-6638.md index 0f473f64d89..fcf44c04621 100644 --- a/cves/2007/CVE-2007-6638.md +++ b/cves/2007/CVE-2007-6638.md @@ -13,7 +13,7 @@ March Networks DVR 3204 stores sensitive information under the web root with ins - https://www.exploit-db.com/exploits/4797 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2007-6638 #### ExploitDB - https://www.exploit-db.com/exploits/4797 diff --git a/cves/2008/CVE-2008-0166.md b/cves/2008/CVE-2008-0166.md index 454e4712a5c..ac3d6b9a622 100644 --- a/cves/2008/CVE-2008-0166.md +++ b/cves/2008/CVE-2008-0166.md @@ -24,6 +24,7 @@ OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating system - https://github.com/demining/Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166 - https://github.com/g0tmi1k/debian-ssh - https://github.com/shn3rd/OpenSSL-PRNG +- https://github.com/Faizan8232403/CVE-Exploit-Research-Development #### ExploitDB - https://www.exploit-db.com/exploits/5720 diff --git a/cves/2008/CVE-2008-1930.md b/cves/2008/CVE-2008-1930.md index bf8bf297c4e..6c47569db15 100644 --- a/cves/2008/CVE-2008-1930.md +++ b/cves/2008/CVE-2008-1930.md @@ -13,7 +13,7 @@ The cookie authentication method in WordPress 2.5 relies on a hash of a concaten No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HeisenbergH4X/CVE-2008-1930 #### Nuclei - https://github.com/topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2008/CVE-2008-1930-wordpress-0a16651c-613b-462b-9d73-10a74892ecdc.yaml diff --git a/cves/2008/CVE-2008-5161.md b/cves/2008/CVE-2008-5161.md index eadee1c69f0..6ae44238e33 100644 --- a/cves/2008/CVE-2008-5161.md +++ b/cves/2008/CVE-2008-5161.md @@ -17,6 +17,7 @@ Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Conne - https://github.com/jarial-sec/OpenSSH_4.7p1-Exploit - https://github.com/mahaoffsec/OpenSSH_4.7p1-Exploit - https://github.com/sec-jarial/OpenSSH_4.7p1-Exploit +- https://github.com/talha3117/OpenSSH-4.7p1-CVE-2008-5161-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_version.rb diff --git a/cves/2008/CVE-2008-6827.md b/cves/2008/CVE-2008-6827.md index b27a2003b80..31f6f5e19cd 100644 --- a/cves/2008/CVE-2008-6827.md +++ b/cves/2008/CVE-2008-6827.md @@ -13,5 +13,5 @@ The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deploym No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2008-6827 diff --git a/cves/2009/CVE-2009-0473.md b/cves/2009/CVE-2009-0473.md index e7e94744de6..9183f62740b 100644 --- a/cves/2009/CVE-2009-0473.md +++ b/cves/2009/CVE-2009-0473.md @@ -13,5 +13,5 @@ Open redirect vulnerability in the web interface in the Rockwell Automation Cont No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/akbarq/CVE-2009-0473-check diff --git a/cves/2009/CVE-2009-3103.md b/cves/2009/CVE-2009-3103.md index b4b292cb009..2864de001f2 100644 --- a/cves/2009/CVE-2009-3103.md +++ b/cves/2009/CVE-2009-3103.md @@ -19,6 +19,8 @@ Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft - https://github.com/ankh2054/python-exploits - https://github.com/joshchalabi/SMBv2-Exploit-PrivEsc - https://github.com/sec13b/ms09-050_CVE-2009-3103 +- https://github.com/afifudinmtop/CVE-2009-3103 +- https://github.com/nicolasdamians/ms09-050-CVE-2009-3103-exploit #### ExploitDB - https://www.exploit-db.com/exploits/16363 diff --git a/cves/2009/CVE-2009-4118.md b/cves/2009/CVE-2009-4118.md index 9accbed7562..8b990b62eb4 100644 --- a/cves/2009/CVE-2009-4118.md +++ b/cves/2009/CVE-2009-4118.md @@ -13,7 +13,7 @@ The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisc - http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2009-4118 #### ExploitDB - https://www.exploit-db.com/exploits/10190 diff --git a/cves/2009/CVE-2009-4623.md b/cves/2009/CVE-2009-4623.md index 979f8655282..2b649c75361 100644 --- a/cves/2009/CVE-2009-4623.md +++ b/cves/2009/CVE-2009-4623.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/MonsempesSamuel/CVE-2009-4623 - https://github.com/hupe1980/CVE-2009-4623 - https://github.com/kernel-cyber/CVE-2009-4623 +- https://github.com/sammonsempes/CVE-2009-4623 #### ExploitDB - https://www.exploit-db.com/exploits/9623 diff --git a/cves/2010/CVE-2010-0219.md b/cves/2010/CVE-2010-0219.md index ed174a6a536..b036caabcdb 100644 --- a/cves/2010/CVE-2010-0219.md +++ b/cves/2010/CVE-2010-0219.md @@ -15,6 +15,7 @@ Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, #### Github - https://github.com/veritas-rt/CVE-2010-0219 +- https://github.com/vvts-alpha/CVE-2010-0219 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0219.yaml diff --git a/cves/2010/CVE-2010-2075.md b/cves/2010/CVE-2010-2075.md index 27f99b235ea..dd515cfc1e2 100644 --- a/cves/2010/CVE-2010-2075.md +++ b/cves/2010/CVE-2010-2075.md @@ -22,6 +22,8 @@ No PoCs from references. - https://github.com/chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution - https://github.com/djbender7/cybersecurity-labs - https://github.com/kevinpdicks/UnrealIRCD-3.2.8.1-RCE +- https://github.com/Tc-XoNoR/CVE-2010-2075 +- https://github.com/earthbendergara/unrealircd3.2.8.1-local-exploit #### ExploitDB - https://www.exploit-db.com/exploits/16922 diff --git a/cves/2010/CVE-2010-2861.md b/cves/2010/CVE-2010-2861.md index 5ca51658ccf..5448d3de5eb 100644 --- a/cves/2010/CVE-2010-2861.md +++ b/cves/2010/CVE-2010-2861.md @@ -15,7 +15,7 @@ Multiple directory traversal vulnerabilities in the administrator console in Ado - http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/ #### Github -No PoCs found on GitHub currently. +- https://github.com/greysneakthief/14641-v2 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2861.yaml @@ -26,3 +26,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/coldfusion_locale_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2010-2861 diff --git a/cves/2010/CVE-2010-3863.md b/cves/2010/CVE-2010-3863.md index b2e3b6a9305..c9768da4a52 100644 --- a/cves/2010/CVE-2010-3863.md +++ b/cves/2010/CVE-2010-3863.md @@ -13,10 +13,13 @@ Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sh1inroot-alt/shiro-cve-2010-3863 #### ExploitDB - https://www.exploit-db.com/exploits/34952 #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/CVE-2010-3863.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2010-3863 diff --git a/cves/2011/CVE-2011-1473.md b/cves/2011/CVE-2011-1473.md index 303835ad4fa..d0875fcd6c1 100644 --- a/cves/2011/CVE-2011-1473.md +++ b/cves/2011/CVE-2011-1473.md @@ -15,4 +15,5 @@ OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client #### Github - https://github.com/zjt674449039/cve-2011-1473 +- https://github.com/khaledibnalwalid/CVE-2011-1473-POC diff --git a/cves/2011/CVE-2011-1485.md b/cves/2011/CVE-2011-1485.md index 5e033712a54..980b5444010 100644 --- a/cves/2011/CVE-2011-1485.md +++ b/cves/2011/CVE-2011-1485.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/Pashkela/CVE-2011-1485 +- https://github.com/bluedragonsecurity/CVE-2011-1485-pkexec-exploit #### ExploitDB - https://www.exploit-db.com/exploits/35021 diff --git a/cves/2011/CVE-2011-1571.md b/cves/2011/CVE-2011-1571.md index e18dc0c67ad..79e6771c5be 100644 --- a/cves/2011/CVE-2011-1571.md +++ b/cves/2011/CVE-2011-1571.md @@ -15,6 +15,7 @@ Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community #### Github - https://github.com/noobpk/CVE-2011-1571 +- https://github.com/yazgx97/CVE-2011-1571 #### ExploitDB - https://www.exploit-db.com/exploits/18715 diff --git a/cves/2011/CVE-2011-2523.md b/cves/2011/CVE-2011-2523.md index da9fb0528ea..70165712f6b 100644 --- a/cves/2011/CVE-2011-2523.md +++ b/cves/2011/CVE-2011-2523.md @@ -80,6 +80,15 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which - https://github.com/tarikemal/exploit-ftp-samba - https://github.com/thanawut2903/Port-21-tcp-vsftpd-2.3.4-exploit - https://github.com/vaishnavucv/CVE-2011-2523 +- https://github.com/ByteForgeFr/CVE-2011-2523 +- https://github.com/Chathura123git/ethical-hacking-CVE-2011-2523 +- https://github.com/Dahalsamir/CVE-2011-2523-exploit +- https://github.com/Gvln-S/CVE-2011-2523 +- https://github.com/H4R335HR/vsftpd-234-backdoor +- https://github.com/IvoAlbacete/Kali-Metasploitable +- https://github.com/RinAliyeva/metasploitable2-vsftpd-exploitation +- https://github.com/brettsm/vsftpd2.3.4-backdoor-exploit +- https://github.com/tshaq17/vsftpd-2.3.4---Backdoor-Command-Execution #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml diff --git a/cves/2011/CVE-2011-3192.md b/cves/2011/CVE-2011-3192.md index 6633a4e41c3..595e0a0724a 100644 --- a/cves/2011/CVE-2011-3192.md +++ b/cves/2011/CVE-2011-3192.md @@ -19,6 +19,7 @@ The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and - https://github.com/r3p3r/1N3-Exploits - https://github.com/stcmjp/cve-2011-3192 - https://github.com/tkisason/KillApachePy +- https://github.com/bluedragonsecurity/CVE-2011-3192-apache-exploit #### ExploitDB - https://www.exploit-db.com/exploits/18221 diff --git a/cves/2012/CVE-2012-1803.md b/cves/2012/CVE-2012-1803.md index bbb6af650a3..174118f9563 100644 --- a/cves/2012/CVE-2012-1803.md +++ b/cves/2012/CVE-2012-1803.md @@ -13,7 +13,7 @@ RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/x3roxismygood/CVE-2012-1803 #### ExploitDB - https://www.exploit-db.com/exploits/18779 diff --git a/cves/2012/CVE-2012-1823.md b/cves/2012/CVE-2012-1823.md index 41235570241..9f52acff0f9 100644 --- a/cves/2012/CVE-2012-1823.md +++ b/cves/2012/CVE-2012-1823.md @@ -22,6 +22,8 @@ No PoCs from references. - https://github.com/drone789/CVE-2012-1823 - https://github.com/infodox/exploits - https://github.com/zomasec/CVE-2024-4577 +- https://github.com/K3ysTr0K3R/CVE-2012-1823 +- https://github.com/tryj/CVE-2012-1823---PHP-CGI---RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1823.yaml @@ -34,3 +36,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_cgi_arg_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2012-1823 diff --git a/cves/2012/CVE-2012-2122.md b/cves/2012/CVE-2012-2122.md index aee2e68d300..d5b13482720 100644 --- a/cves/2012/CVE-2012-2122.md +++ b/cves/2012/CVE-2012-2122.md @@ -17,6 +17,7 @@ No PoCs from references. - https://github.com/subinyy/docker_CVE_2012_2122 - https://github.com/yunkihong-dev/Vulhub - https://github.com/zhangkaibin0921/CVE-2012-2122 +- https://github.com/K3ysTr0K3R/CVE-2012-2122 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2012/CVE-2012-2122.yaml @@ -26,3 +27,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/mysql/CVE-2012-2122 diff --git a/cves/2012/CVE-2012-2982.md b/cves/2012/CVE-2012-2982.md index 22e7dfa80ec..db9b333202f 100644 --- a/cves/2012/CVE-2012-2982.md +++ b/cves/2012/CVE-2012-2982.md @@ -35,6 +35,7 @@ file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to e - https://github.com/tera-si/PoC-scripts-in-GO - https://github.com/varppi/CVE-2012-2982 - https://github.com/wizardy0ga/CVE_2012-2982 +- https://github.com/JRrooot/CVE-2012-2982-Webmin-RCE #### ExploitDB - https://www.exploit-db.com/exploits/21851 diff --git a/cves/2012/CVE-2012-4929.md b/cves/2012/CVE-2012-4929.md index ed6a6709f13..497d9aacc5e 100644 --- a/cves/2012/CVE-2012-4929.md +++ b/cves/2012/CVE-2012-4929.md @@ -18,4 +18,5 @@ The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, #### Github - https://github.com/SECURED-FP7/secured-psa-reencrypt - https://github.com/jselvi/docker-crime +- https://github.com/mpgn/CRIME-poc diff --git a/cves/2012/CVE-2012-6422.md b/cves/2012/CVE-2012-6422.md index 23d040de247..b16b384b558 100644 --- a/cves/2012/CVE-2012-6422.md +++ b/cves/2012/CVE-2012-6422.md @@ -15,5 +15,5 @@ The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other And - http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices #### Github -No PoCs found on GitHub currently. +- https://github.com/wired0ut/CVE-2012-6422 diff --git a/cves/2013/CVE-2013-0156.md b/cves/2013/CVE-2013-0156.md index 0f6b680cdd0..7b586917720 100644 --- a/cves/2013/CVE-2013-0156.md +++ b/cves/2013/CVE-2013-0156.md @@ -16,6 +16,7 @@ active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0. - https://github.com/R3dKn33-zz/CVE-2013-0156 - https://github.com/bsodmike/rails-exploit-cve-2013-0156 - https://github.com/heroku/heroku-CVE-2013-0156 +- https://github.com/oxben10/CVE-2013-0156 #### ExploitDB - https://www.exploit-db.com/exploits/27527 diff --git a/cves/2013/CVE-2013-3900.md b/cves/2013/CVE-2013-3900.md index 390991939df..830b75c2f33 100644 --- a/cves/2013/CVE-2013-3900.md +++ b/cves/2013/CVE-2013-3900.md @@ -48,4 +48,5 @@ No PoCs from references. - https://github.com/pkblanks/Remediating-CVE-2013-3900-EnableCertPaddingCheck- - https://github.com/ptrstr/MsiAuthenticodeInject - https://github.com/snoopopsec/vulnerability-CVE-2013-3900 +- https://github.com/norvethil/CVE-2013-3900-PowerShell-PoC diff --git a/cves/2013/CVE-2013-4322.md b/cves/2013/CVE-2013-4322.md index ee5a765ebd6..13112bf64e8 100644 --- a/cves/2013/CVE-2013-4322.md +++ b/cves/2013/CVE-2013-4322.md @@ -13,5 +13,5 @@ Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 proces - http://seclists.org/fulldisclosure/2014/Dec/23 #### Github -No PoCs found on GitHub currently. +- https://github.com/LiviuPtr/CVE-2013-4322_PoC diff --git a/cves/2013/CVE-2013-4547.md b/cves/2013/CVE-2013-4547.md index 3abfe31914a..ca7f84379f9 100644 --- a/cves/2013/CVE-2013-4547.md +++ b/cves/2013/CVE-2013-4547.md @@ -17,3 +17,6 @@ No PoCs from references. #### ExploitDB - https://www.exploit-db.com/exploits/38846 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nginx/CVE-2013-4547 diff --git a/cves/2013/CVE-2013-4660.md b/cves/2013/CVE-2013-4660.md index 3cc6bd4c15f..8bbc4015547 100644 --- a/cves/2013/CVE-2013-4660.md +++ b/cves/2013/CVE-2013-4660.md @@ -13,7 +13,7 @@ The JS-YAML module before 2.0.5 for Node.js parses input without properly consid - https://nealpoole.com/blog/2013/06/code-execution-via-yaml-in-js-yaml-nodejs-module/ #### Github -No PoCs found on GitHub currently. +- https://github.com/leehunkoo/cve-2013-4660_PoC #### ExploitDB - https://www.exploit-db.com/exploits/28655 diff --git a/cves/2014/CVE-2014-0075.md b/cves/2014/CVE-2014-0075.md index bca102de008..f8d287e0c9d 100644 --- a/cves/2014/CVE-2014-0075.md +++ b/cves/2014/CVE-2014-0075.md @@ -13,5 +13,5 @@ Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http - http://seclists.org/fulldisclosure/2014/Dec/23 #### Github -No PoCs found on GitHub currently. +- https://github.com/LiviuPtr/CVE-2014-0075_PoC diff --git a/cves/2014/CVE-2014-0160.md b/cves/2014/CVE-2014-0160.md index 0abb2d6165e..1724f18316a 100644 --- a/cves/2014/CVE-2014-0160.md +++ b/cves/2014/CVE-2014-0160.md @@ -71,6 +71,11 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p - https://github.com/tomdevman/heartbleed-bug - https://github.com/undacmic/heartbleed-proof-of-concept - https://github.com/yashfren/CVE-2014-0160-HeartBleed +- https://github.com/0xBlackash/CVE-2014-0160 +- https://github.com/22imer/CVE-2014-0160 +- https://github.com/SimoesCTT/CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160 +- https://github.com/indrajeetmp11/Heartbleed-PoC-Exploit-Script +- https://github.com/tungduongNT/CVE-2014-0160. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2014/CVE-2014-0160.yaml @@ -84,3 +89,6 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_heartbleed.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_heartbeat_client_memory.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160 diff --git a/cves/2014/CVE-2014-3120.md b/cves/2014/CVE-2014-3120.md index 281c92173b9..99f50e354da 100644 --- a/cves/2014/CVE-2014-3120.md +++ b/cves/2014/CVE-2014-3120.md @@ -20,6 +20,7 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting, - https://github.com/echohtp/ElasticSearch-CVE-2014-3120 - https://github.com/pi-2r/Elasticsearch-ExpLoit - https://github.com/xpgdgit/CVE-2014-3120 +- https://github.com/Dungsocool/CVE-2014-3120 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3120.yaml @@ -30,3 +31,6 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting, #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/elasticsearch/script_mvel_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2014-3120 diff --git a/cves/2014/CVE-2014-3566.md b/cves/2014/CVE-2014-3566.md index 67fa6f428bb..642adba0163 100644 --- a/cves/2014/CVE-2014-3566.md +++ b/cves/2014/CVE-2014-3566.md @@ -23,3 +23,5 @@ The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses - https://github.com/mikesplain/CVE-2014-3566-poodle-cookbook - https://github.com/r3p3r/1N3-MassBleed - https://github.com/uthrasri/openssl_g2.5_CVE-2014-3566 +- https://github.com/josecl200/VC-PoodlePOC +- https://github.com/mpgn/poodle-PoC diff --git a/cves/2014/CVE-2014-3704.md b/cves/2014/CVE-2014-3704.md index f0e331af32b..1261c7e4fec 100644 --- a/cves/2014/CVE-2014-3704.md +++ b/cves/2014/CVE-2014-3704.md @@ -38,3 +38,6 @@ The expandArguments function in the database abstraction API in Drupal core 7.x #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/drupal_drupageddon.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2014-3704 diff --git a/cves/2014/CVE-2014-4210.md b/cves/2014/CVE-2014-4210.md index 64522da6d07..f5b4d4ebbdd 100644 --- a/cves/2014/CVE-2014-4210.md +++ b/cves/2014/CVE-2014-4210.md @@ -16,6 +16,7 @@ Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusi - https://github.com/NHPT/WebLogic-SSRF_CVE-2014-4210 - https://github.com/ZorvithonLeo/Exploit-CVE-2014-4210- - https://github.com/unmanarc/CVE-2014-4210-SSRF-PORTSCANNER-POC +- https://github.com/0xn0ne/weblogicScanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4210.yaml diff --git a/cves/2014/CVE-2014-4688.md b/cves/2014/CVE-2014-4688.md index f3f76f0eaa9..5eafdde7f11 100644 --- a/cves/2014/CVE-2014-4688.md +++ b/cves/2014/CVE-2014-4688.md @@ -14,6 +14,8 @@ pfSense before 2.1.4 allows remote authenticated users to execute arbitrary comm #### Github - https://github.com/fenix0499/CVE-2014-4688-NodeJs-Exploit +- https://github.com/jaydenblair/CVE-2014-4688-pfsense +- https://github.com/note0577/CVE-2014-4688-NodeJs-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/43560 diff --git a/cves/2014/CVE-2014-4725.md b/cves/2014/CVE-2014-4725.md index 13cd5f06102..9cecc1da1a2 100644 --- a/cves/2014/CVE-2014-4725.md +++ b/cves/2014/CVE-2014-4725.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/Pwdnx1337/CVE-2014-4725 - https://github.com/Pwdnx1337/MASS-CVE-2014-4725 - https://github.com/pwdnx337/CVE-2014-4725 +- https://github.com/AnotherSec/CVE-2014-4725 #### ExploitDB - https://www.exploit-db.com/exploits/33991 diff --git a/cves/2014/CVE-2014-6271.md b/cves/2014/CVE-2014-6271.md index 3148dac7a4a..719b810af1c 100644 --- a/cves/2014/CVE-2014-6271.md +++ b/cves/2014/CVE-2014-6271.md @@ -110,6 +110,14 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th - https://github.com/woltage/CVE-2014-6271 - https://github.com/yanicklandry/bashfix - https://github.com/zalalov/CVE-2014-6271 +- https://github.com/FacundoMfernandez/pentesting-obioba +- https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock +- https://github.com/J0hnTh3Kn1ght/CVE-2014-6271 +- https://github.com/TheRealCiscoo/shellshock-poc +- https://github.com/caverm/Shellshock_CVE-2014-6271 +- https://github.com/im2sinister/CVE-2014-6271 +- https://github.com/kaleth4/-CVE-2014-6271 +- https://github.com/kaleth4/CVE-2014-6271 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6271.yaml @@ -133,3 +141,6 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/dhcp/bash_environment.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/dhclient_bash_env.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/vmware_bash_function_root.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/bash/CVE-2014-6271 diff --git a/cves/2014/CVE-2014-6287.md b/cves/2014/CVE-2014-6287.md index 3a18687272e..4d98d10d9c9 100644 --- a/cves/2014/CVE-2014-6287.md +++ b/cves/2014/CVE-2014-6287.md @@ -32,6 +32,8 @@ The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks H - https://github.com/thepedroalves/HFS-2.3-RCE-Exploit - https://github.com/wizardy0ga/THM-Steel_Mountain-CVE-2014-6287 - https://github.com/zhsh9/CVE-2014-6287 +- https://github.com/JoaZ94/rejjeto_hfs-rce-exploit-cve-2014-6287 +- https://github.com/Z3R0space/CVE-2014-6287 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6287.yaml diff --git a/cves/2014/CVE-2014-7169.md b/cves/2014/CVE-2014-7169.md index c5b566cbaae..738cc52217c 100644 --- a/cves/2014/CVE-2014-7169.md +++ b/cves/2014/CVE-2014-7169.md @@ -33,6 +33,7 @@ GNU Bash through 4.3 bash43-025 processes trailing strings after certain malform - https://github.com/rcvalle/exploits - https://github.com/securetiger/Exploit-Shellshock - https://github.com/timb-machine-mirrors/rcvalle-exploits +- https://github.com/Kushiro45/shellshock-poc-cve-2014-7169 #### ExploitDB - https://www.exploit-db.com/exploits/36933 diff --git a/cves/2014/CVE-2014-8610.md b/cves/2014/CVE-2014-8610.md index 9cf79c35fbf..10da3ebfcab 100644 --- a/cves/2014/CVE-2014-8610.md +++ b/cves/2014/CVE-2014-8610.md @@ -14,5 +14,5 @@ AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permis - http://seclists.org/fulldisclosure/2014/Nov/85 #### Github -No PoCs found on GitHub currently. +- https://github.com/eddieoz/dual-ec-drbg diff --git a/cves/2014/CVE-2014-9173.md b/cves/2014/CVE-2014-9173.md index a514a43c4d9..1ae9b9872c5 100644 --- a/cves/2014/CVE-2014-9173.md +++ b/cves/2014/CVE-2014-9173.md @@ -13,7 +13,7 @@ SQL injection vulnerability in view.php in the Google Doc Embedder plugin before - http://www.exploit-db.com/exploits/35371 #### Github -No PoCs found on GitHub currently. +- https://github.com/ratiros01/CVE-2014-9173 #### ExploitDB - https://www.exploit-db.com/exploits/35447 diff --git a/cves/2015/CVE-2015-10141.md b/cves/2015/CVE-2015-10141.md index 0fb9725abbf..46d3fac7d5c 100644 --- a/cves/2015/CVE-2015-10141.md +++ b/cves/2015/CVE-2015-10141.md @@ -17,6 +17,7 @@ An unauthenticated OS command injection vulnerability exists within Xdebug versi #### Github - https://github.com/D3Ext/CVE-2015-10141 - https://github.com/n0m4d22/PoC-CVE-2015-10141-Xdebug +- https://github.com/K3ysTr0K3R/CVE-2015-10141 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-10141.yaml diff --git a/cves/2015/CVE-2015-1328.md b/cves/2015/CVE-2015-1328.md index d73f938d828..03be2f4cc3a 100644 --- a/cves/2015/CVE-2015-1328.md +++ b/cves/2015/CVE-2015-1328.md @@ -20,6 +20,11 @@ The overlayfs implementation in the linux (aka Linux kernel) package before 3.19 - https://github.com/elit3pwner/CVE-2015-1328-GoldenEye - https://github.com/freelancermijan/Linux-Privilege-Escalation-Tryhackme - https://github.com/notlikethis/CVE-2015-1328 +- https://github.com/0xf1d0/CVE-2015-1328 +- https://github.com/FernandoCassioDev/CVE-2015-1328 +- https://github.com/WhatsWrongAndWhy/CVE-2015-1328 +- https://github.com/bansalkrish007-arch/cve-2015-1328 +- https://github.com/saqib-butt2/blackbox-pentesting-infsecos #### ExploitDB - https://www.exploit-db.com/exploits/40688 diff --git a/cves/2015/CVE-2015-1427.md b/cves/2015/CVE-2015-1427.md index bf7ddedc25e..43a9ef8c328 100644 --- a/cves/2015/CVE-2015-1427.md +++ b/cves/2015/CVE-2015-1427.md @@ -38,3 +38,6 @@ The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/elasticsearch/search_groovy_script.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2015-1427 diff --git a/cves/2015/CVE-2015-1538.md b/cves/2015/CVE-2015-1538.md index 6883ab3d230..dc189229679 100644 --- a/cves/2015/CVE-2015-1538.md +++ b/cves/2015/CVE-2015-1538.md @@ -20,6 +20,7 @@ Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTa - https://github.com/niranjanshr13/Stagefright-cve-2015-1538-1 - https://github.com/oguzhantopgul/cve-2015-1538-1 - https://github.com/renjithsasidharan/cve-2015-1538-1 +- https://github.com/xsleaksiki/cve #### ExploitDB - https://www.exploit-db.com/exploits/38124 diff --git a/cves/2015/CVE-2015-1635.md b/cves/2015/CVE-2015-1635.md index 8f439f04389..fe2fa850203 100644 --- a/cves/2015/CVE-2015-1635.md +++ b/cves/2015/CVE-2015-1635.md @@ -49,6 +49,7 @@ HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Wind - https://github.com/n3rdh4x0r/CVE-2015-1635-POC - https://github.com/neu5ron/cve_2015-1635 - https://github.com/w01ke/CVE-2015-1635-POC +- https://github.com/moeinmiadi/CVE-2015-1635_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1635.yaml diff --git a/cves/2015/CVE-2015-1805.md b/cves/2015/CVE-2015-1805.md index 20ea930fcc1..8ff0dac77ab 100644 --- a/cves/2015/CVE-2015-1805.md +++ b/cves/2015/CVE-2015-1805.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/dosomder/iovyroot - https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 - https://github.com/panyu6325/CVE-2015-1805 +- https://github.com/valentineus/hp-slate7-root-kit diff --git a/cves/2015/CVE-2015-2291.md b/cves/2015/CVE-2015-2291.md index eea6c7299ec..f7f1a422fc7 100644 --- a/cves/2015/CVE-2015-2291.md +++ b/cves/2015/CVE-2015-2291.md @@ -17,6 +17,7 @@ #### Github - https://github.com/Tare05/Intel-CVE-2015-2291 - https://github.com/gmh5225/CVE-2015-2291 +- https://github.com/ethanedits/iqvw64e-privilege-escalation #### ExploitDB - https://www.exploit-db.com/exploits/36392 diff --git a/cves/2015/CVE-2015-3224.md b/cves/2015/CVE-2015-3224.md index 342cbc2ba10..9ca172d0c8e 100644 --- a/cves/2015/CVE-2015-3224.md +++ b/cves/2015/CVE-2015-3224.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/n000xy/CVE-2015-3224- - https://github.com/redirected/tricks - https://github.com/xda3m00n/CVE-2015-3224- +- https://github.com/SQU4NCH/CVE-2015-3224 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3224.yaml diff --git a/cves/2015/CVE-2015-3246.md b/cves/2015/CVE-2015-3246.md index 3676eeabe04..260fe8786cb 100644 --- a/cves/2015/CVE-2015-3246.md +++ b/cves/2015/CVE-2015-3246.md @@ -15,7 +15,7 @@ libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper progr - https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2015-3246 #### ExploitDB - https://www.exploit-db.com/exploits/44633 diff --git a/cves/2015/CVE-2015-3306.md b/cves/2015/CVE-2015-3306.md index 8332209f8a3..d5dbd12c8d2 100644 --- a/cves/2015/CVE-2015-3306.md +++ b/cves/2015/CVE-2015-3306.md @@ -35,6 +35,8 @@ The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write t - https://github.com/m4udSec/ProFTPD_CVE-2015-3306 - https://github.com/shk0x/cpx_proftpd - https://github.com/t0kx/exploit-CVE-2015-3306 +- https://github.com/Z3R0space/CVE-2015-3306 +- https://github.com/xyk0x/cpx_proftpd #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml diff --git a/cves/2015/CVE-2015-3337.md b/cves/2015/CVE-2015-3337.md index 971519ca66d..6f0b5c4cb79 100644 --- a/cves/2015/CVE-2015-3337.md +++ b/cves/2015/CVE-2015-3337.md @@ -22,3 +22,6 @@ Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before #### ExploitDB - https://www.exploit-db.com/exploits/37054 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2015-3337 diff --git a/cves/2015/CVE-2015-3839.md b/cves/2015/CVE-2015-3839.md index d46e09caf4d..83b9f67ecae 100644 --- a/cves/2015/CVE-2015-3839.md +++ b/cves/2015/CVE-2015-3839.md @@ -14,5 +14,5 @@ The updateMessageStatus function in Android 5.1.1 and earlier allows local users - http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Cecilia-newbie/cve-2015-3839_PoC diff --git a/cves/2015/CVE-2015-5254.md b/cves/2015/CVE-2015-5254.md index 3f0d90883f2..c381b49ed08 100644 --- a/cves/2015/CVE-2015-5254.md +++ b/cves/2015/CVE-2015-5254.md @@ -16,4 +16,7 @@ No PoCs from references. - https://github.com/Ma1Dong/ActiveMQ_CVE-2015-5254 - https://github.com/guigui237/Exploitation-de-la-vuln-rabilit-CVE-2015-5254- - https://github.com/jas502n/CVE-2015-5254 +- https://github.com/Catherines77/ActiveMQ-EXPtools +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2015-5254 diff --git a/cves/2015/CVE-2015-5287.md b/cves/2015/CVE-2015-5287.md index b3631d28524..6b51c74d092 100644 --- a/cves/2015/CVE-2015-5287.md +++ b/cves/2015/CVE-2015-5287.md @@ -15,7 +15,7 @@ The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2. - https://www.exploit-db.com/exploits/38832/ #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2015-5287 #### ExploitDB - https://www.exploit-db.com/exploits/47421 diff --git a/cves/2015/CVE-2015-5531.md b/cves/2015/CVE-2015-5531.md index 6ebd7706fb3..6c0928b5bd1 100644 --- a/cves/2015/CVE-2015-5531.md +++ b/cves/2015/CVE-2015-5531.md @@ -22,6 +22,7 @@ Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote at - https://github.com/j-jasson/CVE-2015-5531-POC - https://github.com/moonwayy/hindicybersec - https://github.com/xpgdgit/CVE-2015-5531 +- https://github.com/MoCh3n/CVE-2015-5531-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5531.yaml @@ -31,3 +32,6 @@ Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote at #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2015-5531 diff --git a/cves/2015/CVE-2015-8522.md b/cves/2015/CVE-2015-8522.md index ca96eb10ae1..db0b5612c2d 100644 --- a/cves/2015/CVE-2015-8522.md +++ b/cves/2015/CVE-2015-8522.md @@ -13,5 +13,5 @@ Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6 No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/damariion/CVE-2015-8522.RCE diff --git a/cves/2015/CVE-2015-8550.md b/cves/2015/CVE-2015-8550.md index 1efd36939db..eb8a07b4c1a 100644 --- a/cves/2015/CVE-2015-8550.md +++ b/cves/2015/CVE-2015-8550.md @@ -13,5 +13,5 @@ Xen, when used on a system providing PV backends, allows local guest OS administ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2015-8550 diff --git a/cves/2015/CVE-2015-8562.md b/cves/2015/CVE-2015-8562.md index 1d7330475ad..b7277b3b016 100644 --- a/cves/2015/CVE-2015-8562.md +++ b/cves/2015/CVE-2015-8562.md @@ -38,3 +38,6 @@ Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP o #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/joomla_http_header_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/joomla/CVE-2015-8562 diff --git a/cves/2015/CVE-2015-9235.md b/cves/2015/CVE-2015-9235.md index 7c3108b06ab..56492c2bb7f 100644 --- a/cves/2015/CVE-2015-9235.md +++ b/cves/2015/CVE-2015-9235.md @@ -16,4 +16,6 @@ No PoCs from references. - https://github.com/WinDyAlphA/CVE-2015-9235_JWT_key_confusion - https://github.com/aalex954/jwt-key-confusion-poc - https://github.com/achmadismail173/jwt_exploit +- https://github.com/Nxvh1337/CVE-2015-9235_JWT_key_confusion +- https://github.com/tierChampion/POC_CVE-2015-9235 diff --git a/cves/2015/CVE-2015-9331.md b/cves/2015/CVE-2015-9331.md index ecf760822c0..18d37512a9b 100644 --- a/cves/2015/CVE-2015-9331.md +++ b/cves/2015/CVE-2015-9331.md @@ -13,4 +13,4 @@ The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Kairo-one/CVE-2015-9331 diff --git a/cves/2015/CVE-2015-9357.md b/cves/2015/CVE-2015-9357.md index 9f28d9f4d4c..7c7c44683e3 100644 --- a/cves/2015/CVE-2015-9357.md +++ b/cves/2015/CVE-2015-9357.md @@ -13,4 +13,4 @@ The akismet plugin before 3.1.5 for WordPress has XSS. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/saretawa/CVE-2015-9357-POC diff --git a/cves/2016/CVE-2016-0638.md b/cves/2016/CVE-2016-0638.md index 6cdd7e6ec80..599020ffa5a 100644 --- a/cves/2016/CVE-2016-0638.md +++ b/cves/2016/CVE-2016-0638.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/BabyTeam1024/CVE-2016-0638 +- https://github.com/0xn0ne/weblogicScanner diff --git a/cves/2016/CVE-2016-10134.md b/cves/2016/CVE-2016-10134.md index b0725ebaa93..916d4e8c1df 100644 --- a/cves/2016/CVE-2016-10134.md +++ b/cves/2016/CVE-2016-10134.md @@ -20,3 +20,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/zabbix_toggleids_sqli.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/zabbix/CVE-2016-10134 diff --git a/cves/2016/CVE-2016-10708.md b/cves/2016/CVE-2016-10708.md index 0567f2741aa..031036c3003 100644 --- a/cves/2016/CVE-2016-10708.md +++ b/cves/2016/CVE-2016-10708.md @@ -13,5 +13,5 @@ sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/lggcs/CVE-2016-10708 diff --git a/cves/2016/CVE-2016-10924.md b/cves/2016/CVE-2016-10924.md index d73ab826f42..82c6efbd4fe 100644 --- a/cves/2016/CVE-2016-10924.md +++ b/cves/2016/CVE-2016-10924.md @@ -16,6 +16,8 @@ No PoCs from references. - https://github.com/808ale/cve-2016-10924-POC - https://github.com/LGenAgul/Wordpress-ebook-CVE-2016-10924 - https://github.com/rvizx/CVE-2016-10924 +- https://github.com/alealeluyah/cve-2016-10924-POC +- https://github.com/rvzsec/CVE-2016-10924 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10924.yaml diff --git a/cves/2016/CVE-2016-1897.md b/cves/2016/CVE-2016-1897.md index c46b6b9e42c..fc652f4f98a 100644 --- a/cves/2016/CVE-2016-1897.md +++ b/cves/2016/CVE-2016-1897.md @@ -15,3 +15,5 @@ FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbi #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ffmpeg/CVE-2016-1897 diff --git a/cves/2016/CVE-2016-20012.md b/cves/2016/CVE-2016-20012.md index 9748f488a5e..f976bf28ffe 100644 --- a/cves/2016/CVE-2016-20012.md +++ b/cves/2016/CVE-2016-20012.md @@ -16,4 +16,5 @@ OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain #### Github - https://github.com/aztec-eagle/cve-2016-20012 +- https://github.com/arturo-b-cmu/cve-2016-20012 diff --git a/cves/2016/CVE-2016-3088.md b/cves/2016/CVE-2016-3088.md index 358b608d53c..8653546904a 100644 --- a/cves/2016/CVE-2016-3088.md +++ b/cves/2016/CVE-2016-3088.md @@ -22,6 +22,7 @@ The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remot - https://github.com/pudiding/CVE-2016-3088 - https://github.com/vonderchild/CVE-2016-3088 - https://github.com/xbfding/XiaoBai_exploit +- https://github.com/wood03mm/CVE-2016-3088 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3088.yaml @@ -32,3 +33,6 @@ The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remot #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_upload_jsp.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2016-3088 diff --git a/cves/2016/CVE-2016-3627.md b/cves/2016/CVE-2016-3627.md index b0fe41da276..0e1e2911524 100644 --- a/cves/2016/CVE-2016-3627.md +++ b/cves/2016/CVE-2016-3627.md @@ -13,5 +13,5 @@ The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when u No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Oneton429/CVE-2016-3627 diff --git a/cves/2016/CVE-2016-3714.md b/cves/2016/CVE-2016-3714.md index 2925ec8b1da..d6ee4b3ccdb 100644 --- a/cves/2016/CVE-2016-3714.md +++ b/cves/2016/CVE-2016-3714.md @@ -51,3 +51,6 @@ The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/imagemagick_delegate.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/imagemagick/CVE-2016-3714 diff --git a/cves/2016/CVE-2016-4437.md b/cves/2016/CVE-2016-4437.md index 0219c0f0d21..1f2325e5b4a 100644 --- a/cves/2016/CVE-2016-4437.md +++ b/cves/2016/CVE-2016-4437.md @@ -29,3 +29,6 @@ Apache Shiro before 1.2.5, when a cipher key has not been configured for the "re #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/shiro_rememberme_v124_deserialize.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2016-4437 diff --git a/cves/2016/CVE-2016-4977.md b/cves/2016/CVE-2016-4977.md index 8bf094b18aa..d4acc173a95 100644 --- a/cves/2016/CVE-2016-4977.md +++ b/cves/2016/CVE-2016-4977.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4977.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2016-4977 diff --git a/cves/2016/CVE-2016-5195.md b/cves/2016/CVE-2016-5195.md index e13929baa96..70b893b7e2c 100644 --- a/cves/2016/CVE-2016-5195.md +++ b/cves/2016/CVE-2016-5195.md @@ -110,6 +110,12 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo - https://github.com/xpcmdshell/derpyc0w - https://github.com/yhf971/Dirty - https://github.com/zakariamaaraki/Dirty-COW-CVE-2016-5195- +- https://github.com/KongQBin/CVE-2016-5195 +- https://github.com/elhaddadalaa788-alt/kernel-exploit-dirtycow-project-subm +- https://github.com/h1n4mx0z/Research-CVE-2016-5195 +- https://github.com/maur0amaya/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow +- https://github.com/ramahmdr/dirtycow +- https://github.com/voidgguy/lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195 #### ExploitDB - https://www.exploit-db.com/exploits/40847 diff --git a/cves/2016/CVE-2016-5385.md b/cves/2016/CVE-2016-5385.md index 64e7abd40d3..e18b1dbb7e1 100644 --- a/cves/2016/CVE-2016-5385.md +++ b/cves/2016/CVE-2016-5385.md @@ -15,3 +15,5 @@ PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cgi/CVE-2016-5385 diff --git a/cves/2016/CVE-2016-5696.md b/cves/2016/CVE-2016-5696.md index 0ffae385bb4..fe44057c4a4 100644 --- a/cves/2016/CVE-2016-5696.md +++ b/cves/2016/CVE-2016-5696.md @@ -15,4 +15,5 @@ net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine #### Github - https://github.com/jduck/challack - https://github.com/violentshell/rover +- https://github.com/Gnoxter/mountain_goat diff --git a/cves/2016/CVE-2016-5734.md b/cves/2016/CVE-2016-5734.md index b3f977a8d23..1a147f72059 100644 --- a/cves/2016/CVE-2016-5734.md +++ b/cves/2016/CVE-2016-5734.md @@ -22,3 +22,6 @@ phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_null_termination_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpmyadmin/CVE-2016-5734 diff --git a/cves/2016/CVE-2016-6271.md b/cves/2016/CVE-2016-6271.md index 93baea80dc3..946be61c135 100644 --- a/cves/2016/CVE-2016-6271.md +++ b/cves/2016/CVE-2016-6271.md @@ -13,5 +13,5 @@ The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle att - https://github.com/gteissier/CVE-2016-6271 #### Github -No PoCs found on GitHub currently. +- https://github.com/gteissier/CVE-2016-6271 diff --git a/cves/2016/CVE-2016-7200.md b/cves/2016/CVE-2016-7200.md index 2e276e02723..22f83699380 100644 --- a/cves/2016/CVE-2016-7200.md +++ b/cves/2016/CVE-2016-7200.md @@ -17,7 +17,7 @@ The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers - https://www.exploit-db.com/exploits/40990/ #### Github -No PoCs found on GitHub currently. +- https://github.com/theori-io/chakra-2016-11 #### ExploitDB - https://www.exploit-db.com/exploits/40785 diff --git a/cves/2016/CVE-2016-8462.md b/cves/2016/CVE-2016-8462.md index 575f08045ae..e38dfe41dcd 100644 --- a/cves/2016/CVE-2016-8462.md +++ b/cves/2016/CVE-2016-8462.md @@ -14,5 +14,5 @@ An information disclosure vulnerability in the bootloader could enable a local a - https://securityresear.ch/2017/01/04/fastboot-oem-sha1sum/ #### Github -No PoCs found on GitHub currently. +- https://github.com/CunningLogic/PixelDump_CVE-2016-8462 diff --git a/cves/2016/CVE-2016-8655.md b/cves/2016/CVE-2016-8655.md index 657c4d5889a..5cbd27fde92 100644 --- a/cves/2016/CVE-2016-8655.md +++ b/cves/2016/CVE-2016-8655.md @@ -25,6 +25,7 @@ Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allo - https://github.com/martinmullins/CVE-2016-8655_Android - https://github.com/pradeepavula/Linux-Exploits-LES- - https://github.com/scarvell/cve-2016-8655 +- https://github.com/WhatsWrongAndWhy/CVE-2016-8655 #### ExploitDB - https://www.exploit-db.com/exploits/44696 diff --git a/cves/2016/CVE-2016-9086.md b/cves/2016/CVE-2016-9086.md index c53747fd265..07839b291e1 100644 --- a/cves/2016/CVE-2016-9086.md +++ b/cves/2016/CVE-2016-9086.md @@ -15,3 +15,5 @@ GitLab versions 8.9.x and above contain a critical security flaw in the "import/ #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gitlab/CVE-2016-9086 diff --git a/cves/2016/CVE-2016-9192.md b/cves/2016/CVE-2016-9192.md index ec3c7339bc3..89d06cbc6dd 100644 --- a/cves/2016/CVE-2016-9192.md +++ b/cves/2016/CVE-2016-9192.md @@ -14,5 +14,5 @@ A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could all - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1 #### Github -No PoCs found on GitHub currently. +- https://github.com/serializingme/cve-2016-9192 diff --git a/cves/2016/CVE-2016-9793.md b/cves/2016/CVE-2016-9793.md index 867f8a6e568..8514e2eeb98 100644 --- a/cves/2016/CVE-2016-9793.md +++ b/cves/2016/CVE-2016-9793.md @@ -13,7 +13,7 @@ The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.1 - https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2016-9793 #### ExploitDB - https://www.exploit-db.com/exploits/41995 diff --git a/cves/2017/CVE-2017-0038.md b/cves/2017/CVE-2017-0038.md index 634412bb618..101bd805157 100644 --- a/cves/2017/CVE-2017-0038.md +++ b/cves/2017/CVE-2017-0038.md @@ -14,7 +14,7 @@ gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Win - https://www.exploit-db.com/exploits/41363/ #### Github -No PoCs found on GitHub currently. +- https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS #### ExploitDB - https://www.exploit-db.com/exploits/41363 diff --git a/cves/2017/CVE-2017-0143.md b/cves/2017/CVE-2017-0143.md index 1665de3ee27..71daf2ad4dc 100644 --- a/cves/2017/CVE-2017-0143.md +++ b/cves/2017/CVE-2017-0143.md @@ -37,6 +37,7 @@ The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 - https://github.com/n3rdh4x0r/MS17-010 - https://github.com/n3rdh4x0r/MS17-010_CVE-2017-0143 - https://github.com/yeshwanthp999/Windows7-ms17-010- +- https://github.com/hackingyseguridad/smb #### ExploitDB - https://www.exploit-db.com/exploits/47456 diff --git a/cves/2017/CVE-2017-0144.md b/cves/2017/CVE-2017-0144.md index b61b96cf3e1..a82980cba49 100644 --- a/cves/2017/CVE-2017-0144.md +++ b/cves/2017/CVE-2017-0144.md @@ -37,6 +37,8 @@ The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 - https://github.com/sethwhy/BlueDoor - https://github.com/waleedelsmedesy22/EternalBlue-DoublePulsar-Exploit-Windows-7- - https://github.com/zorikcherfas/eternalblue_linux_cpp +- https://github.com/0xBlackash/CVE-2017-0144 +- https://github.com/FireTemple/Blackash-CVE-2017-0144 #### ExploitDB - https://www.exploit-db.com/exploits/47456 diff --git a/cves/2017/CVE-2017-0785.md b/cves/2017/CVE-2017-0785.md index 9f2644751bf..2f78222e51c 100644 --- a/cves/2017/CVE-2017-0785.md +++ b/cves/2017/CVE-2017-0785.md @@ -34,6 +34,8 @@ No PoCs from references. - https://github.com/ojasookert/CVE-2017-0785 - https://github.com/raviwithu/Bluetooth - https://github.com/sh4rknado/BlueBorn +- https://github.com/Alfa100001/-CVE-2017-0785-BlueBorne-PoC +- https://github.com/Richard1031/CVE-2017-0785-PoC #### ExploitDB - https://www.exploit-db.com/exploits/44555 diff --git a/cves/2017/CVE-2017-1000028.md b/cves/2017/CVE-2017-1000028.md index cc82de24c4d..1a872e19fe2 100644 --- a/cves/2017/CVE-2017-1000028.md +++ b/cves/2017/CVE-2017-1000028.md @@ -28,3 +28,6 @@ Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authentic #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfish_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/glassfish/CVE-2017-1000028 diff --git a/cves/2017/CVE-2017-1000112.md b/cves/2017/CVE-2017-1000112.md index d14c526a374..3dc9854c7cc 100644 --- a/cves/2017/CVE-2017-1000112.md +++ b/cves/2017/CVE-2017-1000112.md @@ -20,6 +20,8 @@ Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. W - https://github.com/amrelsadane123/Ecploit-kernel-4.10-linux-local - https://github.com/ol0273st-s/CVE-2017-1000112-Adpated - https://github.com/pradeepavula/Linux-Exploits-LES- +- https://github.com/Spydomain/CVE-2017-1000112-PoC +- https://github.com/WhatsWrongAndWhy/CVE-2017-1000112 #### ExploitDB - https://www.exploit-db.com/exploits/45147 diff --git a/cves/2017/CVE-2017-1000353.md b/cves/2017/CVE-2017-1000353.md index 913600ed964..305f2bd61a4 100644 --- a/cves/2017/CVE-2017-1000353.md +++ b/cves/2017/CVE-2017-1000353.md @@ -27,3 +27,6 @@ Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerab #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/jenkins_cli_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2017-1000353 diff --git a/cves/2017/CVE-2017-1000486.md b/cves/2017/CVE-2017-1000486.md index f37d057b941..a38caba48c5 100644 --- a/cves/2017/CVE-2017-1000486.md +++ b/cves/2017/CVE-2017-1000486.md @@ -23,6 +23,7 @@ Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in rem - https://github.com/mogwailabs/CVE-2017-1000486 - https://github.com/oppsec/pwnfaces - https://github.com/pimps/CVE-2017-1000486 +- https://github.com/dsssssssm/pwnfaces #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000486.yaml diff --git a/cves/2017/CVE-2017-10271.md b/cves/2017/CVE-2017-10271.md index a2d7821aca0..a52e5a36e29 100644 --- a/cves/2017/CVE-2017-10271.md +++ b/cves/2017/CVE-2017-10271.md @@ -41,6 +41,8 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar - https://github.com/s3xy/CVE-2017-10271 - https://github.com/skytina/CNVD-C-2019-48814-COMMON - https://github.com/testwc/CVE-2017-10271 +- https://github.com/Dungsocool/CVE-2017-10271 +- https://github.com/seoyoung-kang/CVE-2017-10271 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10271.yaml @@ -53,3 +55,6 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_weblogic_wsat_deserialization_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2017-10271 diff --git a/cves/2017/CVE-2017-11610.md b/cves/2017/CVE-2017-11610.md index fe7b04d61ed..4aaad13732c 100644 --- a/cves/2017/CVE-2017-11610.md +++ b/cves/2017/CVE-2017-11610.md @@ -16,6 +16,7 @@ The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before - https://github.com/ivanitlearning/CVE-2017-11610 - https://github.com/savior-only/javafx_tools - https://github.com/yaunsky/CVE-2017-11610 +- https://github.com/Dungsocool/CVE-2017-11610 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11610.yaml @@ -25,3 +26,6 @@ The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/supervisor_xmlrpc_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/supervisor/CVE-2017-11610 diff --git a/cves/2017/CVE-2017-11611.md b/cves/2017/CVE-2017-11611.md index e8c2c438388..9e116178a9f 100644 --- a/cves/2017/CVE-2017-11611.md +++ b/cves/2017/CVE-2017-11611.md @@ -13,5 +13,5 @@ Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability ex - https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc #### Github -No PoCs found on GitHub currently. +- https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc diff --git a/cves/2017/CVE-2017-11882.md b/cves/2017/CVE-2017-11882.md index 41b09bf881d..8744ccf9070 100644 --- a/cves/2017/CVE-2017-11882.md +++ b/cves/2017/CVE-2017-11882.md @@ -52,6 +52,8 @@ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Micr - https://github.com/unamer/CVE-2017-11882 - https://github.com/xdrake1010/CVE-2017-11882-Preventer - https://github.com/zhouat/cve-2017-11882 +- https://github.com/0x09AL/CVE-2017-11882-metasploit +- https://github.com/embedi/CVE-2017-11882 #### ExploitDB - https://www.exploit-db.com/exploits/43163 diff --git a/cves/2017/CVE-2017-12149.md b/cves/2017/CVE-2017-12149.md index e6d7bcddea3..4e707389cda 100644 --- a/cves/2017/CVE-2017-12149.md +++ b/cves/2017/CVE-2017-12149.md @@ -28,6 +28,10 @@ In Jboss Application Server as shipped with Red Hat Enterprise Application Platf - https://github.com/sevck/CVE-2017-12149 - https://github.com/yunxu1/jboss-_CVE-2017-12149 - https://github.com/zesnd/cve-2017-12149 +- https://github.com/galois17/cve-2017-12149-playground #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12149.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jboss/CVE-2017-12149 diff --git a/cves/2017/CVE-2017-12542.md b/cves/2017/CVE-2017-12542.md index 1b4a39d5d46..ff38451452a 100644 --- a/cves/2017/CVE-2017-12542.md +++ b/cves/2017/CVE-2017-12542.md @@ -15,6 +15,7 @@ A authentication bypass and execution of code vulnerability in HPE Integrated Li #### Github - https://github.com/afkfr0mkeyb0ard/CustomKaliSetup - https://github.com/skelsec/CVE-2017-12542 +- https://github.com/Gill-Singh-A/CVE-2017-12542-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12542.yaml diff --git a/cves/2017/CVE-2017-12615.md b/cves/2017/CVE-2017-12615.md index 1ef43e995b7..e9790ec0be9 100644 --- a/cves/2017/CVE-2017-12615.md +++ b/cves/2017/CVE-2017-12615.md @@ -32,9 +32,14 @@ When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e. - https://github.com/wudidwo/CVE-2017-12615-poc - https://github.com/xiaokp7/Tomcat_PUT_GUI_EXP - https://github.com/zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717 +- https://github.com/K3ysTr0K3R/CVE-2017-12615 +- https://github.com/breaktoprotect/CVE-2017-12615 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12615.yaml #### ExploitDB - https://www.exploit-db.com/exploits/42953 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2017-12615 diff --git a/cves/2017/CVE-2017-12629.md b/cves/2017/CVE-2017-12629.md index 4f060941dac..82d8083d92b 100644 --- a/cves/2017/CVE-2017-12629.md +++ b/cves/2017/CVE-2017-12629.md @@ -23,3 +23,7 @@ Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before #### ExploitDB - https://www.exploit-db.com/exploits/43009 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2017-12629-RCE +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2017-12629-XXE diff --git a/cves/2017/CVE-2017-12635.md b/cves/2017/CVE-2017-12635.md index 24f460a8bf7..7c556d6b605 100644 --- a/cves/2017/CVE-2017-12635.md +++ b/cves/2017/CVE-2017-12635.md @@ -19,6 +19,8 @@ Due to differences in the Erlang-based JSON parser and JavaScript-based JSON par - https://github.com/Guillaumeclavel/Etude_Faille_CVE_12636 - https://github.com/assalielmehdi/CVE-2017-12635 - https://github.com/cyberharsh/Apache-couchdb-CVE-2017-12635 +- https://github.com/Darabium/couchdb-exploit +- https://github.com/Dungsocool/CVE-2017-12635_36 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12635.yaml @@ -31,3 +33,6 @@ Due to differences in the Erlang-based JSON parser and JavaScript-based JSON par #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/couchdb/couchdb_enum.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/couchdb/CVE-2017-12635 diff --git a/cves/2017/CVE-2017-12636.md b/cves/2017/CVE-2017-12636.md index de04082831c..d74b34218b7 100644 --- a/cves/2017/CVE-2017-12636.md +++ b/cves/2017/CVE-2017-12636.md @@ -29,3 +29,6 @@ CouchDB administrative users can configure the database server via HTTP(S). Some #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder5/CVE-2017-12636.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/couchdb/CVE-2017-12636 diff --git a/cves/2017/CVE-2017-12794.md b/cves/2017/CVE-2017-12794.md index f97c8b94e65..faa7d7d70c0 100644 --- a/cves/2017/CVE-2017-12794.md +++ b/cves/2017/CVE-2017-12794.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12794.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2017-12794 diff --git a/cves/2017/CVE-2017-13089.md b/cves/2017/CVE-2017-13089.md index bd9303b96bc..9d74fd26deb 100644 --- a/cves/2017/CVE-2017-13089.md +++ b/cves/2017/CVE-2017-13089.md @@ -15,4 +15,5 @@ The http.c:skip_short_body() function is called in some circumstances, such as w #### Github - https://github.com/mzeyong/CVE-2017-13089 +- https://github.com/r1b/CVE-2017-13089 diff --git a/cves/2017/CVE-2017-13156.md b/cves/2017/CVE-2017-13156.md index af677d63734..27dd2ac3bbd 100644 --- a/cves/2017/CVE-2017-13156.md +++ b/cves/2017/CVE-2017-13156.md @@ -29,6 +29,7 @@ An elevation of privilege vulnerability in the Android system (art). Product: An - https://github.com/tea9/CVE-2017-13156-Janus - https://github.com/wrlu/Android-Tools - https://github.com/xyzAsian/Janus-CVE-2017-13156 +- https://github.com/hackerronin/Janus-Vulnerability-CVE-2017-13156-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/47601 diff --git a/cves/2017/CVE-2017-13868.md b/cves/2017/CVE-2017-13868.md index 6096cdb8081..934ab689931 100644 --- a/cves/2017/CVE-2017-13868.md +++ b/cves/2017/CVE-2017-13868.md @@ -13,7 +13,7 @@ An issue was discovered in certain Apple products. iOS before 11.2 is affected. - https://github.com/bazad/ctl_ctloutput-leak #### Github -No PoCs found on GitHub currently. +- https://github.com/bazad/ctl_ctloutput-leak #### ExploitDB - https://www.exploit-db.com/exploits/44234 diff --git a/cves/2017/CVE-2017-14105.md b/cves/2017/CVE-2017-14105.md index 1dda76cd277..0b17000f50e 100644 --- a/cves/2017/CVE-2017-14105.md +++ b/cves/2017/CVE-2017-14105.md @@ -13,5 +13,5 @@ HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifyi - https://github.com/theguly/CVE-2017-14105 #### Github -No PoCs found on GitHub currently. +- https://github.com/theguly/CVE-2017-14105 diff --git a/cves/2017/CVE-2017-14849.md b/cves/2017/CVE-2017-14849.md index 5401b55921c..bb768a1d19f 100644 --- a/cves/2017/CVE-2017-14849.md +++ b/cves/2017/CVE-2017-14849.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14849.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/node/CVE-2017-14849 diff --git a/cves/2017/CVE-2017-14980.md b/cves/2017/CVE-2017-14980.md index 059ff9f99d7..ad7b34500c0 100644 --- a/cves/2017/CVE-2017-14980.md +++ b/cves/2017/CVE-2017-14980.md @@ -17,6 +17,11 @@ Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to hav - https://github.com/TheDarthMole/CVE-2017-14980 - https://github.com/kareemBambo/Boof - https://github.com/xn0kkx/Exploit_Sync_Breeze_v10.0.28_CVE-2017-14980 +- https://github.com/0xkr3pt0n/CVE-2017-14980 +- https://github.com/DaviGSantana/CVE-2017-14980 +- https://github.com/TheMalwareGuardian/CVE-2017-14980 +- https://github.com/ahmedmamdouh6/CVE-2017-14980 +- https://github.com/damariion/CVE-2017-14980.RCE #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/syncbreeze_bof.rb diff --git a/cves/2017/CVE-2017-15220.md b/cves/2017/CVE-2017-15220.md index b9562cc0616..89bb33496c7 100644 --- a/cves/2017/CVE-2017-15220.md +++ b/cves/2017/CVE-2017-15220.md @@ -13,7 +13,7 @@ Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an - https://www.exploit-db.com/exploits/42973/ #### Github -No PoCs found on GitHub currently. +- https://github.com/vasilerevnic/CVE-2017-15220-vxsearch-rce #### ExploitDB - https://www.exploit-db.com/exploits/42973 diff --git a/cves/2017/CVE-2017-15715.md b/cves/2017/CVE-2017-15715.md index bf4a314db60..bbd8e4e2eb0 100644 --- a/cves/2017/CVE-2017-15715.md +++ b/cves/2017/CVE-2017-15715.md @@ -17,3 +17,6 @@ In Apache httpd 2.4.0 to 2.4.29, the expression specified in could #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15715.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2017-15715 diff --git a/cves/2017/CVE-2017-16082.md b/cves/2017/CVE-2017-16082.md index e450b412dc7..e1c666d1670 100644 --- a/cves/2017/CVE-2017-16082.md +++ b/cves/2017/CVE-2017-16082.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/nulldreams/CVE-2017-16082 - https://github.com/ossf-cve-benchmark/CVE-2017-16082 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/node/CVE-2017-16082 diff --git a/cves/2017/CVE-2017-16524.md b/cves/2017/CVE-2017-16524.md index 2929ff75981..0b392bf77a0 100644 --- a/cves/2017/CVE-2017-16524.md +++ b/cves/2017/CVE-2017-16524.md @@ -14,7 +14,7 @@ Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted f - https://www.exploit-db.com/exploits/43138/ #### Github -No PoCs found on GitHub currently. +- https://github.com/realistic-security/CVE-2017-16524 #### ExploitDB - https://www.exploit-db.com/exploits/43138 diff --git a/cves/2017/CVE-2017-16995.md b/cves/2017/CVE-2017-16995.md index c2b0a6c32da..53efd9d077c 100644 --- a/cves/2017/CVE-2017-16995.md +++ b/cves/2017/CVE-2017-16995.md @@ -39,6 +39,7 @@ The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4 - https://github.com/thelostvoice/inept-us-military - https://github.com/vnik5287/CVE-2017-16995 - https://github.com/xxxTectationxxx/CVE-2017-16995 +- https://github.com/WhatsWrongAndWhy/CVE-2017-16995 #### ExploitDB - https://www.exploit-db.com/exploits/45058 diff --git a/cves/2017/CVE-2017-17405.md b/cves/2017/CVE-2017-17405.md index 55f40b6a575..646458c5655 100644 --- a/cves/2017/CVE-2017-17405.md +++ b/cves/2017/CVE-2017-17405.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### ExploitDB - https://www.exploit-db.com/exploits/43381 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ruby/CVE-2017-17405 diff --git a/cves/2017/CVE-2017-17562.md b/cves/2017/CVE-2017-17562.md index aa593bcb102..addd295c722 100644 --- a/cves/2017/CVE-2017-17562.md +++ b/cves/2017/CVE-2017-17562.md @@ -34,3 +34,6 @@ Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled an #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/goahead_ldpreload.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/goahead/CVE-2017-17562 diff --git a/cves/2017/CVE-2017-18349.md b/cves/2017/CVE-2017-18349.md index 7fb0bc57f3a..3ceb63a0266 100644 --- a/cves/2017/CVE-2017-18349.md +++ b/cves/2017/CVE-2017-18349.md @@ -14,6 +14,7 @@ parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 #### Github - https://github.com/h0cksr/Fastjson--CVE-2017-18349- +- https://github.com/Dungsocool/CVE-2017-18349 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18349.yaml diff --git a/cves/2017/CVE-2017-18635.md b/cves/2017/CVE-2017-18635.md index 7750da44c7b..42841c74688 100644 --- a/cves/2017/CVE-2017-18635.md +++ b/cves/2017/CVE-2017-18635.md @@ -15,4 +15,5 @@ An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VN #### Github - https://github.com/ossf-cve-benchmark/CVE-2017-18635 +- https://github.com/ShielderSec/CVE-2017-18635 diff --git a/cves/2017/CVE-2017-2824.md b/cves/2017/CVE-2017-2824.md index 5e3aec15038..a509bc8a6e4 100644 --- a/cves/2017/CVE-2017-2824.md +++ b/cves/2017/CVE-2017-2824.md @@ -15,3 +15,5 @@ An exploitable code execution vulnerability exists in the trapper command functi #### Github - https://github.com/listenquiet/cve-2017-2824-reverse-shell +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/zabbix/CVE-2017-2824 diff --git a/cves/2017/CVE-2017-3066.md b/cves/2017/CVE-2017-3066.md index 1d7de8f366a..ce882099451 100644 --- a/cves/2017/CVE-2017-3066.md +++ b/cves/2017/CVE-2017-3066.md @@ -21,3 +21,6 @@ Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, #### ExploitDB - https://www.exploit-db.com/exploits/43993 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2017-3066 diff --git a/cves/2017/CVE-2017-3248.md b/cves/2017/CVE-2017-3248.md index 113a5cf883a..c1c4e68bb0a 100644 --- a/cves/2017/CVE-2017-3248.md +++ b/cves/2017/CVE-2017-3248.md @@ -22,6 +22,7 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar #### Github - https://github.com/BabyTeam1024/CVE-2017-3248 - https://github.com/ianxtianxt/CVE-2017-3248 +- https://github.com/0xn0ne/weblogicScanner #### ExploitDB - https://www.exploit-db.com/exploits/44998 diff --git a/cves/2017/CVE-2017-4971.md b/cves/2017/CVE-2017-4971.md index 6f7673eea4f..dd69dffb8d2 100644 --- a/cves/2017/CVE-2017-4971.md +++ b/cves/2017/CVE-2017-4971.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github - https://github.com/cved-sources/cve-2017-4971 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2017-4971 diff --git a/cves/2017/CVE-2017-5123.md b/cves/2017/CVE-2017-5123.md index 1c8fdf2c96d..e0293683cac 100644 --- a/cves/2017/CVE-2017-5123.md +++ b/cves/2017/CVE-2017-5123.md @@ -21,6 +21,7 @@ Insufficient data validation in waitid allowed an user to escape sandboxes on Li - https://github.com/h1bAna/CVE-2017-5123 - https://github.com/shamedgh/container-privilege-escalation - https://github.com/teawater/CVE-2017-5123 +- https://github.com/NabilBoudra/cve-2017-5123 #### ExploitDB - https://www.exploit-db.com/exploits/43127 diff --git a/cves/2017/CVE-2017-5124.md b/cves/2017/CVE-2017-5124.md index 571407c33ea..fa8b55ea95c 100644 --- a/cves/2017/CVE-2017-5124.md +++ b/cves/2017/CVE-2017-5124.md @@ -14,7 +14,7 @@ Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202 - https://www.reddit.com/r/netsec/comments/7cus2h/chrome_61_uxss_exploit_cve20175124/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Bo0oM/CVE-2017-5124 #### ExploitDB - https://www.exploit-db.com/exploits/45867 diff --git a/cves/2017/CVE-2017-5223.md b/cves/2017/CVE-2017-5223.md index 3e6f24e397a..11b3ddca59a 100644 --- a/cves/2017/CVE-2017-5223.md +++ b/cves/2017/CVE-2017-5223.md @@ -17,3 +17,6 @@ An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method a #### ExploitDB - https://www.exploit-db.com/exploits/43056 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpmailer/CVE-2017-5223 diff --git a/cves/2017/CVE-2017-5638.md b/cves/2017/CVE-2017-5638.md index 5c360e84dd0..eb07818f1fd 100644 --- a/cves/2017/CVE-2017-5638.md +++ b/cves/2017/CVE-2017-5638.md @@ -125,6 +125,9 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be - https://github.com/xeroxis-xs/Computer-Security-Apache-Struts-Vulnerability - https://github.com/xsscx/cve-2017-5638 - https://github.com/zacharie410/Exploiting-Web-Apps +- https://github.com/AIPEACS/SC3010-Computer-Security +- https://github.com/Dungsocool/CVE-2017-5638 +- https://github.com/smancke/CVE-2017-5638 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5638.yaml diff --git a/cves/2017/CVE-2017-5645.md b/cves/2017/CVE-2017-5645.md index e74095bfb12..f663b2d9577 100644 --- a/cves/2017/CVE-2017-5645.md +++ b/cves/2017/CVE-2017-5645.md @@ -17,3 +17,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2017/CVE-2017-5645.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/log4j/CVE-2017-5645 diff --git a/cves/2017/CVE-2017-5941.md b/cves/2017/CVE-2017-5941.md index 0be794f6d85..4186ed92696 100644 --- a/cves/2017/CVE-2017-5941.md +++ b/cves/2017/CVE-2017-5941.md @@ -21,6 +21,7 @@ An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrust - https://github.com/rodolfomarianocy/nodeserial - https://github.com/turnernator1/Node.js-CVE-2017-5941 - https://github.com/uartu0/nodejshell +- https://github.com/f41k0n/RCE-NodeJs #### ExploitDB - https://www.exploit-db.com/exploits/50036 diff --git a/cves/2017/CVE-2017-6206.md b/cves/2017/CVE-2017-6206.md index d7d8d219a73..ba3054fef9c 100644 --- a/cves/2017/CVE-2017-6206.md +++ b/cves/2017/CVE-2017-6206.md @@ -14,7 +14,7 @@ D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DG - https://www.exploit-db.com/exploits/41662/ #### Github -No PoCs found on GitHub currently. +- https://github.com/varangamin/CVE-2017-6206 #### ExploitDB - https://www.exploit-db.com/exploits/41662 diff --git a/cves/2017/CVE-2017-6736.md b/cves/2017/CVE-2017-6736.md index 47fef146bfc..7cfe6f26779 100644 --- a/cves/2017/CVE-2017-6736.md +++ b/cves/2017/CVE-2017-6736.md @@ -1766,7 +1766,7 @@ The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE - https://www.exploit-db.com/exploits/43450/ #### Github -No PoCs found on GitHub currently. +- https://github.com/plyrthn/CiscoSpectreTakeover #### ExploitDB - https://www.exploit-db.com/exploits/43450 diff --git a/cves/2017/CVE-2017-6920.md b/cves/2017/CVE-2017-6920.md index 3f1902f6797..a15435e0c8e 100644 --- a/cves/2017/CVE-2017-6920.md +++ b/cves/2017/CVE-2017-6920.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2017-6920 diff --git a/cves/2017/CVE-2017-7184.md b/cves/2017/CVE-2017-7184.md index ac200e8e7ce..d1829144840 100644 --- a/cves/2017/CVE-2017-7184.md +++ b/cves/2017/CVE-2017-7184.md @@ -14,4 +14,6 @@ The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel #### Github - https://github.com/b1nhack/CVE-2017-7184 +- https://github.com/Grish-Pradhan/CVE-2017-7184 +- https://github.com/shakyanayann/CVE-2017-7184 diff --git a/cves/2017/CVE-2017-7269.md b/cves/2017/CVE-2017-7269.md index 9e74c2267d6..b425df9f2a0 100644 --- a/cves/2017/CVE-2017-7269.md +++ b/cves/2017/CVE-2017-7269.md @@ -44,6 +44,7 @@ Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in In - https://github.com/xdx57/WebDav_Exploiter - https://github.com/zcgonvh/cve-2017-7269 - https://github.com/zcgonvh/cve-2017-7269-tool +- https://github.com/Killian0713/Assignement_3-CVE-2017-7269 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7269.yaml diff --git a/cves/2017/CVE-2017-7308.md b/cves/2017/CVE-2017-7308.md index 044fd5f37ae..463439576b4 100644 --- a/cves/2017/CVE-2017-7308.md +++ b/cves/2017/CVE-2017-7308.md @@ -17,6 +17,7 @@ The packet_set_ring function in net/packet/af_packet.c in the Linux kernel throu - https://github.com/anldori/CVE-2017-7308 - https://github.com/seclab-ucr/KOOBE - https://github.com/vusec/blindside +- https://github.com/WhatsWrongAndWhy/CVE-2017-7308 #### ExploitDB - https://www.exploit-db.com/exploits/44654 diff --git a/cves/2017/CVE-2017-7494.md b/cves/2017/CVE-2017-7494.md index ee9e7f4dd55..8fb49f215f8 100644 --- a/cves/2017/CVE-2017-7494.md +++ b/cves/2017/CVE-2017-7494.md @@ -39,6 +39,8 @@ Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to r - https://github.com/m4udSec/noSAMBAnoCRY-CVE-2017-7494 - https://github.com/opsxcq/exploit-CVE-2017-7494 - https://github.com/the-aerospace-corporation/counter-reconnaissance-program +- https://github.com/YonLiud/CVE-2017-7494 +- https://github.com/sudlit/CVE-2017-7494 #### ExploitDB - https://www.exploit-db.com/exploits/42084 @@ -46,3 +48,6 @@ Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to r #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/samba/CVE-2017-7494 diff --git a/cves/2017/CVE-2017-7504.md b/cves/2017/CVE-2017-7504.md index 1dfc9c0c759..2c38ad89a99 100644 --- a/cves/2017/CVE-2017-7504.md +++ b/cves/2017/CVE-2017-7504.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7504.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jboss/CVE-2017-7504 diff --git a/cves/2017/CVE-2017-7525.md b/cves/2017/CVE-2017-7525.md index 2e6a1ecdc7f..14027a62c00 100644 --- a/cves/2017/CVE-2017-7525.md +++ b/cves/2017/CVE-2017-7525.md @@ -31,3 +31,5 @@ A deserialization flaw was discovered in the jackson-databind, versions before 2 - https://github.com/ongamse/Scala - https://github.com/wahyuhadi/spel.xml +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jackson/CVE-2017-7525 diff --git a/cves/2017/CVE-2017-7529.md b/cves/2017/CVE-2017-7529.md index 0cef1c242d8..87efbb01a3a 100644 --- a/cves/2017/CVE-2017-7529.md +++ b/cves/2017/CVE-2017-7529.md @@ -39,3 +39,6 @@ Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/cve-2017-7529-3066.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nginx/CVE-2017-7529 diff --git a/cves/2017/CVE-2017-7679.md b/cves/2017/CVE-2017-7679.md index a6264ea253e..659b1b527d3 100644 --- a/cves/2017/CVE-2017-7679.md +++ b/cves/2017/CVE-2017-7679.md @@ -14,5 +14,5 @@ In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read o - https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679 #### Github -No PoCs found on GitHub currently. +- https://github.com/Al-Lord0x/CVE-2017-7679 diff --git a/cves/2017/CVE-2017-7921.md b/cves/2017/CVE-2017-7921.md index cd4b4c44327..b71bc29781b 100644 --- a/cves/2017/CVE-2017-7921.md +++ b/cves/2017/CVE-2017-7921.md @@ -29,6 +29,11 @@ No PoCs from references. - https://github.com/kooroshsanaei/HikVision-CVE-2017-7921 - https://github.com/krypton612/hikivision - https://github.com/p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor +- https://github.com/0xf3d0rq/CVE-2017-7921 +- https://github.com/KelvinWin10/CVE-2017-7921-rewrite +- https://github.com/alkaid176/CVE-2017-7921 +- https://github.com/blacksheepstudio/CVE-2017-7921-EXP +- https://github.com/mverschu/CVE-2017-7921 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7921.yaml diff --git a/cves/2017/CVE-2017-8046.md b/cves/2017/CVE-2017-8046.md index f0252dfa473..6a3d9d72e44 100644 --- a/cves/2017/CVE-2017-8046.md +++ b/cves/2017/CVE-2017-8046.md @@ -20,9 +20,13 @@ Malicious PATCH requests submitted to servers using Spring Data REST versions pr - https://github.com/m3ssap0/SpringBreakVulnerableApp - https://github.com/m3ssap0/spring-break_cve-2017-8046 - https://github.com/sj/spring-data-rest-CVE-2017-8046 +- https://github.com/bkhablenko/CVE-2017-8046 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8046.yaml #### ExploitDB - https://www.exploit-db.com/exploits/44289 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2017-8046 diff --git a/cves/2017/CVE-2017-8291.md b/cves/2017/CVE-2017-8291.md index 484aa255e8f..92959808352 100644 --- a/cves/2017/CVE-2017-8291.md +++ b/cves/2017/CVE-2017-8291.md @@ -17,6 +17,7 @@ Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command - https://github.com/hkcfs/PIL-CVE-2017-8291 - https://github.com/shun1403/CVE-2017-8291 - https://github.com/shun1403/PIL-CVE-2017-8291-study +- https://github.com/DaniilOrchikov/PIL-CVE-2017-8291 #### ExploitDB - https://www.exploit-db.com/exploits/41955 @@ -24,3 +25,6 @@ Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/ghostscript_type_confusion.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/python/PIL-CVE-2017-8291 diff --git a/cves/2017/CVE-2017-8382.md b/cves/2017/CVE-2017-8382.md index 86cbdd1b051..4bc56931a4e 100644 --- a/cves/2017/CVE-2017-8382.md +++ b/cves/2017/CVE-2017-8382.md @@ -16,7 +16,7 @@ admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with - https://www.exploit-db.com/exploits/42005/ #### Github -No PoCs found on GitHub currently. +- https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc #### ExploitDB - https://www.exploit-db.com/exploits/42005 diff --git a/cves/2017/CVE-2017-8386.md b/cves/2017/CVE-2017-8386.md index caaefc0b997..2bc78ec8713 100644 --- a/cves/2017/CVE-2017-8386.md +++ b/cves/2017/CVE-2017-8386.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/cyberharsh/Gitcve-2017-8386 - https://github.com/suz1n/WHS3_vulhub +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/git/CVE-2017-8386 diff --git a/cves/2017/CVE-2017-8464.md b/cves/2017/CVE-2017-8464.md index 13fce707297..155fcf47f9b 100644 --- a/cves/2017/CVE-2017-8464.md +++ b/cves/2017/CVE-2017-8464.md @@ -33,6 +33,7 @@ Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi - https://github.com/tuankiethkt020/Phat-hien-CVE-2017-8464 - https://github.com/xssfile/CVE-2017-8464-EXP - https://github.com/yiyebuhuijia/PowerShell-Suite +- https://github.com/PlayBoiSK8/POC-CVE-2017-8464-OpenCalculator #### ExploitDB - https://www.exploit-db.com/exploits/42429 diff --git a/cves/2017/CVE-2017-8570.md b/cves/2017/CVE-2017-8570.md index aec28db0168..91139b819c3 100644 --- a/cves/2017/CVE-2017-8570.md +++ b/cves/2017/CVE-2017-8570.md @@ -23,6 +23,7 @@ Microsoft Office allows a remote code execution vulnerability due to the way tha - https://github.com/phamphuqui1998/Research-Exploit-Office - https://github.com/sasqwatch/CVE-2017-8570 - https://github.com/tezukanice/Office8570 +- https://github.com/rxwx/CVE-2017-8570 #### ExploitDB - https://www.exploit-db.com/exploits/44263 diff --git a/cves/2017/CVE-2017-8641.md b/cves/2017/CVE-2017-8641.md index deed98b9499..4cbb6808bce 100644 --- a/cves/2017/CVE-2017-8641.md +++ b/cves/2017/CVE-2017-8641.md @@ -13,7 +13,7 @@ Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windo - https://www.exploit-db.com/exploits/42465/ #### Github -No PoCs found on GitHub currently. +- https://github.com/homjxi0e/CVE-2017-8641_chakra_Js_GlobalObject #### ExploitDB - https://www.exploit-db.com/exploits/42465 diff --git a/cves/2017/CVE-2017-8890.md b/cves/2017/CVE-2017-8890.md index 7f1dfb5dda6..1ddc1d024ff 100644 --- a/cves/2017/CVE-2017-8890.md +++ b/cves/2017/CVE-2017-8890.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/7043mcgeep/cve-2017-8890-msf - https://github.com/beraphin/CVE-2017-8890 - https://github.com/thinkycx/CVE-2017-8890 +- https://github.com/sweatyrocket/huawei-p10-cve-2017-8890-unlock diff --git a/cves/2017/CVE-2017-8917.md b/cves/2017/CVE-2017-8917.md index 5e6bfc6c5df..e7d7fb7842c 100644 --- a/cves/2017/CVE-2017-8917.md +++ b/cves/2017/CVE-2017-8917.md @@ -26,6 +26,7 @@ SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to ex - https://github.com/johnkiguru1337/N-Days - https://github.com/stefanlucas/Exploit-Joomla - https://github.com/teranpeterson/Joomblah +- https://github.com/yayateayayatea/cve-2017-8917 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8917.yaml @@ -37,3 +38,6 @@ SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to ex #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_comfields_sqli_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/joomla/CVE-2017-8917 diff --git a/cves/2017/CVE-2017-9609.md b/cves/2017/CVE-2017-9609.md index 6f1a5e958e9..3bd9f2cadcf 100644 --- a/cves/2017/CVE-2017-9609.md +++ b/cves/2017/CVE-2017-9609.md @@ -15,5 +15,5 @@ Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authe - https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc #### Github -No PoCs found on GitHub currently. +- https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc diff --git a/cves/2017/CVE-2017-9757.md b/cves/2017/CVE-2017-9757.md index 79df084ae11..3a3da57fb02 100644 --- a/cves/2017/CVE-2017-9757.md +++ b/cves/2017/CVE-2017-9757.md @@ -15,6 +15,7 @@ IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINK #### Github - https://github.com/davimoreno/ipfire_rce - https://github.com/peterleiva/CVE-2017-9757 +- https://github.com/joaoaugustom/IPFire_2.19_RCE_Authenticated #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_oinkcode_exec.rb diff --git a/cves/2017/CVE-2017-9805.md b/cves/2017/CVE-2017-9805.md index 49a3d605e55..dd10841e7f6 100644 --- a/cves/2017/CVE-2017-9805.md +++ b/cves/2017/CVE-2017-9805.md @@ -35,6 +35,10 @@ The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x bef - https://github.com/sujithvaddi/apache_struts_cve_2017_9805 - https://github.com/wifido/CVE-2017-9805-Exploit - https://github.com/z3bd/CVE-2017-9805 +- https://github.com/7s26simon/CVE-2017-9805-S2-052 +- https://github.com/Fl5xia/CVE-2017-9805 +- https://github.com/NoSpaceAvailable/CVE-2017-9805_example_build +- https://github.com/agent3137/CVE-2017-9805-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9805.yaml diff --git a/cves/2017/CVE-2017-9841.md b/cves/2017/CVE-2017-9841.md index b3fb955091c..86f070f2454 100644 --- a/cves/2017/CVE-2017-9841.md +++ b/cves/2017/CVE-2017-9841.md @@ -30,9 +30,13 @@ Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows rem - https://github.com/mileticluka1/eval-stdin - https://github.com/moonwayy/hindicybersec - https://github.com/p1ckzi/CVE-2017-9841 +- https://github.com/krisdewa/CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml #### ExploitDB - https://www.exploit-db.com/exploits/50702 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpunit/CVE-2017-9841 diff --git a/cves/2017/CVE-2017-9993.md b/cves/2017/CVE-2017-9993.md index 0d308d6284d..81738a4d7ce 100644 --- a/cves/2017/CVE-2017-9993.md +++ b/cves/2017/CVE-2017-9993.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ffmpeg/CVE-2017-9993 diff --git a/cves/2018/CVE-2018-0114.md b/cves/2018/CVE-2018-0114.md index 5f04765b31e..10b9d7d6b82 100644 --- a/cves/2018/CVE-2018-0114.md +++ b/cves/2018/CVE-2018-0114.md @@ -27,6 +27,7 @@ A vulnerability in the Cisco node-jose open source library before 0.11.0 could a - https://github.com/pinnace/burp-jwt-fuzzhelper-extension - https://github.com/scumdestroy/CVE-2018-0114 - https://github.com/sealldeveloper/CVE-2018-0114-PoC +- https://github.com/zi0Black/POC-CVE-2018-0114 #### ExploitDB - https://www.exploit-db.com/exploits/44324 diff --git a/cves/2018/CVE-2018-0802.md b/cves/2018/CVE-2018-0802.md index 0a97e6d14fb..af77fca1d43 100644 --- a/cves/2018/CVE-2018-0802.md +++ b/cves/2018/CVE-2018-0802.md @@ -20,4 +20,6 @@ Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Offic - https://github.com/likekabin/CVE-2018-0802_CVE-2017-11882 - https://github.com/likescam/CVE-2018-0802_CVE-2017-11882 - https://github.com/roninAPT/CVE-2018-0802 +- https://github.com/rxwx/CVE-2018-0802 +- https://github.com/zldww2011/CVE-2018-0802_POC diff --git a/cves/2018/CVE-2018-0886.md b/cves/2018/CVE-2018-0886.md index bcf15a55311..fbb2ec9c020 100644 --- a/cves/2018/CVE-2018-0886.md +++ b/cves/2018/CVE-2018-0886.md @@ -14,7 +14,7 @@ The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows - https://www.exploit-db.com/exploits/44453/ #### Github -No PoCs found on GitHub currently. +- https://github.com/preempt/credssp #### ExploitDB - https://www.exploit-db.com/exploits/44453 diff --git a/cves/2018/CVE-2018-1000006.md b/cves/2018/CVE-2018-1000006.md index 9196e8a057d..89bf85ae310 100644 --- a/cves/2018/CVE-2018-1000006.md +++ b/cves/2018/CVE-2018-1000006.md @@ -23,3 +23,6 @@ GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 an #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/exodus.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/electron/CVE-2018-1000006 diff --git a/cves/2018/CVE-2018-1000529.md b/cves/2018/CVE-2018-1000529.md index 0819cebd18b..7648f37c237 100644 --- a/cves/2018/CVE-2018-1000529.md +++ b/cves/2018/CVE-2018-1000529.md @@ -13,5 +13,5 @@ Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnera - https://github.com/martinfrancois/CVE-2018-1000529 #### Github -No PoCs found on GitHub currently. +- https://github.com/martinfrancois/CVE-2018-1000529 diff --git a/cves/2018/CVE-2018-1000533.md b/cves/2018/CVE-2018-1000533.md index 3edf49e8a30..c32634d5129 100644 --- a/cves/2018/CVE-2018-1000533.md +++ b/cves/2018/CVE-2018-1000533.md @@ -13,10 +13,13 @@ klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized in No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/dddo0/CVE-2018-1000533 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000533.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlist_arg_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gitlist/CVE-2018-1000533 diff --git a/cves/2018/CVE-2018-1000861.md b/cves/2018/CVE-2018-1000861.md index 2ba4e32e7b3..6774d9aa153 100644 --- a/cves/2018/CVE-2018-1000861.md +++ b/cves/2018/CVE-2018-1000861.md @@ -23,3 +23,6 @@ A code execution vulnerability exists in the Stapler web framework used by Jenki #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkins_metaprogramming.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2018-1000861 diff --git a/cves/2018/CVE-2018-1002105.md b/cves/2018/CVE-2018-1002105.md index a4de81382b5..caf839b3db7 100644 --- a/cves/2018/CVE-2018-1002105.md +++ b/cves/2018/CVE-2018-1002105.md @@ -29,6 +29,7 @@ In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect ha - https://github.com/bgeesaman/cve-2018-1002105 - https://github.com/gravitational/cve-2018-1002105 - https://github.com/sh-ubh/CVE-2018-1002105 +- https://github.com/evict/poc_CVE-2018-1002105 #### ExploitDB - https://www.exploit-db.com/exploits/46053 diff --git a/cves/2018/CVE-2018-10054.md b/cves/2018/CVE-2018-10054.md index 94cca59ed78..c37f4835d29 100644 --- a/cves/2018/CVE-2018-10054.md +++ b/cves/2018/CVE-2018-10054.md @@ -19,3 +19,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/h2_webinterface_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/h2database/CVE-2018-10054 diff --git a/cves/2018/CVE-2018-1049.md b/cves/2018/CVE-2018-1049.md index 696ef497be5..5fccd9065a2 100644 --- a/cves/2018/CVE-2018-1049.md +++ b/cves/2018/CVE-2018-1049.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/lukehebe/CVE-2018-1049 +- https://github.com/lukehebe/CVE-2018-1049-POC diff --git a/cves/2018/CVE-2018-1058.md b/cves/2018/CVE-2018-1058.md index 182673c0ace..cf65d2e7ace 100644 --- a/cves/2018/CVE-2018-1058.md +++ b/cves/2018/CVE-2018-1058.md @@ -13,5 +13,7 @@ A flaw was found in the way Postgresql allowed a user to modify the behavior of No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ccchme/CVE-2018-1058 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/postgres/CVE-2018-1058 diff --git a/cves/2018/CVE-2018-10732.md b/cves/2018/CVE-2018-10732.md index 04d22767ac8..c31385ac639 100644 --- a/cves/2018/CVE-2018-10732.md +++ b/cves/2018/CVE-2018-10732.md @@ -13,5 +13,5 @@ The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-10732 diff --git a/cves/2018/CVE-2018-10933.md b/cves/2018/CVE-2018-10933.md index 2cf0b38b4cc..a2242bb8485 100644 --- a/cves/2018/CVE-2018-10933.md +++ b/cves/2018/CVE-2018-10933.md @@ -51,6 +51,8 @@ A vulnerability was found in libssh's server-side state machine before versions - https://github.com/wj158/snowwolf-script - https://github.com/xFreed0m/CVE-2018-10933 - https://github.com/youkergav/CVE-2018-10933 +- https://github.com/K3ysTr0K3R/CVE-2018-10933 +- https://github.com/opsifiz/CVE-2018-10933 #### ExploitDB - https://www.exploit-db.com/exploits/46307 @@ -58,3 +60,6 @@ A vulnerability was found in libssh's server-side state machine before versions #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/libssh_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/libssh/CVE-2018-10933 diff --git a/cves/2018/CVE-2018-11235.md b/cves/2018/CVE-2018-11235.md index a6b07622ebe..80a54883ffe 100644 --- a/cves/2018/CVE-2018-11235.md +++ b/cves/2018/CVE-2018-11235.md @@ -36,4 +36,5 @@ In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before - https://github.com/vmotos/CVE-2018-11235 - https://github.com/xElkomy/CVE-2018-11235 - https://github.com/ygouzerh/CVE-2018-11235 +- https://github.com/Rezy-Dev/CVE-2018-11235 diff --git a/cves/2018/CVE-2018-11311.md b/cves/2018/CVE-2018-11311.md index 69681c26adf..dd1e1588326 100644 --- a/cves/2018/CVE-2018-11311.md +++ b/cves/2018/CVE-2018-11311.md @@ -13,7 +13,7 @@ A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' - https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password #### Github -No PoCs found on GitHub currently. +- https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password #### ExploitDB - https://www.exploit-db.com/exploits/48620 diff --git a/cves/2018/CVE-2018-11776.md b/cves/2018/CVE-2018-11776.md index fb3a6c4d870..b77ff4eacd7 100644 --- a/cves/2018/CVE-2018-11776.md +++ b/cves/2018/CVE-2018-11776.md @@ -49,6 +49,7 @@ Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remo - https://github.com/techgyu/WHS - https://github.com/tuxotron/cve-2018-11776-docker - https://github.com/xfox64x/CVE-2018-11776 +- https://github.com/hook-s3c/CVE-2018-11776-Python-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11776.yaml diff --git a/cves/2018/CVE-2018-1207.md b/cves/2018/CVE-2018-1207.md index c356f56a4b7..70d0c692af7 100644 --- a/cves/2018/CVE-2018-1207.md +++ b/cves/2018/CVE-2018-1207.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/KingPlayzOp1/cve - https://github.com/mgargiullo/cve-2018-1207 - https://github.com/miorin002/H-I_AIO +- https://github.com/hironull/CVE-2018-1207-better #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1207.yaml diff --git a/cves/2018/CVE-2018-12463.md b/cves/2018/CVE-2018-12463.md index 723a837d4fa..96ce5848087 100644 --- a/cves/2018/CVE-2018-12463.md +++ b/cves/2018/CVE-2018-12463.md @@ -13,7 +13,7 @@ An XML external entity (XXE) vulnerability in Fortify Software Security Center ( - https://www.exploit-db.com/exploits/45027/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-12463 #### ExploitDB - https://www.exploit-db.com/exploits/45027 diff --git a/cves/2018/CVE-2018-12533.md b/cves/2018/CVE-2018-12533.md index 8f78614633c..fba6b7f1ef7 100644 --- a/cves/2018/CVE-2018-12533.md +++ b/cves/2018/CVE-2018-12533.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/TheKalin/CVE-2018-12533 - https://github.com/llamaonsecurity/CVE-2018-12533 - https://github.com/mhagnumdw/richfaces-vulnerability-cve-2018-12533-rf-14310 +- https://github.com/LucasKatashi/paint2die diff --git a/cves/2018/CVE-2018-12596.md b/cves/2018/CVE-2018-12596.md index 8dbc5652af7..709690b32f9 100644 --- a/cves/2018/CVE-2018-12596.md +++ b/cves/2018/CVE-2018-12596.md @@ -16,7 +16,7 @@ Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9. - https://www.exploit-db.com/exploits/45577/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-12596 #### ExploitDB - https://www.exploit-db.com/exploits/45577 diff --git a/cves/2018/CVE-2018-12613.md b/cves/2018/CVE-2018-12613.md index 2cd8d949ef1..2067c8fa8e5 100644 --- a/cves/2018/CVE-2018-12613.md +++ b/cves/2018/CVE-2018-12613.md @@ -33,3 +33,6 @@ An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker c #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_lfi_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpmyadmin/CVE-2018-12613 diff --git a/cves/2018/CVE-2018-1270.md b/cves/2018/CVE-2018-1270.md index 5b55e25a63e..f1707bed7f3 100644 --- a/cves/2018/CVE-2018-1270.md +++ b/cves/2018/CVE-2018-1270.md @@ -17,3 +17,5 @@ Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 a - https://github.com/Venscor/CVE-2018-1270 - https://github.com/tafamace/CVE-2018-1270 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2018-1270 diff --git a/cves/2018/CVE-2018-1273.md b/cves/2018/CVE-2018-1273.md index c6e7ddfed09..5f53fa77feb 100644 --- a/cves/2018/CVE-2018-1273.md +++ b/cves/2018/CVE-2018-1273.md @@ -23,3 +23,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1273.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2018-1273 diff --git a/cves/2018/CVE-2018-1297.md b/cves/2018/CVE-2018-1297.md index 352beb97783..a08bf6cf4af 100644 --- a/cves/2018/CVE-2018-1297.md +++ b/cves/2018/CVE-2018-1297.md @@ -17,3 +17,5 @@ No PoCs from references. - https://github.com/48484848484848/Jmeter-CVE-2018-1297- - https://github.com/Al1ex/CVE-2018-1297 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jmeter/CVE-2018-1297 diff --git a/cves/2018/CVE-2018-13379.md b/cves/2018/CVE-2018-13379.md index bd15f3a37ca..5ffcf71dd41 100644 --- a/cves/2018/CVE-2018-13379.md +++ b/cves/2018/CVE-2018-13379.md @@ -25,6 +25,8 @@ An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal" - https://github.com/nivdolgin/CVE-2018-13379 - https://github.com/pwn3z/CVE-2018-13379-FortinetVPN - https://github.com/yukar1z0e/CVE-2018-13379 +- https://github.com/Instructor-Admin/Multi-threaded-mass-exploiter-CVE-2018-13379-POC +- https://github.com/Zierax/CVE-2018-13379 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13379.yaml diff --git a/cves/2018/CVE-2018-14009.md b/cves/2018/CVE-2018-14009.md index e1d3130a642..b1b0ba5b20c 100644 --- a/cves/2018/CVE-2018-14009.md +++ b/cves/2018/CVE-2018-14009.md @@ -15,6 +15,7 @@ Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability tha #### Github - https://github.com/WangYihang/Codiad-Remote-Code-Execute-Exploit - https://github.com/hidog123/Codiad-CVE-2018-14009 +- https://github.com/lolameroo/Codiad-CVE-2018-14009 #### ExploitDB - https://www.exploit-db.com/exploits/49705 diff --git a/cves/2018/CVE-2018-14324.md b/cves/2018/CVE-2018-14324.md index 42afa6de775..a3a4c1f15e6 100644 --- a/cves/2018/CVE-2018-14324.md +++ b/cves/2018/CVE-2018-14324.md @@ -13,5 +13,5 @@ The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/matejsmycka/CVE-2018-14324-Exploit diff --git a/cves/2018/CVE-2018-14574.md b/cves/2018/CVE-2018-14574.md index b271880b904..9e47aefdb57 100644 --- a/cves/2018/CVE-2018-14574.md +++ b/cves/2018/CVE-2018-14574.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14574.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2018-14574 diff --git a/cves/2018/CVE-2018-14847.md b/cves/2018/CVE-2018-14847.md index 781b3142a44..8ec24d4436e 100644 --- a/cves/2018/CVE-2018-14847.md +++ b/cves/2018/CVE-2018-14847.md @@ -56,6 +56,8 @@ MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read a - https://github.com/vickysanthosh/routersploit - https://github.com/whiterabb17/MkCheck - https://github.com/yukar1z0e/CVE-2018-14847 +- https://github.com/BasuCert/WinboxPoC +- https://github.com/mourafuseti/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS #### ExploitDB - https://www.exploit-db.com/exploits/45578 diff --git a/cves/2018/CVE-2018-15133.md b/cves/2018/CVE-2018-15133.md index e53081925e7..dc52cf18346 100644 --- a/cves/2018/CVE-2018-15133.md +++ b/cves/2018/CVE-2018-15133.md @@ -26,6 +26,8 @@ In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execut - https://github.com/kozmic/laravel-poc-CVE-2018-15133 - https://github.com/yeahhbean/Laravel-CVE-2018-15133 - https://github.com/z3dxian6/gen_laravel_cookie +- https://github.com/Cr4zyD14m0nd137/Lab-for-cve-2018-15133 +- https://github.com/Loaxert/CVE-2018-15133-PoC #### ExploitDB - https://www.exploit-db.com/exploits/47129 diff --git a/cves/2018/CVE-2018-15473.md b/cves/2018/CVE-2018-15473.md index 3fbac7a847c..d28327f9573 100644 --- a/cves/2018/CVE-2018-15473.md +++ b/cves/2018/CVE-2018-15473.md @@ -67,6 +67,10 @@ OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not dela - https://github.com/yZ1337/CVE-2018-15473 - https://github.com/yZee00/CVE-2018-15473 - https://github.com/yZeetje/CVE-2018-15473 +- https://github.com/K3rn3l-32/Threaded-CVE-2018-15473 +- https://github.com/kaktus5454/CVE-2018-15473 +- https://github.com/kikechans/-SSH-Enum-CVE-2018-15473 +- https://github.com/wtbacon/cve-2018-15473 #### ExploitDB - https://www.exploit-db.com/exploits/45233 @@ -75,3 +79,6 @@ OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not dela #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder5/CVE-2018-15473.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openssh/CVE-2018-15473 diff --git a/cves/2018/CVE-2018-15499.md b/cves/2018/CVE-2018-15499.md index b2b808077c0..d82152956ef 100644 --- a/cves/2018/CVE-2018-15499.md +++ b/cves/2018/CVE-2018-15499.md @@ -13,5 +13,5 @@ GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users - https://github.com/DownWithUp/CVE-2018-15499 #### Github -No PoCs found on GitHub currently. +- https://github.com/DownWithUp/CVE-2018-15499 diff --git a/cves/2018/CVE-2018-15685.md b/cves/2018/CVE-2018-15685.md index 2bdd9596c14..4500a842de8 100644 --- a/cves/2018/CVE-2018-15685.md +++ b/cves/2018/CVE-2018-15685.md @@ -18,3 +18,6 @@ GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios inv #### ExploitDB - https://www.exploit-db.com/exploits/45272 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/electron/CVE-2018-15685 diff --git a/cves/2018/CVE-2018-16385.md b/cves/2018/CVE-2018-16385.md index 476467b8931..1f7ff1c391b 100644 --- a/cves/2018/CVE-2018-16385.md +++ b/cves/2018/CVE-2018-16385.md @@ -13,5 +13,5 @@ ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/inde No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/buzhimingdeaikun/SQL-ThinkPHP-5.0.24-RCE- diff --git a/cves/2018/CVE-2018-16509.md b/cves/2018/CVE-2018-16509.md index 9835e5e16f7..8390bdffdad 100644 --- a/cves/2018/CVE-2018-16509.md +++ b/cves/2018/CVE-2018-16509.md @@ -27,3 +27,7 @@ An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restorati #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/ghostscript_failed_restore.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ghostscript/CVE-2018-16509 +- https://github.com/vulhub/vulhub/tree/master/python/PIL-CVE-2018-16509 diff --git a/cves/2018/CVE-2018-16763.md b/cves/2018/CVE-2018-16763.md index 989f58cce0d..233f843d32a 100644 --- a/cves/2018/CVE-2018-16763.md +++ b/cves/2018/CVE-2018-16763.md @@ -57,6 +57,12 @@ FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter - https://github.com/savior-only/javafx_tools - https://github.com/shoamshilo/Fuel-CMS-Remote-Code-Execution-1.4--RCE-- - https://github.com/wizardy0ga/THM-Vulnerability_Capstone-CVE-2018-16763 +- https://github.com/Cyberuser-hash/CVE-2018-16763 +- https://github.com/ShadowR-Root/fuel-cms-cve-2018-16763-python3-port +- https://github.com/bad-c0de/CVE-2018-16763_FuelCMS-1.4.1_RCE +- https://github.com/estebanzarate/CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC +- https://github.com/gh0stuncle/CVE-2018-16763_fuel_cms_exploit +- https://github.com/kaxm23/exploit_cms_fuel #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16763.yaml diff --git a/cves/2018/CVE-2018-17081.md b/cves/2018/CVE-2018-17081.md index 8c79b2f51bd..6a7dce1b7a8 100644 --- a/cves/2018/CVE-2018-17081.md +++ b/cves/2018/CVE-2018-17081.md @@ -13,5 +13,5 @@ e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used - https://github.com/himanshurahi/e107_2.1.9_CSRF_POC #### Github -No PoCs found on GitHub currently. +- https://github.com/himanshurahi1996/e107_2.1.9_CSRF_POC diff --git a/cves/2018/CVE-2018-17240.md b/cves/2018/CVE-2018-17240.md index b4d08c5c770..ca1e41908d1 100644 --- a/cves/2018/CVE-2018-17240.md +++ b/cves/2018/CVE-2018-17240.md @@ -16,4 +16,5 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor #### Github - https://github.com/FenrirSec/CVE-2018-17240_exploit - https://github.com/Xewdy444/Netgrave +- https://github.com/BBge/CVE-2018-17240 diff --git a/cves/2018/CVE-2018-17246.md b/cves/2018/CVE-2018-17246.md index 00d097d1a86..220f67bc3f0 100644 --- a/cves/2018/CVE-2018-17246.md +++ b/cves/2018/CVE-2018-17246.md @@ -17,3 +17,6 @@ Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17246.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kibana/CVE-2018-17246 diff --git a/cves/2018/CVE-2018-18778.md b/cves/2018/CVE-2018-18778.md index 476e8131000..1d745d084c3 100644 --- a/cves/2018/CVE-2018-18778.md +++ b/cves/2018/CVE-2018-18778.md @@ -14,6 +14,10 @@ No PoCs from references. #### Github - https://github.com/cyberharsh/Mini_httpd-CVE-2018-18778 +- https://github.com/K3ysTr0K3R/CVE-2018-18778 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18778.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/mini_httpd/CVE-2018-18778 diff --git a/cves/2018/CVE-2018-18912.md b/cves/2018/CVE-2018-18912.md index 43f0916af7e..fa4abe5e632 100644 --- a/cves/2018/CVE-2018-18912.md +++ b/cves/2018/CVE-2018-18912.md @@ -13,5 +13,5 @@ An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based - https://github.com/notkisi/CVE-s/blob/master/CVE-2018-18912.py #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2018-18912 diff --git a/cves/2018/CVE-2018-18925.md b/cves/2018/CVE-2018-18925.md index 52057314a60..e42fa7ee6b5 100644 --- a/cves/2018/CVE-2018-18925.md +++ b/cves/2018/CVE-2018-18925.md @@ -17,3 +17,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18925.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gogs/CVE-2018-18925 diff --git a/cves/2018/CVE-2018-18955.md b/cves/2018/CVE-2018-18955.md index b316fd8001e..8006940715c 100644 --- a/cves/2018/CVE-2018-18955.md +++ b/cves/2018/CVE-2018-18955.md @@ -17,6 +17,7 @@ In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/u #### Github - https://github.com/HaleyWei/POC-available - https://github.com/scheatkode/CVE-2018-18955 +- https://github.com/WhatsWrongAndWhy/CVE-2018-18955 #### ExploitDB - https://www.exploit-db.com/exploits/45915 diff --git a/cves/2018/CVE-2018-19466.md b/cves/2018/CVE-2018-19466.md index 76d3526629d..0e2fa0f6d92 100644 --- a/cves/2018/CVE-2018-19466.md +++ b/cves/2018/CVE-2018-19466.md @@ -13,5 +13,5 @@ A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP cred - https://github.com/MauroEldritch/lempo #### Github -No PoCs found on GitHub currently. +- https://github.com/MauroEldritch/lempo diff --git a/cves/2018/CVE-2018-19475.md b/cves/2018/CVE-2018-19475.md index e07d35cad68..678a694c00c 100644 --- a/cves/2018/CVE-2018-19475.md +++ b/cves/2018/CVE-2018-19475.md @@ -15,3 +15,5 @@ psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to byp #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ghostscript/CVE-2018-19475 diff --git a/cves/2018/CVE-2018-19518.md b/cves/2018/CVE-2018-19518.md index 981726dee99..b0d46220dd5 100644 --- a/cves/2018/CVE-2018-19518.md +++ b/cves/2018/CVE-2018-19518.md @@ -31,3 +31,6 @@ University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in P #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/php_imap_open_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2018-19518 diff --git a/cves/2018/CVE-2018-19629.md b/cves/2018/CVE-2018-19629.md index 7aa50fe7330..4b477ba297e 100644 --- a/cves/2018/CVE-2018-19629.md +++ b/cves/2018/CVE-2018-19629.md @@ -13,5 +13,5 @@ A Denial of Service vulnerability in the ImageNow Server service in Hyland Perce - https://www.oppositionsecurity.com/imagenow-7-1-4-dos/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Excellencedev/CVE-2018-19629 diff --git a/cves/2018/CVE-2018-1999002.md b/cves/2018/CVE-2018-1999002.md index f5b827ddfaa..0833f254778 100644 --- a/cves/2018/CVE-2018-1999002.md +++ b/cves/2018/CVE-2018-1999002.md @@ -15,6 +15,7 @@ A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 #### Github - https://github.com/0x6b7966/CVE-2018-1999002 - https://github.com/slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins +- https://github.com/im23pds/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins #### ExploitDB - https://www.exploit-db.com/exploits/46453 diff --git a/cves/2018/CVE-2018-20250.md b/cves/2018/CVE-2018-20250.md index 9a69100d007..a2d6d81fa8f 100644 --- a/cves/2018/CVE-2018-20250.md +++ b/cves/2018/CVE-2018-20250.md @@ -38,6 +38,7 @@ In WinRAR versions prior to and including 5.61, There is path traversal vulnerab - https://github.com/tannlh/CVE-2018-20250 - https://github.com/tzwlhack/CVE-2018-20250 - https://github.com/zeronohacker/CVE-2018-20250 +- https://github.com/joydragon/Detect-CVE-2018-20250 #### ExploitDB - https://www.exploit-db.com/exploits/46756 diff --git a/cves/2018/CVE-2018-20343.md b/cves/2018/CVE-2018-20343.md index 2489dc022e7..94ddb6b22f1 100644 --- a/cves/2018/CVE-2018-20343.md +++ b/cves/2018/CVE-2018-20343.md @@ -13,5 +13,5 @@ Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build - https://github.com/Alexandre-Bartel/CVE-2018-20343 #### Github -No PoCs found on GitHub currently. +- https://github.com/Alexandre-Bartel/CVE-2018-20343 diff --git a/cves/2018/CVE-2018-20580.md b/cves/2018/CVE-2018-20580.md index 3e4651c2fa7..a67815d71fd 100644 --- a/cves/2018/CVE-2018-20580.md +++ b/cves/2018/CVE-2018-20580.md @@ -15,7 +15,7 @@ The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remot - https://www.exploit-db.com/exploits/46796/ #### Github -No PoCs found on GitHub currently. +- https://github.com/gscamelo/CVE-2018-20580 #### ExploitDB - https://www.exploit-db.com/exploits/46796 diff --git a/cves/2018/CVE-2018-2380.md b/cves/2018/CVE-2018-2380.md index 329fc719cbc..9e854a2e92d 100644 --- a/cves/2018/CVE-2018-2380.md +++ b/cves/2018/CVE-2018-2380.md @@ -21,7 +21,7 @@ SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insuff - https://www.exploit-db.com/exploits/44292/ #### Github -No PoCs found on GitHub currently. +- https://github.com/erpscanteam/CVE-2018-2380 #### ExploitDB - https://www.exploit-db.com/exploits/44292 diff --git a/cves/2018/CVE-2018-2628.md b/cves/2018/CVE-2018-2628.md index d4781c91b95..b7185a95c87 100644 --- a/cves/2018/CVE-2018-2628.md +++ b/cves/2018/CVE-2018-2628.md @@ -52,6 +52,8 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar - https://github.com/w181496/weblogic-gadget-probe - https://github.com/welove88888/k8 - https://github.com/wrysunny/cve-2018-2628 +- https://github.com/0xn0ne/weblogicScanner +- https://github.com/herantong/CVE-2018-2628 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2018/CVE-2018-2628.yaml @@ -64,3 +66,6 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2018-2628 diff --git a/cves/2018/CVE-2018-2636.md b/cves/2018/CVE-2018-2636.md index 6a2e6cbf5fc..0c8a2b4ea12 100644 --- a/cves/2018/CVE-2018-2636.md +++ b/cves/2018/CVE-2018-2636.md @@ -17,7 +17,7 @@ Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality - https://www.exploit-db.com/exploits/43960/ #### Github -No PoCs found on GitHub currently. +- https://github.com/erpscanteam/CVE-2018-2636 #### ExploitDB - https://www.exploit-db.com/exploits/43960 diff --git a/cves/2018/CVE-2018-2894.md b/cves/2018/CVE-2018-2894.md index ec7dc267a0f..2dceec07201 100644 --- a/cves/2018/CVE-2018-2894.md +++ b/cves/2018/CVE-2018-2894.md @@ -21,3 +21,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2894.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2018-2894 diff --git a/cves/2018/CVE-2018-3760.md b/cves/2018/CVE-2018-3760.md index c49ab8dcbf5..d49145fd699 100644 --- a/cves/2018/CVE-2018-3760.md +++ b/cves/2018/CVE-2018-3760.md @@ -19,3 +19,6 @@ There is an information leak vulnerability in Sprockets. Versions Affected: 4.0. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3760.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rails/CVE-2018-3760 diff --git a/cves/2018/CVE-2018-5333.md b/cves/2018/CVE-2018-5333.md index c50fe74c32d..7529a7a2e1a 100644 --- a/cves/2018/CVE-2018-5333.md +++ b/cves/2018/CVE-2018-5333.md @@ -13,7 +13,7 @@ In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdm - http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2018-5333 #### ExploitDB - https://www.exploit-db.com/exploits/47957 diff --git a/cves/2018/CVE-2018-5353.md b/cves/2018/CVE-2018-5353.md index c4c2fa9f604..20d49584630 100644 --- a/cves/2018/CVE-2018-5353.md +++ b/cves/2018/CVE-2018-5353.md @@ -13,5 +13,5 @@ The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 bui - https://github.com/missing0x00/CVE-2018-5353 #### Github -No PoCs found on GitHub currently. +- https://github.com/missing0x00/CVE-2018-5353 diff --git a/cves/2018/CVE-2018-6242.md b/cves/2018/CVE-2018-6242.md index 065b35bdf90..9f50a1403a0 100644 --- a/cves/2018/CVE-2018-6242.md +++ b/cves/2018/CVE-2018-6242.md @@ -19,4 +19,6 @@ No PoCs from references. - https://github.com/mologie/nxboot - https://github.com/persuaded9041/fusee-gelee - https://github.com/soup6020/fusee-launcher +- https://github.com/Resi-le/NXLoader +- https://github.com/oliviaholly/fusee-gelee diff --git a/cves/2018/CVE-2018-6389.md b/cves/2018/CVE-2018-6389.md index 078b58ae8fe..7da3d344293 100644 --- a/cves/2018/CVE-2018-6389.md +++ b/cves/2018/CVE-2018-6389.md @@ -37,6 +37,7 @@ In WordPress through 4.9.2, unauthenticated attackers can cause a denial of serv - https://github.com/safebuffer/CVE-2018-6389 - https://github.com/thechrono13/PoC---CVE-2018-6389 - https://github.com/vineetkia/Wordpress-DOS-Attack-CVE-2018-6389 +- https://github.com/omidsec/CVE-2018-6389 #### ExploitDB - https://www.exploit-db.com/exploits/43968 diff --git a/cves/2018/CVE-2018-6537.md b/cves/2018/CVE-2018-6537.md index 989b4164d01..b8991de436f 100644 --- a/cves/2018/CVE-2018-6537.md +++ b/cves/2018/CVE-2018-6537.md @@ -13,5 +13,5 @@ A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze E - https://www.exploit-db.com/exploits/43936/ #### Github -No PoCs found on GitHub currently. +- https://github.com/damariion/CVE-2018-6537.RCE diff --git a/cves/2018/CVE-2018-6546.md b/cves/2018/CVE-2018-6546.md index b3be8dd7e4e..335983c1bfd 100644 --- a/cves/2018/CVE-2018-6546.md +++ b/cves/2018/CVE-2018-6546.md @@ -15,7 +15,7 @@ plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD - https://www.securifera.com/advisories/CVE-2018-6546/ #### Github -No PoCs found on GitHub currently. +- https://github.com/securifera/CVE-2018-6546-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/44476 diff --git a/cves/2018/CVE-2018-6574.md b/cves/2018/CVE-2018-6574.md index 72b4d34d56b..1005de2e605 100644 --- a/cves/2018/CVE-2018-6574.md +++ b/cves/2018/CVE-2018-6574.md @@ -98,4 +98,6 @@ Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10r - https://github.com/yavolo/CVE-2018-6574 - https://github.com/yitingfan/CVE-2018-6574_demo - https://github.com/zerbaliy3v/cve-2018-6574-exploit +- https://github.com/Saptaktdk/go-get-RCE +- https://github.com/s-p4rk/CVE-2018-6574 diff --git a/cves/2018/CVE-2018-6890.md b/cves/2018/CVE-2018-6890.md index 108b3e7b7d0..49249c481a0 100644 --- a/cves/2018/CVE-2018-6890.md +++ b/cves/2018/CVE-2018-6890.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editin - https://github.com/pradeepjairamani/WolfCMS-XSS-POC/blob/master/Wolfcms%20v0.8.3.1%20xss%20POC%20by%20Pradeep%20Jairamani.pdf #### Github -No PoCs found on GitHub currently. +- https://github.com/pradeepjairamani/WolfCMS-XSS-POC diff --git a/cves/2018/CVE-2018-6892.md b/cves/2018/CVE-2018-6892.md index 007abe3fab6..b6ab9c28ab6 100644 --- a/cves/2018/CVE-2018-6892.md +++ b/cves/2018/CVE-2018-6892.md @@ -23,6 +23,7 @@ An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote atta #### Github - https://github.com/hsteigerFR/Cybersecurity-ROPChain - https://github.com/latortuga71/CVE-2018-6892-Golang +- https://github.com/crypticq/CLOUDME_B0F #### ExploitDB - https://www.exploit-db.com/exploits/44175 diff --git a/cves/2018/CVE-2018-6905.md b/cves/2018/CVE-2018-6905.md index 3ad651f1b9d..9a76a46c5eb 100644 --- a/cves/2018/CVE-2018-6905.md +++ b/cves/2018/CVE-2018-6905.md @@ -14,4 +14,5 @@ The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_C #### Github - https://github.com/dnr6419/CVE-2018-6905 +- https://github.com/pradeepjairamani/TYPO3-XSS-POC diff --git a/cves/2018/CVE-2018-7422.md b/cves/2018/CVE-2018-7422.md index d9382abfef5..4bce5b385c6 100644 --- a/cves/2018/CVE-2018-7422.md +++ b/cves/2018/CVE-2018-7422.md @@ -17,6 +17,7 @@ A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for #### Github - https://github.com/0x00-0x00/CVE-2018-7422 - https://github.com/ndr-repo/CVE-2018-7422 +- https://github.com/nguyenduytoi/CVE-2018-7422 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7422.yaml diff --git a/cves/2018/CVE-2018-7490.md b/cves/2018/CVE-2018-7490.md index 564bb4aa161..30fe457ce35 100644 --- a/cves/2018/CVE-2018-7490.md +++ b/cves/2018/CVE-2018-7490.md @@ -20,3 +20,6 @@ uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-doc #### ExploitDB - https://www.exploit-db.com/exploits/44223 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/uwsgi/CVE-2018-7490 diff --git a/cves/2018/CVE-2018-7600.md b/cves/2018/CVE-2018-7600.md index 25d54157dba..3cff1b484dd 100644 --- a/cves/2018/CVE-2018-7600.md +++ b/cves/2018/CVE-2018-7600.md @@ -73,6 +73,15 @@ Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 - https://github.com/xxxTectationxxx/CVE-2018-7600 - https://github.com/ynsmroztas/drupalhunter - https://github.com/zhzyker/CVE-2018-7600-Drupal-POC-EXP +- https://github.com/4l13n-DN/POC-CVE-2018-7600 +- https://github.com/Dungsocool/CVE-2018-7600 +- https://github.com/RB4C/drupalgeddon2-CVE-2018-7600 +- https://github.com/Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE +- https://github.com/a2u/CVE-2018-7600 +- https://github.com/elkhaoudari/CVE-2018-7600-PoC +- https://github.com/erman-bolukbasi/web-penetration-drupal +- https://github.com/g0rx/CVE-2018-7600-Drupal-RCE +- https://github.com/nayem-m/drupalgeddon2-cli #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7600.yaml @@ -85,3 +94,6 @@ Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/drupal_drupalgeddon2.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2018-7600 diff --git a/cves/2018/CVE-2018-7602.md b/cves/2018/CVE-2018-7602.md index ec0213f9205..4a79920b732 100644 --- a/cves/2018/CVE-2018-7602.md +++ b/cves/2018/CVE-2018-7602.md @@ -31,3 +31,6 @@ A remote code execution vulnerability exists within multiple subsystems of Drupa - https://www.exploit-db.com/exploits/44557 - https://www.exploit-db.com/exploits/44557 - https://www.exploit-db.com/exploits/44542 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2018-7602 diff --git a/cves/2018/CVE-2018-7690.md b/cves/2018/CVE-2018-7690.md index 3fc0e51d78b..de2f01dd22a 100644 --- a/cves/2018/CVE-2018-7690.md +++ b/cves/2018/CVE-2018-7690.md @@ -13,7 +13,7 @@ A potential Remote Unauthorized Access in Micro Focus Fortify Software Security - https://www.exploit-db.com/exploits/45989/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-7690 #### ExploitDB - https://www.exploit-db.com/exploits/45989 diff --git a/cves/2018/CVE-2018-7691.md b/cves/2018/CVE-2018-7691.md index 325c00bd4cb..73c467b321c 100644 --- a/cves/2018/CVE-2018-7691.md +++ b/cves/2018/CVE-2018-7691.md @@ -13,7 +13,7 @@ A potential Remote Unauthorized Access in Micro Focus Fortify Software Security - https://www.exploit-db.com/exploits/45990/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-7691 #### ExploitDB - https://www.exploit-db.com/exploits/45990 diff --git a/cves/2018/CVE-2018-8060.md b/cves/2018/CVE-2018-8060.md index ce3f64cac9c..2d328af7ab3 100644 --- a/cves/2018/CVE-2018-8060.md +++ b/cves/2018/CVE-2018-8060.md @@ -13,5 +13,5 @@ HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to - https://github.com/otavioarj/SIOCtl #### Github -No PoCs found on GitHub currently. +- https://github.com/otavioarj/SIOCtl diff --git a/cves/2018/CVE-2018-8611.md b/cves/2018/CVE-2018-8611.md index f7e1e428230..0e9d50d8ac6 100644 --- a/cves/2018/CVE-2018-8611.md +++ b/cves/2018/CVE-2018-8611.md @@ -54,4 +54,5 @@ No PoCs from references. #### Github - https://github.com/lsw29475/CVE-2018-8611 +- https://github.com/ahm3dgg/cve-2018-8611 diff --git a/cves/2018/CVE-2018-8715.md b/cves/2018/CVE-2018-8715.md index 754a1d7a060..9b874d7bae3 100644 --- a/cves/2018/CVE-2018-8715.md +++ b/cves/2018/CVE-2018-8715.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8715.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/appweb/CVE-2018-8715 diff --git a/cves/2018/CVE-2018-8941.md b/cves/2018/CVE-2018-8941.md index fb42667be23..3830bd68eaa 100644 --- a/cves/2018/CVE-2018-8941.md +++ b/cves/2018/CVE-2018-8941.md @@ -13,5 +13,5 @@ Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 ha - https://github.com/SECFORCE/CVE-2018-8941 #### Github -No PoCs found on GitHub currently. +- https://github.com/SECFORCE/CVE-2018-8941 diff --git a/cves/2018/CVE-2018-9206.md b/cves/2018/CVE-2018-9206.md index f6749c30d14..6be18a17e42 100644 --- a/cves/2018/CVE-2018-9206.md +++ b/cves/2018/CVE-2018-9206.md @@ -20,6 +20,7 @@ Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Uploa - https://github.com/cved-sources/cve-2018-9206 - https://github.com/liemkaka/CVE-2018-9206 - https://github.com/mi-hood/CVE-2018-9206 +- https://github.com/flame-11/CVE-2018-9206-jquery-file-upload #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9206.yaml diff --git a/cves/2018/CVE-2018-9276.md b/cves/2018/CVE-2018-9276.md index 833f39c96d1..bb392b8485d 100644 --- a/cves/2018/CVE-2018-9276.md +++ b/cves/2018/CVE-2018-9276.md @@ -21,6 +21,7 @@ An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who - https://github.com/andyfeili/CVE-2018-9276 - https://github.com/backglass/exploit_prtg - https://github.com/wildkindcc/CVE-2018-9276 +- https://github.com/AC8999/PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276 #### ExploitDB - https://www.exploit-db.com/exploits/46527 diff --git a/cves/2018/CVE-2018-9995.md b/cves/2018/CVE-2018-9995.md index c372f485be2..ce583cb0579 100644 --- a/cves/2018/CVE-2018-9995.md +++ b/cves/2018/CVE-2018-9995.md @@ -40,6 +40,9 @@ TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in - https://github.com/sjomurodov/getDVR - https://github.com/tausifzaman/cctv-hack - https://github.com/thaipc2021/camera +- https://github.com/0xDamian/CVE-2018-9995-rs +- https://github.com/F7P-H4NN1B4L/CVE-2018-9995-DVR-Credentials-Extractor +- https://github.com/mesutozsoycom/cve-2018-9995 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9995.yaml diff --git a/cves/2019/CVE-2019-0193.md b/cves/2019/CVE-2019-0193.md index 1c75d50c3ad..b1a63589649 100644 --- a/cves/2019/CVE-2019-0193.md +++ b/cves/2019/CVE-2019-0193.md @@ -23,3 +23,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0193.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2019-0193 diff --git a/cves/2019/CVE-2019-0211.md b/cves/2019/CVE-2019-0211.md index 13b32d65821..c19669d970f 100644 --- a/cves/2019/CVE-2019-0211.md +++ b/cves/2019/CVE-2019-0211.md @@ -20,6 +20,7 @@ In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or p #### Github - https://github.com/0xbigshaq/php7-internals - https://github.com/ozkanbilge/Apache-Exploit-2019 +- https://github.com/Jeanback1/CVE-2019-0211-exploit #### ExploitDB - https://www.exploit-db.com/exploits/46676 diff --git a/cves/2019/CVE-2019-0227.md b/cves/2019/CVE-2019-0227.md index f10e4bfbc6c..c1027db1f1a 100644 --- a/cves/2019/CVE-2019-0227.md +++ b/cves/2019/CVE-2019-0227.md @@ -14,6 +14,7 @@ A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 #### Github - https://github.com/ianxtianxt/cve-2019-0227 +- https://github.com/1475210817/Axis1.4-CVE-2019-0227 #### ExploitDB - https://www.exploit-db.com/exploits/46682 diff --git a/cves/2019/CVE-2019-0232.md b/cves/2019/CVE-2019-0232.md index c8d2e474a20..ddec5aee720 100644 --- a/cves/2019/CVE-2019-0232.md +++ b/cves/2019/CVE-2019-0232.md @@ -29,6 +29,11 @@ When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in - https://github.com/setrus/CVE-2019-0232 - https://github.com/x3m1Sec/CVE-2019-0232_tomcat_cgi_exploit - https://github.com/xsxtw/CVE-2019-0232 +- https://github.com/Jorge2Rubio/CVE-2019-0232 +- https://github.com/blackjuker2/CVE-2019-0232 +- https://github.com/luongchivi/Preproduce-CVE-2019-0232 +- https://github.com/r4vl1t0/CVE-2019-0232 +- https://github.com/yuzuki-ayanami/CVE-2019-0232 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0232.yaml diff --git a/cves/2019/CVE-2019-0708.md b/cves/2019/CVE-2019-0708.md index 25dc1e9877d..9391da9ca0a 100644 --- a/cves/2019/CVE-2019-0708.md +++ b/cves/2019/CVE-2019-0708.md @@ -157,6 +157,9 @@ A remote code execution vulnerability exists in Remote Desktop Services formerly - https://github.com/ze0r/CVE-2019-0708-exp - https://github.com/zerosum0x0-archive/archive - https://github.com/zjw88282740/CVE-2019-0708-win7 +- https://github.com/SebasPV27/Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708- +- https://github.com/benhe119/bluekeepscan +- https://github.com/zoujialan/CVE-2019-0708-RCE #### ExploitDB - https://www.exploit-db.com/exploits/47416 diff --git a/cves/2019/CVE-2019-1003000.md b/cves/2019/CVE-2019-1003000.md index 73f6e242e67..9c9cff9aff4 100644 --- a/cves/2019/CVE-2019-1003000.md +++ b/cves/2019/CVE-2019-1003000.md @@ -18,6 +18,7 @@ A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier - https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc - https://github.com/purple-WL/Jenkins_CVE-2019-1003000 - https://github.com/slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins +- https://github.com/im23pds/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003000.yaml diff --git a/cves/2019/CVE-2019-1003030.md b/cves/2019/CVE-2019-1003030.md index d31a2dd8bf3..4904ec90c87 100644 --- a/cves/2019/CVE-2019-1003030.md +++ b/cves/2019/CVE-2019-1003030.md @@ -16,6 +16,7 @@ A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 an #### Github - https://github.com/Cashiuus/jenkins-checkscript-rce - https://github.com/overgrowncarrot1/CVE-2019-1003030 +- https://github.com/cyberbelly/PoC-CVE-2019-1003030 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003030.yaml diff --git a/cves/2019/CVE-2019-10068.md b/cves/2019/CVE-2019-10068.md index bb595e59bc7..7bc43a8d2fd 100644 --- a/cves/2019/CVE-2019-10068.md +++ b/cves/2019/CVE-2019-10068.md @@ -15,7 +15,7 @@ An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, - https://devnet.kentico.com/download/hotfixes#securityBugs-v12 #### Github -No PoCs found on GitHub currently. +- https://github.com/cianananan/CVE-2019-10068-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10068.yaml diff --git a/cves/2019/CVE-2019-10149.md b/cves/2019/CVE-2019-10149.md index 5201132682c..2a821176d2e 100644 --- a/cves/2019/CVE-2019-10149.md +++ b/cves/2019/CVE-2019-10149.md @@ -35,6 +35,7 @@ A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation - https://github.com/qlusec/CVE-2019-10149 - https://github.com/rahmadsandy/EXIM-4.87-CVE-2019-10149 - https://github.com/uyerr/PoC_CVE-2019-10149--rce +- https://github.com/Ambrella-Security/CVE-2019-10149 #### ExploitDB - https://www.exploit-db.com/exploits/47307 diff --git a/cves/2019/CVE-2019-10392.md b/cves/2019/CVE-2019-10392.md index 939aee26ef4..3e09cf78f59 100644 --- a/cves/2019/CVE-2019-10392.md +++ b/cves/2019/CVE-2019-10392.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/ftk-sostupid/CVE-2019-10392_EXP - https://github.com/jas502n/CVE-2019-10392 - https://github.com/shoucheng3/jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4 +- https://github.com/FortheKahZModan/CVE-2019-10392_EXP diff --git a/cves/2019/CVE-2019-1040.md b/cves/2019/CVE-2019-1040.md index 786c5da3cf9..4648c91ccbb 100644 --- a/cves/2019/CVE-2019-1040.md +++ b/cves/2019/CVE-2019-1040.md @@ -54,4 +54,5 @@ No PoCs from references. - https://github.com/Ridter/CVE-2019-1040 - https://github.com/Ridter/CVE-2019-1040-dcpwn - https://github.com/lazaars/UltraRealy_with_CVE-2019-1040 +- https://github.com/JonyFilc/PrintSpoofer-ReflectiveDLL diff --git a/cves/2019/CVE-2019-10685.md b/cves/2019/CVE-2019-10685.md index 96afb5a51c3..8fc74891d46 100644 --- a/cves/2019/CVE-2019-10685.md +++ b/cves/2019/CVE-2019-10685.md @@ -15,7 +15,7 @@ A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelber - https://medium.com/@alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2019-10685 #### ExploitDB - https://www.exploit-db.com/exploits/46804 diff --git a/cves/2019/CVE-2019-10758.md b/cves/2019/CVE-2019-10758.md index 03018f82d63..dffa0a6a7c7 100644 --- a/cves/2019/CVE-2019-10758.md +++ b/cves/2019/CVE-2019-10758.md @@ -20,3 +20,6 @@ mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10758.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/mongo-express/CVE-2019-10758 diff --git a/cves/2019/CVE-2019-11043.md b/cves/2019/CVE-2019-11043.md index fa171e236f1..f18911edfd4 100644 --- a/cves/2019/CVE-2019-11043.md +++ b/cves/2019/CVE-2019-11043.md @@ -41,6 +41,10 @@ In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in - https://github.com/theMiddleBlue/CVE-2019-11043 - https://github.com/tinker-li/CVE-2019-11043 - https://github.com/ypereirareis/docker-CVE-2019-11043 +- https://github.com/CodeHex083/phuip-fpizdam +- https://github.com/MagentaBear/CVE-2019-11043-Vulnerability +- https://github.com/bayazid-bit/CVE-2019-11043 +- https://github.com/gon905332-jpg/cve-2019-11043.py #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11043.yaml @@ -51,3 +55,6 @@ In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_fpm_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 diff --git a/cves/2019/CVE-2019-11076.md b/cves/2019/CVE-2019-11076.md index b7a2a1922d3..6f31813b016 100644 --- a/cves/2019/CVE-2019-11076.md +++ b/cves/2019/CVE-2019-11076.md @@ -13,5 +13,5 @@ Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthen - https://github.com/livehybrid/poc-cribl-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/livehybrid/poc-cribl-rce diff --git a/cves/2019/CVE-2019-11231.md b/cves/2019/CVE-2019-11231.md index 6edc360ec34..a62b73cc92f 100644 --- a/cves/2019/CVE-2019-11231.md +++ b/cves/2019/CVE-2019-11231.md @@ -14,7 +14,7 @@ An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sani - https://ssd-disclosure.com/?p=3899&preview=true #### Github -No PoCs found on GitHub currently. +- https://github.com/akincibor/CVE-2019-11231-PoC #### ExploitDB - https://www.exploit-db.com/exploits/46880 diff --git a/cves/2019/CVE-2019-11523.md b/cves/2019/CVE-2019-11523.md index 89fe8e9370d..4504571c014 100644 --- a/cves/2019/CVE-2019-11523.md +++ b/cves/2019/CVE-2019-11523.md @@ -13,5 +13,5 @@ Anviz Global M3 Outdoor RFID Access Control executes any command received from a - https://github.com/wizlab-it/anviz-m3-rfid-cve-2019-11523-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/wizlab-it/anviz-m3-rfid-cve-2019-11523-poc diff --git a/cves/2019/CVE-2019-11581.md b/cves/2019/CVE-2019-11581.md index afa8b6c0827..b3a68111b41 100644 --- a/cves/2019/CVE-2019-11581.md +++ b/cves/2019/CVE-2019-11581.md @@ -25,3 +25,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11581.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jira/CVE-2019-11581 diff --git a/cves/2019/CVE-2019-11707.md b/cves/2019/CVE-2019-11707.md index 42894789a45..239eb4eb5fc 100644 --- a/cves/2019/CVE-2019-11707.md +++ b/cves/2019/CVE-2019-11707.md @@ -21,6 +21,7 @@ A type confusion vulnerability can occur when manipulating JavaScript objects du - https://github.com/securesystemslab/pkru-safe-cve-html - https://github.com/tunnelshade/cve-2019-11707 - https://github.com/vigneshsrao/CVE-2019-11707 +- https://github.com/CosminGGeorgescu/CVE-2019-11707-PoC #### ExploitDB - https://www.exploit-db.com/exploits/47038 diff --git a/cves/2019/CVE-2019-11881.md b/cves/2019/CVE-2019-11881.md index ea9489e7d11..982caef1657 100644 --- a/cves/2019/CVE-2019-11881.md +++ b/cves/2019/CVE-2019-11881.md @@ -13,5 +13,5 @@ A vulnerability exists in Rancher before 2.2.4 in the login component, where the - https://github.com/MauroEldritch/VanCleef #### Github -No PoCs found on GitHub currently. +- https://github.com/MauroEldritch/VanCleef diff --git a/cves/2019/CVE-2019-12169.md b/cves/2019/CVE-2019-12169.md index a63738fb8bc..3280e0d8394 100644 --- a/cves/2019/CVE-2019-12169.md +++ b/cves/2019/CVE-2019-12169.md @@ -15,7 +15,7 @@ ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in - https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit #### Github -No PoCs found on GitHub currently. +- https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atutor_upload_traversal.rb diff --git a/cves/2019/CVE-2019-12170.md b/cves/2019/CVE-2019-12170.md index d9bba832ef8..05929080015 100644 --- a/cves/2019/CVE-2019-12170.md +++ b/cves/2019/CVE-2019-12170.md @@ -15,4 +15,5 @@ ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/ #### Github - https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit +- https://github.com/fuzzlove/ATutor-Instructor-Backup-Arbitrary-File diff --git a/cves/2019/CVE-2019-12460.md b/cves/2019/CVE-2019-12460.md index 23db9a039ec..52566f7b15a 100644 --- a/cves/2019/CVE-2019-12460.md +++ b/cves/2019/CVE-2019-12460.md @@ -14,7 +14,7 @@ Web Port 1.19.1 allows XSS via the /access/setup type parameter. - https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS/ #### Github -No PoCs found on GitHub currently. +- https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS #### ExploitDB - https://www.exploit-db.com/exploits/48612 diff --git a/cves/2019/CVE-2019-12476.md b/cves/2019/CVE-2019-12476.md index b25c8110b2a..8eaa2a4a198 100644 --- a/cves/2019/CVE-2019-12476.md +++ b/cves/2019/CVE-2019-12476.md @@ -13,5 +13,5 @@ An authentication bypass vulnerability in the password reset functionality in Zo - https://github.com/0katz/CVE-2019-12476 #### Github -No PoCs found on GitHub currently. +- https://github.com/0katz/CVE-2019-12476 diff --git a/cves/2019/CVE-2019-12586.md b/cves/2019/CVE-2019-12586.md index c92d90ba989..9b8a1f568da 100644 --- a/cves/2019/CVE-2019-12586.md +++ b/cves/2019/CVE-2019-12586.md @@ -18,4 +18,5 @@ The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266 - https://github.com/armancswork/esp32_esp8266_attacks - https://github.com/armancwork/esp32_esp8266_attacks - https://github.com/serhatsdev/esp32_esp8266_attacks +- https://github.com/Matheus-Garbelini/esp32_esp8266_attacks diff --git a/cves/2019/CVE-2019-12840.md b/cves/2019/CVE-2019-12840.md index c6407e7fa8d..cbbbe97ed56 100644 --- a/cves/2019/CVE-2019-12840.md +++ b/cves/2019/CVE-2019-12840.md @@ -21,6 +21,7 @@ In Webmin through 1.910, any user authorized to the "Package Updates" module can - https://github.com/bkaraceylan/CVE-2019-12840_POC - https://github.com/fenix0499/CVE-2019-12840-NodeJs-Exploit - https://github.com/zAbuQasem/CVE-2019-12840 +- https://github.com/note0577/CVE-2019-12840-NodeJs-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/46984 diff --git a/cves/2019/CVE-2019-13132.md b/cves/2019/CVE-2019-13132.md index ace2f58f9d2..65e82e49606 100644 --- a/cves/2019/CVE-2019-13132.md +++ b/cves/2019/CVE-2019-13132.md @@ -13,5 +13,5 @@ In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a rem - https://github.com/zeromq/libzmq/issues/3558 #### Github -No PoCs found on GitHub currently. +- https://github.com/dinosn/cve-2019-13132-lab diff --git a/cves/2019/CVE-2019-13272.md b/cves/2019/CVE-2019-13272.md index 5db767f987a..964c3c5309c 100644 --- a/cves/2019/CVE-2019-13272.md +++ b/cves/2019/CVE-2019-13272.md @@ -36,6 +36,7 @@ In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the - https://github.com/polosec/CVE-2019-13272 - https://github.com/sumedhaDharmasena/-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272 - https://github.com/teddy47/CVE-2019-13272---Documentation +- https://github.com/letsr00t/CVE-2019-13272 #### ExploitDB - https://www.exploit-db.com/exploits/47543 diff --git a/cves/2019/CVE-2019-13292.md b/cves/2019/CVE-2019-13292.md index 9aa25379214..24954c3501d 100644 --- a/cves/2019/CVE-2019-13292.md +++ b/cves/2019/CVE-2019-13292.md @@ -15,6 +15,7 @@ A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts paymen #### Github - https://github.com/808ale/CVE-2019-13292-WebERP_4.15 - https://github.com/gustanini/CVE-2019-13292-WebERP_4.15 +- https://github.com/alealeluyah/CVE-2019-13292-WebERP_4.15 #### ExploitDB - https://www.exploit-db.com/exploits/47013 diff --git a/cves/2019/CVE-2019-13403.md b/cves/2019/CVE-2019-13403.md index 3ab94f939ed..0617d670446 100644 --- a/cves/2019/CVE-2019-13403.md +++ b/cves/2019/CVE-2019-13403.md @@ -13,5 +13,5 @@ Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module - https://github.com/B3Bo1d/CVE-2019-13403/ #### Github -No PoCs found on GitHub currently. +- https://github.com/B3Bo1d/CVE-2019-13403 diff --git a/cves/2019/CVE-2019-13633.md b/cves/2019/CVE-2019-13633.md index a620509c6b8..116f05c33a3 100644 --- a/cves/2019/CVE-2019-13633.md +++ b/cves/2019/CVE-2019-13633.md @@ -13,5 +13,5 @@ Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can sen - https://github.com/Security-AVS/CVE-2019-13633 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2019-13633 diff --git a/cves/2019/CVE-2019-14206.md b/cves/2019/CVE-2019-14206.md index e9f7c8a06ed..3cabb34faea 100644 --- a/cves/2019/CVE-2019-14206.md +++ b/cves/2019/CVE-2019-14206.md @@ -15,7 +15,7 @@ An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin bef - https://wpvulndb.com/vulnerabilities/9468 #### Github -No PoCs found on GitHub currently. +- https://github.com/developerfred/cve-2019-14206-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14206.yaml diff --git a/cves/2019/CVE-2019-14234.md b/cves/2019/CVE-2019-14234.md index 5e808d427f9..15e4b9a6118 100644 --- a/cves/2019/CVE-2019-14234.md +++ b/cves/2019/CVE-2019-14234.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/Rivaill/CVE_2019_14234 - https://github.com/malvika-thakur/CVE-2019-14234 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2019-14234 diff --git a/cves/2019/CVE-2019-14287.md b/cves/2019/CVE-2019-14287.md index 672e0e1dd3a..d6abf469c70 100644 --- a/cves/2019/CVE-2019-14287.md +++ b/cves/2019/CVE-2019-14287.md @@ -48,6 +48,7 @@ In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can - https://github.com/n3rdh4x0r/CVE-2019-14287 - https://github.com/shallvhack/Sudo-Security-Bypass-CVE-2019-14287 - https://github.com/thinuri99/Sudo-Security-Bypass-Vulnerability-CVE-2019-14287- +- https://github.com/sachinthadesilva/Exploit-CVE-2019-14287 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2019/CVE-2019-14287.yaml diff --git a/cves/2019/CVE-2019-14322.md b/cves/2019/CVE-2019-14322.md index a4ca4ba9b55..a9cf4c873e1 100644 --- a/cves/2019/CVE-2019-14322.md +++ b/cves/2019/CVE-2019-14322.md @@ -16,6 +16,7 @@ In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names ( - https://github.com/EmreOvunc/Odoo-12.0-LFI-Vulnerabilities - https://github.com/faisalfs10x/http-vuln-cve2019-14322.nse - https://github.com/sergiovks/CVE-2019-14322 +- https://github.com/faisalfs10x/CVE-2019-14322-scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14322.yaml diff --git a/cves/2019/CVE-2019-14326.md b/cves/2019/CVE-2019-14326.md index 9f0804d31db..3ca0e5b5109 100644 --- a/cves/2019/CVE-2019-14326.md +++ b/cves/2019/CVE-2019-14326.md @@ -13,5 +13,5 @@ An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it - https://github.com/seqred-s-a/cve-2019-14326 #### Github -No PoCs found on GitHub currently. +- https://github.com/seqred-s-a/cve-2019-14326 diff --git a/cves/2019/CVE-2019-14537.md b/cves/2019/CVE-2019-14537.md index bace29943df..f82a5e8f465 100644 --- a/cves/2019/CVE-2019-14537.md +++ b/cves/2019/CVE-2019-14537.md @@ -13,5 +13,5 @@ YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api com - https://github.com/Wocanilo/CVE-2019-14537 #### Github -No PoCs found on GitHub currently. +- https://github.com/Wocanilo/CVE-2019-14537 diff --git a/cves/2019/CVE-2019-14751.md b/cves/2019/CVE-2019-14751.md index f6170c9fb5c..e4836897bc3 100644 --- a/cves/2019/CVE-2019-14751.md +++ b/cves/2019/CVE-2019-14751.md @@ -14,5 +14,5 @@ NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing at - https://salvatoresecurity.com/zip-slip-in-nltk-cve-2019-14751/ #### Github -No PoCs found on GitHub currently. +- https://github.com/mssalvatore/CVE-2019-14751_PoC diff --git a/cves/2019/CVE-2019-15053.md b/cves/2019/CVE-2019-15053.md index 32855f36cb6..043c0a52dd7 100644 --- a/cves/2019/CVE-2019-15053.md +++ b/cves/2019/CVE-2019-15053.md @@ -13,5 +13,5 @@ The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server a - https://github.com/l0nax/CVE-2019-15053 #### Github -No PoCs found on GitHub currently. +- https://github.com/l0nax/CVE-2019-15053 diff --git a/cves/2019/CVE-2019-15107.md b/cves/2019/CVE-2019-15107.md index 7b3dad830b5..cbc12373a0d 100644 --- a/cves/2019/CVE-2019-15107.md +++ b/cves/2019/CVE-2019-15107.md @@ -60,6 +60,9 @@ An issue was discovered in Webmin <=1.920. The parameter old in password_change. - https://github.com/squid22/Webmin_CVE-2019-15107 - https://github.com/wenruoya/CVE-2019-15107 - https://github.com/whokilleddb/CVE-2019-15107 +- https://github.com/adampawelczyk/cve-2019-15107 +- https://github.com/jini135wii/CVE-2019-15107 +- https://github.com/viglia/cve-2019-15107 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15107.yaml @@ -70,3 +73,6 @@ An issue was discovered in Webmin <=1.920. The parameter old in password_change. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_backdoor.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/webmin/CVE-2019-15107 diff --git a/cves/2019/CVE-2019-15120.md b/cves/2019/CVE-2019-15120.md index d66f8ede3fb..d2b73c993d7 100644 --- a/cves/2019/CVE-2019-15120.md +++ b/cves/2019/CVE-2019-15120.md @@ -13,5 +13,5 @@ The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode. - https://github.com/h3llraiser/CVE-2019-15120 #### Github -No PoCs found on GitHub currently. +- https://github.com/h3llraiser/CVE-2019-15120 diff --git a/cves/2019/CVE-2019-15233.md b/cves/2019/CVE-2019-15233.md index b691dc53fea..9c6fbf4a286 100644 --- a/cves/2019/CVE-2019-15233.md +++ b/cves/2019/CVE-2019-15233.md @@ -13,5 +13,5 @@ The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for - https://github.com/l0nax/CVE-2019-15233 #### Github -No PoCs found on GitHub currently. +- https://github.com/l0nax/CVE-2019-15233 diff --git a/cves/2019/CVE-2019-15715.md b/cves/2019/CVE-2019-15715.md index da22779baac..e8356d799a1 100644 --- a/cves/2019/CVE-2019-15715.md +++ b/cves/2019/CVE-2019-15715.md @@ -13,7 +13,7 @@ MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, - http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/mcornaglia/CVE-2019-15715 #### ExploitDB - https://www.exploit-db.com/exploits/48818 diff --git a/cves/2019/CVE-2019-15949.md b/cves/2019/CVE-2019-15949.md index 147928c8fef..1ae9a829065 100644 --- a/cves/2019/CVE-2019-15949.md +++ b/cves/2019/CVE-2019-15949.md @@ -16,7 +16,7 @@ Nagios XI before 5.6.6 allows remote command execution as root. The exploit requ - https://github.com/jakgibb/nagiosxi-root-rce-exploit #### Github -No PoCs found on GitHub currently. +- https://github.com/plur1bu5/Nagios-CVE-2019-15949-RCE #### ExploitDB - https://www.exploit-db.com/exploits/48191 diff --git a/cves/2019/CVE-2019-16098.md b/cves/2019/CVE-2019-16098.md index 25b1ec36cc9..1aa0454ecbf 100644 --- a/cves/2019/CVE-2019-16098.md +++ b/cves/2019/CVE-2019-16098.md @@ -16,4 +16,5 @@ The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCor - https://github.com/0xDivyanshu-new/CVE-2019-16098 - https://github.com/Offensive-Panda/NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE - https://github.com/Rydersel/PlaguewareCSGO_3.0 +- https://github.com/Barakat/CVE-2019-16098 diff --git a/cves/2019/CVE-2019-16278.md b/cves/2019/CVE-2019-16278.md index b681c897256..a828c806661 100644 --- a/cves/2019/CVE-2019-16278.md +++ b/cves/2019/CVE-2019-16278.md @@ -41,6 +41,7 @@ Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 - https://github.com/n3ov4n1sh/CVE-2019-16278 - https://github.com/n3rdh4x0r/CVE-2019-16278 - https://github.com/theRealFr13nd/CVE-2019-16278-Nostromo_1.9.6-RCE +- https://github.com/andknownmaly/CVE-2019-16278 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16278.yaml diff --git a/cves/2019/CVE-2019-1663.md b/cves/2019/CVE-2019-1663.md index 37e420d6027..006fdfa5a42 100644 --- a/cves/2019/CVE-2019-1663.md +++ b/cves/2019/CVE-2019-1663.md @@ -19,6 +19,7 @@ A vulnerability in the web-based management interface of the Cisco RV110W Wirele #### Github - https://github.com/StealYourCode/CVE-2019-1663 +- https://github.com/KylVGoi/cve-2019-1663 #### ExploitDB - https://www.exploit-db.com/exploits/47348 diff --git a/cves/2019/CVE-2019-16941.md b/cves/2019/CVE-2019-16941.md index ecf3e6270c9..947675f744a 100644 --- a/cves/2019/CVE-2019-16941.md +++ b/cves/2019/CVE-2019-16941.md @@ -13,5 +13,5 @@ NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary co - https://github.com/purpleracc00n/CVE-2019-16941 #### Github -No PoCs found on GitHub currently. +- https://github.com/purpleracc00n/CVE-2019-16941 diff --git a/cves/2019/CVE-2019-17124.md b/cves/2019/CVE-2019-17124.md index 9aced6ca071..7004c2b7c4f 100644 --- a/cves/2019/CVE-2019-17124.md +++ b/cves/2019/CVE-2019-17124.md @@ -14,7 +14,7 @@ Kramer VIAware 2.5.0719.1034 has Incorrect Access Control. - https://github.com/hessandrew/CVE-2019-17124 #### Github -No PoCs found on GitHub currently. +- https://github.com/hessandrew/CVE-2019-17124 #### ExploitDB - https://www.exploit-db.com/exploits/50848 diff --git a/cves/2019/CVE-2019-17147.md b/cves/2019/CVE-2019-17147.md index 1f7df942b86..1d1e5f49ade 100644 --- a/cves/2019/CVE-2019-17147.md +++ b/cves/2019/CVE-2019-17147.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/DrmnSamoLiu/CVE-2019-17147_Practice_Material +- https://github.com/imnot-ye/CVE-2019-17147 diff --git a/cves/2019/CVE-2019-17427.md b/cves/2019/CVE-2019-17427.md index 50b3ff58cb6..a62946d5a6c 100644 --- a/cves/2019/CVE-2019-17427.md +++ b/cves/2019/CVE-2019-17427.md @@ -13,5 +13,5 @@ In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to te - https://github.com/RealLinkers/CVE-2019-17427 #### Github -No PoCs found on GitHub currently. +- https://github.com/RealLinkers/CVE-2019-17427 diff --git a/cves/2019/CVE-2019-17558.md b/cves/2019/CVE-2019-17558.md index 52daf04211d..a1b3410cecf 100644 --- a/cves/2019/CVE-2019-17558.md +++ b/cves/2019/CVE-2019-17558.md @@ -17,6 +17,7 @@ Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution - https://github.com/Ma1Dong/Solr_CVE-2019-17558 - https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool - https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE +- https://github.com/rogerzeferino/cve-2019-17558-apache-solr-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17558.yaml @@ -27,3 +28,6 @@ Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solr_velocity_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2019-17558 diff --git a/cves/2019/CVE-2019-17564.md b/cves/2019/CVE-2019-17564.md index ea8d4f8a794..8484ab5f27f 100644 --- a/cves/2019/CVE-2019-17564.md +++ b/cves/2019/CVE-2019-17564.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17564.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dubbo/CVE-2019-17564 diff --git a/cves/2019/CVE-2019-17570.md b/cves/2019/CVE-2019-17570.md index a3c5f8b77cc..441682b4a94 100644 --- a/cves/2019/CVE-2019-17570.md +++ b/cves/2019/CVE-2019-17570.md @@ -16,4 +16,5 @@ An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcRes #### Github - https://github.com/r00t4dm/CVE-2019-17570 - https://github.com/slowmistio/xmlrpc-common-deserialization +- https://github.com/im23pds/xmlrpc-common-deserialization diff --git a/cves/2019/CVE-2019-18634.md b/cves/2019/CVE-2019-18634.md index 28e65a2adea..cf6f25aebfe 100644 --- a/cves/2019/CVE-2019-18634.md +++ b/cves/2019/CVE-2019-18634.md @@ -28,6 +28,8 @@ In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigg - https://github.com/paras1te-x/CVE-2019-18634 - https://github.com/ptef/CVE-2019-18634 - https://github.com/saleemrashid/sudo-cve-2019-18634 +- https://github.com/dukptkey/CVE-2019-18634 +- https://github.com/letsr00t/-CVE-2019-18634-sudo-pwfeedback #### ExploitDB - https://www.exploit-db.com/exploits/48052 diff --git a/cves/2019/CVE-2019-18885.md b/cves/2019/CVE-2019-18885.md index 23f7888f938..4e1b47f401b 100644 --- a/cves/2019/CVE-2019-18885.md +++ b/cves/2019/CVE-2019-18885.md @@ -14,5 +14,5 @@ fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_exte - https://github.com/bobfuzzer/CVE-2019-18885 #### Github -No PoCs found on GitHub currently. +- https://github.com/bobfuzzer/CVE-2019-18885 diff --git a/cves/2019/CVE-2019-18890.md b/cves/2019/CVE-2019-18890.md index 0917934d0c8..34228d32e04 100644 --- a/cves/2019/CVE-2019-18890.md +++ b/cves/2019/CVE-2019-18890.md @@ -13,5 +13,5 @@ A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 a - https://github.com/RealLinkers/CVE-2019-18890 #### Github -No PoCs found on GitHub currently. +- https://github.com/RealLinkers/CVE-2019-18890 diff --git a/cves/2019/CVE-2019-18935.md b/cves/2019/CVE-2019-18935.md index 64cbeb5ce34..77b3dbbb7e9 100644 --- a/cves/2019/CVE-2019-18935.md +++ b/cves/2019/CVE-2019-18935.md @@ -33,6 +33,9 @@ Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deseria - https://github.com/quyt0/CVE-2019-18935-exploit-study - https://github.com/random-robbie/CVE-2019-18935 - https://github.com/rishaldwivedi/Public_Disclosure +- https://github.com/alanbarret/CVE-2019-18935 +- https://github.com/menashe12346/CVE-2019-18935 +- https://github.com/noperator/CVE-2019-18935 #### ExploitDB - https://www.exploit-db.com/exploits/47793 diff --git a/cves/2019/CVE-2019-19194.md b/cves/2019/CVE-2019-19194.md index be6621da73a..f25307a8a3b 100644 --- a/cves/2019/CVE-2019-19194.md +++ b/cves/2019/CVE-2019-19194.md @@ -13,5 +13,5 @@ The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/louisabricot/writeup-cve-2019-19194 diff --git a/cves/2019/CVE-2019-19393.md b/cves/2019/CVE-2019-19393.md index 1eb9eb8f18e..f35485403f1 100644 --- a/cves/2019/CVE-2019-19393.md +++ b/cves/2019/CVE-2019-19393.md @@ -13,5 +13,5 @@ The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 - https://github.com/miguelhamal/CVE-2019-19393 #### Github -No PoCs found on GitHub currently. +- https://github.com/miguelhamal/CVE-2019-19393 diff --git a/cves/2019/CVE-2019-19576.md b/cves/2019/CVE-2019-19576.md index d1d5b32d030..cdbfb1a3b2a 100644 --- a/cves/2019/CVE-2019-19576.md +++ b/cves/2019/CVE-2019-19576.md @@ -15,7 +15,7 @@ class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as - https://medium.com/%40jra8908/cve-2019-19576-e9da712b779 #### Github -No PoCs found on GitHub currently. +- https://github.com/jra89/CVE-2019-19576 #### ExploitDB - https://www.exploit-db.com/exploits/47749 diff --git a/cves/2019/CVE-2019-19634.md b/cves/2019/CVE-2019-19634.md index cb5806f7bde..fe389db8abb 100644 --- a/cves/2019/CVE-2019-19634.md +++ b/cves/2019/CVE-2019-19634.md @@ -13,5 +13,5 @@ class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, - https://github.com/jra89/CVE-2019-19634 #### Github -No PoCs found on GitHub currently. +- https://github.com/jra89/CVE-2019-19634 diff --git a/cves/2019/CVE-2019-19699.md b/cves/2019/CVE-2019-19699.md index 0de69969e88..f1db8e9b426 100644 --- a/cves/2019/CVE-2019-19699.md +++ b/cves/2019/CVE-2019-19699.md @@ -13,7 +13,7 @@ There is Authenticated remote code execution in Centreon Infrastructure Monitori - https://github.com/SpengeSec/CVE-2019-19699 #### Github -No PoCs found on GitHub currently. +- https://github.com/SpengeSec/CVE-2019-19699 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/centreon_pollers_auth_rce.rb diff --git a/cves/2019/CVE-2019-20085.md b/cves/2019/CVE-2019-20085.md index 7ca10e4432e..84bceec5fd5 100644 --- a/cves/2019/CVE-2019-20085.md +++ b/cves/2019/CVE-2019-20085.md @@ -19,6 +19,7 @@ TVT NVMS-1000 devices allow GET /.. Directory Traversal - https://github.com/AleDiBen/NVMS1000-Exploit - https://github.com/AruN4Sa7/Manual-Exploitation-Development-For-TVT-NVMS-1000-suffers-from-a-directory-traversal-vulnerabilit - https://github.com/Z3R0-0x30/CVE-2019-20085 +- https://github.com/Z3R0space/CVE-2019-20085 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20085.yaml diff --git a/cves/2019/CVE-2019-20326.md b/cves/2019/CVE-2019-20326.md index 3d035f62bd8..38c9d87b6a6 100644 --- a/cves/2019/CVE-2019-20326.md +++ b/cves/2019/CVE-2019-20326.md @@ -13,5 +13,5 @@ A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in exten - https://github.com/Fysac/CVE-2019-20326 #### Github -No PoCs found on GitHub currently. +- https://github.com/Fysac/CVE-2019-20326 diff --git a/cves/2019/CVE-2019-20933.md b/cves/2019/CVE-2019-20933.md index 2bfaf8f4eba..1461c9db432 100644 --- a/cves/2019/CVE-2019-20933.md +++ b/cves/2019/CVE-2019-20933.md @@ -15,6 +15,10 @@ No PoCs from references. #### Github - https://github.com/Hydragyrum/CVE-2019-20933 - https://github.com/LorenzoTullini/InfluxDB-Exploit-CVE-2019-20933 +- https://github.com/Dungsocool/CVE-2019-20933 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20933.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/influxdb/CVE-2019-20933 diff --git a/cves/2019/CVE-2019-2215.md b/cves/2019/CVE-2019-2215.md index 7ecd5f5b31f..dc8b3e8f572 100644 --- a/cves/2019/CVE-2019-2215.md +++ b/cves/2019/CVE-2019-2215.md @@ -43,6 +43,13 @@ A use-after-free in binder.c allows an elevation of privilege from an applicatio - https://github.com/stevejubx/CVE-2019-2215 - https://github.com/timwr/CVE-2019-2215 - https://github.com/willboka/CVE-2019-2215-HuaweiP20Lite +- https://github.com/0xbinder/CVE_2019_2215 +- https://github.com/NESTle19/CVE-2019-2215 +- https://github.com/codecat007/CVE-2019-2215 +- https://github.com/flipphoneguy/root-sonim-xp3800 +- https://github.com/i-redbyte/android-badbinder-demo +- https://github.com/mythicaltree/CVE-2019-2215 +- https://github.com/wired0ut/CVE-2019-2215 #### ExploitDB - https://www.exploit-db.com/exploits/48129 diff --git a/cves/2019/CVE-2019-25065.md b/cves/2019/CVE-2019-25065.md index 98a81355498..0e8abd4b473 100644 --- a/cves/2019/CVE-2019-25065.md +++ b/cves/2019/CVE-2019-25065.md @@ -14,6 +14,7 @@ A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. #### Github - https://github.com/sagisar1/CVE-2019-25065-exploit +- https://github.com/tr3m0x/CVE-2019-25065-poc #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opennetadmin_ping_cmd_injection.rb diff --git a/cves/2019/CVE-2019-2618.md b/cves/2019/CVE-2019-2618.md index 6a71d132423..4fa00596256 100644 --- a/cves/2019/CVE-2019-2618.md +++ b/cves/2019/CVE-2019-2618.md @@ -20,4 +20,6 @@ No PoCs from references. - https://github.com/jas502n/cve-2019-2618 - https://github.com/pyn3rd/CVE-2019-2618 - https://github.com/wsfengfan/CVE-2019-2618- +- https://github.com/0xn0ne/weblogicScanner +- https://github.com/dr0op/WeblogicScan diff --git a/cves/2019/CVE-2019-2725.md b/cves/2019/CVE-2019-2725.md index 4fc058e9b9c..9a9c826446b 100644 --- a/cves/2019/CVE-2019-2725.md +++ b/cves/2019/CVE-2019-2725.md @@ -32,6 +32,7 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar - https://github.com/skytina/CNVD-C-2019-48814-COMMON - https://github.com/welove88888/CVE-2019-2725 - https://github.com/zhusx110/cve-2019-2725 +- https://github.com/loursha/Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2725.yaml diff --git a/cves/2019/CVE-2019-3396.md b/cves/2019/CVE-2019-3396.md index 40b784915b6..723fb995ae9 100644 --- a/cves/2019/CVE-2019-3396.md +++ b/cves/2019/CVE-2019-3396.md @@ -42,6 +42,7 @@ The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 - https://github.com/x-f1v3/CVE-2019-3396 - https://github.com/xiaoshuier/CVE-2019-3396 - https://github.com/yuehanked/cve-2019-3396 +- https://github.com/tranphuc2005/CVE-2019-3396 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3396.yaml @@ -53,3 +54,6 @@ The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/confluence_widget_connector.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2019-3396 diff --git a/cves/2019/CVE-2019-3980.md b/cves/2019/CVE-2019-3980.md index 72b9fe29ae0..505b1fa87bf 100644 --- a/cves/2019/CVE-2019-3980.md +++ b/cves/2019/CVE-2019-3980.md @@ -17,4 +17,5 @@ The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card - https://github.com/Barbarisch/CVE-2019-3980 - https://github.com/CyberQuestor-infosec/CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE - https://github.com/warferik/CVE-2019-3980 +- https://github.com/boydhacks/dameflare diff --git a/cves/2019/CVE-2019-5392.md b/cves/2019/CVE-2019-5392.md index b60212fb0e9..f36f10978ed 100644 --- a/cves/2019/CVE-2019-5392.md +++ b/cves/2019/CVE-2019-5392.md @@ -15,6 +15,7 @@ A disclosure of information vulnerability was identified in HPE Intelligent Mana #### Github - https://github.com/crazywifi/HPE-Intelligent-Management-Center-dbman-Command-10001-Information-Disclosure +- https://github.com/jozliner/CVE-2019-5392-for-Python3 #### ExploitDB - https://www.exploit-db.com/exploits/47408 diff --git a/cves/2019/CVE-2019-5418.md b/cves/2019/CVE-2019-5418.md index 9a67d5fbdd2..4ece1c7bef0 100644 --- a/cves/2019/CVE-2019-5418.md +++ b/cves/2019/CVE-2019-5418.md @@ -35,3 +35,6 @@ There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/rails_doubletap_file_read.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rails/CVE-2019-5418 diff --git a/cves/2019/CVE-2019-5591.md b/cves/2019/CVE-2019-5591.md index 2bee4780dec..a870039973f 100644 --- a/cves/2019/CVE-2019-5591.md +++ b/cves/2019/CVE-2019-5591.md @@ -14,7 +14,7 @@ A Default Configuration vulnerability in FortiOS may allow an unauthenticated at No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ayewo/fortios-ldap-mitm-poc-CVE-2019-5591 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5591.yaml diff --git a/cves/2019/CVE-2019-5736.md b/cves/2019/CVE-2019-5736.md index 6296a407a18..0e88f9cca6e 100644 --- a/cves/2019/CVE-2019-5736.md +++ b/cves/2019/CVE-2019-5736.md @@ -74,6 +74,10 @@ runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allow - https://github.com/vinci-3000/Cloud-Native-Security-Test - https://github.com/wenxi-3000/Cloud-Native-Security-Test - https://github.com/yyqs2008/CVE-2019-5736-PoC-2 +- https://github.com/Frichetten/CVE-2019-5736-PoC +- https://github.com/h-wookie/cve-2019-5736-poc +- https://github.com/q3k/cve-2019-5736-poc +- https://github.com/sastraadiwiguna-purpleeliteteaming/Holistic-Deconstruction-of-CVE-2019-5736- #### ExploitDB - https://www.exploit-db.com/exploits/46369 diff --git a/cves/2019/CVE-2019-5893.md b/cves/2019/CVE-2019-5893.md index 1b1ba1595b1..7dce561b047 100644 --- a/cves/2019/CVE-2019-5893.md +++ b/cves/2019/CVE-2019-5893.md @@ -14,7 +14,7 @@ Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.x - https://www.exploit-db.com/exploits/46118/ #### Github -No PoCs found on GitHub currently. +- https://github.com/EmreOvunc/OpenSource-ERP-SQL-Injection #### ExploitDB - https://www.exploit-db.com/exploits/46118 diff --git a/cves/2019/CVE-2019-6116.md b/cves/2019/CVE-2019-6116.md index 8ef66cb5536..34dd78234e8 100644 --- a/cves/2019/CVE-2019-6116.md +++ b/cves/2019/CVE-2019-6116.md @@ -19,3 +19,6 @@ No PoCs found on GitHub currently. #### ExploitDB - https://www.exploit-db.com/exploits/46242 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ghostscript/CVE-2019-6116 diff --git a/cves/2019/CVE-2019-6225.md b/cves/2019/CVE-2019-6225.md index a95b57bee03..d87d4b08231 100644 --- a/cves/2019/CVE-2019-6225.md +++ b/cves/2019/CVE-2019-6225.md @@ -21,6 +21,7 @@ A memory corruption issue was addressed with improved validation. This issue is - https://github.com/TrungNguyen1909/CVE-2019-6225-macOS - https://github.com/fatgrass/OsirisJailbreak12 - https://github.com/iFenixx/voucher_swap-Exploit-for-iOS-12.1.2 +- https://github.com/ox1111/jailbreak-iOS12 #### ExploitDB - https://www.exploit-db.com/exploits/46248 diff --git a/cves/2019/CVE-2019-6339.md b/cves/2019/CVE-2019-6339.md index 1eab3cd6709..e5c491637f9 100644 --- a/cves/2019/CVE-2019-6339.md +++ b/cves/2019/CVE-2019-6339.md @@ -17,3 +17,5 @@ No PoCs from references. #### Github - https://github.com/Vulnmachines/drupal-cve-2019-6339 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2019-6339 diff --git a/cves/2019/CVE-2019-6340.md b/cves/2019/CVE-2019-6340.md index 227f3e74875..9be94ab7798 100644 --- a/cves/2019/CVE-2019-6340.md +++ b/cves/2019/CVE-2019-6340.md @@ -31,6 +31,7 @@ Some field types do not properly sanitize data from non-form sources in Drupal 8 - https://github.com/oways/CVE-2019-6340 - https://github.com/reanzai/Reanzai-Penetration-Testing-tool - https://github.com/starling021/M3M0 +- https://github.com/joaoaugustom/Drupal_REST-RCE_Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6340.yaml diff --git a/cves/2019/CVE-2019-6341.md b/cves/2019/CVE-2019-6341.md index 87f8be0d677..938457a27a3 100644 --- a/cves/2019/CVE-2019-6341.md +++ b/cves/2019/CVE-2019-6341.md @@ -17,3 +17,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2019-6341 diff --git a/cves/2019/CVE-2019-6453.md b/cves/2019/CVE-2019-6453.md index 4cef991299e..357ad44950a 100644 --- a/cves/2019/CVE-2019-6453.md +++ b/cves/2019/CVE-2019-6453.md @@ -17,6 +17,7 @@ mIRC before 7.55 allows remote command execution by using argument injection thr #### Github - https://github.com/andripwn/mIRC-CVE-2019-6453 +- https://github.com/proofofcalc/cve-2019-6453-poc #### ExploitDB - https://www.exploit-db.com/exploits/46392 diff --git a/cves/2019/CVE-2019-7216.md b/cves/2019/CVE-2019-7216.md index a683678a445..a8f727773bb 100644 --- a/cves/2019/CVE-2019-7216.md +++ b/cves/2019/CVE-2019-7216.md @@ -13,5 +13,5 @@ An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a fil - https://github.com/ekultek/cve-2019-7216 #### Github -No PoCs found on GitHub currently. +- https://github.com/Ekultek/CVE-2019-7216 diff --git a/cves/2019/CVE-2019-7238.md b/cves/2019/CVE-2019-7238.md index dc9c1970326..d128172ce44 100644 --- a/cves/2019/CVE-2019-7238.md +++ b/cves/2019/CVE-2019-7238.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7238.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2019-7238 diff --git a/cves/2019/CVE-2019-7482.md b/cves/2019/CVE-2019-7482.md index 75669d55db9..448680ea241 100644 --- a/cves/2019/CVE-2019-7482.md +++ b/cves/2019/CVE-2019-7482.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/w0lfzhang/sonicwall-cve-2019-7482 +- https://github.com/b4bay/CVE-2019-7482 diff --git a/cves/2019/CVE-2019-7609.md b/cves/2019/CVE-2019-7609.md index 889bf4da87b..4d33c7dcadb 100644 --- a/cves/2019/CVE-2019-7609.md +++ b/cves/2019/CVE-2019-7609.md @@ -25,9 +25,13 @@ Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw - https://github.com/mpgn/CVE-2019-7609 - https://github.com/rhbb/CVE-2019-7609 - https://github.com/wolf1892/CVE-2019-7609 +- https://github.com/toxxxaka/CVE-2019-7609 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7609.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kibana_timelion_prototype_pollution_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kibana/CVE-2019-7609 diff --git a/cves/2019/CVE-2019-7711.md b/cves/2019/CVE-2019-7711.md index 440f8850a31..a2bae25712d 100644 --- a/cves/2019/CVE-2019-7711.md +++ b/cves/2019/CVE-2019-7711.md @@ -13,5 +13,6 @@ An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/kaleth4/CVE-2019-7711 +- https://github.com/mbanyamer/RTOS-F-16-Exploit---CVE-2019-7711 diff --git a/cves/2019/CVE-2019-8451.md b/cves/2019/CVE-2019-8451.md index c758b4fd037..8cccf3638ce 100644 --- a/cves/2019/CVE-2019-8451.md +++ b/cves/2019/CVE-2019-8451.md @@ -17,6 +17,7 @@ No PoCs from references. - https://github.com/h0ffayyy/Jira-CVE-2019-8451 - https://github.com/ianxtianxt/CVE-2019-8451 - https://github.com/jas502n/CVE-2019-8451 +- https://github.com/iuds/CVE-2019-8451 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml diff --git a/cves/2019/CVE-2019-8942.md b/cves/2019/CVE-2019-8942.md index 32f00677d39..e94f6175786 100644 --- a/cves/2019/CVE-2019-8942.md +++ b/cves/2019/CVE-2019-8942.md @@ -22,6 +22,7 @@ WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because - https://github.com/synacktiv/CVE-2019-8942 - https://github.com/tuannq2299/CVE-2019-8942 - https://github.com/v0lck3r/CVE-2019-8943 +- https://github.com/SpeatX/WordPress-RCE-CVE-2019-8942 #### ExploitDB - https://www.exploit-db.com/exploits/46662 diff --git a/cves/2019/CVE-2019-9053.md b/cves/2019/CVE-2019-9053.md index de591cf025e..5f74c29774d 100644 --- a/cves/2019/CVE-2019-9053.md +++ b/cves/2019/CVE-2019-9053.md @@ -54,6 +54,19 @@ An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News m - https://github.com/so1icitx/CVE-2019-9053 - https://github.com/xtafnull/CMS-made-simple-sqli-python3 - https://github.com/zmiddle/Simple_CMS_SQLi +- https://github.com/Boon-Rekcah/CMS-Made-Simple-2.2.9-CVE-2019-9053 +- https://github.com/CaelumIsMe/CVE-2019-9053-POC +- https://github.com/Jeanback1/CVE-2019-9053-exploit +- https://github.com/Perseus99999/CVE-2019-9053-working- +- https://github.com/Vedantrana73/cve-2019-9053-py3 +- https://github.com/killukeren/-CVE-2019-9053 +- https://github.com/pasan2002/CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified- +- https://github.com/quliyevresul7777/CVE-2019-9053 +- https://github.com/rideckszz/poc-CVE-2019-9053 +- https://github.com/v4rr10r/CVE-2019-9053 #### ExploitDB - https://www.exploit-db.com/exploits/46635 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cmsms/CVE-2019-9053 diff --git a/cves/2019/CVE-2019-9193.md b/cves/2019/CVE-2019-9193.md index 74aa1ff5286..43f58224b26 100644 --- a/cves/2019/CVE-2019-9193.md +++ b/cves/2019/CVE-2019-9193.md @@ -22,6 +22,7 @@ In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows super - https://github.com/geniuszlyy/CVE-2019-9193 - https://github.com/jhnhnck/CVE-2019-9193 - https://github.com/paulotrindadec/CVE-2019-9193 +- https://github.com/CybersRMUTL/CVE-2019-9193-Postgresql-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-9193.yaml @@ -31,3 +32,6 @@ In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows super #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/postgres/CVE-2019-9193 diff --git a/cves/2019/CVE-2019-9194.md b/cves/2019/CVE-2019-9194.md index 79bc4e7120a..942b7938eb4 100644 --- a/cves/2019/CVE-2019-9194.md +++ b/cves/2019/CVE-2019-9194.md @@ -16,6 +16,7 @@ elFinder before 2.1.48 has a command injection vulnerability in the PHP connecto #### Github - https://github.com/cved-sources/cve-2019-9194 - https://github.com/hadrian3689/elFinder_2.1.47_php_connector_rce +- https://github.com/estebanzarate/CVE-2019-9194-elFinder-Command-Injection-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9194.yaml diff --git a/cves/2019/CVE-2019-9511.md b/cves/2019/CVE-2019-9511.md index a663deb814b..4aafcf23510 100644 --- a/cves/2019/CVE-2019-9511.md +++ b/cves/2019/CVE-2019-9511.md @@ -13,5 +13,5 @@ Some HTTP/2 implementations are vulnerable to window size manipulation and strea No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/harley-ghostie/CVE-2019-9511_Priority-Churn-Data-Dribble diff --git a/cves/2019/CVE-2019-9624.md b/cves/2019/CVE-2019-9624.md index d8bb440be58..d28eeac4db4 100644 --- a/cves/2019/CVE-2019-9624.md +++ b/cves/2019/CVE-2019-9624.md @@ -14,7 +14,7 @@ Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the - https://www.exploit-db.com/exploits/46201 #### Github -No PoCs found on GitHub currently. +- https://github.com/x0rbeexd/CVE-2019-9624 #### ExploitDB - https://www.exploit-db.com/exploits/46201 diff --git a/cves/2019/CVE-2019-9978.md b/cves/2019/CVE-2019-9978.md index a7cc301ff86..c73f3061cf3 100644 --- a/cves/2019/CVE-2019-9978.md +++ b/cves/2019/CVE-2019-9978.md @@ -32,6 +32,8 @@ The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-a - https://github.com/h8handles/CVE-2019-9978-Python3 - https://github.com/hash3liZer/CVE-2019-9978 - https://github.com/mpgn/CVE-2019-9978 +- https://github.com/Vaidehim55/CVE-2019-9978-RCE-PoC +- https://github.com/yup-Ivan/CVE-2019-9978 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9978.yaml diff --git a/cves/2020/CVE-2020-0022.md b/cves/2020/CVE-2020-0022.md index 22a9746283c..b0ebeb172ea 100644 --- a/cves/2020/CVE-2020-0022.md +++ b/cves/2020/CVE-2020-0022.md @@ -26,4 +26,5 @@ In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bou - https://github.com/leommxj/cve-2020-0022 - https://github.com/lsw29475/CVE-2020-0022 - https://github.com/themmokhtar/CVE-2020-0022 +- https://github.com/kalibb/CVE-2020-0022 diff --git a/cves/2020/CVE-2020-0096.md b/cves/2020/CVE-2020-0096.md index 842558303ef..6d9e7d6982c 100644 --- a/cves/2020/CVE-2020-0096.md +++ b/cves/2020/CVE-2020-0096.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/nahid0x1/CVE-2020-0096-strandhogg-exploit-p0c - https://github.com/nishan0x1/CVE-2020-0096-strandhogg-exploit-p0c - https://github.com/tea9/CVE-2020-0096-StrandHogg2 +- https://github.com/hackerronin/CVE-2020-0096-strandhogg-exploit-p0c diff --git a/cves/2020/CVE-2020-0423.md b/cves/2020/CVE-2020-0423.md index 0b9c36418f9..3656c4fb357 100644 --- a/cves/2020/CVE-2020-0423.md +++ b/cves/2020/CVE-2020-0423.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Stoobyy/Kyocera-A101BM-Exploitation - https://github.com/sparrow-labz/CVE-2020-0423 +- https://github.com/wired0ut/CVE-2020-0423 diff --git a/cves/2020/CVE-2020-0601.md b/cves/2020/CVE-2020-0601.md index 9c9ad9e7880..389c8781888 100644 --- a/cves/2020/CVE-2020-0601.md +++ b/cves/2020/CVE-2020-0601.md @@ -74,6 +74,7 @@ A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) valid - https://github.com/yanghaoi/CVE-2020-0601 - https://github.com/yshneyderman/CS590J-Capstone - https://github.com/ztora/msvuln +- https://github.com/CrackerCat/CurveballCertTool #### ExploitDB - https://www.exploit-db.com/exploits/47933 diff --git a/cves/2020/CVE-2020-0796.md b/cves/2020/CVE-2020-0796.md index d919b7ac456..0076541327b 100644 --- a/cves/2020/CVE-2020-0796.md +++ b/cves/2020/CVE-2020-0796.md @@ -113,6 +113,7 @@ A remote code execution vulnerability exists in the way that the Microsoft Serve - https://github.com/ysyyrps123/CVE-2020-0796-exp - https://github.com/zathizh/cve-796-mit - https://github.com/zerodayblitz/NetSuite-network-exploitation-tool +- https://github.com/thai1012/cve-2020-0796 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-0796.yaml diff --git a/cves/2020/CVE-2020-10148.md b/cves/2020/CVE-2020-10148.md index 37d2b7267c3..6c78aa8fb8b 100644 --- a/cves/2020/CVE-2020-10148.md +++ b/cves/2020/CVE-2020-10148.md @@ -21,6 +21,7 @@ No PoCs from references. #### Github - https://github.com/B1anda0/CVE-2020-10148 - https://github.com/rdoix/CVE-2020-10148-Solarwinds-Orion +- https://github.com/horrister/solarwinds-sunburst-cve-2020-10148 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10148.yaml diff --git a/cves/2020/CVE-2020-10199.md b/cves/2020/CVE-2020-10199.md index 0184ef28cff..7a258fb57c4 100644 --- a/cves/2020/CVE-2020-10199.md +++ b/cves/2020/CVE-2020-10199.md @@ -33,3 +33,6 @@ Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nexus_repo_manager_el_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2020-10199 diff --git a/cves/2020/CVE-2020-10204.md b/cves/2020/CVE-2020-10204.md index 9062dd94b52..5a90ae85d9b 100644 --- a/cves/2020/CVE-2020-10204.md +++ b/cves/2020/CVE-2020-10204.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10204.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2020-10204 diff --git a/cves/2020/CVE-2020-10567.md b/cves/2020/CVE-2020-10567.md index d67033d5d6f..f6d34623bca 100644 --- a/cves/2020/CVE-2020-10567.md +++ b/cves/2020/CVE-2020-10567.md @@ -14,5 +14,5 @@ An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_ca - https://github.com/trippo/ResponsiveFilemanager/issues/600 #### Github -No PoCs found on GitHub currently. +- https://github.com/PierreAdams/CVE-2020-10567 diff --git a/cves/2020/CVE-2020-10665.md b/cves/2020/CVE-2020-10665.md index 96eefe08b77..dc6d7aabbdf 100644 --- a/cves/2020/CVE-2020-10665.md +++ b/cves/2020/CVE-2020-10665.md @@ -14,5 +14,5 @@ Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because - https://github.com/spaceraccoon/CVE-2020-10665 #### Github -No PoCs found on GitHub currently. +- https://github.com/spaceraccoon/CVE-2020-10665 diff --git a/cves/2020/CVE-2020-11022.md b/cves/2020/CVE-2020-11022.md index a8366019260..cf1c85477bc 100644 --- a/cves/2020/CVE-2020-11022.md +++ b/cves/2020/CVE-2020-11022.md @@ -23,6 +23,7 @@ In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML f - https://github.com/LSP1025923/CVE - https://github.com/Snorlyd/https-nj.gov---CVE-2020-11022 - https://github.com/ossf-cve-benchmark/CVE-2020-11022 +- https://github.com/ibnurusdianto/CVE-2020-11022 #### ExploitDB - https://www.exploit-db.com/exploits/49766 diff --git a/cves/2020/CVE-2020-11107.md b/cves/2020/CVE-2020-11107.md index bb2583423ca..de02e19399f 100644 --- a/cves/2020/CVE-2020-11107.md +++ b/cves/2020/CVE-2020-11107.md @@ -15,6 +15,7 @@ An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x #### Github - https://github.com/S1lkys/CVE-2020-11107 - https://github.com/andripwn/CVE-2020-11107 +- https://github.com/Mohnad-AL-saif/Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation #### ExploitDB - https://www.exploit-db.com/exploits/50337 diff --git a/cves/2020/CVE-2020-11108.md b/cves/2020/CVE-2020-11108.md index 9cdb3f86fa7..4ba8807b457 100644 --- a/cves/2020/CVE-2020-11108.md +++ b/cves/2020/CVE-2020-11108.md @@ -18,7 +18,7 @@ The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to - https://github.com/Frichetten/CVE-2020-11108-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/Frichetten/CVE-2020-11108-PoC #### ExploitDB - https://www.exploit-db.com/exploits/48519 diff --git a/cves/2020/CVE-2020-11539.md b/cves/2020/CVE-2020-11539.md index fdd0bfe4940..86fb881770c 100644 --- a/cves/2020/CVE-2020-11539.md +++ b/cves/2020/CVE-2020-11539.md @@ -14,5 +14,5 @@ An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been i - https://medium.com/@sayliambure/hacking-a-5-smartband-824763ab6e8f #### Github -No PoCs found on GitHub currently. +- https://github.com/the-girl-who-lived/CVE-2020-11539 diff --git a/cves/2020/CVE-2020-11651.md b/cves/2020/CVE-2020-11651.md index 6b413ab9816..7c45da1f544 100644 --- a/cves/2020/CVE-2020-11651.md +++ b/cves/2020/CVE-2020-11651.md @@ -29,9 +29,13 @@ An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2 - https://github.com/merlinxcy/ToolBox - https://github.com/ssrsec/CVE-2020-11651-CVE-2020-11652-EXP - https://github.com/zhangchi991022/Comprehensive-experiment-of-infomation-security +- https://github.com/s1lentf00thold/CVE-2020-11651-Poc #### ExploitDB - https://www.exploit-db.com/exploits/48421 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/saltstack_salt_unauth_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-11651 diff --git a/cves/2020/CVE-2020-11652.md b/cves/2020/CVE-2020-11652.md index fbf50e4897d..90baf23f8c3 100644 --- a/cves/2020/CVE-2020-11652.md +++ b/cves/2020/CVE-2020-11652.md @@ -31,3 +31,6 @@ An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/saltstack_salt_unauth_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-11652 diff --git a/cves/2020/CVE-2020-11800.md b/cves/2020/CVE-2020-11800.md index dde72ab4ba8..58f1179c244 100644 --- a/cves/2020/CVE-2020-11800.md +++ b/cves/2020/CVE-2020-11800.md @@ -13,5 +13,7 @@ Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ycseo-git/CVE-2020-11800 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/zabbix/CVE-2020-11800 diff --git a/cves/2020/CVE-2020-11978.md b/cves/2020/CVE-2020-11978.md index 67c67f57472..254e42331fc 100644 --- a/cves/2020/CVE-2020-11978.md +++ b/cves/2020/CVE-2020-11978.md @@ -26,3 +26,6 @@ An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/c #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_airflow_dag_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/airflow/CVE-2020-11978 diff --git a/cves/2020/CVE-2020-11981.md b/cves/2020/CVE-2020-11981.md index bbc759d3a01..ebc7725f29c 100644 --- a/cves/2020/CVE-2020-11981.md +++ b/cves/2020/CVE-2020-11981.md @@ -14,6 +14,10 @@ No PoCs from references. #### Github - https://github.com/navyaks55/Vulnerability_Exploitation +- https://github.com/Evillm/CVE-2020-11981-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-11981.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/airflow/CVE-2020-11981 diff --git a/cves/2020/CVE-2020-12432.md b/cves/2020/CVE-2020-12432.md index dd6ad1f54c1..83dca6f2c2d 100644 --- a/cves/2020/CVE-2020-12432.md +++ b/cves/2020/CVE-2020-12432.md @@ -14,5 +14,5 @@ The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not prope - https://www.youtube.com/watch?v=_tkRnSr6yc0 #### Github -No PoCs found on GitHub currently. +- https://github.com/d7x/CVE-2020-12432 diff --git a/cves/2020/CVE-2020-12446.md b/cves/2020/CVE-2020-12446.md index aa7ba3d1afd..0ddbd701078 100644 --- a/cves/2020/CVE-2020-12446.md +++ b/cves/2020/CVE-2020-12446.md @@ -14,4 +14,7 @@ The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes #### Github - https://github.com/Xacone/Eneio64-Driver-Exploit +- https://github.com/S1lkys/Eneio64-LPE +- https://github.com/enessakircolak/CVE-2020-12446 +- https://github.com/enessakircolak/Windows-11-24h2-Kernel-Exploit diff --git a/cves/2020/CVE-2020-12712.md b/cves/2020/CVE-2020-12712.md index 77994376c13..76f64f3c286 100644 --- a/cves/2020/CVE-2020-12712.md +++ b/cves/2020/CVE-2020-12712.md @@ -14,6 +14,7 @@ A vulnerability based on insecure user/password encryption in the JOE (job edito #### Github - https://github.com/SanderUbink/CVE-2020-12712 +- https://github.com/0xVEDETTE/CVE-2020-12712 #### ExploitDB - https://www.exploit-db.com/exploits/48587 diff --git a/cves/2020/CVE-2020-12928.md b/cves/2020/CVE-2020-12928.md index 74a606dae9b..fde413fa0e2 100644 --- a/cves/2020/CVE-2020-12928.md +++ b/cves/2020/CVE-2020-12928.md @@ -14,4 +14,5 @@ A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may a #### Github - https://github.com/tijme/amd-ryzen-master-driver-v17-exploit +- https://github.com/ch4rli3kop/CVE-2020-12928 diff --git a/cves/2020/CVE-2020-1350.md b/cves/2020/CVE-2020-1350.md index 0b5e70778fb..e949c4e0a8c 100644 --- a/cves/2020/CVE-2020-1350.md +++ b/cves/2020/CVE-2020-1350.md @@ -48,4 +48,5 @@ A remote code execution vulnerability exists in Windows Domain Name System serve - https://github.com/mr-r3b00t/CVE-2020-1350 - https://github.com/tinkersec/cve-2020-1350 - https://github.com/zoomerxsec/Fake_CVE-2020-1350 +- https://github.com/sty886/CVE-2020-1350-SigRed diff --git a/cves/2020/CVE-2020-13654.md b/cves/2020/CVE-2020-13654.md index 8cd8e6b84fb..c5f01ac1731 100644 --- a/cves/2020/CVE-2020-13654.md +++ b/cves/2020/CVE-2020-13654.md @@ -14,5 +14,5 @@ XWiki Platform before 12.8 mishandles escaping in the property displayer. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Astaruf/CVE-2020-13654 diff --git a/cves/2020/CVE-2020-13671.md b/cves/2020/CVE-2020-13671.md index 5a8861990cc..9873b16ef18 100644 --- a/cves/2020/CVE-2020-13671.md +++ b/cves/2020/CVE-2020-13671.md @@ -17,5 +17,6 @@ Drupal core does not properly sanitize certain filenames on uploaded files, whic No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Dungsocool/CVE-2020-13671 +- https://github.com/Dungsocool/CVE-2020-13671-old diff --git a/cves/2020/CVE-2020-13942.md b/cves/2020/CVE-2020-13942.md index dee8655f21e..ca30908df44 100644 --- a/cves/2020/CVE-2020-13942.md +++ b/cves/2020/CVE-2020-13942.md @@ -26,3 +26,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13942.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/unomi/CVE-2020-13942 diff --git a/cves/2020/CVE-2020-13945.md b/cves/2020/CVE-2020-13945.md index c80d76ed39c..73fbd37533a 100644 --- a/cves/2020/CVE-2020-13945.md +++ b/cves/2020/CVE-2020-13945.md @@ -24,3 +24,6 @@ In Apache APISIX, the user enabled the Admin API and deleted the Admin API acces #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_default_token_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apisix/CVE-2020-13945 diff --git a/cves/2020/CVE-2020-14008.md b/cves/2020/CVE-2020-14008.md index 875fe84c6f7..0d3029a9486 100644 --- a/cves/2020/CVE-2020-14008.md +++ b/cves/2020/CVE-2020-14008.md @@ -15,6 +15,7 @@ Zoho ManageEngine Applications Manager 14710 and before allows an authenticated #### Github - https://github.com/JackHars/cve-2020-14008 +- https://github.com/0x0d3ad/CVE-2020-14008 #### ExploitDB - https://www.exploit-db.com/exploits/48793 diff --git a/cves/2020/CVE-2020-14144.md b/cves/2020/CVE-2020-14144.md index bb4de18315a..0ab566675e1 100644 --- a/cves/2020/CVE-2020-14144.md +++ b/cves/2020/CVE-2020-14144.md @@ -15,6 +15,7 @@ The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated #### Github - https://github.com/p0dalirius/CVE-2020-14144-GiTea-git-hooks-rce +- https://github.com/Mohnad-AL-saif/Gitea-Git-Hooks-RCE-CVE-2020-14144- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14144.yaml diff --git a/cves/2020/CVE-2020-14343.md b/cves/2020/CVE-2020-14343.md index b9df6ab9848..b015ab25025 100644 --- a/cves/2020/CVE-2020-14343.md +++ b/cves/2020/CVE-2020-14343.md @@ -14,4 +14,7 @@ A vulnerability was discovered in the PyYAML library in versions before 5.4, whe #### Github - https://github.com/j4k0m/loader-CVE-2020-14343 +- https://github.com/Kairo-one/CVE-2020-14343-PyYAML +- https://github.com/seal-sec-demo-2/Python-Example +- https://github.com/sijie52/yasa-cve-2020-14343 diff --git a/cves/2020/CVE-2020-1472.md b/cves/2020/CVE-2020-1472.md index a2e942f250e..cac8ebe35cb 100644 --- a/cves/2020/CVE-2020-1472.md +++ b/cves/2020/CVE-2020-1472.md @@ -102,6 +102,11 @@ An elevation of privilege vulnerability exists when an attacker establishes a vu - https://github.com/whoami-chmod777/Zerologon-Attack-CVE-2020-1472-POC - https://github.com/wrathfulDiety/zerologon - https://github.com/zahidmm/CVE-Web-Scraper +- https://github.com/FaFcFF41/CVE-2020-1472 +- https://github.com/bvcyber/CVE-2020-1472 +- https://github.com/ckq7703/CVE-2020-1472 +- https://github.com/mods20hh/ZeroLogon-PoC-DC-Pwn +- https://github.com/nyambiblaise/Domain-Controller-DC-Exploitation-with-Metasploit-Impacket #### ExploitDB - https://www.exploit-db.com/exploits/49071 diff --git a/cves/2020/CVE-2020-14882.md b/cves/2020/CVE-2020-14882.md index 750065bc760..6e97bd957e0 100644 --- a/cves/2020/CVE-2020-14882.md +++ b/cves/2020/CVE-2020-14882.md @@ -56,6 +56,8 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware - https://github.com/xMr110/CVE-2020-14882 - https://github.com/xfiftyone/CVE-2020-14882 - https://github.com/zesnd/CVE-2020-14882-POC +- https://github.com/b1g-b33f/CVE-2020-14882 +- https://github.com/hyderpwn/weblogic #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14882.yaml @@ -65,3 +67,6 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/weblogic_admin_handle_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2020-14882 diff --git a/cves/2020/CVE-2020-14883.md b/cves/2020/CVE-2020-14883.md index 54c0988c0ca..6b9918369a4 100644 --- a/cves/2020/CVE-2020-14883.md +++ b/cves/2020/CVE-2020-14883.md @@ -22,6 +22,7 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware - https://github.com/amacloudobia/CVE-2020-14883 - https://github.com/fan1029/CVE-2020-14883EXP - https://github.com/murataydemir/CVE-2020-14883 +- https://github.com/1n7erface/PocList #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14883.yaml diff --git a/cves/2020/CVE-2020-15367.md b/cves/2020/CVE-2020-15367.md index 7220ce7ad18..091bfa676d6 100644 --- a/cves/2020/CVE-2020-15367.md +++ b/cves/2020/CVE-2020-15367.md @@ -13,5 +13,5 @@ Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts - https://github.com/inflixim4be/CVE-2020-15367 #### Github -No PoCs found on GitHub currently. +- https://github.com/inflixim4be/CVE-2020-15367 diff --git a/cves/2020/CVE-2020-15906.md b/cves/2020/CVE-2020-15906.md index 9202a4ed4f5..8cdb474f488 100644 --- a/cves/2020/CVE-2020-15906.md +++ b/cves/2020/CVE-2020-15906.md @@ -17,3 +17,6 @@ tiki-login.php in Tiki before 21.2 sets the admin password to a blank value afte #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15906.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tikiwiki/CVE-2020-15906 diff --git a/cves/2020/CVE-2020-15956.md b/cves/2020/CVE-2020-15956.md index 925c5f1c43c..0eaa741db07 100644 --- a/cves/2020/CVE-2020-15956.md +++ b/cves/2020/CVE-2020-15956.md @@ -14,7 +14,7 @@ ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unaut - https://github.com/megamagnus/cve-2020-15956 #### Github -No PoCs found on GitHub currently. +- https://github.com/megamagnus/cve-2020-15956 #### ExploitDB - https://www.exploit-db.com/exploits/48731 diff --git a/cves/2020/CVE-2020-16012.md b/cves/2020/CVE-2020-16012.md index 52bbe34cf5d..3adbf95c1a6 100644 --- a/cves/2020/CVE-2020-16012.md +++ b/cves/2020/CVE-2020-16012.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/aleksejspopovs/cve-2020-16012 - https://github.com/helidem/CVE-2020-16012-PoC +- https://github.com/leopoldabgn/CVE-2020-16012-PoC diff --git a/cves/2020/CVE-2020-16270.md b/cves/2020/CVE-2020-16270.md index 5164c0ac783..34e43e2c7ad 100644 --- a/cves/2020/CVE-2020-16270.md +++ b/cves/2020/CVE-2020-16270.md @@ -13,7 +13,7 @@ OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can us - https://github.com/Security-AVS/CVE-2020-16270 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2020-16270 #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/cve-2020-16270-4637.yaml diff --git a/cves/2020/CVE-2020-16846.md b/cves/2020/CVE-2020-16846.md index 97fea33be62..37e9058182f 100644 --- a/cves/2020/CVE-2020-16846.md +++ b/cves/2020/CVE-2020-16846.md @@ -22,3 +22,6 @@ An issue was discovered in SaltStack Salt through 3002. Sending crafted web requ #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/saltstack_salt_api_cmd_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-16846 diff --git a/cves/2020/CVE-2020-17103.md b/cves/2020/CVE-2020-17103.md index c8cc4c81a94..d1e7dca5ebf 100644 --- a/cves/2020/CVE-2020-17103.md +++ b/cves/2020/CVE-2020-17103.md @@ -27,5 +27,6 @@ Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0xBlackash/CVE-2020-17103 +- https://github.com/AlexLinov/MiniPlasma-Runner diff --git a/cves/2020/CVE-2020-17382.md b/cves/2020/CVE-2020-17382.md index 47d254ebc62..5777b00e13e 100644 --- a/cves/2020/CVE-2020-17382.md +++ b/cves/2020/CVE-2020-17382.md @@ -17,6 +17,7 @@ The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x8 - https://github.com/houseofint3/CVE-2020-17382 - https://github.com/houseofxyz/CVE-2020-17382 - https://github.com/uf0o/CVE-2020-17382 +- https://github.com/typeconfused/CVE-2020-17382 #### ExploitDB - https://www.exploit-db.com/exploits/48836 diff --git a/cves/2020/CVE-2020-17518.md b/cves/2020/CVE-2020-17518.md index 6674a94f4c5..21579edf9d6 100644 --- a/cves/2020/CVE-2020-17518.md +++ b/cves/2020/CVE-2020-17518.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17518.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/flink/CVE-2020-17518 diff --git a/cves/2020/CVE-2020-17519.md b/cves/2020/CVE-2020-17519.md index 88b526d7b8f..2700d266255 100644 --- a/cves/2020/CVE-2020-17519.md +++ b/cves/2020/CVE-2020-17519.md @@ -36,3 +36,6 @@ A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apache_flink_jobmanager_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/flink/CVE-2020-17519 diff --git a/cves/2020/CVE-2020-17526.md b/cves/2020/CVE-2020-17526.md index b1e46059aad..2dc2b820197 100644 --- a/cves/2020/CVE-2020-17526.md +++ b/cves/2020/CVE-2020-17526.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17526.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/airflow/CVE-2020-17526 diff --git a/cves/2020/CVE-2020-18324.md b/cves/2020/CVE-2020-18324.md index 719177726fe..18d5eddc1c1 100644 --- a/cves/2020/CVE-2020-18324.md +++ b/cves/2020/CVE-2020-18324.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q p - https://github.com/hamm0nz/CVE-2020-18324 #### Github -No PoCs found on GitHub currently. +- https://github.com/hamm0nz/CVE-2020-18324 diff --git a/cves/2020/CVE-2020-18325.md b/cves/2020/CVE-2020-18325.md index c7721d173f7..7a2a769b541 100644 --- a/cves/2020/CVE-2020-18325.md +++ b/cves/2020/CVE-2020-18325.md @@ -13,5 +13,5 @@ Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion - https://github.com/hamm0nz/CVE-2020-18325 #### Github -No PoCs found on GitHub currently. +- https://github.com/hamm0nz/CVE-2020-18325 diff --git a/cves/2020/CVE-2020-18326.md b/cves/2020/CVE-2020-18326.md index b4f305af632..2e8f1d1e5f3 100644 --- a/cves/2020/CVE-2020-18326.md +++ b/cves/2020/CVE-2020-18326.md @@ -13,5 +13,5 @@ Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CM - https://github.com/hamm0nz/CVE-2020-18326 #### Github -No PoCs found on GitHub currently. +- https://github.com/hamm0nz/CVE-2020-18326 diff --git a/cves/2020/CVE-2020-1938.md b/cves/2020/CVE-2020-1938.md index 35ea10effc1..5320a94dfdd 100644 --- a/cves/2020/CVE-2020-1938.md +++ b/cves/2020/CVE-2020-1938.md @@ -50,6 +50,11 @@ No PoCs from references. - https://github.com/woaiqiukui/CVE-2020-1938TomcatAjpScanner - https://github.com/wukong-bin/PeiQi-LandGrey-ClassHound - https://github.com/xindongzhuaizhuai/CVE-2020-1938 +- https://github.com/RedTeam-Rediron/CVE-2020-1938 +- https://github.com/With-fate/CVE-2020-1938 +- https://github.com/abrewer251/CVE-2020-1938_Ghostcat-PoC +- https://github.com/cyberguardsec101-sketch/ghostcat +- https://github.com/si1ence90/Ghostcat-Tomcat-AJP-Exploit-Py3 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-1938.yaml @@ -60,3 +65,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/tomcat_ghostcat.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2020-1938 diff --git a/cves/2020/CVE-2020-1948.md b/cves/2020/CVE-2020-1948.md index f4c8e247706..d1a86ff6458 100644 --- a/cves/2020/CVE-2020-1948.md +++ b/cves/2020/CVE-2020-1948.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/M3g4Byt3/cve-2020-1948-poc - https://github.com/ctlyz123/CVE-2020-1948 - https://github.com/txrw/Dubbo-CVE-2020-1948 +- https://github.com/0xl0ki/Dubbo-deserialization diff --git a/cves/2020/CVE-2020-1957.md b/cves/2020/CVE-2020-1957.md index b8c327aef71..04e858ef2b7 100644 --- a/cves/2020/CVE-2020-1957.md +++ b/cves/2020/CVE-2020-1957.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder3/CVE-2020-1957.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2020-1957 diff --git a/cves/2020/CVE-2020-1971.md b/cves/2020/CVE-2020-1971.md index c07dfa05735..2977bc6711b 100644 --- a/cves/2020/CVE-2020-1971.md +++ b/cves/2020/CVE-2020-1971.md @@ -18,4 +18,5 @@ The X.509 GeneralName type is a generic type for representing different types of #### Github - https://github.com/MBHudson/CVE-2020-1971 +- https://github.com/honeyvig/CVE-2020-1971 diff --git a/cves/2020/CVE-2020-23160.md b/cves/2020/CVE-2020-23160.md index 56ae9eff856..23158194343 100644 --- a/cves/2020/CVE-2020-23160.md +++ b/cves/2020/CVE-2020-23160.md @@ -14,5 +14,5 @@ Remote code execution in Pyrescom Termod4 time management devices before 10.04k - https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device #### Github -No PoCs found on GitHub currently. +- https://github.com/Outpost24/Pyrescom-Termod-PoC diff --git a/cves/2020/CVE-2020-23839.md b/cves/2020/CVE-2020-23839.md index b3486c291fe..f6de5e19de5 100644 --- a/cves/2020/CVE-2020-23839.md +++ b/cves/2020/CVE-2020-23839.md @@ -15,7 +15,7 @@ A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, i - https://www.exploit-db.com/exploits/49726 #### Github -No PoCs found on GitHub currently. +- https://github.com/boku7/CVE-2020-23839 #### ExploitDB - https://www.exploit-db.com/exploits/49726 diff --git a/cves/2020/CVE-2020-24186.md b/cves/2020/CVE-2020-24186.md index 72523a04361..5ee307e0b55 100644 --- a/cves/2020/CVE-2020-24186.md +++ b/cves/2020/CVE-2020-24186.md @@ -23,6 +23,7 @@ A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 - https://github.com/hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE - https://github.com/meicookies/CVE-2020-24186 - https://github.com/substing/CVE-2020-24186_reverse_shell_upload +- https://github.com/sec-dojo-com/CVE-2020-24186 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24186.yaml diff --git a/cves/2020/CVE-2020-25042.md b/cves/2020/CVE-2020-25042.md index ed763fb7851..cab77c6868c 100644 --- a/cves/2020/CVE-2020-25042.md +++ b/cves/2020/CVE-2020-25042.md @@ -15,7 +15,7 @@ An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, - https://www.exploit-db.com/exploits/48780 #### Github -No PoCs found on GitHub currently. +- https://github.com/Groppoxx/CVE-2020-25042-PoC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/maracms_upload_exec.rb diff --git a/cves/2020/CVE-2020-25213.md b/cves/2020/CVE-2020-25213.md index fde2e93caef..64e8b95a8eb 100644 --- a/cves/2020/CVE-2020-25213.md +++ b/cves/2020/CVE-2020-25213.md @@ -28,6 +28,7 @@ The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote - https://github.com/mansoorr123/wp-file-manager-CVE-2020-25213 - https://github.com/piruprohacking/CVE-2020-25213 - https://github.com/w4fz5uck5/wp-file-manager-0day +- https://github.com/KienHoSD/wp-file-manager-exploit-CVE-2020-25213-with-Zerologon #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25213.yaml diff --git a/cves/2020/CVE-2020-25265.md b/cves/2020/CVE-2020-25265.md index cb1003a619f..43a50be2a9f 100644 --- a/cves/2020/CVE-2020-25265.md +++ b/cves/2020/CVE-2020-25265.md @@ -13,5 +13,5 @@ AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a - https://github.com/refi64/CVE-2020-25265-25266 #### Github -No PoCs found on GitHub currently. +- https://github.com/refi64/CVE-2020-25265-25266 diff --git a/cves/2020/CVE-2020-25398.md b/cves/2020/CVE-2020-25398.md index d862c6ef72e..f9987adab94 100644 --- a/cves/2020/CVE-2020-25398.md +++ b/cves/2020/CVE-2020-25398.md @@ -13,5 +13,5 @@ CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv expor - https://github.com/h3llraiser/CVE-2020-25398 #### Github -No PoCs found on GitHub currently. +- https://github.com/h3llraiser/CVE-2020-25398 diff --git a/cves/2020/CVE-2020-25399.md b/cves/2020/CVE-2020-25399.md index 1215f32dc70..74aea5d44df 100644 --- a/cves/2020/CVE-2020-25399.md +++ b/cves/2020/CVE-2020-25399.md @@ -13,5 +13,5 @@ Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack a - https://github.com/h3llraiser/CVE-2020-25399 #### Github -No PoCs found on GitHub currently. +- https://github.com/h3llraiser/CVE-2020-25399 diff --git a/cves/2020/CVE-2020-2546.md b/cves/2020/CVE-2020-2546.md index c98ed488fa2..ae95ffdcf7c 100644 --- a/cves/2020/CVE-2020-2546.md +++ b/cves/2020/CVE-2020-2546.md @@ -14,5 +14,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/hktalent/CVE_2020_2546 diff --git a/cves/2020/CVE-2020-25498.md b/cves/2020/CVE-2020-25498.md index 83ea657a38f..abb601204dd 100644 --- a/cves/2020/CVE-2020-25498.md +++ b/cves/2020/CVE-2020-25498.md @@ -15,5 +15,5 @@ Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploite - https://youtu.be/u_6yBIMF74A #### Github -No PoCs found on GitHub currently. +- https://github.com/the-girl-who-lived/CVE-2020-25498 diff --git a/cves/2020/CVE-2020-2551.md b/cves/2020/CVE-2020-2551.md index e3d3fe483ee..eeddd9e18f2 100644 --- a/cves/2020/CVE-2020-2551.md +++ b/cves/2020/CVE-2020-2551.md @@ -31,6 +31,7 @@ No PoCs from references. - https://github.com/samjcs/log4shell-possible-malware - https://github.com/wukong-bin/weblogicpoc - https://github.com/zzwlpx/weblogicPoc +- https://github.com/abbarhissarh/CVE-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2551.yaml diff --git a/cves/2020/CVE-2020-26061.md b/cves/2020/CVE-2020-26061.md index c2e388cdc85..8d8f591e504 100644 --- a/cves/2020/CVE-2020-26061.md +++ b/cves/2020/CVE-2020-26061.md @@ -13,5 +13,5 @@ ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected - https://github.com/missing0x00/CVE-2020-26061 #### Github -No PoCs found on GitHub currently. +- https://github.com/missing0x00/CVE-2020-26061 diff --git a/cves/2020/CVE-2020-26217.md b/cves/2020/CVE-2020-26217.md index 624cfaa1aab..d5dbff4739d 100644 --- a/cves/2020/CVE-2020-26217.md +++ b/cves/2020/CVE-2020-26217.md @@ -20,6 +20,7 @@ XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnera - https://github.com/jas502n/CVE-2020-26259 - https://github.com/novysodope/CVE-2020-26217-XStream-RCE-POC - https://github.com/shoucheng3/x-stream__xstream_CVE-2020-26217_1-4-14-java7 +- https://github.com/Kairo-one/CVE-2020-26217-XStream #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26217.yaml diff --git a/cves/2020/CVE-2020-26732.md b/cves/2020/CVE-2020-26732.md index 675496b9502..a9e500b668d 100644 --- a/cves/2020/CVE-2020-26732.md +++ b/cves/2020/CVE-2020-26732.md @@ -14,5 +14,5 @@ SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set - https://github.com/swzhouu/CVE-2020-26732 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2020-26732 diff --git a/cves/2020/CVE-2020-26733.md b/cves/2020/CVE-2020-26733.md index 8f3a7daa764..254b5b088b8 100644 --- a/cves/2020/CVE-2020-26733.md +++ b/cves/2020/CVE-2020-26733.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Ve - https://github.com/swzhouu/CVE-2020-26733 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2020-26733 diff --git a/cves/2020/CVE-2020-27194.md b/cves/2020/CVE-2020-27194.md index 4bf9cd1dc5e..e03001bd2fc 100644 --- a/cves/2020/CVE-2020-27194.md +++ b/cves/2020/CVE-2020-27194.md @@ -15,4 +15,5 @@ An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or i #### Github - https://github.com/willinin/CVE-2020-27194-exp - https://github.com/xmzyshypnc/CVE-2020-27194 +- https://github.com/WhatsWrongAndWhy/CVE-2020-27194 diff --git a/cves/2020/CVE-2020-27368.md b/cves/2020/CVE-2020-27368.md index dbb74afb3a6..a8b2e34c65c 100644 --- a/cves/2020/CVE-2020-27368.md +++ b/cves/2020/CVE-2020-27368.md @@ -13,5 +13,5 @@ Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B201 - https://github.com/swzhouu/CVE-2020-27368 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2020-27368 diff --git a/cves/2020/CVE-2020-28458.md b/cves/2020/CVE-2020-28458.md index a4bdfb1b004..1201c580bdc 100644 --- a/cves/2020/CVE-2020-28458.md +++ b/cves/2020/CVE-2020-28458.md @@ -14,4 +14,5 @@ All versions of package datatables.net are vulnerable to Prototype Pollution due #### Github - https://github.com/fazilbaig1/CVE-2020-28458 +- https://github.com/Raka200juta/28458 diff --git a/cves/2020/CVE-2020-29007.md b/cves/2020/CVE-2020-29007.md index afc8a83a865..64e7c7a8a16 100644 --- a/cves/2020/CVE-2020-29007.md +++ b/cves/2020/CVE-2020-29007.md @@ -13,5 +13,5 @@ The Score extension through 0.3.0 for MediaWiki has a remote code execution vuln - https://github.com/seqred-s-a/cve-2020-29007 #### Github -No PoCs found on GitHub currently. +- https://github.com/seqred-s-a/cve-2020-29007 diff --git a/cves/2020/CVE-2020-29599.md b/cves/2020/CVE-2020-29599.md index 5aa7cc702be..8ac558b80c1 100644 --- a/cves/2020/CVE-2020-29599.md +++ b/cves/2020/CVE-2020-29599.md @@ -16,3 +16,5 @@ ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authentica - https://github.com/coco0x0a/CVE-2020-29599 - https://github.com/lnwza0x0a/CVE-2020-29599 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/imagemagick/CVE-2020-29599 diff --git a/cves/2020/CVE-2020-29607.md b/cves/2020/CVE-2020-29607.md index dddb9b7440b..b1b3e019065 100644 --- a/cves/2020/CVE-2020-29607.md +++ b/cves/2020/CVE-2020-29607.md @@ -17,6 +17,9 @@ A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows - https://github.com/0xN7y/CVE-2020-29607 - https://github.com/Alienfader/CVE-2020-29607 - https://github.com/ar2o3/CVE-2020-29607 +- https://github.com/CaelumIsMe/CVE-2020-29607-POC +- https://github.com/abbarhissarh/CVE-2020-29607 +- https://github.com/estebanzarate/CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC #### ExploitDB - https://www.exploit-db.com/exploits/49909 diff --git a/cves/2020/CVE-2020-35262.md b/cves/2020/CVE-2020-35262.md index 46c46e62d15..db53aa7cc88 100644 --- a/cves/2020/CVE-2020-35262.md +++ b/cves/2020/CVE-2020-35262.md @@ -14,5 +14,5 @@ Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited v - https://youtu.be/E5wEzf-gkOE #### Github -No PoCs found on GitHub currently. +- https://github.com/the-girl-who-lived/CVE-2020-35262 diff --git a/cves/2020/CVE-2020-35476.md b/cves/2020/CVE-2020-35476.md index c919679fba3..a729bee9ead 100644 --- a/cves/2020/CVE-2020-35476.md +++ b/cves/2020/CVE-2020-35476.md @@ -21,3 +21,6 @@ A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via comma #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opentsdb_yrange_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/opentsdb/CVE-2020-35476 diff --git a/cves/2020/CVE-2020-35488.md b/cves/2020/CVE-2020-35488.md index 879fea379f5..b48085fd7c0 100644 --- a/cves/2020/CVE-2020-35488.md +++ b/cves/2020/CVE-2020-35488.md @@ -13,7 +13,7 @@ The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allo - https://github.com/GuillaumePetit84/CVE-2020-35488 #### Github -No PoCs found on GitHub currently. +- https://github.com/GuillaumePetit84/CVE-2020-35488 #### ExploitDB - https://www.exploit-db.com/exploits/49283 diff --git a/cves/2020/CVE-2020-3956.md b/cves/2020/CVE-2020-3956.md index 9ad40a78c18..910adda66c6 100644 --- a/cves/2020/CVE-2020-3956.md +++ b/cves/2020/CVE-2020-3956.md @@ -15,7 +15,7 @@ VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x be - https://github.com/aaronsvk/CVE-2020-3956 #### Github -No PoCs found on GitHub currently. +- https://github.com/aaronsvk/CVE-2020-3956 #### ExploitDB - https://www.exploit-db.com/exploits/48540 diff --git a/cves/2020/CVE-2020-5504.md b/cves/2020/CVE-2020-5504.md index 10243266671..03ed3b16deb 100644 --- a/cves/2020/CVE-2020-5504.md +++ b/cves/2020/CVE-2020-5504.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/whale-baby/exploitation-of-vulnerability - https://github.com/xMohamed0/CVE-2020-5504-phpMyAdmin +- https://github.com/CerberusMrXi/phpMyAdmin-CVE-2020-5504-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52451 diff --git a/cves/2020/CVE-2020-5752.md b/cves/2020/CVE-2020-5752.md index c2baa4ee493..ece4ccaeb3b 100644 --- a/cves/2020/CVE-2020-5752.md +++ b/cves/2020/CVE-2020-5752.md @@ -16,6 +16,7 @@ Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, una #### Github - https://github.com/yevh/CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- +- https://github.com/x0rbeexd/CVE-2020-5752 #### ExploitDB - https://www.exploit-db.com/exploits/48505 diff --git a/cves/2020/CVE-2020-5844.md b/cves/2020/CVE-2020-5844.md index 6f8819459b5..03f5ad8c5d7 100644 --- a/cves/2020/CVE-2020-5844.md +++ b/cves/2020/CVE-2020-5844.md @@ -15,6 +15,7 @@ index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 #### Github - https://github.com/UNICORDev/exploit-CVE-2020-5844 +- https://github.com/TheCyberGeek/CVE-2020-5844 #### ExploitDB - https://www.exploit-db.com/exploits/50961 diff --git a/cves/2020/CVE-2020-5902.md b/cves/2020/CVE-2020-5902.md index c7b667c3028..cf8ed91f0dd 100644 --- a/cves/2020/CVE-2020-5902.md +++ b/cves/2020/CVE-2020-5902.md @@ -66,6 +66,7 @@ In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12. - https://github.com/yassineaboukir/CVE-2020-5902 - https://github.com/z3n70/CVE-2020-5902 - https://github.com/zhzyker/CVE-2020-5902 +- https://github.com/0xBlackash/CVE-2020-5902 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5902.yaml diff --git a/cves/2020/CVE-2020-6418.md b/cves/2020/CVE-2020-6418.md index d45c6ae6fb7..eb2197f1a69 100644 --- a/cves/2020/CVE-2020-6418.md +++ b/cves/2020/CVE-2020-6418.md @@ -19,6 +19,7 @@ Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote at - https://github.com/SivaPriyaRanganatha/CVE-2020-6418 - https://github.com/tianstcht/v8-exploit - https://github.com/ulexec/ChromeSHELFLoader +- https://github.com/a-mansilla/CVE-2020-6418 #### ExploitDB - https://www.exploit-db.com/exploits/48186 diff --git a/cves/2020/CVE-2020-7012.md b/cves/2020/CVE-2020-7012.md index 9386cd44d3a..a6c4b02433b 100644 --- a/cves/2020/CVE-2020-7012.md +++ b/cves/2020/CVE-2020-7012.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kibana_upgrade_assistant_telemetry_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kibana/CVE-2020-7012 diff --git a/cves/2020/CVE-2020-7247.md b/cves/2020/CVE-2020-7247.md index 5b25eb18545..fb80a7b31f5 100644 --- a/cves/2020/CVE-2020-7247.md +++ b/cves/2020/CVE-2020-7247.md @@ -31,6 +31,7 @@ smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and oth - https://github.com/minhluannguyen/CVE-2020-7247-reproducer - https://github.com/r0lh/CVE-2020-7247 - https://github.com/superzerosec/cve-2020-7247 +- https://github.com/solmin111/OpenSMTPD-CVE-2020-7247- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-7247.yaml @@ -42,3 +43,6 @@ smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and oth #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/opensmtpd_mail_from_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/opensmtpd/CVE-2020-7247 diff --git a/cves/2020/CVE-2020-7598.md b/cves/2020/CVE-2020-7598.md index 574c0409db1..ca49c80b9b6 100644 --- a/cves/2020/CVE-2020-7598.md +++ b/cves/2020/CVE-2020-7598.md @@ -16,4 +16,5 @@ minimist before 1.2.2 could be tricked into adding or modifying properties of Ob - https://github.com/andisfar/LaunchQtCreator - https://github.com/lirantal/pp-minimist-poc - https://github.com/nevermoe/CVE-2021-44906 +- https://github.com/renewablehacking/CVE-2020-7598 diff --git a/cves/2020/CVE-2020-7602.md b/cves/2020/CVE-2020-7602.md index 1c20a243421..117ff34d8ee 100644 --- a/cves/2020/CVE-2020-7602.md +++ b/cves/2020/CVE-2020-7602.md @@ -13,5 +13,5 @@ node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runC - https://snyk.io/vuln/SNYK-JS-NODEPROMPTHERE-560115 #### Github -No PoCs found on GitHub currently. +- https://github.com/dannyEndorTest/node-prompt-here diff --git a/cves/2020/CVE-2020-7693.md b/cves/2020/CVE-2020-7693.md index 73e5f465219..083a0730187 100644 --- a/cves/2020/CVE-2020-7693.md +++ b/cves/2020/CVE-2020-7693.md @@ -15,5 +15,6 @@ Incorrect handling of Upgrade header with the value websocket leads in crashing - https://snyk.io/vuln/SNYK-JS-SOCKJS-575261 #### Github -No PoCs found on GitHub currently. +- https://github.com/andsnw/sockjs-dos-py +- https://github.com/thewindghost/CVE-2020-7693 diff --git a/cves/2020/CVE-2020-7934.md b/cves/2020/CVE-2020-7934.md index 9fd78f10916..55b8df7093f 100644 --- a/cves/2020/CVE-2020-7934.md +++ b/cves/2020/CVE-2020-7934.md @@ -15,7 +15,7 @@ In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and L - https://semanticbits.com/liferay-portal-authenticated-xss-disclosure/ #### Github -No PoCs found on GitHub currently. +- https://github.com/3ndG4me/liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934 #### ExploitDB - https://www.exploit-db.com/exploits/49091 diff --git a/cves/2020/CVE-2020-7961.md b/cves/2020/CVE-2020-7961.md index c205edde969..7291500839c 100644 --- a/cves/2020/CVE-2020-7961.md +++ b/cves/2020/CVE-2020-7961.md @@ -25,6 +25,7 @@ Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows - https://github.com/papa-anniekey/CustomSignatures - https://github.com/pashayogi/CVE-2020-7961-Mass - https://github.com/thelostworldFree/CVE-2020-7961-payloads +- https://github.com/Alaa-abdulridha/POC-CVE-2020-7961-Token-iterate #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7961.yaml @@ -34,3 +35,6 @@ Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/liferay_java_unmarshalling.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/liferay-portal/CVE-2020-7961 diff --git a/cves/2020/CVE-2020-7980.md b/cves/2020/CVE-2020-7980.md index 01e8858028b..f291c23976c 100644 --- a/cves/2020/CVE-2020-7980.md +++ b/cves/2020/CVE-2020-7980.md @@ -15,7 +15,7 @@ Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS command - https://sku11army.blogspot.com/2020/01/intellian-aptus-web-rce-intellian.html #### Github -No PoCs found on GitHub currently. +- https://github.com/Xh4H/Satellian-CVE-2020-7980 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7980.yaml diff --git a/cves/2020/CVE-2020-8158.md b/cves/2020/CVE-2020-8158.md index bbed916fc41..d55778821bc 100644 --- a/cves/2020/CVE-2020-8158.md +++ b/cves/2020/CVE-2020-8158.md @@ -13,5 +13,5 @@ Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow atta - https://hackerone.com/reports/869574 #### Github -No PoCs found on GitHub currently. +- https://github.com/open-flaw/CVE-2020-8158 diff --git a/cves/2020/CVE-2020-8163.md b/cves/2020/CVE-2020-8163.md index 99c3f2c1904..eed57f9a6d9 100644 --- a/cves/2020/CVE-2020-8163.md +++ b/cves/2020/CVE-2020-8163.md @@ -20,6 +20,7 @@ The is a code injection vulnerability in versions of Rails prior to 5.0.1 that w - https://github.com/h4ms1k/CVE-2020-8163 - https://github.com/lucasallan/CVE-2020-8163 - https://github.com/novanazizr/Rails-5.0.1---RCE +- https://github.com/lucasamorimca/CVE-2020-8163 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8163.yaml diff --git a/cves/2020/CVE-2020-8825.md b/cves/2020/CVE-2020-8825.md index 105d37b5244..0e7f0a344d1 100644 --- a/cves/2020/CVE-2020-8825.md +++ b/cves/2020/CVE-2020-8825.md @@ -14,7 +14,7 @@ index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. - https://github.com/hacky1997/CVE-2020-8825 #### Github -No PoCs found on GitHub currently. +- https://github.com/hacky1997/CVE-2020-8825 #### ExploitDB - https://www.exploit-db.com/exploits/48042 diff --git a/cves/2020/CVE-2020-8835.md b/cves/2020/CVE-2020-8835.md index f133594e1eb..59c4a789165 100644 --- a/cves/2020/CVE-2020-8835.md +++ b/cves/2020/CVE-2020-8835.md @@ -22,6 +22,7 @@ In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) di - https://github.com/johnatag/INF8602-CVE-2020-8835 - https://github.com/snappyJack/Rick_write_exp_CVE-2020-8835 - https://github.com/zilong3033/CVE-2020-8835 +- https://github.com/WhatsWrongAndWhy/CVE-2020-8835 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb diff --git a/cves/2020/CVE-2020-9273.md b/cves/2020/CVE-2020-9273.md index 8208247bba4..d2d2a471ae2 100644 --- a/cves/2020/CVE-2020-9273.md +++ b/cves/2020/CVE-2020-9273.md @@ -14,4 +14,5 @@ In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the #### Github - https://github.com/ptef/CVE-2020-9273 +- https://github.com/dukptkey/CVE-2020-9273 diff --git a/cves/2020/CVE-2020-9380.md b/cves/2020/CVE-2020-9380.md index d9d2f5a6379..621067403cc 100644 --- a/cves/2020/CVE-2020-9380.md +++ b/cves/2020/CVE-2020-9380.md @@ -13,5 +13,5 @@ IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS co - https://github.com/migueltarga/CVE-2020-9380 #### Github -No PoCs found on GitHub currently. +- https://github.com/migueltarga/CVE-2020-9380 diff --git a/cves/2020/CVE-2020-9402.md b/cves/2020/CVE-2020-9402.md index b0b743e6a9f..ad4f3ab949c 100644 --- a/cves/2020/CVE-2020-9402.md +++ b/cves/2020/CVE-2020-9402.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2020/CVE-2020-9402.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2020-9402 diff --git a/cves/2020/CVE-2020-9496.md b/cves/2020/CVE-2020-9496.md index 720c95831eb..af7a2d4196c 100644 --- a/cves/2020/CVE-2020-9496.md +++ b/cves/2020/CVE-2020-9496.md @@ -33,3 +33,6 @@ XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scriptin #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_ofbiz_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2020-9496 diff --git a/cves/2020/CVE-2020-9715.md b/cves/2020/CVE-2020-9715.md index 60759f56562..3986a3bb83c 100644 --- a/cves/2020/CVE-2020-9715.md +++ b/cves/2020/CVE-2020-9715.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/lsw29475/CVE-2020-9715 +- https://github.com/f8al/PoC-CVE-2020-9715 diff --git a/cves/2020/CVE-2020-9802.md b/cves/2020/CVE-2020-9802.md index 53f19e3a5c3..7a0f65ab5f6 100644 --- a/cves/2020/CVE-2020-9802.md +++ b/cves/2020/CVE-2020-9802.md @@ -23,4 +23,5 @@ No PoCs from references. - https://github.com/khcujw/CVE-2020-9802 - https://github.com/wh1te4ever/totally-not-spyware-v2 - https://github.com/wyxdlz54188/safari_jailbreak +- https://github.com/Billy-Ellis/jitsploitation diff --git a/cves/2021/CVE-2021-1585.md b/cves/2021/CVE-2021-1585.md index b402e273f5e..601aa5b4bb9 100644 --- a/cves/2021/CVE-2021-1585.md +++ b/cves/2021/CVE-2021-1585.md @@ -14,4 +14,5 @@ A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher co #### Github - https://github.com/jbaines-r7/cisco_asa_research +- https://github.com/jbaines-r7/staystaystay diff --git a/cves/2021/CVE-2021-1675.md b/cves/2021/CVE-2021-1675.md index 05b6322c253..e188db53916 100644 --- a/cves/2021/CVE-2021-1675.md +++ b/cves/2021/CVE-2021-1675.md @@ -98,6 +98,7 @@ Windows Print Spooler Remote Code Execution Vulnerability - https://github.com/whoami-chmod777/CVE-2021-1675-CVE-2021-34527 - https://github.com/yu2u/CVE-2021-1675 - https://github.com/zha0/Microsoft-CVE-2021-1675 +- https://github.com/ccordeiro/CVE-2021-1675 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/cve_2021_1675_printnightmare.rb diff --git a/cves/2021/CVE-2021-1732.md b/cves/2021/CVE-2021-1732.md index d1ab9bad2c8..b979fe46bdc 100644 --- a/cves/2021/CVE-2021-1732.md +++ b/cves/2021/CVE-2021-1732.md @@ -44,6 +44,8 @@ Windows Win32k Elevation of Privilege Vulnerability - https://github.com/salutdamour/Kernel_Exploit - https://github.com/win32kdie/Kernel_Exploit - https://github.com/yangshifan-git/CVE-2021-1732 +- https://github.com/flyinbedxyz/CVE-2021-1732 +- https://github.com/po4sec/CVE-2021-1732 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21882_win32k.rb diff --git a/cves/2021/CVE-2021-1931.md b/cves/2021/CVE-2021-1931.md index a87448c4a2b..5b64ba8e22d 100644 --- a/cves/2021/CVE-2021-1931.md +++ b/cves/2021/CVE-2021-1931.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/FakeShell/CVE-2021-1931-BBRY-KEY2 - https://github.com/starseed12345/QuestStack +- https://github.com/aomsin2526/xperia_5_bl_unlocker_poc diff --git a/cves/2021/CVE-2021-21123.md b/cves/2021/CVE-2021-21123.md index 33f68fa8431..0c77bb64e03 100644 --- a/cves/2021/CVE-2021-21123.md +++ b/cves/2021/CVE-2021-21123.md @@ -13,5 +13,5 @@ Insufficient data validation in File System API in Google Chrome prior to 88.0.4 No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Puliczek/CVE-2021-21123-PoC-Google-Chrome diff --git a/cves/2021/CVE-2021-21220.md b/cves/2021/CVE-2021-21220.md index 47344c443dc..a7dc57beebc 100644 --- a/cves/2021/CVE-2021-21220.md +++ b/cves/2021/CVE-2021-21220.md @@ -16,6 +16,8 @@ Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0. #### Github - https://github.com/AmesianX/CVE-2021-21220 +- https://github.com/JacobTaylor3/CVE-2021-21220 +- https://github.com/borahll/CVE-2021-21220 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_cve_2021_21220_v8_insufficient_validation.rb diff --git a/cves/2021/CVE-2021-21239.md b/cves/2021/CVE-2021-21239.md index 17e7e0b3ad5..a0205b6f404 100644 --- a/cves/2021/CVE-2021-21239.md +++ b/cves/2021/CVE-2021-21239.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/RyanBoomer30/CVE-2021-21239-Exploit - https://github.com/illera88/CVE-2021-21239 +- https://github.com/Crims-on/CVE-2021-21239 diff --git a/cves/2021/CVE-2021-21311.md b/cves/2021/CVE-2021-21311.md index 25aa17cb480..297246478d6 100644 --- a/cves/2021/CVE-2021-21311.md +++ b/cves/2021/CVE-2021-21311.md @@ -20,3 +20,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21311.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/adminer/CVE-2021-21311 diff --git a/cves/2021/CVE-2021-21351.md b/cves/2021/CVE-2021-21351.md index 76b8ea7b4ff..521211c130e 100644 --- a/cves/2021/CVE-2021-21351.md +++ b/cves/2021/CVE-2021-21351.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21351.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/xstream/CVE-2021-21351 diff --git a/cves/2021/CVE-2021-21425.md b/cves/2021/CVE-2021-21425.md index a6c79a39550..7ba59b0cedb 100644 --- a/cves/2021/CVE-2021-21425.md +++ b/cves/2021/CVE-2021-21425.md @@ -17,6 +17,9 @@ Grav Admin Plugin is an HTML user interface that provides a way to configure Gra #### Github - https://github.com/CsEnox/CVE-2021-21425 - https://github.com/bluetoothStrawberry/cve-2021-21425 +- https://github.com/afifudinmtop/CVE-2021-21425 +- https://github.com/d4ytox/CVE-2021-21425 +- https://github.com/s1lentf00thold/CVE-2021-21425-RCE #### ExploitDB - https://www.exploit-db.com/exploits/49788 diff --git a/cves/2021/CVE-2021-21551.md b/cves/2021/CVE-2021-21551.md index 65b750b2f1a..2688493dfac 100644 --- a/cves/2021/CVE-2021-21551.md +++ b/cves/2021/CVE-2021-21551.md @@ -29,6 +29,7 @@ Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability - https://github.com/nanabingies/CVE-2021-21551 - https://github.com/tijme/kernel-mii - https://github.com/waldo-irc/CVE-2021-21551 +- https://github.com/bengabay1994/cve-2021-21551-PoC #### ExploitDB - https://www.exploit-db.com/exploits/49893 diff --git a/cves/2021/CVE-2021-2173.md b/cves/2021/CVE-2021-2173.md index 5c166d8bc90..3ab8cab0a98 100644 --- a/cves/2021/CVE-2021-2173.md +++ b/cves/2021/CVE-2021-2173.md @@ -17,5 +17,5 @@ Vulnerability in the Recovery component of Oracle Database Server. Supported ver - https://github.com/emad-almousa/CVE-2021-2173 #### Github -No PoCs found on GitHub currently. +- https://github.com/emad-almousa/CVE-2021-2173 diff --git a/cves/2021/CVE-2021-21972.md b/cves/2021/CVE-2021-21972.md index d62abaa3126..d85149debd8 100644 --- a/cves/2021/CVE-2021-21972.md +++ b/cves/2021/CVE-2021-21972.md @@ -52,6 +52,7 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability in a v - https://github.com/viksafe/Get-vSphereVersion - https://github.com/yaunsky/CVE-2021-21972 - https://github.com/zidanfanshao/vcenter_tools +- https://github.com/alt3kx/CVE-2021-21972 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yaml diff --git a/cves/2021/CVE-2021-21974.md b/cves/2021/CVE-2021-21974.md index 104eaeeb180..12eb099e17f 100644 --- a/cves/2021/CVE-2021-21974.md +++ b/cves/2021/CVE-2021-21974.md @@ -22,4 +22,5 @@ OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-20210 - https://github.com/hateme021202/cve-2021-21974 - https://github.com/mercylessghost/CVE-2021-21974 - https://github.com/n2x4/Feb2023-CVE-2021-21974-OSINT +- https://github.com/Aiyakami/CVE-2021-21974 diff --git a/cves/2021/CVE-2021-21980.md b/cves/2021/CVE-2021-21980.md index 630f3aae36a..63fd9be07c2 100644 --- a/cves/2021/CVE-2021-21980.md +++ b/cves/2021/CVE-2021-21980.md @@ -13,5 +13,6 @@ The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/gui2000guix-ui/cve-2021-21980-mock-server +- https://github.com/pratikjojode/vcenter-cve-2021-21980-lab diff --git a/cves/2021/CVE-2021-21985.md b/cves/2021/CVE-2021-21985.md index a97283235d8..e84fed7ba48 100644 --- a/cves/2021/CVE-2021-21985.md +++ b/cves/2021/CVE-2021-21985.md @@ -25,6 +25,7 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability due to - https://github.com/testanull/Project_CVE-2021-21985_PoC - https://github.com/xnianq/cve-2021-21985_exp - https://github.com/zidanfanshao/vcenter_tools +- https://github.com/alt3kx/CVE-2021-21985_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21985.yaml diff --git a/cves/2021/CVE-2021-22204.md b/cves/2021/CVE-2021-22204.md index ace02c0bba5..e05a132cff4 100644 --- a/cves/2021/CVE-2021-22204.md +++ b/cves/2021/CVE-2021-22204.md @@ -40,6 +40,8 @@ Improper neutralization of user data in the DjVu file format in ExifTool version - https://github.com/se162xg/CVE-2021-22204 - https://github.com/szTheory/exifcleaner - https://github.com/trganda/CVE-2021-22204 +- https://github.com/Roronoawjd/CVE-2021-22204 +- https://github.com/d4ytox/CVE-2021-22204 #### ExploitDB - https://www.exploit-db.com/exploits/50911 diff --git a/cves/2021/CVE-2021-22205.md b/cves/2021/CVE-2021-22205.md index a8561e1dd5f..4c7f471d960 100644 --- a/cves/2021/CVE-2021-22205.md +++ b/cves/2021/CVE-2021-22205.md @@ -48,6 +48,8 @@ An issue has been discovered in GitLab CE/EE affecting all versions starting fro - https://github.com/shang159/CVE-2021-22205-getshell - https://github.com/w0x68y/Gitlab-CVE-2021-22205 - https://github.com/whwlsfb/CVE-2021-22205 +- https://github.com/K3ysTr0K3R/CVE-2021-22205 +- https://github.com/ccordeiro/CVE-2021-22205 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22205.yaml @@ -57,3 +59,6 @@ An issue has been discovered in GitLab CE/EE affecting all versions starting fro #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_exif_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gitlab/CVE-2021-22205 diff --git a/cves/2021/CVE-2021-22555.md b/cves/2021/CVE-2021-22555.md index 1b5fe07b407..49b5965a2ca 100644 --- a/cves/2021/CVE-2021-22555.md +++ b/cves/2021/CVE-2021-22555.md @@ -39,6 +39,9 @@ A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in n - https://github.com/tukru/CVE-2021-22555 - https://github.com/veritas501/CVE-2021-22555-PipeVersion - https://github.com/xyjl-ly/CVE-2021-22555-Exploit +- https://github.com/Spydomain/CVE-2021-22555-Poc +- https://github.com/WhatsWrongAndWhy/CVE-2021-22555 +- https://github.com/glutton-su/CVE-2021-22555 #### ExploitDB - https://www.exploit-db.com/exploits/50135 diff --git a/cves/2021/CVE-2021-22911.md b/cves/2021/CVE-2021-22911.md index 9d2f7c9b780..e443f19ff44 100644 --- a/cves/2021/CVE-2021-22911.md +++ b/cves/2021/CVE-2021-22911.md @@ -22,6 +22,8 @@ A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3 - https://github.com/optionalCTF/Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911 - https://github.com/overgrowncarrot1/CVE-2021-22911 - https://github.com/yoohhuu/Rocket-Chat-3.12.1-PoC-CVE-2021-22911- +- https://github.com/TeneBrae93/RocketChat-NoSQLi-Chain-CVE-2021-22911 +- https://github.com/roshanrajbanshi/rocketcat-cve-2021-22911-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22911.yaml @@ -29,3 +31,6 @@ A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3 #### ExploitDB - https://www.exploit-db.com/exploits/50108 - https://www.exploit-db.com/exploits/49960 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rocketchat/CVE-2021-22911 diff --git a/cves/2021/CVE-2021-22941.md b/cves/2021/CVE-2021-22941.md index 45855b6f19a..1acfc8e9613 100644 --- a/cves/2021/CVE-2021-22941.md +++ b/cves/2021/CVE-2021-22941.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/hoavt18/CVE-2021-22941 - https://github.com/hoavt184/CVE-2021-22941 +- https://github.com/hoav18/CVE-2021-22941 diff --git a/cves/2021/CVE-2021-23394.md b/cves/2021/CVE-2021-23394.md index ea4885c476e..e4753531d74 100644 --- a/cves/2021/CVE-2021-23394.md +++ b/cves/2021/CVE-2021-23394.md @@ -16,7 +16,7 @@ The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execu - https://snyk.io/vuln/SNYK-PHP-STUDIO42ELFINDER-1290554 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xnemian/CVE-2021-23394 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23394.yaml diff --git a/cves/2021/CVE-2021-23797.md b/cves/2021/CVE-2021-23797.md index da1890ce00c..d6fade1e0d4 100644 --- a/cves/2021/CVE-2021-23797.md +++ b/cves/2021/CVE-2021-23797.md @@ -13,5 +13,5 @@ All versions of package http-server-node are vulnerable to Directory Traversal v - https://snyk.io/vuln/SNYK-JS-HTTPSERVERNODE-1727656 #### Github -No PoCs found on GitHub currently. +- https://github.com/dannyEndorTest/http-server-node diff --git a/cves/2021/CVE-2021-24006.md b/cves/2021/CVE-2021-24006.md index 750257e6892..5f9699c210d 100644 --- a/cves/2021/CVE-2021-24006.md +++ b/cves/2021/CVE-2021-24006.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2021-24006 - https://github.com/cnetsec/CVE-2021-24006-Fortimanager-Exploit +- https://github.com/chessredoffsec/CVE-2021-24006 +- https://github.com/chessredoffsec/CVE-2021-24006-Fortimanager-Exploit diff --git a/cves/2021/CVE-2021-24019.md b/cves/2021/CVE-2021-24019.md index 39e3a074713..34b0097d53d 100644 --- a/cves/2021/CVE-2021-24019.md +++ b/cves/2021/CVE-2021-24019.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2021-24019 +- https://github.com/chessredoffsec/CVE-2021-24019 diff --git a/cves/2021/CVE-2021-24160.md b/cves/2021/CVE-2021-24160.md index 2c52f1fa337..e59f51720cc 100644 --- a/cves/2021/CVE-2021-24160.md +++ b/cves/2021/CVE-2021-24160.md @@ -14,4 +14,4 @@ In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers - https://wpscan.com/vulnerability/066ba5d4-4aaa-4462-b106-500c1f291c37 #### Github -No PoCs found on GitHub currently. +- https://github.com/likeww/Exploit-CVE-2021-24160 diff --git a/cves/2021/CVE-2021-24499.md b/cves/2021/CVE-2021-24499.md index e4130102016..a55cdc1baac 100644 --- a/cves/2021/CVE-2021-24499.md +++ b/cves/2021/CVE-2021-24499.md @@ -20,6 +20,7 @@ The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_ - https://github.com/hh-hunter/cve-2021-24499 - https://github.com/j4k0m/CVE-2021-24499 - https://github.com/jytmX/CVE-2021-24499 +- https://github.com/jayhutajulu1/CVE-2021-24499 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24499.yaml diff --git a/cves/2021/CVE-2021-24762.md b/cves/2021/CVE-2021-24762.md index 05cf68f2b32..7d2afca45a3 100644 --- a/cves/2021/CVE-2021-24762.md +++ b/cves/2021/CVE-2021-24762.md @@ -14,7 +14,7 @@ The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape th - https://wpscan.com/vulnerability/c1620905-7c31-4e62-80f5-1d9635be11ad #### Github -No PoCs found on GitHub currently. +- https://github.com/c4cnm/Exploit_CVE-2021-24762 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24762.yaml diff --git a/cves/2021/CVE-2021-25076.md b/cves/2021/CVE-2021-25076.md index 646fda6e112..5d7b3476545 100644 --- a/cves/2021/CVE-2021-25076.md +++ b/cves/2021/CVE-2021-25076.md @@ -17,6 +17,7 @@ The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape - https://github.com/0xAbbarhSF/CVE-2021-25076 - https://github.com/0xStarFord/CVE-2021-25076 - https://github.com/ar2o3/CVE-2021-25076 +- https://github.com/abbarhissarh/CVE-2021-25076 #### ExploitDB - https://www.exploit-db.com/exploits/50772 diff --git a/cves/2021/CVE-2021-25646.md b/cves/2021/CVE-2021-25646.md index ed609d402f6..98da04afc1d 100644 --- a/cves/2021/CVE-2021-25646.md +++ b/cves/2021/CVE-2021-25646.md @@ -33,3 +33,6 @@ Apache Druid includes the ability to execute user-provided JavaScript code embed #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_druid_js_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apache-druid/CVE-2021-25646 diff --git a/cves/2021/CVE-2021-25741.md b/cves/2021/CVE-2021-25741.md index 86344d245fe..19cb7a207ce 100644 --- a/cves/2021/CVE-2021-25741.md +++ b/cves/2021/CVE-2021-25741.md @@ -20,4 +20,5 @@ No PoCs from references. - https://github.com/Betep0k/CVE-2021-25741 - https://github.com/brant-ruan/poc-demo - https://github.com/cdxiaodong/CVE-2021-25741 +- https://github.com/Glutenfree69/ZigRaceExploit diff --git a/cves/2021/CVE-2021-26084.md b/cves/2021/CVE-2021-26084.md index 57bc58e4c18..03382978d20 100644 --- a/cves/2021/CVE-2021-26084.md +++ b/cves/2021/CVE-2021-26084.md @@ -58,6 +58,7 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul - https://github.com/taythebot/CVE-2021-26084 - https://github.com/wdjcy/CVE-2021-26084 - https://github.com/wolf1892/confluence-rce-poc +- https://github.com/alt3kx/CVE-2021-26084_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26084.yaml @@ -67,3 +68,6 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_webwork_ognl_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2021-26084 diff --git a/cves/2021/CVE-2021-26120.md b/cves/2021/CVE-2021-26120.md index be75b4b35cd..b050b495c47 100644 --- a/cves/2021/CVE-2021-26120.md +++ b/cves/2021/CVE-2021-26120.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cmsms/CVE-2021-26120 diff --git a/cves/2021/CVE-2021-26855.md b/cves/2021/CVE-2021-26855.md index f711fedb45b..eb35bcb90eb 100644 --- a/cves/2021/CVE-2021-26855.md +++ b/cves/2021/CVE-2021-26855.md @@ -84,6 +84,12 @@ Microsoft Exchange Server Remote Code Execution Vulnerability - https://github.com/thau0x01/poc_proxylogon - https://github.com/timb-machine-mirrors/testanull-CVE-2021-26855_read_poc.txt - https://github.com/yaoxiaoangry3/Flangvik +- https://github.com/KotSec/CVE-2021-26855-Scanner +- https://github.com/SimoesCTT/CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 +- https://github.com/SimoesCTT/CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Microsoft-Exchange-Exploit +- https://github.com/alt3kx/CVE-2021-26855_PoC +- https://github.com/haotiku/CVE-2021-26855-exploit-Exchange +- https://github.com/wysssadda/ExchangeSmash #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26855.yaml diff --git a/cves/2021/CVE-2021-27190.md b/cves/2021/CVE-2021-27190.md index 994a036b6d6..87ee6585555 100644 --- a/cves/2021/CVE-2021-27190.md +++ b/cves/2021/CVE-2021-27190.md @@ -16,5 +16,5 @@ A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING - https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/ #### Github -No PoCs found on GitHub currently. +- https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS diff --git a/cves/2021/CVE-2021-27328.md b/cves/2021/CVE-2021-27328.md index 2b0d8cc84bf..d00e7d3e3e6 100644 --- a/cves/2021/CVE-2021-27328.md +++ b/cves/2021/CVE-2021-27328.md @@ -14,5 +14,5 @@ Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An a - https://github.com/SQSamir/CVE-2021-27328 #### Github -No PoCs found on GitHub currently. +- https://github.com/SQSamir/CVE-2021-27328 diff --git a/cves/2021/CVE-2021-27365.md b/cves/2021/CVE-2021-27365.md index 58aba9f6f3d..8f2dc14ccec 100644 --- a/cves/2021/CVE-2021-27365.md +++ b/cves/2021/CVE-2021-27365.md @@ -16,5 +16,5 @@ An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data s - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5 #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2021-27365 diff --git a/cves/2021/CVE-2021-27876.md b/cves/2021/CVE-2021-27876.md index d6d995780d7..3ded122f018 100644 --- a/cves/2021/CVE-2021-27876.md +++ b/cves/2021/CVE-2021-27876.md @@ -14,7 +14,7 @@ An issue was discovered in Veritas Backup Exec before 21.2. The communication be - http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/wingerbijay/CVE-2021-27876 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/veritas/beagent_sha_auth_rce.rb diff --git a/cves/2021/CVE-2021-27877.md b/cves/2021/CVE-2021-27877.md index 9942280c32e..e0a90d0de10 100644 --- a/cves/2021/CVE-2021-27877.md +++ b/cves/2021/CVE-2021-27877.md @@ -14,7 +14,7 @@ An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple - http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/yashswarup12/CVE-2021-27877-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-27877.yaml diff --git a/cves/2021/CVE-2021-27905.md b/cves/2021/CVE-2021-27905.md index 1968d3e1855..6127e31032a 100644 --- a/cves/2021/CVE-2021-27905.md +++ b/cves/2021/CVE-2021-27905.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/W2Ning/Solr-SSRF - https://github.com/murataydemir/CVE-2021-27905 - https://github.com/pdelteil/CVE-2021-27905.POC +- https://github.com/RIZZZIOM/CVE-2021-27905 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27905.yaml diff --git a/cves/2021/CVE-2021-27963.md b/cves/2021/CVE-2021-27963.md index b934cb53f8c..4e92ff99a2d 100644 --- a/cves/2021/CVE-2021-27963.md +++ b/cves/2021/CVE-2021-27963.md @@ -13,5 +13,5 @@ SonLogger before 6.4.1 is affected by user creation with any user permissions pr - https://github.com/erberkan/SonLogger-vulns #### Github -No PoCs found on GitHub currently. +- https://github.com/erberkan/SonLogger-vulns diff --git a/cves/2021/CVE-2021-28164.md b/cves/2021/CVE-2021-28164.md index c3d031930d1..8324ac43c1d 100644 --- a/cves/2021/CVE-2021-28164.md +++ b/cves/2021/CVE-2021-28164.md @@ -22,3 +22,6 @@ In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mo #### ExploitDB - https://www.exploit-db.com/exploits/50438 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jetty/CVE-2021-28164 diff --git a/cves/2021/CVE-2021-28169.md b/cves/2021/CVE-2021-28169.md index c53d5e31e24..7f22f258e15 100644 --- a/cves/2021/CVE-2021-28169.md +++ b/cves/2021/CVE-2021-28169.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28169.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jetty/CVE-2021-28169 diff --git a/cves/2021/CVE-2021-28663.md b/cves/2021/CVE-2021-28663.md index 0e1528be325..6d52173c023 100644 --- a/cves/2021/CVE-2021-28663.md +++ b/cves/2021/CVE-2021-28663.md @@ -17,5 +17,5 @@ The Arm Mali GPU kernel driver allows privilege escalation or information disclo - https://github.com/lntrx/CVE-2021-28663 #### Github -No PoCs found on GitHub currently. +- https://github.com/lntrx/CVE-2021-28663 diff --git a/cves/2021/CVE-2021-29267.md b/cves/2021/CVE-2021-29267.md index 3c08b4ea305..1ca99e85cfa 100644 --- a/cves/2021/CVE-2021-29267.md +++ b/cves/2021/CVE-2021-29267.md @@ -13,5 +13,5 @@ Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leve - https://github.com/Security-AVS/CVE-2021-29267 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2021-29267 diff --git a/cves/2021/CVE-2021-29337.md b/cves/2021/CVE-2021-29337.md index adcb9befa5d..8784c675ec2 100644 --- a/cves/2021/CVE-2021-29337.md +++ b/cves/2021/CVE-2021-29337.md @@ -13,5 +13,5 @@ MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access - https://github.com/rjt-gupta/CVE-2021-29337 #### Github -No PoCs found on GitHub currently. +- https://github.com/rjt-gupta/CVE-2021-29337 diff --git a/cves/2021/CVE-2021-29441.md b/cves/2021/CVE-2021-29441.md index 530624575ee..be2a0447628 100644 --- a/cves/2021/CVE-2021-29441.md +++ b/cves/2021/CVE-2021-29441.md @@ -17,6 +17,10 @@ No PoCs from references. - https://github.com/azhao1981/CVE-2021-29441 - https://github.com/bysinks/CVE-2021-29441 - https://github.com/hh-hunter/nacos-cve-2021-29441 +- https://github.com/K3ysTr0K3R/CVE-2021-29441 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29441.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nacos/CVE-2021-29441 diff --git a/cves/2021/CVE-2021-29442.md b/cves/2021/CVE-2021-29442.md index 88da0a90373..ff22978c6d4 100644 --- a/cves/2021/CVE-2021-29442.md +++ b/cves/2021/CVE-2021-29442.md @@ -13,7 +13,10 @@ Nacos is a platform designed for dynamic service discovery and configuration and - https://github.com/alibaba/nacos/issues/4463 #### Github -No PoCs found on GitHub currently. +- https://github.com/nanaao/cve-2021-29442-Nacos-Derby-rce-exp #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29442.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nacos/CVE-2021-29442 diff --git a/cves/2021/CVE-2021-29447.md b/cves/2021/CVE-2021-29447.md index 71a645a8b2a..ec7bbf0fcaf 100644 --- a/cves/2021/CVE-2021-29447.md +++ b/cves/2021/CVE-2021-29447.md @@ -36,6 +36,10 @@ Wordpress is an open source CMS. A user with the ability to upload files (like a - https://github.com/specializzazione-cyber-security/demo-CVE-2021-29447-lezione - https://github.com/thomas-osgood/CVE-2021-29447 - https://github.com/viardant/CVE-2021-29447 +- https://github.com/0xricksanchez/CVE-2021-29447 +- https://github.com/danilo1992-sys/CVE-2021-29447 +- https://github.com/davids52/cve-2021-29447_auto-script +- https://github.com/rdana55/CVE-2021-29447-PoC #### ExploitDB - https://www.exploit-db.com/exploits/50304 diff --git a/cves/2021/CVE-2021-29505.md b/cves/2021/CVE-2021-29505.md index 9f85d1527cd..3fd3a0cd937 100644 --- a/cves/2021/CVE-2021-29505.md +++ b/cves/2021/CVE-2021-29505.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29505.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/xstream/CVE-2021-29505 diff --git a/cves/2021/CVE-2021-3007.md b/cves/2021/CVE-2021-3007.md index 531f65be48f..f9c526dfb79 100644 --- a/cves/2021/CVE-2021-3007.md +++ b/cves/2021/CVE-2021-3007.md @@ -14,6 +14,7 @@ Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a dese #### Github - https://github.com/Vulnmachines/ZF3_CVE-2021-3007 +- https://github.com/yunus-a1i/CVE-2021-3007-docker-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3007.yaml diff --git a/cves/2021/CVE-2021-30146.md b/cves/2021/CVE-2021-30146.md index 9e98aa112bc..a563155c9ff 100644 --- a/cves/2021/CVE-2021-30146.md +++ b/cves/2021/CVE-2021-30146.md @@ -13,5 +13,5 @@ Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionali - https://github.com/Security-AVS/CVE-2021-30146 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2021-30146 diff --git a/cves/2021/CVE-2021-30327.md b/cves/2021/CVE-2021-30327.md index f604cf2b021..f841d05f7ad 100644 --- a/cves/2021/CVE-2021-30327.md +++ b/cves/2021/CVE-2021-30327.md @@ -13,5 +13,5 @@ Buffer overflow in sahara protocol while processing commands leads to overwrite No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Daniel224455/katana diff --git a/cves/2021/CVE-2021-30809.md b/cves/2021/CVE-2021-30809.md index cd7acac1330..8494b5521f9 100644 --- a/cves/2021/CVE-2021-30809.md +++ b/cves/2021/CVE-2021-30809.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/seregonwar/CVE-2021-30809-UAF +- https://github.com/seregonwar/CVE-2021-30809-OOM diff --git a/cves/2021/CVE-2021-3129.md b/cves/2021/CVE-2021-3129.md index 286ab58b52e..b16126e8bb3 100644 --- a/cves/2021/CVE-2021-3129.md +++ b/cves/2021/CVE-2021-3129.md @@ -47,6 +47,8 @@ Ignition before 2.5.2, as used in Laravel and other products, allows unauthentic - https://github.com/withmasday/CVE-2021-3129 - https://github.com/wmasday/CVE-2021-3129 - https://github.com/zhzyker/CVE-2021-3129 +- https://github.com/Giangdurian/CVE-2021-3129 +- https://github.com/theNareshofficial/CVE-2021-3129-Lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3129.yaml @@ -56,3 +58,6 @@ Ignition before 2.5.2, as used in Laravel and other products, allows unauthentic #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/php/ignition_laravel_debug_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/laravel/CVE-2021-3129 diff --git a/cves/2021/CVE-2021-3130.md b/cves/2021/CVE-2021-3130.md index 48c77d5cee0..df786e57036 100644 --- a/cves/2021/CVE-2021-3130.md +++ b/cves/2021/CVE-2021-3130.md @@ -13,5 +13,5 @@ Within the Open-AudIT up to version 3.5.3 application, the web interface hides S No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/lusterx/CVE-2021-3130 diff --git a/cves/2021/CVE-2021-31440.md b/cves/2021/CVE-2021-31440.md index 1993d3c7430..e2ca31ad528 100644 --- a/cves/2021/CVE-2021-31440.md +++ b/cves/2021/CVE-2021-31440.md @@ -14,4 +14,5 @@ This vulnerability allows local attackers to escalate privileges on affected ins #### Github - https://github.com/ChoKyuWon/exploit_articles +- https://github.com/WhatsWrongAndWhy/CVE-2021-31440 diff --git a/cves/2021/CVE-2021-3156.md b/cves/2021/CVE-2021-3156.md index a2c7f7d9cd1..a0b3b923046 100644 --- a/cves/2021/CVE-2021-3156.md +++ b/cves/2021/CVE-2021-3156.md @@ -118,6 +118,13 @@ Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based - https://github.com/wurwur/CVE-2021-3156 - https://github.com/yaunsky/cve-2021-3156 - https://github.com/ymrsmns/CVE-2021-3156 +- https://github.com/Rana-Ali93/CVE-2021-3156-Sudo-Buffer-Overflow-Linux +- https://github.com/Shams-Ul-Mehmood/CVE-2021-3156-Project +- https://github.com/TheLeopard65/CVE-2021-3156-Baron-Samedit +- https://github.com/WhatsWrongAndWhy/CVE-2021-3156 +- https://github.com/czeti/baron-samedit +- https://github.com/ngtuonghung/CVE-2021-3156 +- https://github.com/sbladiamond/CVE-2021-3156 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2021/CVE-2021-3156.yaml diff --git a/cves/2021/CVE-2021-31602.md b/cves/2021/CVE-2021-31602.md index 41ee3cf9705..d56e025c2d8 100644 --- a/cves/2021/CVE-2021-31602.md +++ b/cves/2021/CVE-2021-31602.md @@ -14,6 +14,7 @@ An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Busin #### Github - https://github.com/0cool-design/PWNentaho +- https://github.com/0cool-design/PWNtaho #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31602.yaml diff --git a/cves/2021/CVE-2021-31630.md b/cves/2021/CVE-2021-31630.md index 72c5bf7c669..5828318226d 100644 --- a/cves/2021/CVE-2021-31630.md +++ b/cves/2021/CVE-2021-31630.md @@ -29,4 +29,5 @@ Command Injection in Open PLC Webserver v3 allows remote attackers to execute ar - https://github.com/mind2hex/CVE-2021-31630-OpenPLC-3-Authenticated-RCE - https://github.com/thewhiteh4t/cve-2021-31630 - https://github.com/ttps-byte/cve-2021-31630 +- https://github.com/tranquac/OpenPLC_v3 diff --git a/cves/2021/CVE-2021-3164.md b/cves/2021/CVE-2021-3164.md index 4429cbb5cb9..6a1c6d21a6f 100644 --- a/cves/2021/CVE-2021-3164.md +++ b/cves/2021/CVE-2021-3164.md @@ -13,5 +13,5 @@ ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user - https://github.com/rmccarth/cve-2021-3164 #### Github -No PoCs found on GitHub currently. +- https://github.com/rmccarth/cve-2021-3164 diff --git a/cves/2021/CVE-2021-31760.md b/cves/2021/CVE-2021-31760.md index c8772166613..52da8b117fe 100644 --- a/cves/2021/CVE-2021-31760.md +++ b/cves/2021/CVE-2021-31760.md @@ -15,5 +15,6 @@ Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote - https://youtu.be/D45FN8QrzDo #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-31760 +- https://github.com/electronicbots/CVE-2021-31760 diff --git a/cves/2021/CVE-2021-31761.md b/cves/2021/CVE-2021-31761.md index 53c87423745..4c4c35198f8 100644 --- a/cves/2021/CVE-2021-31761.md +++ b/cves/2021/CVE-2021-31761.md @@ -16,7 +16,8 @@ Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remo - https://youtu.be/23VvUMu-28c #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-31761 +- https://github.com/electronicbots/CVE-2021-31761 #### ExploitDB - https://www.exploit-db.com/exploits/50144 diff --git a/cves/2021/CVE-2021-31762.md b/cves/2021/CVE-2021-31762.md index 6a48c57ffcc..0deef5966ac 100644 --- a/cves/2021/CVE-2021-31762.md +++ b/cves/2021/CVE-2021-31762.md @@ -16,7 +16,8 @@ Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privil - https://youtu.be/qCvEXwyaF5U #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-31762 +- https://github.com/electronicbots/CVE-2021-31762 #### ExploitDB - https://www.exploit-db.com/exploits/50126 diff --git a/cves/2021/CVE-2021-32156.md b/cves/2021/CVE-2021-32156.md index a5bb3b66ea4..62ab1ae6c76 100644 --- a/cves/2021/CVE-2021-32156.md +++ b/cves/2021/CVE-2021-32156.md @@ -13,5 +13,5 @@ A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the - https://github.com/Mesh3l911/CVE-2021-32156 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32156 diff --git a/cves/2021/CVE-2021-32157.md b/cves/2021/CVE-2021-32157.md index fae103b288d..646dfe0d3b5 100644 --- a/cves/2021/CVE-2021-32157.md +++ b/cves/2021/CVE-2021-32157.md @@ -14,4 +14,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Schedu #### Github - https://github.com/dnr6419/CVE-2021-32157 +- https://github.com/Mesh3l911/CVE-2021-32157 diff --git a/cves/2021/CVE-2021-32158.md b/cves/2021/CVE-2021-32158.md index 09c10016c9c..211d1df20ae 100644 --- a/cves/2021/CVE-2021-32158.md +++ b/cves/2021/CVE-2021-32158.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload - https://github.com/Mesh3l911/CVE-2021-32158 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32158 diff --git a/cves/2021/CVE-2021-32159.md b/cves/2021/CVE-2021-32159.md index 34d78a77565..17994c1405a 100644 --- a/cves/2021/CVE-2021-32159.md +++ b/cves/2021/CVE-2021-32159.md @@ -13,5 +13,5 @@ A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the - https://github.com/Mesh3l911/CVE-2021-32159 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32159 diff --git a/cves/2021/CVE-2021-32160.md b/cves/2021/CVE-2021-32160.md index f4be68636b7..9c81b3311cf 100644 --- a/cves/2021/CVE-2021-32160.md +++ b/cves/2021/CVE-2021-32160.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Ad - https://github.com/Mesh3l911/CVE-2021-32160 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32160 diff --git a/cves/2021/CVE-2021-32161.md b/cves/2021/CVE-2021-32161.md index 46e6c43e781..2a945ec9f03 100644 --- a/cves/2021/CVE-2021-32161.md +++ b/cves/2021/CVE-2021-32161.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Fi - https://github.com/Mesh3l911/CVE-2021-32161 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32161 diff --git a/cves/2021/CVE-2021-32162.md b/cves/2021/CVE-2021-32162.md index a32dbc99326..b69438b1971 100644 --- a/cves/2021/CVE-2021-32162.md +++ b/cves/2021/CVE-2021-32162.md @@ -13,5 +13,5 @@ A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through - https://github.com/Mesh3l911/CVE-2021-32162 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32162 diff --git a/cves/2021/CVE-2021-3262.md b/cves/2021/CVE-2021-3262.md index 07bdf7c57fc..5f8f4eaee3d 100644 --- a/cves/2021/CVE-2021-3262.md +++ b/cves/2021/CVE-2021-3262.md @@ -13,5 +13,5 @@ TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20 - https://susos.co/blog/f/cve-disclosureuncovered-sql-injection-in-tripspark-veo-transport #### Github -No PoCs found on GitHub currently. +- https://github.com/l0lsec/CVE-2021-3262 diff --git a/cves/2021/CVE-2021-32682.md b/cves/2021/CVE-2021-32682.md index c3a2f1b9776..f9bb01f5e9d 100644 --- a/cves/2021/CVE-2021-32682.md +++ b/cves/2021/CVE-2021-32682.md @@ -22,3 +22,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/elfinder_archive_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elfinder/CVE-2021-32682 diff --git a/cves/2021/CVE-2021-33044.md b/cves/2021/CVE-2021-33044.md index 84c4e63e245..bc375c70158 100644 --- a/cves/2021/CVE-2021-33044.md +++ b/cves/2021/CVE-2021-33044.md @@ -29,6 +29,9 @@ The identity authentication bypass vulnerability found in some Dahua products du - https://github.com/naycha/TVT-NVR-config - https://github.com/naycha/TVT-config - https://github.com/readloud/PoC +- https://github.com/Baza-NATO/CVE-2021-33044 +- https://github.com/eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044 +- https://github.com/litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33044.yaml diff --git a/cves/2021/CVE-2021-33393.md b/cves/2021/CVE-2021-33393.md index 5caba7836b2..8cdeaf0fc64 100644 --- a/cves/2021/CVE-2021-33393.md +++ b/cves/2021/CVE-2021-33393.md @@ -13,7 +13,7 @@ lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/ba - http://packetstormsecurity.com/files/163158/IPFire-2.25-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/joaoaugustom/IPFire_2.25_RCE_Authenticated #### ExploitDB - https://www.exploit-db.com/exploits/49869 diff --git a/cves/2021/CVE-2021-33558.md b/cves/2021/CVE-2021-33558.md index 520bfc0d542..d7d984aa926 100644 --- a/cves/2021/CVE-2021-33558.md +++ b/cves/2021/CVE-2021-33558.md @@ -15,6 +15,7 @@ Boa 0.94.13 allows remote attackers to obtain sensitive information via a miscon #### Github - https://github.com/anldori/CVE-2021-33558 +- https://github.com/mdanzaruddin/CVE-2021-33558. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33558.yaml diff --git a/cves/2021/CVE-2021-33564.md b/cves/2021/CVE-2021-33564.md index fb5497b1571..36ef7eafa30 100644 --- a/cves/2021/CVE-2021-33564.md +++ b/cves/2021/CVE-2021-33564.md @@ -15,6 +15,7 @@ An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby a #### Github - https://github.com/dorkerdevil/CVE-2021-33564 +- https://github.com/mlr0p/CVE-2021-33564 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33564.yaml diff --git a/cves/2021/CVE-2021-3378.md b/cves/2021/CVE-2021-3378.md index beb92f0b17c..f7f0be7bf15 100644 --- a/cves/2021/CVE-2021-3378.md +++ b/cves/2021/CVE-2021-3378.md @@ -15,7 +15,7 @@ FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-T - https://github.com/erberkan/fortilogger_arbitrary_fileupload #### Github -No PoCs found on GitHub currently. +- https://github.com/erberkan/fortilogger_arbitrary_fileupload #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3378.yaml diff --git a/cves/2021/CVE-2021-34371.md b/cves/2021/CVE-2021-34371.md index 71637474a7f..245557743ce 100644 --- a/cves/2021/CVE-2021-34371.md +++ b/cves/2021/CVE-2021-34371.md @@ -16,3 +16,5 @@ Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that - https://github.com/tavgar/CVE-2021-34371 - https://github.com/zwjjustdoit/CVE-2021-34371.jar +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371 diff --git a/cves/2021/CVE-2021-34427.md b/cves/2021/CVE-2021-34427.md index 1784766eb39..fa7f2570023 100644 --- a/cves/2021/CVE-2021-34427.md +++ b/cves/2021/CVE-2021-34427.md @@ -15,7 +15,7 @@ In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters - https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142 #### Github -No PoCs found on GitHub currently. +- https://github.com/rt1252/CVE-2021-34427 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34427.yaml diff --git a/cves/2021/CVE-2021-34429.md b/cves/2021/CVE-2021-34429.md index f0bd6cdbe3e..3fc5dbff3c8 100644 --- a/cves/2021/CVE-2021-34429.md +++ b/cves/2021/CVE-2021-34429.md @@ -24,3 +24,6 @@ No PoCs from references. #### ExploitDB - https://www.exploit-db.com/exploits/50478 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jetty/CVE-2021-34429 diff --git a/cves/2021/CVE-2021-3490.md b/cves/2021/CVE-2021-3490.md index c489194c60d..f28e85a9d52 100644 --- a/cves/2021/CVE-2021-3490.md +++ b/cves/2021/CVE-2021-3490.md @@ -22,6 +22,8 @@ The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux ke #### Github - https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490 - https://github.com/pivik271/CVE-2021-3490 +- https://github.com/WhatsWrongAndWhy/CVE-2021-3490 +- https://github.com/prabeershakya/CVE-2021-3490-POC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb diff --git a/cves/2021/CVE-2021-3493.md b/cves/2021/CVE-2021-3493.md index 03f7e68f18a..136e8f1d3df 100644 --- a/cves/2021/CVE-2021-3493.md +++ b/cves/2021/CVE-2021-3493.md @@ -35,6 +35,10 @@ The overlayfs implementation in the linux kernel did not properly validate with - https://github.com/pmihsan/OverlayFS-CVE-2021-3493 - https://github.com/ptkhai15/OverlayFS---CVE-2021-3493 - https://github.com/puckiestyle/CVE-2021-3493 +- https://github.com/0xlane/CVE-2021-3493 +- https://github.com/WhatsWrongAndWhy/CVE-2021-3493 +- https://github.com/cyberx-1/OverlayFS-CVE-2021-3493 +- https://github.com/r3dw4n48m3d/CVE-2021-3493-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3493_overlayfs.rb diff --git a/cves/2021/CVE-2021-35042.md b/cves/2021/CVE-2021-35042.md index 9025dbcce0d..032758648df 100644 --- a/cves/2021/CVE-2021-35042.md +++ b/cves/2021/CVE-2021-35042.md @@ -21,6 +21,10 @@ No PoCs from references. - https://github.com/n3utr1n00/CVE-2021-35042 - https://github.com/r4vi/CVE-2021-35042 - https://github.com/zer0qs/CVE-2021-35042 +- https://github.com/vutiendat323/INT14107_CVE-2021-35042 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2021-35042 diff --git a/cves/2021/CVE-2021-35296.md b/cves/2021/CVE-2021-35296.md index 44ade342147..c7c019283b5 100644 --- a/cves/2021/CVE-2021-35296.md +++ b/cves/2021/CVE-2021-35296.md @@ -13,5 +13,5 @@ An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows - https://github.com/afaq1337/CVE-2021-35296 #### Github -No PoCs found on GitHub currently. +- https://github.com/afaq1337/CVE-2021-35296 diff --git a/cves/2021/CVE-2021-35448.md b/cves/2021/CVE-2021-35448.md index 01fb70feb89..918625ec891 100644 --- a/cves/2021/CVE-2021-35448.md +++ b/cves/2021/CVE-2021-35448.md @@ -13,7 +13,7 @@ Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbi - https://www.exploit-db.com/exploits/50047 #### Github -No PoCs found on GitHub currently. +- https://github.com/Goultarde/RemoteMouse-3.008-RCE #### ExploitDB - https://www.exploit-db.com/exploits/50047 diff --git a/cves/2021/CVE-2021-3560.md b/cves/2021/CVE-2021-3560.md index 89703edda12..805de703c51 100644 --- a/cves/2021/CVE-2021-3560.md +++ b/cves/2021/CVE-2021-3560.md @@ -58,6 +58,11 @@ It was found that polkit could be tricked into bypassing the credential checks f - https://github.com/swapravo/polkadots - https://github.com/titusG85/SideWinder-Exploit - https://github.com/tufanturhan/Polkit-Linux-Priv +- https://github.com/Jeanback1/CVE-2021-3560-exploit +- https://github.com/SeimuPVE/CVE-2021-3560_Polkit +- https://github.com/WithinOneStem/POC-Bash-CVE-2021-3560 +- https://github.com/adakoifman/CVE-2021-3560 +- https://github.com/yutasato88/CVE-2021-3560-PolkitPrivilegeEsclation #### ExploitDB - https://www.exploit-db.com/exploits/50011 diff --git a/cves/2021/CVE-2021-36260.md b/cves/2021/CVE-2021-36260.md index d09731f7d8b..6d132c9257a 100644 --- a/cves/2021/CVE-2021-36260.md +++ b/cves/2021/CVE-2021-36260.md @@ -31,6 +31,8 @@ A command injection vulnerability in the web server of some Hikvision product. D - https://github.com/readloud/PoC - https://github.com/s0duku/PocSelenium - https://github.com/tuntin9x/CheckHKRCE +- https://github.com/shubtheone/CVE-2021-36260-hikvision +- https://github.com/yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36260.yaml diff --git a/cves/2021/CVE-2021-36396.md b/cves/2021/CVE-2021-36396.md index 68dc5bf88d3..3b0724939cc 100644 --- a/cves/2021/CVE-2021-36396.md +++ b/cves/2021/CVE-2021-36396.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/T0X1Cx/CVE-2021-36396-Exploit +- https://github.com/T0X1Cx/CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit diff --git a/cves/2021/CVE-2021-36563.md b/cves/2021/CVE-2021-36563.md index 0c7b9d89625..dda03398321 100644 --- a/cves/2021/CVE-2021-36563.md +++ b/cves/2021/CVE-2021-36563.md @@ -13,5 +13,5 @@ The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise u - https://github.com/Edgarloyola/CVE-2021-36563 #### Github -No PoCs found on GitHub currently. +- https://github.com/Edgarloyola/CVE-2021-36563 diff --git a/cves/2021/CVE-2021-36981.md b/cves/2021/CVE-2021-36981.md index 7f6d24c604c..8cc280c0d59 100644 --- a/cves/2021/CVE-2021-36981.md +++ b/cves/2021/CVE-2021-36981.md @@ -13,5 +13,5 @@ In the server in SerNet verinice before 1.22.2, insecure Java deserialization al - https://github.com/0xBrAinsTorM/CVE-2021-36981 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xBrAinsTorM/CVE-2021-36981 diff --git a/cves/2021/CVE-2021-37740.md b/cves/2021/CVE-2021-37740.md index 0ad274e3cbf..a01a3d5ff1a 100644 --- a/cves/2021/CVE-2021-37740.md +++ b/cves/2021/CVE-2021-37740.md @@ -13,5 +13,5 @@ A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Sec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/robertguetzkow/CVE-2021-37740 diff --git a/cves/2021/CVE-2021-37910.md b/cves/2021/CVE-2021-37910.md index a22d02cc1d2..0649fcd605b 100644 --- a/cves/2021/CVE-2021-37910.md +++ b/cves/2021/CVE-2021-37910.md @@ -17,5 +17,5 @@ ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper co No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/efchatz/easy-exploits diff --git a/cves/2021/CVE-2021-38185.md b/cves/2021/CVE-2021-38185.md index 1d1078bcfd8..78b873a1508 100644 --- a/cves/2021/CVE-2021-38185.md +++ b/cves/2021/CVE-2021-38185.md @@ -13,5 +13,5 @@ GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted p - https://github.com/fangqyi/cpiopwn #### Github -No PoCs found on GitHub currently. +- https://github.com/fangqyi/cpiopwn diff --git a/cves/2021/CVE-2021-38699.md b/cves/2021/CVE-2021-38699.md index 2e6e0d94317..0db0f4968e9 100644 --- a/cves/2021/CVE-2021-38699.md +++ b/cves/2021/CVE-2021-38699.md @@ -16,4 +16,6 @@ TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and #### Github - https://github.com/Justin-1993/CVE-2021-38699 +- https://github.com/HuskyHacks/CVE-2021-38699-Reflected-XSS +- https://github.com/HuskyHacks/CVE-2021-38699-Stored-XSS diff --git a/cves/2021/CVE-2021-39312.md b/cves/2021/CVE-2021-39312.md index 40ec226814d..b9ea7d2dfef 100644 --- a/cves/2021/CVE-2021-39312.md +++ b/cves/2021/CVE-2021-39312.md @@ -13,7 +13,7 @@ The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including - http://packetstormsecurity.com/files/165434/WordPress-The-True-Ranker-2.2.2-Arbitrary-File-Read.html #### Github -No PoCs found on GitHub currently. +- https://github.com/root-wav/wordpress-true-ranker-cve-2021-39312 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39312.yaml diff --git a/cves/2021/CVE-2021-3975.md b/cves/2021/CVE-2021-3975.md index 841748d1c3c..d923a50e606 100644 --- a/cves/2021/CVE-2021-3975.md +++ b/cves/2021/CVE-2021-3975.md @@ -13,5 +13,5 @@ A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yan5ui/ENV-CVE-2021-3975 diff --git a/cves/2021/CVE-2021-4034.md b/cves/2021/CVE-2021-4034.md index bf212a3c898..77ba7ac7dff 100644 --- a/cves/2021/CVE-2021-4034.md +++ b/cves/2021/CVE-2021-4034.md @@ -218,9 +218,31 @@ A local privilege escalation vulnerability was found on polkit's pkexec utility. - https://github.com/zhzyker/CVE-2021-4034 - https://github.com/ziadsaleemi/polkit_CVE-2021-4034 - https://github.com/zxybfq/CVE-2021-4034 +- https://github.com/Abbykito/KERNELexploits +- https://github.com/Allu-mette/cve-2021-4034 +- https://github.com/B1gN0Se/PwnKit_CVE-2021-4034 +- https://github.com/Leemyunglyul/cve-2021-4034-mock +- https://github.com/Murguii/DEV-CVE-2021-4034 +- https://github.com/RakhithJK/CVE-2021-4034-new +- https://github.com/Z3R0space/CVE-2021-4034 +- https://github.com/cd80-ctf/CVE-2021-4034 +- https://github.com/jayhutajulu1/PwnKit-CVE-2021-4034 +- https://github.com/jscamposx/hack +- https://github.com/krleejihyeong/WHS4_CVE-2021-4034 +- https://github.com/mac3d0/CVE-2021-4034-pwnkit +- https://github.com/nicoibarburu/CVE-2021-4034 +- https://github.com/pombredanne/CVE-2021-4034 +- https://github.com/ramahmdr/PwnKit +- https://github.com/rusakalimantan/PwnKit-CVE-2021-4034 +- https://github.com/rvzsec/CVE-2021-4034 +- https://github.com/tachote/CVE-2021-4034 +- https://github.com/usmansec/-CVE-2021-4034 #### ExploitDB - https://www.exploit-db.com/exploits/50689 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/polkit/CVE-2021-4034 diff --git a/cves/2021/CVE-2021-40346.md b/cves/2021/CVE-2021-40346.md index 6e46ca3b49c..b8f2d712e2c 100644 --- a/cves/2021/CVE-2021-40346.md +++ b/cves/2021/CVE-2021-40346.md @@ -19,4 +19,5 @@ No PoCs from references. - https://github.com/donky16/CVE-2021-40346-POC - https://github.com/knqyf263/CVE-2021-40346 - https://github.com/rizemon/CS5331 +- https://github.com/jmg0929/CVE-2021-40346 diff --git a/cves/2021/CVE-2021-40438.md b/cves/2021/CVE-2021-40438.md index e482a2e1da5..2a84293b059 100644 --- a/cves/2021/CVE-2021-40438.md +++ b/cves/2021/CVE-2021-40438.md @@ -24,6 +24,10 @@ No PoCs from references. - https://github.com/sixpacksecurity/CVE-2021-40438 - https://github.com/vsh00t/BB-PoC - https://github.com/xiaojiangxl/CVE-2021-40438 +- https://github.com/n0m-d/CVE-2021-40438-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40438.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-40438 diff --git a/cves/2021/CVE-2021-40822.md b/cves/2021/CVE-2021-40822.md index 53eb62d76a8..d6405c50002 100644 --- a/cves/2021/CVE-2021-40822.md +++ b/cves/2021/CVE-2021-40822.md @@ -18,3 +18,6 @@ GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option fo #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40822.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2021-40822 diff --git a/cves/2021/CVE-2021-40845.md b/cves/2021/CVE-2021-40845.md index e7ed922f052..94c9263cbe8 100644 --- a/cves/2021/CVE-2021-40845.md +++ b/cves/2021/CVE-2021-40845.md @@ -16,5 +16,5 @@ The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called Alpha - https://ricardojoserf.github.io/CVE-2021-40845/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ricardojoserf/CVE-2021-40845 diff --git a/cves/2021/CVE-2021-40875.md b/cves/2021/CVE-2021-40875.md index 61dcd3d56fb..f08d036bdce 100644 --- a/cves/2021/CVE-2021-40875.md +++ b/cves/2021/CVE-2021-40875.md @@ -14,7 +14,7 @@ Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sen - https://github.com/SakuraSamuraii/derailed #### Github -No PoCs found on GitHub currently. +- https://github.com/SakuraSamuraii/derailed #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40875.yaml diff --git a/cves/2021/CVE-2021-40904.md b/cves/2021/CVE-2021-40904.md index 83363cd561a..37e5b74604a 100644 --- a/cves/2021/CVE-2021-40904.md +++ b/cves/2021/CVE-2021-40904.md @@ -13,5 +13,5 @@ The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allo - https://github.com/Edgarloyola/CVE-2021-40904 #### Github -No PoCs found on GitHub currently. +- https://github.com/Edgarloyola/CVE-2021-40904 diff --git a/cves/2021/CVE-2021-40906.md b/cves/2021/CVE-2021-40906.md index 17146e5d090..e28bdd61d02 100644 --- a/cves/2021/CVE-2021-40906.md +++ b/cves/2021/CVE-2021-40906.md @@ -13,5 +13,5 @@ CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the inp - https://github.com/Edgarloyola/CVE-2021-40906 #### Github -No PoCs found on GitHub currently. +- https://github.com/Edgarloyola/CVE-2021-40906 diff --git a/cves/2021/CVE-2021-40964.md b/cves/2021/CVE-2021-40964.md index cc31702817a..7bdecd3c983 100644 --- a/cves/2021/CVE-2021-40964.md +++ b/cves/2021/CVE-2021-40964.md @@ -14,6 +14,7 @@ A Path Traversal vulnerability exists in TinyFileManager all version up to and i #### Github - https://github.com/Z3R0-0x30/CVE-2021-40964 +- https://github.com/Z3R0space/CVE-2021-40964 #### ExploitDB - https://www.exploit-db.com/exploits/50828 diff --git a/cves/2021/CVE-2021-40978.md b/cves/2021/CVE-2021-40978.md index f668d530017..a7a0d4cb424 100644 --- a/cves/2021/CVE-2021-40978.md +++ b/cves/2021/CVE-2021-40978.md @@ -14,7 +14,7 @@ The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8 - https://github.com/nisdn/CVE-2021-40978/issues/1 #### Github -No PoCs found on GitHub currently. +- https://github.com/nisdn/CVE-2021-40978 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40978.yaml diff --git a/cves/2021/CVE-2021-41073.md b/cves/2021/CVE-2021-41073.md index 7097a17cc7c..8ae439d9364 100644 --- a/cves/2021/CVE-2021-41073.md +++ b/cves/2021/CVE-2021-41073.md @@ -15,4 +15,5 @@ loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows loc #### Github - https://github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073 - https://github.com/smallkirby/seccamp23c2-assets +- https://github.com/WhatsWrongAndWhy/CVE-2021-41073 diff --git a/cves/2021/CVE-2021-41277.md b/cves/2021/CVE-2021-41277.md index e4162b7671d..dc7f75f11b3 100644 --- a/cves/2021/CVE-2021-41277.md +++ b/cves/2021/CVE-2021-41277.md @@ -33,3 +33,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41277.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/metabase/CVE-2021-41277 diff --git a/cves/2021/CVE-2021-41773.md b/cves/2021/CVE-2021-41773.md index 56c7cf233cf..4569936551e 100644 --- a/cves/2021/CVE-2021-41773.md +++ b/cves/2021/CVE-2021-41773.md @@ -165,6 +165,30 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2. - https://github.com/zerodaywolf/CVE-2021-41773_42013 - https://github.com/zeronine9/CVE-2021-41773 - https://github.com/abdulrafay25-svg/CVE-2021-41773-Exploit +- https://github.com/Areeba-Zehra-Jafri/CVE-2021-41773---Apache-Path-Traversal---RCE +- https://github.com/AzkOsDev/CVE-2021-41773 +- https://github.com/DappaNISM/mass_cve-2021-41773 +- https://github.com/Emaar1x/CVE-2021-41773 +- https://github.com/ISabbiI/PoC-Apache-CVE-2021-41773-Infrastructure-LAB +- https://github.com/JKIM72403/CS4277-CVE-Path-Traversal-Apache-HTTP-Server +- https://github.com/Joapath/CVE-2021-41773 +- https://github.com/Nanxsec/exploitApache +- https://github.com/Park123r/CVE-2021-41773 +- https://github.com/SANR01/CVE-2021-41773-Exploit-Lab +- https://github.com/Shams-Ul-Mehmood/CVE-2021-41773-Exploit +- https://github.com/a24ac1/CVE-2021-41773-PoC +- https://github.com/abds059/APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773- +- https://github.com/adrianmafandy/CVE-2021-41773 +- https://github.com/dserdyk3-arch/Serdyuk-DO-homework-CVE-2021-41773 +- https://github.com/fxdyx-a/CVE-2021-41773-POC +- https://github.com/gagaltotal/CVE-2021-41773-apache +- https://github.com/gunzf0x/CVE-2021-41773 +- https://github.com/im2sinister/CVE-2021-41773 +- https://github.com/johnwickakash12/CVE-2021-41773 +- https://github.com/lheeeesoo/Apache-CVE-2021-41773 +- https://github.com/sobanahmed6061/CVE-2021-41773-RedTeam +- https://github.com/sudo0xksh/cve-2021-41773-checker +- https://github.com/zubairahm3d/apache-cve-2021-41773-lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41773.yaml @@ -175,3 +199,6 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_normalize_path_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-41773 diff --git a/cves/2021/CVE-2021-42008.md b/cves/2021/CVE-2021-42008.md index 2a2c6a6cb06..67d003c6cc3 100644 --- a/cves/2021/CVE-2021-42008.md +++ b/cves/2021/CVE-2021-42008.md @@ -16,4 +16,5 @@ The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel bef #### Github - https://github.com/0xdevil/CVE-2021-42008 - https://github.com/numanturle/CVE-2021-42008 +- https://github.com/WhatsWrongAndWhy/CVE-2021-42008 diff --git a/cves/2021/CVE-2021-42013.md b/cves/2021/CVE-2021-42013.md index d37cbbaf54a..2c40d972a4b 100644 --- a/cves/2021/CVE-2021-42013.md +++ b/cves/2021/CVE-2021-42013.md @@ -63,6 +63,12 @@ It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was in - https://github.com/vudala/CVE-2021-42013 - https://github.com/walnutsecurity/cve-2021-42013 - https://github.com/xMohamed0/CVE-2021-42013-ApacheRCE +- https://github.com/FakhriCRD/Apache-CVE-2021-42013-RCE-Exploit +- https://github.com/Joapath/CVE-2021-42013 +- https://github.com/andreamammano89-maker/CVE-2021-42013_821311 +- https://github.com/eunho87/CVE-2021-42013 +- https://github.com/ranasen-rat/cve-2021-42013 +- https://github.com/zeynepglygt/apache-cve-2021-42013-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42013.yaml @@ -74,3 +80,6 @@ It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was in #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_normalize_path_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-42013 diff --git a/cves/2021/CVE-2021-42278.md b/cves/2021/CVE-2021-42278.md index 14a3cb240ea..bf3a6d02945 100644 --- a/cves/2021/CVE-2021-42278.md +++ b/cves/2021/CVE-2021-42278.md @@ -40,4 +40,5 @@ No PoCs from references. - https://github.com/puckiestyle/sam-the-admin - https://github.com/safebuffer/sam-the-admin - https://github.com/tufanturhan/sam-the-admin +- https://github.com/xLTJ/noPac diff --git a/cves/2021/CVE-2021-42342.md b/cves/2021/CVE-2021-42342.md index 81f754d9aa4..98aec2bf13f 100644 --- a/cves/2021/CVE-2021-42342.md +++ b/cves/2021/CVE-2021-42342.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/Mr-xn/CVE-2021-42342 - https://github.com/kimusan/goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342- +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/goahead/CVE-2021-42342 diff --git a/cves/2021/CVE-2021-42392.md b/cves/2021/CVE-2021-42392.md index 057f5a4bb39..a2ce3faaf2b 100644 --- a/cves/2021/CVE-2021-42392.md +++ b/cves/2021/CVE-2021-42392.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github - https://github.com/Be-Innova/CVE-2021-42392-exploit-lab +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/h2database/CVE-2021-42392 diff --git a/cves/2021/CVE-2021-43008.md b/cves/2021/CVE-2021-43008.md index 262372f5b73..05c6a7dd5f4 100644 --- a/cves/2021/CVE-2021-43008.md +++ b/cves/2021/CVE-2021-43008.md @@ -15,4 +15,7 @@ No PoCs from references. #### Github - https://github.com/p0dalirius/CVE-2021-43008-AdminerRead - https://github.com/tung6192/llm-security-hackathon +- https://github.com/DaturaSaturated/Adminer-CVE-2021-43008 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/adminer/CVE-2021-43008 diff --git a/cves/2021/CVE-2021-43032.md b/cves/2021/CVE-2021-43032.md index 9985130be65..3ce90364142 100644 --- a/cves/2021/CVE-2021-43032.md +++ b/cves/2021/CVE-2021-43032.md @@ -13,5 +13,5 @@ In XenForo through 2.2.7, a threat actor with access to the admin panel can crea - https://github.com/SakuraSamuraii/CVE-2021-43032 #### Github -No PoCs found on GitHub currently. +- https://github.com/SakuraSamuraii/CVE-2021-43032 diff --git a/cves/2021/CVE-2021-43129.md b/cves/2021/CVE-2021-43129.md index 731c125a5a3..7574bcfc675 100644 --- a/cves/2021/CVE-2021-43129.md +++ b/cves/2021/CVE-2021-43129.md @@ -13,5 +13,5 @@ A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” o - https://github.com/Skotizo/CVE-2021-43129 #### Github -No PoCs found on GitHub currently. +- https://github.com/Skotizo/CVE-2021-43129 diff --git a/cves/2021/CVE-2021-43609.md b/cves/2021/CVE-2021-43609.md index dc8d1bb2d1f..ad60a23c9f4 100644 --- a/cves/2021/CVE-2021-43609.md +++ b/cves/2021/CVE-2021-43609.md @@ -14,5 +14,5 @@ An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boo - https://www.linkedin.com/pulse/cve-2021-43609-write-up-division5-security-4lgwe #### Github -No PoCs found on GitHub currently. +- https://github.com/d5sec/CVE-2021-43609-POC diff --git a/cves/2021/CVE-2021-43798.md b/cves/2021/CVE-2021-43798.md index 647c3d21e9a..bb3f6338339 100644 --- a/cves/2021/CVE-2021-43798.md +++ b/cves/2021/CVE-2021-43798.md @@ -74,6 +74,13 @@ Grafana is an open-source platform for monitoring and observability. Grafana ver - https://github.com/yasindce1998/grafana-cve-2021-43798 - https://github.com/z3n70/CVE-2021-43798 - https://github.com/zer0yu/CVE-2021-43798 +- https://github.com/0xf3d0rq/CVE-2021-43798 +- https://github.com/Asbawy/GrafTraverse-CVE-2021-43798 +- https://github.com/Okymi-X/CVE-2021-43798 +- https://github.com/Shoxake17/CVE-2021-43798 +- https://github.com/baktistr/cve-2021-43798-enum +- https://github.com/davidrxchester/Grafana-8.3-Directory-Traversal +- https://github.com/kikechans/-Grafana-LFI-CVE-2021-43798 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43798.yaml @@ -83,3 +90,6 @@ Grafana is an open-source platform for monitoring and observability. Grafana ver #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/grafana_plugin_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2021-43798 diff --git a/cves/2021/CVE-2021-44026.md b/cves/2021/CVE-2021-44026.md index b5548244680..fc7f5a7b874 100644 --- a/cves/2021/CVE-2021-44026.md +++ b/cves/2021/CVE-2021-44026.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/skyllpro/CVE-2021-44026-PoC +- https://github.com/shanglyu/roundcube-cve-2021-44026 diff --git a/cves/2021/CVE-2021-44228.md b/cves/2021/CVE-2021-44228.md index f41bcd81793..c48523c3788 100644 --- a/cves/2021/CVE-2021-44228.md +++ b/cves/2021/CVE-2021-44228.md @@ -447,6 +447,22 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/zlepper/CVE-2021-44228-Test-Server - https://github.com/zsolt-halo/Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service - https://github.com/zzzz0317/log4j2-vulnerable-spring-app +- https://github.com/0xBlackash/CVE-2021-44228 +- https://github.com/Codepumpking/log4shell-poc +- https://github.com/FacundoMfernandez/pentesting-obioba +- https://github.com/Jiahong-Guan/log4j-shell-poc +- https://github.com/JoseMariaMicoli/Log4Shell-PoC +- https://github.com/Mintimate/log4j2-bugmaker +- https://github.com/Ricardo354/homelab-CVE-2021-44228 +- https://github.com/arabindadora/log4shell +- https://github.com/demining/Log4j-Vulnerability +- https://github.com/hmxh123/Log4Shell-Vulnerability-Replication +- https://github.com/horrister/log4shell-cve-2021-44228 +- https://github.com/joaovicdev/EXPLOIT-CVE-2021-44228 +- https://github.com/kaleth4/CVE-2021-44228 +- https://github.com/mrlnstk/cve-2021-44228-minecraft-poc +- https://github.com/razureink/cve-2021-44228-log4shell_rce_reproduction +- https://github.com/vutiendat323/CVE-2021-44228_Log4Shell #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml @@ -461,3 +477,6 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/log4shell_header_injection.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ubiquiti_unifi_log4shell.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vmware_vcenter_log4shell.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/log4j/CVE-2021-44228 diff --git a/cves/2021/CVE-2021-44790.md b/cves/2021/CVE-2021-44790.md index 8468116ee2b..a82d448aa77 100644 --- a/cves/2021/CVE-2021-44790.md +++ b/cves/2021/CVE-2021-44790.md @@ -14,6 +14,7 @@ A carefully crafted request body can cause a buffer overflow in the mod_lua mult #### Github - https://github.com/nuPacaChi/-CVE-2021-44790 +- https://github.com/CerberusMrXi/Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790 #### ExploitDB - https://www.exploit-db.com/exploits/51193 diff --git a/cves/2021/CVE-2021-44967.md b/cves/2021/CVE-2021-44967.md index 435833b6c7f..60308fc93c9 100644 --- a/cves/2021/CVE-2021-44967.md +++ b/cves/2021/CVE-2021-44967.md @@ -17,4 +17,5 @@ A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the up - https://github.com/D3Ext/CVE-2021-44967 - https://github.com/godylockz/CVE-2021-44967 - https://github.com/monke443/CVE-2021-44967 +- https://github.com/kikechans/-Limesurvey-RCE-CVE-2021-44967 diff --git a/cves/2021/CVE-2021-45041.md b/cves/2021/CVE-2021-45041.md index d6b3124d685..77846bfc1d8 100644 --- a/cves/2021/CVE-2021-45041.md +++ b/cves/2021/CVE-2021-45041.md @@ -13,5 +13,5 @@ SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection v - https://github.com/manuelz120/CVE-2021-45041 #### Github -No PoCs found on GitHub currently. +- https://github.com/manuelz120/CVE-2021-45041 diff --git a/cves/2021/CVE-2021-45232.md b/cves/2021/CVE-2021-45232.md index d76bc63b505..154907491ff 100644 --- a/cves/2021/CVE-2021-45232.md +++ b/cves/2021/CVE-2021-45232.md @@ -29,3 +29,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45232.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apisix/CVE-2021-45232 diff --git a/cves/2021/CVE-2021-45416.md b/cves/2021/CVE-2021-45416.md index 3161890cac5..4c07d15c526 100644 --- a/cves/2021/CVE-2021-45416.md +++ b/cves/2021/CVE-2021-45416.md @@ -14,4 +14,5 @@ Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows at #### Github - https://github.com/dnr6419/CVE-2021-45416 +- https://github.com/86x/CVE-2021-45416 diff --git a/cves/2021/CVE-2021-45744.md b/cves/2021/CVE-2021-45744.md index 0929af07bf7..8efda19726d 100644 --- a/cves/2021/CVE-2021-45744.md +++ b/cves/2021/CVE-2021-45744.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS - https://github.com/plsanu/CVE-2021-45744 +- https://github.com/sanupl/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-45744 diff --git a/cves/2021/CVE-2021-45745.md b/cves/2021/CVE-2021-45745.md index 42af8920fb7..de7a070f948 100644 --- a/cves/2021/CVE-2021-45745.md +++ b/cves/2021/CVE-2021-45745.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS - https://github.com/plsanu/CVE-2021-45745 +- https://github.com/sanupl/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-45745 diff --git a/cves/2021/CVE-2021-45788.md b/cves/2021/CVE-2021-45788.md index 756467b6821..5be03fe9c0f 100644 --- a/cves/2021/CVE-2021-45788.md +++ b/cves/2021/CVE-2021-45788.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/metersphere/CVE-2021-45788 diff --git a/cves/2021/CVE-2021-45897.md b/cves/2021/CVE-2021-45897.md index e49ef17e433..58e4aab3626 100644 --- a/cves/2021/CVE-2021-45897.md +++ b/cves/2021/CVE-2021-45897.md @@ -13,5 +13,5 @@ SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. - https://github.com/manuelz120/CVE-2021-45897 #### Github -No PoCs found on GitHub currently. +- https://github.com/manuelz120/CVE-2021-45897 diff --git a/cves/2021/CVE-2021-46067.md b/cves/2021/CVE-2021-46067.md index 05b25eff928..6b360824c04 100644 --- a/cves/2021/CVE-2021-46067.md +++ b/cves/2021/CVE-2021-46067.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46067 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover +- https://github.com/sanupl/CVE-2021-46067 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover diff --git a/cves/2021/CVE-2021-46068.md b/cves/2021/CVE-2021-46068.md index b8ad140e850..0916e4436af 100644 --- a/cves/2021/CVE-2021-46068.md +++ b/cves/2021/CVE-2021-46068.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46068 - https://github.com/plsanu/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-46068 +- https://github.com/sanupl/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46068.yaml diff --git a/cves/2021/CVE-2021-46070.md b/cves/2021/CVE-2021-46070.md index ada190a1dd5..e7c3e24edba 100644 --- a/cves/2021/CVE-2021-46070.md +++ b/cves/2021/CVE-2021-46070.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46070 - https://github.com/plsanu/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-46070 +- https://github.com/sanupl/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS diff --git a/cves/2021/CVE-2021-46074.md b/cves/2021/CVE-2021-46074.md index 92929338a06..e6770f217c6 100644 --- a/cves/2021/CVE-2021-46074.md +++ b/cves/2021/CVE-2021-46074.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46074 - https://github.com/plsanu/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-46074 +- https://github.com/sanupl/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS diff --git a/cves/2021/CVE-2021-46076.md b/cves/2021/CVE-2021-46076.md index b1227a05e7f..f935e5f1ccc 100644 --- a/cves/2021/CVE-2021-46076.md +++ b/cves/2021/CVE-2021-46076.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46076 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution +- https://github.com/sanupl/CVE-2021-46076 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution diff --git a/cves/2021/CVE-2021-46078.md b/cves/2021/CVE-2021-46078.md index e2d3fca7b19..94c3565f440 100644 --- a/cves/2021/CVE-2021-46078.md +++ b/cves/2021/CVE-2021-46078.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46078 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting +- https://github.com/sanupl/CVE-2021-46078 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting diff --git a/cves/2021/CVE-2021-46079.md b/cves/2021/CVE-2021-46079.md index 8bbc6618a53..e98e754b658 100644 --- a/cves/2021/CVE-2021-46079.md +++ b/cves/2021/CVE-2021-46079.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46079 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection +- https://github.com/sanupl/CVE-2021-46079 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection diff --git a/cves/2021/CVE-2021-46080.md b/cves/2021/CVE-2021-46080.md index 787481ed32b..4088bcb499d 100644 --- a/cves/2021/CVE-2021-46080.md +++ b/cves/2021/CVE-2021-46080.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46080 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS +- https://github.com/sanupl/CVE-2021-46080 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS diff --git a/cves/2022/CVE-2022-0185.md b/cves/2022/CVE-2022-0185.md index 0d96df9baa3..fbbce3e89ef 100644 --- a/cves/2022/CVE-2022-0185.md +++ b/cves/2022/CVE-2022-0185.md @@ -22,4 +22,7 @@ A heap-based buffer overflow flaw was found in the way the legacy_parse_param fu - https://github.com/featherL/CVE-2022-0185-exploit - https://github.com/khaclep007/CVE-2022-0185 - https://github.com/veritas501/CVE-2022-0185-PipeVersion +- https://github.com/prabeershakya/CVE-2022-0185-POC +- https://github.com/sandesh9978/CVE-2022-0185-Analysis-and-Exploit +- https://github.com/shakyanayann/CVE-2022-0185 diff --git a/cves/2022/CVE-2022-0236.md b/cves/2022/CVE-2022-0236.md index a5e5c553b9c..9331141ebfd 100644 --- a/cves/2022/CVE-2022-0236.md +++ b/cves/2022/CVE-2022-0236.md @@ -14,4 +14,4 @@ The WP Import Export WordPress plugin (both free and premium versions) is vulner - https://github.com/qurbat/CVE-2022-0236 #### Github -No PoCs found on GitHub currently. +- https://github.com/qurbat/CVE-2022-0236 diff --git a/cves/2022/CVE-2022-0435.md b/cves/2022/CVE-2022-0435.md index 20f2061715c..237b9938a1b 100644 --- a/cves/2022/CVE-2022-0435.md +++ b/cves/2022/CVE-2022-0435.md @@ -14,4 +14,6 @@ No PoCs from references. #### Github - https://github.com/wlswotmd/CVE-2022-0435 +- https://github.com/Spydomain/CVE-2022-0435-Poc +- https://github.com/sandesh9978/CVE-2022-0435 diff --git a/cves/2022/CVE-2022-0441.md b/cves/2022/CVE-2022-0441.md index 44d0e20fff4..6a3526a8f5c 100644 --- a/cves/2022/CVE-2022-0441.md +++ b/cves/2022/CVE-2022-0441.md @@ -17,6 +17,7 @@ The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some paramete - https://github.com/biulove0x/CVE-2022-0441 - https://github.com/kyukazamiqq/CVE-2022-0441 - https://github.com/tegal1337/CVE-2022-0441 +- https://github.com/DappaNISM/CVE-2022-0441 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0441.yaml diff --git a/cves/2022/CVE-2022-0529.md b/cves/2022/CVE-2022-0529.md index b45f23ccb08..416f8982578 100644 --- a/cves/2022/CVE-2022-0529.md +++ b/cves/2022/CVE-2022-0529.md @@ -15,4 +15,5 @@ A flaw was found in Unzip. The vulnerability occurs during the conversion of a w #### Github - https://github.com/nanaao/unzip_poc +- https://github.com/ByteHackr/unzip_poc diff --git a/cves/2022/CVE-2022-0543.md b/cves/2022/CVE-2022-0543.md index d2585b78873..67cad7108ea 100644 --- a/cves/2022/CVE-2022-0543.md +++ b/cves/2022/CVE-2022-0543.md @@ -18,9 +18,14 @@ It was discovered, that redis, a persistent key-value database, due to a packagi - https://github.com/0x7eTeam/CVE-2022-0543 - https://github.com/aodsec/CVE-2022-0543 - https://github.com/z92g/CVE-2022-0543 +- https://github.com/K3ysTr0K3R/CVE-2022-0543 +- https://github.com/OpsCipher/CVE-2022-0543 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-0543.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/redis/redis_debian_sandbox_escape.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/redis/CVE-2022-0543 diff --git a/cves/2022/CVE-2022-0739.md b/cves/2022/CVE-2022-0739.md index 3767715cb5d..d4757693645 100644 --- a/cves/2022/CVE-2022-0739.md +++ b/cves/2022/CVE-2022-0739.md @@ -21,6 +21,7 @@ The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user - https://github.com/destr4ct/CVE-2022-0739 - https://github.com/lhamouche/Bash-exploit-for-CVE-2022-0739 - https://github.com/viardant/CVE-2022-0739 +- https://github.com/Manjen1218/CVE-2022-0739-Exploitation #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb diff --git a/cves/2022/CVE-2022-0778.md b/cves/2022/CVE-2022-0778.md index b92a14dfb4c..7881d80907d 100644 --- a/cves/2022/CVE-2022-0778.md +++ b/cves/2022/CVE-2022-0778.md @@ -22,3 +22,5 @@ The BN_mod_sqrt() function, which computes a modular square root, contains a bug - https://github.com/jkakavas/CVE-2022-0778-POC - https://github.com/yywing/cve-2022-0778 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2022-0778 diff --git a/cves/2022/CVE-2022-0847.md b/cves/2022/CVE-2022-0847.md index 8d051d86537..b841e1ac05a 100644 --- a/cves/2022/CVE-2022-0847.md +++ b/cves/2022/CVE-2022-0847.md @@ -144,6 +144,12 @@ A flaw was found in the way the "flags" member of the new pipe buffer structure - https://github.com/xndpxs/CVE-2022-0847 - https://github.com/xsxtw/CVE-2022-0847 - https://github.com/yoeelingBin/CVE-2022-0847-Container-Escape +- https://github.com/SimoesCTT/Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847 +- https://github.com/aswanepo/DirtyPipe +- https://github.com/bluedragonsecurity/Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug- +- https://github.com/stfnw/reproducer-poc-CVE-2022-0847 +- https://github.com/t1ckprivate/CVE-2022-0847-Dirty-Pipe +- https://github.com/xiaoLvChen/CVE-2022-0847 #### ExploitDB - https://www.exploit-db.com/exploits/50808 diff --git a/cves/2022/CVE-2022-0944.md b/cves/2022/CVE-2022-0944.md index c255ab69e88..f3fd4a108ab 100644 --- a/cves/2022/CVE-2022-0944.md +++ b/cves/2022/CVE-2022-0944.md @@ -23,4 +23,5 @@ Template injection in connection test endpoint leads to RCE in GitHub repository - https://github.com/Robocopsita/CVE-2022-0944_RCE_POC - https://github.com/shhrew/CVE-2022-0944 - https://github.com/toneillcodes/CVE-2022-0944 +- https://github.com/NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944 diff --git a/cves/2022/CVE-2022-1026.md b/cves/2022/CVE-2022-1026.md index 9831fbdba93..de3fbeca78a 100644 --- a/cves/2022/CVE-2022-1026.md +++ b/cves/2022/CVE-2022-1026.md @@ -16,6 +16,8 @@ Kyocera multifunction printers running vulnerable versions of Net View unintenti - https://github.com/ac3lives/kyocera-cve-2022-1026 - https://github.com/flamebarke/nmap-printer-nse-scripts - https://github.com/r0lh/kygocera +- https://github.com/D4RKMATT3R/KyoceraCredsDump +- https://github.com/h4po0n/kyocera-cve-2022-1026_SOAP1.1 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml diff --git a/cves/2022/CVE-2022-1364.md b/cves/2022/CVE-2022-1364.md index e367cbe6ac2..4f20617e4ef 100644 --- a/cves/2022/CVE-2022-1364.md +++ b/cves/2022/CVE-2022-1364.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/A1Lin/cve-2022-1364 +- https://github.com/interruptlabs/uc_browser_poc_CVE-2022-1364 diff --git a/cves/2022/CVE-2022-1386.md b/cves/2022/CVE-2022-1386.md index 6b1c3f570dd..bd8b81ab0f2 100644 --- a/cves/2022/CVE-2022-1386.md +++ b/cves/2022/CVE-2022-1386.md @@ -20,6 +20,7 @@ The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does - https://github.com/ptrgits/CVE-2022-1386 - https://github.com/satyasai1460/CVE-2022-1386 - https://github.com/zycoder0day/CVE-2022-1386-Mass_Vulnerability +- https://github.com/kreeksec/CVE-2022-1386 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1386.yaml diff --git a/cves/2022/CVE-2022-1388.md b/cves/2022/CVE-2022-1388.md index 1d665674971..d12ac2d92d0 100644 --- a/cves/2022/CVE-2022-1388.md +++ b/cves/2022/CVE-2022-1388.md @@ -96,6 +96,7 @@ On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5. - https://github.com/vesperp/CVE-2022-1388-F5-BIG-IP- - https://github.com/west9b/F5-BIG-IP-POC - https://github.com/yukar1z0e/CVE-2022-1388 +- https://github.com/alt3kx/CVE-2022-1388_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1388.yaml diff --git a/cves/2022/CVE-2022-1471.md b/cves/2022/CVE-2022-1471.md index 5004d06eca5..a848e4e6c7a 100644 --- a/cves/2022/CVE-2022-1471.md +++ b/cves/2022/CVE-2022-1471.md @@ -17,6 +17,10 @@ SnakeYaml's Constructor() class does not restrict types which can be instantiate - https://github.com/1fabunicorn/SnakeYAML-CVE-2022-1471-POC - https://github.com/Franky-Lim24/snakeyaml_cve_poc - https://github.com/falconkei/snakeyaml_cve_poc +- https://github.com/seal-sean-org/seans-surf-and-skate +- https://github.com/seal-sean-org/yaml-payload +- https://github.com/seal-sec-demo-2/Java-Example +- https://github.com/seal-sec-demo-2/yaml-payload #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/torchserver_cve_2023_43654.rb diff --git a/cves/2022/CVE-2022-1609.md b/cves/2022/CVE-2022-1609.md index b439749f6d0..2c01783d34b 100644 --- a/cves/2022/CVE-2022-1609.md +++ b/cves/2022/CVE-2022-1609.md @@ -22,6 +22,7 @@ The School Management WordPress plugin before 9.9.7 contains an obfuscated backd - https://github.com/savior-only/CVE-2022-1609 - https://github.com/tuxsyscall/cve-2022-1609-exploit - https://github.com/w4r3s/cve-2022-1609-exploit +- https://github.com/itworksig/cve-2022-1609-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1609.yaml diff --git a/cves/2022/CVE-2022-20223.md b/cves/2022/CVE-2022-20223.md index 03049e1db6f..237d196dbed 100644 --- a/cves/2022/CVE-2022-20223.md +++ b/cves/2022/CVE-2022-20223.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/xbee9/cve-2022-20223 +- https://github.com/dsp-security-workflows/cve-2022-20223 diff --git a/cves/2022/CVE-2022-20829.md b/cves/2022/CVE-2022-20829.md index 1a4c0f57b87..5d1cffa2305 100644 --- a/cves/2022/CVE-2022-20829.md +++ b/cves/2022/CVE-2022-20829.md @@ -13,5 +13,5 @@ A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM - https://github.com/jbaines-r7/theway #### Github -No PoCs found on GitHub currently. +- https://github.com/jbaines-r7/theway diff --git a/cves/2022/CVE-2022-21241.md b/cves/2022/CVE-2022-21241.md index 6cab568a4dd..955f8528152 100644 --- a/cves/2022/CVE-2022-21241.md +++ b/cves/2022/CVE-2022-21241.md @@ -13,5 +13,5 @@ Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauth No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/nanaao/csv-plus_vulnerability diff --git a/cves/2022/CVE-2022-21445.md b/cves/2022/CVE-2022-21445.md index fa49ba456b2..2145d3761cb 100644 --- a/cves/2022/CVE-2022-21445.md +++ b/cves/2022/CVE-2022-21445.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/hienkiet/CVE-2022-21445-for-12.2.1.3.0-Weblogic +- https://github.com/NeCr00/CVE-2022-21445 #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder1/CVE-2022-21445.yaml diff --git a/cves/2022/CVE-2022-22536.md b/cves/2022/CVE-2022-22536.md index 665a705f5ce..82a6d119213 100644 --- a/cves/2022/CVE-2022-22536.md +++ b/cves/2022/CVE-2022-22536.md @@ -34,6 +34,7 @@ SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, AB - https://github.com/asurti6783/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 - https://github.com/tes5hacks/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 - https://github.com/tess-ss/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 +- https://github.com/abrewer251/CVE-2022-22536_SAP_Request_Smuggling_Scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22536.yaml diff --git a/cves/2022/CVE-2022-22706.md b/cves/2022/CVE-2022-22706.md index d11d21fc0ac..5a01337a930 100644 --- a/cves/2022/CVE-2022-22706.md +++ b/cves/2022/CVE-2022-22706.md @@ -16,4 +16,5 @@ Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access #### Github - https://github.com/assad12341/Kernel-Exploitation-Techniques- +- https://github.com/byt3quester/CVE-2022-22706-poc diff --git a/cves/2022/CVE-2022-22909.md b/cves/2022/CVE-2022-22909.md index a6197511611..9bddb3852c3 100644 --- a/cves/2022/CVE-2022-22909.md +++ b/cves/2022/CVE-2022-22909.md @@ -14,6 +14,7 @@ HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulner #### Github - https://github.com/kaal18/CVE-2022-22909 +- https://github.com/0z09e/CVE-2022-22909 #### ExploitDB - https://www.exploit-db.com/exploits/50754 diff --git a/cves/2022/CVE-2022-22947.md b/cves/2022/CVE-2022-22947.md index 8079d8c8738..856ce62617f 100644 --- a/cves/2022/CVE-2022-22947.md +++ b/cves/2022/CVE-2022-22947.md @@ -90,6 +90,8 @@ In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are v - https://github.com/viemsr/spring_cloud_gateway_memshell - https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell - https://github.com/wjl110/Spring_CVE_2022_22947 +- https://github.com/MoCh3n/CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE +- https://github.com/entr0pie/demo-cve-2022-22947 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22947.yaml @@ -99,3 +101,6 @@ In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are v #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/spring_cloud_gateway_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22947 diff --git a/cves/2022/CVE-2022-22954.md b/cves/2022/CVE-2022-22954.md index 4596a1ff648..9a80587aaaf 100644 --- a/cves/2022/CVE-2022-22954.md +++ b/cves/2022/CVE-2022-22954.md @@ -44,6 +44,7 @@ VMware Workspace ONE Access and Identity Manager contain a remote code execution - https://github.com/tunelko/CVE-2022-22954-PoC - https://github.com/tyleraharrison/VMware-CVE-2022-22954-Command-Injector - https://github.com/zidanfanshao/vcenter_tools +- https://github.com/nieldk/VMware-CVE-2022-22954 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22954.yaml diff --git a/cves/2022/CVE-2022-22963.md b/cves/2022/CVE-2022-22963.md index 24c92bfa19a..c3dc0b0ece7 100644 --- a/cves/2022/CVE-2022-22963.md +++ b/cves/2022/CVE-2022-22963.md @@ -47,6 +47,9 @@ In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, w - https://github.com/randallbanner/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE - https://github.com/sinjap/spring4shell - https://github.com/twseptian/cve-2022-22963 +- https://github.com/808rsec/CVE-2022-22963 +- https://github.com/r4y-br/CVE-2022-22963 +- https://github.com/xmqaq/CVE-2022-22963 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22963.yaml @@ -56,3 +59,6 @@ In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, w #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spring_cloud_function_spel_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22963 diff --git a/cves/2022/CVE-2022-22965.md b/cves/2022/CVE-2022-22965.md index cdb0a14fb74..65df8bfda6b 100644 --- a/cves/2022/CVE-2022-22965.md +++ b/cves/2022/CVE-2022-22965.md @@ -119,9 +119,17 @@ A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable t - https://github.com/xsxtw/SpringFramework_CVE-2022-22965_RCE - https://github.com/zangcc/CVE-2022-22965-rexbb - https://github.com/zer0yu/CVE-2022-22965 +- https://github.com/0xBlackash/CVE-2022-22965 +- https://github.com/Kuri119/CVE-2022-22965-Spring4Shell +- https://github.com/PrinceH4k/Spring4Shell-POC +- https://github.com/march0n/PoC-CVE-2022-22965-Spring4Shell +- https://github.com/nhattanhh/CVE-2022-22965 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22965.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spring_framework_rce_spring4shell.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22965 diff --git a/cves/2022/CVE-2022-22978.md b/cves/2022/CVE-2022-22978.md index 00230d26d46..6b1fca3556e 100644 --- a/cves/2022/CVE-2022-22978.md +++ b/cves/2022/CVE-2022-22978.md @@ -21,3 +21,5 @@ No PoCs from references. - https://github.com/umakant76705/CVE-2022-22978 - https://github.com/wan9xx/CVE-2022-22978-demo +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22978 diff --git a/cves/2022/CVE-2022-22980.md b/cves/2022/CVE-2022-22980.md index da8cd7f1855..cfc7f3c7872 100644 --- a/cves/2022/CVE-2022-22980.md +++ b/cves/2022/CVE-2022-22980.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/jweny/cve-2022-22980-exp - https://github.com/murataydemir/CVE-2022-22980 - https://github.com/trganda/CVE-2022-22980 +- https://github.com/Eliasdekiniweek/CVE-2022-22980 diff --git a/cves/2022/CVE-2022-23093.md b/cves/2022/CVE-2022-23093.md index bc01796e866..be55df686e7 100644 --- a/cves/2022/CVE-2022-23093.md +++ b/cves/2022/CVE-2022-23093.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/Symbolexe/DrayTek-Exploit +- https://github.com/sh4den/CVE-2022-23093 diff --git a/cves/2022/CVE-2022-23221.md b/cves/2022/CVE-2022-23221.md index 5436a7dd38f..b541e5b2633 100644 --- a/cves/2022/CVE-2022-23221.md +++ b/cves/2022/CVE-2022-23221.md @@ -15,4 +15,7 @@ H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via #### Github - https://github.com/hktalent/exploit-poc +- https://github.com/straightSang/H2-database-CVE-2022-23221 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/h2database/CVE-2022-23221 diff --git a/cves/2022/CVE-2022-23378.md b/cves/2022/CVE-2022-23378.md index adc65b5048c..b8c55d7c20a 100644 --- a/cves/2022/CVE-2022-23378.md +++ b/cves/2022/CVE-2022-23378.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of Ta - https://github.com/TheGetch/CVE-2022-23378 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheGetch/CVE-2022-23378 diff --git a/cves/2022/CVE-2022-23529.md b/cves/2022/CVE-2022-23529.md index 35cd3e22811..498a5d5ac04 100644 --- a/cves/2022/CVE-2022-23529.md +++ b/cves/2022/CVE-2022-23529.md @@ -13,5 +13,5 @@ - https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3 #### Github -No PoCs found on GitHub currently. +- https://github.com/daniel-marchi/CVE-2022-23529-Exploration diff --git a/cves/2022/CVE-2022-23779.md b/cves/2022/CVE-2022-23779.md index fe94d5369f9..e294c373cd8 100644 --- a/cves/2022/CVE-2022-23779.md +++ b/cves/2022/CVE-2022-23779.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/Vulnmachines/Zoho_CVE-2022-23779 - https://github.com/fbusr/CVE-2022-23779 +- https://github.com/Rishi-kaul/CVE-2022-23779 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23779.yaml diff --git a/cves/2022/CVE-2022-23861.md b/cves/2022/CVE-2022-23861.md index 10c1c344456..0c4169fefd1 100644 --- a/cves/2022/CVE-2022-23861.md +++ b/cves/2022/CVE-2022-23861.md @@ -15,5 +15,5 @@ Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft S - https://github.com/mbadanoiu/CVE-2022-23861/blob/main/SafeQ%20-%20CVE-2022-23861.pdf #### Github -No PoCs found on GitHub currently. +- https://github.com/mbadanoiu/CVE-2022-23861 diff --git a/cves/2022/CVE-2022-23862.md b/cves/2022/CVE-2022-23862.md index 0e711262874..86daef2cba4 100644 --- a/cves/2022/CVE-2022-23862.md +++ b/cves/2022/CVE-2022-23862.md @@ -15,5 +15,5 @@ A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. Th - https://github.com/mbadanoiu/CVE-2022-23862/blob/main/SafeQ%20-%20CVE-2022-23862.pdf #### Github -No PoCs found on GitHub currently. +- https://github.com/mbadanoiu/CVE-2022-23862 diff --git a/cves/2022/CVE-2022-23967.md b/cves/2022/CVE-2022-23967.md index b532f56674f..04225fc210c 100644 --- a/cves/2022/CVE-2022-23967.md +++ b/cves/2022/CVE-2022-23967.md @@ -13,5 +13,5 @@ - https://github.com/MaherAzzouzi/CVE-2022-23967 #### Github -No PoCs found on GitHub currently. +- https://github.com/MaherAzzouzi/CVE-2022-23967 diff --git a/cves/2022/CVE-2022-24124.md b/cves/2022/CVE-2022-24124.md index 4c5cef71ab7..d2ec3a1dcf4 100644 --- a/cves/2022/CVE-2022-24124.md +++ b/cves/2022/CVE-2022-24124.md @@ -23,6 +23,7 @@ The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related - https://github.com/b1gdog/CVE-2022-24124_POC - https://github.com/b1gdog/cve_2022_24124 - https://github.com/cukw/CVE-2022-24124_POC +- https://github.com/abbarhissarh/CVE-2022-24124 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24124.yaml diff --git a/cves/2022/CVE-2022-24125.md b/cves/2022/CVE-2022-24125.md index 51046574f5c..c0b5c801410 100644 --- a/cves/2022/CVE-2022-24125.md +++ b/cves/2022/CVE-2022-24125.md @@ -13,5 +13,5 @@ The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022 - https://github.com/tremwil/ds3-nrssr-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/tremwil/ds3-nrssr-rce diff --git a/cves/2022/CVE-2022-24355.md b/cves/2022/CVE-2022-24355.md index 880593ac59b..b6ca7c7deda 100644 --- a/cves/2022/CVE-2022-24355.md +++ b/cves/2022/CVE-2022-24355.md @@ -13,5 +13,5 @@ This vulnerability allows network-adjacent attackers to execute arbitrary code o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ilizavr/CVE-2022-24355 diff --git a/cves/2022/CVE-2022-24481.md b/cves/2022/CVE-2022-24481.md index 182af00b8b5..2b1ad6763c9 100644 --- a/cves/2022/CVE-2022-24481.md +++ b/cves/2022/CVE-2022-24481.md @@ -51,4 +51,5 @@ No PoCs from references. #### Github - https://github.com/fr4nkxixi/CVE-2022-24481-POC - https://github.com/robotMD5/CVE-2022-24481-POC +- https://github.com/uname1able/CVE-2022-24481 diff --git a/cves/2022/CVE-2022-24521.md b/cves/2022/CVE-2022-24521.md index e1e08936ff9..d96597e80b7 100644 --- a/cves/2022/CVE-2022-24521.md +++ b/cves/2022/CVE-2022-24521.md @@ -52,4 +52,5 @@ No PoCs from references. #### Github - https://github.com/fr4nkxixi/CVE-2022-24481-POC - https://github.com/robotMD5/CVE-2022-24481-POC +- https://github.com/uname1able/CVE-2022-24521 diff --git a/cves/2022/CVE-2022-24654.md b/cves/2022/CVE-2022-24654.md index 14ac2ea91bf..b3de05e7cb6 100644 --- a/cves/2022/CVE-2022-24654.md +++ b/cves/2022/CVE-2022-24654.md @@ -14,5 +14,5 @@ Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server A - https://packetstormsecurity.com/files/168064/Intelbras-ATA-200-Cross-Site-Scripting.html #### Github -No PoCs found on GitHub currently. +- https://github.com/leonardobg/CVE-2022-24654 diff --git a/cves/2022/CVE-2022-24706.md b/cves/2022/CVE-2022-24706.md index 20d74e18dcd..d44f4c418d2 100644 --- a/cves/2022/CVE-2022-24706.md +++ b/cves/2022/CVE-2022-24706.md @@ -20,6 +20,7 @@ In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured d - https://github.com/becrevex/CVE-2022-24706 - https://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit - https://github.com/superzerosec/CVE-2022-24706 +- https://github.com/junghyeonkum/CVE-2022-24706 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-24706.yaml @@ -29,3 +30,6 @@ In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured d #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_couchdb_erlang_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/couchdb/CVE-2022-24706 diff --git a/cves/2022/CVE-2022-24707.md b/cves/2022/CVE-2022-24707.md index 40ed8778ce4..60df186eaef 100644 --- a/cves/2022/CVE-2022-24707.md +++ b/cves/2022/CVE-2022-24707.md @@ -14,6 +14,7 @@ Anuko Time Tracker is an open source, web-based time tracking application writte #### Github - https://github.com/Altelus1/CVE-2022-24707 +- https://github.com/thepiyushkumarshukla/CVE-2022-24707_AnukoTimeTracker_Version-1.20.0_POC #### ExploitDB - https://www.exploit-db.com/exploits/50915 diff --git a/cves/2022/CVE-2022-24715.md b/cves/2022/CVE-2022-24715.md index e038994e381..a33035da435 100644 --- a/cves/2022/CVE-2022-24715.md +++ b/cves/2022/CVE-2022-24715.md @@ -16,6 +16,7 @@ Icinga Web 2 is an open source monitoring web interface, framework and command-l #### Github - https://github.com/cxdxnt/CVE-2022-24715 - https://github.com/d4rkb0n3/CVE-2022-24715-go +- https://github.com/nimphtix/CVE-2022-24715 #### ExploitDB - https://www.exploit-db.com/exploits/51586 diff --git a/cves/2022/CVE-2022-24716.md b/cves/2022/CVE-2022-24716.md index 88c8d6adabb..b289ef209e8 100644 --- a/cves/2022/CVE-2022-24716.md +++ b/cves/2022/CVE-2022-24716.md @@ -16,6 +16,9 @@ Icinga Web 2 is an open source monitoring web interface, framework and command-l - https://github.com/antisecc/CVE-2022-24716 - https://github.com/doosec101/CVE-2022-24716 - https://github.com/pumpkinpiteam/CVE-2022-24716 +- https://github.com/0x0Jackal/CVE-2022-24716 +- https://github.com/gmh5225/CVE-2022-24716 +- https://github.com/gmh5225/CVE-2022-24716-2 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24716.yaml diff --git a/cves/2022/CVE-2022-24785.md b/cves/2022/CVE-2022-24785.md index 9280068f4bd..d5534fb93dd 100644 --- a/cves/2022/CVE-2022-24785.md +++ b/cves/2022/CVE-2022-24785.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/pS3ud0RAnD0m/cve-2022-24785-poc-lab +- https://github.com/AnomalousVectors/cve-2022-24785-poc-lab diff --git a/cves/2022/CVE-2022-24816.md b/cves/2022/CVE-2022-24816.md index 886c54d6220..bb776b8fe43 100644 --- a/cves/2022/CVE-2022-24816.md +++ b/cves/2022/CVE-2022-24816.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24816.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2022-24816 diff --git a/cves/2022/CVE-2022-24834.md b/cves/2022/CVE-2022-24834.md index 6047bf18427..2d01971ce65 100644 --- a/cves/2022/CVE-2022-24834.md +++ b/cves/2022/CVE-2022-24834.md @@ -22,4 +22,5 @@ No PoCs from references. - https://github.com/DukeSec97/CVE-2022-24834- - https://github.com/PsychoPunkSage/Chronark - https://github.com/convisolabs/CVE-2022-24834 +- https://github.com/Nullx97/CVE-2022-24834- diff --git a/cves/2022/CVE-2022-25012.md b/cves/2022/CVE-2022-25012.md index 6b774b9e3a4..b03260e76d3 100644 --- a/cves/2022/CVE-2022-25012.md +++ b/cves/2022/CVE-2022-25012.md @@ -15,4 +15,5 @@ Argus Surveillance DVR v4.0 employs weak password encryption. #### Github - https://github.com/G4sp4rCS/CVE-2022-25012-POC - https://github.com/s3l33/CVE-2022-25012 +- https://github.com/m1kb0k/CVE-2022-25012-dvr4-weak-password-encryption diff --git a/cves/2022/CVE-2022-25090.md b/cves/2022/CVE-2022-25090.md index c1a0383e569..0c097036a51 100644 --- a/cves/2022/CVE-2022-25090.md +++ b/cves/2022/CVE-2022-25090.md @@ -16,7 +16,7 @@ Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary tem - https://www.exploit-db.com/exploits/50812 #### Github -No PoCs found on GitHub currently. +- https://github.com/ComparedArray/printix-CVE-2022-25090 #### ExploitDB - https://www.exploit-db.com/exploits/50812 diff --git a/cves/2022/CVE-2022-25636.md b/cves/2022/CVE-2022-25636.md index 76520cd24a2..d69815b21dc 100644 --- a/cves/2022/CVE-2022-25636.md +++ b/cves/2022/CVE-2022-25636.md @@ -17,4 +17,5 @@ net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows loca #### Github - https://github.com/chenaotian/CVE-2022-25636 - https://github.com/veritas501/CVE-2022-25636-PipeVersion +- https://github.com/Bonfee/CVE-2022-25636 diff --git a/cves/2022/CVE-2022-25765.md b/cves/2022/CVE-2022-25765.md index bdbdd436431..a5de05c87a4 100644 --- a/cves/2022/CVE-2022-25765.md +++ b/cves/2022/CVE-2022-25765.md @@ -24,4 +24,5 @@ The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL - https://github.com/lowercasenumbers/CVE-2022-25765 - https://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765 - https://github.com/shamo0/PDFkit-CMD-Injection +- https://github.com/Jeanback1/CVE-2022-25765-exploit diff --git a/cves/2022/CVE-2022-2586.md b/cves/2022/CVE-2022-2586.md index 2c2cb3ac0b1..ed3de61c7e7 100644 --- a/cves/2022/CVE-2022-2586.md +++ b/cves/2022/CVE-2022-2586.md @@ -28,4 +28,5 @@ It was discovered that a nft object or expression could reference a nft set on a - https://github.com/konoha279/2022-LPE-UAF - https://github.com/pirenga/2022-LPE-UAF - https://github.com/sniper404ghostxploit/CVE-2022-2586 +- https://github.com/lanleft/CVE-2022-2586 diff --git a/cves/2022/CVE-2022-2588.md b/cves/2022/CVE-2022-2588.md index 0a7872f889f..54325b90580 100644 --- a/cves/2022/CVE-2022-2588.md +++ b/cves/2022/CVE-2022-2588.md @@ -25,4 +25,5 @@ It was discovered that the cls_route filter implementation in the Linux kernel w - https://github.com/Markakd/CVE-2022-2588 - https://github.com/dom4570/CVE-2022-2588 - https://github.com/veritas501/CVE-2022-2588 +- https://github.com/LSinus/CacheMeIfYouCan diff --git a/cves/2022/CVE-2022-26133.md b/cves/2022/CVE-2022-26133.md index c1ca30a8a83..b51c2a81dd1 100644 --- a/cves/2022/CVE-2022-26133.md +++ b/cves/2022/CVE-2022-26133.md @@ -22,4 +22,5 @@ No PoCs from references. - https://github.com/0xStarFord/CVE-2022-26133 - https://github.com/Pear1y/CVE-2022-26133 - https://github.com/ar2o3/CVE-2022-26133 +- https://github.com/abbarhissarh/CVE-2022-26133 diff --git a/cves/2022/CVE-2022-26134.md b/cves/2022/CVE-2022-26134.md index 833ca0ea248..7511ac752fb 100644 --- a/cves/2022/CVE-2022-26134.md +++ b/cves/2022/CVE-2022-26134.md @@ -100,6 +100,9 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul - https://github.com/yTxZx/CVE-2022-26134 - https://github.com/yigexioabai/CVE-2022-26134-cve1 - https://github.com/yyqxi/CVE-2022-26134 +- https://github.com/crypt0lith/confluence-ognl-rce +- https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection +- https://github.com/secjia/CVE-2022-26134 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26134.yaml @@ -109,3 +112,6 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2022-26134 diff --git a/cves/2022/CVE-2022-26265.md b/cves/2022/CVE-2022-26265.md index 67230d25e0a..46e4b639ba6 100644 --- a/cves/2022/CVE-2022-26265.md +++ b/cves/2022/CVE-2022-26265.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/redteamsecurity2023/CVE-2022-26265 +- https://github.com/sh4den/CVE-2022-26265 diff --git a/cves/2022/CVE-2022-26923.md b/cves/2022/CVE-2022-26923.md index 388e863cc67..1773e96b458 100644 --- a/cves/2022/CVE-2022-26923.md +++ b/cves/2022/CVE-2022-26923.md @@ -43,6 +43,8 @@ No PoCs from references. - https://github.com/lsecqt/CVE-2022-26923-Powershell-POC - https://github.com/r1skkam/TryHackMe-CVE-2022-26923 - https://github.com/rayngnpc/CVE-2022-26923-rayng +- https://github.com/Eliasdekiniweek/CVE-2022-26923 +- https://github.com/Nefhara/CVE-2022-26923 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/dcerpc/cve_2022_26923_certifried.rb diff --git a/cves/2022/CVE-2022-27226.md b/cves/2022/CVE-2022-27226.md index 3262b8f9a9a..fa218f7ed36 100644 --- a/cves/2022/CVE-2022-27226.md +++ b/cves/2022/CVE-2022-27226.md @@ -15,7 +15,7 @@ A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a t - https://johnjhacking.com/blog/cve-2022-27226/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SakuraSamuraii/ez-iRZ #### ExploitDB - https://www.exploit-db.com/exploits/50832 diff --git a/cves/2022/CVE-2022-27254.md b/cves/2022/CVE-2022-27254.md index fa63b0dff60..d4dea0557e4 100644 --- a/cves/2022/CVE-2022-27254.md +++ b/cves/2022/CVE-2022-27254.md @@ -17,4 +17,5 @@ The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal #### Github - https://github.com/SuryaN03/DOS-REMOTE-POC +- https://github.com/nonamecoder/CVE-2022-27254 diff --git a/cves/2022/CVE-2022-27255.md b/cves/2022/CVE-2022-27255.md index 830d3a2ce25..37ffe2d6197 100644 --- a/cves/2022/CVE-2022-27255.md +++ b/cves/2022/CVE-2022-27255.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/infobyte/cve-2022-27255 +- https://github.com/stryker-project/CVE-2022-27255-checker diff --git a/cves/2022/CVE-2022-27666.md b/cves/2022/CVE-2022-27666.md index e95d5ca3b26..e1bc5384298 100644 --- a/cves/2022/CVE-2022-27666.md +++ b/cves/2022/CVE-2022-27666.md @@ -15,4 +15,5 @@ A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ip #### Github - https://github.com/Albocoder/cve-2022-27666-exploits - https://github.com/plummm/CVE-2022-27666 +- https://github.com/ngtuonghung/CVE-2022-27666 diff --git a/cves/2022/CVE-2022-27925.md b/cves/2022/CVE-2022-27925.md index 9ebafb4d3d2..8b88e99b0a2 100644 --- a/cves/2022/CVE-2022-27925.md +++ b/cves/2022/CVE-2022-27925.md @@ -25,6 +25,7 @@ Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that - https://github.com/sanan2004/CVE-2022-27925 - https://github.com/touchmycrazyredhat/CVE-2022-27925-Revshell - https://github.com/vnhacker1337/CVE-2022-27925-PoC +- https://github.com/sh4den/CVE-2022-27925 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbra_mboximport_cve_2022_27925.rb diff --git a/cves/2022/CVE-2022-28368.md b/cves/2022/CVE-2022-28368.md index 8e3153ddfdd..b4ac8c29dab 100644 --- a/cves/2022/CVE-2022-28368.md +++ b/cves/2022/CVE-2022-28368.md @@ -16,6 +16,7 @@ Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field o - https://github.com/Henryisnotavailable/Dompdf-Exploit-RCE - https://github.com/That-Guy-Steve/CVE-2022-28368-handler - https://github.com/rvizx/CVE-2022-28368 +- https://github.com/rvzsec/CVE-2022-28368 #### ExploitDB - https://www.exploit-db.com/exploits/51270 diff --git a/cves/2022/CVE-2022-29056.md b/cves/2022/CVE-2022-29056.md index bc8dfd5ec76..04ec42984cf 100644 --- a/cves/2022/CVE-2022-29056.md +++ b/cves/2022/CVE-2022-29056.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2022-29056 +- https://github.com/chessredoffsec/CVE-2022-29056 diff --git a/cves/2022/CVE-2022-29072.md b/cves/2022/CVE-2022-29072.md index 5ef22129b3e..6dba251d787 100644 --- a/cves/2022/CVE-2022-29072.md +++ b/cves/2022/CVE-2022-29072.md @@ -19,4 +19,5 @@ - https://github.com/rasan2001/CVE-2022-29072 - https://github.com/sentinelblue/CVE-2022-29072 - https://github.com/tiktb8/CVE-2022-29072 +- https://github.com/kagancapar/CVE-2022-29072 diff --git a/cves/2022/CVE-2022-29078.md b/cves/2022/CVE-2022-29078.md index 81e8671d778..1f72f89337c 100644 --- a/cves/2022/CVE-2022-29078.md +++ b/cves/2022/CVE-2022-29078.md @@ -40,6 +40,8 @@ The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows ser - https://github.com/yalinjob/ejs-demo-yalin - https://github.com/yalinjob/express-js-ya - https://github.com/yoitsmikeho/express-js-appbundle +- https://github.com/seal-sec-demo-2/JavaScript-Example +- https://github.com/taka3636/CVE-2022-29078 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29078.yaml diff --git a/cves/2022/CVE-2022-29464.md b/cves/2022/CVE-2022-29464.md index 44c75308cd4..f46a6b6ffbd 100644 --- a/cves/2022/CVE-2022-29464.md +++ b/cves/2022/CVE-2022-29464.md @@ -58,6 +58,8 @@ Certain WSO2 products allow unrestricted file upload with resultant remote code - https://github.com/r4x0r1337/-CVE-2022-29464 - https://github.com/superzerosec/CVE-2022-29464 - https://github.com/tufanturhan/wso2-rce-cve-2022-29464 +- https://github.com/dsssssssm/WSOB +- https://github.com/hakivvi/CVE-2022-29464 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29464.yaml diff --git a/cves/2022/CVE-2022-29597.md b/cves/2022/CVE-2022-29597.md index 0fc873c9da4..c4b20773463 100644 --- a/cves/2022/CVE-2022-29597.md +++ b/cves/2022/CVE-2022-29597.md @@ -13,5 +13,5 @@ Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local - https://github.com/TheGetch/CVE-2022-29597 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheGetch/CVE-2022-29597 diff --git a/cves/2022/CVE-2022-29598.md b/cves/2022/CVE-2022-29598.md index 6c97ddcd350..3db40bcd062 100644 --- a/cves/2022/CVE-2022-29598.md +++ b/cves/2022/CVE-2022-29598.md @@ -13,5 +13,5 @@ Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an re - https://github.com/TheGetch/CVE-2022-29598 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheGetch/CVE-2022-29598 diff --git a/cves/2022/CVE-2022-29799.md b/cves/2022/CVE-2022-29799.md index b45f335a007..d0118e26aec 100644 --- a/cves/2022/CVE-2022-29799.md +++ b/cves/2022/CVE-2022-29799.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/DDNvR/privelege_escalation - https://github.com/jfrog/nimbuspwn-tools +- https://github.com/joshuavanderpoll/NimbusPWN-CVE-2022-29799-29800 diff --git a/cves/2022/CVE-2022-29800.md b/cves/2022/CVE-2022-29800.md index 9c38db691c7..3c826324e49 100644 --- a/cves/2022/CVE-2022-29800.md +++ b/cves/2022/CVE-2022-29800.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/DDNvR/privelege_escalation - https://github.com/jfrog/nimbuspwn-tools +- https://github.com/ngtuonghung/nimbuspwn-CVE-2022-29800-CVE-2022-29799 diff --git a/cves/2022/CVE-2022-30024.md b/cves/2022/CVE-2022-30024.md index 1e7875a1fe4..194f88dc82d 100644 --- a/cves/2022/CVE-2022-30024.md +++ b/cves/2022/CVE-2022-30024.md @@ -13,5 +13,5 @@ A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ilizavr/CVE-2022-30024 diff --git a/cves/2022/CVE-2022-30075.md b/cves/2022/CVE-2022-30075.md index 83fff501e69..4085c683615 100644 --- a/cves/2022/CVE-2022-30075.md +++ b/cves/2022/CVE-2022-30075.md @@ -19,6 +19,8 @@ In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup f - https://github.com/M4fiaB0y/CVE-2022-30075 - https://github.com/SAJIDAMINE/CVE-2022-30075 - https://github.com/QuasyStellar/tplink-archer-root-exploit +- https://github.com/RhestCorp/TP-L-NK-SIZMA-EXPLO-T +- https://github.com/aaronsvk/CVE-2022-30075 #### ExploitDB - https://www.exploit-db.com/exploits/50962 diff --git a/cves/2022/CVE-2022-30190.md b/cves/2022/CVE-2022-30190.md index 3090ae5f603..3fa37d75db4 100644 --- a/cves/2022/CVE-2022-30190.md +++ b/cves/2022/CVE-2022-30190.md @@ -128,6 +128,11 @@ A remote code execution vulnerability exists when MSDT is called using the URL p - https://github.com/yeep1115/ICT287_CVE-2022-30190_Exploit - https://github.com/yrkuo/CVE-2022-30190 - https://github.com/eh050/follina-html-POC +- https://github.com/abbarhissarh/FollinaXploit +- https://github.com/alienkeric/CVE-2022-30190 +- https://github.com/czabatta/THM-Tempest +- https://github.com/kaleth4/CVE-2022-30190 +- https://github.com/shndnth/CVE-2022-30190 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/word_msdtjs_rce.rb diff --git a/cves/2022/CVE-2022-30292.md b/cves/2022/CVE-2022-30292.md index a2b9d500c7f..d11e40ab3a9 100644 --- a/cves/2022/CVE-2022-30292.md +++ b/cves/2022/CVE-2022-30292.md @@ -13,5 +13,5 @@ Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a cer - https://github.com/sprushed/CVE-2022-30292 #### Github -No PoCs found on GitHub currently. +- https://github.com/sprushed/CVE-2022-30292 diff --git a/cves/2022/CVE-2022-30333.md b/cves/2022/CVE-2022-30333.md index a3488fb2f58..48b0234904c 100644 --- a/cves/2022/CVE-2022-30333.md +++ b/cves/2022/CVE-2022-30333.md @@ -19,6 +19,7 @@ RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write t - https://github.com/aslitsecurity/Zimbra-CVE-2022-30333 - https://github.com/paradox0909/cve-2022-30333_online_rar_extracor - https://github.com/rbowes-r7/unrar-cve-2022-30333-poc +- https://github.com/RakhithJK/CVE-2022-30333 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/fileformat/unrar_cve_2022_30333.rb diff --git a/cves/2022/CVE-2022-31138.md b/cves/2022/CVE-2022-31138.md index 715dd093b3c..f93b5bebc01 100644 --- a/cves/2022/CVE-2022-31138.md +++ b/cves/2022/CVE-2022-31138.md @@ -13,5 +13,5 @@ mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an - https://github.com/ly1g3/Mailcow-CVE-2022-31138 #### Github -No PoCs found on GitHub currently. +- https://github.com/ly1g3/Mailcow-CVE-2022-31138 diff --git a/cves/2022/CVE-2022-31199.md b/cves/2022/CVE-2022-31199.md index a65a7bc8bda..48e468e78a5 100644 --- a/cves/2022/CVE-2022-31199.md +++ b/cves/2022/CVE-2022-31199.md @@ -14,5 +14,5 @@ Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/developerfred/CVE-2022-31199 diff --git a/cves/2022/CVE-2022-31245.md b/cves/2022/CVE-2022-31245.md index 8e27b2ce635..8983122304f 100644 --- a/cves/2022/CVE-2022-31245.md +++ b/cves/2022/CVE-2022-31245.md @@ -13,5 +13,5 @@ mailcow before 2022-05d allows a remote authenticated user to inject OS commands - https://github.com/ly1g3/Mailcow-CVE-2022-31245 #### Github -No PoCs found on GitHub currently. +- https://github.com/ly1g3/Mailcow-CVE-2022-31245 diff --git a/cves/2022/CVE-2022-31262.md b/cves/2022/CVE-2022-31262.md index b89f4374566..a20118c6a94 100644 --- a/cves/2022/CVE-2022-31262.md +++ b/cves/2022/CVE-2022-31262.md @@ -16,5 +16,5 @@ An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0 - https://www.youtube.com/watch?v=Bgdbx5TJShI #### Github -No PoCs found on GitHub currently. +- https://github.com/secure-77/CVE-2022-31262 diff --git a/cves/2022/CVE-2022-31630.md b/cves/2022/CVE-2022-31630.md index 46b597ba462..94a0d2c074c 100644 --- a/cves/2022/CVE-2022-31630.md +++ b/cves/2022/CVE-2022-31630.md @@ -16,5 +16,6 @@ In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() f No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sepkascurty-cpu/CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33 +- https://github.com/sepkascurty-cpu/php-exploit_cve-2022-31630 diff --git a/cves/2022/CVE-2022-31813.md b/cves/2022/CVE-2022-31813.md index 64535874203..aa45b2551e1 100644 --- a/cves/2022/CVE-2022-31813.md +++ b/cves/2022/CVE-2022-31813.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/dodiorne/cve-2022-31813 +- https://github.com/yiliufeng168/CVE-2022-31813 diff --git a/cves/2022/CVE-2022-31814.md b/cves/2022/CVE-2022-31814.md index e77a27ff5c0..37003606e53 100644 --- a/cves/2022/CVE-2022-31814.md +++ b/cves/2022/CVE-2022-31814.md @@ -22,6 +22,7 @@ pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrar - https://github.com/Madliife0/CVE-2022-31814 - https://github.com/TheUnknownSoul/CVE-2022-31814 - https://github.com/dkstar11q/CVE-2022-31814 +- https://github.com/sh4den/CVE-2022-31814 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31814.yaml diff --git a/cves/2022/CVE-2022-3218.md b/cves/2022/CVE-2022-3218.md index d6008234b34..0387e9cc503 100644 --- a/cves/2022/CVE-2022-3218.md +++ b/cves/2022/CVE-2022-3218.md @@ -17,6 +17,7 @@ Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) f #### Github - https://github.com/mermehr/MouseServer-1.7.8.5-RCE +- https://github.com/MoisesTapia/cve-2022-3218 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wifi_mouse_rce.rb diff --git a/cves/2022/CVE-2022-32199.md b/cves/2022/CVE-2022-32199.md index eb9f970db6c..adbff2d9e38 100644 --- a/cves/2022/CVE-2022-32199.md +++ b/cves/2022/CVE-2022-32199.md @@ -13,5 +13,5 @@ db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Del - https://github.com/Toxich4/CVE-2022-32199 #### Github -No PoCs found on GitHub currently. +- https://github.com/Toxich4/CVE-2022-32199 diff --git a/cves/2022/CVE-2022-32947.md b/cves/2022/CVE-2022-32947.md index 92eb4a92439..26db286da31 100644 --- a/cves/2022/CVE-2022-32947.md +++ b/cves/2022/CVE-2022-32947.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/asahilina/agx-exploit +- https://github.com/hoshinolina/agx-exploit diff --git a/cves/2022/CVE-2022-33098.md b/cves/2022/CVE-2022-33098.md index 8275e0bd096..bdcc726437d 100644 --- a/cves/2022/CVE-2022-33098.md +++ b/cves/2022/CVE-2022-33098.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/Ozozuz/Mangolia-CMS-Stored-XSS +- https://github.com/Ozozuz/Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098 #### ExploitDB - https://www.exploit-db.com/exploits/50976 diff --git a/cves/2022/CVE-2022-33171.md b/cves/2022/CVE-2022-33171.md index b76fbc228d6..0fd88d11abe 100644 --- a/cves/2022/CVE-2022-33171.md +++ b/cves/2022/CVE-2022-33171.md @@ -13,5 +13,5 @@ The findOne function in TypeORM before 0.3.0 can either be supplied with a strin - http://packetstormsecurity.com/files/168096/TypeORM-0.3.7-Information-Disclosure.html #### Github -No PoCs found on GitHub currently. +- https://github.com/open-flaw/CVE-2022-33171 diff --git a/cves/2022/CVE-2022-34265.md b/cves/2022/CVE-2022-34265.md index 1dd0f822620..553e6f31b41 100644 --- a/cves/2022/CVE-2022-34265.md +++ b/cves/2022/CVE-2022-34265.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-34265.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2022-34265 diff --git a/cves/2022/CVE-2022-35131.md b/cves/2022/CVE-2022-35131.md index 141b289d945..67804a54afa 100644 --- a/cves/2022/CVE-2022-35131.md +++ b/cves/2022/CVE-2022-35131.md @@ -14,5 +14,5 @@ Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted paylo - https://github.com/ly1g3/Joplin-CVE-2022-35131 #### Github -No PoCs found on GitHub currently. +- https://github.com/ly1g3/Joplin-CVE-2022-35131 diff --git a/cves/2022/CVE-2022-35411.md b/cves/2022/CVE-2022-35411.md index 618f89eedca..6283e7a35ef 100644 --- a/cves/2022/CVE-2022-35411.md +++ b/cves/2022/CVE-2022-35411.md @@ -16,6 +16,7 @@ rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs whe #### Github - https://github.com/CSpanias/rpc-rce.py - https://github.com/ehtec/rpcpy-exploit +- https://github.com/Neo-okami/CVE-2022-35411 #### ExploitDB - https://www.exploit-db.com/exploits/50983 diff --git a/cves/2022/CVE-2022-35513.md b/cves/2022/CVE-2022-35513.md index 9b985c10810..952942a87c6 100644 --- a/cves/2022/CVE-2022-35513.md +++ b/cves/2022/CVE-2022-35513.md @@ -15,6 +15,7 @@ The Blink1Control2 application <= 2.2.7 uses weak password encryption and an ins #### Github - https://github.com/security-anthem/IoTPene +- https://github.com/p1ckzi/CVE-2022-35513 #### ExploitDB - https://www.exploit-db.com/exploits/51014 diff --git a/cves/2022/CVE-2022-35650.md b/cves/2022/CVE-2022-35650.md index b3fc0b5f559..1ac33c0e82f 100644 --- a/cves/2022/CVE-2022-35650.md +++ b/cves/2022/CVE-2022-35650.md @@ -13,5 +13,5 @@ The vulnerability was found in Moodle, occurs due to input validation error when No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Gr4y-r0se/CVE-2022-35650 diff --git a/cves/2022/CVE-2022-35899.md b/cves/2022/CVE-2022-35899.md index dc3e2192e5b..bb7fd490e32 100644 --- a/cves/2022/CVE-2022-35899.md +++ b/cves/2022/CVE-2022-35899.md @@ -15,7 +15,7 @@ There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSD - https://www.exploit-db.com/exploits/50985 #### Github -No PoCs found on GitHub currently. +- https://github.com/angelopioamirante/CVE-2022-35899 #### ExploitDB - https://www.exploit-db.com/exploits/50985 diff --git a/cves/2022/CVE-2022-3590.md b/cves/2022/CVE-2022-3590.md index 373b6bbd3e9..4f22cb4bb40 100644 --- a/cves/2022/CVE-2022-3590.md +++ b/cves/2022/CVE-2022-3590.md @@ -14,7 +14,7 @@ WordPress is affected by an unauthenticated blind SSRF in the pingback feature. - https://wpscan.com/vulnerability/c8814e6e-78b3-4f63-a1d3-6906a84c1f11 #### Github -No PoCs found on GitHub currently. +- https://github.com/TJouleL/WordPress-6.9.1-Blind-SSRF #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3590.yaml diff --git a/cves/2022/CVE-2022-35914.md b/cves/2022/CVE-2022-35914.md index 53bdf47dcec..b28fd410a7d 100644 --- a/cves/2022/CVE-2022-35914.md +++ b/cves/2022/CVE-2022-35914.md @@ -28,6 +28,7 @@ - https://github.com/reewardius/myown-nuclei-poc - https://github.com/senderend/CVE-2022-35914 - https://github.com/xiaobaiakai/CVE-2022-35914 +- https://github.com/cyb3rk0ala/CVE-2022-35914-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35914.yaml diff --git a/cves/2022/CVE-2022-36067.md b/cves/2022/CVE-2022-36067.md index 8658ccd0b12..6a45194294f 100644 --- a/cves/2022/CVE-2022-36067.md +++ b/cves/2022/CVE-2022-36067.md @@ -16,4 +16,5 @@ vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in mo #### Github - https://github.com/0x1nsomnia/CVE-2022-36067-vm2-POC-webapp - https://github.com/Prathamrajgor/Exploit-For-CVE-2022-36067 +- https://github.com/prathamhasnotchanged/Exploit-For-CVE-2022-36067 diff --git a/cves/2022/CVE-2022-36200.md b/cves/2022/CVE-2022-36200.md index 69118c65f79..8e545a1a15c 100644 --- a/cves/2022/CVE-2022-36200.md +++ b/cves/2022/CVE-2022-36200.md @@ -13,5 +13,5 @@ In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in UR - https://github.com/afaq1337/CVE-2022-36200 #### Github -No PoCs found on GitHub currently. +- https://github.com/afaq1337/CVE-2022-36200 diff --git a/cves/2022/CVE-2022-36231.md b/cves/2022/CVE-2022-36231.md index 2391eacec2e..344ab10fbcb 100644 --- a/cves/2022/CVE-2022-36231.md +++ b/cves/2022/CVE-2022-36231.md @@ -13,5 +13,5 @@ pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses bac - https://github.com/affix/CVE-2022-36231 #### Github -No PoCs found on GitHub currently. +- https://github.com/affix/CVE-2022-36231 diff --git a/cves/2022/CVE-2022-36271.md b/cves/2022/CVE-2022-36271.md index dede33a9103..4e8696e294a 100644 --- a/cves/2022/CVE-2022-36271.md +++ b/cves/2022/CVE-2022-36271.md @@ -13,5 +13,5 @@ Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. - https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271 #### Github -No PoCs found on GitHub currently. +- https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271 diff --git a/cves/2022/CVE-2022-36446.md b/cves/2022/CVE-2022-36446.md index 4dcb63eddb0..389245d9038 100644 --- a/cves/2022/CVE-2022-36446.md +++ b/cves/2022/CVE-2022-36446.md @@ -19,6 +19,7 @@ software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command. - https://github.com/emirpolatt/CVE-2022-36446 - https://github.com/monzaviman/CVE_2022_36446 - https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE +- https://github.com/darnabin/CVE-2022-36446-Webmin-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36446.yaml diff --git a/cves/2022/CVE-2022-36804.md b/cves/2022/CVE-2022-36804.md index f15433d8868..0948e8976ac 100644 --- a/cves/2022/CVE-2022-36804.md +++ b/cves/2022/CVE-2022-36804.md @@ -40,6 +40,9 @@ Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 befor - https://github.com/tahtaciburak/cve-2022-36804 - https://github.com/vj4336/CVE-2022-36804-ReverseShell - https://github.com/walnutsecurity/cve-2022-36804 +- https://github.com/DanielHallbro/CVE-2022-36804-Bitbucket-RCE-Analysis +- https://github.com/Junohea/cve-2022-36804 +- https://github.com/sh4den/CVE-2022-36804 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36804.yaml diff --git a/cves/2022/CVE-2022-36934.md b/cves/2022/CVE-2022-36934.md index 43ad3da7a34..16204d8a502 100644 --- a/cves/2022/CVE-2022-36934.md +++ b/cves/2022/CVE-2022-36934.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/Teexo/mailenable-cve-2022-36934 +- https://github.com/tdawg506/mailenable-cve-2022-36934 diff --git a/cves/2022/CVE-2022-37122.md b/cves/2022/CVE-2022-37122.md index 53092a78f8e..53ee29c087b 100644 --- a/cves/2022/CVE-2022-37122.md +++ b/cves/2022/CVE-2022-37122.md @@ -14,7 +14,7 @@ Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application S - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5709.php #### Github -No PoCs found on GitHub currently. +- https://github.com/bughuntar/CVE-2022-37122-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37122.yaml diff --git a/cves/2022/CVE-2022-37704.md b/cves/2022/CVE-2022-37704.md index 056c5e08bb2..54b23aca869 100644 --- a/cves/2022/CVE-2022-37704.md +++ b/cves/2022/CVE-2022-37704.md @@ -13,5 +13,5 @@ Amanda 3.5.1 allows privilege escalation from the regular user backup to root. T - https://github.com/MaherAzzouzi/CVE-2022-37704 #### Github -No PoCs found on GitHub currently. +- https://github.com/MaherAzzouzi/CVE-2022-37704 diff --git a/cves/2022/CVE-2022-37705.md b/cves/2022/CVE-2022-37705.md index ecbdf69a415..68045611b78 100644 --- a/cves/2022/CVE-2022-37705.md +++ b/cves/2022/CVE-2022-37705.md @@ -13,5 +13,5 @@ A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user c - https://github.com/MaherAzzouzi/CVE-2022-37705 #### Github -No PoCs found on GitHub currently. +- https://github.com/MaherAzzouzi/CVE-2022-37705 diff --git a/cves/2022/CVE-2022-37706.md b/cves/2022/CVE-2022-37706.md index 79cfcf4d5be..326d1a17ff6 100644 --- a/cves/2022/CVE-2022-37706.md +++ b/cves/2022/CVE-2022-37706.md @@ -20,6 +20,7 @@ enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain priv - https://github.com/d3ndr1t30x/CVE-2022-37706 - https://github.com/junnythemarksman/CVE-2022-37706 - https://github.com/sanan2004/CVE-2022-37706 +- https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit #### ExploitDB - https://www.exploit-db.com/exploits/51180 diff --git a/cves/2022/CVE-2022-37969.md b/cves/2022/CVE-2022-37969.md index 2bce0418f4a..c6e46c7a2f4 100644 --- a/cves/2022/CVE-2022-37969.md +++ b/cves/2022/CVE-2022-37969.md @@ -51,4 +51,6 @@ No PoCs from references. - https://github.com/NoobCat2000/CVE-2022-37969 - https://github.com/fortra/CVE-2022-37969 - https://github.com/grass341/CVE-2022-37969 +- https://github.com/nhh9905/CVE-2022-37969 +- https://github.com/uname1able/CVE-2022-37969 diff --git a/cves/2022/CVE-2022-38181.md b/cves/2022/CVE-2022-38181.md index ff36fc8f38f..d27b7797c2c 100644 --- a/cves/2022/CVE-2022-38181.md +++ b/cves/2022/CVE-2022-38181.md @@ -21,4 +21,5 @@ The Arm Mali GPU kernel driver allows unprivileged users to access freed memory - https://github.com/Pro-me3us/CVE_2022_38181_Gazelle - https://github.com/Pro-me3us/CVE_2022_38181_Raven - https://github.com/R0rt1z2/CVE-2022-38181 +- https://github.com/soralis0912/CVE-2022-38181-aristotle diff --git a/cves/2022/CVE-2022-38694.md b/cves/2022/CVE-2022-38694.md index d72ada9757f..cbc18b73173 100644 --- a/cves/2022/CVE-2022-38694.md +++ b/cves/2022/CVE-2022-38694.md @@ -14,4 +14,11 @@ No PoCs from references. #### Github - https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader +- https://github.com/AureliusIvan/ubl-itel-s23 +- https://github.com/AureliusIvanInvenioPTL/ubl-itel-s23 +- https://github.com/Gadorach/vankyo-s30-bootloader-unlock +- https://github.com/Gopartner/realme-c53-unlock-root +- https://github.com/JoshAtticus/ztewaste +- https://github.com/LeoChen-CoreMind/spd_flasher +- https://github.com/sloden1977-lang/ROOT-ZTE-X1001 diff --git a/cves/2022/CVE-2022-38813.md b/cves/2022/CVE-2022-38813.md index daeb2f20d06..c2976c8c565 100644 --- a/cves/2022/CVE-2022-38813.md +++ b/cves/2022/CVE-2022-38813.md @@ -15,5 +15,5 @@ PHPGurukul Blood Donor Management System 1.0 does not properly restrict access t - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-38813-privilege-escalations-in-blood-donor-management-system-v1-0 #### Github -No PoCs found on GitHub currently. +- https://github.com/RashidKhanPathan/CVE-2022-38813 diff --git a/cves/2022/CVE-2022-39227.md b/cves/2022/CVE-2022-39227.md index f90e8c7da27..94ec64f685a 100644 --- a/cves/2022/CVE-2022-39227.md +++ b/cves/2022/CVE-2022-39227.md @@ -15,4 +15,5 @@ python-jwt is a module for generating and verifying JSON Web Tokens. Versions pr #### Github - https://github.com/NoSpaceAvailable/CVE-2022-39227 - https://github.com/user0x1337/CVE-2022-39227 +- https://github.com/melikesraoz/cve-2022-39227-jwt-auth-bypass-demo diff --git a/cves/2022/CVE-2022-40032.md b/cves/2022/CVE-2022-40032.md index 23b4f7c2835..350ad395ff4 100644 --- a/cves/2022/CVE-2022-40032.md +++ b/cves/2022/CVE-2022-40032.md @@ -14,7 +14,7 @@ SQL Injection vulnerability in Simple Task Managing System version 1.0 in login. - https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### Github -No PoCs found on GitHub currently. +- https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40032.yaml diff --git a/cves/2022/CVE-2022-40297.md b/cves/2022/CVE-2022-40297.md index 4e1d9cb6b73..e505b197abd 100644 --- a/cves/2022/CVE-2022-40297.md +++ b/cves/2022/CVE-2022-40297.md @@ -13,5 +13,5 @@ UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a pr - https://github.com/filipkarc/PoC-ubuntutouch-pin-privesc #### Github -No PoCs found on GitHub currently. +- https://github.com/filipkarc/PoC-ubuntutouch-pin-privesc diff --git a/cves/2022/CVE-2022-40347.md b/cves/2022/CVE-2022-40347.md index 760db5dde09..a83e75b4c0d 100644 --- a/cves/2022/CVE-2022-40347.md +++ b/cves/2022/CVE-2022-40347.md @@ -14,7 +14,7 @@ SQL Injection vulnerability in Intern Record System version 1.0 in /intern/contr - https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### Github -No PoCs found on GitHub currently. +- https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### ExploitDB - https://www.exploit-db.com/exploits/51274 diff --git a/cves/2022/CVE-2022-40348.md b/cves/2022/CVE-2022-40348.md index 6e302153c41..e380e64db63 100644 --- a/cves/2022/CVE-2022-40348.md +++ b/cves/2022/CVE-2022-40348.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in - https://github.com/h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated #### Github -No PoCs found on GitHub currently. +- https://github.com/h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated diff --git a/cves/2022/CVE-2022-40471.md b/cves/2022/CVE-2022-40471.md index 84fc07a1ae6..f29723e43da 100644 --- a/cves/2022/CVE-2022-40471.md +++ b/cves/2022/CVE-2022-40471.md @@ -14,7 +14,8 @@ Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacke - https://github.com/RashidKhanPathan/CVE-2022-40471 #### Github -No PoCs found on GitHub currently. +- https://github.com/Dharan10/CVE-2022-40471 +- https://github.com/RashidKhanPathan/CVE-2022-40471 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_fileupload_rce.rb diff --git a/cves/2022/CVE-2022-40684.md b/cves/2022/CVE-2022-40684.md index ff750278b4f..c2f63ac143e 100644 --- a/cves/2022/CVE-2022-40684.md +++ b/cves/2022/CVE-2022-40684.md @@ -39,6 +39,7 @@ An authentication bypass using an alternate path or channel [CWE-288] in Fortine - https://github.com/secunnix/CVE-2022-40684 - https://github.com/und3sc0n0c1d0/CVE-2022-40684 - https://github.com/z-bool/CVE-2022-40684 +- https://github.com/ccordeiro/CVE-2022-40684 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40684.yaml diff --git a/cves/2022/CVE-2022-41358.md b/cves/2022/CVE-2022-41358.md index 73482e8bb3a..ceed766800a 100644 --- a/cves/2022/CVE-2022-41358.md +++ b/cves/2022/CVE-2022-41358.md @@ -16,7 +16,7 @@ A stored cross-site scripting (XSS) vulnerability in Garage Management System v1 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2022-41358 #### Github -No PoCs found on GitHub currently. +- https://github.com/thecasual/CVE-2022-41358 #### ExploitDB - https://www.exploit-db.com/exploits/52238 diff --git a/cves/2022/CVE-2022-41401.md b/cves/2022/CVE-2022-41401.md index 22e7eee03d4..ab0e2d10540 100644 --- a/cves/2022/CVE-2022-41401.md +++ b/cves/2022/CVE-2022-41401.md @@ -13,5 +13,5 @@ OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability - https://github.com/ixSly/CVE-2022-41401 #### Github -No PoCs found on GitHub currently. +- https://github.com/ixSly/CVE-2022-41401 diff --git a/cves/2022/CVE-2022-41445.md b/cves/2022/CVE-2022-41445.md index f0dce4b7575..63483235457 100644 --- a/cves/2022/CVE-2022-41445.md +++ b/cves/2022/CVE-2022-41445.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in Record Management System using Cod - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-41445-cross-site-scripting-in-teachers-record-management-system-using-codeignitor #### Github -No PoCs found on GitHub currently. +- https://github.com/RashidKhanPathan/CVE-2022-41445 diff --git a/cves/2022/CVE-2022-41678.md b/cves/2022/CVE-2022-41678.md index c61226cdecd..daa1f39004a 100644 --- a/cves/2022/CVE-2022-41678.md +++ b/cves/2022/CVE-2022-41678.md @@ -16,6 +16,10 @@ No PoCs from references. #### Github - https://github.com/mbadanoiu/CVE-2022-41678 +- https://github.com/URJACK2025/CVE-2022-41678 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41678.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2022-41678 diff --git a/cves/2022/CVE-2022-41840.md b/cves/2022/CVE-2022-41840.md index 1e6f21556fc..3f03f7dfc03 100644 --- a/cves/2022/CVE-2022-41840.md +++ b/cves/2022/CVE-2022-41840.md @@ -13,7 +13,7 @@ Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/PrinceAikinsBaidoo/CVE-2022-41840-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41840.yaml diff --git a/cves/2022/CVE-2022-42046.md b/cves/2022/CVE-2022-42046.md index 3c013f953fa..f3354f76bf9 100644 --- a/cves/2022/CVE-2022-42046.md +++ b/cves/2022/CVE-2022-42046.md @@ -13,5 +13,5 @@ wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to p - https://github.com/kkent030315/CVE-2022-42046 #### Github -No PoCs found on GitHub currently. +- https://github.com/kkent030315/CVE-2022-42046 diff --git a/cves/2022/CVE-2022-42176.md b/cves/2022/CVE-2022-42176.md index 66d982ea08e..e8d7e5a9cca 100644 --- a/cves/2022/CVE-2022-42176.md +++ b/cves/2022/CVE-2022-42176.md @@ -14,5 +14,5 @@ In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration - https://github.com/soy-oreocato/CVE-Advisories/tree/main/PapiQuieroPollo00 #### Github -No PoCs found on GitHub currently. +- https://github.com/soy-oreocato/CVE-2022-42176 diff --git a/cves/2022/CVE-2022-4223.md b/cves/2022/CVE-2022-4223.md index c451e9e2b8a..6c073af0ff5 100644 --- a/cves/2022/CVE-2022-4223.md +++ b/cves/2022/CVE-2022-4223.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4223.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pgadmin/CVE-2022-4223 diff --git a/cves/2022/CVE-2022-42248.md b/cves/2022/CVE-2022-42248.md index d92010e5754..3ce748ef7f7 100644 --- a/cves/2022/CVE-2022-42248.md +++ b/cves/2022/CVE-2022-42248.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/Ozozuz/Qlik-View-Stored-XSS +- https://github.com/Ozozuz/Qlik-View-12.60-Including-SR-Stored-Cross-Site-Scripting-CVE-2022-42248 diff --git a/cves/2022/CVE-2022-42475.md b/cves/2022/CVE-2022-42475.md index 237d1e7a6a1..79cc425dc11 100644 --- a/cves/2022/CVE-2022-42475.md +++ b/cves/2022/CVE-2022-42475.md @@ -39,6 +39,7 @@ No PoCs from references. - https://github.com/rio128128/CVE-2023-27997-POC - https://github.com/scrt/cve-2022-42475 - https://github.com/uLl0a/cve-2022-42475-poc +- https://github.com/ArthurHendrich/CVE-2022-42475-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2022/CVE-2022-42475.yaml diff --git a/cves/2022/CVE-2022-42889.md b/cves/2022/CVE-2022-42889.md index c57b80d4a4b..0dfc6c055bb 100644 --- a/cves/2022/CVE-2022-42889.md +++ b/cves/2022/CVE-2022-42889.md @@ -58,6 +58,10 @@ Apache Commons Text performs variable interpolation, allowing properties to be d - https://github.com/sunnyvale-it/CVE-2022-42889-PoC - https://github.com/uk0/cve-2022-42889-intercept - https://github.com/vickyaryan7/Text4shell-exploit +- https://github.com/Goultarde/CVE-2022-42889-text4shell +- https://github.com/Hkaeeeer/CVE-2022-42889 +- https://github.com/KosmicOwl045/ICT287-CVE-2022-42889 +- https://github.com/alealeluyah/CVE-2022-42889-Text4Shell-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-42889.yaml diff --git a/cves/2022/CVE-2022-43144.md b/cves/2022/CVE-2022-43144.md index b2b420362bf..29ad2775235 100644 --- a/cves/2022/CVE-2022-43144.md +++ b/cves/2022/CVE-2022-43144.md @@ -13,5 +13,5 @@ A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 all - https://github.com/mudassiruddin/CVE-2022-43144-Stored-XSS #### Github -No PoCs found on GitHub currently. +- https://github.com/mudassiruddin/CVE-2022-43144-Stored-XSS diff --git a/cves/2022/CVE-2022-4361.md b/cves/2022/CVE-2022-4361.md index 78552c49f4e..1453e692a6c 100644 --- a/cves/2022/CVE-2022-4361.md +++ b/cves/2022/CVE-2022-4361.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/shoucheng3/keycloak__keycloak_CVE-2022-4361_21-1-1 +- https://github.com/faccimatteo/CVE-2022-4361 diff --git a/cves/2022/CVE-2022-43973.md b/cves/2022/CVE-2022-43973.md index c77b60377bb..284cb9937f7 100644 --- a/cves/2022/CVE-2022-43973.md +++ b/cves/2022/CVE-2022-43973.md @@ -15,5 +15,5 @@ An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G - https://youtu.be/TeWAmZaKQ_w #### Github -No PoCs found on GitHub currently. +- https://github.com/UmbertoDellaMonica/Linksys-WRT54GL-Exploitation diff --git a/cves/2022/CVE-2022-44215.md b/cves/2022/CVE-2022-44215.md index ba8dc5ad19f..a57e3917c49 100644 --- a/cves/2022/CVE-2022-44215.md +++ b/cves/2022/CVE-2022-44215.md @@ -13,5 +13,5 @@ There is an open redirect vulnerability in Titan FTP server 19.0 and below. User - https://github.com/JBalanza/CVE-2022-44215 #### Github -No PoCs found on GitHub currently. +- https://github.com/JBalanza/CVE-2022-44215 diff --git a/cves/2022/CVE-2022-44268.md b/cves/2022/CVE-2022-44268.md index a4c1cf3de04..98388f028a5 100644 --- a/cves/2022/CVE-2022-44268.md +++ b/cves/2022/CVE-2022-44268.md @@ -42,6 +42,12 @@ ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a P - https://github.com/nfm/heroku-CVE-2022-44268-reproduction - https://github.com/voidz0r/CVE-2022-44268 - https://github.com/y1nglamore/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment +- https://github.com/atici/ImageMagick-CVE-2022-44268-PoC +- https://github.com/jnschaeffer/cve-2022-44268-detector +- https://github.com/k-javaman12/CVE-2022-44268- #### ExploitDB - https://www.exploit-db.com/exploits/51261 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/imagemagick/CVE-2022-44268 diff --git a/cves/2022/CVE-2022-44276.md b/cves/2022/CVE-2022-44276.md index 329988f3785..12705468327 100644 --- a/cves/2022/CVE-2022-44276.md +++ b/cves/2022/CVE-2022-44276.md @@ -13,5 +13,5 @@ In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions r - https://github.com/HerrLeStrate/CVE-2022-44276-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/HerrLeStrate/CVE-2022-44276-PoC diff --git a/cves/2022/CVE-2022-44312.md b/cves/2022/CVE-2022-44312.md index 5b04bfc597e..b5227a0a8a8 100644 --- a/cves/2022/CVE-2022-44312.md +++ b/cves/2022/CVE-2022-44312.md @@ -13,5 +13,5 @@ PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the Expr No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Halcy0nic/CVEs-for-picoc-3.2.2 diff --git a/cves/2022/CVE-2022-44645.md b/cves/2022/CVE-2022-44645.md index 7458657785b..d1a33827d61 100644 --- a/cves/2022/CVE-2022-44645.md +++ b/cves/2022/CVE-2022-44645.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/linkis/CVE-2022-44645 diff --git a/cves/2022/CVE-2022-45600.md b/cves/2022/CVE-2022-45600.md index 8a7a7285e13..047cfdf6689 100644 --- a/cves/2022/CVE-2022-45600.md +++ b/cves/2022/CVE-2022-45600.md @@ -13,5 +13,5 @@ Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage - https://github.com/ethancunt/CVE-2022-45600 #### Github -No PoCs found on GitHub currently. +- https://github.com/ethancunt/CVE-2022-45600 diff --git a/cves/2022/CVE-2022-46169.md b/cves/2022/CVE-2022-46169.md index 96248f901d9..4f9758a96f5 100644 --- a/cves/2022/CVE-2022-46169.md +++ b/cves/2022/CVE-2022-46169.md @@ -57,6 +57,10 @@ No PoCs from references. - https://github.com/taythebot/CVE-2022-46169 - https://github.com/yassinebk/CVE-2022-46169 - https://github.com/K4PXD/CVE-2022-46169 +- https://github.com/0x0Jackal/CVE-2022-46169 +- https://github.com/nou-man/CVE-2022-46169 +- https://github.com/sh4den/CVE-2022-46169 +- https://github.com/svchost9913/CVE-2022-46169_unauth_remote_code_execution #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46169.yaml @@ -66,3 +70,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2022-46169 diff --git a/cves/2022/CVE-2022-46364.md b/cves/2022/CVE-2022-46364.md index 4901384970f..ee8c8b74084 100644 --- a/cves/2022/CVE-2022-46364.md +++ b/cves/2022/CVE-2022-46364.md @@ -13,5 +13,10 @@ A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM reque No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0xmid00/CVE-2022-46364-poc +- https://github.com/Shashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC +- https://github.com/c0gnit00/CVE-2022-46364 +- https://github.com/cybermaksx/CVE-2022-46364-Proof-of-the-concept +- https://github.com/jwsly12/CVE-2022-46364-htb-ctf +- https://github.com/kasem545/CVE-2022-46364-Poc diff --git a/cves/2022/CVE-2022-46395.md b/cves/2022/CVE-2022-46395.md index 7512476ec20..85508d49cfc 100644 --- a/cves/2022/CVE-2022-46395.md +++ b/cves/2022/CVE-2022-46395.md @@ -18,4 +18,5 @@ An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user - https://github.com/Pro-me3us/CVE_2022_46395_Gazelle - https://github.com/Pro-me3us/CVE_2022_46395_Raven - https://github.com/SmileTabLabo/CVE-2022-46395 +- https://github.com/Gao-Zuin/cve-2022-46395-qemu diff --git a/cves/2022/CVE-2022-47130.md b/cves/2022/CVE-2022-47130.md index 855deb56771..1c8009b5fd0 100644 --- a/cves/2022/CVE-2022-47130.md +++ b/cves/2022/CVE-2022-47130.md @@ -14,5 +14,5 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discoun - https://www.linkedin.com/in/xvinicius/ #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2022-47130 diff --git a/cves/2022/CVE-2022-47131.md b/cves/2022/CVE-2022-47131.md index 7e6f8043f69..f190ff1828c 100644 --- a/cves/2022/CVE-2022-47131.md +++ b/cves/2022/CVE-2022-47131.md @@ -14,5 +14,5 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attack - https://www.linkedin.com/in/xvinicius/ #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2022-47131 diff --git a/cves/2022/CVE-2022-47447.md b/cves/2022/CVE-2022-47447.md index 32c96c6bc0b..f1051b8f31d 100644 --- a/cves/2022/CVE-2022-47447.md +++ b/cves/2022/CVE-2022-47447.md @@ -13,4 +13,4 @@ Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yup-Ivan/CVE-2022-47447 diff --git a/cves/2022/CVE-2022-47966.md b/cves/2022/CVE-2022-47966.md index 5203dc4c200..160f6815016 100644 --- a/cves/2022/CVE-2022-47966.md +++ b/cves/2022/CVE-2022-47966.md @@ -20,6 +20,8 @@ Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through #### Github - https://github.com/shameem-testing/PoC-for-ME-SAML-Vulnerability +- https://github.com/horizon3ai/CVE-2022-47966 +- https://github.com/sh4den/CVE-2022-47966 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47966.yaml diff --git a/cves/2022/CVE-2022-48311.md b/cves/2022/CVE-2022-48311.md index 2ec77976f27..492fbbefaa8 100644 --- a/cves/2022/CVE-2022-48311.md +++ b/cves/2022/CVE-2022-48311.md @@ -13,5 +13,5 @@ - https://github.com/swzhouu/CVE-2022-48311 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2022-48311 diff --git a/cves/2023/CVE-2023-0179.md b/cves/2023/CVE-2023-0179.md index a34baabaf87..2e7002cfec9 100644 --- a/cves/2023/CVE-2023-0179.md +++ b/cves/2023/CVE-2023-0179.md @@ -16,4 +16,6 @@ A buffer overflow vulnerability was found in the Netfilter subsystem in the Linu #### Github - https://github.com/H4K6/CVE-2023-0179-PoC - https://github.com/TurtleARM/CVE-2023-0179-PoC +- https://github.com/prabeershakya/CVE-2023-0179-POC- +- https://github.com/shakyanayann/CVE-2023-0179 diff --git a/cves/2023/CVE-2023-0214.md b/cves/2023/CVE-2023-0214.md index e424f1404e3..e83877a15e7 100644 --- a/cves/2023/CVE-2023-0214.md +++ b/cves/2023/CVE-2023-0214.md @@ -15,7 +15,7 @@ A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior - https://kcm.trellix.com/corporate/index?page=content&id=SB10393 #### Github -No PoCs found on GitHub currently. +- https://github.com/0pts/CVE-2023-0214 #### ExploitDB - https://www.exploit-db.com/exploits/51237 diff --git a/cves/2023/CVE-2023-0297.md b/cves/2023/CVE-2023-0297.md index 200ebb362c9..91c464c89cc 100644 --- a/cves/2023/CVE-2023-0297.md +++ b/cves/2023/CVE-2023-0297.md @@ -20,6 +20,7 @@ Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. - https://github.com/bAuh0lz/CVE-2023-0297_Pre-auth_RCE_in_pyLoad - https://github.com/btar1gan/exploit_CVE-2023-0297 - https://github.com/overgrowncarrot1/CVE-2023-0297 +- https://github.com/hazeyez/CVE-2023-0297 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0297.yaml diff --git a/cves/2023/CVE-2023-0386.md b/cves/2023/CVE-2023-0386.md index 6b478725337..ada435f1172 100644 --- a/cves/2023/CVE-2023-0386.md +++ b/cves/2023/CVE-2023-0386.md @@ -33,6 +33,9 @@ A flaw was found in the Linux kernel, where unauthorized access to the execution - https://github.com/sxlmnwb/CVE-2023-0386 - https://github.com/veritas501/CVE-2023-0386 - https://github.com/xkaneiki/CVE-2023-0386 +- https://github.com/dragosbanica/CVE-2023-0386_POC +- https://github.com/huovnn/CVE-2023-0386-go-poc +- https://github.com/pwncone/CVE-2023-0386-OverlayFS #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb diff --git a/cves/2023/CVE-2023-0669.md b/cves/2023/CVE-2023-0669.md index ddf4b9f256c..6939a869c8f 100644 --- a/cves/2023/CVE-2023-0669.md +++ b/cves/2023/CVE-2023-0669.md @@ -20,6 +20,7 @@ Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication - https://github.com/Avento/CVE-2023-0669 - https://github.com/cataiovita/CVE-2023-0669 - https://github.com/cataliniovita/CVE-2023-0669 +- https://github.com/zakaria-laouani/cve-2023-0669-simulation #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0669.yaml diff --git a/cves/2023/CVE-2023-1189.md b/cves/2023/CVE-2023-1189.md index 3534f325035..faa705add92 100644 --- a/cves/2023/CVE-2023-1189.md +++ b/cves/2023/CVE-2023-1189.md @@ -15,5 +15,5 @@ In WiseCleaner Wise Folder Hider 4.4.3.202 wurde eine problematische Schwachstel - https://vuldb.com/?id.222361 #### Github -No PoCs found on GitHub currently. +- https://github.com/le0s1mba/CVE-2023-1189 diff --git a/cves/2023/CVE-2023-1773.md b/cves/2023/CVE-2023-1773.md index a999671346a..aa4dc2adb3b 100644 --- a/cves/2023/CVE-2023-1773.md +++ b/cves/2023/CVE-2023-1773.md @@ -14,5 +14,5 @@ In Rockoa 2.3.2 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eing No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/C1oudfL0w0/CVE-2023-1773-Exploit diff --git a/cves/2023/CVE-2023-20052.md b/cves/2023/CVE-2023-20052.md index f3920568daf..560d7951eb9 100644 --- a/cves/2023/CVE-2023-20052.md +++ b/cves/2023/CVE-2023-20052.md @@ -60,4 +60,5 @@ No PoCs from references. #### Github - https://github.com/cY83rR0H1t/CVE-2023-20052 - https://github.com/nokn0wthing/CVE-2023-20052 +- https://github.com/tralsesec/CVE-2023-20052 diff --git a/cves/2023/CVE-2023-20198.md b/cves/2023/CVE-2023-20198.md index 2c9e0f79309..99523a41370 100644 --- a/cves/2023/CVE-2023-20198.md +++ b/cves/2023/CVE-2023-20198.md @@ -222,6 +222,8 @@ Cisco is providing an update for the ongoing investigation into observed exploit - https://github.com/securityphoenix/cisco-CVE-2023-20198-tester - https://github.com/smokeintheshell/CVE-2023-20198 - https://github.com/sohaibeb/CVE-2023-20198 +- https://github.com/Gill-Singh-A/CVE-2023-20198-Exploit +- https://github.com/djayaGit/cve-2023-20198-poc-cisco #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20198.yaml diff --git a/cves/2023/CVE-2023-20564.md b/cves/2023/CVE-2023-20564.md index 9fe75f64a1c..425f5389945 100644 --- a/cves/2023/CVE-2023-20564.md +++ b/cves/2023/CVE-2023-20564.md @@ -14,5 +14,5 @@ Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004 #### Github -No PoCs found on GitHub currently. +- https://github.com/NtGabrielGomes/CVE-2023-20564 diff --git a/cves/2023/CVE-2023-20938.md b/cves/2023/CVE-2023-20938.md index 5fd3d9f8dcc..89190edef72 100644 --- a/cves/2023/CVE-2023-20938.md +++ b/cves/2023/CVE-2023-20938.md @@ -16,4 +16,7 @@ No PoCs from references. #### Github - https://github.com/anansi2safe/CVE-2023-20938 - https://github.com/sunofva/FosterFix +- https://github.com/0xAtharv/CVE-2023-20938-Public +- https://github.com/byt3quester/CVE-2023-20938-poc +- https://github.com/jaf0rk/CVE-2023-20938 diff --git a/cves/2023/CVE-2023-21554.md b/cves/2023/CVE-2023-21554.md index fa77ee833cd..6232f867370 100644 --- a/cves/2023/CVE-2023-21554.md +++ b/cves/2023/CVE-2023-21554.md @@ -51,6 +51,7 @@ No PoCs from references. - https://github.com/leongxudong/MSMQ-Vulnerability - https://github.com/leongxudong/MSMQ-Vulnerbaility - https://github.com/zoemurmure/CVE-2023-21554-PoC +- https://github.com/shootweb/CVE-2023-21554 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/msmq/cve_2023_21554_queuejumper.rb diff --git a/cves/2023/CVE-2023-21716.md b/cves/2023/CVE-2023-21716.md index 503edf8614e..e4f0f4db2cd 100644 --- a/cves/2023/CVE-2023-21716.md +++ b/cves/2023/CVE-2023-21716.md @@ -47,4 +47,6 @@ No PoCs from references. - https://github.com/maldev866/WordExp_CVE_2023_21716 - https://github.com/mikesxrs/CVE-2023-21716_YARA_Results - https://github.com/r00tb1t/CVE-2024-21413-POC +- https://github.com/REGGYRAIDER/CVE-2023-21716 +- https://github.com/muumthf/CVE-2023-21716 diff --git a/cves/2023/CVE-2023-21746.md b/cves/2023/CVE-2023-21746.md index b57e80946ec..fbf7f9ec7bf 100644 --- a/cves/2023/CVE-2023-21746.md +++ b/cves/2023/CVE-2023-21746.md @@ -48,4 +48,5 @@ No PoCs from references. #### Github - https://github.com/Muhammad-Ali007/LocalPotato_CVE-2023-21746 - https://github.com/decoder-it/LocalPotato +- https://github.com/TailoredSecOps/PEREDBOEMPATAT-BOF diff --git a/cves/2023/CVE-2023-21768.md b/cves/2023/CVE-2023-21768.md index dbdef11abb3..58800324e3f 100644 --- a/cves/2023/CVE-2023-21768.md +++ b/cves/2023/CVE-2023-21768.md @@ -35,6 +35,8 @@ Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabili - https://github.com/radoi-teodor/CVE-2023-21768-DSE-Bypass - https://github.com/xboxoneresearch/CVE-2023-21768-dotnet - https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit +- https://github.com/ivanovick1/Windows_AFD_LPE_CVE-2023-21768 +- https://github.com/leandrofleury/CVE-2023-21768 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2023_21768_afd_lpe.rb diff --git a/cves/2023/CVE-2023-21839.md b/cves/2023/CVE-2023-21839.md index 58de340151d..7ba32f15b29 100644 --- a/cves/2023/CVE-2023-21839.md +++ b/cves/2023/CVE-2023-21839.md @@ -28,3 +28,6 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/iiop/cve_2023_21839_weblogic_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2023-21839 diff --git a/cves/2023/CVE-2023-22047.md b/cves/2023/CVE-2023-22047.md index b4ecaa94e1e..86221ce29db 100644 --- a/cves/2023/CVE-2023-22047.md +++ b/cves/2023/CVE-2023-22047.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/tuo4n8/CVE-2023-22047 +- https://github.com/0xTerror/CVE-2023-22047---Oracle-PeopleSoft-LFI +- https://github.com/0xTerror/CVE-2023-22047-Oracle-PeopleSoft-LFI #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22047.yaml diff --git a/cves/2023/CVE-2023-22515.md b/cves/2023/CVE-2023-22515.md index 8bea8f765f3..0fd693cecf8 100644 --- a/cves/2023/CVE-2023-22515.md +++ b/cves/2023/CVE-2023-22515.md @@ -62,6 +62,10 @@ Atlassian Cloud sites are not affected by this vulnerability. If your Confluence - https://github.com/vivigotnotime/CVE-2023-22515-Exploit-Script - https://github.com/xorbbo/cve-2023-22515 - https://github.com/youcannotseemeagain/CVE-2023-22515_RCE +- https://github.com/Arkha-Corvus/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197 +- https://github.com/dkq-k/cve-2023-22515-1 +- https://github.com/s1d6point7bugcrowd/CVE-2023-22515-check +- https://github.com/s1incere/CVE-2023-22515 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yaml @@ -69,3 +73,6 @@ Atlassian Cloud sites are not affected by this vulnerability. If your Confluence #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22515.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/atlassian_confluence_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2023-22515 diff --git a/cves/2023/CVE-2023-22518.md b/cves/2023/CVE-2023-22518.md index aca2396be54..8c0ee3b96a4 100644 --- a/cves/2023/CVE-2023-22518.md +++ b/cves/2023/CVE-2023-22518.md @@ -25,6 +25,7 @@ All versions of Confluence Data Center and Server are affected by this unexploit - https://github.com/davidfortytwo/CVE-2023-22518 - https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence - https://github.com/sanjai-AK47/CVE-2023-22518 +- https://github.com/d3ckkNo0b/analyze-Exploit-CVE-2023-22518-Confluence #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22518.yaml diff --git a/cves/2023/CVE-2023-22527.md b/cves/2023/CVE-2023-22527.md index 84dd60804f0..ad6851d052b 100644 --- a/cves/2023/CVE-2023-22527.md +++ b/cves/2023/CVE-2023-22527.md @@ -47,9 +47,13 @@ A template injection vulnerability on older versions of Confluence Data Center a - https://github.com/thompson005/CVE-2023-22527 - https://github.com/vulncheck-oss/cve-2023-22527 - https://github.com/yoryio/CVE-2023-22527 +- https://github.com/mylo-2001/AtlassianPwn #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22527.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22527.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2023-22527 diff --git a/cves/2023/CVE-2023-22809.md b/cves/2023/CVE-2023-22809.md index 06111e88c35..885175e26ba 100644 --- a/cves/2023/CVE-2023-22809.md +++ b/cves/2023/CVE-2023-22809.md @@ -33,6 +33,7 @@ In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra argument - https://github.com/pashayogi/CVE-2023-22809 - https://github.com/spidoman/CVE-2023-22809-automated-python-exploits - https://github.com/stefan11111/rdoedit +- https://github.com/ValeuDoamne/CVE-2023-22809 #### ExploitDB - https://www.exploit-db.com/exploits/51217 diff --git a/cves/2023/CVE-2023-22894.md b/cves/2023/CVE-2023-22894.md index 76e145a53d3..4424d0edd8d 100644 --- a/cves/2023/CVE-2023-22894.md +++ b/cves/2023/CVE-2023-22894.md @@ -17,4 +17,5 @@ Strapi through 4.5.5 allows attackers (with access to the admin panel) to discov #### Github - https://github.com/Saboor-Hakimi/CVE-2023-22894 - https://github.com/maxntv24/CVE-2023-22894-PoC +- https://github.com/maxntv/CVE-2023-22894-PoC diff --git a/cves/2023/CVE-2023-22906.md b/cves/2023/CVE-2023-22906.md index 63b2bb40e3d..f2bd70e0f8b 100644 --- a/cves/2023/CVE-2023-22906.md +++ b/cves/2023/CVE-2023-22906.md @@ -14,5 +14,5 @@ Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileg - https://github.com/nonamecoder/CVE-2023-22906 #### Github -No PoCs found on GitHub currently. +- https://github.com/nonamecoder/CVE-2023-22906 diff --git a/cves/2023/CVE-2023-23169.md b/cves/2023/CVE-2023-23169.md index 65bcdbceff7..dbec7090e09 100644 --- a/cves/2023/CVE-2023-23169.md +++ b/cves/2023/CVE-2023-23169.md @@ -13,5 +13,5 @@ Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side req - https://github.com/S4nshine/CVE-2023-23169 #### Github -No PoCs found on GitHub currently. +- https://github.com/S4nshine/CVE-2023-23169 diff --git a/cves/2023/CVE-2023-23397.md b/cves/2023/CVE-2023-23397.md index 29e52b86023..6bf7d0d72fd 100644 --- a/cves/2023/CVE-2023-23397.md +++ b/cves/2023/CVE-2023-23397.md @@ -50,4 +50,5 @@ No PoCs from references. - https://github.com/tiepologian/CVE-2023-23397 - https://github.com/vlad-a-man/CVE-2023-23397 - https://github.com/praneethnaidu1910-cmd/cve-2023-23397-purple-team +- https://github.com/Phaedrik/CVE-2023-23397-POC diff --git a/cves/2023/CVE-2023-23752.md b/cves/2023/CVE-2023-23752.md index 293375df3a8..1e495d9c601 100644 --- a/cves/2023/CVE-2023-23752.md +++ b/cves/2023/CVE-2023-23752.md @@ -74,6 +74,7 @@ No PoCs from references. - https://github.com/wangking1/CVE-2023-23752-poc - https://github.com/yTxZx/CVE-2023-23752 - https://github.com/z3n70/CVE-2023-23752 +- https://github.com/BardLaudian/CVE-2023-23752 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23752.yaml @@ -83,3 +84,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/joomla_api_improper_access_checks.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/joomla/CVE-2023-23752 diff --git a/cves/2023/CVE-2023-23946.md b/cves/2023/CVE-2023-23946.md index 29c98028be3..72c88c21c40 100644 --- a/cves/2023/CVE-2023-23946.md +++ b/cves/2023/CVE-2023-23946.md @@ -23,4 +23,5 @@ No PoCs from references. #### Github - https://github.com/bruno-1337/CVE-2023-23946-POC +- https://github.com/tralsesec/CVE-2023-23946 diff --git a/cves/2023/CVE-2023-24012.md b/cves/2023/CVE-2023-24012.md index 354f18257c9..68ec9bf10bd 100644 --- a/cves/2023/CVE-2023-24012.md +++ b/cves/2023/CVE-2023-24012.md @@ -13,5 +13,5 @@ An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) wi - https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d #### Github -No PoCs found on GitHub currently. +- https://github.com/SafeLock-D2E/Quiksand-CVE-2023-24012 diff --git a/cves/2023/CVE-2023-24055.md b/cves/2023/CVE-2023-24055.md index 620ba2b6bb8..6d77e449ce0 100644 --- a/cves/2023/CVE-2023-24055.md +++ b/cves/2023/CVE-2023-24055.md @@ -19,4 +19,5 @@ KeePass through 2.53 (in a default installation) allows an attacker, who has wri - https://github.com/n3rada/Invoke-KeePassBackup - https://github.com/yosef0x01/CVE-2023-24055 - https://github.com/zwlsix/KeePass-CVE-2023-24055 +- https://github.com/alt3kx/CVE-2023-24055_PoC diff --git a/cves/2023/CVE-2023-24709.md b/cves/2023/CVE-2023-24709.md index 357a64a32df..6db7967f5ff 100644 --- a/cves/2023/CVE-2023-24709.md +++ b/cves/2023/CVE-2023-24709.md @@ -15,7 +15,7 @@ An issue found in Paradox Security Systems IPR512 allows attackers to cause a de - https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 #### Github -No PoCs found on GitHub currently. +- https://github.com/darknesschieftain/Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC #### ExploitDB - https://www.exploit-db.com/exploits/51356 diff --git a/cves/2023/CVE-2023-24932.md b/cves/2023/CVE-2023-24932.md index e3b9ac0e5db..654e79e8c44 100644 --- a/cves/2023/CVE-2023-24932.md +++ b/cves/2023/CVE-2023-24932.md @@ -57,4 +57,5 @@ No PoCs from references. #### Github - https://github.com/Wack0/CVE-2022-21894 - https://github.com/helleflo1312/Orchestrated-Powershell-for-CVE-2023-24932 +- https://github.com/v1ckxy/Orchestrated-Powershell-for-CVE-2023-24932-en diff --git a/cves/2023/CVE-2023-25136.md b/cves/2023/CVE-2023-25136.md index 25a7c63be24..79afd5feb1e 100644 --- a/cves/2023/CVE-2023-25136.md +++ b/cves/2023/CVE-2023-25136.md @@ -27,4 +27,5 @@ OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options. - https://github.com/nhakobyan685/CVE-2023-25136 - https://github.com/ticofookfook/CVE-2023-25136 - https://github.com/zacharimayer/ssh-exploit +- https://github.com/Lane0218/CVE-2023-25136-PoC diff --git a/cves/2023/CVE-2023-25157.md b/cves/2023/CVE-2023-25157.md index f667ada1083..d2858459f9a 100644 --- a/cves/2023/CVE-2023-25157.md +++ b/cves/2023/CVE-2023-25157.md @@ -22,6 +22,10 @@ No PoCs from references. - https://github.com/dr-cable-tv/Geoserver-CVE-2023-25157 - https://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158 - https://github.com/win3zz/CVE-2023-25157 +- https://github.com/7imbitz/CVE-2023-25157-checker #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25157.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2023-25157 diff --git a/cves/2023/CVE-2023-25194.md b/cves/2023/CVE-2023-25194.md index 979f36e13fe..e28f69764eb 100644 --- a/cves/2023/CVE-2023-25194.md +++ b/cves/2023/CVE-2023-25194.md @@ -22,3 +22,6 @@ A possible security vulnerability has been identified in Apache Kafka Connect AP #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_druid_cve_2023_25194.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kafka/CVE-2023-25194 diff --git a/cves/2023/CVE-2023-25826.md b/cves/2023/CVE-2023-25826.md index 9c0e0b5e4f9..4314546de20 100644 --- a/cves/2023/CVE-2023-25826.md +++ b/cves/2023/CVE-2023-25826.md @@ -20,3 +20,6 @@ Due to insufficient validation of parameters passed to the legacy HTTP query API #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opentsdb_key_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/opentsdb/CVE-2023-25826 diff --git a/cves/2023/CVE-2023-26035.md b/cves/2023/CVE-2023-26035.md index 6da68b8a6c0..771e6defd83 100644 --- a/cves/2023/CVE-2023-26035.md +++ b/cves/2023/CVE-2023-26035.md @@ -20,6 +20,7 @@ ZoneMinder is a free, open source Closed-circuit television software application - https://github.com/heapbytes/CVE-2023-26035 - https://github.com/m3m0o/zoneminder-snapshots-rce-poc - https://github.com/rvizx/CVE-2023-26035 +- https://github.com/rvzsec/CVE-2023-26035 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26035.yaml diff --git a/cves/2023/CVE-2023-26083.md b/cves/2023/CVE-2023-26083.md index ed29102768c..79770e1a9b0 100644 --- a/cves/2023/CVE-2023-26083.md +++ b/cves/2023/CVE-2023-26083.md @@ -16,4 +16,5 @@ Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver #### Github - https://github.com/0x36/Pixel_GPU_Exploit - https://github.com/a-roshbaik/Pixel_GPU_Exploit +- https://github.com/noverisp3/CVE-2023-26083 diff --git a/cves/2023/CVE-2023-26208.md b/cves/2023/CVE-2023-26208.md index 3abfbce4c65..dfc9189b3a2 100644 --- a/cves/2023/CVE-2023-26208.md +++ b/cves/2023/CVE-2023-26208.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2023-26208 +- https://github.com/chessredoffsec/CVE-2023-26208 diff --git a/cves/2023/CVE-2023-26209.md b/cves/2023/CVE-2023-26209.md index 6e266418946..a1a9ec06dcc 100644 --- a/cves/2023/CVE-2023-26209.md +++ b/cves/2023/CVE-2023-26209.md @@ -19,4 +19,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2023-26209 +- https://github.com/chessredoffsec/CVE-2023-26209 diff --git a/cves/2023/CVE-2023-26360.md b/cves/2023/CVE-2023-26360.md index 4c5f9f85f93..132bc4883c7 100644 --- a/cves/2023/CVE-2023-26360.md +++ b/cves/2023/CVE-2023-26360.md @@ -16,6 +16,9 @@ Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and ea #### Github - https://github.com/jakabakos/CVE-2023-26360-adobe-coldfusion-rce-exploit - https://github.com/yosef0x01/CVE-2023-26360 +- https://github.com/H3rm1tR3b0rn/CVE-2023-26360-RCE +- https://github.com/RyanRodrigues880/CVE-2023-26360 +- https://github.com/joaoaugustom/Adobe_ColdFusion_RCE_Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26360.yaml @@ -23,3 +26,6 @@ Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and ea #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/adobe_coldfusion_rce_cve_2023_26360.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/adobe_coldfusion_fileread_cve_2023_26360.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2023-26360 diff --git a/cves/2023/CVE-2023-2640.md b/cves/2023/CVE-2023-2640.md index 2d9e71abc8c..fd11ef6d568 100644 --- a/cves/2023/CVE-2023-2640.md +++ b/cves/2023/CVE-2023-2640.md @@ -25,6 +25,9 @@ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip - https://github.com/musorblyat/CVE-2023-2640-CVE-2023-32629 - https://github.com/vinetsuicide/CVE-2023-2640-CVE-2023-32629 - https://github.com/xS9NTX/CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC +- https://github.com/WhatsWrongAndWhy/CVE-2023-2640-CVE-2023-32629 +- https://github.com/amar-imamovic/CVE-2023-2640-CVE-2023-32629-Interactive-PoC +- https://github.com/z3usx01/CVE-2023-2640-3262-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2640.yaml diff --git a/cves/2023/CVE-2023-26469.md b/cves/2023/CVE-2023-26469.md index cdfc554f73b..1039106d8e2 100644 --- a/cves/2023/CVE-2023-26469.md +++ b/cves/2023/CVE-2023-26469.md @@ -17,6 +17,7 @@ In Jorani 1.0.0, an attacker could leverage path traversal to access files and e - https://github.com/d0rb/CVE-2023-26469 - https://github.com/jiao-wt/scamer - https://github.com/samipmainali/Jorani-Reverse-Shell-v1.0.0 +- https://github.com/Kairo-one/CVE-2023-26469-Jorani #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26469.yaml diff --git a/cves/2023/CVE-2023-26482.md b/cves/2023/CVE-2023-26482.md index d2beb8fb67c..1a31ec4ce18 100644 --- a/cves/2023/CVE-2023-26482.md +++ b/cves/2023/CVE-2023-26482.md @@ -14,7 +14,7 @@ Nextcloud server is an open source home cloud implementation. In affected versio No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ISabbiI/PoC---CVE-2023-26482-RCE-LAB-Nextcloud #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/nextcloud_workflows_rce.rb diff --git a/cves/2023/CVE-2023-27163.md b/cves/2023/CVE-2023-27163.md index 17906b3a382..feac1b20032 100644 --- a/cves/2023/CVE-2023-27163.md +++ b/cves/2023/CVE-2023-27163.md @@ -38,6 +38,12 @@ request-baskets up to v1.2.1 was discovered to contain a Server-Side Request For - https://github.com/seanrdev/cve-2023-27163 - https://github.com/theopaid/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer - https://github.com/thomas-osgood/CVE-2023-27163 +- https://github.com/Jeanback1/CVE-2023-27163-exploit +- https://github.com/lukehebe/CVE-2023-27163-POC +- https://github.com/rvzsec/CVE-2023-27163 +- https://github.com/thealchimist86/CVE-2023-27163---Maltrail-0.53---RCE +- https://github.com/thealchimist86/CVE-2023-27163---SSRF-Baskets-Requests +- https://github.com/tombstoneghost/htb-sau-exploit-chain #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27163.yaml diff --git a/cves/2023/CVE-2023-27350.md b/cves/2023/CVE-2023-27350.md index fc3b30ef9f8..613cb39e5a9 100644 --- a/cves/2023/CVE-2023-27350.md +++ b/cves/2023/CVE-2023-27350.md @@ -35,6 +35,8 @@ This vulnerability allows remote attackers to bypass authentication on affected - https://github.com/rasan2001/CVE-2023-27350 - https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability - https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351 +- https://github.com/dezso-dfield/CVE-2023-27350 +- https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27350.yaml diff --git a/cves/2023/CVE-2023-27372.md b/cves/2023/CVE-2023-27372.md index 9114db96a7e..d9662d6bda1 100644 --- a/cves/2023/CVE-2023-27372.md +++ b/cves/2023/CVE-2023-27372.md @@ -27,6 +27,10 @@ SPIP before 4.2.1 allows Remote Code Execution via form values in the public are - https://github.com/izzz0/CVE-2023-27372-POC - https://github.com/nuts7/CVE-2023-27372 - https://github.com/redboltsec/CVE-2023-27372-PoC +- https://github.com/Ap0dexMe0/CVE-2023-27372 +- https://github.com/KirolosKhairy/CVE-2023-27372 +- https://github.com/estebanzarate/CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC +- https://github.com/scriniariii/CVE-2023-27372 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27372.yaml diff --git a/cves/2023/CVE-2023-27524.md b/cves/2023/CVE-2023-27524.md index 0b234185700..946e0a7c191 100644 --- a/cves/2023/CVE-2023-27524.md +++ b/cves/2023/CVE-2023-27524.md @@ -42,3 +42,6 @@ Session Validation attacks in Apache Superset versions up to and including 2.0.1 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/apache_superset_cookie_sig_priv_esc.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/superset/CVE-2023-27524 diff --git a/cves/2023/CVE-2023-27532.md b/cves/2023/CVE-2023-27532.md index a8fd41c1ddf..ecb56c9d5ca 100644 --- a/cves/2023/CVE-2023-27532.md +++ b/cves/2023/CVE-2023-27532.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/horizon3ai/CVE-2023-27532 - https://github.com/puckiestyle/CVE-2023-27532-RCE-Only - https://github.com/sfewer-r7/CVE-2023-27532 +- https://github.com/yunus-a1i/veeam-cve-2023-27532-mock diff --git a/cves/2023/CVE-2023-27566.md b/cves/2023/CVE-2023-27566.md index b61377cd41f..6f38e1a1c91 100644 --- a/cves/2023/CVE-2023-27566.md +++ b/cves/2023/CVE-2023-27566.md @@ -13,5 +13,5 @@ Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a craf - https://github.com/openl2d/moc3ingbird #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenL2D/moc3ingbird diff --git a/cves/2023/CVE-2023-27742.md b/cves/2023/CVE-2023-27742.md index 0ba87f13d66..554e9db6ba1 100644 --- a/cves/2023/CVE-2023-27742.md +++ b/cves/2023/CVE-2023-27742.md @@ -13,5 +13,5 @@ IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via th - https://github.com/G37SYS73M/CVE-2023-27742 #### Github -No PoCs found on GitHub currently. +- https://github.com/G37SYS73M/CVE-2023-27742 diff --git a/cves/2023/CVE-2023-28121.md b/cves/2023/CVE-2023-28121.md index 4142b1fa9bb..a8816c3f79c 100644 --- a/cves/2023/CVE-2023-28121.md +++ b/cves/2023/CVE-2023-28121.md @@ -19,6 +19,8 @@ An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) - https://github.com/im-hanzou/Mass-CVE-2023-28121 - https://github.com/rio128128/Mass-CVE-2023-28121-kdoec - https://github.com/sug4r-wr41th/CVE-2023-28121 +- https://github.com/0axz-tools/CVE-2023-28121 +- https://github.com/luisdevpentest/CVE-2023-28121-WordPress-Privilege-Escalation #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28121.yaml diff --git a/cves/2023/CVE-2023-28205.md b/cves/2023/CVE-2023-28205.md index 97a273f33a8..7fb35caa417 100644 --- a/cves/2023/CVE-2023-28205.md +++ b/cves/2023/CVE-2023-28205.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/ntfargo/uaf-2023-28205 +- https://github.com/seregonwar/uaf-2023-28205 diff --git a/cves/2023/CVE-2023-2825.md b/cves/2023/CVE-2023-2825.md index b5abf3f2fb9..1d2d16edd58 100644 --- a/cves/2023/CVE-2023-2825.md +++ b/cves/2023/CVE-2023-2825.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/alej6/MassCyberCenter-Mentorship-Project- - https://github.com/caopengyan/CVE-2023-2825 - https://github.com/cc3305/CVE-2023-2825 +- https://github.com/Groppoxx/CVE-2023-2825-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2825.yaml diff --git a/cves/2023/CVE-2023-28432.md b/cves/2023/CVE-2023-28432.md index 517f930c1b0..7248d15f736 100644 --- a/cves/2023/CVE-2023-28432.md +++ b/cves/2023/CVE-2023-28432.md @@ -40,3 +40,6 @@ Minio is a Multi-Cloud Object Storage framework. In a cluster deployment startin #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/minio_bootstrap_verify_info_disc.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/minio/CVE-2023-28432 diff --git a/cves/2023/CVE-2023-29017.md b/cves/2023/CVE-2023-29017.md index aea15725e15..71218277384 100644 --- a/cves/2023/CVE-2023-29017.md +++ b/cves/2023/CVE-2023-29017.md @@ -18,4 +18,5 @@ vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in mo - https://github.com/jakabakos/vm2-sandbox-escape-exploits - https://github.com/passwa11/CVE-2023-29017-reverse-shell - https://github.com/timb-machine-mirrors/seongil-wi-CVE-2023-29017 +- https://github.com/gunwoo105/Node_CVE-2023-29017 diff --git a/cves/2023/CVE-2023-29300.md b/cves/2023/CVE-2023-29300.md index 530d59a4c08..4e74c612fe1 100644 --- a/cves/2023/CVE-2023-29300.md +++ b/cves/2023/CVE-2023-29300.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29300.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2023-29300 diff --git a/cves/2023/CVE-2023-29357.md b/cves/2023/CVE-2023-29357.md index da687b24465..959c1a8293d 100644 --- a/cves/2023/CVE-2023-29357.md +++ b/cves/2023/CVE-2023-29357.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/Guillaume-Risch/cve-2023-29357-Sharepoint - https://github.com/KeyStrOke95/CVE-2023-29357-ExE - https://github.com/LuemmelSec/CVE-2023-29357 +- https://github.com/DonVorrin/CVE-2023-29357 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29357.yaml diff --git a/cves/2023/CVE-2023-29386.md b/cves/2023/CVE-2023-29386.md index 9667f324301..10a471917e1 100644 --- a/cves/2023/CVE-2023-29386.md +++ b/cves/2023/CVE-2023-29386.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Ma No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/vigilante-1337/CVE-2023-29386 diff --git a/cves/2023/CVE-2023-2986.md b/cves/2023/CVE-2023-2986.md index b1c03cd8eda..f0555446c1e 100644 --- a/cves/2023/CVE-2023-2986.md +++ b/cves/2023/CVE-2023-2986.md @@ -17,6 +17,7 @@ The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to au #### Github - https://github.com/Alucard0x1/CVE-2023-2986 +- https://github.com/Ayantaker/CVE-2023-2986 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2986.yaml diff --git a/cves/2023/CVE-2023-29919.md b/cves/2023/CVE-2023-29919.md index 383c79e7335..b87e087e4e5 100644 --- a/cves/2023/CVE-2023-29919.md +++ b/cves/2023/CVE-2023-29919.md @@ -13,7 +13,7 @@ SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the - https://github.com/xiaosed/CVE-2023-29919/ #### Github -No PoCs found on GitHub currently. +- https://github.com/xiaosed/CVE-2023-29919 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml diff --git a/cves/2023/CVE-2023-30146.md b/cves/2023/CVE-2023-30146.md index 006609aef38..71ceb0f7c11 100644 --- a/cves/2023/CVE-2023-30146.md +++ b/cves/2023/CVE-2023-30146.md @@ -14,5 +14,5 @@ Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauth - https://github.com/L1-0/CVE-2023-30146 #### Github -No PoCs found on GitHub currently. +- https://github.com/L1-0/CVE-2023-30146 diff --git a/cves/2023/CVE-2023-30212.md b/cves/2023/CVE-2023-30212.md index 573fafc0f8d..5878219577b 100644 --- a/cves/2023/CVE-2023-30212.md +++ b/cves/2023/CVE-2023-30212.md @@ -26,6 +26,7 @@ No PoCs from references. - https://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability - https://github.com/libasv/Exploite-CVE-2023-30212-vulnerability - https://github.com/sungmin20/cve-2023-30212 +- https://github.com/imathewvincent/CVE-2023-30212-OURPHP-Vulnerability #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30212.yaml diff --git a/cves/2023/CVE-2023-30253.md b/cves/2023/CVE-2023-30253.md index b1125c86f9b..5c794b7ec07 100644 --- a/cves/2023/CVE-2023-30253.md +++ b/cves/2023/CVE-2023-30253.md @@ -20,6 +20,8 @@ Dolibarr before 17.0.1 allows remote code execution by an authenticated user via - https://github.com/dollarboysushil/Dolibarr-17.0.0-Exploit-CVE-2023-30253 - https://github.com/g4nkd/CVE-2023-30253-PoC - https://github.com/nikn0laty/Exploit-for-Dolibarr-17.0.0-CVE-2023-30253 +- https://github.com/1lkla/POC-exploit-for-Dolibarr +- https://github.com/Jeanback1/CVE-2023-30253-exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/dolibarr_cms_rce_cve_2023_30253.rb diff --git a/cves/2023/CVE-2023-30258.md b/cves/2023/CVE-2023-30258.md index 3d5b3aaaf79..5d1689eaad7 100644 --- a/cves/2023/CVE-2023-30258.md +++ b/cves/2023/CVE-2023-30258.md @@ -22,6 +22,8 @@ Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allo - https://github.com/n00o00b/CVE-2023-30258-RCE-POC - https://github.com/sk00l/CVE-2023-30258 - https://github.com/tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit +- https://github.com/cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit +- https://github.com/estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30258.yaml diff --git a/cves/2023/CVE-2023-30367.md b/cves/2023/CVE-2023-30367.md index 31259e7ecc7..9015bc98461 100644 --- a/cves/2023/CVE-2023-30367.md +++ b/cves/2023/CVE-2023-30367.md @@ -14,5 +14,5 @@ Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software tha - https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper #### Github -No PoCs found on GitHub currently. +- https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper diff --git a/cves/2023/CVE-2023-30459.md b/cves/2023/CVE-2023-30459.md index bcb118f846f..ec72fa08d42 100644 --- a/cves/2023/CVE-2023-30459.md +++ b/cves/2023/CVE-2023-30459.md @@ -14,5 +14,5 @@ SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has admin - https://smartptt.com #### Github -No PoCs found on GitHub currently. +- https://github.com/Toxich4/CVE-2023-30459 diff --git a/cves/2023/CVE-2023-30547.md b/cves/2023/CVE-2023-30547.md index c62b45f7a0f..c586ea590b7 100644 --- a/cves/2023/CVE-2023-30547.md +++ b/cves/2023/CVE-2023-30547.md @@ -19,4 +19,5 @@ vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in mo - https://github.com/junnythemarksman/CVE-2023-30547 - https://github.com/rvizx/CVE-2023-30547 - https://github.com/user0x1337/CVE-2023-30547 +- https://github.com/rvzsec/CVE-2023-30547 diff --git a/cves/2023/CVE-2023-30799.md b/cves/2023/CVE-2023-30799.md index de7c983149f..9a08b2eb455 100644 --- a/cves/2023/CVE-2023-30799.md +++ b/cves/2023/CVE-2023-30799.md @@ -13,5 +13,5 @@ MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerab - https://github.com/MarginResearch/FOISted #### Github -No PoCs found on GitHub currently. +- https://github.com/alzeer711/MikroTik-RouterOS-6.49.18-Exploit-Kit diff --git a/cves/2023/CVE-2023-31059.md b/cves/2023/CVE-2023-31059.md index 374ae4d9a68..88b410d8772 100644 --- a/cves/2023/CVE-2023-31059.md +++ b/cves/2023/CVE-2023-31059.md @@ -13,7 +13,7 @@ Repetier Server through 1.4.10 allows ..%5c directory traversal for reading file - https://cybir.com/2023/cve/poc-repetier-server-140/ #### Github -No PoCs found on GitHub currently. +- https://github.com/mbanyamer/CVE-2023-31059-Repetier-Server-1.4.10-Unauthenticated-Path-Traversal #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31059.yaml diff --git a/cves/2023/CVE-2023-31497.md b/cves/2023/CVE-2023-31497.md index 1b1c2e7f647..770de0d8953 100644 --- a/cves/2023/CVE-2023-31497.md +++ b/cves/2023/CVE-2023-31497.md @@ -13,5 +13,5 @@ Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Sec - https://github.com/0xInfection/EPScalate #### Github -No PoCs found on GitHub currently. +- https://github.com/0xInfection/EPScalate diff --git a/cves/2023/CVE-2023-31594.md b/cves/2023/CVE-2023-31594.md index 3ca6af13e49..aae8459a8e3 100644 --- a/cves/2023/CVE-2023-31594.md +++ b/cves/2023/CVE-2023-31594.md @@ -13,5 +13,5 @@ IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an e - https://github.com/Yozarseef95/CVE-2023-31594 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yozarseef95/CVE-2023-31594 diff --git a/cves/2023/CVE-2023-31595.md b/cves/2023/CVE-2023-31595.md index b6611497a0b..c3deccb7bf5 100644 --- a/cves/2023/CVE-2023-31595.md +++ b/cves/2023/CVE-2023-31595.md @@ -13,5 +13,5 @@ IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unau - https://github.com/Yozarseef95/CVE-2023-31595 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yozarseef95/CVE-2023-31595 diff --git a/cves/2023/CVE-2023-31664.md b/cves/2023/CVE-2023-31664.md index 4e923692b4b..f1d6395b39d 100644 --- a/cves/2023/CVE-2023-31664.md +++ b/cves/2023/CVE-2023-31664.md @@ -13,5 +13,5 @@ A reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/ - https://github.com/adilkhan7/CVE-2023-31664 #### Github -No PoCs found on GitHub currently. +- https://github.com/adilkhan7/CVE-2023-31664 diff --git a/cves/2023/CVE-2023-31753.md b/cves/2023/CVE-2023-31753.md index 42f46cd8c07..7e31aa691ce 100644 --- a/cves/2023/CVE-2023-31753.md +++ b/cves/2023/CVE-2023-31753.md @@ -13,5 +13,5 @@ SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker - https://github.com/khmk2k/CVE-2023-31753/ #### Github -No PoCs found on GitHub currently. +- https://github.com/KIL0BYT3X/CVE-2023-31753 diff --git a/cves/2023/CVE-2023-31851.md b/cves/2023/CVE-2023-31851.md index 8b02845ad55..9157fc72e01 100644 --- a/cves/2023/CVE-2023-31851.md +++ b/cves/2023/CVE-2023-31851.md @@ -14,5 +14,5 @@ Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/ - https://github.com/CalfCrusher/CVE-2023-31851 #### Github -No PoCs found on GitHub currently. +- https://github.com/CalfCrusher/CVE-2023-31851 diff --git a/cves/2023/CVE-2023-31852.md b/cves/2023/CVE-2023-31852.md index 25b154f382f..88f52fc3858 100644 --- a/cves/2023/CVE-2023-31852.md +++ b/cves/2023/CVE-2023-31852.md @@ -14,5 +14,5 @@ Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/ad - https://github.com/CalfCrusher/CVE-2023-31852 #### Github -No PoCs found on GitHub currently. +- https://github.com/CalfCrusher/CVE-2023-31852 diff --git a/cves/2023/CVE-2023-31853.md b/cves/2023/CVE-2023-31853.md index d9935ee0ea0..806bcf9168a 100644 --- a/cves/2023/CVE-2023-31853.md +++ b/cves/2023/CVE-2023-31853.md @@ -14,5 +14,5 @@ Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admi - https://github.com/CalfCrusher/CVE-2023-31853 #### Github -No PoCs found on GitHub currently. +- https://github.com/CalfCrusher/CVE-2023-31853 diff --git a/cves/2023/CVE-2023-31902.md b/cves/2023/CVE-2023-31902.md index 38332a652ad..18ee888d63b 100644 --- a/cves/2023/CVE-2023-31902.md +++ b/cves/2023/CVE-2023-31902.md @@ -15,6 +15,7 @@ RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE) #### Github - https://github.com/blue0x1/mobilemouse-exploit +- https://github.com/lypd0/mouseserver-exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/mobile_mouse_rce.rb diff --git a/cves/2023/CVE-2023-32233.md b/cves/2023/CVE-2023-32233.md index 40becb36a9f..794ead022c5 100644 --- a/cves/2023/CVE-2023-32233.md +++ b/cves/2023/CVE-2023-32233.md @@ -20,4 +20,6 @@ In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when - https://github.com/djki5s/tools - https://github.com/oferchen/POC-CVE-2023-32233 - https://github.com/void0red/CVE-2023-32233 +- https://github.com/BurnSkyup/CVE-2023-32233-reproduction +- https://github.com/Destawell/gemini-2.5-pro-nf-tables-red-teaming diff --git a/cves/2023/CVE-2023-32315.md b/cves/2023/CVE-2023-32315.md index 0425715de98..dc0cb441f06 100644 --- a/cves/2023/CVE-2023-32315.md +++ b/cves/2023/CVE-2023-32315.md @@ -29,9 +29,13 @@ Openfire is an XMPP server licensed under the Open Source Apache License. Openfi - https://github.com/pulentoski/Explotacion-CVE-2023-32315-Openfire - https://github.com/rag-fish/openfire-exploit-suite - https://github.com/tangxiaofeng7/CVE-2023-32315-Openfire-Bypass +- https://github.com/Ap0dexMe0/CVE-2023-32315 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32315.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/openfire_auth_bypass_rce_cve_2023_32315.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openfire/CVE-2023-32315 diff --git a/cves/2023/CVE-2023-32571.md b/cves/2023/CVE-2023-32571.md index 47f56a0e433..91fc5cdb88b 100644 --- a/cves/2023/CVE-2023-32571.md +++ b/cves/2023/CVE-2023-32571.md @@ -15,4 +15,5 @@ Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute ar #### Github - https://github.com/Tris0n/CVE-2023-32571-POC - https://github.com/vert16x/CVE-2023-32571-POC +- https://github.com/SecTex/CVE-2023-32571 diff --git a/cves/2023/CVE-2023-32749.md b/cves/2023/CVE-2023-32749.md index 4fe510fbddf..d35fbe6575b 100644 --- a/cves/2023/CVE-2023-32749.md +++ b/cves/2023/CVE-2023-32749.md @@ -17,6 +17,7 @@ Pydio Cells allows users by default to create so-called external users in order #### Github - https://github.com/xcr-19/CVE-2023-32749 +- https://github.com/alaeddine03/CVE-2023-32749-PoC #### ExploitDB - https://www.exploit-db.com/exploits/51496 diff --git a/cves/2023/CVE-2023-32784.md b/cves/2023/CVE-2023-32784.md index 3b274e275b8..c2eb0d7f5f7 100644 --- a/cves/2023/CVE-2023-32784.md +++ b/cves/2023/CVE-2023-32784.md @@ -26,4 +26,5 @@ In KeePass 2.x before 2.54, it is possible to recover the cleartext master passw - https://github.com/mister-turtle/cve-2023-32784 - https://github.com/ynuwenhof/keedump - https://github.com/z-jxy/keepass_dump +- https://github.com/vdohney/keepass-password-dumper diff --git a/cves/2023/CVE-2023-33107.md b/cves/2023/CVE-2023-33107.md index a8d387d9ebc..ef60a1538d6 100644 --- a/cves/2023/CVE-2023-33107.md +++ b/cves/2023/CVE-2023-33107.md @@ -256,5 +256,6 @@ Memory corruption in Graphics Linux while assigning shared virtual memory region No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/264312431/picohaxx +- https://github.com/keto0422/CVE-2023-33107 diff --git a/cves/2023/CVE-2023-33246.md b/cves/2023/CVE-2023-33246.md index 570aa03736a..f4e7ccb155f 100644 --- a/cves/2023/CVE-2023-33246.md +++ b/cves/2023/CVE-2023-33246.md @@ -41,3 +41,6 @@ For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_rocketmq_update_config.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/rocketmq_version.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-33246 diff --git a/cves/2023/CVE-2023-33253.md b/cves/2023/CVE-2023-33253.md index 53488032604..8c06145413b 100644 --- a/cves/2023/CVE-2023-33253.md +++ b/cves/2023/CVE-2023-33253.md @@ -13,5 +13,5 @@ LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remo - https://github.com/Toxich4/CVE-2023-33253 #### Github -No PoCs found on GitHub currently. +- https://github.com/Toxich4/CVE-2023-33253 diff --git a/cves/2023/CVE-2023-33408.md b/cves/2023/CVE-2023-33408.md index 5e42e0b8bdf..11743822db5 100644 --- a/cves/2023/CVE-2023-33408.md +++ b/cves/2023/CVE-2023-33408.md @@ -13,5 +13,5 @@ Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exi - https://github.com/Thirukrishnan/CVE-2023-33408 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2023-33408 diff --git a/cves/2023/CVE-2023-33409.md b/cves/2023/CVE-2023-33409.md index 3a2a482f0c7..894fedcb266 100644 --- a/cves/2023/CVE-2023-33409.md +++ b/cves/2023/CVE-2023-33409.md @@ -13,5 +13,5 @@ Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/pub - https://github.com/Thirukrishnan/CVE-2023-33409 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2023-33409 diff --git a/cves/2023/CVE-2023-33410.md b/cves/2023/CVE-2023-33410.md index 09666789234..69f91f37b29 100644 --- a/cves/2023/CVE-2023-33410.md +++ b/cves/2023/CVE-2023-33410.md @@ -13,5 +13,5 @@ Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an - https://github.com/Thirukrishnan/CVE-2023-33410 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2023-33410 diff --git a/cves/2023/CVE-2023-33669.md b/cves/2023/CVE-2023-33669.md index 65856825a50..8f22f8c2839 100644 --- a/cves/2023/CVE-2023-33669.md +++ b/cves/2023/CVE-2023-33669.md @@ -14,4 +14,6 @@ No PoCs from references. #### Github - https://github.com/Mohammaddvd/CVE-2023-33669 +- https://github.com/dhammerg/CVE-2023-33669 +- https://github.com/retr0reg/tenda-ac8v4-rop diff --git a/cves/2023/CVE-2023-33733.md b/cves/2023/CVE-2023-33733.md index 2745d1ea66a..fe299abe817 100644 --- a/cves/2023/CVE-2023-33733.md +++ b/cves/2023/CVE-2023-33733.md @@ -16,4 +16,5 @@ Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying - https://github.com/L41KAA/CVE-2023-33733-Exploit-PoC - https://github.com/buiduchoang24/CVE-2023-33733 - https://github.com/hoangbui24/CVE-2023-33733 +- https://github.com/c53elyas/CVE-2023-33733 diff --git a/cves/2023/CVE-2023-33781.md b/cves/2023/CVE-2023-33781.md index 8adc86f9a50..d708874fc7f 100644 --- a/cves/2023/CVE-2023-33781.md +++ b/cves/2023/CVE-2023-33781.md @@ -13,5 +13,5 @@ An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary comman - https://github.com/s0tr/CVE-2023-33781 #### Github -No PoCs found on GitHub currently. +- https://github.com/s0tr/CVE-2023-33781 diff --git a/cves/2023/CVE-2023-33782.md b/cves/2023/CVE-2023-33782.md index 15bfed41c1d..3e9f372fc4a 100644 --- a/cves/2023/CVE-2023-33782.md +++ b/cves/2023/CVE-2023-33782.md @@ -13,5 +13,5 @@ D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerabil - https://github.com/s0tr/CVE-2023-33782 #### Github -No PoCs found on GitHub currently. +- https://github.com/s0tr/CVE-2023-33782 diff --git a/cves/2023/CVE-2023-33817.md b/cves/2023/CVE-2023-33817.md index f3ed2a67282..0b1d1853dfc 100644 --- a/cves/2023/CVE-2023-33817.md +++ b/cves/2023/CVE-2023-33817.md @@ -13,5 +13,5 @@ hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability. - https://github.com/leekenghwa/CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5 #### Github -No PoCs found on GitHub currently. +- https://github.com/leekenghwa/CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5 diff --git a/cves/2023/CVE-2023-34362.md b/cves/2023/CVE-2023-34362.md index cc95aa064d4..82bd3ddbfeb 100644 --- a/cves/2023/CVE-2023-34362.md +++ b/cves/2023/CVE-2023-34362.md @@ -37,6 +37,7 @@ In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0. - https://github.com/lithuanian-g/cve-2023-34362-iocs - https://github.com/sfewer-r7/CVE-2023-34362 - https://github.com/toorandom/moveit-payload-decrypt-CVE-2023-34362 +- https://github.com/horrister/moveit-transfer-cve-2023-34362 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34362.yaml diff --git a/cves/2023/CVE-2023-34468.md b/cves/2023/CVE-2023-34468.md index 810c7936a65..ad87b9b368a 100644 --- a/cves/2023/CVE-2023-34468.md +++ b/cves/2023/CVE-2023-34468.md @@ -15,6 +15,10 @@ The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache #### Github - https://github.com/mbadanoiu/CVE-2023-34468 - https://github.com/shoucheng3/asf__nifi_CVE-2023-34468_1-21-0 +- https://github.com/Jeanpt/CVE-2023-34468 +- https://github.com/ozcanpng/CVE-2023-34468 +- https://github.com/sbouabid-sec/CVE-2023-34468-POC +- https://github.com/spikeyjr/CVE-2023-34468-PoC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_nifi_h2_rce.rb diff --git a/cves/2023/CVE-2023-3452.md b/cves/2023/CVE-2023-3452.md index 4c9de06ff90..ecf56d67afb 100644 --- a/cves/2023/CVE-2023-3452.md +++ b/cves/2023/CVE-2023-3452.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/leoanggal1/CVE-2023-3452-PoC - https://github.com/tranphuc2005/Exploit_Wordpress +- https://github.com/Alpastx/CVE-2023-3452---WordPress-Canto-Plugin-RCE +- https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3452.yaml diff --git a/cves/2023/CVE-2023-34598.md b/cves/2023/CVE-2023-34598.md index a596f24d29e..ca7709ea810 100644 --- a/cves/2023/CVE-2023-34598.md +++ b/cves/2023/CVE-2023-34598.md @@ -16,6 +16,7 @@ Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible - https://github.com/Lserein/CVE-2023-34598 - https://github.com/Szlein/CVE-2023-34598 - https://github.com/Zer0F8th/CVE-2023-34598 +- https://github.com/maddsec/CVE-2023-34598 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34598.yaml diff --git a/cves/2023/CVE-2023-34599.md b/cves/2023/CVE-2023-34599.md index c6ba85ed4ba..18f03006619 100644 --- a/cves/2023/CVE-2023-34599.md +++ b/cves/2023/CVE-2023-34599.md @@ -13,7 +13,7 @@ Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibb - https://github.com/maddsec/CVE-2023-34599 #### Github -No PoCs found on GitHub currently. +- https://github.com/maddsec/CVE-2023-34599 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34599.yaml diff --git a/cves/2023/CVE-2023-34924.md b/cves/2023/CVE-2023-34924.md index 2de010081c5..6e17bb5c9a9 100644 --- a/cves/2023/CVE-2023-34924.md +++ b/cves/2023/CVE-2023-34924.md @@ -14,5 +14,5 @@ H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the - https://github.com/ChrisL0tus/CVE-2023-34924 #### Github -No PoCs found on GitHub currently. +- https://github.com/ChrisL0tus/CVE-2023-34924 diff --git a/cves/2023/CVE-2023-34960.md b/cves/2023/CVE-2023-34960.md index 9d2dcef8ad8..6b996f07830 100644 --- a/cves/2023/CVE-2023-34960.md +++ b/cves/2023/CVE-2023-34960.md @@ -21,6 +21,7 @@ A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11 - https://github.com/YongYe-Security/CVE-2023-34960 - https://github.com/YongYe-Security/Chamilo_CVE-2023-34960-EXP - https://github.com/tpdlshdmlrkfmcla/cve-2023-34960 +- https://github.com/Ap0dexMe0/CVE-2023-34960 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34960.yaml diff --git a/cves/2023/CVE-2023-34992.md b/cves/2023/CVE-2023-34992.md index 22843bb4970..1471aeb641b 100644 --- a/cves/2023/CVE-2023-34992.md +++ b/cves/2023/CVE-2023-34992.md @@ -19,6 +19,7 @@ No PoCs from references. #### Github - https://github.com/horizon3ai/CVE-2023-34992 +- https://github.com/d0rb/CVE-2023-34992-Checker #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-34992.yaml diff --git a/cves/2023/CVE-2023-35078.md b/cves/2023/CVE-2023-35078.md index 4df4a92adb2..a53c9d58c8e 100644 --- a/cves/2023/CVE-2023-35078.md +++ b/cves/2023/CVE-2023-35078.md @@ -27,6 +27,7 @@ No PoCs from references. - https://github.com/raytheon0x21/CVE-2023-35078 - https://github.com/synfinner/CVE-2023-35078 - https://github.com/vchan-in/CVE-2023-35078-Exploit-POC +- https://github.com/vaishnochaitanya/CVE-2023-35078-Exploit-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35078.yaml diff --git a/cves/2023/CVE-2023-3519.md b/cves/2023/CVE-2023-3519.md index dc63ae5549f..717bad3b161 100644 --- a/cves/2023/CVE-2023-3519.md +++ b/cves/2023/CVE-2023-3519.md @@ -29,6 +29,7 @@ Unauthenticated remote code execution - https://github.com/mr-r3b00t/CVE-2023-3519 - https://github.com/passwa11/CVE-2023-3519 - https://github.com/rwincey/cve-2023-3519 +- https://github.com/dhammerg/CVE-2023-3519 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3519.yaml diff --git a/cves/2023/CVE-2023-35813.md b/cves/2023/CVE-2023-35813.md index 6f75eef9db3..15e03067f5c 100644 --- a/cves/2023/CVE-2023-35813.md +++ b/cves/2023/CVE-2023-35813.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/BagheeraAltered/CVE-2023-35813-PoC - https://github.com/aalexpereira/CVE-2023-35813 +- https://github.com/Rezy-Dev/CVE-2023-35813 +- https://github.com/her3ticAVI/CVE-2023-35813 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35813.yaml diff --git a/cves/2023/CVE-2023-35885.md b/cves/2023/CVE-2023-35885.md index ef228de1e0a..0d374e63aa9 100644 --- a/cves/2023/CVE-2023-35885.md +++ b/cves/2023/CVE-2023-35885.md @@ -14,6 +14,7 @@ CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. #### Github - https://github.com/Chocapikk/CVE-2023-35885 +- https://github.com/datackmy/FallingSkies-CVE-2023-35885 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35885.yaml diff --git a/cves/2023/CVE-2023-36003.md b/cves/2023/CVE-2023-36003.md index 8a8ec622b46..e58a17720bd 100644 --- a/cves/2023/CVE-2023-36003.md +++ b/cves/2023/CVE-2023-36003.md @@ -38,4 +38,5 @@ No PoCs from references. #### Github - https://github.com/m417z/CVE-2023-36003-POC - https://github.com/s3mPr1linux/CVE_2023_360003_POC +- https://github.com/johnnygreeme/CVE-2023-36003 diff --git a/cves/2023/CVE-2023-36123.md b/cves/2023/CVE-2023-36123.md index 43cd2d4e562..b45641f0a46 100644 --- a/cves/2023/CVE-2023-36123.md +++ b/cves/2023/CVE-2023-36123.md @@ -13,5 +13,5 @@ Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version A - https://github.com/9Bakabaka/CVE-2023-36123 #### Github -No PoCs found on GitHub currently. +- https://github.com/9Bakabaka/CVE-2023-36123 diff --git a/cves/2023/CVE-2023-36143.md b/cves/2023/CVE-2023-36143.md index 45b0391a68e..a0efaae8b6f 100644 --- a/cves/2023/CVE-2023-36143.md +++ b/cves/2023/CVE-2023-36143.md @@ -15,4 +15,5 @@ Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the #### Github - https://github.com/RobinTrigon/CVE-2023-36143 +- https://github.com/leonardobg/CVE-2023-36143 diff --git a/cves/2023/CVE-2023-36144.md b/cves/2023/CVE-2023-36144.md index 3218a8080d3..9962b57c1be 100644 --- a/cves/2023/CVE-2023-36144.md +++ b/cves/2023/CVE-2023-36144.md @@ -14,7 +14,7 @@ An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allo - https://github.com/leonardobg/CVE-2023-36144 #### Github -No PoCs found on GitHub currently. +- https://github.com/leonardobg/CVE-2023-36144 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36144.yaml diff --git a/cves/2023/CVE-2023-36644.md b/cves/2023/CVE-2023-36644.md index 72020709fac..5bb21655fd9 100644 --- a/cves/2023/CVE-2023-36644.md +++ b/cves/2023/CVE-2023-36644.md @@ -14,5 +14,5 @@ Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to r - https://github.com/caffeinated-labs/CVE-2023-36644 #### Github -No PoCs found on GitHub currently. +- https://github.com/caffeinated-labs/CVE-2023-36644 diff --git a/cves/2023/CVE-2023-36802.md b/cves/2023/CVE-2023-36802.md index f081ef68368..88674c122c1 100644 --- a/cves/2023/CVE-2023-36802.md +++ b/cves/2023/CVE-2023-36802.md @@ -31,4 +31,5 @@ No PoCs from references. - https://github.com/chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802 - https://github.com/rahul0xkr/Reproducing-CVE-2023-36802 - https://github.com/x0rb3l/CVE-2023-36802-MSKSSRV-LPE +- https://github.com/nhh9905/CVE-2023-36802 diff --git a/cves/2023/CVE-2023-36844.md b/cves/2023/CVE-2023-36844.md index f9be0bb9be8..7885815fbb1 100644 --- a/cves/2023/CVE-2023-36844.md +++ b/cves/2023/CVE-2023-36844.md @@ -28,6 +28,7 @@ A PHP External Variable Modification vulnerability in J-Web of Juniper Networks - https://github.com/ThatNotEasy/CVE-2023-36844 - https://github.com/r3dcl1ff/CVE-2023-36844_Juniper_RCE - https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844 +- https://github.com/Ap0dexMe0/CVE-2023-36844 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36844.yaml diff --git a/cves/2023/CVE-2023-36845.md b/cves/2023/CVE-2023-36845.md index 7a2e976bc0a..676d2e76b0a 100644 --- a/cves/2023/CVE-2023-36845.md +++ b/cves/2023/CVE-2023-36845.md @@ -40,6 +40,8 @@ A PHP External Variable Modification vulnerability in J-Web of Juniper Networks - https://github.com/r3dcl1ff/CVE-2023-36844_Juniper_RCE - https://github.com/simrotion13/CVE-2023-36845 - https://github.com/zaenhaxor/CVE-2023-36845 +- https://github.com/kopfjager007/CVE-2023-36845 +- https://github.com/vulncheck-oss/cve-2023-36845-scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36845.yaml diff --git a/cves/2023/CVE-2023-36874.md b/cves/2023/CVE-2023-36874.md index cea746f9b60..947e38ee31f 100644 --- a/cves/2023/CVE-2023-36874.md +++ b/cves/2023/CVE-2023-36874.md @@ -49,6 +49,7 @@ Windows Error Reporting Service Elevation of Privilege Vulnerability - https://github.com/Wh04m1001/CVE-2023-36874 - https://github.com/crisprss/CVE-2023-36874 - https://github.com/d0rb/CVE-2023-36874 +- https://github.com/johnnygreeme/CVE-2023-36874 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/win_error_cve_2023_36874.rb diff --git a/cves/2023/CVE-2023-37582.md b/cves/2023/CVE-2023-37582.md index 226246497c7..7beff5153d7 100644 --- a/cves/2023/CVE-2023-37582.md +++ b/cves/2023/CVE-2023-37582.md @@ -20,3 +20,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-37582.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-37582 diff --git a/cves/2023/CVE-2023-37598.md b/cves/2023/CVE-2023-37598.md index 64647768dfc..10e4ef90234 100644 --- a/cves/2023/CVE-2023-37598.md +++ b/cves/2023/CVE-2023-37598.md @@ -13,5 +13,5 @@ A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allow - https://github.com/sahiloj/CVE-2023-37598 #### Github -No PoCs found on GitHub currently. +- https://github.com/sahiloj/CVE-2023-37598 diff --git a/cves/2023/CVE-2023-37941.md b/cves/2023/CVE-2023-37941.md index 82a73886c98..18a1a3366d4 100644 --- a/cves/2023/CVE-2023-37941.md +++ b/cves/2023/CVE-2023-37941.md @@ -17,3 +17,6 @@ If an attacker gains write access to the Apache Superset metadata database, they #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/superset/CVE-2023-37941 diff --git a/cves/2023/CVE-2023-38146.md b/cves/2023/CVE-2023-38146.md index fbe30ac37fb..07bde7404d1 100644 --- a/cves/2023/CVE-2023-38146.md +++ b/cves/2023/CVE-2023-38146.md @@ -19,6 +19,7 @@ Windows Themes Remote Code Execution Vulnerability - https://github.com/Jnnshschl/CVE-2023-38146 - https://github.com/exploits-forsale/themebleed - https://github.com/gabe-k/themebleed +- https://github.com/CH0ico/CVE-2023-38146-Poc #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/theme_dll_hijack_cve_2023_38146.rb diff --git a/cves/2023/CVE-2023-38545.md b/cves/2023/CVE-2023-38545.md index 2999cb7cedc..42834359394 100644 --- a/cves/2023/CVE-2023-38545.md +++ b/cves/2023/CVE-2023-38545.md @@ -23,4 +23,7 @@ This flaw makes curl overflow a heap based buffer in the SOCKS5 proxyhandshake.W - https://github.com/fatmo666/CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow - https://github.com/imfht/CVE-2023-38545 - https://github.com/vanigori/CVE-2023-38545-sample +- https://github.com/UTsweetyfish/CVE-2023-38545 +- https://github.com/bcdannyboy/CVE-2023-38545 +- https://github.com/dbrugman/CVE-2023-38545-POC diff --git a/cves/2023/CVE-2023-38633.md b/cves/2023/CVE-2023-38633.md index 449e3789067..8f23f074db2 100644 --- a/cves/2023/CVE-2023-38633.md +++ b/cves/2023/CVE-2023-38633.md @@ -16,3 +16,5 @@ A directory traversal problem in the URL decoder of librsvg before 2.56.3 could #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/librsvg/CVE-2023-38633 diff --git a/cves/2023/CVE-2023-38646.md b/cves/2023/CVE-2023-38646.md index 448e615ec38..acab4a245c8 100644 --- a/cves/2023/CVE-2023-38646.md +++ b/cves/2023/CVE-2023-38646.md @@ -56,9 +56,15 @@ Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 all - https://github.com/shamo0/CVE-2023-38646-PoC - https://github.com/threatHNTR/CVE-2023-38646 - https://github.com/yxl2001/CVE-2023-38646 +- https://github.com/Kushiro45/metabase-cve-2023-38646 +- https://github.com/NosrevytsNg/Metabase-Pre-Auth-RCE-POC +- https://github.com/cleanmgr112/cve-2023-38646-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38646.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/metabase_setup_token_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/metabase/CVE-2023-38646 diff --git a/cves/2023/CVE-2023-38709.md b/cves/2023/CVE-2023-38709.md index 1c900ce1757..eed70df6b33 100644 --- a/cves/2023/CVE-2023-38709.md +++ b/cves/2023/CVE-2023-38709.md @@ -13,5 +13,5 @@ Faulty input validation in the core of Apache allows malicious or exploitable ba - http://seclists.org/fulldisclosure/2024/Jul/18 #### Github -No PoCs found on GitHub currently. +- https://github.com/mrmtwoj/apache-vulnerability-testing diff --git a/cves/2023/CVE-2023-38817.md b/cves/2023/CVE-2023-38817.md index c2b02f8ceb7..f77718a8a9b 100644 --- a/cves/2023/CVE-2023-38817.md +++ b/cves/2023/CVE-2023-38817.md @@ -14,4 +14,5 @@ An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gai #### Github - https://github.com/kite03/echoac-poc +- https://github.com/SecSecBurger/CVE-2023-38817 diff --git a/cves/2023/CVE-2023-38829.md b/cves/2023/CVE-2023-38829.md index ba0b5d12f43..029d8e3b1b8 100644 --- a/cves/2023/CVE-2023-38829.md +++ b/cves/2023/CVE-2023-38829.md @@ -14,5 +14,5 @@ An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execut - https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E #### Github -No PoCs found on GitHub currently. +- https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E diff --git a/cves/2023/CVE-2023-38831.md b/cves/2023/CVE-2023-38831.md index c8cf1eded47..d9bb486f063 100644 --- a/cves/2023/CVE-2023-38831.md +++ b/cves/2023/CVE-2023-38831.md @@ -77,6 +77,12 @@ RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user - https://github.com/thegr1ffyn/CVE-2023-38831 - https://github.com/xaitax/WinRAR-CVE-2023-38831 - https://github.com/z3r0sw0rd/CVE-2023-38831-PoC +- https://github.com/anelya0333/Exploiting-CVE-2023-38831 +- https://github.com/kuyrathdaro/cve-2023-38831 +- https://github.com/lightningspeed221/Winrar-Exploit-CVE-2023-38831 +- https://github.com/mishra0230/CVE-2023-38831 +- https://github.com/ngothienan/CVE-2023-38831 +- https://github.com/sudo-py-dev/CVE-2023-38831 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/winrar_cve_2023_38831.rb diff --git a/cves/2023/CVE-2023-38840.md b/cves/2023/CVE-2023-38840.md index 6cb26c532c7..5672d9f5f66 100644 --- a/cves/2023/CVE-2023-38840.md +++ b/cves/2023/CVE-2023-38840.md @@ -15,5 +15,5 @@ Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obt - https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/ #### Github -No PoCs found on GitHub currently. +- https://github.com/markuta/bw-dump diff --git a/cves/2023/CVE-2023-38890.md b/cves/2023/CVE-2023-38890.md index a9d112e3181..1430b6f1af9 100644 --- a/cves/2023/CVE-2023-38890.md +++ b/cves/2023/CVE-2023-38890.md @@ -13,5 +13,6 @@ Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary - https://github.com/akshadjoshi/CVE-2023-38890 #### Github -No PoCs found on GitHub currently. +- https://github.com/Tagoletta/CVE-2023-38890 +- https://github.com/akshadjoshi/CVE-2023-38890 diff --git a/cves/2023/CVE-2023-39063.md b/cves/2023/CVE-2023-39063.md index b324d22dc86..1e5b89c03d9 100644 --- a/cves/2023/CVE-2023-39063.md +++ b/cves/2023/CVE-2023-39063.md @@ -13,5 +13,5 @@ Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to - https://github.com/AndreGNogueira/CVE-2023-39063 #### Github -No PoCs found on GitHub currently. +- https://github.com/AndreGNogueira/CVE-2023-39063 diff --git a/cves/2023/CVE-2023-39115.md b/cves/2023/CVE-2023-39115.md index 2c186f5aa28..000dc53104f 100644 --- a/cves/2023/CVE-2023-39115.md +++ b/cves/2023/CVE-2023-39115.md @@ -15,7 +15,7 @@ install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Scrip - https://www.exploit-db.com/exploits/51656 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xrajdip/CVE-2023-39115 #### ExploitDB - https://www.exploit-db.com/exploits/51656 diff --git a/cves/2023/CVE-2023-39143.md b/cves/2023/CVE-2023-39143.md index c62f627f6ee..ab92c3d132d 100644 --- a/cves/2023/CVE-2023-39143.md +++ b/cves/2023/CVE-2023-39143.md @@ -13,7 +13,7 @@ PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabl - https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/ #### Github -No PoCs found on GitHub currently. +- https://github.com/foregenix/CVE-2023-39143 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39143.yaml diff --git a/cves/2023/CVE-2023-39361.md b/cves/2023/CVE-2023-39361.md index 8b349e3cf04..20cc813f284 100644 --- a/cves/2023/CVE-2023-39361.md +++ b/cves/2023/CVE-2023-39361.md @@ -18,3 +18,6 @@ Cacti is an open source operational monitoring and fault management framework. A #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39361.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2023-39361 diff --git a/cves/2023/CVE-2023-40028.md b/cves/2023/CVE-2023-40028.md index f8b59bb10df..c059714aa52 100644 --- a/cves/2023/CVE-2023-40028.md +++ b/cves/2023/CVE-2023-40028.md @@ -24,6 +24,8 @@ No PoCs from references. - https://github.com/rvizx/CVE-2023-40028 - https://github.com/sudlit/CVE-2023-40028 - https://github.com/syogod/CVE-2023-40028 +- https://github.com/Stp1t/CVE-2023-40028 +- https://github.com/rvzsec/CVE-2023-40028 #### ExploitDB - https://www.exploit-db.com/exploits/52409 diff --git a/cves/2023/CVE-2023-40289.md b/cves/2023/CVE-2023-40289.md index 973e477fc8a..1d973666bce 100644 --- a/cves/2023/CVE-2023-40289.md +++ b/cves/2023/CVE-2023-40289.md @@ -14,5 +14,5 @@ A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023 #### Github -No PoCs found on GitHub currently. +- https://github.com/s-hamann/CVE-2023-40289 diff --git a/cves/2023/CVE-2023-40297.md b/cves/2023/CVE-2023-40297.md index 8749c6762f0..400f16b9627 100644 --- a/cves/2023/CVE-2023-40297.md +++ b/cves/2023/CVE-2023-40297.md @@ -14,5 +14,5 @@ Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the - https://github.com/sahar042/CVE-2023-40297 #### Github -No PoCs found on GitHub currently. +- https://github.com/sahar042/CVE-2023-40297 diff --git a/cves/2023/CVE-2023-40362.md b/cves/2023/CVE-2023-40362.md index 9c95ab1f32f..7023cac2539 100644 --- a/cves/2023/CVE-2023-40362.md +++ b/cves/2023/CVE-2023-40362.md @@ -13,5 +13,5 @@ An issue was discovered in CentralSquare Click2Gov Building Permit before Octobe - https://github.com/ally-petitt/CVE-2023-40362 #### Github -No PoCs found on GitHub currently. +- https://github.com/ally-petitt/CVE-2023-40362 diff --git a/cves/2023/CVE-2023-40868.md b/cves/2023/CVE-2023-40868.md index 786f765c95b..9a5b7aeac48 100644 --- a/cves/2023/CVE-2023-40868.md +++ b/cves/2023/CVE-2023-40868.md @@ -13,5 +13,5 @@ Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo - https://github.com/MinoTauro2020/CVE-2023-40868 #### Github -No PoCs found on GitHub currently. +- https://github.com/MinoTauro2020/CVE-2023-40868 diff --git a/cves/2023/CVE-2023-41717.md b/cves/2023/CVE-2023-41717.md index 68ad8d9ae69..4f9c8d4714f 100644 --- a/cves/2023/CVE-2023-41717.md +++ b/cves/2023/CVE-2023-41717.md @@ -13,5 +13,5 @@ Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior all No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/federella/CVE-2023-41717 diff --git a/cves/2023/CVE-2023-41892.md b/cves/2023/CVE-2023-41892.md index 2a5095c61fa..5f4b5142001 100644 --- a/cves/2023/CVE-2023-41892.md +++ b/cves/2023/CVE-2023-41892.md @@ -20,9 +20,13 @@ Craft CMS is a platform for creating digital experiences. This is a high-impact, - https://github.com/diegaccio/Craft-CMS-Exploit - https://github.com/user01-1/CVE-2023-41892_poc - https://github.com/zaenhaxor/CVE-2023-41892 +- https://github.com/lyccyc/CVE-2023-41892_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41892.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_unauth_rce_cve_2023_41892.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/craftcms/CVE-2023-41892 diff --git a/cves/2023/CVE-2023-4197.md b/cves/2023/CVE-2023-4197.md index 91b13a6e983..1e56924feff 100644 --- a/cves/2023/CVE-2023-4197.md +++ b/cves/2023/CVE-2023-4197.md @@ -14,4 +14,5 @@ Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain #### Github - https://github.com/alien-keric/CVE-2023-4197 +- https://github.com/alienkeric/CVE-2023-4197 diff --git a/cves/2023/CVE-2023-4220.md b/cves/2023/CVE-2023-4220.md index 06663ff0b91..f24c4ef2d37 100644 --- a/cves/2023/CVE-2023-4220.md +++ b/cves/2023/CVE-2023-4220.md @@ -39,6 +39,10 @@ Unrestricted file upload in big file upload functionality in `/main/inc/lib/java - https://github.com/thefizzyfish/CVE-2023-4220 - https://github.com/thefizzyfish/CVE-2023-4220_Chamilo_RCE - https://github.com/zora-beep/CVE-2023-4220 +- https://github.com/Least-Significant-Bit/CVE-2023-4220 +- https://github.com/RandyNin/CVE-2023-4220 +- https://github.com/Sn0wBaall/CVE-2023-4220-PoC +- https://github.com/SpeatX/ChamiloLMS-CVE-2023-4220 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4220.yaml diff --git a/cves/2023/CVE-2023-42283.md b/cves/2023/CVE-2023-42283.md index 82e31f1fb31..12e4a5cdd7a 100644 --- a/cves/2023/CVE-2023-42283.md +++ b/cves/2023/CVE-2023-42283.md @@ -13,5 +13,5 @@ Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows atta - https://github.com/andreysanyuk/CVE-2023-42283 #### Github -No PoCs found on GitHub currently. +- https://github.com/andreysanyuk/CVE-2023-42283 diff --git a/cves/2023/CVE-2023-42284.md b/cves/2023/CVE-2023-42284.md index 355e8e09597..3ae2e5a80d0 100644 --- a/cves/2023/CVE-2023-42284.md +++ b/cves/2023/CVE-2023-42284.md @@ -13,5 +13,5 @@ Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows - https://github.com/andreysanyuk/CVE-2023-42284 #### Github -No PoCs found on GitHub currently. +- https://github.com/andreysanyuk/CVE-2023-42284 diff --git a/cves/2023/CVE-2023-42362.md b/cves/2023/CVE-2023-42362.md index 6fa10b1126c..5cc137bad9c 100644 --- a/cves/2023/CVE-2023-42362.md +++ b/cves/2023/CVE-2023-42362.md @@ -13,5 +13,5 @@ An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote - https://github.com/Mr-n0b3dy/CVE-2023-42362 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mr-n0b3dy/CVE-2023-42362 diff --git a/cves/2023/CVE-2023-42793.md b/cves/2023/CVE-2023-42793.md index ab71b0d8e78..650546072bf 100644 --- a/cves/2023/CVE-2023-42793.md +++ b/cves/2023/CVE-2023-42793.md @@ -32,6 +32,8 @@ In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on T - https://github.com/johnossawy/CVE-2023-42793_POC - https://github.com/junnythemarksman/CVE-2023-42793 - https://github.com/whoamins/CVE-2023-42793 +- https://github.com/DDestinys/CVE-2023-42793 +- https://github.com/cxdxnt/CVE-2023-42793 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42793.yaml @@ -41,3 +43,6 @@ In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on T #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2023_42793.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/teamcity/CVE-2023-42793 diff --git a/cves/2023/CVE-2023-42820.md b/cves/2023/CVE-2023-42820.md index a1996163d09..8b0abbc94f2 100644 --- a/cves/2023/CVE-2023-42820.md +++ b/cves/2023/CVE-2023-42820.md @@ -19,3 +19,5 @@ No PoCs from references. - https://github.com/tarihub/blackjump - https://github.com/tarimoe/blackjump +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jumpserver/CVE-2023-42820 diff --git a/cves/2023/CVE-2023-43208.md b/cves/2023/CVE-2023-43208.md index d9b6ef3c71d..1e77a22691e 100644 --- a/cves/2023/CVE-2023-43208.md +++ b/cves/2023/CVE-2023-43208.md @@ -20,6 +20,16 @@ NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthent - https://github.com/K3ysTr0K3R/CVE-2023-43208-EXPLOIT - https://github.com/gotr00t0day/NextGen-Mirth-Connect-Exploit - https://github.com/jakabakos/CVE-2023-43208-mirth-connect-rce-poc +- https://github.com/4nuxd/CVE-2023-43208 +- https://github.com/Criz117/CVE-2023-43208-PoC +- https://github.com/D3m0nicw0lf/CVE-2023-43208 +- https://github.com/Humberto-pixel/CVE-2023-43208-PoC +- https://github.com/LunaLynx12/cve-2023-43208-poc +- https://github.com/MKIRAHMET/PoC-2023-43208 +- https://github.com/Pegasus0xx/CVE-2023-43208 +- https://github.com/az4rvs/Mirth-Connect-CVE-2023-43208 +- https://github.com/kyakei/CVE-2023-43208 +- https://github.com/predyy/CVE-2023-43208 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43208.yaml diff --git a/cves/2023/CVE-2023-43261.md b/cves/2023/CVE-2023-43261.md index 6d55deca2a4..aa696de07d5 100644 --- a/cves/2023/CVE-2023-43261.md +++ b/cves/2023/CVE-2023-43261.md @@ -15,7 +15,7 @@ An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35. - https://medium.com/@win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf #### Github -No PoCs found on GitHub currently. +- https://github.com/win3zz/CVE-2023-43261 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43261.yaml diff --git a/cves/2023/CVE-2023-43284.md b/cves/2023/CVE-2023-43284.md index 82d733fbf1e..7f9062a57a3 100644 --- a/cves/2023/CVE-2023-43284.md +++ b/cves/2023/CVE-2023-43284.md @@ -14,5 +14,5 @@ D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices a - https://github.com/MateusTesser/CVE-2023-43284 #### Github -No PoCs found on GitHub currently. +- https://github.com/MateusTesser/CVE-2023-43284 diff --git a/cves/2023/CVE-2023-43323.md b/cves/2023/CVE-2023-43323.md index fc936c89c82..adccb527e25 100644 --- a/cves/2023/CVE-2023-43323.md +++ b/cves/2023/CVE-2023-43323.md @@ -13,7 +13,7 @@ mooSocial 3.1.8 is vulnerable to external service interaction on post function. - https://github.com/ahrixia/CVE-2023-43323 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-43323 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43323.yaml diff --git a/cves/2023/CVE-2023-43325.md b/cves/2023/CVE-2023-43325.md index f2fbc431be8..b3bbeeb147f 100644 --- a/cves/2023/CVE-2023-43325.md +++ b/cves/2023/CVE-2023-43325.md @@ -13,7 +13,7 @@ A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] p - https://github.com/ahrixia/CVE-2023-43325 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-43325 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43325.yaml diff --git a/cves/2023/CVE-2023-43340.md b/cves/2023/CVE-2023-43340.md index 9b3facde10c..287b045a860 100644 --- a/cves/2023/CVE-2023-43340.md +++ b/cves/2023/CVE-2023-43340.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local att - https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Admin-Options #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options diff --git a/cves/2023/CVE-2023-43341.md b/cves/2023/CVE-2023-43341.md index 45ca1f71ea3..aee0f228908 100644 --- a/cves/2023/CVE-2023-43341.md +++ b/cves/2023/CVE-2023-43341.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local - https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Connection- #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection- diff --git a/cves/2023/CVE-2023-43342.md b/cves/2023/CVE-2023-43342.md index 92f37d82cbc..a1b651d273d 100644 --- a/cves/2023/CVE-2023-43342.md +++ b/cves/2023/CVE-2023-43342.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/Quick-CMS-Stored-XSS---Languages-Frontend #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend diff --git a/cves/2023/CVE-2023-43343.md b/cves/2023/CVE-2023-43343.md index f9768b7984b..f7daadd48a6 100644 --- a/cves/2023/CVE-2023-43343.md +++ b/cves/2023/CVE-2023-43343.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/Quick-CMS-Stored-XSS---Pages-Files #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files diff --git a/cves/2023/CVE-2023-43344.md b/cves/2023/CVE-2023-43344.md index 90cca1b3081..6d15c193fd6 100644 --- a/cves/2023/CVE-2023-43344.md +++ b/cves/2023/CVE-2023-43344.md @@ -13,5 +13,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description diff --git a/cves/2023/CVE-2023-43345.md b/cves/2023/CVE-2023-43345.md index b2e6e52546a..ba282af939c 100644 --- a/cves/2023/CVE-2023-43345.md +++ b/cves/2023/CVE-2023-43345.md @@ -13,5 +13,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/CVE-2023-43345-Quick-CMS-Stored-XSS---Pages-Content #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43345-Quick-CMS-Stored-XSS---Pages-Content diff --git a/cves/2023/CVE-2023-43346.md b/cves/2023/CVE-2023-43346.md index a4c441b8a26..1204c227e89 100644 --- a/cves/2023/CVE-2023-43346.md +++ b/cves/2023/CVE-2023-43346.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/Quick-CMS-Stored-XSS---Languages-Backend #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend diff --git a/cves/2023/CVE-2023-43364.md b/cves/2023/CVE-2023-43364.md index 7f75ff2f889..992c4faa3fe 100644 --- a/cves/2023/CVE-2023-43364.md +++ b/cves/2023/CVE-2023-43364.md @@ -17,4 +17,5 @@ main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpec #### Github - https://github.com/0hmsec/Searchor-2.4.0-Arbitrary-CMD-Injection-Python - https://github.com/libertycityhacker/CVE-2023-43364-Exploit-CVE +- https://github.com/Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit diff --git a/cves/2023/CVE-2023-44487.md b/cves/2023/CVE-2023-44487.md index a9fc8291477..762a4faebe0 100644 --- a/cves/2023/CVE-2023-44487.md +++ b/cves/2023/CVE-2023-44487.md @@ -70,6 +70,10 @@ The HTTP/2 protocol allows a denial of service (server resource consumption) bec - https://github.com/studiogangster/CVE-2023-44487 - https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC - https://github.com/zanks08/cve-2023-44487-demo +- https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit +- https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos +- https://github.com/tahaXafous/CVE-2023-44487-dos +- https://github.com/tpirate/cve-2023-44487-POC #### ExploitDB - https://www.exploit-db.com/exploits/52426 diff --git a/cves/2023/CVE-2023-4450.md b/cves/2023/CVE-2023-4450.md index a236e34ddd8..b42d8048e46 100644 --- a/cves/2023/CVE-2023-4450.md +++ b/cves/2023/CVE-2023-4450.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4450.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jimureport/CVE-2023-4450 diff --git a/cves/2023/CVE-2023-44811.md b/cves/2023/CVE-2023-44811.md index 5ca24d731d8..b79db928f34 100644 --- a/cves/2023/CVE-2023-44811.md +++ b/cves/2023/CVE-2023-44811.md @@ -13,5 +13,5 @@ Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a re - https://github.com/ahrixia/CVE-2023-44811 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-44811 diff --git a/cves/2023/CVE-2023-44812.md b/cves/2023/CVE-2023-44812.md index 802ed89c824..adfe680da04 100644 --- a/cves/2023/CVE-2023-44812.md +++ b/cves/2023/CVE-2023-44812.md @@ -13,7 +13,7 @@ Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote at - https://github.com/ahrixia/CVE-2023-44812 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-44812 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44812.yaml diff --git a/cves/2023/CVE-2023-44813.md b/cves/2023/CVE-2023-44813.md index 8841e241a31..0d5985a62d8 100644 --- a/cves/2023/CVE-2023-44813.md +++ b/cves/2023/CVE-2023-44813.md @@ -13,7 +13,7 @@ Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote at - https://github.com/ahrixia/CVE-2023-44813 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-44813 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44813.yaml diff --git a/cves/2023/CVE-2023-45542.md b/cves/2023/CVE-2023-45542.md index cd2d56647cc..1f17cb95621 100644 --- a/cves/2023/CVE-2023-45542.md +++ b/cves/2023/CVE-2023-45542.md @@ -13,7 +13,7 @@ Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker t - https://github.com/ahrixia/CVE-2023-45542 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-45542 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45542.yaml diff --git a/cves/2023/CVE-2023-45612.md b/cves/2023/CVE-2023-45612.md index c69fbff7cd1..3eeb33bd58e 100644 --- a/cves/2023/CVE-2023-45612.md +++ b/cves/2023/CVE-2023-45612.md @@ -13,5 +13,11 @@ In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/aecelen/ktor-xxe-poc +- https://github.com/clemfavre/cve-2023-45612_exploit +- https://github.com/infernosalex/CVE-2023-45612-PoC +- https://github.com/ksaweryr/CVE-2023-45612-PoC +- https://github.com/razvanclaudiu/ktor-xxe-poc +- https://github.com/seraphimi/ktor-xxe +- https://github.com/stefan-500/ktor-cve-2023-45612-poc diff --git a/cves/2023/CVE-2023-45866.md b/cves/2023/CVE-2023-45866.md index ed67479f207..339b8b4c6ca 100644 --- a/cves/2023/CVE-2023-45866.md +++ b/cves/2023/CVE-2023-45866.md @@ -20,4 +20,5 @@ Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID D - https://github.com/jjjjjjjj987/cve-2023-45866-py - https://github.com/ladyg00se/CVE-2023-45866_WIP - https://github.com/xG3nesis/RustyInjector +- https://github.com/hegaz0y/-BuL diff --git a/cves/2023/CVE-2023-45992.md b/cves/2023/CVE-2023-45992.md index 9eb95605467..1bdc131a30d 100644 --- a/cves/2023/CVE-2023-45992.md +++ b/cves/2023/CVE-2023-45992.md @@ -13,5 +13,5 @@ A vulnerability in the web-based interface of the RUCKUS Cloudpath product on ve - https://github.com/harry935/CVE-2023-45992 #### Github -No PoCs found on GitHub currently. +- https://github.com/harry935/CVE-2023-45992 diff --git a/cves/2023/CVE-2023-46014.md b/cves/2023/CVE-2023-46014.md index e156324f218..819512ab34a 100644 --- a/cves/2023/CVE-2023-46014.md +++ b/cves/2023/CVE-2023-46014.md @@ -14,4 +14,5 @@ SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 #### Github - https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC +- https://github.com/ersinerenler/CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46015.md b/cves/2023/CVE-2023-46015.md index ea4908dcbd0..77504bfc60e 100644 --- a/cves/2023/CVE-2023-46015.md +++ b/cves/2023/CVE-2023-46015.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Ban - https://github.com/ersinerenler/CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46016.md b/cves/2023/CVE-2023-46016.md index b20741e46f0..a8d2774bf07 100644 --- a/cves/2023/CVE-2023-46016.md +++ b/cves/2023/CVE-2023-46016.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows att - https://github.com/ersinerenler/CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46017.md b/cves/2023/CVE-2023-46017.md index 96ff6fd2431..12d98d382b6 100644 --- a/cves/2023/CVE-2023-46017.md +++ b/cves/2023/CVE-2023-46017.md @@ -13,5 +13,5 @@ SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 - https://github.com/ersinerenler/CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46018.md b/cves/2023/CVE-2023-46018.md index f738757e592..c2681f766dd 100644 --- a/cves/2023/CVE-2023-46018.md +++ b/cves/2023/CVE-2023-46018.md @@ -13,5 +13,5 @@ SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \ - https://github.com/ersinerenler/CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46019.md b/cves/2023/CVE-2023-46019.md index 7b1423c067b..92bff774c19 100644 --- a/cves/2023/CVE-2023-46019.md +++ b/cves/2023/CVE-2023-46019.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank - https://github.com/ersinerenler/CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46020.md b/cves/2023/CVE-2023-46020.md index a46ccf1a0d9..e85f941a733 100644 --- a/cves/2023/CVE-2023-46020.md +++ b/cves/2023/CVE-2023-46020.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 - https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46021.md b/cves/2023/CVE-2023-46021.md index 4092f3966b7..2915cbd2f1b 100644 --- a/cves/2023/CVE-2023-46021.md +++ b/cves/2023/CVE-2023-46021.md @@ -13,5 +13,5 @@ SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows - https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46022.md b/cves/2023/CVE-2023-46022.md index e06ff6e022d..a2c93f9427a 100644 --- a/cves/2023/CVE-2023-46022.md +++ b/cves/2023/CVE-2023-46022.md @@ -13,7 +13,7 @@ SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows - https://github.com/ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability #### ExploitDB - https://www.exploit-db.com/exploits/51912 diff --git a/cves/2023/CVE-2023-46136.md b/cves/2023/CVE-2023-46136.md index e1a9b02b203..b75fbf3b143 100644 --- a/cves/2023/CVE-2023-46136.md +++ b/cves/2023/CVE-2023-46136.md @@ -14,5 +14,5 @@ Werkzeug is a comprehensive WSGI web application library. If an upload of a file No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/JawadPy/WerkGhost diff --git a/cves/2023/CVE-2023-46229.md b/cves/2023/CVE-2023-46229.md index 21dd2fb4b47..4b53b0df272 100644 --- a/cves/2023/CVE-2023-46229.md +++ b/cves/2023/CVE-2023-46229.md @@ -13,5 +13,5 @@ LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.p No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/JarvisDing-sdu/Yasa-CVE-2023-46229 diff --git a/cves/2023/CVE-2023-4634.md b/cves/2023/CVE-2023-4634.md index fb4f4a2630f..ca7755ac156 100644 --- a/cves/2023/CVE-2023-4634.md +++ b/cves/2023/CVE-2023-4634.md @@ -16,6 +16,7 @@ The Media Library Assistant plugin for WordPress is vulnerable to Local File Inc #### Github - https://github.com/Patrowl/CVE-2023-4634 - https://github.com/lehazare/ProjetCL +- https://github.com/Evillm/CVE-2023-4634-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4634.yaml diff --git a/cves/2023/CVE-2023-46371.md b/cves/2023/CVE-2023-46371.md index 76e98a38f55..05b4db5dfdd 100644 --- a/cves/2023/CVE-2023-46371.md +++ b/cves/2023/CVE-2023-46371.md @@ -15,5 +15,5 @@ TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulne - https://github.com/Jianchun-Ding/CVE-poc-update #### Github -No PoCs found on GitHub currently. +- https://github.com/Jianchun-Ding/CVE-poc-update diff --git a/cves/2023/CVE-2023-46404.md b/cves/2023/CVE-2023-46404.md index debe93a65c9..56947b3e87d 100644 --- a/cves/2023/CVE-2023-46404.md +++ b/cves/2023/CVE-2023-46404.md @@ -13,5 +13,5 @@ PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulner No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/windecks/CVE-2023-46404 diff --git a/cves/2023/CVE-2023-46450.md b/cves/2023/CVE-2023-46450.md index dfd26de9610..4d909374056 100644 --- a/cves/2023/CVE-2023-46450.md +++ b/cves/2023/CVE-2023-46450.md @@ -14,5 +14,5 @@ Sourcecodester Free and Open Source inventory management system 1.0 is vulnerabl - https://youtu.be/LQy0_xIK2q0 #### Github -No PoCs found on GitHub currently. +- https://github.com/yte121/-CVE-2023-46450 diff --git a/cves/2023/CVE-2023-46451.md b/cves/2023/CVE-2023-46451.md index d45fa1644ba..20e9ad9acab 100644 --- a/cves/2023/CVE-2023-46451.md +++ b/cves/2023/CVE-2023-46451.md @@ -14,5 +14,5 @@ Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) - https://youtu.be/f8B3_m5YfqI #### Github -No PoCs found on GitHub currently. +- https://github.com/sajaljat/CVE-2023-46451 diff --git a/cves/2023/CVE-2023-46604.md b/cves/2023/CVE-2023-46604.md index 662bb893dae..dacdd598f16 100644 --- a/cves/2023/CVE-2023-46604.md +++ b/cves/2023/CVE-2023-46604.md @@ -45,9 +45,15 @@ The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. Th - https://github.com/tomasmussi/activemq-cve-2023-46604 - https://github.com/vjayant93/CVE-2023-46604-POC - https://github.com/vulncheck-oss/cve-2023-46604 +- https://github.com/KlaasStessens/CVE-2023-46604 +- https://github.com/REGGYRAIDER/CVE-2023-46604-RCE +- https://github.com/RockyDesigne/SSP-Assignment-3-RCEYouLater #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-46604.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2023-46604 diff --git a/cves/2023/CVE-2023-46694.md b/cves/2023/CVE-2023-46694.md index a9113ee47d6..8f932a51c2f 100644 --- a/cves/2023/CVE-2023-46694.md +++ b/cves/2023/CVE-2023-46694.md @@ -14,5 +14,5 @@ Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potent - https://github.com/invisiblebyte/CVE-2023-46694 #### Github -No PoCs found on GitHub currently. +- https://github.com/invisiblebyte/CVE-2023-46694 diff --git a/cves/2023/CVE-2023-46818.md b/cves/2023/CVE-2023-46818.md index 7c9fb6c2d94..89bb31116b9 100644 --- a/cves/2023/CVE-2023-46818.md +++ b/cves/2023/CVE-2023-46818.md @@ -25,6 +25,7 @@ An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be - https://github.com/rvizx/CVE-2023-46818 - https://github.com/vulnerk0/CVE-2023-46818 - https://github.com/zs1n/CVE-2023-46818 +- https://github.com/rvzsec/CVE-2023-46818 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46818.yaml diff --git a/cves/2023/CVE-2023-46865.md b/cves/2023/CVE-2023-46865.md index b7fe5631ed0..7e5f21afbbe 100644 --- a/cves/2023/CVE-2023-46865.md +++ b/cves/2023/CVE-2023-46865.md @@ -15,5 +15,5 @@ - https://notes.netbytesec.com/2023/11/post-auth-rce-in-crater-invoice.html #### Github -No PoCs found on GitHub currently. +- https://github.com/asylumdx/Crater-CVE-2023-46865-RCE diff --git a/cves/2023/CVE-2023-46974.md b/cves/2023/CVE-2023-46974.md index 8ac2207047a..4af8f2ecb6a 100644 --- a/cves/2023/CVE-2023-46974.md +++ b/cves/2023/CVE-2023-46974.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in Best Courier Management System v.1.000 all - https://youtu.be/5oVfJHT_-Ys #### Github -No PoCs found on GitHub currently. +- https://github.com/yte121/CVE-2023-46974 diff --git a/cves/2023/CVE-2023-46998.md b/cves/2023/CVE-2023-46998.md index 11b91329abd..f625465a715 100644 --- a/cves/2023/CVE-2023-46998.md +++ b/cves/2023/CVE-2023-46998.md @@ -13,5 +13,5 @@ Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allow - https://github.com/soy-oreocato/CVE-2023-46998/ #### Github -No PoCs found on GitHub currently. +- https://github.com/soy-oreocato/CVE-2023-46998 diff --git a/cves/2023/CVE-2023-48084.md b/cves/2023/CVE-2023-48084.md index 34a70fa0d8b..ee160f2f692 100644 --- a/cves/2023/CVE-2023-48084.md +++ b/cves/2023/CVE-2023-48084.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/Hamibubu/CVE-2023-48084 - https://github.com/bucketcat/CVE-2023-48084 +- https://github.com/MettHK/CVE-2023-48084-Revised #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48084.yaml diff --git a/cves/2023/CVE-2023-48223.md b/cves/2023/CVE-2023-48223.md index d902d3a8d43..9aab5a06113 100644 --- a/cves/2023/CVE-2023-48223.md +++ b/cves/2023/CVE-2023-48223.md @@ -13,5 +13,5 @@ fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3 - https://github.com/nearform/fast-jwt/security/advisories/GHSA-c2ff-88x2-x9pg #### Github -No PoCs found on GitHub currently. +- https://github.com/lucastran05/CVE-2023-48223 diff --git a/cves/2023/CVE-2023-4861.md b/cves/2023/CVE-2023-4861.md index 19fb2004cfa..1488f3e1f0b 100644 --- a/cves/2023/CVE-2023-4861.md +++ b/cves/2023/CVE-2023-4861.md @@ -13,4 +13,4 @@ The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload - https://wpscan.com/vulnerability/7fa03f00-25c7-4e40-8592-bb4001ce019d #### Github -No PoCs found on GitHub currently. +- https://github.com/noambouillet/CVE-2023-4861-PoC diff --git a/cves/2023/CVE-2023-48849.md b/cves/2023/CVE-2023-48849.md index a1d05d00c82..801d6535db1 100644 --- a/cves/2023/CVE-2023-48849.md +++ b/cves/2023/CVE-2023-48849.md @@ -13,5 +13,5 @@ Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthentica - https://github.com/delsploit/CVE-2023-48849 #### Github -No PoCs found on GitHub currently. +- https://github.com/delsploit/CVE-2023-48849 diff --git a/cves/2023/CVE-2023-48858.md b/cves/2023/CVE-2023-48858.md index a5350848909..c0cd58cca4a 100644 --- a/cves/2023/CVE-2023-48858.md +++ b/cves/2023/CVE-2023-48858.md @@ -13,5 +13,5 @@ A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.C - https://github.com/Shumerez/CVE-2023-48858 #### Github -No PoCs found on GitHub currently. +- https://github.com/Shumerez/CVE-2023-48858 diff --git a/cves/2023/CVE-2023-49031.md b/cves/2023/CVE-2023-49031.md index 16855a00066..62dbf73236d 100644 --- a/cves/2023/CVE-2023-49031.md +++ b/cves/2023/CVE-2023-49031.md @@ -13,5 +13,5 @@ Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) - https://github.com/Yoshik0xF6/CVE-2023-49031 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yoshik0xF6/CVE-2023-49031 diff --git a/cves/2023/CVE-2023-49070.md b/cves/2023/CVE-2023-49070.md index 2e0c36b5226..76a474f244c 100644 --- a/cves/2023/CVE-2023-49070.md +++ b/cves/2023/CVE-2023-49070.md @@ -21,9 +21,13 @@ Pre-auth RCE in Apache Ofbiz 18.12.09.It's due to XML-RPC no longer maintained - https://github.com/bruce120/Apache-OFBiz-Authentication-Bypass - https://github.com/jakabakos/Apache-OFBiz-Authentication-Bypass - https://github.com/yukselberkay/CVE-2023-49070_CVE-2023-51467 +- https://github.com/GraySignal/Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49070.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_ofbiz_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2023-49070 diff --git a/cves/2023/CVE-2023-49103.md b/cves/2023/CVE-2023-49103.md index 7eda7828ddb..3259544347a 100644 --- a/cves/2023/CVE-2023-49103.md +++ b/cves/2023/CVE-2023-49103.md @@ -23,3 +23,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/owncloud_phpinfo_reader.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/owncloud/CVE-2023-49103 diff --git a/cves/2023/CVE-2023-4911.md b/cves/2023/CVE-2023-4911.md index 1733809c6e6..5b741afc354 100644 --- a/cves/2023/CVE-2023-4911.md +++ b/cves/2023/CVE-2023-4911.md @@ -43,6 +43,8 @@ A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so whi - https://github.com/snurkeburk/Looney-Tunables - https://github.com/vscvetkov/code - https://github.com/xiaoQ1z/CVE-2023-4911 +- https://github.com/baeseungwon1010/CVE-2023-4911 +- https://github.com/jarpex/cve-2023-4911-exploit-optimized #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-4911.yaml diff --git a/cves/2023/CVE-2023-49313.md b/cves/2023/CVE-2023-49313.md index 536fccda12f..bcccf8bbb29 100644 --- a/cves/2023/CVE-2023-49313.md +++ b/cves/2023/CVE-2023-49313.md @@ -13,5 +13,5 @@ A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to comprom - https://github.com/louiselalanne/CVE-2023-49313 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2023-49313 diff --git a/cves/2023/CVE-2023-49438.md b/cves/2023/CVE-2023-49438.md index c394a42c041..4e42ed49e56 100644 --- a/cves/2023/CVE-2023-49438.md +++ b/cves/2023/CVE-2023-49438.md @@ -13,7 +13,7 @@ An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 - https://github.com/brandon-t-elliott/CVE-2023-49438 #### Github -No PoCs found on GitHub currently. +- https://github.com/brandon-t-elliott/CVE-2023-49438 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49438.yaml diff --git a/cves/2023/CVE-2023-5002.md b/cves/2023/CVE-2023-5002.md index 6b2e78643af..23430164f65 100644 --- a/cves/2023/CVE-2023-5002.md +++ b/cves/2023/CVE-2023-5002.md @@ -16,3 +16,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pgadmin/CVE-2023-5002 diff --git a/cves/2023/CVE-2023-50072.md b/cves/2023/CVE-2023-50072.md index 076605e5c80..b1746a821a5 100644 --- a/cves/2023/CVE-2023-50072.md +++ b/cves/2023/CVE-2023-50072.md @@ -13,5 +13,5 @@ A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.4 - https://github.com/ahrixia/CVE-2023-50072 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-50072 diff --git a/cves/2023/CVE-2023-50564.md b/cves/2023/CVE-2023-50564.md index d7e8a1702d0..5e41466e748 100644 --- a/cves/2023/CVE-2023-50564.md +++ b/cves/2023/CVE-2023-50564.md @@ -22,4 +22,5 @@ No PoCs from references. - https://github.com/rwexecute/CVE-2023-50564 - https://github.com/thefizzyfish/CVE-2023-50564-pluck - https://github.com/xpltive/CVE-2023-50564 +- https://github.com/kikechans/-Pluck-CMS-RCE-CVE-2023-50564 diff --git a/cves/2023/CVE-2023-50965.md b/cves/2023/CVE-2023-50965.md index ed1c56d059b..3e325264bf2 100644 --- a/cves/2023/CVE-2023-50965.md +++ b/cves/2023/CVE-2023-50965.md @@ -13,5 +13,5 @@ In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in - https://github.com/starnight/MicroHttpServer/issues/5 #### Github -No PoCs found on GitHub currently. +- https://github.com/DaviGSantana/CVE-2023-50965 diff --git a/cves/2023/CVE-2023-51126.md b/cves/2023/CVE-2023-51126.md index bf413bc24d8..c141aaf80c0 100644 --- a/cves/2023/CVE-2023-51126.md +++ b/cves/2023/CVE-2023-51126.md @@ -13,5 +13,5 @@ Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 al - https://github.com/risuxx/CVE-2023-51126 #### Github -No PoCs found on GitHub currently. +- https://github.com/risuxx/CVE-2023-51126 diff --git a/cves/2023/CVE-2023-51409.md b/cves/2023/CVE-2023-51409.md index 89a7fac367e..cdb774c8732 100644 --- a/cves/2023/CVE-2023-51409.md +++ b/cves/2023/CVE-2023-51409.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/Nxploited/CVE-2023-51409 - https://github.com/RandomRobbieBF/CVE-2023-51409 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51409.yaml diff --git a/cves/2023/CVE-2023-51449.md b/cves/2023/CVE-2023-51449.md index b4629eaf727..fd13c148c6b 100644 --- a/cves/2023/CVE-2023-51449.md +++ b/cves/2023/CVE-2023-51449.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51449.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gradio/CVE-2023-51449 diff --git a/cves/2023/CVE-2023-51467.md b/cves/2023/CVE-2023-51467.md index 4d695e039f6..5d02043ecff 100644 --- a/cves/2023/CVE-2023-51467.md +++ b/cves/2023/CVE-2023-51467.md @@ -35,3 +35,6 @@ The vulnerability permits attackers to circumvent authentication processes, enab #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_ofbiz_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2023-51467 diff --git a/cves/2023/CVE-2023-51764.md b/cves/2023/CVE-2023-51764.md index 3864ab2b630..fcdb9db8f05 100644 --- a/cves/2023/CVE-2023-51764.md +++ b/cves/2023/CVE-2023-51764.md @@ -18,4 +18,6 @@ Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_re #### Github - https://github.com/Double-q1015/CVE-2023-51764 - https://github.com/d4op/CVE-2023-51764-POC +- https://github.com/duy-31/CVE-2023-51764 +- https://github.com/eeenvik1/CVE-2023-51764 diff --git a/cves/2023/CVE-2023-51810.md b/cves/2023/CVE-2023-51810.md index ee66adbceec..2d13b77073d 100644 --- a/cves/2023/CVE-2023-51810.md +++ b/cves/2023/CVE-2023-51810.md @@ -13,5 +13,5 @@ SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0 - https://github.com/Pastea/CVE-2023-51810 #### Github -No PoCs found on GitHub currently. +- https://github.com/Pastea/CVE-2023-51810 diff --git a/cves/2023/CVE-2023-52076.md b/cves/2023/CVE-2023-52076.md index 70cc7f9f513..6cea41ffdf2 100644 --- a/cves/2023/CVE-2023-52076.md +++ b/cves/2023/CVE-2023-52076.md @@ -17,4 +17,5 @@ Atril Document Viewer is the default document reader of the MATE desktop environ #### Github - https://github.com/febinrev/slippy-book-exploit +- https://github.com/Groppoxx/CVE-2023-52076-PoC diff --git a/cves/2023/CVE-2023-52235.md b/cves/2023/CVE-2023-52235.md index 0c6049349dd..0c73a8c84fd 100644 --- a/cves/2023/CVE-2023-52235.md +++ b/cves/2023/CVE-2023-52235.md @@ -14,5 +14,5 @@ SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07d No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/hackintoanetwork/CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding diff --git a/cves/2023/CVE-2023-52251.md b/cves/2023/CVE-2023-52251.md index d31ffcbba9b..9ec8671c54a 100644 --- a/cves/2023/CVE-2023-52251.md +++ b/cves/2023/CVE-2023-52251.md @@ -14,7 +14,7 @@ An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote atta - https://github.com/BobTheShoplifter/CVE-2023-52251-POC #### Github -No PoCs found on GitHub currently. +- https://github.com/BobTheShoplifter/CVE-2023-52251-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52251.yaml diff --git a/cves/2023/CVE-2023-52271.md b/cves/2023/CVE-2023-52271.md index fd2aa28e4f8..c5883720aed 100644 --- a/cves/2023/CVE-2023-52271.md +++ b/cves/2023/CVE-2023-52271.md @@ -13,5 +13,5 @@ The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/victoni/BYOVD-CVE-2023-52271-POC diff --git a/cves/2023/CVE-2023-5360.md b/cves/2023/CVE-2023-5360.md index cc992038ca8..e634a1fcfc5 100644 --- a/cves/2023/CVE-2023-5360.md +++ b/cves/2023/CVE-2023-5360.md @@ -22,6 +22,7 @@ The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not - https://github.com/nastar-id/CVE-2023-5360 - https://github.com/phankz/Worpress-CVE-2023-5360 - https://github.com/sagsooz/CVE-2023-5360 +- https://github.com/LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5360.yaml diff --git a/cves/2023/CVE-2023-5965.md b/cves/2023/CVE-2023-5965.md index cac013571e9..fd54e6c3655 100644 --- a/cves/2023/CVE-2023-5965.md +++ b/cves/2023/CVE-2023-5965.md @@ -13,5 +13,5 @@ An authenticated privileged attacker could upload a specially crafted zip to the No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/josemlwdf/CVE-2023-5965 diff --git a/cves/2023/CVE-2023-5966.md b/cves/2023/CVE-2023-5966.md index d09ef1e930b..d290d9ba5b1 100644 --- a/cves/2023/CVE-2023-5966.md +++ b/cves/2023/CVE-2023-5966.md @@ -13,5 +13,5 @@ An authenticated privileged attacker could upload a specially crafted zip to the No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ll104567/cve-2023-5966 diff --git a/cves/2023/CVE-2023-6019.md b/cves/2023/CVE-2023-6019.md index 2f8a068c5eb..5e2a9ab218b 100644 --- a/cves/2023/CVE-2023-6019.md +++ b/cves/2023/CVE-2023-6019.md @@ -15,6 +15,7 @@ A command injection existed in Ray's cpu_profile URL parameter allowing attacker #### Github - https://github.com/Clydeston/CVE-2023-6019 - https://github.com/FireWolfWang/CVE-2023-6019 +- https://github.com/joaquinrrr/CVE-2023-6019 #### ExploitDB - https://www.exploit-db.com/exploits/51978 diff --git a/cves/2023/CVE-2023-6246.md b/cves/2023/CVE-2023-6246.md index b4633878ab2..9bc21ec4579 100644 --- a/cves/2023/CVE-2023-6246.md +++ b/cves/2023/CVE-2023-6246.md @@ -23,6 +23,7 @@ A heap-based buffer overflow was found in the __vsyslog_internal function of the #### Github - https://github.com/elpe-pinillo/CVE-2023-6246 +- https://github.com/SimoesCTT/CTT-Vsyslog-Vortex-CVE-2023-6246 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-6246.yaml diff --git a/cves/2023/CVE-2023-6329.md b/cves/2023/CVE-2023-6329.md index 88fe860bef1..99d60e591e0 100644 --- a/cves/2023/CVE-2023-6329.md +++ b/cves/2023/CVE-2023-6329.md @@ -13,7 +13,7 @@ An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. - https://tenable.com/security/research/tra-2023-36 #### Github -No PoCs found on GitHub currently. +- https://github.com/itzvenom/CVE-2023-6329 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6329.yaml diff --git a/cves/2023/CVE-2023-6553.md b/cves/2023/CVE-2023-6553.md index b2fd70b5ca5..e091040ccfc 100644 --- a/cves/2023/CVE-2023-6553.md +++ b/cves/2023/CVE-2023-6553.md @@ -18,6 +18,8 @@ The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution - https://github.com/Harshit-Mashru/CVE-2023-6553 - https://github.com/cc3305/CVE-2023-6553 - https://github.com/motikan2010/CVE-2023-6553-PoC +- https://github.com/0x00phantom-hat/CVE-2023-6553-RCE-Exploit +- https://github.com/joaoaugustom/WordPress_Backup_Migration-RCE_Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6553.yaml diff --git a/cves/2023/CVE-2023-6972.md b/cves/2023/CVE-2023-6972.md index c802735fff0..bafdb765761 100644 --- a/cves/2023/CVE-2023-6972.md +++ b/cves/2023/CVE-2023-6972.md @@ -13,4 +13,4 @@ The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0x00phantom-hat/CVE-2023-6972-Exploit-Arbitrary-File-Deletion diff --git a/cves/2023/CVE-2023-7172.md b/cves/2023/CVE-2023-7172.md index abbe1e7f372..bae02dfb227 100644 --- a/cves/2023/CVE-2023-7172.md +++ b/cves/2023/CVE-2023-7172.md @@ -14,5 +14,5 @@ Eine kritische Schwachstelle wurde in PHPGurukul Hospital Management System 1.0 - https://github.com/sharathc213/CVE-2023-7172 #### Github -No PoCs found on GitHub currently. +- https://github.com/sharathc213/CVE-2023-7172 diff --git a/cves/2023/CVE-2023-7173.md b/cves/2023/CVE-2023-7173.md index 1702fa48a1f..03a2a476b5e 100644 --- a/cves/2023/CVE-2023-7173.md +++ b/cves/2023/CVE-2023-7173.md @@ -15,5 +15,5 @@ Es wurde eine problematische Schwachstelle in PHPGurukul Hospital Management Sys - https://github.com/sharathc213/CVE-2023-7173 #### Github -No PoCs found on GitHub currently. +- https://github.com/sharathc213/CVE-2023-7173 diff --git a/cves/2024/CVE-2024-0012.md b/cves/2024/CVE-2024-0012.md index 52ab1d3cb2a..fe77c5e7b92 100644 --- a/cves/2024/CVE-2024-0012.md +++ b/cves/2024/CVE-2024-0012.md @@ -30,6 +30,7 @@ An authentication bypass in Palo Alto Networks PAN-OS software enables an unauth - https://github.com/iSee857/CVE-2024-0012-poc - https://github.com/punitdarji/Paloalto-CVE-2024-0012 - https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012 +- https://github.com/razureink/cve-2024-0012_9474-panos_authbypass_reproduction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0012.yaml diff --git a/cves/2024/CVE-2024-0044.md b/cves/2024/CVE-2024-0044.md index e3a378b83ea..8ee19aa6ee9 100644 --- a/cves/2024/CVE-2024-0044.md +++ b/cves/2024/CVE-2024-0044.md @@ -37,4 +37,10 @@ In createSessionInternal of PackageInstallerService.java, there is a possible ru - https://github.com/nishan0x1/CVE-2024-0044 - https://github.com/pl4int3xt/cve_2024_0044 - https://github.com/scs-labrat/android_autorooter +- https://github.com/Athexblackhat/EXPLOITER +- https://github.com/HoyoenKim/CVE-2024-0044_PoC +- https://github.com/JackTekno/Chrome-Forensic_CVE-2024-0044 +- https://github.com/TheBl4ckPh4nt0m/CVE-2024-0044 +- https://github.com/hackerronin/CVE-2024-0044 +- https://github.com/k4ran909/cve_2024_0044 diff --git a/cves/2024/CVE-2024-0368.md b/cves/2024/CVE-2024-0368.md index b33bbade74b..cdc80b0dfdb 100644 --- a/cves/2024/CVE-2024-0368.md +++ b/cves/2024/CVE-2024-0368.md @@ -15,4 +15,4 @@ The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordP - https://developers.hubspot.com/docs/api/webhooks#scopes #### Github -No PoCs found on GitHub currently. +- https://github.com/RandomRobbieBF/CVE-2024-0368 diff --git a/cves/2024/CVE-2024-0582.md b/cves/2024/CVE-2024-0582.md index cbe650d3d76..394945e22fa 100644 --- a/cves/2024/CVE-2024-0582.md +++ b/cves/2024/CVE-2024-0582.md @@ -27,4 +27,5 @@ No PoCs from references. - https://github.com/kuzeyardabulut/CVE-2024-0582 - https://github.com/pwnmonk/io_uring-n-day - https://github.com/ysanatomic/io_uring_LPE-CVE-2024-0582 +- https://github.com/nanabingies/CVE-2024-0582 diff --git a/cves/2024/CVE-2024-0670.md b/cves/2024/CVE-2024-0670.md index bc56184b3a4..f51cc14d35f 100644 --- a/cves/2024/CVE-2024-0670.md +++ b/cves/2024/CVE-2024-0670.md @@ -17,4 +17,8 @@ Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p4 #### Github - https://github.com/Nikopmpm/Fsociety-CVE-2024-0670-CheckMK-LPE +- https://github.com/dfdxarjy/HTB-NanoCorp-CVE-2024-0670 +- https://github.com/elsevar11/CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit +- https://github.com/magicrc/CVE-2024-0670 +- https://github.com/tralsesec/CVE-2024-0670 diff --git a/cves/2024/CVE-2024-0692.md b/cves/2024/CVE-2024-0692.md index 90d075e5d3b..962029c5de8 100644 --- a/cves/2024/CVE-2024-0692.md +++ b/cves/2024/CVE-2024-0692.md @@ -14,7 +14,7 @@ The SolarWinds Security Event Manager was susceptible to Remote Code Execution V No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/machevalia/CVE-2024-0692-SolarWinds-SEM-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0692.yaml diff --git a/cves/2024/CVE-2024-1065.md b/cves/2024/CVE-2024-1065.md index e509bbf29ff..2df6cf3e31b 100644 --- a/cves/2024/CVE-2024-1065.md +++ b/cves/2024/CVE-2024-1065.md @@ -15,5 +15,5 @@ Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valha - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities #### Github -No PoCs found on GitHub currently. +- https://github.com/kuzeyardabulut/CVE-2024-1065 diff --git a/cves/2024/CVE-2024-1071.md b/cves/2024/CVE-2024-1071.md index 957dddd0340..058c6c4bf89 100644 --- a/cves/2024/CVE-2024-1071.md +++ b/cves/2024/CVE-2024-1071.md @@ -23,6 +23,7 @@ No PoCs from references. - https://github.com/fa-rrel/CVE-2024-1071-SQL-Injection - https://github.com/gbrsh/CVE-2024-1071 - https://github.com/gh-ost00/CVE-2024-1071-SQL-Injection +- https://github.com/dogucyber/WordPress-Exploit-CVE-2024-1071 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1071.yaml diff --git a/cves/2024/CVE-2024-1086.md b/cves/2024/CVE-2024-1086.md index 68c6fd5e10f..60ddaf67184 100644 --- a/cves/2024/CVE-2024-1086.md +++ b/cves/2024/CVE-2024-1086.md @@ -26,4 +26,7 @@ A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables compon - https://github.com/karim4353/CVE-2024-1086-Exploit - https://github.com/lobo360/iptables-ubuntu - https://github.com/xzx482/CVE-2024-1086 +- https://github.com/Notselwyn/CVE-2024-1086 +- https://github.com/b1nhack/CVE-2024-1086 +- https://github.com/vettrivel007/CVE-2024-1086 diff --git a/cves/2024/CVE-2024-10914.md b/cves/2024/CVE-2024-10914.md index 8d019f4603b..f024ec8975a 100644 --- a/cves/2024/CVE-2024-10914.md +++ b/cves/2024/CVE-2024-10914.md @@ -37,6 +37,7 @@ In D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L bis 20241028 wurde eine kriti - https://github.com/retuci0/cve-2024-10914-port - https://github.com/verylazytech/CVE-2024-10914 - https://github.com/yenyangmjaze/cve-2024-10914 +- https://github.com/0xSS3K/CVE-2024-10914__POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10914.yaml diff --git a/cves/2024/CVE-2024-10924.md b/cves/2024/CVE-2024-10924.md index b9fa3a372c5..2027ede91d0 100644 --- a/cves/2024/CVE-2024-10924.md +++ b/cves/2024/CVE-2024-10924.md @@ -32,6 +32,9 @@ No PoCs from references. - https://github.com/m3ssap0/wordpress-really-simple-security-authn-bypass-vulnerable-application - https://github.com/sariamubeen/CVE-2024-10924 - https://github.com/z0roday/Realy-Simple-Security-Vulnerabilities-Exploit +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-10924 +- https://github.com/bodoinon/CVE-2024-10924 +- https://github.com/d0x-awrqxavc/-CVE-2024-10924 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10924.yaml diff --git a/cves/2024/CVE-2024-11003.md b/cves/2024/CVE-2024-11003.md index 0409e9e28df..18461097de4 100644 --- a/cves/2024/CVE-2024-11003.md +++ b/cves/2024/CVE-2024-11003.md @@ -13,5 +13,5 @@ Qualys discovered that needrestart, before version 3.8, passes unsanitized data No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sychikov/CVE-2024-11003-POC diff --git a/cves/2024/CVE-2024-11635.md b/cves/2024/CVE-2024-11635.md index f38dd467b43..391f80dd480 100644 --- a/cves/2024/CVE-2024-11635.md +++ b/cves/2024/CVE-2024-11635.md @@ -13,4 +13,4 @@ The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Exec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/vigilante-1337/CVE-2024-11635 diff --git a/cves/2024/CVE-2024-11680.md b/cves/2024/CVE-2024-11680.md index 8954155c352..986e4727f7e 100644 --- a/cves/2024/CVE-2024-11680.md +++ b/cves/2024/CVE-2024-11680.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/D3N14LD15K/CVE-2024-11680_PoC_Exploit +- https://github.com/qucklecrabik/CVE-2024-11680 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11680.yaml diff --git a/cves/2024/CVE-2024-12029.md b/cves/2024/CVE-2024-12029.md index 7df34b3fca3..c657dcdcebe 100644 --- a/cves/2024/CVE-2024-12029.md +++ b/cves/2024/CVE-2024-12029.md @@ -13,7 +13,7 @@ A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Lu3ky13/Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb diff --git a/cves/2024/CVE-2024-12084.md b/cves/2024/CVE-2024-12084.md index fe80371f2d7..fd711d2998e 100644 --- a/cves/2024/CVE-2024-12084.md +++ b/cves/2024/CVE-2024-12084.md @@ -23,4 +23,5 @@ A heap-based buffer overflow flaw was found in the rsync daemon. This issue is d #### Github - https://github.com/rxerium/CVE-2024-12084 - https://github.com/themirze/cve-2024-12084 +- https://github.com/InkeyP/CVE-2024-12084 diff --git a/cves/2024/CVE-2024-12227.md b/cves/2024/CVE-2024-12227.md index 82748ba70af..5f629376fa4 100644 --- a/cves/2024/CVE-2024-12227.md +++ b/cves/2024/CVE-2024-12227.md @@ -15,5 +15,5 @@ Es wurde eine problematische Schwachstelle in MSI Dragon Center bis 2.0.146.0 ge - https://shareforall.notion.site/MSI-Dragon-Center-NTIOLib_X64-0xC3506104-MmMapIoSpace-DOS-15160437bb1e801daf58d4aea052970e #### Github -No PoCs found on GitHub currently. +- https://github.com/HI0U/POC-CVE-2024-12227 diff --git a/cves/2024/CVE-2024-12381.md b/cves/2024/CVE-2024-12381.md index ce606232fe8..8a41014385d 100644 --- a/cves/2024/CVE-2024-12381.md +++ b/cves/2024/CVE-2024-12381.md @@ -13,5 +13,6 @@ Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote a - https://issues.chromium.org/issues/381696874 #### Github -No PoCs found on GitHub currently. +- https://github.com/FatfishIO/CVE-2024-12381-PoC +- https://github.com/VictorNS69/CVE-2024-12381 diff --git a/cves/2024/CVE-2024-12484.md b/cves/2024/CVE-2024-12484.md index 57b845486d4..03b90cf3600 100644 --- a/cves/2024/CVE-2024-12484.md +++ b/cves/2024/CVE-2024-12484.md @@ -16,5 +16,5 @@ In Codezips Technical Discussion Forum 1.0 wurde eine Schwachstelle entdeckt. Si - https://github.com/LiChaser/CVE-2024-12484 #### Github -No PoCs found on GitHub currently. +- https://github.com/LiChaser/CVE-2024-12484 diff --git a/cves/2024/CVE-2024-13513.md b/cves/2024/CVE-2024-13513.md index d3d44105a4b..25316b4b65d 100644 --- a/cves/2024/CVE-2024-13513.md +++ b/cves/2024/CVE-2024-13513.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/KTN1990/CVE-2024-13513 +- https://github.com/0axz-tools/CVE-2024-13513.py diff --git a/cves/2024/CVE-2024-13869.md b/cves/2024/CVE-2024-13869.md index 37594065248..50657e3750f 100644 --- a/cves/2024/CVE-2024-13869.md +++ b/cves/2024/CVE-2024-13869.md @@ -14,4 +14,4 @@ The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPre - https://ryankozak.com/posts/cve-2024-13869/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2024-13869 diff --git a/cves/2024/CVE-2024-13985.md b/cves/2024/CVE-2024-13985.md index 901173feb56..ed404c5a4ee 100644 --- a/cves/2024/CVE-2024-13985.md +++ b/cves/2024/CVE-2024-13985.md @@ -14,7 +14,7 @@ A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows - https://www.vulncheck.com/advisories/dahua-eims-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/CrimsonfiedOfficial/CVE-2024-13985 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13985.yaml diff --git a/cves/2024/CVE-2024-1561.md b/cves/2024/CVE-2024-1561.md index 0a55b0e78a3..29850f54836 100644 --- a/cves/2024/CVE-2024-1561.md +++ b/cves/2024/CVE-2024-1561.md @@ -15,6 +15,10 @@ No PoCs from references. #### Github - https://github.com/DiabloHTB/CVE-2024-1561 +- https://github.com/K3ysTr0K3R/CVE-2024-1561 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1561.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gradio/CVE-2024-1561 diff --git a/cves/2024/CVE-2024-1698.md b/cves/2024/CVE-2024-1698.md index 9c78781cfb9..88c80771d8c 100644 --- a/cves/2024/CVE-2024-1698.md +++ b/cves/2024/CVE-2024-1698.md @@ -17,6 +17,7 @@ The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notific - https://github.com/jesicatjan/WordPress-NotificationX-CVE-2024-1698 - https://github.com/kamranhasan/CVE-2024-1698-Exploit - https://github.com/shanglyu/CVE-2024-1698 +- https://github.com/Dhananjayasj/CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1698.yaml diff --git a/cves/2024/CVE-2024-1708.md b/cves/2024/CVE-2024-1708.md index 0597b23b349..367b6cdb1e2 100644 --- a/cves/2024/CVE-2024-1708.md +++ b/cves/2024/CVE-2024-1708.md @@ -17,6 +17,7 @@ ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulner - https://github.com/W01fh4cker/ScreenConnect-AuthBypass-RCE - https://github.com/cjybao/CVE-2024-1709-and-CVE-2024-1708 - https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc +- https://github.com/razureink/cve-2024-1708-connectwise_rce_reproduction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1708.yaml diff --git a/cves/2024/CVE-2024-1813.md b/cves/2024/CVE-2024-1813.md index fceb2353aa1..222345ce8cd 100644 --- a/cves/2024/CVE-2024-1813.md +++ b/cves/2024/CVE-2024-1813.md @@ -13,4 +13,4 @@ The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/MobetaSec/CVE-2024-1813-POC diff --git a/cves/2024/CVE-2024-1874.md b/cves/2024/CVE-2024-1874.md index 1cc4f94cc4a..73d9d426a94 100644 --- a/cves/2024/CVE-2024-1874.md +++ b/cves/2024/CVE-2024-1874.md @@ -21,4 +21,5 @@ In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, wh #### Github - https://github.com/Tgcohce/CVE-2024-1874 +- https://github.com/MrBongoC/CVE-2024-1874 diff --git a/cves/2024/CVE-2024-20404.md b/cves/2024/CVE-2024-20404.md index 3ccf04e8b5d..988407cbe52 100644 --- a/cves/2024/CVE-2024-20404.md +++ b/cves/2024/CVE-2024-20404.md @@ -22,6 +22,7 @@ No PoCs from references. #### Github - https://github.com/AbdElRahmanEzzat1995/CVE-2024-20404 +- https://github.com/3zz4t/CVE-2024-20404 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20404.yaml diff --git a/cves/2024/CVE-2024-20405.md b/cves/2024/CVE-2024-20405.md index 60399d6dc9f..79cf5cb16cb 100644 --- a/cves/2024/CVE-2024-20405.md +++ b/cves/2024/CVE-2024-20405.md @@ -20,4 +20,5 @@ No PoCs from references. #### Github - https://github.com/AbdElRahmanEzzat1995/CVE-2024-20405 +- https://github.com/3zz4t/CVE-2024-20405 diff --git a/cves/2024/CVE-2024-20767.md b/cves/2024/CVE-2024-20767.md index 20046f34cc6..3edaa12275e 100644 --- a/cves/2024/CVE-2024-20767.md +++ b/cves/2024/CVE-2024-20767.md @@ -21,6 +21,7 @@ No PoCs from references. - https://github.com/alm6no5/CVE-2024-20767 - https://github.com/m-cetin/CVE-2024-20767 - https://github.com/yoryio/CVE-2024-20767 +- https://github.com/GraySignal/CVE-2024-20767-Adobe-ColdFusion #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20767.yaml diff --git a/cves/2024/CVE-2024-2083.md b/cves/2024/CVE-2024-2083.md index d527dd782db..166026c698e 100644 --- a/cves/2024/CVE-2024-2083.md +++ b/cves/2024/CVE-2024-2083.md @@ -14,5 +14,5 @@ A directory traversal vulnerability exists in the zenml-io/zenml repository, spe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Saptaktdk/zenml-CVE-2024-2083-POC diff --git a/cves/2024/CVE-2024-21182.md b/cves/2024/CVE-2024-21182.md index 426eda10ce3..ab72af18dc6 100644 --- a/cves/2024/CVE-2024-21182.md +++ b/cves/2024/CVE-2024-21182.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/k4it0k1d/CVE-2024-21182 - https://github.com/kursadalsan/CVE-2024-21182 +- https://github.com/fevar54/CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE diff --git a/cves/2024/CVE-2024-21338.md b/cves/2024/CVE-2024-21338.md index 76394391380..75d98bc5ac5 100644 --- a/cves/2024/CVE-2024-21338.md +++ b/cves/2024/CVE-2024-21338.md @@ -38,6 +38,7 @@ Windows Kernel Elevation of Privilege Vulnerability - https://github.com/hakaioffsec/CVE-2024-21338 - https://github.com/tykawaii98/CVE-2024-21338_PoC - https://github.com/wusijie/CVE-2024-21338-1 +- https://github.com/MistyFir/CVE-2024-21338-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52275 diff --git a/cves/2024/CVE-2024-21413.md b/cves/2024/CVE-2024-21413.md index 0ab384206a8..9269feae5f4 100644 --- a/cves/2024/CVE-2024-21413.md +++ b/cves/2024/CVE-2024-21413.md @@ -43,4 +43,14 @@ Microsoft Outlook Remote Code Execution Vulnerability - https://github.com/th3Hellion/CVE-2024-21413 - https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability - https://github.com/yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413- +- https://github.com/Dhananjayasj/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability +- https://github.com/FathanahHidayati/https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability +- https://github.com/H1ssBl1tz/Blind-Trust-CVE-2024-21413-Research +- https://github.com/KaiHaoChen04/monikerlinktest +- https://github.com/YoguiCR/CVE-2024-21413-Outlook-Assessment +- https://github.com/bhatbhupendra/Moniker-Link--CVE-2024-21413- +- https://github.com/dionissh/CVE-2024-21413 +- https://github.com/gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC +- https://github.com/mmathivanan17/CVE-2024-21413 +- https://github.com/pedro-lucas-melo/Estudo-de-Caso-CVE-2024-21413 diff --git a/cves/2024/CVE-2024-21534.md b/cves/2024/CVE-2024-21534.md index 9bcda61ceed..67535910046 100644 --- a/cves/2024/CVE-2024-21534.md +++ b/cves/2024/CVE-2024-21534.md @@ -18,4 +18,5 @@ All versions of the package jsonpath-plus are vulnerable to Remote Code Executio #### Github - https://github.com/pabloopez/CVE-2024-21534 - https://github.com/verylazytech/cve-2024-21534 +- https://github.com/BohemianHacks/CVE-2024-21534-poc diff --git a/cves/2024/CVE-2024-21542.md b/cves/2024/CVE-2024-21542.md index b5ab7fff53b..46b2e1c00ea 100644 --- a/cves/2024/CVE-2024-21542.md +++ b/cves/2024/CVE-2024-21542.md @@ -14,5 +14,5 @@ Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Writ - https://security.snyk.io/vuln/SNYK-PYTHON-LUIGI-7830489 #### Github -No PoCs found on GitHub currently. +- https://github.com/L3ster1337/Poc-CVE-2024-21542 diff --git a/cves/2024/CVE-2024-21626.md b/cves/2024/CVE-2024-21626.md index 356732daa87..cbc23caf928 100644 --- a/cves/2024/CVE-2024-21626.md +++ b/cves/2024/CVE-2024-21626.md @@ -29,6 +29,7 @@ runc is a CLI tool for spawning and running containers on Linux according to the - https://github.com/laysakura/CVE-2024-21626-demo - https://github.com/zhangguanzhang/CVE-2024-21626 - https://github.com/zpxlz/CVE-2024-21626-POC +- https://github.com/Strikoder-Premium/cve-2024-21626-runc-1.1.11-escape #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/runc_cwd_priv_esc.rb diff --git a/cves/2024/CVE-2024-21683.md b/cves/2024/CVE-2024-21683.md index 7393578cdec..8092b591b95 100644 --- a/cves/2024/CVE-2024-21683.md +++ b/cves/2024/CVE-2024-21683.md @@ -43,6 +43,7 @@ No PoCs from references. - https://github.com/absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server - https://github.com/phucrio/CVE-2024-21683-RCE - https://github.com/r00t7oo2jm/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server +- https://github.com/r3db34rdh4x/cve-2024-21683-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21683.yaml diff --git a/cves/2024/CVE-2024-21762.md b/cves/2024/CVE-2024-21762.md index b7afe2ec236..b97436feb82 100644 --- a/cves/2024/CVE-2024-21762.md +++ b/cves/2024/CVE-2024-21762.md @@ -29,4 +29,7 @@ No PoCs from references. - https://github.com/d0rb/CVE-2024-21762 - https://github.com/h4x0r-dz/CVE-2024-21762 - https://github.com/r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check +- https://github.com/0x0asif/CVE-2024-21762 +- https://github.com/0x13-ByteZer0/CVE-2024-21762 +- https://github.com/CrackerCat/cve-2024-21762-poc diff --git a/cves/2024/CVE-2024-21887.md b/cves/2024/CVE-2024-21887.md index c47af0dd032..69540dcb214 100644 --- a/cves/2024/CVE-2024-21887.md +++ b/cves/2024/CVE-2024-21887.md @@ -24,6 +24,7 @@ A command injection vulnerability in web components of Ivanti Connect Secure (9. - https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887 - https://github.com/rxwx/pulse-meter - https://github.com/stephen-murcott/Ivanti-ICT-Snapshot-decryption +- https://github.com/pwniel/ivanti_shell #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21887.yaml diff --git a/cves/2024/CVE-2024-21907.md b/cves/2024/CVE-2024-21907.md index 7763a16040a..a37996c4cfd 100644 --- a/cves/2024/CVE-2024-21907.md +++ b/cves/2024/CVE-2024-21907.md @@ -14,5 +14,5 @@ Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptiona - https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678 #### Github -No PoCs found on GitHub currently. +- https://github.com/seal-sec-demo-2/seal-security-nuget-demo-net7 diff --git a/cves/2024/CVE-2024-22120.md b/cves/2024/CVE-2024-22120.md index 5df715ba2e5..f54d8a5ed8c 100644 --- a/cves/2024/CVE-2024-22120.md +++ b/cves/2024/CVE-2024-22120.md @@ -18,6 +18,7 @@ Zabbix server can perform command execution for configured scripts. After comman - https://github.com/W01fh4cker/CVE-2024-22120-RCE - https://github.com/g4nkd/CVE-2024-22120-RCE-with-gopher - https://github.com/isPique/CVE-2024-22120-RCE-with-gopher +- https://github.com/darkbytehunter/CVE-2024-22120-RCE-with-gopher #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-22120.yaml diff --git a/cves/2024/CVE-2024-22416.md b/cves/2024/CVE-2024-22416.md index 7fb5633ad7d..a70ea684a83 100644 --- a/cves/2024/CVE-2024-22416.md +++ b/cves/2024/CVE-2024-22416.md @@ -14,4 +14,5 @@ pyLoad is a free and open-source Download Manager written in pure Python. The `p #### Github - https://github.com/mindstorm38/ensimag-secu3a-cve-2024-22416 +- https://github.com/theorzr/ensimag-secu3a-cve-2024-22416 diff --git a/cves/2024/CVE-2024-22514.md b/cves/2024/CVE-2024-22514.md index 5b2ac102e87..01f3c8b9ed7 100644 --- a/cves/2024/CVE-2024-22514.md +++ b/cves/2024/CVE-2024-22514.md @@ -14,5 +14,5 @@ An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run - https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution #### Github -No PoCs found on GitHub currently. +- https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution diff --git a/cves/2024/CVE-2024-22515.md b/cves/2024/CVE-2024-22515.md index 9f61618305a..3d728462845 100644 --- a/cves/2024/CVE-2024-22515.md +++ b/cves/2024/CVE-2024-22515.md @@ -13,5 +13,5 @@ Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allo - https://github.com/Orange-418/CVE-2024-22515-File-Upload-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/Orange-418/CVE-2024-22515-File-Upload-Vulnerability diff --git a/cves/2024/CVE-2024-22532.md b/cves/2024/CVE-2024-22532.md index 9ba42f3f536..e2853239394 100644 --- a/cves/2024/CVE-2024-22532.md +++ b/cves/2024/CVE-2024-22532.md @@ -14,5 +14,5 @@ Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows - https://github.com/pwndorei/CVE-2024-22532 #### Github -No PoCs found on GitHub currently. +- https://github.com/pwndorei/CVE-2024-22532 diff --git a/cves/2024/CVE-2024-22640.md b/cves/2024/CVE-2024-22640.md index dc2de4a0839..e6204355081 100644 --- a/cves/2024/CVE-2024-22640.md +++ b/cves/2024/CVE-2024-22640.md @@ -14,5 +14,5 @@ TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Servi - https://github.com/zunak/CVE-2024-22640 #### Github -No PoCs found on GitHub currently. +- https://github.com/zunak/CVE-2024-22640 diff --git a/cves/2024/CVE-2024-22641.md b/cves/2024/CVE-2024-22641.md index 469e0c5e511..daf86ffc515 100644 --- a/cves/2024/CVE-2024-22641.md +++ b/cves/2024/CVE-2024-22641.md @@ -14,5 +14,5 @@ TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial - https://github.com/zunak/CVE-2024-22641 #### Github -No PoCs found on GitHub currently. +- https://github.com/zunak/CVE-2024-22641 diff --git a/cves/2024/CVE-2024-22889.md b/cves/2024/CVE-2024-22889.md index 4967228dce4..31363316b17 100644 --- a/cves/2024/CVE-2024-22889.md +++ b/cves/2024/CVE-2024-22889.md @@ -13,5 +13,5 @@ Due to incorrect access control in Plone version v6.0.9, remote attackers can vi - https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9 #### Github -No PoCs found on GitHub currently. +- https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9 diff --git a/cves/2024/CVE-2024-23108.md b/cves/2024/CVE-2024-23108.md index e36b7a3a835..463eba3642b 100644 --- a/cves/2024/CVE-2024-23108.md +++ b/cves/2024/CVE-2024-23108.md @@ -19,6 +19,7 @@ An improper neutralization of special elements used in an os command ('os comman #### Github - https://github.com/hitem/CVE-2024-23108 +- https://github.com/horizon3ai/CVE-2024-23108 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-23108.yaml diff --git a/cves/2024/CVE-2024-23113.md b/cves/2024/CVE-2024-23113.md index cc7fe504176..ea9d8822a4c 100644 --- a/cves/2024/CVE-2024-23113.md +++ b/cves/2024/CVE-2024-23113.md @@ -28,4 +28,6 @@ No PoCs from references. - https://github.com/puckiestyle/CVE-2024-23113 - https://github.com/valornode/CVE-2024-23113 - https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575 +- https://github.com/MinhPham123456789/PoC-CVE-2024-23113 +- https://github.com/ownouwa/cve-2024-23113-poc diff --git a/cves/2024/CVE-2024-23222.md b/cves/2024/CVE-2024-23222.md index dd683ebf236..0493315c156 100644 --- a/cves/2024/CVE-2024-23222.md +++ b/cves/2024/CVE-2024-23222.md @@ -16,5 +16,6 @@ A type confusion issue was addressed with improved checks. This issue is fixed i No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/FuzzySecurity/Cassowary-CVE-2024-23222-x86_64 +- https://github.com/Rohitberiwala/CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated diff --git a/cves/2024/CVE-2024-23334.md b/cves/2024/CVE-2024-23334.md index ab60fd651e2..93b930b6d20 100644 --- a/cves/2024/CVE-2024-23334.md +++ b/cves/2024/CVE-2024-23334.md @@ -27,9 +27,14 @@ aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. - https://github.com/sxyrxyy/aiohttp-exploit-CVE-2024-23334-certstream - https://github.com/wizarddos/CVE-2024-23334 - https://github.com/z3rObyte/CVE-2024-23334-PoC +- https://github.com/0xR00/CVE-2024-23334 +- https://github.com/Sn0wBaall/CVE-2024-23334-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23334.yaml #### ExploitDB - https://www.exploit-db.com/exploits/52474 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/python/CVE-2024-23334 diff --git a/cves/2024/CVE-2024-23659.md b/cves/2024/CVE-2024-23659.md index bb9b0ff4a0a..0eed7b790a5 100644 --- a/cves/2024/CVE-2024-23659.md +++ b/cves/2024/CVE-2024-23659.md @@ -13,5 +13,5 @@ SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/amis13/SPIP-CVE-2024-23659- diff --git a/cves/2024/CVE-2024-23692.md b/cves/2024/CVE-2024-23692.md index efd7a5b4057..e919d5b3a02 100644 --- a/cves/2024/CVE-2024-23692.md +++ b/cves/2024/CVE-2024-23692.md @@ -31,6 +31,7 @@ Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a t - https://github.com/pradeepboo/Rejetto-HFS-2.x-RCE-CVE-2024-23692 - https://github.com/vanboomqi/CVE-2024-23692 - https://github.com/verylazytech/CVE-2024-23692 +- https://github.com/sandimfz/CVE-2024-23692 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23692.yaml diff --git a/cves/2024/CVE-2024-23745.md b/cves/2024/CVE-2024-23745.md index 3d9380f5b1f..43b2434b068 100644 --- a/cves/2024/CVE-2024-23745.md +++ b/cves/2024/CVE-2024-23745.md @@ -15,5 +15,5 @@ In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB atta - https://github.com/louiselalanne/CVE-2024-23745 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2024-23745 diff --git a/cves/2024/CVE-2024-23746.md b/cves/2024/CVE-2024-23746.md index fd1b29da034..0d6d72ad386 100644 --- a/cves/2024/CVE-2024-23746.md +++ b/cves/2024/CVE-2024-23746.md @@ -13,5 +13,5 @@ Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex - https://github.com/louiselalanne/CVE-2024-23746 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2024-23746 diff --git a/cves/2024/CVE-2024-23747.md b/cves/2024/CVE-2024-23747.md index 51ff893038b..71e6e0646d4 100644 --- a/cves/2024/CVE-2024-23747.md +++ b/cves/2024/CVE-2024-23747.md @@ -13,5 +13,5 @@ The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible t - https://github.com/louiselalanne/CVE-2024-23747 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2024-23747 diff --git a/cves/2024/CVE-2024-23897.md b/cves/2024/CVE-2024-23897.md index 874657cb3ac..d5b05580455 100644 --- a/cves/2024/CVE-2024-23897.md +++ b/cves/2024/CVE-2024-23897.md @@ -61,6 +61,14 @@ Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of - https://github.com/xaitax/CVE-2024-23897 - https://github.com/yoryio/CVE-2024-23897 - https://github.com/MachiavelliII/CVE-2024-23897 +- https://github.com/Ap0dexMe0/CVE-2024-23897 +- https://github.com/Dungsocool/CVE-2024-23897 +- https://github.com/GraySignal/CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability +- https://github.com/aadi0258/Exploit-CVE-2024-23897 +- https://github.com/classic130/CVE-2024-23897-Jenkins-4.441 +- https://github.com/razureink/cve-2024-23897-jenkins_lfi_reproduction +- https://github.com/rivaedoardo62-boop/cve-2024-23897-jenkins-poc +- https://github.com/vmc8ll/poc-CVE-2024-23897 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-23897.yaml @@ -70,3 +78,6 @@ Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jenkins_cli_ampersand_arbitrary_file_read.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2024-23897 diff --git a/cves/2024/CVE-2024-24401.md b/cves/2024/CVE-2024-24401.md index 66c7765e088..c61b329f70b 100644 --- a/cves/2024/CVE-2024-24401.md +++ b/cves/2024/CVE-2024-24401.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/MAWK0235/CVE-2024-24401 +- https://github.com/JIBEG-UNIX/CVE-2024-24401 diff --git a/cves/2024/CVE-2024-24590.md b/cves/2024/CVE-2024-24590.md index 7ff3d56e251..ed9edf7b432 100644 --- a/cves/2024/CVE-2024-24590.md +++ b/cves/2024/CVE-2024-24590.md @@ -20,4 +20,5 @@ No PoCs from references. - https://github.com/sviim/ClearML-CVE-2024-24590 - https://github.com/sviim/ClearML-CVE-2024-24590-RCE - https://github.com/xffsec/CVE-2024-24590-ClearML-RCE-Exploit +- https://github.com/rippsec/CVE-2024-24590-ClearML-RCE-Exploit diff --git a/cves/2024/CVE-2024-24824.md b/cves/2024/CVE-2024-24824.md index 9e3651e17b1..efe41db9108 100644 --- a/cves/2024/CVE-2024-24824.md +++ b/cves/2024/CVE-2024-24824.md @@ -15,5 +15,5 @@ Graylog is a free and open log management platform. Starting in version 2.0.0 an - https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-p6gg-5hf4-4rgj #### Github -No PoCs found on GitHub currently. +- https://github.com/rootkiTED/graylog-cve-2024-24824-exploit diff --git a/cves/2024/CVE-2024-24919.md b/cves/2024/CVE-2024-24919.md index 7eb025839af..745a62edb87 100644 --- a/cves/2024/CVE-2024-24919.md +++ b/cves/2024/CVE-2024-24919.md @@ -71,6 +71,8 @@ Potentially allowing an attacker to read certain information on Check Point Secu - https://github.com/verylazytech/CVE-2024-24919 - https://github.com/zam89/CVE-2024-24919 - https://github.com/zxcod3/CVE-2024-24919 +- https://github.com/SpiX-7/CVE-2024-24919-POC +- https://github.com/kernel364/CVE-2024-24919 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24919.yaml diff --git a/cves/2024/CVE-2024-25081.md b/cves/2024/CVE-2024-25081.md index 685ac105afb..ae6aa0c91d3 100644 --- a/cves/2024/CVE-2024-25081.md +++ b/cves/2024/CVE-2024-25081.md @@ -14,5 +14,5 @@ Splinefont in FontForge through 20230101 allows command injection via crafted fi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/InzegoSec/CVE-2024-25081_2025-47273 diff --git a/cves/2024/CVE-2024-25082.md b/cves/2024/CVE-2024-25082.md index 5da8ca359fb..4d80fc40741 100644 --- a/cves/2024/CVE-2024-25082.md +++ b/cves/2024/CVE-2024-25082.md @@ -13,5 +13,6 @@ Splinefont in FontForge through 20230101 allows command injection via crafted ar No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AliElKhatteb/CVE-2024-25082_CVE-2024-25081 +- https://github.com/moamenx8/CVE-2024-25082 diff --git a/cves/2024/CVE-2024-25096.md b/cves/2024/CVE-2024-25096.md index 0d6289b7e4a..dea5cb6aaa5 100644 --- a/cves/2024/CVE-2024-25096.md +++ b/cves/2024/CVE-2024-25096.md @@ -14,4 +14,4 @@ Improper Control of Generation of Code ('Code Injection') vulnerability in Canto No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE diff --git a/cves/2024/CVE-2024-25169.md b/cves/2024/CVE-2024-25169.md index a1f767e3a91..875177cb813 100644 --- a/cves/2024/CVE-2024-25169.md +++ b/cves/2024/CVE-2024-25169.md @@ -13,5 +13,5 @@ An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanism - https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0 #### Github -No PoCs found on GitHub currently. +- https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0 diff --git a/cves/2024/CVE-2024-25170.md b/cves/2024/CVE-2024-25170.md index d14b5a31f11..b36c1f48de5 100644 --- a/cves/2024/CVE-2024-25170.md +++ b/cves/2024/CVE-2024-25170.md @@ -14,5 +14,5 @@ An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via mani - https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0 #### Github -No PoCs found on GitHub currently. +- https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0 diff --git a/cves/2024/CVE-2024-25202.md b/cves/2024/CVE-2024-25202.md index b65a1095029..7943ba80925 100644 --- a/cves/2024/CVE-2024-25202.md +++ b/cves/2024/CVE-2024-25202.md @@ -16,5 +16,5 @@ Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and U - https://medium.com/@agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 #### Github -No PoCs found on GitHub currently. +- https://github.com/Agampreet-Singh/CVE-2024-25202 diff --git a/cves/2024/CVE-2024-25411.md b/cves/2024/CVE-2024-25411.md index 79d2ba629f7..af9ce9ff295 100644 --- a/cves/2024/CVE-2024-25411.md +++ b/cves/2024/CVE-2024-25411.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to - https://github.com/paragbagul111/CVE-2024-25411 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-25411 diff --git a/cves/2024/CVE-2024-25412.md b/cves/2024/CVE-2024-25412.md index 12faf4037d1..993a7446568 100644 --- a/cves/2024/CVE-2024-25412.md +++ b/cves/2024/CVE-2024-25412.md @@ -13,5 +13,5 @@ A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to - https://github.com/paragbagul111/CVE-2024-25412 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-25412 diff --git a/cves/2024/CVE-2024-25423.md b/cves/2024/CVE-2024-25423.md index ee6b05fa2aa..15cd7072bcc 100644 --- a/cves/2024/CVE-2024-25423.md +++ b/cves/2024/CVE-2024-25423.md @@ -14,5 +14,5 @@ An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitra - https://github.com/DriverUnload/cve-2024-25423 #### Github -No PoCs found on GitHub currently. +- https://github.com/DriverUnload/cve-2024-25423 diff --git a/cves/2024/CVE-2024-25600.md b/cves/2024/CVE-2024-25600.md index 85904af2203..fc96ac0d3fd 100644 --- a/cves/2024/CVE-2024-25600.md +++ b/cves/2024/CVE-2024-25600.md @@ -29,6 +29,11 @@ Improper Control of Generation of Code ('Code Injection') vulnerability in Codee - https://github.com/so1icitx/CVE-2024-25600 - https://github.com/svchostmm/CVE-2024-25600-mass - https://github.com/wh6amiGit/CVE-2024-25600 +- https://github.com/CerberusMrXi/WP-Bricks-Exploit-CVE-2024-25600 +- https://github.com/Chocapikk/CVE-2024-25600 +- https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT +- https://github.com/estebanzarate/CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC +- https://github.com/ranjithxploit/CVE-2024-25600 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25600.yaml diff --git a/cves/2024/CVE-2024-25641.md b/cves/2024/CVE-2024-25641.md index 8b4d353bc68..3b98564d508 100644 --- a/cves/2024/CVE-2024-25641.md +++ b/cves/2024/CVE-2024-25641.md @@ -20,6 +20,8 @@ Cacti provides an operational monitoring and fault management framework. Prior t - https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26 - https://github.com/regantemudo/CVE-2024-25641-Exploit-for-Cacti-1.2.26 - https://github.com/thisisveryfunny/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 +- https://github.com/GabrielCF10/CVE-2024-25641---Cacti +- https://github.com/leo-mitch/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 #### ExploitDB - https://www.exploit-db.com/exploits/52225 diff --git a/cves/2024/CVE-2024-26229.md b/cves/2024/CVE-2024-26229.md index 1b085e61da5..ec640af5116 100644 --- a/cves/2024/CVE-2024-26229.md +++ b/cves/2024/CVE-2024-26229.md @@ -57,4 +57,6 @@ No PoCs from references. - https://github.com/mqxmm/CVE-2024-26229 - https://github.com/shinspace92/cve-2024-26229 - https://github.com/team-MineDEV/CVE-2024-26229 +- https://github.com/0xGunrunner/CVE-2024-26229-BOF +- https://github.com/vettrivel007/CVE-2024-26229 diff --git a/cves/2024/CVE-2024-26521.md b/cves/2024/CVE-2024-26521.md index 7e9b2d00e5e..cbdebc8f79a 100644 --- a/cves/2024/CVE-2024-26521.md +++ b/cves/2024/CVE-2024-26521.md @@ -15,5 +15,5 @@ HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote - https://github.com/hackervegas001/CVE-2024-26521 #### Github -No PoCs found on GitHub currently. +- https://github.com/hackervegas001/CVE-2024-26521 diff --git a/cves/2024/CVE-2024-27130.md b/cves/2024/CVE-2024-27130.md index 8f53b71964b..fc3d8726c63 100644 --- a/cves/2024/CVE-2024-27130.md +++ b/cves/2024/CVE-2024-27130.md @@ -19,4 +19,5 @@ No PoCs from references. #### Github - https://github.com/d0rb/CVE-2024-27130 - https://github.com/watchtowrlabs/CVE-2024-27130 +- https://github.com/dkstar11q/cve-2024-27130-poc diff --git a/cves/2024/CVE-2024-27198.md b/cves/2024/CVE-2024-27198.md index 43bb0bfacd9..a786969625f 100644 --- a/cves/2024/CVE-2024-27198.md +++ b/cves/2024/CVE-2024-27198.md @@ -32,6 +32,8 @@ In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform - https://github.com/passwa11/CVE-2024-27198-RCE - https://github.com/rampantspark/CVE-2024-27198 - https://github.com/yoryio/CVE-2024-27198 +- https://github.com/EynaExp/CVE-2024-27198-POC +- https://github.com/kxom9ks/CVE-2024-27198-TeamCity #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27198.yaml @@ -41,3 +43,6 @@ In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/teamcity/CVE-2024-27198 diff --git a/cves/2024/CVE-2024-27304.md b/cves/2024/CVE-2024-27304.md index a715d72d836..c0093ead8bf 100644 --- a/cves/2024/CVE-2024-27304.md +++ b/cves/2024/CVE-2024-27304.md @@ -17,5 +17,5 @@ pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an att - https://www.youtube.com/watch?v=Tfg1B8u1yvE #### Github -No PoCs found on GitHub currently. +- https://github.com/roaris/CVE-2024-27304-PoC diff --git a/cves/2024/CVE-2024-27316.md b/cves/2024/CVE-2024-27316.md index ef056e2439c..c05cfdc7502 100644 --- a/cves/2024/CVE-2024-27316.md +++ b/cves/2024/CVE-2024-27316.md @@ -14,4 +14,5 @@ HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 #### Github - https://github.com/aeyesec/CVE-2024-27316_poc +- https://github.com/lockness-Ko/CVE-2024-27316 diff --git a/cves/2024/CVE-2024-27348.md b/cves/2024/CVE-2024-27348.md index 89c0529710d..1f89ddaf440 100644 --- a/cves/2024/CVE-2024-27348.md +++ b/cves/2024/CVE-2024-27348.md @@ -18,6 +18,8 @@ RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue - https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE - https://github.com/kljunowsky/CVE-2024-27348 - https://github.com/p0et08/CVE-2024-27348 +- https://github.com/akelaqe/CVE-2024-27348-HugeGraph-RCE +- https://github.com/wqfh/CVE-2024-27348 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27348.yaml @@ -27,3 +29,6 @@ RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_hugegraph_gremlin_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/hugegraph/CVE-2024-27348 diff --git a/cves/2024/CVE-2024-27518.md b/cves/2024/CVE-2024-27518.md index 673c9b78229..97d63f2b754 100644 --- a/cves/2024/CVE-2024-27518.md +++ b/cves/2024/CVE-2024-27518.md @@ -16,5 +16,5 @@ An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unpriv - https://www.youtube.com/watch?v=FM5XlZPdvdo #### Github -No PoCs found on GitHub currently. +- https://github.com/secunnix/CVE-2024-27518 diff --git a/cves/2024/CVE-2024-27665.md b/cves/2024/CVE-2024-27665.md index e8c5b787664..c1ed79f32d8 100644 --- a/cves/2024/CVE-2024-27665.md +++ b/cves/2024/CVE-2024-27665.md @@ -13,5 +13,5 @@ Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via fil - https://github.com/Thirukrishnan/CVE-2024-27665/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2024-27665 diff --git a/cves/2024/CVE-2024-27766.md b/cves/2024/CVE-2024-27766.md index ae1b4e72607..9e5da234107 100644 --- a/cves/2024/CVE-2024-27766.md +++ b/cves/2024/CVE-2024-27766.md @@ -14,5 +14,6 @@ An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code vi - https://github.com/Ant1sec-ops/CVE-2024-27766 #### Github -No PoCs found on GitHub currently. +- https://github.com/Hissec/Mysql_CVE-2024-27766 +- https://github.com/y0un9eee/CVE-2024-27766 diff --git a/cves/2024/CVE-2024-27956.md b/cves/2024/CVE-2024-27956.md index 8143fad1567..aad0675d5c6 100644 --- a/cves/2024/CVE-2024-27956.md +++ b/cves/2024/CVE-2024-27956.md @@ -33,6 +33,8 @@ No PoCs from references. - https://github.com/k3ppf0r/CVE-2024-27956 - https://github.com/m4nInTh3mIdDle/wordpress-CVE-2024-27956 - https://github.com/truonghuuphuc/CVE-2024-27956 +- https://github.com/Ap0dexMe0/CVE-2024-27956 +- https://github.com/hitazuranahiro/Valve-Press-CVE-2024-27956-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27956.yaml diff --git a/cves/2024/CVE-2024-28000.md b/cves/2024/CVE-2024-28000.md index 7773ed66643..bfb0a7b9bb2 100644 --- a/cves/2024/CVE-2024-28000.md +++ b/cves/2024/CVE-2024-28000.md @@ -19,6 +19,7 @@ Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed - https://github.com/SSSSuperX/CVE-2024-28000 - https://github.com/arch1m3d/CVE-2024-28000 - https://github.com/ebrasha/CVE-2024-28000 +- https://github.com/shawnng078-ops/CVE-2024-28000-Exploit-Lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28000.yaml diff --git a/cves/2024/CVE-2024-28157.md b/cves/2024/CVE-2024-28157.md index 189cbe785e2..a8e1620ac33 100644 --- a/cves/2024/CVE-2024-28157.md +++ b/cves/2024/CVE-2024-28157.md @@ -13,5 +13,5 @@ Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on bui No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/shinigami-777/PoC_CVE-2024-28157 diff --git a/cves/2024/CVE-2024-28231.md b/cves/2024/CVE-2024-28231.md index bc9e6dfea84..847e6489026 100644 --- a/cves/2024/CVE-2024-28231.md +++ b/cves/2024/CVE-2024-28231.md @@ -20,5 +20,5 @@ eprosima Fast DDS is a C++ implementation of the Data Distribution Service stand - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-9m2j-qw67-ph4w #### Github -No PoCs found on GitHub currently. +- https://github.com/grimmmbo/ros2_CVE-2024-28231 diff --git a/cves/2024/CVE-2024-28397.md b/cves/2024/CVE-2024-28397.md index 72d15ea0489..c7c83cf2c7a 100644 --- a/cves/2024/CVE-2024-28397.md +++ b/cves/2024/CVE-2024-28397.md @@ -28,6 +28,15 @@ An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows a - https://github.com/releaseown/exploit-js2py - https://github.com/vitaciminIPI/CVE-2024-28397-RCE - https://github.com/waleed-hassan569/CVE-2024-28397-command-execution-poc +- https://github.com/3z-p0wn/CVE-2024-28397-exploit +- https://github.com/D3ltaFormation/CVE-2024-28397-Js2Py-RCE +- https://github.com/GhostOverflow/CVE-2024-28397-command-execution-poc +- https://github.com/L1337Xi/CVE-2024-28397-Exploit-Automation +- https://github.com/Marven11/CVE-2024-28397-js2py-Sandbox-Escape +- https://github.com/Udayveer17/Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py- +- https://github.com/somisec/CVE-2024-28397-Reverse-Shell +- https://github.com/xeloxa/CVE-2024-28397-Js2Py-RCE-Exploit +- https://github.com/y0naldez/CVE-2024-28397-Js2Py-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28397.yaml diff --git a/cves/2024/CVE-2024-28715.md b/cves/2024/CVE-2024-28715.md index d0ba7c56057..e666498d34d 100644 --- a/cves/2024/CVE-2024-28715.md +++ b/cves/2024/CVE-2024-28715.md @@ -13,5 +13,5 @@ Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote - https://github.com/Lq0ne/CVE-2024-28715 #### Github -No PoCs found on GitHub currently. +- https://github.com/Lq0ne/CVE-2024-28715 diff --git a/cves/2024/CVE-2024-28752.md b/cves/2024/CVE-2024-28752.md index c3c8bbb9a78..abbb2864c40 100644 --- a/cves/2024/CVE-2024-28752.md +++ b/cves/2024/CVE-2024-28752.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github - https://github.com/ReaJason/CVE-2024-28752 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apache-cxf/CVE-2024-28752 diff --git a/cves/2024/CVE-2024-2876.md b/cves/2024/CVE-2024-2876.md index 80e4d7ca78f..69ff61cfa7c 100644 --- a/cves/2024/CVE-2024-2876.md +++ b/cves/2024/CVE-2024-2876.md @@ -24,6 +24,8 @@ No PoCs from references. - https://github.com/khushi8080/wp-SQL_Injection - https://github.com/skyrowalker/CVE-2024-2876 - https://github.com/zxcod3/CVE-2024-2876 +- https://github.com/chsxthwik/CVE-2024-2876 +- https://github.com/kernel364/CVE-2024-2876 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2876.yaml diff --git a/cves/2024/CVE-2024-2887.md b/cves/2024/CVE-2024-2887.md index abd2baaf107..e3f0c6dd138 100644 --- a/cves/2024/CVE-2024-2887.md +++ b/cves/2024/CVE-2024-2887.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/PumpkinBridge/Chrome-CVE-2024-2887-RCE-POC - https://github.com/jjyuorg/reproduce-cve-2024-2887 - https://github.com/rycbar77/CVE-2024-2887 +- https://github.com/ad3210/CVE-2024-2887-REPORT diff --git a/cves/2024/CVE-2024-28987.md b/cves/2024/CVE-2024-28987.md index 482b2f83ac7..794409ef9bf 100644 --- a/cves/2024/CVE-2024-28987.md +++ b/cves/2024/CVE-2024-28987.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/fa-rrel/CVE-2024-28987-POC - https://github.com/gh-ost00/CVE-2024-28987-POC - https://github.com/horizon3ai/CVE-2024-28987 +- https://github.com/Darabium/CVE-2024-28987 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28987.yaml diff --git a/cves/2024/CVE-2024-28995.md b/cves/2024/CVE-2024-28995.md index 926f9e39769..b0001fc32e7 100644 --- a/cves/2024/CVE-2024-28995.md +++ b/cves/2024/CVE-2024-28995.md @@ -25,6 +25,7 @@ No PoCs from references. - https://github.com/ggfzx/CVE-2024-28995 - https://github.com/gotr00t0day/CVE-2024-28995 - https://github.com/muhammetali20/CVE-2024-28995 +- https://github.com/GraySignal/CVE-2024-28995-SolarWinds-Serv-U #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28995.yaml diff --git a/cves/2024/CVE-2024-29269.md b/cves/2024/CVE-2024-29269.md index ea40f9a7dca..ab2492622d1 100644 --- a/cves/2024/CVE-2024-29269.md +++ b/cves/2024/CVE-2024-29269.md @@ -23,6 +23,7 @@ No PoCs from references. - https://github.com/dream434/CVE-2024-29269 - https://github.com/hack-with-rohit/CVE-2024-29269-RCE - https://github.com/wutalent/CVE-2024-29269 +- https://github.com/chsxthwik/CVE-2024-29269 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml diff --git a/cves/2024/CVE-2024-2961.md b/cves/2024/CVE-2024-2961.md index edce0d05e12..0ae4bcb6a96 100644 --- a/cves/2024/CVE-2024-2961.md +++ b/cves/2024/CVE-2024-2961.md @@ -24,9 +24,14 @@ No PoCs from references. - https://github.com/rvizx/CVE-2024-2961 - https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7 - https://github.com/tnishiox/cve-2024-2961 +- https://github.com/Clarissss/osTicketFileReadIntoRCE +- https://github.com/suce0155/CVE-2024-2961 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2024/CVE-2024-2961.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2024-2961 diff --git a/cves/2024/CVE-2024-29671.md b/cves/2024/CVE-2024-29671.md index d08431c72de..5fb25f1753f 100644 --- a/cves/2024/CVE-2024-29671.md +++ b/cves/2024/CVE-2024-29671.md @@ -14,5 +14,5 @@ Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remo - https://github.com/laskdjlaskdj12/CVE-2024-29671-POC #### Github -No PoCs found on GitHub currently. +- https://github.com/laskdjlaskdj12/CVE-2024-29671-POC diff --git a/cves/2024/CVE-2024-29943.md b/cves/2024/CVE-2024-29943.md index 28dbe3d46f3..219a73913da 100644 --- a/cves/2024/CVE-2024-29943.md +++ b/cves/2024/CVE-2024-29943.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/bjrjk/CVE-2024-29943 +- https://github.com/SneakyNachos/CVE-2024-29943-but-with-wasm +- https://github.com/seadragnol/CVE-2024-29943 diff --git a/cves/2024/CVE-2024-29973.md b/cves/2024/CVE-2024-29973.md index 593ecf72380..96e7b3755c0 100644 --- a/cves/2024/CVE-2024-29973.md +++ b/cves/2024/CVE-2024-29973.md @@ -26,6 +26,7 @@ - https://github.com/p0et08/CVE-2024-29973 - https://github.com/skyrowalker/CVE-2024-29973 - https://github.com/zxcod3/CVE-2024-29973 +- https://github.com/kernel364/CVE-2024-29973 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29973.yaml diff --git a/cves/2024/CVE-2024-30088.md b/cves/2024/CVE-2024-30088.md index 749c8f9c841..227f92462b1 100644 --- a/cves/2024/CVE-2024-30088.md +++ b/cves/2024/CVE-2024-30088.md @@ -43,6 +43,9 @@ No PoCs from references. - https://github.com/Zombie-Kaiser/CVE-2024-30088-Windows-poc - https://github.com/exploits-forsale/collateral-damage - https://github.com/tykawaii98/CVE-2024-30088 +- https://github.com/FangFang-Yi/CVE-2024-30088 +- https://github.com/cyghtinc/cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU +- https://github.com/th3g3ntl3m4n84/CVE-2024-30088__Windows-TOCTOU-exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_30088_authz_basep.rb diff --git a/cves/2024/CVE-2024-30212.md b/cves/2024/CVE-2024-30212.md index fa30f8de693..a04835599e3 100644 --- a/cves/2024/CVE-2024-30212.md +++ b/cves/2024/CVE-2024-30212.md @@ -13,5 +13,5 @@ If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFF - https://github.com/Fehr-GmbH/blackleak #### Github -No PoCs found on GitHub currently. +- https://github.com/Fehr-GmbH/blackleak diff --git a/cves/2024/CVE-2024-30804.md b/cves/2024/CVE-2024-30804.md index 32ae7c3f111..4805441b4bc 100644 --- a/cves/2024/CVE-2024-30804.md +++ b/cves/2024/CVE-2024-30804.md @@ -14,5 +14,5 @@ An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ekfkawl/CVE-2024-30804 diff --git a/cves/2024/CVE-2024-30851.md b/cves/2024/CVE-2024-30851.md index 35afbc31d60..e9ece5671e7 100644 --- a/cves/2024/CVE-2024-30851.md +++ b/cves/2024/CVE-2024-30851.md @@ -13,7 +13,7 @@ Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allo - https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jasmin_ransomware_dir_traversal.rb diff --git a/cves/2024/CVE-2024-30896.md b/cves/2024/CVE-2024-30896.md index fc0f7f04b57..1678cca8eac 100644 --- a/cves/2024/CVE-2024-30896.md +++ b/cves/2024/CVE-2024-30896.md @@ -15,7 +15,7 @@ InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under t - https://github.com/influxdata/influxdb/issues/24797 #### Github -No PoCs found on GitHub currently. +- https://github.com/XenoM0rph97/CVE-2024-30896 #### ExploitDB - https://www.exploit-db.com/exploits/52142 diff --git a/cves/2024/CVE-2024-3094.md b/cves/2024/CVE-2024-3094.md index 0b59cf8a505..87b478614df 100644 --- a/cves/2024/CVE-2024-3094.md +++ b/cves/2024/CVE-2024-3094.md @@ -61,6 +61,15 @@ Through a series of complex obfuscations, the liblzma build process extracts a p - https://github.com/shefirot/CVE-2024-3094 - https://github.com/teyhouse/CVE-2024-3094 - https://github.com/valeriot30/cve-2024-3094 +- https://github.com/0xBlackash/CVE-2024-3094 +- https://github.com/FabioBaroni/CVE-2024-3094-checker +- https://github.com/Security-Phoenix-demo/CVE-2024-3094-fix-exploits +- https://github.com/ThomRgn/xzutils_backdoor_obfuscation +- https://github.com/extracoding-dozen/CVE-2024-3094 +- https://github.com/h3raklez/CVE-2024-3094 +- https://github.com/hackura/xz-cve-2024-3094 +- https://github.com/vesjolyjd/Kaspersky_CVE-2024-3094 +- https://github.com/vnchk1/sec_review_cve-2024-3094 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-3094.yaml diff --git a/cves/2024/CVE-2024-31317.md b/cves/2024/CVE-2024-31317.md index 0f37b96ba76..64bad5f3534 100644 --- a/cves/2024/CVE-2024-31317.md +++ b/cves/2024/CVE-2024-31317.md @@ -24,4 +24,11 @@ No PoCs from references. - https://github.com/agg23/android_31317_exploit_rs - https://github.com/agg23/cve-2024-31317 - https://github.com/fuhei/CVE-2024-31317 +- https://github.com/CleoV2/Debuggable-App-Exploit +- https://github.com/GitAmanS/ZygoteExploitDemo +- https://github.com/Tinnci/cve-2024-31317 +- https://github.com/chengfeng30121/CVE-2024-31317-PoC +- https://github.com/fcy10012/CVE-2024-31317-Deployer +- https://github.com/kalibb/CVE-2024-31317-Deployer +- https://github.com/wqry085/PoC-Deployer-System diff --git a/cves/2024/CVE-2024-31680.md b/cves/2024/CVE-2024-31680.md index 04df4e40952..88ddda1fd90 100644 --- a/cves/2024/CVE-2024-31680.md +++ b/cves/2024/CVE-2024-31680.md @@ -14,5 +14,5 @@ File Upload vulnerability in Shibang Communications Co., Ltd. IP network interco - https://github.com/h3rkk/CVE-2024-31680/blob/main/upload.md #### Github -No PoCs found on GitHub currently. +- https://github.com/h3rkk/CVE-2024-31680 diff --git a/cves/2024/CVE-2024-31777.md b/cves/2024/CVE-2024-31777.md index 2492f7672d5..5d4e1d4792a 100644 --- a/cves/2024/CVE-2024-31777.md +++ b/cves/2024/CVE-2024-31777.md @@ -14,7 +14,7 @@ File Upload vulnerability in openeclass v.3.15 and before allows an attacker to - https://github.com/FreySolarEye/Exploit-CVE-2024-31777 #### Github -No PoCs found on GitHub currently. +- https://github.com/FreySolarEye/Exploit-CVE-2024-31777 #### ExploitDB - https://www.exploit-db.com/exploits/51975 diff --git a/cves/2024/CVE-2024-31819.md b/cves/2024/CVE-2024-31819.md index 5439c62ae68..723ff68b9fb 100644 --- a/cves/2024/CVE-2024-31819.md +++ b/cves/2024/CVE-2024-31819.md @@ -17,6 +17,7 @@ An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execut #### Github - https://github.com/Jhonsonwannaa/CVE-2024-31819 - https://github.com/dream434/CVE-2024-31819 +- https://github.com/Chocapikk/CVE-2024-31819 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/avideo_wwbnindex_unauth_rce.rb diff --git a/cves/2024/CVE-2024-3183.md b/cves/2024/CVE-2024-3183.md index 38fd95bb323..beb093cd4c0 100644 --- a/cves/2024/CVE-2024-3183.md +++ b/cves/2024/CVE-2024-3183.md @@ -28,4 +28,5 @@ No PoCs from references. #### Github - https://github.com/Cyxow/CVE-2024-3183-POC +- https://github.com/Im10n/CVE-2024-3183-POC diff --git a/cves/2024/CVE-2024-31835.md b/cves/2024/CVE-2024-31835.md index 99975087cbe..53826723a5b 100644 --- a/cves/2024/CVE-2024-31835.md +++ b/cves/2024/CVE-2024-31835.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remo - https://github.com/paragbagul111/CVE-2024-31835 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-31835 diff --git a/cves/2024/CVE-2024-31982.md b/cves/2024/CVE-2024-31982.md index 6382edbc55c..77e3a9af383 100644 --- a/cves/2024/CVE-2024-31982.md +++ b/cves/2024/CVE-2024-31982.md @@ -24,6 +24,7 @@ XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 a - https://github.com/bigb0x/CVE-2024-31982 - https://github.com/k3lpi3b4nsh33/CVE-2024-31982 - https://github.com/th3gokul/CVE-2024-31982 +- https://github.com/raishin1/CVE-2024-31982 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31982.yaml diff --git a/cves/2024/CVE-2024-32002.md b/cves/2024/CVE-2024-32002.md index 3366a41cafa..e0e71454481 100644 --- a/cves/2024/CVE-2024-32002.md +++ b/cves/2024/CVE-2024-32002.md @@ -99,4 +99,10 @@ No PoCs from references. - https://github.com/vincepsh/CVE-2024-32002 - https://github.com/vincepsh/CVE-2024-32002-hook - https://github.com/winstest/test2 +- https://github.com/BasyacatX/CVE-2024-32002-PoC_Chinese +- https://github.com/BohemianHacks/CVE-2024-32002-poc +- https://github.com/jakob-pennington/cve-2024-32002-poc-aw +- https://github.com/jakob-pennington/cve-2024-32002-poc-rce +- https://github.com/jakob-pennington/cve-2024-32002-submodule-aw +- https://github.com/jakob-pennington/cve-2024-32002-submodule-rce diff --git a/cves/2024/CVE-2024-32019.md b/cves/2024/CVE-2024-32019.md index aaff8422997..1aeaca2b2f9 100644 --- a/cves/2024/CVE-2024-32019.md +++ b/cves/2024/CVE-2024-32019.md @@ -24,6 +24,11 @@ Netdata is an open source observability tool. In affected versions the `ndsudo` - https://github.com/juanbelin/CVE-2024-32019-POC - https://github.com/sPhyos/cve-2024-32019-PoC - https://github.com/x0da6h/POC-for-CVE-2024-32019 +- https://github.com/80Ottanta80/CVE-2024-32019-PoC +- https://github.com/hexared/CVE-2024-32019_poc +- https://github.com/julichaan/CVE-2024-32019-ndsudo-local-privilege-escalation-NetData +- https://github.com/justjoeyking/CVE-2024-32019-ndsudo +- https://github.com/kikechans/-Netdata-PrivEsc-CVE-2024-32019 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ndsudo_cve_2024_32019.rb diff --git a/cves/2024/CVE-2024-32113.md b/cves/2024/CVE-2024-32113.md index 89ae780c86e..f5eaf6965f0 100644 --- a/cves/2024/CVE-2024-32113.md +++ b/cves/2024/CVE-2024-32113.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/RacerZ-fighting/CVE-2024-32113-POC - https://github.com/YongYe-Security/CVE-2024-32113 - https://github.com/absholi7ly/Apache-OFBiz-Directory-Traversal-exploit +- https://github.com/luizgaf/CVE-2024-32113-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32113.yaml diff --git a/cves/2024/CVE-2024-32114.md b/cves/2024/CVE-2024-32114.md index b4305d175a9..1eb4c0301d5 100644 --- a/cves/2024/CVE-2024-32114.md +++ b/cves/2024/CVE-2024-32114.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32114.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2024-32114 diff --git a/cves/2024/CVE-2024-32369.md b/cves/2024/CVE-2024-32369.md index f02235eb1c3..54b74cf1de6 100644 --- a/cves/2024/CVE-2024-32369.md +++ b/cves/2024/CVE-2024-32369.md @@ -14,5 +14,5 @@ SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 throu - https://github.com/chucrutis/CVE-2024-32369 #### Github -No PoCs found on GitHub currently. +- https://github.com/chucrutis/CVE-2024-32369 diff --git a/cves/2024/CVE-2024-32640.md b/cves/2024/CVE-2024-32640.md index 64dce361c22..52ff5b1f5c2 100644 --- a/cves/2024/CVE-2024-32640.md +++ b/cves/2024/CVE-2024-32640.md @@ -20,6 +20,7 @@ MASA CMS is an Enterprise Content Management platform based on open source techn - https://github.com/0xYumeko/CVE-2024-32640-SQLI-MuraCMS - https://github.com/pizza-power/CVE-2024-32640 - https://github.com/sammings/CVE-2024-32640 +- https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32640.yaml diff --git a/cves/2024/CVE-2024-3273.md b/cves/2024/CVE-2024-3273.md index d047c630ef9..8836b6881e7 100644 --- a/cves/2024/CVE-2024-3273.md +++ b/cves/2024/CVE-2024-3273.md @@ -25,6 +25,7 @@ Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L b - https://github.com/X-Projetion/CVE-2024-3273-D-Link-Remote-Code-Execution-RCE - https://github.com/adhikara13/CVE-2024-3273 - https://github.com/mrrobot0o/CVE-2024-3273- +- https://github.com/Ap0dexMe0/CVE-2024-3273 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3273.yaml diff --git a/cves/2024/CVE-2024-33438.md b/cves/2024/CVE-2024-33438.md index fe6f425b09b..6247107b47e 100644 --- a/cves/2024/CVE-2024-33438.md +++ b/cves/2024/CVE-2024-33438.md @@ -14,5 +14,5 @@ File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user - https://github.com/julio-cfa/CVE-2024-33438 #### Github -No PoCs found on GitHub currently. +- https://github.com/julio-cfa/CVE-2024-33438 diff --git a/cves/2024/CVE-2024-3400.md b/cves/2024/CVE-2024-3400.md index 448c3ba1fca..30abd131bef 100644 --- a/cves/2024/CVE-2024-3400.md +++ b/cves/2024/CVE-2024-3400.md @@ -56,6 +56,9 @@ A command injection as a result of arbitrary file creation vulnerability in the - https://github.com/tfrederick74656/cve-2024-3400-poc - https://github.com/workshop748/CVE-2024-3400 - https://github.com/zam89/CVE-2024-3400-pot +- https://github.com/GhassanSabir/CVE-2024-3400-poc +- https://github.com/razureink/cve-2024-3400-panos_rce_reproduction +- https://github.com/wa6n3r/CVE-2024-3400 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3400.yaml diff --git a/cves/2024/CVE-2024-34070.md b/cves/2024/CVE-2024-34070.md index 335558dfce2..e8980d85556 100644 --- a/cves/2024/CVE-2024-34070.md +++ b/cves/2024/CVE-2024-34070.md @@ -15,5 +15,6 @@ Froxlor is open source server administration software. Prior to 2.1.9, a Stored - https://github.com/froxlor/Froxlor/security/advisories/GHSA-x525-54hf-xr53 #### Github -No PoCs found on GitHub currently. +- https://github.com/Akira07210/Exploit-CVE-2024-34070 +- https://github.com/Okymi-X/CVE-2024-34070 diff --git a/cves/2024/CVE-2024-34102.md b/cves/2024/CVE-2024-34102.md index b0f42babe0c..a7b8d5146fe 100644 --- a/cves/2024/CVE-2024-34102.md +++ b/cves/2024/CVE-2024-34102.md @@ -34,6 +34,8 @@ Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affe - https://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento - https://github.com/mksundaram69/CVE-2024-34102 - https://github.com/th3gokul/CVE-2024-34102 +- https://github.com/nmmorette/CVE-2024-34102 +- https://github.com/russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34102.yaml diff --git a/cves/2024/CVE-2024-34220.md b/cves/2024/CVE-2024-34220.md index 0691e403c57..98c7c7118ef 100644 --- a/cves/2024/CVE-2024-34220.md +++ b/cves/2024/CVE-2024-34220.md @@ -14,5 +14,5 @@ Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injecti - https://github.com/dovankha/CVE-2024-34220 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34220 diff --git a/cves/2024/CVE-2024-34221.md b/cves/2024/CVE-2024-34221.md index fedcc28861c..083e15e7c7b 100644 --- a/cves/2024/CVE-2024-34221.md +++ b/cves/2024/CVE-2024-34221.md @@ -14,5 +14,5 @@ Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Pe - https://github.com/dovankha/CVE-2024-34221 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34221 diff --git a/cves/2024/CVE-2024-34222.md b/cves/2024/CVE-2024-34222.md index 673d0626484..7f7a2d1fc86 100644 --- a/cves/2024/CVE-2024-34222.md +++ b/cves/2024/CVE-2024-34222.md @@ -14,5 +14,5 @@ Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injecti - https://github.com/dovankha/CVE-2024-34222 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34222 diff --git a/cves/2024/CVE-2024-34223.md b/cves/2024/CVE-2024-34223.md index 3b603b2cbca..e9f5fe1327b 100644 --- a/cves/2024/CVE-2024-34223.md +++ b/cves/2024/CVE-2024-34223.md @@ -14,5 +14,5 @@ Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Hum - https://github.com/dovankha/CVE-2024-34223 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34223 diff --git a/cves/2024/CVE-2024-34224.md b/cves/2024/CVE-2024-34224.md index 09805e3fe99..5fdad22dd1b 100644 --- a/cves/2024/CVE-2024-34224.md +++ b/cves/2024/CVE-2024-34224.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Compu - https://github.com/dovankha/CVE-2024-34224 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34224 diff --git a/cves/2024/CVE-2024-34225.md b/cves/2024/CVE-2024-34225.md index 142f739356c..2fa107ca34c 100644 --- a/cves/2024/CVE-2024-34225.md +++ b/cves/2024/CVE-2024-34225.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Compute - https://github.com/dovankha/CVE-2024-34225 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34225 diff --git a/cves/2024/CVE-2024-34226.md b/cves/2024/CVE-2024-34226.md index 952bfd738c4..b1ce3ab1b34 100644 --- a/cves/2024/CVE-2024-34226.md +++ b/cves/2024/CVE-2024-34226.md @@ -14,5 +14,5 @@ SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in Sour - https://github.com/dovankha/CVE-2024-34226 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34226 diff --git a/cves/2024/CVE-2024-34312.md b/cves/2024/CVE-2024-34312.md index 923a1df9cfc..acab200b9f5 100644 --- a/cves/2024/CVE-2024-34312.md +++ b/cves/2024/CVE-2024-34312.md @@ -14,5 +14,5 @@ Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cros - https://github.com/vincentscode/CVE-2024-34312 #### Github -No PoCs found on GitHub currently. +- https://github.com/vincentscode/CVE-2024-34312 diff --git a/cves/2024/CVE-2024-34313.md b/cves/2024/CVE-2024-34313.md index 38b6808ad93..fce1199d0ed 100644 --- a/cves/2024/CVE-2024-34313.md +++ b/cves/2024/CVE-2024-34313.md @@ -14,5 +14,5 @@ An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory - https://github.com/vincentscode/CVE-2024-34313 #### Github -No PoCs found on GitHub currently. +- https://github.com/vincentscode/CVE-2024-34313 diff --git a/cves/2024/CVE-2024-34327.md b/cves/2024/CVE-2024-34327.md index 02189873d84..012f2f8bd8e 100644 --- a/cves/2024/CVE-2024-34327.md +++ b/cves/2024/CVE-2024-34327.md @@ -13,5 +13,5 @@ Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability vi - https://github.com/0xsu3ks/CVE-2024-34327 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xsu3ks/CVE-2024-34327 diff --git a/cves/2024/CVE-2024-34361.md b/cves/2024/CVE-2024-34361.md index 3b580df69b6..178c797193b 100644 --- a/cves/2024/CVE-2024-34361.md +++ b/cves/2024/CVE-2024-34361.md @@ -15,4 +15,5 @@ Pi-hole is a DNS sinkhole that protects devices from unwanted content without in #### Github - https://github.com/T0X1Cx/CVE-2024-34361-PiHole-SSRF-to-RCE +- https://github.com/T0X1Cx/CVE-2024-34361-Pi-Hole-SSRF-to-RCE diff --git a/cves/2024/CVE-2024-34444.md b/cves/2024/CVE-2024-34444.md index 25300d51632..f33e476f032 100644 --- a/cves/2024/CVE-2024-34444.md +++ b/cves/2024/CVE-2024-34444.md @@ -13,4 +13,4 @@ Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This iss No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/dzmind2312/CVE-2024-34444-Exploit-Poc diff --git a/cves/2024/CVE-2024-34452.md b/cves/2024/CVE-2024-34452.md index 6aa1aa1a2e3..e44186b6c41 100644 --- a/cves/2024/CVE-2024-34452.md +++ b/cves/2024/CVE-2024-34452.md @@ -14,5 +14,5 @@ CMSimple_XH 1.7.6 allows XSS by uploading a crafted SVG document. - https://github.com/surajhacx/CVE-2024-34452/ #### Github -No PoCs found on GitHub currently. +- https://github.com/surajhacx/CVE-2024-34452 diff --git a/cves/2024/CVE-2024-34582.md b/cves/2024/CVE-2024-34582.md index 81807342d12..c5ebe89ac25 100644 --- a/cves/2024/CVE-2024-34582.md +++ b/cves/2024/CVE-2024-34582.md @@ -14,5 +14,5 @@ Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi u - https://github.com/silent6trinity/CVE-2024-34582 #### Github -No PoCs found on GitHub currently. +- https://github.com/silent6trinity/CVE-2024-34582 diff --git a/cves/2024/CVE-2024-35333.md b/cves/2024/CVE-2024-35333.md index 9726072ecbf..2ba201c678e 100644 --- a/cves/2024/CVE-2024-35333.md +++ b/cves/2024/CVE-2024-35333.md @@ -14,5 +14,5 @@ A stack-buffer-overflow vulnerability exists in the read_charset_decl function o - https://github.com/momo1239/CVE-2024-35333 #### Github -No PoCs found on GitHub currently. +- https://github.com/momo1239/CVE-2024-35333 diff --git a/cves/2024/CVE-2024-3553.md b/cves/2024/CVE-2024-3553.md index 5935bcfeecd..a601949c8a0 100644 --- a/cves/2024/CVE-2024-3553.md +++ b/cves/2024/CVE-2024-3553.md @@ -14,4 +14,4 @@ The Tutor LMS – eLearning and online course solution plugin for WordPress is v No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/RandomRobbieBF/CVE-2024-3553 diff --git a/cves/2024/CVE-2024-35584.md b/cves/2024/CVE-2024-35584.md index 44da143a267..5788a920766 100644 --- a/cves/2024/CVE-2024-35584.md +++ b/cves/2024/CVE-2024-35584.md @@ -15,7 +15,7 @@ SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExp - https://github.com/whwhwh96/CVE-2024-35584 #### Github -No PoCs found on GitHub currently. +- https://github.com/whwhwh96/CVE-2024-35584 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35584.yaml diff --git a/cves/2024/CVE-2024-36039.md b/cves/2024/CVE-2024-36039.md index 3e4ff437bde..1f511c7983d 100644 --- a/cves/2024/CVE-2024-36039.md +++ b/cves/2024/CVE-2024-36039.md @@ -13,5 +13,5 @@ PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input bec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/zenniskayy2k4/CVE-2024-36039_PoC diff --git a/cves/2024/CVE-2024-36042.md b/cves/2024/CVE-2024-36042.md index 55b501e8c4a..6a3216a9ac5 100644 --- a/cves/2024/CVE-2024-36042.md +++ b/cves/2024/CVE-2024-36042.md @@ -14,5 +14,5 @@ Silverpeas before 6.3.5 allows authentication bypass by omitting the Password fi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HA5ANT/Silverpeas-AuthBypass-CVE-2024-36042 diff --git a/cves/2024/CVE-2024-36104.md b/cves/2024/CVE-2024-36104.md index a4515f9320b..2e0906c61be 100644 --- a/cves/2024/CVE-2024-36104.md +++ b/cves/2024/CVE-2024-36104.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/RacerZ-fighting/CVE-2024-32113-POC - https://github.com/ggfzx/CVE-2024-36104 +- https://github.com/Groppoxx/CVE-2024-36104-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36104.yaml diff --git a/cves/2024/CVE-2024-36401.md b/cves/2024/CVE-2024-36401.md index 3a5e28b0dee..5997aa59324 100644 --- a/cves/2024/CVE-2024-36401.md +++ b/cves/2024/CVE-2024-36401.md @@ -43,9 +43,16 @@ GeoServer is an open source server that allows users to share and edit geospatia - https://github.com/whitebear-ch/GeoServerExploit - https://github.com/y1s4s/CVE-2024-36401-PoC - https://github.com/yisas93/CVE-2024-36401-PoC +- https://github.com/DanieleGiovanardi2408/cve-2024-36401-geoserver-rce +- https://github.com/Delt-A/CVE-2024-36401-poc +- https://github.com/URJACK2025/CVE-2024-36401 +- https://github.com/keelanbrady1011/CVE-2024-36401 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36401.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/geoserver_unauth_rce_cve_2024_36401.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2024-36401 diff --git a/cves/2024/CVE-2024-36420.md b/cves/2024/CVE-2024-36420.md index 7b26ca24d00..988fe602332 100644 --- a/cves/2024/CVE-2024-36420.md +++ b/cves/2024/CVE-2024-36420.md @@ -14,7 +14,7 @@ Flowise is a drag & drop user interface to build a customized large language mod No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/fineman999/POC_CVE-2024-36420 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36420.yaml diff --git a/cves/2024/CVE-2024-3661.md b/cves/2024/CVE-2024-3661.md index 05d6e80c07e..3e73c00432a 100644 --- a/cves/2024/CVE-2024-3661.md +++ b/cves/2024/CVE-2024-3661.md @@ -17,4 +17,5 @@ DHCP can add routes to a client’s routing table via the classless static route #### Github - https://github.com/Roundthe-clock/CVE-2024-3661VPN +- https://github.com/YardenFadida/CVE-2024-3661_Demo diff --git a/cves/2024/CVE-2024-36821.md b/cves/2024/CVE-2024-36821.md index 9cbbc92aa3e..0380ef58cd3 100644 --- a/cves/2024/CVE-2024-36821.md +++ b/cves/2024/CVE-2024-36821.md @@ -14,5 +14,5 @@ Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows atta - https://github.com/IvanGlinkin/CVE-2024-36821 #### Github -No PoCs found on GitHub currently. +- https://github.com/IvanGlinkin/CVE-2024-36821 diff --git a/cves/2024/CVE-2024-36837.md b/cves/2024/CVE-2024-36837.md index cc890047087..6a7aa095105 100644 --- a/cves/2024/CVE-2024-36837.md +++ b/cves/2024/CVE-2024-36837.md @@ -15,6 +15,7 @@ SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain #### Github - https://github.com/lhc321-source/CVE-2024-36837 +- https://github.com/phtcloud-dev/CVE-2024-36837 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36837.yaml diff --git a/cves/2024/CVE-2024-36971.md b/cves/2024/CVE-2024-36971.md index 2268a720ce5..928b5cc71ad 100644 --- a/cves/2024/CVE-2024-36971.md +++ b/cves/2024/CVE-2024-36971.md @@ -17,5 +17,5 @@ In the Linux kernel, the following vulnerability has been resolved:net: fix __ds No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/M4G1XX/CVE-2024-36971 diff --git a/cves/2024/CVE-2024-36985.md b/cves/2024/CVE-2024-36985.md index 171ef3ea3b8..1b0a8ffdd17 100644 --- a/cves/2024/CVE-2024-36985.md +++ b/cves/2024/CVE-2024-36985.md @@ -15,7 +15,7 @@ In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged u No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/LittleSuRii/CVE-2024-36985 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/splunk_auth_rce_cve_2024_36985.rb diff --git a/cves/2024/CVE-2024-36991.md b/cves/2024/CVE-2024-36991.md index baa795d4854..0d2b194c1d3 100644 --- a/cves/2024/CVE-2024-36991.md +++ b/cves/2024/CVE-2024-36991.md @@ -28,6 +28,8 @@ No PoCs from references. - https://github.com/jaytiwari05/CVE-2024-36991 - https://github.com/sardine-web/CVE-2024-36991 - https://github.com/th3gokul/CVE-2024-36991 +- https://github.com/0xFZin/CVE-2024-36991 +- https://github.com/jhurtadomi/CVE-2024-36991-Splunk #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36991.yaml diff --git a/cves/2024/CVE-2024-37032.md b/cves/2024/CVE-2024-37032.md index 5590068a85d..072bcf3850a 100644 --- a/cves/2024/CVE-2024-37032.md +++ b/cves/2024/CVE-2024-37032.md @@ -16,6 +16,7 @@ Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 - https://github.com/Bi0x/CVE-2024-37032 - https://github.com/badboy0/Ollama_Exploit_Tool - https://github.com/pankass/CVE-2024-37032_CVE-2024-45436 +- https://github.com/itzSh4dowxZ/CVE-2024-37032-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37032.yaml diff --git a/cves/2024/CVE-2024-37054.md b/cves/2024/CVE-2024-37054.md index 2802f9c1d2e..9ed1eeaea50 100644 --- a/cves/2024/CVE-2024-37054.md +++ b/cves/2024/CVE-2024-37054.md @@ -14,4 +14,7 @@ No PoCs from references. #### Github - https://github.com/NiteeshPujari/CVE-2024-37054-MLflow-RCE +- https://github.com/ben-slates/CVE-2024-37054 +- https://github.com/jimmexploit/CVE-2024-37054-PoC +- https://github.com/tristanqtn/CVE-2024-37054 diff --git a/cves/2024/CVE-2024-37383.md b/cves/2024/CVE-2024-37383.md index d96dac724e8..b0fe04e201f 100644 --- a/cves/2024/CVE-2024-37383.md +++ b/cves/2024/CVE-2024-37383.md @@ -18,6 +18,7 @@ No PoCs from references. #### Github - https://github.com/amirzargham/CVE-2024-37383-exploit - https://github.com/bartfroklage/CVE-2024-37383-POC +- https://github.com/hyungin0505/CVE-2024-37383_PoC #### ExploitDB - https://www.exploit-db.com/exploits/52173 diff --git a/cves/2024/CVE-2024-37726.md b/cves/2024/CVE-2024-37726.md index 86d57565063..a52ed9775f3 100644 --- a/cves/2024/CVE-2024-37726.md +++ b/cves/2024/CVE-2024-37726.md @@ -15,4 +15,5 @@ Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Cent #### Github - https://github.com/NextGenPentesters/CVE-2024-37726-MSI-Center-Local-Privilege-Escalation +- https://github.com/carsonchan12345/CVE-2024-37726-MSI-Center-Local-Privilege-Escalation diff --git a/cves/2024/CVE-2024-37742.md b/cves/2024/CVE-2024-37742.md index 1eefe8fe3ec..aab69373c54 100644 --- a/cves/2024/CVE-2024-37742.md +++ b/cves/2024/CVE-2024-37742.md @@ -14,5 +14,6 @@ Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulne No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Aar0nD0m1n1c/CVE-2024-37742 +- https://github.com/tungdn9988/CVE-2024-37742 diff --git a/cves/2024/CVE-2024-37759.md b/cves/2024/CVE-2024-37759.md index c46efdfd2ba..95415dc9acd 100644 --- a/cves/2024/CVE-2024-37759.md +++ b/cves/2024/CVE-2024-37759.md @@ -14,5 +14,5 @@ DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression - https://github.com/crumbledwall/CVE-2024-37759_PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/crumbledwall/CVE-2024-37759_PoC diff --git a/cves/2024/CVE-2024-38063.md b/cves/2024/CVE-2024-38063.md index 1a880cb04df..ea982761851 100644 --- a/cves/2024/CVE-2024-38063.md +++ b/cves/2024/CVE-2024-38063.md @@ -77,4 +77,9 @@ No PoCs from references. - https://github.com/thanawee321/CVE-2024-38063 - https://github.com/ynwarcs/CVE-2024-38063 - https://github.com/zenzue/CVE-2024-38063-POC +- https://github.com/AvidanMaatuk/CVE-2024-38063 +- https://github.com/almogopp/Disable-IPv6-CVE-2024-38063-Fix +- https://github.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring +- https://github.com/jip-0-0-0-0-0/CVE-2024-38063-scanner +- https://github.com/thealice01/CVE-2024-38063 diff --git a/cves/2024/CVE-2024-38077.md b/cves/2024/CVE-2024-38077.md index 213c1fdcd64..a222a60b358 100644 --- a/cves/2024/CVE-2024-38077.md +++ b/cves/2024/CVE-2024-38077.md @@ -41,4 +41,6 @@ No PoCs from references. - https://github.com/mrmtwoj/CVE-2024-38077 - https://github.com/qi4L/CVE-2024-38077 - https://github.com/zhuxi1965/CVE-2024-38077-RDLCheck +- https://github.com/Ermensonx/CVE-2024-38077-MadLicense-exploit +- https://github.com/razureink/cve-2024-38077-madlicense_reproduction diff --git a/cves/2024/CVE-2024-38355.md b/cves/2024/CVE-2024-38355.md index c0918bd8294..59fdac0b7e4 100644 --- a/cves/2024/CVE-2024-38355.md +++ b/cves/2024/CVE-2024-38355.md @@ -17,5 +17,5 @@ Socket.IO is an open source, real-time, bidirectional, event-based, communicatio - https://www.vicarius.io/vsociety/posts/unhandled-exception-in-socketio-cve-2024-38355 #### Github -No PoCs found on GitHub currently. +- https://github.com/PawelMurdzek/CVE-2024-38355-PoC diff --git a/cves/2024/CVE-2024-38472.md b/cves/2024/CVE-2024-38472.md index f707daa0366..d725d14cddd 100644 --- a/cves/2024/CVE-2024-38472.md +++ b/cves/2024/CVE-2024-38472.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/Abdurahmon3236/CVE-2024-38472 +- https://github.com/mrmtwoj/apache-vulnerability-testing #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml diff --git a/cves/2024/CVE-2024-38820.md b/cves/2024/CVE-2024-38820.md index b7b4d481530..1d92f268d9a 100644 --- a/cves/2024/CVE-2024-38820.md +++ b/cves/2024/CVE-2024-38820.md @@ -15,5 +15,5 @@ The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case i No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/kadamnayan/POC-CVE-2024-38820 diff --git a/cves/2024/CVE-2024-38856.md b/cves/2024/CVE-2024-38856.md index d832d6bbb15..42bb49e1ee1 100644 --- a/cves/2024/CVE-2024-38856.md +++ b/cves/2024/CVE-2024-38856.md @@ -23,9 +23,15 @@ No PoCs from references. - https://github.com/ThatNotEasy/CVE-2024-38856 - https://github.com/emanueldosreis/CVE-2024-38856 - https://github.com/guinea-offensive-security/Ofbiz-RCE +- https://github.com/GraySignal/CVE-2024-38856-ApacheOfBiz +- https://github.com/Hex00-0x4/CVE-2024-38856-Apache-OFBiz +- https://github.com/securelayer7/CVE-2024-38856_Scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38856.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_ofbiz_forgot_password_directory_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2024-38856 diff --git a/cves/2024/CVE-2024-39031.md b/cves/2024/CVE-2024-39031.md index 1bf67fd9117..bde4c061576 100644 --- a/cves/2024/CVE-2024-39031.md +++ b/cves/2024/CVE-2024-39031.md @@ -14,5 +14,5 @@ In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and ad - https://github.com/toneemarqus/CVE-2024-39031 #### Github -No PoCs found on GitHub currently. +- https://github.com/toneemarqus/CVE-2024-39031 diff --git a/cves/2024/CVE-2024-39205.md b/cves/2024/CVE-2024-39205.md index ee1537bf2f9..b3b4e18cc8e 100644 --- a/cves/2024/CVE-2024-39205.md +++ b/cves/2024/CVE-2024-39205.md @@ -16,6 +16,7 @@ An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows at #### Github - https://github.com/Marven11/CVE-2024-39205-Pyload-RCE +- https://github.com/btar1gan/exploit_CVE-2024-39205 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pyload_js2py_cve_2024_39205.rb diff --git a/cves/2024/CVE-2024-39248.md b/cves/2024/CVE-2024-39248.md index 55185af0b41..0dc94026432 100644 --- a/cves/2024/CVE-2024-39248.md +++ b/cves/2024/CVE-2024-39248.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to e - https://packetstormsecurity.com/files/179219 #### Github -No PoCs found on GitHub currently. +- https://github.com/jasonthename/CVE-2024-39248 diff --git a/cves/2024/CVE-2024-39250.md b/cves/2024/CVE-2024-39250.md index 30ece9fa2cf..3c619e12db7 100644 --- a/cves/2024/CVE-2024-39250.md +++ b/cves/2024/CVE-2024-39250.md @@ -14,7 +14,7 @@ EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injectio - https://github.com/efrann/CVE-2024-39250 #### Github -No PoCs found on GitHub currently. +- https://github.com/efrann/CVE-2024-39250 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39250.yaml diff --git a/cves/2024/CVE-2024-39713.md b/cves/2024/CVE-2024-39713.md index 2b04b80e87e..8a7ce266823 100644 --- a/cves/2024/CVE-2024-39713.md +++ b/cves/2024/CVE-2024-39713.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/typical-pashochek/CVE-2024-39713 +- https://github.com/blackcodersec/exploit-cve #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39713.yaml diff --git a/cves/2024/CVE-2024-39907.md b/cves/2024/CVE-2024-39907.md index 1224c63777e..01ddafb93e4 100644 --- a/cves/2024/CVE-2024-39907.md +++ b/cves/2024/CVE-2024-39907.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39907.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/1panel/CVE-2024-39907 diff --git a/cves/2024/CVE-2024-40110.md b/cves/2024/CVE-2024-40110.md index 3347ba2c56f..51d241fc805 100644 --- a/cves/2024/CVE-2024-40110.md +++ b/cves/2024/CVE-2024-40110.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/Abdurahmon3236/CVE-2024-40110 - https://github.com/shacrony/redcock.py - https://github.com/thiagosmith/CVE-2024-40110 +- https://github.com/AnGrY-Althaf/CVE-2024-40110 diff --git a/cves/2024/CVE-2024-4040.md b/cves/2024/CVE-2024-4040.md index 388c95c13a3..0dca8073f94 100644 --- a/cves/2024/CVE-2024-4040.md +++ b/cves/2024/CVE-2024-4040.md @@ -35,6 +35,10 @@ A server side template injection vulnerability in CrushFTP in all versions befor - https://github.com/rbih-boulanouar/CVE-2024-4040 - https://github.com/safeer-accuknox/CrushFTP-cve-2024-4040-poc - https://github.com/tongchengbin/nuclei-sdk +- https://github.com/GraySignal/CVE-2024-4040-CrushFTP-server +- https://github.com/Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept +- https://github.com/dhammerg/CVE-2024-4040 +- https://github.com/juanorts/CrushFTP10-Docker-CVE-2024-4040 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4040.yaml diff --git a/cves/2024/CVE-2024-4041.md b/cves/2024/CVE-2024-4041.md index 036dc629f92..bcbc457c46c 100644 --- a/cves/2024/CVE-2024-4041.md +++ b/cves/2024/CVE-2024-4041.md @@ -13,4 +13,4 @@ The Yoast SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripti No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/RandomRobbieBF/CVE-2024-4041 diff --git a/cves/2024/CVE-2024-40422.md b/cves/2024/CVE-2024-40422.md index c3badc51a93..3177695b4dd 100644 --- a/cves/2024/CVE-2024-40422.md +++ b/cves/2024/CVE-2024-40422.md @@ -17,6 +17,7 @@ The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stition #### Github - https://github.com/alpernae/vulnerability-research - https://github.com/j3r1ch0123/CVE-2024-40422 +- https://github.com/alpernae/CVE-2024-40422 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40422.yaml diff --git a/cves/2024/CVE-2024-40457.md b/cves/2024/CVE-2024-40457.md index da7d949c88a..73c4ede5cea 100644 --- a/cves/2024/CVE-2024-40457.md +++ b/cves/2024/CVE-2024-40457.md @@ -14,5 +14,5 @@ No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur - https://github.com/jeppojeps/CVE-2024-40457-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/jeppojeps/CVE-2024-40457-PoC diff --git a/cves/2024/CVE-2024-40492.md b/cves/2024/CVE-2024-40492.md index b8196656c44..9ac3beefeaf 100644 --- a/cves/2024/CVE-2024-40492.md +++ b/cves/2024/CVE-2024-40492.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote at - https://github.com/minendie/POC_CVE-2024-40492 #### Github -No PoCs found on GitHub currently. +- https://github.com/minendie/POC_CVE-2024-40492 diff --git a/cves/2024/CVE-2024-40891.md b/cves/2024/CVE-2024-40891.md index bf90f90bbc3..38de825852c 100644 --- a/cves/2024/CVE-2024-40891.md +++ b/cves/2024/CVE-2024-40891.md @@ -14,5 +14,5 @@ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Danyw24/zyxel-p870hn-hardware-hacking diff --git a/cves/2024/CVE-2024-40898.md b/cves/2024/CVE-2024-40898.md index 7dbd35317ad..d697b3514cd 100644 --- a/cves/2024/CVE-2024-40898.md +++ b/cves/2024/CVE-2024-40898.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898 - https://github.com/anilpatel199n/CVE-2024-40898 +- https://github.com/ForceEA001/CVE-2024-40898-SSL-Bypass-Detection diff --git a/cves/2024/CVE-2024-41290.md b/cves/2024/CVE-2024-41290.md index 917a60f50df..96fcef3d139 100644 --- a/cves/2024/CVE-2024-41290.md +++ b/cves/2024/CVE-2024-41290.md @@ -14,5 +14,5 @@ FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authent - https://github.com/paragbagul111/CVE-2024-41290 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-41290 diff --git a/cves/2024/CVE-2024-41570.md b/cves/2024/CVE-2024-41570.md index 7b2d9e36333..f8a4c500da6 100644 --- a/cves/2024/CVE-2024-41570.md +++ b/cves/2024/CVE-2024-41570.md @@ -19,4 +19,6 @@ An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling - https://github.com/dxlerYT/Havoc-C2-RCE-2024 - https://github.com/kit4py/CVE-2024-41570 - https://github.com/thisisveryfunny/CVE-2024-41570-Havoc-C2-RCE +- https://github.com/UnDefinedCS/HavocPwn +- https://github.com/diemoeve/CVE-2024-41570 diff --git a/cves/2024/CVE-2024-42009.md b/cves/2024/CVE-2024-42009.md index 15d0f263c6d..d72b2d07540 100644 --- a/cves/2024/CVE-2024-42009.md +++ b/cves/2024/CVE-2024-42009.md @@ -19,6 +19,8 @@ A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x throug - https://github.com/DaniTheHack3r/CVE-2024-42009-PoC - https://github.com/Foxer131/CVE-2024-42008-9-exploit - https://github.com/Shubhankargupta691/CVE-2024-42009 +- https://github.com/ZaidArif47/CVE-2024-42009 +- https://github.com/segunakinsoyinu/CVE-2024-42009-roundcube-xss #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42009.yaml diff --git a/cves/2024/CVE-2024-42323.md b/cves/2024/CVE-2024-42323.md index 4207bf0b065..b0e10bfd09c 100644 --- a/cves/2024/CVE-2024-42323.md +++ b/cves/2024/CVE-2024-42323.md @@ -13,7 +13,10 @@ SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incuba No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/forwjm/CVE-2024-42323 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42323.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/hertzbeat/CVE-2024-42323 diff --git a/cves/2024/CVE-2024-42327.md b/cves/2024/CVE-2024-42327.md index e28ee6d50a9..3b4f5861b05 100644 --- a/cves/2024/CVE-2024-42327.md +++ b/cves/2024/CVE-2024-42327.md @@ -24,6 +24,8 @@ No PoCs from references. - https://github.com/igorbf495/CVE-2024-42327 - https://github.com/itform-fr/Zabbix---CVE-2024-42327 - https://github.com/saad0x1/Exploits +- https://github.com/fellipefelix06/Zabbix-CVE-2024-42327 +- https://github.com/watchdog1337/CVE-2024-42327_Zabbix_SQLI #### ExploitDB - https://www.exploit-db.com/exploits/52230 diff --git a/cves/2024/CVE-2024-42640.md b/cves/2024/CVE-2024-42640.md index f6741dfe803..88b0f8387bf 100644 --- a/cves/2024/CVE-2024-42640.md +++ b/cves/2024/CVE-2024-42640.md @@ -16,6 +16,7 @@ angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote c #### Github - https://github.com/KTN1990/CVE-2024-42640 - https://github.com/rvizx/CVE-2024-42640 +- https://github.com/rvzsec/CVE-2024-42640 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42640.yaml diff --git a/cves/2024/CVE-2024-4295.md b/cves/2024/CVE-2024-4295.md index 8b598248d9f..5e4afb4e511 100644 --- a/cves/2024/CVE-2024-4295.md +++ b/cves/2024/CVE-2024-4295.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/cve-2024/CVE-2024-4295-Poc - https://github.com/rtenacity/cve-docker-test +- https://github.com/TgHook/CVE-2024-4295-Poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4295.yaml diff --git a/cves/2024/CVE-2024-4322.md b/cves/2024/CVE-2024-4322.md index 78a000f7e11..e356dbdaadc 100644 --- a/cves/2024/CVE-2024-4322.md +++ b/cves/2024/CVE-2024-4322.md @@ -13,7 +13,7 @@ A path traversal vulnerability exists in the parisneo/lollms-webui application, No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/MJ-bin/POC_CVE-2024-4322 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4322.yaml diff --git a/cves/2024/CVE-2024-43400.md b/cves/2024/CVE-2024-43400.md index a8026a2cf6d..8649be6e277 100644 --- a/cves/2024/CVE-2024-43400.md +++ b/cves/2024/CVE-2024-43400.md @@ -20,5 +20,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/rain321654/yasa-cve-2024-43400-main1 diff --git a/cves/2024/CVE-2024-43425.md b/cves/2024/CVE-2024-43425.md index 68da3056071..856e42e3e19 100644 --- a/cves/2024/CVE-2024-43425.md +++ b/cves/2024/CVE-2024-43425.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/Snizi/Moodle-CVE-2024-43425-Exploit - https://github.com/aayush256-sys/Moodle-authenticated-RCE - https://github.com/aninfosec/CVE-2024-43425-Poc +- https://github.com/kazuya256/Moodle-authenticated-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43425.yaml diff --git a/cves/2024/CVE-2024-43441.md b/cves/2024/CVE-2024-43441.md index 55a29e60e44..3ceafe52c7e 100644 --- a/cves/2024/CVE-2024-43441.md +++ b/cves/2024/CVE-2024-43441.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43441.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/hugegraph/CVE-2024-43441 diff --git a/cves/2024/CVE-2024-43451.md b/cves/2024/CVE-2024-43451.md index 07895d50347..e819df11f71 100644 --- a/cves/2024/CVE-2024-43451.md +++ b/cves/2024/CVE-2024-43451.md @@ -50,4 +50,5 @@ No PoCs from references. #### Github - https://github.com/RonF98/CVE-2024-43451-POC +- https://github.com/razureink/cve-2024-43451-ntlm_hash_disclosure_reproduction diff --git a/cves/2024/CVE-2024-4367.md b/cves/2024/CVE-2024-4367.md index 55591e6c9c6..cf3023f8abb 100644 --- a/cves/2024/CVE-2024-4367.md +++ b/cves/2024/CVE-2024-4367.md @@ -39,6 +39,13 @@ A type check was missing when handling fonts in PDF.js, which would allow arbitr - https://github.com/rzte/pdf-exploit - https://github.com/s4vvysec/CVE-2024-4367-POC - https://github.com/snyk-labs/pdfjs-vuln-demo +- https://github.com/AnomalousVectors/cve-2024-4367-poc +- https://github.com/J1nKsC/CVE-2024-4367_test +- https://github.com/veronimo669/pdf.js-CVE-2024-4367 +- https://github.com/yuimamur/CVE-2024-4367-hands-on-01 #### ExploitDB - https://www.exploit-db.com/exploits/52273 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pdfjs/CVE-2024-4367 diff --git a/cves/2024/CVE-2024-44083.md b/cves/2024/CVE-2024-44083.md index ba1f4eac6f8..db86b33ef7c 100644 --- a/cves/2024/CVE-2024-44083.md +++ b/cves/2024/CVE-2024-44083.md @@ -14,5 +14,5 @@ ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that h - https://github.com/Azvanzed/IdaMeme #### Github -No PoCs found on GitHub currently. +- https://github.com/dynamicx64/CVE-2024-44083 diff --git a/cves/2024/CVE-2024-44349.md b/cves/2024/CVE-2024-44349.md index d5d25e03640..be10b2f4081 100644 --- a/cves/2024/CVE-2024-44349.md +++ b/cves/2024/CVE-2024-44349.md @@ -15,7 +15,7 @@ A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows - https://github.com/AndreaF17/PoC-CVE-2024-44349 #### Github -No PoCs found on GitHub currently. +- https://github.com/AndreaF17/PoC-CVE-2024-44349 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44349.yaml diff --git a/cves/2024/CVE-2024-44610.md b/cves/2024/CVE-2024-44610.md index 54573fe9f9e..6a1c94a1e63 100644 --- a/cves/2024/CVE-2024-44610.md +++ b/cves/2024/CVE-2024-44610.md @@ -15,5 +15,5 @@ PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 ar - https://github.com/BertoldVdb/PcanExploit #### Github -No PoCs found on GitHub currently. +- https://github.com/BertoldVdb/PcanExploit diff --git a/cves/2024/CVE-2024-44762.md b/cves/2024/CVE-2024-44762.md index 6e801aea19a..47b14342098 100644 --- a/cves/2024/CVE-2024-44762.md +++ b/cves/2024/CVE-2024-44762.md @@ -14,7 +14,7 @@ A discrepancy in error messages for invalid login attempts in Webmin Usermin v2. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/arbaaz29/CVE-2024-44762-webmin-userenum #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml diff --git a/cves/2024/CVE-2024-44812.md b/cves/2024/CVE-2024-44812.md index 7ccca0fc70b..d5ec1f468ea 100644 --- a/cves/2024/CVE-2024-44812.md +++ b/cves/2024/CVE-2024-44812.md @@ -14,5 +14,5 @@ SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attac - https://github.com/b1u3st0rm/CVE-2024-44812-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/b1u3st0rm/CVE-2024-44812-PoC diff --git a/cves/2024/CVE-2024-45195.md b/cves/2024/CVE-2024-45195.md index 786df6caac2..8d947010701 100644 --- a/cves/2024/CVE-2024-45195.md +++ b/cves/2024/CVE-2024-45195.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45195.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2024-45195 diff --git a/cves/2024/CVE-2024-45440.md b/cves/2024/CVE-2024-45440.md index e57debb41aa..5b59237366a 100644 --- a/cves/2024/CVE-2024-45440.md +++ b/cves/2024/CVE-2024-45440.md @@ -15,6 +15,7 @@ core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when err #### Github - https://github.com/w0r1i0g1ht/CVE-2024-45440 +- https://github.com/zoomdbz/CVE-2024-45440 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45440.yaml diff --git a/cves/2024/CVE-2024-45507.md b/cves/2024/CVE-2024-45507.md index d09430704f1..e64e8bc2927 100644 --- a/cves/2024/CVE-2024-45507.md +++ b/cves/2024/CVE-2024-45507.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45507.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2024-45507 diff --git a/cves/2024/CVE-2024-45590.md b/cves/2024/CVE-2024-45590.md index 414798299fc..5df248c4d6a 100644 --- a/cves/2024/CVE-2024-45590.md +++ b/cves/2024/CVE-2024-45590.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/dhruvik-git/CVE-2024-45590 +- https://github.com/Evillm/CVE-2024-45590-PoC diff --git a/cves/2024/CVE-2024-4577.md b/cves/2024/CVE-2024-4577.md index 646a03d2a29..40179e8943a 100644 --- a/cves/2024/CVE-2024-4577.md +++ b/cves/2024/CVE-2024-4577.md @@ -91,6 +91,12 @@ In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, w - https://github.com/wilss0n/CVE-2024-4577 - https://github.com/xcanwin/CVE-2024-4577-PHP-RCE - https://github.com/zomasec/CVE-2024-4577 +- https://github.com/0XFFFF-XD/CVE-2024-4577-PHP-CGI-RCE +- https://github.com/11whoami99/CVE-2024-4577 +- https://github.com/aavamin/cve-2024-4577 +- https://github.com/graphite-org/CVE-2024-4577 +- https://github.com/razureink/cve-2024-4577-phpcgi_rce_reproduction +- https://github.com/watchtowrlabs/CVE-2024-4577 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4577.yaml diff --git a/cves/2024/CVE-2024-46256.md b/cves/2024/CVE-2024-46256.md index 7608bcbcadd..0b2aac33c35 100644 --- a/cves/2024/CVE-2024-46256.md +++ b/cves/2024/CVE-2024-46256.md @@ -15,5 +15,7 @@ A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager - https://github.com/barttran2k/POC_CVE-2024-46256 #### Github -No PoCs found on GitHub currently. +- https://github.com/TranDongA3/Simulation_CVE-2024-46256 +- https://github.com/barttran2k/POC_CVE-2024-46256 +- https://github.com/kimtangker/CVE-2024-46256 diff --git a/cves/2024/CVE-2024-46278.md b/cves/2024/CVE-2024-46278.md index 469ae5e53d4..553fc4af530 100644 --- a/cves/2024/CVE-2024-46278.md +++ b/cves/2024/CVE-2024-46278.md @@ -15,7 +15,7 @@ Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management consol - https://github.com/ayato-shitomi/teedy_1.11_account-takeover #### Github -No PoCs found on GitHub currently. +- https://github.com/ayato-shitomi/CVE-2024-46278-teedy_1.11_account-takeover #### ExploitDB - https://www.exploit-db.com/exploits/52228 diff --git a/cves/2024/CVE-2024-46982.md b/cves/2024/CVE-2024-46982.md index c77000c1b4a..bdb16e8954b 100644 --- a/cves/2024/CVE-2024-46982.md +++ b/cves/2024/CVE-2024-46982.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/Lercas/CVE-2024-46982 - https://github.com/melmathari/CVE-2024-46982-NUCLEI +- https://github.com/samuel871211/CVE-2024-46982-Reproduction diff --git a/cves/2024/CVE-2024-46987.md b/cves/2024/CVE-2024-46987.md index c7f897fa689..9ebf61778a0 100644 --- a/cves/2024/CVE-2024-46987.md +++ b/cves/2024/CVE-2024-46987.md @@ -16,7 +16,15 @@ Camaleon CMS is a dynamic and advanced content management system based on Ruby o - https://securitylab.github.com/advisories/GHSL-2024-182_GHSL-2024-186_Camaleon_CMS #### Github -No PoCs found on GitHub currently. +- https://github.com/BLUEBERRYP1LL/CVE-2024-46987 +- https://github.com/Goultarde/CVE-2024-46987 +- https://github.com/Ik0nw/CVE-2024-46987 +- https://github.com/L1337Xi/CVE-2024-46987 +- https://github.com/Rival420/CVE-2024-46987 +- https://github.com/SuriyaBoon/HackTheBox-Facts +- https://github.com/advaitpathak21/CVE-2024-46987 +- https://github.com/bootstrapbool/msf-cve-2024-46987 +- https://github.com/sparrowhawk1113/Exploit-for-CVE-2024-46987 #### ExploitDB - https://www.exploit-db.com/exploits/52531 diff --git a/cves/2024/CVE-2024-47176.md b/cves/2024/CVE-2024-47176.md index f0f21ddb4c9..de41fd9072c 100644 --- a/cves/2024/CVE-2024-47176.md +++ b/cves/2024/CVE-2024-47176.md @@ -29,6 +29,8 @@ CUPS is a standards-based, open-source printing system, and `cups-browsed` conta - https://github.com/nma-io/CVE-2024-47176 - https://github.com/onhexgroup/Exploits-Review - https://github.com/workabhiwin09/CVE-2024-47176 +- https://github.com/Stickxx00/Cups-RCE-Exploit +- https://github.com/deancooreman/CVE-2024-47176 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-47176.yaml diff --git a/cves/2024/CVE-2024-47177.md b/cves/2024/CVE-2024-47177.md index f3fba7122fc..4b9fac33c50 100644 --- a/cves/2024/CVE-2024-47177.md +++ b/cves/2024/CVE-2024-47177.md @@ -21,3 +21,6 @@ #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cups-browsed/CVE-2024-47177 diff --git a/cves/2024/CVE-2024-48359.md b/cves/2024/CVE-2024-48359.md index 76e005521ab..1c5cb1e8cfd 100644 --- a/cves/2024/CVE-2024-48359.md +++ b/cves/2024/CVE-2024-48359.md @@ -14,5 +14,5 @@ Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerabi - https://github.com/OpenXP-Research/CVE-2024-48359 #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2024-48359 diff --git a/cves/2024/CVE-2024-48360.md b/cves/2024/CVE-2024-48360.md index 9fe3b93dfbf..2ae40991ec9 100644 --- a/cves/2024/CVE-2024-48360.md +++ b/cves/2024/CVE-2024-48360.md @@ -14,7 +14,7 @@ Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) vi - https://github.com/OpenXP-Research/CVE-2024-48360 #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2024-48360 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48360.yaml diff --git a/cves/2024/CVE-2024-48392.md b/cves/2024/CVE-2024-48392.md index 0e530975163..65a89185c0c 100644 --- a/cves/2024/CVE-2024-48392.md +++ b/cves/2024/CVE-2024-48392.md @@ -14,5 +14,5 @@ OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can - https://github.com/Renzusclarke/CVE-2024-48392-PoC/blob/main/poc.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/Renzusclarke/CVE-2024-48392-PoC diff --git a/cves/2024/CVE-2024-48510.md b/cves/2024/CVE-2024-48510.md index 0aa37fc782f..dde56fc24f0 100644 --- a/cves/2024/CVE-2024-48510.md +++ b/cves/2024/CVE-2024-48510.md @@ -14,5 +14,5 @@ Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/havertz2110/CVE-2024-48510-PoC diff --git a/cves/2024/CVE-2024-4879.md b/cves/2024/CVE-2024-4879.md index e244a4ceef0..012d57e8a64 100644 --- a/cves/2024/CVE-2024-4879.md +++ b/cves/2024/CVE-2024-4879.md @@ -23,6 +23,7 @@ ServiceNow has addressed an input validation vulnerability that was identified i - https://github.com/gh-ost00/CVE-2024-4879 - https://github.com/jdusane/CVE-2024-4879 - https://github.com/tequilasunsh1ne/CVE_2024_4879 +- https://github.com/GraySignal/CVE-2024-4879-ServiceNow #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4879.yaml diff --git a/cves/2024/CVE-2024-48910.md b/cves/2024/CVE-2024-48910.md index 6bb389e346f..080c01c8ace 100644 --- a/cves/2024/CVE-2024-48910.md +++ b/cves/2024/CVE-2024-48910.md @@ -14,5 +14,6 @@ DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathM No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Alex-Acero-Security/CVE-2024-48910-POC +- https://github.com/Mitchellzhou1/CVE-2024-48910-PoC diff --git a/cves/2024/CVE-2024-4898.md b/cves/2024/CVE-2024-4898.md index 5c9f44af45b..55e664fcadc 100644 --- a/cves/2024/CVE-2024-4898.md +++ b/cves/2024/CVE-2024-4898.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/cve-2024/CVE-2024-4898-Poc +- https://github.com/gh-ost00/CVE-2024-4898 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4898.yaml diff --git a/cves/2024/CVE-2024-48990.md b/cves/2024/CVE-2024-48990.md index 78a2f4cbfe8..465ae72f500 100644 --- a/cves/2024/CVE-2024-48990.md +++ b/cves/2024/CVE-2024-48990.md @@ -23,6 +23,17 @@ No PoCs from references. - https://github.com/pentestfunctions/CVE-2024-48990-PoC-Testing - https://github.com/ten-ops/CVE-2024-48990_needrestart - https://github.com/ProsteKubo/npm_poisoning_poc +- https://github.com/BLUEBERRYP1LL/CVE-2024-48990 +- https://github.com/Loaxert/CVE-2024-48990-PoC +- https://github.com/Mr-DJ/CVE-2024-48990 +- https://github.com/Serner77/CVE-2024-48990-Automatic-Exploit +- https://github.com/czeti/CVE-2024-48990_needrestart +- https://github.com/grecosamuel/CVE-2024-48990 +- https://github.com/kikechans/-Linux-PrivEsc-CVE-2024-48990 +- https://github.com/mladicstefan/CVE-2024-48990 +- https://github.com/o-sec/CVE-2024-48990 +- https://github.com/sobbing333/CVE-2024-48990-POC +- https://github.com/tahsinunluturk/needrestart-privesc-cve-2024-48990 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb diff --git a/cves/2024/CVE-2024-49039.md b/cves/2024/CVE-2024-49039.md index 036b3546009..407ac4b30d0 100644 --- a/cves/2024/CVE-2024-49039.md +++ b/cves/2024/CVE-2024-49039.md @@ -40,4 +40,5 @@ No PoCs from references. #### Github - https://github.com/je5442804/WPTaskScheduler_CVE-2024-49039 +- https://github.com/razureink/cve-2024-49039-task_scheduler_eop_reproduction diff --git a/cves/2024/CVE-2024-49113.md b/cves/2024/CVE-2024-49113.md index 653e8fdc6a4..deded970bf1 100644 --- a/cves/2024/CVE-2024-49113.md +++ b/cves/2024/CVE-2024-49113.md @@ -53,4 +53,6 @@ No PoCs from references. #### Github - https://github.com/0xMetr0/metasploit-ldapnightmare - https://github.com/SafeBreach-Labs/CVE-2024-49113 +- https://github.com/alphatin123/CVE-2024-49113 +- https://github.com/razureink/cve-2024-49113-ldap_nightmare_reproduction diff --git a/cves/2024/CVE-2024-49138.md b/cves/2024/CVE-2024-49138.md index 6412805781e..54a3f1f2843 100644 --- a/cves/2024/CVE-2024-49138.md +++ b/cves/2024/CVE-2024-49138.md @@ -57,6 +57,7 @@ Windows Common Log File System Driver Elevation of Privilege Vulnerability - https://github.com/MrAle98/CVE-2024-49138-POC - https://github.com/bananoname/CVE-2024-49138-POC - https://github.com/onixgod/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup +- https://github.com/Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected #### ExploitDB - https://www.exploit-db.com/exploits/52270 diff --git a/cves/2024/CVE-2024-4947.md b/cves/2024/CVE-2024-4947.md index 10053cbeb8a..5ef8bb22d69 100644 --- a/cves/2024/CVE-2024-4947.md +++ b/cves/2024/CVE-2024-4947.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/bjrjk/CVE-2024-4947 +- https://github.com/l1m3syc/CVE-2024-4947-PoC diff --git a/cves/2024/CVE-2024-4956.md b/cves/2024/CVE-2024-4956.md index ba85d1104d0..e03e5834d9f 100644 --- a/cves/2024/CVE-2024-4956.md +++ b/cves/2024/CVE-2024-4956.md @@ -29,9 +29,14 @@ Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker - https://github.com/thinhap/CVE-2024-4956-PoC - https://github.com/verylazytech/CVE-2024-4956 - https://github.com/xungzzz/CVE-2024-4956 +- https://github.com/GraySignal/CVE-2024-4956-Sonatype-Nexus-Repository-Manager +- https://github.com/art-of-defence/CVE-2024-4956 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4956.yaml #### ExploitDB - https://www.exploit-db.com/exploits/52101 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2024-4956 diff --git a/cves/2024/CVE-2024-49882.md b/cves/2024/CVE-2024-49882.md index b04687407a9..ccb16224bcd 100644 --- a/cves/2024/CVE-2024-49882.md +++ b/cves/2024/CVE-2024-49882.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:ext4: fix dou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiralBL0CK/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882 diff --git a/cves/2024/CVE-2024-50251.md b/cves/2024/CVE-2024-50251.md index 2d6bc1497e4..3119ef8c353 100644 --- a/cves/2024/CVE-2024-50251.md +++ b/cves/2024/CVE-2024-50251.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:netfilter: nf - https://github.com/slavin-ayu/CVE-2024-50251-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/slavin-ayu/CVE-2024-50251-PoC diff --git a/cves/2024/CVE-2024-50330.md b/cves/2024/CVE-2024-50330.md index 68a2c43ee00..7406fdfe8d3 100644 --- a/cves/2024/CVE-2024-50330.md +++ b/cves/2024/CVE-2024-50330.md @@ -14,5 +14,5 @@ SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2024-50330-ivanti_epm_sqli_reproduction diff --git a/cves/2024/CVE-2024-50379.md b/cves/2024/CVE-2024-50379.md index e7117aa29fe..8a9a0159985 100644 --- a/cves/2024/CVE-2024-50379.md +++ b/cves/2024/CVE-2024-50379.md @@ -31,4 +31,5 @@ No PoCs from references. - https://github.com/thunww/CVE-2024-50379 - https://github.com/v3153/CVE-2024-50379-POC - https://github.com/yiliufeng168/CVE-2024-50379-POC +- https://github.com/Lux-J/CVE-2024-50379-exp diff --git a/cves/2024/CVE-2024-50498.md b/cves/2024/CVE-2024-50498.md index 2eb9b1b34d9..748e403d5b0 100644 --- a/cves/2024/CVE-2024-50498.md +++ b/cves/2024/CVE-2024-50498.md @@ -17,6 +17,8 @@ No PoCs from references. - https://github.com/Nxploited/CVE-2024-50498 - https://github.com/RandomRobbieBF/CVE-2024-50498 - https://github.com/p0et08/CVE-2024-50498 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498 +- https://github.com/androidteacher/CVE-2024-50498-wpquery #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50498.yaml diff --git a/cves/2024/CVE-2024-50526.md b/cves/2024/CVE-2024-50526.md index 67595881da1..aede757e67a 100644 --- a/cves/2024/CVE-2024-50526.md +++ b/cves/2024/CVE-2024-50526.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50526 diff --git a/cves/2024/CVE-2024-50677.md b/cves/2024/CVE-2024-50677.md index f55f50777dd..1b054ffa349 100644 --- a/cves/2024/CVE-2024-50677.md +++ b/cves/2024/CVE-2024-50677.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attack - https://github.com/ZumiYumi/CVE-2024-50677 #### Github -No PoCs found on GitHub currently. +- https://github.com/ZumiYumi/CVE-2024-50677 diff --git a/cves/2024/CVE-2024-5082.md b/cves/2024/CVE-2024-5082.md index cb1aa68a787..70e9cdcadd8 100644 --- a/cves/2024/CVE-2024-5082.md +++ b/cves/2024/CVE-2024-5082.md @@ -13,7 +13,7 @@ A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repo - https://support.sonatype.com/hc/en-us/articles/30694125380755 #### Github -No PoCs found on GitHub currently. +- https://github.com/h4mr3r/CVE-2024-5082 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5082.yaml diff --git a/cves/2024/CVE-2024-5084.md b/cves/2024/CVE-2024-5084.md index f246960f798..7fda54150b9 100644 --- a/cves/2024/CVE-2024-5084.md +++ b/cves/2024/CVE-2024-5084.md @@ -22,6 +22,7 @@ No PoCs from references. - https://github.com/WOOOOONG/CVE-2024-5084 - https://github.com/amessedad/autoexploitGPT - https://github.com/k3lpi3b4nsh33/CVE-2024-5084 +- https://github.com/RedTeamBlueTeam/CVE-2024-5084-Red-Team #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5084.yaml diff --git a/cves/2024/CVE-2024-50848.md b/cves/2024/CVE-2024-50848.md index d8c29821839..a910e3ab89d 100644 --- a/cves/2024/CVE-2024-50848.md +++ b/cves/2024/CVE-2024-50848.md @@ -13,5 +13,5 @@ An XML External Entity (XXE) vulnerability in the Import object and Translation - https://github.com/Wh1teSnak3/CVE-2024-50848 #### Github -No PoCs found on GitHub currently. +- https://github.com/1mhr4b/CVE-2024-50848 diff --git a/cves/2024/CVE-2024-50849.md b/cves/2024/CVE-2024-50849.md index def43d4ddb2..2a416dd5d54 100644 --- a/cves/2024/CVE-2024-50849.md +++ b/cves/2024/CVE-2024-50849.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/Wh1teSnak3/CVE-2024-50849 +- https://github.com/1mhr4b/CVE-2024-50849 diff --git a/cves/2024/CVE-2024-50986.md b/cves/2024/CVE-2024-50986.md index 42093ea9040..8df43f45bcf 100644 --- a/cves/2024/CVE-2024-50986.md +++ b/cves/2024/CVE-2024-50986.md @@ -14,5 +14,5 @@ An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code - https://github.com/riftsandroses/CVE-2024-50986/ #### Github -No PoCs found on GitHub currently. +- https://github.com/riftsandroses/CVE-2024-50986 diff --git a/cves/2024/CVE-2024-51132.md b/cves/2024/CVE-2024-51132.md index 79d7629cb55..3ed1f94888f 100644 --- a/cves/2024/CVE-2024-51132.md +++ b/cves/2024/CVE-2024-51132.md @@ -14,5 +14,5 @@ An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows att - https://github.com/JAckLosingHeart/CVE-2024-51132-POC #### Github -No PoCs found on GitHub currently. +- https://github.com/JAckLosingHeart/CVE-2024-51132-POC diff --git a/cves/2024/CVE-2024-51378.md b/cves/2024/CVE-2024-51378.md index c6a360892db..23e0d623db3 100644 --- a/cves/2024/CVE-2024-51378.md +++ b/cves/2024/CVE-2024-51378.md @@ -18,6 +18,7 @@ getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) #### Github - https://github.com/qnole000/CVE-2024-51378 - https://github.com/refr4g/CVE-2024-51378 +- https://github.com/rimbadirgantara/CVE-2024-51378 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51378.yaml diff --git a/cves/2024/CVE-2024-51482.md b/cves/2024/CVE-2024-51482.md index c63a89354be..2404a9e4695 100644 --- a/cves/2024/CVE-2024-51482.md +++ b/cves/2024/CVE-2024-51482.md @@ -15,6 +15,12 @@ ZoneMinder is a free, open source closed-circuit television software application #### Github - https://github.com/BwithE/CVE-2024-51482 +- https://github.com/0xDaeras/CVE-2024-51482-POC +- https://github.com/BridgerAlderson/CVE-2024-51482 +- https://github.com/Ravi-lk/CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC +- https://github.com/c0gnit00/CVE-2024-51482 +- https://github.com/lnn0v4/sqli-hunter-CVE-2024-51482-PoC +- https://github.com/plur1bu5/CVE-2024-51482-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51482.yaml diff --git a/cves/2024/CVE-2024-51567.md b/cves/2024/CVE-2024-51567.md index 0d611f4bf87..1c6f4acd9f8 100644 --- a/cves/2024/CVE-2024-51567.md +++ b/cves/2024/CVE-2024-51567.md @@ -18,6 +18,7 @@ upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before #### Github - https://github.com/ajayalf/CVE-2024-51567 - https://github.com/thehash007/CVE-2024-51567-RCE-EXPLOIT +- https://github.com/KKDT12138/cve-2024-51567-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51567.yaml diff --git a/cves/2024/CVE-2024-51793.md b/cves/2024/CVE-2024-51793.md index 09cd7d32553..52256200373 100644 --- a/cves/2024/CVE-2024-51793.md +++ b/cves/2024/CVE-2024-51793.md @@ -16,3 +16,5 @@ No PoCs from references. #### Github - https://github.com/KTN1990/CVE-2024-51793 - https://github.com/Nxploited/CVE-2024-51793 +- https://github.com/0axz-tools/CVE-2024-51793 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-51793 diff --git a/cves/2024/CVE-2024-52005.md b/cves/2024/CVE-2024-52005.md index f023630153f..4a15dffae0d 100644 --- a/cves/2024/CVE-2024-52005.md +++ b/cves/2024/CVE-2024-52005.md @@ -22,5 +22,5 @@ Git is a source code management tool. When cloning from a server (or fetching, o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/andrewd-cg/cve-2024-52005-poc diff --git a/cves/2024/CVE-2024-52010.md b/cves/2024/CVE-2024-52010.md index 968fbbe34c4..e9e8e26347c 100644 --- a/cves/2024/CVE-2024-52010.md +++ b/cves/2024/CVE-2024-52010.md @@ -13,5 +13,5 @@ Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command in - https://github.com/tobychui/zoraxy/security/advisories/GHSA-7hpf-g48v-hw3j #### Github -No PoCs found on GitHub currently. +- https://github.com/iuds/-CVE-2024-52010- diff --git a/cves/2024/CVE-2024-5243.md b/cves/2024/CVE-2024-5243.md index 55542699877..37889393d99 100644 --- a/cves/2024/CVE-2024-5243.md +++ b/cves/2024/CVE-2024-5243.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/dilagluc/CVE_2024_5243 +- https://github.com/redpack-kr/CVE-2024-5243-pwn2own-toronto-2023 diff --git a/cves/2024/CVE-2024-5326.md b/cves/2024/CVE-2024-5326.md index 95ea4039f25..ec2eeaef61c 100644 --- a/cves/2024/CVE-2024-5326.md +++ b/cves/2024/CVE-2024-5326.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/cve-2024/CVE-2024-5326-Poc +- https://github.com/djayaGit/CVE-2024-5326-Poc diff --git a/cves/2024/CVE-2024-53375.md b/cves/2024/CVE-2024-53375.md index 38b3f0edea6..d11d1a3c262 100644 --- a/cves/2024/CVE-2024-53375.md +++ b/cves/2024/CVE-2024-53375.md @@ -14,5 +14,5 @@ An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link A - https://github.com/ThottySploity/CVE-2024-53375 #### Github -No PoCs found on GitHub currently. +- https://github.com/ThottySploity/CVE-2024-53375 diff --git a/cves/2024/CVE-2024-53376.md b/cves/2024/CVE-2024-53376.md index 314542f7e88..efb01cefd3e 100644 --- a/cves/2024/CVE-2024-53376.md +++ b/cves/2024/CVE-2024-53376.md @@ -15,5 +15,5 @@ CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary c - https://thottysploity.github.io/posts/cve-2024-53376 #### Github -No PoCs found on GitHub currently. +- https://github.com/ThottySploity/CVE-2024-53376 diff --git a/cves/2024/CVE-2024-53591.md b/cves/2024/CVE-2024-53591.md index 5958d325533..35d894b0f10 100644 --- a/cves/2024/CVE-2024-53591.md +++ b/cves/2024/CVE-2024-53591.md @@ -13,5 +13,5 @@ An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authe - https://github.com/aljoharasubaie/CVE-2024-53591 #### Github -No PoCs found on GitHub currently. +- https://github.com/aljoharasubaie/CVE-2024-53591 diff --git a/cves/2024/CVE-2024-53617.md b/cves/2024/CVE-2024-53617.md index 1f9131d4f20..b9632370573 100644 --- a/cves/2024/CVE-2024-53617.md +++ b/cves/2024/CVE-2024-53617.md @@ -13,5 +13,5 @@ A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows a - https://github.com/ii5mai1/CVE-2024-53617 #### Github -No PoCs found on GitHub currently. +- https://github.com/ii5mai1/CVE-2024-53617 diff --git a/cves/2024/CVE-2024-53677.md b/cves/2024/CVE-2024-53677.md index 861102b39ee..c710fa431c4 100644 --- a/cves/2024/CVE-2024-53677.md +++ b/cves/2024/CVE-2024-53677.md @@ -29,4 +29,6 @@ No PoCs from references. - https://github.com/saad0x1/Exploits - https://github.com/shishirghimir/CVE-2024-53677-Exploit - https://github.com/yangyanglo/CVE-2024-53677 +- https://github.com/hiteshpatra/CVE-2024-53677 +- https://github.com/seoyoung-kang/CVE-2024-53677 diff --git a/cves/2024/CVE-2024-53704.md b/cves/2024/CVE-2024-53704.md index 7691edbf92c..4c3530a5a66 100644 --- a/cves/2024/CVE-2024-53704.md +++ b/cves/2024/CVE-2024-53704.md @@ -17,6 +17,7 @@ No PoCs from references. #### Github - https://github.com/istagmbh/CVE-2024-53704 +- https://github.com/sfewer-r7/SonicSessionLeak #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53704.yaml diff --git a/cves/2024/CVE-2024-54152.md b/cves/2024/CVE-2024-54152.md index 5f934dd7186..92089ecb0de 100644 --- a/cves/2024/CVE-2024-54152.md +++ b/cves/2024/CVE-2024-54152.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/math-x-io/CVE-2024-54152-poc +- https://github.com/math-x-io/CVE-2024-54152 diff --git a/cves/2024/CVE-2024-54772.md b/cves/2024/CVE-2024-54772.md index c54f0e02b56..ed41118186f 100644 --- a/cves/2024/CVE-2024-54772.md +++ b/cves/2024/CVE-2024-54772.md @@ -16,4 +16,5 @@ An issue was discovered in the Winbox service of MikroTik RouterOS long-term rel - https://github.com/Seven11Eleven/CVE-2024-54772 - https://github.com/caster0x00/Sara - https://github.com/casterbyte/Sara +- https://github.com/deauther890/CVE-2024-54772 diff --git a/cves/2024/CVE-2024-54887.md b/cves/2024/CVE-2024-54887.md index 28bcdedd290..0db24c02b02 100644 --- a/cves/2024/CVE-2024-54887.md +++ b/cves/2024/CVE-2024-54887.md @@ -13,5 +13,5 @@ TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer ov - https://github.com/JBince/vulnerability-research/tree/main/CVE-2024-54887 #### Github -No PoCs found on GitHub currently. +- https://github.com/Gumbraise/CVE-2024-54887-PoC diff --git a/cves/2024/CVE-2024-55457.md b/cves/2024/CVE-2024-55457.md index 70561af5576..7b89d35aebe 100644 --- a/cves/2024/CVE-2024-55457.md +++ b/cves/2024/CVE-2024-55457.md @@ -13,7 +13,7 @@ MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/dow - https://github.com/h13nh04ng/CVE-2024-55457-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/h13nh04ng/CVE-2024-55457-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml diff --git a/cves/2024/CVE-2024-55557.md b/cves/2024/CVE-2024-55557.md index 02fac54367a..50fb3be192b 100644 --- a/cves/2024/CVE-2024-55557.md +++ b/cves/2024/CVE-2024-55557.md @@ -14,5 +14,5 @@ ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key fo - https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1 #### Github -No PoCs found on GitHub currently. +- https://github.com/partywavesec/CVE-2024-55557 diff --git a/cves/2024/CVE-2024-55968.md b/cves/2024/CVE-2024-55968.md index 976b0d87395..605d3e71755 100644 --- a/cves/2024/CVE-2024-55968.md +++ b/cves/2024/CVE-2024-55968.md @@ -14,5 +14,6 @@ An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystem - https://github.com/null-event/CVE-2024-55968 #### Github -No PoCs found on GitHub currently. +- https://github.com/Wi1DN00B/CVE-2024-55968 +- https://github.com/null-event/CVE-2024-55968 diff --git a/cves/2024/CVE-2024-56145.md b/cves/2024/CVE-2024-56145.md index 6de888e3987..8a395a88ed7 100644 --- a/cves/2024/CVE-2024-56145.md +++ b/cves/2024/CVE-2024-56145.md @@ -25,3 +25,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_ftp_template.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/craftcms/CVE-2024-56145 diff --git a/cves/2024/CVE-2024-56431.md b/cves/2024/CVE-2024-56431.md index b4690e8286e..6e6b3fd979f 100644 --- a/cves/2024/CVE-2024-56431.md +++ b/cves/2024/CVE-2024-56431.md @@ -16,5 +16,5 @@ oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has - https://www.openwall.com/lists/oss-security/2025/04/25/6 #### Github -No PoCs found on GitHub currently. +- https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC diff --git a/cves/2024/CVE-2024-56511.md b/cves/2024/CVE-2024-56511.md index 28bff254e19..1de775d4c6f 100644 --- a/cves/2024/CVE-2024-56511.md +++ b/cves/2024/CVE-2024-56511.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56511.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dataease/CVE-2024-56511 diff --git a/cves/2024/CVE-2024-56924.md b/cves/2024/CVE-2024-56924.md index fe140f1ffca..af0a7f29f93 100644 --- a/cves/2024/CVE-2024-56924.md +++ b/cves/2024/CVE-2024-56924.md @@ -13,5 +13,5 @@ A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking - https://github.com/ipratheep/CVE-2024-56924 #### Github -No PoCs found on GitHub currently. +- https://github.com/ipratheep/CVE-2024-56924 diff --git a/cves/2024/CVE-2024-57241.md b/cves/2024/CVE-2024-57241.md index 170e1bd8504..2402932621b 100644 --- a/cves/2024/CVE-2024-57241.md +++ b/cves/2024/CVE-2024-57241.md @@ -14,6 +14,7 @@ Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web applicatio #### Github - https://github.com/woshidaheike/CVE-2024-57241 +- https://github.com/hkl1x/CVE-2024-57241 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57241.yaml diff --git a/cves/2024/CVE-2024-57394.md b/cves/2024/CVE-2024-57394.md index eb0d548c29b..842228763ad 100644 --- a/cves/2024/CVE-2024-57394.md +++ b/cves/2024/CVE-2024-57394.md @@ -13,5 +13,5 @@ The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Managem - https://github.com/cwjchoi01/CVE-2024-57394 #### Github -No PoCs found on GitHub currently. +- https://github.com/cwjchoi01/CVE-2024-57394 diff --git a/cves/2024/CVE-2024-57429.md b/cves/2024/CVE-2024-57429.md index efaee00c328..5675e600340 100644 --- a/cves/2024/CVE-2024-57429.md +++ b/cves/2024/CVE-2024-57429.md @@ -13,5 +13,5 @@ A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function - https://github.com/ahrixia/CVE-2024-57429 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2024-57429 diff --git a/cves/2024/CVE-2024-57487.md b/cves/2024/CVE-2024-57487.md index 9bdeaedf086..201d96105e8 100644 --- a/cves/2024/CVE-2024-57487.md +++ b/cves/2024/CVE-2024-57487.md @@ -13,7 +13,7 @@ In Code-Projects Online Car Rental System 1.0, the file upload feature does not - https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488 #### Github -No PoCs found on GitHub currently. +- https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/carrental_fileupload_rce.rb diff --git a/cves/2024/CVE-2024-57522.md b/cves/2024/CVE-2024-57522.md index 2ad0846b339..745aa609a2c 100644 --- a/cves/2024/CVE-2024-57522.md +++ b/cves/2024/CVE-2024-57522.md @@ -13,5 +13,5 @@ SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross - https://github.com/HackWidMaddy/CVE-2024-57522 #### Github -No PoCs found on GitHub currently. +- https://github.com/HackWidMaddy/CVE-2024-57522 diff --git a/cves/2024/CVE-2024-57523.md b/cves/2024/CVE-2024-57523.md index 6ee4e09a32c..fd210a22bae 100644 --- a/cves/2024/CVE-2024-57523.md +++ b/cves/2024/CVE-2024-57523.md @@ -14,4 +14,5 @@ Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Mov #### Github - https://github.com/HackWidMaddy/CVE-2024-57522 +- https://github.com/HackWidMaddy/CVE-2024-57523. diff --git a/cves/2024/CVE-2024-57778.md b/cves/2024/CVE-2024-57778.md index 76f87856db0..8bde571c44b 100644 --- a/cves/2024/CVE-2024-57778.md +++ b/cves/2024/CVE-2024-57778.md @@ -13,5 +13,5 @@ An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote atta - https://github.com/KUK3N4N/CVE-2024-57778 #### Github -No PoCs found on GitHub currently. +- https://github.com/KUK3N4N/CVE-2024-57778 diff --git a/cves/2024/CVE-2024-58239.md b/cves/2024/CVE-2024-58239.md index 17d5b1c6c5f..8a3669eaed6 100644 --- a/cves/2024/CVE-2024-58239.md +++ b/cves/2024/CVE-2024-58239.md @@ -15,5 +15,6 @@ In the Linux kernel, the following vulnerability has been resolved:tls: stop rec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/khoatran107/cve-2024-58239 +- https://github.com/khoatran107/cve-2025-39682 diff --git a/cves/2024/CVE-2024-5932.md b/cves/2024/CVE-2024-5932.md index 247ca59ffde..c7215809f3a 100644 --- a/cves/2024/CVE-2024-5932.md +++ b/cves/2024/CVE-2024-5932.md @@ -21,6 +21,8 @@ The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is - https://github.com/OxLmahdi/cve-2024-5932 - https://github.com/hlc23/CVE-2024-5932-web-ui - https://github.com/tk-1001/PHPexploit_pack +- https://github.com/autom4il/CVE-2024-5932 +- https://github.com/nishant-kumar-5173/CVE-2024-5932 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5932.yaml diff --git a/cves/2024/CVE-2024-6232.md b/cves/2024/CVE-2024-6232.md index 4664b749ed7..5d69d06d3b6 100644 --- a/cves/2024/CVE-2024-6232.md +++ b/cves/2024/CVE-2024-6232.md @@ -18,5 +18,5 @@ There is a MEDIUM severity vulnerability affecting CPython.Regular expressions t No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers diff --git a/cves/2024/CVE-2024-6333.md b/cves/2024/CVE-2024-6333.md index a1f0f4543f3..9c2b6ea173b 100644 --- a/cves/2024/CVE-2024-6333.md +++ b/cves/2024/CVE-2024-6333.md @@ -46,5 +46,5 @@ Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products - http://seclists.org/fulldisclosure/2024/Oct/17 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xQRx/CVE-2024-6333 diff --git a/cves/2024/CVE-2024-6386.md b/cves/2024/CVE-2024-6386.md index 94928534748..be69ba8df0c 100644 --- a/cves/2024/CVE-2024-6386.md +++ b/cves/2024/CVE-2024-6386.md @@ -16,3 +16,4 @@ The WPML plugin for WordPress is vulnerable to Remote Code Execution in all vers #### Github - https://github.com/argendo/CVE-2024-6386 - https://github.com/vladko312/extras +- https://github.com/bananoname/CVE-2024-6386-WPML-SSTI diff --git a/cves/2024/CVE-2024-6387.md b/cves/2024/CVE-2024-6387.md index 18063f6383a..60e7a0d17ff 100644 --- a/cves/2024/CVE-2024-6387.md +++ b/cves/2024/CVE-2024-6387.md @@ -101,6 +101,14 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). - https://github.com/th3gokul/CVE-2024-6387 - https://github.com/thegenetic/CVE-2024-6387-exploit - https://github.com/xonoxitron/regreSSHion +- https://github.com/7etsuo/cve-2024-6387-poc +- https://github.com/HadesNull123/CVE-2024-6387_Check +- https://github.com/devarshishimpi/CVE-2024-6387-Check +- https://github.com/hasan8babiker/CVE-2024-6387 +- https://github.com/kaleth4/CVE-2024-6387 +- https://github.com/kinu404/CVE-2024-6387 +- https://github.com/particle99/CVE-2024-6387-POC +- https://github.com/vuducmanhno100-cloud/CVE-2024-6387 #### ExploitDB - https://www.exploit-db.com/exploits/52269 diff --git a/cves/2024/CVE-2024-6651.md b/cves/2024/CVE-2024-6651.md index 487fbdd516f..1f9f2b759b1 100644 --- a/cves/2024/CVE-2024-6651.md +++ b/cves/2024/CVE-2024-6651.md @@ -13,7 +13,7 @@ The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and e - https://wpscan.com/vulnerability/65e2c77d-09bd-4a44-81d9-d7a5db0e0f84/ #### Github -No PoCs found on GitHub currently. +- https://github.com/yup-Ivan/CVE-2024-6651 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6651.yaml diff --git a/cves/2024/CVE-2024-6769.md b/cves/2024/CVE-2024-6769.md index 7dfeb8afe7d..8ab7e5fee9f 100644 --- a/cves/2024/CVE-2024-6769.md +++ b/cves/2024/CVE-2024-6769.md @@ -19,4 +19,5 @@ A DLL Hijacking caused by drive remapping combined with a poisoning of the activ #### Github - https://github.com/Swayampadhy/CurveLock +- https://github.com/fortra/CVE-2024-6769 diff --git a/cves/2024/CVE-2024-6783.md b/cves/2024/CVE-2024-6783.md index 4b96110a987..c7603cdfcac 100644 --- a/cves/2024/CVE-2024-6783.md +++ b/cves/2024/CVE-2024-6783.md @@ -14,5 +14,5 @@ A vulnerability has been discovered in Vue, that allows an attacker to perform X - https://www.herodevs.com/vulnerability-directory/cve-2024-6783---vue-client-side-xss #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2024-6783 diff --git a/cves/2024/CVE-2024-7344.md b/cves/2024/CVE-2024-7344.md index b5718ea1d7a..3e89b4edd61 100644 --- a/cves/2024/CVE-2024-7344.md +++ b/cves/2024/CVE-2024-7344.md @@ -20,5 +20,5 @@ Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execut - https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/ #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2024-7344 diff --git a/cves/2024/CVE-2024-7593.md b/cves/2024/CVE-2024-7593.md index 9b36ed93597..64bed3c2a8f 100644 --- a/cves/2024/CVE-2024-7593.md +++ b/cves/2024/CVE-2024-7593.md @@ -26,6 +26,7 @@ No PoCs from references. - https://github.com/rxerium/CVE-2024-7593 - https://github.com/skyrowalker/CVE-2024-7593 - https://github.com/zxcod3/CVE-2024-7593 +- https://github.com/kernel364/CVE-2024-7593 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7593.yaml diff --git a/cves/2024/CVE-2024-7627.md b/cves/2024/CVE-2024-7627.md index f5c4c0756a2..cd30108b46f 100644 --- a/cves/2024/CVE-2024-7627.md +++ b/cves/2024/CVE-2024-7627.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/siunam321/CVE-2024-7627-PoC +- https://github.com/lkmn1/CVE-2024-7627 diff --git a/cves/2024/CVE-2024-7928.md b/cves/2024/CVE-2024-7928.md index c7442ca44bf..ef6d1cef26c 100644 --- a/cves/2024/CVE-2024-7928.md +++ b/cves/2024/CVE-2024-7928.md @@ -21,6 +21,7 @@ Eine problematische Schwachstelle wurde in FastAdmin bis 1.3.3.20220121 entdeckt - https://github.com/gh-ost00/CVE-2024-7928 - https://github.com/th3gokul/CVE-2024-7928 - https://github.com/wh6amiGit/CVE-2024-7928 +- https://github.com/diamorphine666/CVE-2024-7928 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7928.yaml diff --git a/cves/2024/CVE-2024-7954.md b/cves/2024/CVE-2024-7954.md index 09868630292..62982b656aa 100644 --- a/cves/2024/CVE-2024-7954.md +++ b/cves/2024/CVE-2024-7954.md @@ -24,6 +24,7 @@ The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vu - https://github.com/fa-rrel/CVE-2024-7954-RCE - https://github.com/gh-ost00/CVE-2024-7954-RCE - https://github.com/r0otk3r/CVE-2024-7954 +- https://github.com/ShivanshKuntal/Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7954.yaml diff --git a/cves/2024/CVE-2024-7965.md b/cves/2024/CVE-2024-7965.md index 6f1f36509df..e8a3db83322 100644 --- a/cves/2024/CVE-2024-7965.md +++ b/cves/2024/CVE-2024-7965.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/bi-zone/CVE-2024-7965 +- https://github.com/XueDugu/cve-2024-7965-poc diff --git a/cves/2024/CVE-2024-8068.md b/cves/2024/CVE-2024-8068.md index 14f08ea017f..d6a3f16f3aa 100644 --- a/cves/2024/CVE-2024-8068.md +++ b/cves/2024/CVE-2024-8068.md @@ -17,5 +17,5 @@ Privilege escalation to NetworkService Account access in Citrix Session Recordi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2024-8068-CVE-2024-8069 diff --git a/cves/2024/CVE-2024-8069.md b/cves/2024/CVE-2024-8069.md index 9032b14ab80..f9adbdbec5f 100644 --- a/cves/2024/CVE-2024-8069.md +++ b/cves/2024/CVE-2024-8069.md @@ -17,5 +17,5 @@ Limited remote code execution with privilege of a NetworkService Account access No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/mdiqbalahmad/cve-2024-8069-exp-Citrix-Virtual-Apps-XEN diff --git a/cves/2024/CVE-2024-8465.md b/cves/2024/CVE-2024-8465.md index 82d3814d56f..a9743d7b290 100644 --- a/cves/2024/CVE-2024-8465.md +++ b/cves/2024/CVE-2024-8465.md @@ -13,5 +13,6 @@ SQL injection vulnerability, by which an attacker could send a specially designe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/19melek19/TheMisfits-CVE-2024-8465-SQLi +- https://github.com/Sholls000/CVE-2024-8465-PoC diff --git a/cves/2024/CVE-2024-8503.md b/cves/2024/CVE-2024-8503.md index 764a8d792cc..dc79b89ca4a 100644 --- a/cves/2024/CVE-2024-8503.md +++ b/cves/2024/CVE-2024-8503.md @@ -14,6 +14,7 @@ An unauthenticated attacker can leverage a time-based SQL injection vulnerabilit #### Github - https://github.com/Chocapikk/CVE-2024-8504 +- https://github.com/Machine-farmer/vicidial-cve-2024-8503-blind-sqli-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8503.yaml diff --git a/cves/2024/CVE-2024-8856.md b/cves/2024/CVE-2024-8856.md index 45f5f18ad59..003f5741323 100644 --- a/cves/2024/CVE-2024-8856.md +++ b/cves/2024/CVE-2024-8856.md @@ -17,6 +17,7 @@ The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to - https://github.com/Jenderal92/CVE-2024-8856 - https://github.com/ubaii/CVE-2024-8856 - https://github.com/ubaydev/CVE-2024-8856 +- https://github.com/Evillm/CVE-2024-8856-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8856.yaml diff --git a/cves/2024/CVE-2024-9047.md b/cves/2024/CVE-2024-9047.md index d44fbd2b154..44815e378aa 100644 --- a/cves/2024/CVE-2024-9047.md +++ b/cves/2024/CVE-2024-9047.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/mr-won/CVE-2024-9047 - https://github.com/tpdlshdmlrkfmcla/CVE-2024-9047 - https://github.com/verylazytech/CVE-2024-9047 +- https://github.com/amirqusairy99/WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9047.yaml diff --git a/cves/2024/CVE-2024-9162.md b/cves/2024/CVE-2024-9162.md index 71c9ded606c..3a5b24664c0 100644 --- a/cves/2024/CVE-2024-9162.md +++ b/cves/2024/CVE-2024-9162.md @@ -14,4 +14,4 @@ The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arb - https://github.com/d0n601/CVE-2024-9162 #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2024-9162 diff --git a/cves/2024/CVE-2024-9264.md b/cves/2024/CVE-2024-9264.md index 14709709f1f..621d843ce54 100644 --- a/cves/2024/CVE-2024-9264.md +++ b/cves/2024/CVE-2024-9264.md @@ -29,6 +29,12 @@ No PoCs from references. - https://github.com/rvizx/CVE-2024-9264 - https://github.com/z3k0sec/CVE-2024-9264-RCE-Exploit - https://github.com/z3k0sec/File-Read-CVE-2024-9264 +- https://github.com/ozcanpng/CVE-2024-9264 +- https://github.com/rvzsec/CVE-2024-9264 +- https://github.com/yeonchoda/CVE-2024-9264 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9264.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 diff --git a/cves/2024/CVE-2024-9796.md b/cves/2024/CVE-2024-9796.md index 94e59d18540..3472661e46b 100644 --- a/cves/2024/CVE-2024-9796.md +++ b/cves/2024/CVE-2024-9796.md @@ -16,6 +16,7 @@ The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and esc - https://github.com/BwithE/CVE-2024-9796 - https://github.com/RandomRobbieBF/CVE-2024-9796 - https://github.com/viniciuslazzari/CVE-2024-9796 +- https://github.com/yup-Ivan/CVE-2024-9796 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9796.yaml diff --git a/cves/2024/CVE-2024-9932.md b/cves/2024/CVE-2024-9932.md index 0fcbe768120..a0dbe9f5b5a 100644 --- a/cves/2024/CVE-2024-9932.md +++ b/cves/2024/CVE-2024-9932.md @@ -16,3 +16,4 @@ No PoCs from references. #### Github - https://github.com/Nxploited/CVE-2024-9932-POC - https://github.com/RandomRobbieBF/CVE-2024-9932 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932 diff --git a/cves/2025/CVE-2025-0108.md b/cves/2025/CVE-2025-0108.md index c2ddb867bcb..e586c71bb6b 100644 --- a/cves/2025/CVE-2025-0108.md +++ b/cves/2025/CVE-2025-0108.md @@ -25,6 +25,8 @@ An authentication bypass in the Palo Alto Networks PAN-OS software enables an un - https://github.com/FOLKS-iwd/CVE-2025-0108-PoC - https://github.com/becrevex/CVE-2025-0108 - https://github.com/sohaibeb/CVE-2025-0108 +- https://github.com/iSee857/CVE-2025-0108-PoC +- https://github.com/kso4more/CVE-2025-0108 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0108.yaml diff --git a/cves/2025/CVE-2025-0184.md b/cves/2025/CVE-2025-0184.md index b2780c5ca1e..382b3125ea4 100644 --- a/cves/2025/CVE-2025-0184.md +++ b/cves/2025/CVE-2025-0184.md @@ -13,5 +13,5 @@ A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/m0d0ri205/wargame_Re-LS diff --git a/cves/2025/CVE-2025-0282.md b/cves/2025/CVE-2025-0282.md index 23d535c6179..86d0702be30 100644 --- a/cves/2025/CVE-2025-0282.md +++ b/cves/2025/CVE-2025-0282.md @@ -28,6 +28,9 @@ A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, - https://github.com/almanatra/CVE-2025-0282 - https://github.com/punitdarji/Ivanti-CVE-2025-0282 - https://github.com/watchtowrlabs/CVE-2025-0282 +- https://github.com/gmh5225/Blackash-CVE-2025-0282 +- https://github.com/razureink/cve-2025-0282-ivanti_rce_reproduction +- https://github.com/sfewer-r7/CVE-2025-0282 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0282.yaml diff --git a/cves/2025/CVE-2025-0288.md b/cves/2025/CVE-2025-0288.md index 86e06e49d48..9fdb39f967c 100644 --- a/cves/2025/CVE-2025-0288.md +++ b/cves/2025/CVE-2025-0288.md @@ -20,4 +20,5 @@ No PoCs from references. #### Github - https://github.com/barhen12/CVE-2025-0288 +- https://github.com/MeisamEb/CVE-2025-0288 diff --git a/cves/2025/CVE-2025-0401.md b/cves/2025/CVE-2025-0401.md index fe82c0b9145..9006b951564 100644 --- a/cves/2025/CVE-2025-0401.md +++ b/cves/2025/CVE-2025-0401.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/CyberSecurityUP/CVE-2025-0401 - https://github.com/Darabium/Gombruc +- https://github.com/JoasASantos/CVE-2025-0401 diff --git a/cves/2025/CVE-2025-0890.md b/cves/2025/CVE-2025-0890.md index c551a2bcd9a..aec7961eb48 100644 --- a/cves/2025/CVE-2025-0890.md +++ b/cves/2025/CVE-2025-0890.md @@ -13,5 +13,5 @@ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Danyw24/zyxel-p870hn-hardware-hacking diff --git a/cves/2025/CVE-2025-10377.md b/cves/2025/CVE-2025-10377.md index b2b727644c7..7a45d0c6e63 100644 --- a/cves/2025/CVE-2025-10377.md +++ b/cves/2025/CVE-2025-10377.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/NagisaYumaa/Cross-Site-Request-Forgery-CSRF-in-Plugin-System-Dashboard-Funtion-sd_toggle_logs +- https://github.com/NagisaYumaa/CVE-2025-10377 diff --git a/cves/2025/CVE-2025-1094.md b/cves/2025/CVE-2025-1094.md index ed57ad10af2..4411e535248 100644 --- a/cves/2025/CVE-2025-1094.md +++ b/cves/2025/CVE-2025-1094.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/aninfosec/CVE-2025-1094 - https://github.com/ishwardeepp/CVE-2025-1094-PoC-Postgre-SQLi - https://github.com/soltanali0/CVE-2025-1094-Exploit +- https://github.com/TranDongA3/POC-CVE-2025-1094 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb diff --git a/cves/2025/CVE-2025-10951.md b/cves/2025/CVE-2025-10951.md index a800684a6c4..81342f4317f 100644 --- a/cves/2025/CVE-2025-10951.md +++ b/cves/2025/CVE-2025-10951.md @@ -14,5 +14,5 @@ Es wurde eine Schwachstelle in geyang ml-logger up to acf255bade5be6ad88d90735c8 - https://github.com/geyang/ml-logger/issues/73 #### Github -No PoCs found on GitHub currently. +- https://github.com/1amUnvalid/CVE-2025-10951 diff --git a/cves/2025/CVE-2025-1338.md b/cves/2025/CVE-2025-1338.md index 20de52a7ab3..d93ef5611bb 100644 --- a/cves/2025/CVE-2025-1338.md +++ b/cves/2025/CVE-2025-1338.md @@ -15,7 +15,7 @@ In NUUO Camera bis 20250203 wurde eine Schwachstelle ausgemacht. Sie wurde als k No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/jxcaxtc/CVE-2025-1338 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1338.yaml diff --git a/cves/2025/CVE-2025-1461.md b/cves/2025/CVE-2025-1461.md index ca0eb259912..c6f1d5b5308 100644 --- a/cves/2025/CVE-2025-1461.md +++ b/cves/2025/CVE-2025-1461.md @@ -15,4 +15,5 @@ Improper neutralization of the value of the 'eventMoreText' property of the 'VCa #### Github - https://github.com/hroacastillo/grupo05_ethical_hacking +- https://github.com/neverendingsupport/nes-vuetify-cve-2025-1461 diff --git a/cves/2025/CVE-2025-14847.md b/cves/2025/CVE-2025-14847.md index ce1bbc2156c..4e9215abbb6 100644 --- a/cves/2025/CVE-2025-14847.md +++ b/cves/2025/CVE-2025-14847.md @@ -23,6 +23,26 @@ No PoCs from references. #### Github - https://github.com/sakthivel10q/CVE-2025-14847 +- https://github.com/0xBlackash/CVE-2025-14847 +- https://github.com/CadGoose/MongoBleed-CVE-2025-14847-Fully-Automated-scanner +- https://github.com/FurkanKAYAPINAR/CVE-2025-14847-MongoBleed-Exploit +- https://github.com/NoNameError/MongoBLEED---CVE-2025-14847-POC- +- https://github.com/ProbiusOfficial/CVE-2025-14847 +- https://github.com/Rishi-kaul/CVE-2025-14847-MongoBleed +- https://github.com/Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847 +- https://github.com/alexcyberx/CVE-2025-14847_Expolit +- https://github.com/codeb0ssx/CVE-2025-14847-PoC +- https://github.com/cybertechajju/CVE-2025-14847_Expolit +- https://github.com/franksec42/mongobleed-exploit-CVE-2025-14847 +- https://github.com/im-hanzou/mongobleed +- https://github.com/joshuavanderpoll/CVE-2025-14847 +- https://github.com/kuyrathdaro/cve-2025-14847 +- https://github.com/peakcyber-security/CVE-2025-14847 +- https://github.com/saereya/CVE-2025-14847---MongoBleed +- https://github.com/sahar042/CVE-2025-14847 +- https://github.com/shokribardiya/CVE-2025-14847-mongobleed +- https://github.com/vfa-tuannt/CVE-2025-14847 +- https://github.com/waheeb71/CVE-2025-14847 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-14847.yaml diff --git a/cves/2025/CVE-2025-1550.md b/cves/2025/CVE-2025-1550.md index 68a786d030c..eb3b4cc24b4 100644 --- a/cves/2025/CVE-2025-1550.md +++ b/cves/2025/CVE-2025-1550.md @@ -14,7 +14,7 @@ The Keras Model.load_model function permits arbitrary code execution, even with - https://towerofhanoi.it/writeups/cve-2025-1550/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ChCh0i/cve-2025-1550 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-1550.yaml diff --git a/cves/2025/CVE-2025-1716.md b/cves/2025/CVE-2025-1716.md index c1ade4ae65e..66160d9170f 100644 --- a/cves/2025/CVE-2025-1716.md +++ b/cves/2025/CVE-2025-1716.md @@ -14,5 +14,6 @@ picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker c - https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716 #### Github -No PoCs found on GitHub currently. +- https://github.com/danigil/cve-2025-1716 +- https://github.com/xp3s/poc_CVE-2025-1716 diff --git a/cves/2025/CVE-2025-1738.md b/cves/2025/CVE-2025-1738.md index 3a151055485..fd19c391437 100644 --- a/cves/2025/CVE-2025-1738.md +++ b/cves/2025/CVE-2025-1738.md @@ -13,5 +13,5 @@ A Password Transmitted over Query String vulnerability has been found in Trivisi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/n0n4m3x41/CVE-2025-1738 diff --git a/cves/2025/CVE-2025-1739.md b/cves/2025/CVE-2025-1739.md index 40d4d97f466..c58c4455086 100644 --- a/cves/2025/CVE-2025-1739.md +++ b/cves/2025/CVE-2025-1739.md @@ -13,5 +13,5 @@ An Authentication Bypass vulnerability has been found in Trivision Camera NC227W No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/n0n4m3x41/CVE-2025-1739 diff --git a/cves/2025/CVE-2025-1913.md b/cves/2025/CVE-2025-1913.md index d28f65268f4..22bbe016732 100644 --- a/cves/2025/CVE-2025-1913.md +++ b/cves/2025/CVE-2025-1913.md @@ -13,4 +13,4 @@ The Product Import Export for WooCommerce – Import Export Product CSV Suite pl No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/S0haib518-KSA/CVE-2025-1913-PoC diff --git a/cves/2025/CVE-2025-1974.md b/cves/2025/CVE-2025-1974.md index 11674b158b8..b21766ba280 100644 --- a/cves/2025/CVE-2025-1974.md +++ b/cves/2025/CVE-2025-1974.md @@ -34,6 +34,10 @@ No PoCs from references. - https://github.com/yoshino-s/CVE-2025-1974 - https://github.com/zulloper/CVE-2025-1974 - https://github.com/zwxxb/CVE-2025-1974 +- https://github.com/BoianEduard/CVE-2025-1974 +- https://github.com/I3r1h0n/IngressNightterror +- https://github.com/gunyakit/CVE-2025-1974-PoC-exploit +- https://github.com/zsxen/CVE-2025-1974 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1974.yaml @@ -41,3 +45,6 @@ No PoCs from references. #### ExploitDB - https://www.exploit-db.com/exploits/52338 - https://www.exploit-db.com/exploits/52475 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ingress-nginx/CVE-2025-1974 diff --git a/cves/2025/CVE-2025-2011.md b/cves/2025/CVE-2025-2011.md index 83f32b082c6..919496698a0 100644 --- a/cves/2025/CVE-2025-2011.md +++ b/cves/2025/CVE-2025-2011.md @@ -13,7 +13,9 @@ The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to gen - https://github.com/datagoboom/CVE-2025-2011 #### Github -No PoCs found on GitHub currently. +- https://github.com/X3RX3SSec/CVE-2025-2011 +- https://github.com/datagoboom/CVE-2025-2011 +- https://github.com/zsy107u/CVE-2025-2011-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2011.yaml diff --git a/cves/2025/CVE-2025-20260.md b/cves/2025/CVE-2025-20260.md index c71a15e5a93..d35854d9323 100644 --- a/cves/2025/CVE-2025-20260.md +++ b/cves/2025/CVE-2025-20260.md @@ -22,5 +22,6 @@ A vulnerability in the PDF scanning processes of ClamAV could allow an unauthent No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Alex-Acero-Security/CVE-2025-20260-POC +- https://github.com/keyuraghao/CVE-2025-20260 diff --git a/cves/2025/CVE-2025-20282.md b/cves/2025/CVE-2025-20282.md index 3c4baee58cb..45a46eaaa85 100644 --- a/cves/2025/CVE-2025-20282.md +++ b/cves/2025/CVE-2025-20282.md @@ -16,7 +16,7 @@ This vulnerability is due a lack of file validation checks that would prevent up No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/skadevare/CiscoISE-CVE-2025-20282-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20282.yaml diff --git a/cves/2025/CVE-2025-21298.md b/cves/2025/CVE-2025-21298.md index 16ba0848a2e..c1fa7d4d4f9 100644 --- a/cves/2025/CVE-2025-21298.md +++ b/cves/2025/CVE-2025-21298.md @@ -54,4 +54,7 @@ No PoCs from references. - https://github.com/Dit-Developers/CVE-2025-21298 - https://github.com/fy-poc/full-poc-CVE-2025_21298 - https://github.com/ynwarcs/CVE-2025-21298 +- https://github.com/Arkha-Corvus/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- +- https://github.com/C-G-creator/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298 +- https://github.com/TheBl4ckPh4nt0m/CVE-2025-21298 diff --git a/cves/2025/CVE-2025-21333.md b/cves/2025/CVE-2025-21333.md index 3deaa5184cc..6f27871eec6 100644 --- a/cves/2025/CVE-2025-21333.md +++ b/cves/2025/CVE-2025-21333.md @@ -29,6 +29,8 @@ No PoCs from references. #### Github - https://github.com/MrAle98/CVE-2025-21333-POC - https://github.com/aleongx/KQL_sentinel_CVE-2025-21333 +- https://github.com/nu1lptr0/CVE-2025-21333 +- https://github.com/uname1able/CVE-2025-21333 #### ExploitDB - https://www.exploit-db.com/exploits/52436 diff --git a/cves/2025/CVE-2025-21420.md b/cves/2025/CVE-2025-21420.md index 595972ed11b..a1edb9aa84c 100644 --- a/cves/2025/CVE-2025-21420.md +++ b/cves/2025/CVE-2025-21420.md @@ -45,4 +45,5 @@ No PoCs from references. #### Github - https://github.com/moiz-2x/CVE-2025-21420_POC +- https://github.com/Dmitri131313/CVE-2025-21420-PoC diff --git a/cves/2025/CVE-2025-21479.md b/cves/2025/CVE-2025-21479.md index 3bf5f2349c9..9d2efd3c203 100644 --- a/cves/2025/CVE-2025-21479.md +++ b/cves/2025/CVE-2025-21479.md @@ -92,4 +92,9 @@ No PoCs from references. - https://github.com/zhuowei/cheese - https://github.com/Type010/cve-2025-21479-iqoo11pro - https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 +- https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479 +- https://github.com/Qingizi7/cve-2025-21479_iqooneo8 +- https://github.com/ma4the/omae-wa-cheese-da +- https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 +- https://github.com/sarabpal-dev/cheese-cake diff --git a/cves/2025/CVE-2025-21756.md b/cves/2025/CVE-2025-21756.md index d05a44a81cc..9b6bc23da7a 100644 --- a/cves/2025/CVE-2025-21756.md +++ b/cves/2025/CVE-2025-21756.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/hoefler02/CVE-2025-21756 - https://github.com/khoatran107/cve-2025-21756 - https://github.com/volticks/CVE-2025-21692-poc +- https://github.com/h3raklez/CVE-2025-21756 diff --git a/cves/2025/CVE-2025-22457.md b/cves/2025/CVE-2025-22457.md index 51c7e7bb3ed..a35cfb4ead1 100644 --- a/cves/2025/CVE-2025-22457.md +++ b/cves/2025/CVE-2025-22457.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/TRone-ux/CVE-2025-22457 - https://github.com/securekomodo/CVE-2025-22457 - https://github.com/sfewer-r7/CVE-2025-22457 +- https://github.com/benmevic/cve-2025-22457 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-22457.yaml diff --git a/cves/2025/CVE-2025-22953.md b/cves/2025/CVE-2025-22953.md index ca928e36e5e..a9eaf3220a9 100644 --- a/cves/2025/CVE-2025-22953.md +++ b/cves/2025/CVE-2025-22953.md @@ -13,5 +13,5 @@ A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches availa - https://github.com/maliktawfiq/CVE-2025-22953 #### Github -No PoCs found on GitHub currently. +- https://github.com/maliktawfiq/CVE-2025-22953 diff --git a/cves/2025/CVE-2025-22968.md b/cves/2025/CVE-2025-22968.md index 2824be1a26f..d60aa419830 100644 --- a/cves/2025/CVE-2025-22968.md +++ b/cves/2025/CVE-2025-22968.md @@ -14,5 +14,5 @@ An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitra - https://github.com/CRUNZEX/CVE-DLINK-LTE #### Github -No PoCs found on GitHub currently. +- https://github.com/CRUNZEX/CVE-2025-22968 diff --git a/cves/2025/CVE-2025-2304.md b/cves/2025/CVE-2025-2304.md index 239e3fe4f2c..3c6eafc50f9 100644 --- a/cves/2025/CVE-2025-2304.md +++ b/cves/2025/CVE-2025-2304.md @@ -13,5 +13,21 @@ A Privilege Escalation through a Mass Assignment exists in Camaleon CMSWhen a us No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0xk4rth1/CVE-2025-2304 +- https://github.com/7acini/CVE-2025-2304-CamaleonCMS-PoC +- https://github.com/Alien0ne/CVE-2025-2304 +- https://github.com/AzureADTrent/CVE-2025-2304_POC +- https://github.com/CsuriBird/CVE-2025-2304 +- https://github.com/Jeanback1/CVE-2025-2304-exploit +- https://github.com/PwnManjaro/CVE-2025-2304 +- https://github.com/askiesec/CVE-2025-2304-POC +- https://github.com/d3vn0mi/CVE-2025-2304-POC +- https://github.com/estebanzarate/CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC +- https://github.com/innocentx0/CVE-2025-2304-POC +- https://github.com/lil0xplorer/CVE-2025-2304-PoC +- https://github.com/mattiapertusati/htb-facts +- https://github.com/predyy/CVE-2025-2304 +- https://github.com/sparrowhawk1113/Exploit-for-CVE-2025-2304 +- https://github.com/the8frust/CVE-2025-2304 +- https://github.com/whiteov3rflow/CVE-2025-2304-POC diff --git a/cves/2025/CVE-2025-23048.md b/cves/2025/CVE-2025-23048.md index 2ce2ae3f0ef..e1b0ade4e7e 100644 --- a/cves/2025/CVE-2025-23048.md +++ b/cves/2025/CVE-2025-23048.md @@ -13,5 +13,5 @@ In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/absholi7ly/CVE-2025-23048-POC diff --git a/cves/2025/CVE-2025-23061.md b/cves/2025/CVE-2025-23061.md index 03adb851c47..b954b0f84f2 100644 --- a/cves/2025/CVE-2025-23061.md +++ b/cves/2025/CVE-2025-23061.md @@ -15,7 +15,7 @@ Mongoose before 8.9.5 can improperly use a nested $where filter with a populate( No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/open-flaw/CVE-2025-23061 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23061.yaml diff --git a/cves/2025/CVE-2025-23247.md b/cves/2025/CVE-2025-23247.md index e3d1edf9b11..3615c6d8cbd 100644 --- a/cves/2025/CVE-2025-23247.md +++ b/cves/2025/CVE-2025-23247.md @@ -13,5 +13,5 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151 #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiralBL0CK/CVE-2025-23247 diff --git a/cves/2025/CVE-2025-23419.md b/cves/2025/CVE-2025-23419.md index bf34ab5cbdc..c792787bfb5 100644 --- a/cves/2025/CVE-2025-23419.md +++ b/cves/2025/CVE-2025-23419.md @@ -15,5 +15,5 @@ When multiple server blocks are configured to share the same IP address and port No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/xitexploiter96-dot/CVE-2025-23419 diff --git a/cves/2025/CVE-2025-23968.md b/cves/2025/CVE-2025-23968.md index d0e8cbbc858..c24faa53489 100644 --- a/cves/2025/CVE-2025-23968.md +++ b/cves/2025/CVE-2025-23968.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in WPCenter AiBud - https://ryankozak.com/posts/cve-2025-23968/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-23968 diff --git a/cves/2025/CVE-2025-24000.md b/cves/2025/CVE-2025-24000.md index a34abdaf871..a3cf7e126d4 100644 --- a/cves/2025/CVE-2025-24000.md +++ b/cves/2025/CVE-2025-24000.md @@ -13,4 +13,4 @@ Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExpe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/bsdrip/CVE-2025-24000-exploit diff --git a/cves/2025/CVE-2025-24054.md b/cves/2025/CVE-2025-24054.md index 32517e2f54b..3b9d8d35b08 100644 --- a/cves/2025/CVE-2025-24054.md +++ b/cves/2025/CVE-2025-24054.md @@ -58,6 +58,11 @@ External control of file name or path in Windows NTLM allows an unauthorized att - https://github.com/moften/CVE-2025-24054 - https://github.com/pswalia2u/CVE-2025-24071_POC - https://github.com/xigney/CVE-2025-24054_PoC +- https://github.com/Fomovet/cve-2025-24054 +- https://github.com/SecurityLayer404/CVE-2025-24054-24071---Metasploit-Module +- https://github.com/Untouchable17/CVE-2025-24054 +- https://github.com/Wind010/CVE-2025-24054_PoC +- https://github.com/simantchaudhari/CVE-2025-24054-PoC #### ExploitDB - https://www.exploit-db.com/exploits/52480 diff --git a/cves/2025/CVE-2025-24071.md b/cves/2025/CVE-2025-24071.md index bee591039ce..c80e084c751 100644 --- a/cves/2025/CVE-2025-24071.md +++ b/cves/2025/CVE-2025-24071.md @@ -63,6 +63,12 @@ Exposure of sensitive information to an unauthorized actor in Windows File Explo - https://github.com/pswalia2u/CVE-2025-24071_POC - https://github.com/rubbxalc/CVE-2025-24071 - https://github.com/xigney/CVE-2025-24054_PoC +- https://github.com/Abdelrahman0Sayed/CVE-2025-24071 +- https://github.com/Fomovet/cve-2025-24071 +- https://github.com/ephunter/CVE-2025-24071-Exploit +- https://github.com/hyperchk/CVE-2025-24071-POC +- https://github.com/kaIIsyms/CVE-2025-24071 +- https://github.com/zbs54/Blackash-CVE-2025-24071 #### ExploitDB - https://www.exploit-db.com/exploits/52325 diff --git a/cves/2025/CVE-2025-24132.md b/cves/2025/CVE-2025-24132.md index 97793f241d0..6c2da7bf447 100644 --- a/cves/2025/CVE-2025-24132.md +++ b/cves/2025/CVE-2025-24132.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/cesco345/Airplay-CVE - https://github.com/ekomsSavior/AirBorne-PoC +- https://github.com/TheGamingGallifreyan/LiberationPlay-CVE-2025-24132-AirBourne-POC diff --git a/cves/2025/CVE-2025-24367.md b/cves/2025/CVE-2025-24367.md index 2b60cf2d998..01463eadc6a 100644 --- a/cves/2025/CVE-2025-24367.md +++ b/cves/2025/CVE-2025-24367.md @@ -13,7 +13,13 @@ Cacti is an open source performance and fault management framework. An authentic - https://github.com/Cacti/cacti/security/advisories/GHSA-fxrq-fr7h-9rqq #### Github -No PoCs found on GitHub currently. +- https://github.com/ShoshinMaster/CVE-2025-24367 +- https://github.com/SoftAndoWetto/CVE-2025-24367-PoC-Cacti +- https://github.com/TheCyberGeek/CVE-2025-24367-Cacti-PoC +- https://github.com/dantedansh/CVE-2025-24367-Cacti-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_graph_template_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2025-24367 diff --git a/cves/2025/CVE-2025-24472.md b/cves/2025/CVE-2025-24472.md index 032211a125f..9147f34870f 100644 --- a/cves/2025/CVE-2025-24472.md +++ b/cves/2025/CVE-2025-24472.md @@ -16,5 +16,5 @@ An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE- No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2025-24472-fortinet_authbypass_reproduction diff --git a/cves/2025/CVE-2025-24801.md b/cves/2025/CVE-2025-24801.md index f47e3bd65f6..7949f147d96 100644 --- a/cves/2025/CVE-2025-24801.md +++ b/cves/2025/CVE-2025-24801.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/fatkz/CVE-2025-24801 - https://github.com/r1beirin/CVE-2025-24801 +- https://github.com/r1beirin/Exploit-CVE-2025-24801 diff --git a/cves/2025/CVE-2025-24813.md b/cves/2025/CVE-2025-24813.md index 408bfb7e77c..c860cdd66be 100644 --- a/cves/2025/CVE-2025-24813.md +++ b/cves/2025/CVE-2025-24813.md @@ -63,6 +63,18 @@ Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution a - https://github.com/s1lentf00thold/ZoneMinder-v1.29.0 - https://github.com/leonzhao7/jvuln-platform - https://github.com/mrzero-cool/cve-poc-search +- https://github.com/Arthurabriel/POC-CVE-2025-24813 +- https://github.com/Dhananjayasj/CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE- +- https://github.com/EQSTLab/CVE-2025-24813 +- https://github.com/Loufa0/CVE-2025-24813 +- https://github.com/Mattb709/CVE-2025-24813-Scanner +- https://github.com/NamelessSaint8/CVE-2025-24813-POC +- https://github.com/ThHardvester/CVE-2025-24813 +- https://github.com/gunyakit/CVE-2025-24813-PoC-exploit +- https://github.com/pirenga/CVE-2025-24813 +- https://github.com/qzy0x/cve-2025-24813_poc +- https://github.com/seahcy/CVE-2025-24813 +- https://github.com/yuzuki-ayanami/CVE-2025-24813 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24813.yaml @@ -72,3 +84,6 @@ Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution a #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_partial_put_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2025-24813 diff --git a/cves/2025/CVE-2025-24893.md b/cves/2025/CVE-2025-24893.md index 3808ef7352a..b0f6fef3745 100644 --- a/cves/2025/CVE-2025-24893.md +++ b/cves/2025/CVE-2025-24893.md @@ -44,6 +44,22 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat - https://github.com/torjan0/xwiki_solrsearch-rce-exploit - https://github.com/x0da6h/POC-for-CVE-2025-24893 - https://github.com/zs1n/CVE-2025-24893 +- https://github.com/0xDTC/XWiki-Platform-RCE-CVE-2025-24893 +- https://github.com/80Ottanta80/CVE-2025-24893-PoC +- https://github.com/BreakingRohit/CVE-2025-24893-PoC +- https://github.com/Fomovet/cve-2025-24893 +- https://github.com/TomKingori/xwiki-cve-2025-24893-exploit +- https://github.com/Y2F05p2w/CVE-2025-24893 +- https://github.com/Yukik4z3/CVE-2025-24893 +- https://github.com/endusdksla/xwiki-cve-2025-24893 +- https://github.com/gmh5225/CVE-2025-24893-RCE-PoC +- https://github.com/gotr00t0day/CVE-2025-24893 +- https://github.com/hasecto/CVE-2025-24893 +- https://github.com/kimtangker/CVE-2025-24893 +- https://github.com/nohack1212/CVE-2025-24893- +- https://github.com/o0wo0o/CVE-2025-24893_Shell +- https://github.com/rippsec/CVE-2025-24893-XWiki-SSTI-RCE +- https://github.com/vasilysaint/CVE-2025-24893 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml diff --git a/cves/2025/CVE-2025-24963.md b/cves/2025/CVE-2025-24963.md index 931e00ce058..4f678b3bab4 100644 --- a/cves/2025/CVE-2025-24963.md +++ b/cves/2025/CVE-2025-24963.md @@ -15,6 +15,7 @@ Vitest is a testing framework powered by Vite. The `__screenshot-error` handler #### Github - https://github.com/0xdeviner/CVE-2025-24963 +- https://github.com/hiteshpatra/CVE-2025-24963 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24963.yaml diff --git a/cves/2025/CVE-2025-25200.md b/cves/2025/CVE-2025-25200.md index 27bb5d7a95b..206bb2c65bb 100644 --- a/cves/2025/CVE-2025-25200.md +++ b/cves/2025/CVE-2025-25200.md @@ -16,5 +16,5 @@ Koa is expressive middleware for Node.js using ES2017 async functions. Prior to - https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m #### Github -No PoCs found on GitHub currently. +- https://github.com/dwictor0/PoC-CVE-2025-25200 diff --git a/cves/2025/CVE-2025-25257.md b/cves/2025/CVE-2025-25257.md index f2062087242..3312ca81aea 100644 --- a/cves/2025/CVE-2025-25257.md +++ b/cves/2025/CVE-2025-25257.md @@ -25,6 +25,9 @@ An improper neutralization of special elements used in an SQL command ('SQL Inje - https://github.com/mrmtwoj/CVE-2025-25257 - https://github.com/segfault-it/CVE-2025-25257 - https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257 +- https://github.com/0xbigshaq/CVE-2025-25257 +- https://github.com/lytianahkone-boop/cve-2025-25257 +- https://github.com/mr-r3b00t/CVE-2025-25257 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25257.yaml diff --git a/cves/2025/CVE-2025-25279.md b/cves/2025/CVE-2025-25279.md index ae948baf3e5..847945ba9e8 100644 --- a/cves/2025/CVE-2025-25279.md +++ b/cves/2025/CVE-2025-25279.md @@ -18,4 +18,5 @@ Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x #### Github - https://github.com/numanturle/CVE-2025-25279 +- https://github.com/AbokorMAHAMMADMOUSSE/CVE-2025-25279-Mattermost-Path-Traversal diff --git a/cves/2025/CVE-2025-25296.md b/cves/2025/CVE-2025-25296.md index 2348e27415f..be5f37ec3cd 100644 --- a/cves/2025/CVE-2025-25296.md +++ b/cves/2025/CVE-2025-25296.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/math-x-io/CVE-2025-25296-POC +- https://github.com/math-x-io/CVE-2025-25296 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25296.yaml diff --git a/cves/2025/CVE-2025-25461.md b/cves/2025/CVE-2025-25461.md index 82d45888c39..10580a4e96f 100644 --- a/cves/2025/CVE-2025-25461.md +++ b/cves/2025/CVE-2025-25461.md @@ -13,5 +13,5 @@ A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A us - https://github.com/RoNiXxCybSeC0101/CVE-2025-25461 #### Github -No PoCs found on GitHub currently. +- https://github.com/RoNiXxCybSeC0101/CVE-2025-25461 diff --git a/cves/2025/CVE-2025-25614.md b/cves/2025/CVE-2025-25614.md index 1097e3f7171..bbd4355645e 100644 --- a/cves/2025/CVE-2025-25614.md +++ b/cves/2025/CVE-2025-25614.md @@ -13,5 +13,5 @@ Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, - https://github.com/armaansidana2003/CVE-2025-25614 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25614 diff --git a/cves/2025/CVE-2025-25615.md b/cves/2025/CVE-2025-25615.md index 8aed506b588..2b64e884a2b 100644 --- a/cves/2025/CVE-2025-25615.md +++ b/cves/2025/CVE-2025-25615.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows view - https://github.com/armaansidana2003/CVE-2025-25615 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25615 diff --git a/cves/2025/CVE-2025-25616.md b/cves/2025/CVE-2025-25616.md index 5d99885869c..2f2dc55dddc 100644 --- a/cves/2025/CVE-2025-25616.md +++ b/cves/2025/CVE-2025-25616.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows stu - https://github.com/armaansidana2003/CVE-2025-25616 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25616 diff --git a/cves/2025/CVE-2025-25617.md b/cves/2025/CVE-2025-25617.md index 1e753beda85..a2b7a6cbc75 100644 --- a/cves/2025/CVE-2025-25617.md +++ b/cves/2025/CVE-2025-25617.md @@ -13,5 +13,5 @@ Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation a - https://github.com/armaansidana2003/CVE-2025-25617 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25617 diff --git a/cves/2025/CVE-2025-25618.md b/cves/2025/CVE-2025-25618.md index 06d438a1538..313b2779e41 100644 --- a/cves/2025/CVE-2025-25618.md +++ b/cves/2025/CVE-2025-25618.md @@ -13,5 +13,5 @@ Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation a - https://github.com/armaansidana2003/CVE-2025-25618 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25618 diff --git a/cves/2025/CVE-2025-25620.md b/cves/2025/CVE-2025-25620.md index 8922966cca6..50a1b1c5124 100644 --- a/cves/2025/CVE-2025-25620.md +++ b/cves/2025/CVE-2025-25620.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create a - https://github.com/armaansidana2003/CVE-2025-25620 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25620 diff --git a/cves/2025/CVE-2025-25621.md b/cves/2025/CVE-2025-25621.md index 3fa27882693..583789b7902 100644 --- a/cves/2025/CVE-2025-25621.md +++ b/cves/2025/CVE-2025-25621.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows tea - https://github.com/armaansidana2003/CVE-2025-25621 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25621 diff --git a/cves/2025/CVE-2025-2563.md b/cves/2025/CVE-2025-2563.md index a5159d337eb..0d0bb05e737 100644 --- a/cves/2025/CVE-2025-2563.md +++ b/cves/2025/CVE-2025-2563.md @@ -14,6 +14,8 @@ The User Registration & Membership WordPress plugin before 4.1.2 does not preve #### Github - https://github.com/ubaydev/CVE-2025-2563 +- https://github.com/0axz-tools/CVE-2025-2563-POC +- https://github.com/dokter69/CVE-2025-2563 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2563.yaml diff --git a/cves/2025/CVE-2025-2568.md b/cves/2025/CVE-2025-2568.md index 43834707867..0de503dae45 100644 --- a/cves/2025/CVE-2025-2568.md +++ b/cves/2025/CVE-2025-2568.md @@ -13,4 +13,4 @@ The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for Word No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/shinigami-777/PoC_CVE-2025-2568 diff --git a/cves/2025/CVE-2025-2598.md b/cves/2025/CVE-2025-2598.md index 4dbe04be35d..f8595efd820 100644 --- a/cves/2025/CVE-2025-2598.md +++ b/cves/2025/CVE-2025-2598.md @@ -14,4 +14,6 @@ No PoCs from references. #### Github - https://github.com/SpongeBob-369/CVE-2025-2598 +- https://github.com/Catnip-Express-Maxim/AWSTESTEXPLOIT +- https://github.com/SallyXVIII/Final-Proj diff --git a/cves/2025/CVE-2025-26125.md b/cves/2025/CVE-2025-26125.md index 6b8c36494a0..7b6743b3a9d 100644 --- a/cves/2025/CVE-2025-26125.md +++ b/cves/2025/CVE-2025-26125.md @@ -14,5 +14,5 @@ An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 a - https://github.com/ZeroMemoryEx/IObit-EoP #### Github -No PoCs found on GitHub currently. +- https://github.com/ZeroMemoryEx/CVE-2025-26125 diff --git a/cves/2025/CVE-2025-26153.md b/cves/2025/CVE-2025-26153.md index 675662e96e9..20a5ad819ef 100644 --- a/cves/2025/CVE-2025-26153.md +++ b/cves/2025/CVE-2025-26153.md @@ -13,5 +13,5 @@ A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS - https://gist.github.com/NoSpaceAvailable/234acdf57b5d7b29b2f39090c1686bc8 #### Github -No PoCs found on GitHub currently. +- https://github.com/mexeck88/CSRF-via-stored-XSS-for-PrivEsc diff --git a/cves/2025/CVE-2025-26198.md b/cves/2025/CVE-2025-26198.md index eef944301e6..3a28f67fc15 100644 --- a/cves/2025/CVE-2025-26198.md +++ b/cves/2025/CVE-2025-26198.md @@ -14,5 +14,5 @@ CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability - https://github.com/tansique-17/CVE-2025-26198/ #### Github -No PoCs found on GitHub currently. +- https://github.com/WailYacoubi9/CVE-2025-26198 diff --git a/cves/2025/CVE-2025-26263.md b/cves/2025/CVE-2025-26263.md index 3c8bf4e3e3c..6a416478f1d 100644 --- a/cves/2025/CVE-2025-26263.md +++ b/cves/2025/CVE-2025-26263.md @@ -13,7 +13,7 @@ GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less - https://github.com/DRAGOWN/CVE-2025-26263 #### Github -No PoCs found on GitHub currently. +- https://github.com/beleknarcisse169-cmd/CVE-2025-26263 #### ExploitDB - https://www.exploit-db.com/exploits/52423 diff --git a/cves/2025/CVE-2025-26264.md b/cves/2025/CVE-2025-26264.md index caac976934c..c317d43c000 100644 --- a/cves/2025/CVE-2025-26264.md +++ b/cves/2025/CVE-2025-26264.md @@ -13,7 +13,7 @@ GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a - https://github.com/DRAGOWN/CVE-2025-26264 #### Github -No PoCs found on GitHub currently. +- https://github.com/hxlxmj/CVE-2025-26264 #### ExploitDB - https://www.exploit-db.com/exploits/52424 diff --git a/cves/2025/CVE-2025-26318.md b/cves/2025/CVE-2025-26318.md index ef56a03ee9f..cc50a2b6d0e 100644 --- a/cves/2025/CVE-2025-26318.md +++ b/cves/2025/CVE-2025-26318.md @@ -13,5 +13,5 @@ hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers t - https://github.com/Frozenka/CVE-2025-26318 #### Github -No PoCs found on GitHub currently. +- https://github.com/Frozenka/CVE-2025-26318 diff --git a/cves/2025/CVE-2025-26466.md b/cves/2025/CVE-2025-26466.md index 7a75cfeca5f..3ca50d96086 100644 --- a/cves/2025/CVE-2025-26466.md +++ b/cves/2025/CVE-2025-26466.md @@ -24,4 +24,6 @@ A flaw was found in the OpenSSH package. For each ping packet the SSH server rec #### Github - https://github.com/mrowkoob/CVE-2025-26466-msf - https://github.com/rxerium/CVE-2025-26466 +- https://github.com/acidboonrs/cve-2025-26466-openssh-poc +- https://github.com/tpirate/CVE-2025-26466 diff --git a/cves/2025/CVE-2025-26794.md b/cves/2025/CVE-2025-26794.md index 14b177d215b..06f73124e2c 100644 --- a/cves/2025/CVE-2025-26794.md +++ b/cves/2025/CVE-2025-26794.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/OscarBataille/CVE-2025-26794 - https://github.com/ishwardeepp/CVE-2025-26794-Exim-Mail-SQLi +- https://github.com/XploitGh0st/CVE-2025-26794-exploit diff --git a/cves/2025/CVE-2025-27407.md b/cves/2025/CVE-2025-27407.md index 7bcd5a7fc3f..31f506efb6e 100644 --- a/cves/2025/CVE-2025-27407.md +++ b/cves/2025/CVE-2025-27407.md @@ -19,5 +19,5 @@ graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/LoGGGG2402/CVE-2025-27407 diff --git a/cves/2025/CVE-2025-27515.md b/cves/2025/CVE-2025-27515.md index 9fd73cb4125..c26754367f8 100644 --- a/cves/2025/CVE-2025-27515.md +++ b/cves/2025/CVE-2025-27515.md @@ -14,5 +14,5 @@ Laravel is a web application framework. When using wildcard validation to valida No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/joaovicdev/EXPLOIT-CVE-2025-27515 diff --git a/cves/2025/CVE-2025-27520.md b/cves/2025/CVE-2025-27520.md index 7ab9bfff624..49d840950ec 100644 --- a/cves/2025/CVE-2025-27520.md +++ b/cves/2025/CVE-2025-27520.md @@ -13,7 +13,8 @@ BentoML is a Python library for building online serving systems optimized for AI - https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc #### Github -No PoCs found on GitHub currently. +- https://github.com/Evillm/CVE-2025-27520-PoC +- https://github.com/electricsheep08/CVE-2025-27520 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb diff --git a/cves/2025/CVE-2025-27591.md b/cves/2025/CVE-2025-27591.md index a785ea081e2..386195b1475 100644 --- a/cves/2025/CVE-2025-27591.md +++ b/cves/2025/CVE-2025-27591.md @@ -27,4 +27,10 @@ No PoCs from references. - https://github.com/obamalaolu/CVE-2025-27591 - https://github.com/rvizx/CVE-2025-27591 - https://github.com/umutcamliyurt/CVE-2025-27591 +- https://github.com/0x00Jeff/CVE-2025-27591 +- https://github.com/MoTechStore/CVE-2025-27591-PoC +- https://github.com/Stp1t/CVE-2025-27591 +- https://github.com/VisaiCyber/CVE-2025-27591-below- +- https://github.com/krn966/CVE-2025-27591 +- https://github.com/rvzsec/CVE-2025-27591 diff --git a/cves/2025/CVE-2025-27817.md b/cves/2025/CVE-2025-27817.md index cf32e13c02c..d82837cb9e3 100644 --- a/cves/2025/CVE-2025-27817.md +++ b/cves/2025/CVE-2025-27817.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/iSee857/CVE-2025-27817 +- https://github.com/oriolrius/kafka-keycloak-oauth #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27817.yaml diff --git a/cves/2025/CVE-2025-2783.md b/cves/2025/CVE-2025-2783.md index 93a3e7f2623..133ddc89b51 100644 --- a/cves/2025/CVE-2025-2783.md +++ b/cves/2025/CVE-2025-2783.md @@ -16,6 +16,9 @@ No PoCs from references. #### Github - https://github.com/Alchemist3dot14/CVE-2025-2783 - https://github.com/byteReaper77/CVE-2025-2783 +- https://github.com/ElianGonzi00/CVE-2025-2783 +- https://github.com/bjrjk/CVE-2025-2783 +- https://github.com/razureink/cve-2025-2783-chrome_sandbox_escape_reproduction #### ExploitDB - https://www.exploit-db.com/exploits/52403 diff --git a/cves/2025/CVE-2025-28062.md b/cves/2025/CVE-2025-28062.md index a4a98622c21..6fd87c65dbc 100644 --- a/cves/2025/CVE-2025-28062.md +++ b/cves/2025/CVE-2025-28062.md @@ -13,7 +13,7 @@ A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.8 - https://github.com/Thvt0ne/CVE-2025-28062 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thvt0ne/CVE-2025-28062 #### ExploitDB - https://www.exploit-db.com/exploits/52283 diff --git a/cves/2025/CVE-2025-28121.md b/cves/2025/CVE-2025-28121.md index bac20769f23..896eecce57c 100644 --- a/cves/2025/CVE-2025-28121.md +++ b/cves/2025/CVE-2025-28121.md @@ -13,7 +13,7 @@ code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scrip - https://github.com/pruthuraut/CVE-2025-28121 #### Github -No PoCs found on GitHub currently. +- https://github.com/pruthuraut/CVE-2025-28121 #### ExploitDB - https://www.exploit-db.com/exploits/52272 diff --git a/cves/2025/CVE-2025-2825.md b/cves/2025/CVE-2025-2825.md index 99c211674f8..2052274e1a9 100644 --- a/cves/2025/CVE-2025-2825.md +++ b/cves/2025/CVE-2025-2825.md @@ -15,7 +15,11 @@ CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected b - https://projectdiscovery.io/blog/crushftp-authentication-bypass #### Github -No PoCs found on GitHub currently. +- https://github.com/Shivshantp/CVE-2025-2825-CrushFTP-AuthBypass +- https://github.com/WOOOOONG/CVE-2025-2825 +- https://github.com/ghostsec420/ShatteredFTP +- https://github.com/iteride/CVE-2025-2825 +- https://github.com/punitdarji/crushftp-CVE-2025-2825 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb diff --git a/cves/2025/CVE-2025-29306.md b/cves/2025/CVE-2025-29306.md index 143bbd4e8a5..6d61c09f45e 100644 --- a/cves/2025/CVE-2025-29306.md +++ b/cves/2025/CVE-2025-29306.md @@ -17,6 +17,8 @@ An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code vi - https://github.com/congdong007/CVE-2025-29306_poc - https://github.com/inok009/FOXCMS-CVE-2025-29306-POC - https://github.com/verylazytech/CVE-2025-29306 +- https://github.com/mantanhacker/Mass-CVE-2025-29306 +- https://github.com/somatrasss/CVE-2025-29306 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29306.yaml diff --git a/cves/2025/CVE-2025-29384.md b/cves/2025/CVE-2025-29384.md index 5d9f515f70c..9dd82adb768 100644 --- a/cves/2025/CVE-2025-29384.md +++ b/cves/2025/CVE-2025-29384.md @@ -14,4 +14,5 @@ In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacM #### Github - https://github.com/Otsmane-Ahmed/cve-2025-29384-poc +- https://github.com/Fomovet/cve-2025-29384 diff --git a/cves/2025/CVE-2025-2945.md b/cves/2025/CVE-2025-2945.md index 5c84bf9c290..73d6a2e4937 100644 --- a/cves/2025/CVE-2025-2945.md +++ b/cves/2025/CVE-2025-2945.md @@ -16,6 +16,13 @@ Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud - https://github.com/Cycloctane/cve-2025-2945-poc - https://github.com/abrewer251/CVE-2025-2945_PgAdmin_PoC - https://github.com/Khashayarnzk/CVE-2025-2945-pgAdmin-RCE +- https://github.com/I3r1h0n/pgAdminOpendoor +- https://github.com/Udayveer17/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC- +- https://github.com/g0d150ne/CVE-2025-2945 +- https://github.com/plur1bu5/CVE-2025-2945-pgadmin-rce #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pgadmin_query_tool_authenticated.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pgadmin/CVE-2025-2945 diff --git a/cves/2025/CVE-2025-29529.md b/cves/2025/CVE-2025-29529.md index 2d71a887be1..8a130d49d94 100644 --- a/cves/2025/CVE-2025-29529.md +++ b/cves/2025/CVE-2025-29529.md @@ -13,5 +13,5 @@ ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to cont - https://github.com/Yoshik0xF6/CVE-2025-29529 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yoshik0xF6/CVE-2025-29529 diff --git a/cves/2025/CVE-2025-29556.md b/cves/2025/CVE-2025-29556.md index 9f3debfae12..a3841fe4b42 100644 --- a/cves/2025/CVE-2025-29556.md +++ b/cves/2025/CVE-2025-29556.md @@ -13,5 +13,5 @@ ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since ve - https://github.com/0xsu3ks/CVE-2025-29556 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xsu3ks/CVE-2025-29556 diff --git a/cves/2025/CVE-2025-29632.md b/cves/2025/CVE-2025-29632.md index 2a9a66fc188..58a7fd2ce22 100644 --- a/cves/2025/CVE-2025-29632.md +++ b/cves/2025/CVE-2025-29632.md @@ -13,5 +13,5 @@ Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cau - https://github.com/OHnogood/CVE-2025-29632/ #### Github -No PoCs found on GitHub currently. +- https://github.com/OHnogood/CVE-2025-29632 diff --git a/cves/2025/CVE-2025-29824.md b/cves/2025/CVE-2025-29824.md index 6fc8982fb91..b346bf340d6 100644 --- a/cves/2025/CVE-2025-29824.md +++ b/cves/2025/CVE-2025-29824.md @@ -55,4 +55,5 @@ No PoCs from references. - https://github.com/AfanPan/CVE-2025-29824-Exploit - https://github.com/AntonyNRM/vulnerable-flask-app - https://github.com/encrypter15/CVE-2025-29824 +- https://github.com/uname1able/CVE-2025-29824 diff --git a/cves/2025/CVE-2025-29927.md b/cves/2025/CVE-2025-29927.md index d60b30e9139..6715bd0a076 100644 --- a/cves/2025/CVE-2025-29927.md +++ b/cves/2025/CVE-2025-29927.md @@ -113,6 +113,20 @@ No PoCs from references. - https://github.com/yuzu-juice/CVE-2025-29927_demo - https://github.com/zs1n/CVE-2025-29927 - https://github.com/kuyrathdaro/cve-2025-29927 +- https://github.com/DanielHallbro/CVE-2025-29927-Nextjs-Bypass-PoC +- https://github.com/Ev3rPalestine/0xMiddleware +- https://github.com/Fomovet/cve-2025-29927 +- https://github.com/Nayekah/Next.js-Proof-of-Concept +- https://github.com/Si-Ni/CVE-2025-29927-Proof-of-Concept +- https://github.com/SwapnilDeshpande/cve-2025-29927-lab +- https://github.com/diogolourencodev/middleforce +- https://github.com/ferpalma21/Automated-Next.js-Security-Scanner-for-CVE-2025-29927 +- https://github.com/gitgudKrish/cve-2025-29927-nextjs +- https://github.com/hujiaozhuzhu/CVE-2025-29927__Next.js +- https://github.com/kazuya256/next-js-auth-bypass +- https://github.com/liamromanis101/CVE-2025-29927-NextJS +- https://github.com/moften/CVE-2025-29927_Next.js_Auth_Bypass +- https://github.com/w3shinew/CVE-2025-29927 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29927.yaml @@ -122,3 +136,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nextjs_middleware_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/next.js/CVE-2025-29927 diff --git a/cves/2025/CVE-2025-30208.md b/cves/2025/CVE-2025-30208.md index 6f00a620030..a7a966e961e 100644 --- a/cves/2025/CVE-2025-30208.md +++ b/cves/2025/CVE-2025-30208.md @@ -36,9 +36,16 @@ Vite, a provider of frontend development tooling, has a vulnerability in version - https://github.com/sadhfdw129/CVE-2025-30208-Vite - https://github.com/sumeet-darekar/CVE-2025-30208 - https://github.com/xuemian168/CVE-2025-30208 +- https://github.com/HazaVVIP/CVE-2025-30208 +- https://github.com/MiclelsonCN/CVE-2025-30208_POC +- https://github.com/On1onss/CVE-2025-30208 +- https://github.com/cc3305/CVE-2025-30208 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30208.yaml #### ExploitDB - https://www.exploit-db.com/exploits/52111 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/vite/CVE-2025-30208 diff --git a/cves/2025/CVE-2025-30349.md b/cves/2025/CVE-2025-30349.md index 4cc310f2e51..bf6897a5daf 100644 --- a/cves/2025/CVE-2025-30349.md +++ b/cves/2025/CVE-2025-30349.md @@ -13,5 +13,5 @@ Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.2 - https://github.com/natasaka/CVE-2025-30349/ #### Github -No PoCs found on GitHub currently. +- https://github.com/natasaka/CVE-2025-30349 diff --git a/cves/2025/CVE-2025-3052.md b/cves/2025/CVE-2025-3052.md index ad82b7159a1..5de293a6ad5 100644 --- a/cves/2025/CVE-2025-3052.md +++ b/cves/2025/CVE-2025-3052.md @@ -27,5 +27,5 @@ An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for co - https://www.binarly.io/advisories/brly-dva-2025-001 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2025-3052 diff --git a/cves/2025/CVE-2025-31131.md b/cves/2025/CVE-2025-31131.md index 4c54451f028..44295bc50d0 100644 --- a/cves/2025/CVE-2025-31131.md +++ b/cves/2025/CVE-2025-31131.md @@ -14,6 +14,7 @@ YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable t #### Github - https://github.com/MuhammadWaseem29/CVE-2025-31131 +- https://github.com/gmh5225/Blackash-CVE-2025-31131 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31131.yaml diff --git a/cves/2025/CVE-2025-31161.md b/cves/2025/CVE-2025-31161.md index 93d04f71ef0..bb695479e27 100644 --- a/cves/2025/CVE-2025-31161.md +++ b/cves/2025/CVE-2025-31161.md @@ -33,6 +33,16 @@ CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and - https://github.com/ghostsec420/ShatteredFTP - https://github.com/gvincenti/Soulmate - https://github.com/r0otk3r/CVE-2025-31161 +- https://github.com/0xBlackash/CVE-2025-31161 +- https://github.com/Dairrow/CVE-2025-31161 +- https://github.com/Drelinss/Blackash-CVE-2025-31161 +- https://github.com/Shisones/CVE-2025-31161 +- https://github.com/cesarbtakeda/CVE-2025-31161 +- https://github.com/ch3m1cl/CVE-2025-31161 +- https://github.com/eserror/CVE-2025-31161 +- https://github.com/rufflabs/crushftp_cve-2025-31161 +- https://github.com/rufflabs/ludus_crushftp_cve-2025-31161 +- https://github.com/rufflabs/ludus_crushftp_cve-2025-31161_sim #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31161.yaml diff --git a/cves/2025/CVE-2025-31324.md b/cves/2025/CVE-2025-31324.md index 0ece620c6f3..dc884ef6cb2 100644 --- a/cves/2025/CVE-2025-31324.md +++ b/cves/2025/CVE-2025-31324.md @@ -31,6 +31,7 @@ No PoCs from references. - https://github.com/rf-peixoto/sap_netweaver_cve-2025-31324- - https://github.com/rxerium/CVE-2025-31324 - https://github.com/sug4r-wr41th/CVE-2025-31324 +- https://github.com/aristois913/CVE-2025-31324 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yaml diff --git a/cves/2025/CVE-2025-31486.md b/cves/2025/CVE-2025-31486.md index 5bdc515b48f..3977f2eaa07 100644 --- a/cves/2025/CVE-2025-31486.md +++ b/cves/2025/CVE-2025-31486.md @@ -20,6 +20,7 @@ Vite is a frontend tooling framework for javascript. The contents of arbitrary f #### Github - https://github.com/hackmelocal/CVE-2025-31486-Simulation - https://github.com/iSee857/CVE-2025-31486-PoC +- https://github.com/ll104567/CVE-2025-31486 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31486.yaml diff --git a/cves/2025/CVE-2025-31651.md b/cves/2025/CVE-2025-31651.md index daf9a994ef4..a53d1b56120 100644 --- a/cves/2025/CVE-2025-31651.md +++ b/cves/2025/CVE-2025-31651.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/gregk4sec/CVE-2025-31651 +- https://github.com/gregk4sec/CVE-2025-31651-o diff --git a/cves/2025/CVE-2025-31722.md b/cves/2025/CVE-2025-31722.md index 942576da96e..0ecac93405b 100644 --- a/cves/2025/CVE-2025-31722.md +++ b/cves/2025/CVE-2025-31722.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/Nick6371/CVE-2025-31722 +- https://github.com/h3raklez/CVE-2025-31722 diff --git a/cves/2025/CVE-2025-32023.md b/cves/2025/CVE-2025-32023.md index 5c889a1ac9a..921a55eb92a 100644 --- a/cves/2025/CVE-2025-32023.md +++ b/cves/2025/CVE-2025-32023.md @@ -18,6 +18,7 @@ No PoCs from references. #### Github - https://github.com/LordBheem/CVE-2025-32023 - https://github.com/leesh3288/CVE-2025-32023 +- https://github.com/44528zja/Blackash-CVE-2025-32023 #### ExploitDB - https://www.exploit-db.com/exploits/52477 diff --git a/cves/2025/CVE-2025-32044.md b/cves/2025/CVE-2025-32044.md index 6439950fcfe..2be8974f529 100644 --- a/cves/2025/CVE-2025-32044.md +++ b/cves/2025/CVE-2025-32044.md @@ -13,5 +13,5 @@ A flaw has been identified in Moodle where, on certain sites, unauthenticated us No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/shinthink/CVE-2025-32044 diff --git a/cves/2025/CVE-2025-32375.md b/cves/2025/CVE-2025-32375.md index 51c9ea9d2f6..be4657be0ab 100644 --- a/cves/2025/CVE-2025-32375.md +++ b/cves/2025/CVE-2025-32375.md @@ -14,6 +14,7 @@ BentoML is a Python library for building online serving systems optimized for AI #### Github - https://github.com/theGEBIRGE/CVE-2025-32375 +- https://github.com/SevdaKhidirova/CVE-2025-32375-PoC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bentoml_runner_server_rce_cve_2025_32375.rb diff --git a/cves/2025/CVE-2025-32395.md b/cves/2025/CVE-2025-32395.md index b23d8598aa6..a8e3d118db1 100644 --- a/cves/2025/CVE-2025-32395.md +++ b/cves/2025/CVE-2025-32395.md @@ -22,3 +22,6 @@ Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32395.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/vite/CVE-2025-32395 diff --git a/cves/2025/CVE-2025-32407.md b/cves/2025/CVE-2025-32407.md index f3d39acf088..08b064ec2ff 100644 --- a/cves/2025/CVE-2025-32407.md +++ b/cves/2025/CVE-2025-32407.md @@ -13,5 +13,5 @@ Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Gala - https://github.com/diegovargasj/CVE-2025-32407 #### Github -No PoCs found on GitHub currently. +- https://github.com/diegovargasj/CVE-2025-32407 diff --git a/cves/2025/CVE-2025-3243.md b/cves/2025/CVE-2025-3243.md index 60642af07f8..fc18973722b 100644 --- a/cves/2025/CVE-2025-3243.md +++ b/cves/2025/CVE-2025-3243.md @@ -16,4 +16,5 @@ Eine kritische Schwachstelle wurde in code-projects Patient Record Management Sy #### Github - https://github.com/TeneBrae93/CVE-2025-3243 +- https://github.com/ladosudeste/CVE-2025-3243 diff --git a/cves/2025/CVE-2025-32432.md b/cves/2025/CVE-2025-32432.md index a9e8852989c..8a08151067a 100644 --- a/cves/2025/CVE-2025-32432.md +++ b/cves/2025/CVE-2025-32432.md @@ -21,6 +21,13 @@ Craft is a flexible, user-friendly CMS for creating custom digital experiences o - https://github.com/Sachinart/CVE-2025-32432 - https://github.com/apostolovd/PoCs - https://github.com/bambooqj/CVE-2025-32432 +- https://github.com/EzraMansor/CVE-2025-32432-PoC +- https://github.com/HeltonPojo/CVE-2025-32432 +- https://github.com/TheMursalin/CVE-2025-32432 +- https://github.com/c0gnit00/CVE-2025-32432 +- https://github.com/cd-ratel/CVE-2025-32432 +- https://github.com/n40y/PoC_CVE-2025-32432 +- https://github.com/theeomega/CVE-2025-32432-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32432.yaml @@ -30,3 +37,6 @@ Craft is a flexible, user-friendly CMS for creating custom digital experiences o #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/craftcms/CVE-2025-32432 diff --git a/cves/2025/CVE-2025-32433.md b/cves/2025/CVE-2025-32433.md index 3be66c99f58..7757432ff8a 100644 --- a/cves/2025/CVE-2025-32433.md +++ b/cves/2025/CVE-2025-32433.md @@ -42,9 +42,26 @@ Erlang/OTP is a set of libraries for the Erlang programming language. Prior to v - https://github.com/platsecurity/CVE-2025-32433 - https://github.com/teamtopkarl/CVE-2025-32433 - https://github.com/vigilante-1337/CVE-2025-32433 +- https://github.com/0xBlackash/CVE-2025-32433 +- https://github.com/AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433 +- https://github.com/Batman529/PoC-CVE-2025-32433 +- https://github.com/Liam-Worsley/CVE-2025-32433-PoC-Analysis +- https://github.com/ProDefense/CVE-2025-32433 +- https://github.com/blackcat4347/CVE-2025-32433-available-for-windows +- https://github.com/chuzouX/CVE-2025-32433-Exploit-edited +- https://github.com/giriaryan694-a11y/cve-2025-32433_rce_exploit +- https://github.com/joshuavanderpoll/cve-2025-32433 +- https://github.com/l1nuxkid/CVE-2025-32433-exploit +- https://github.com/razureink/cve-2025-32433-erlang_ssh_rce_reproduction +- https://github.com/soltanali0/CVE-2025-32433-Eploit +- https://github.com/toshithh/CVE-2025-32433 +- https://github.com/yonathanpy/CVE-2025-32433.py #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32433.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/ssh_erlangotp_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/erlang/CVE-2025-32433 diff --git a/cves/2025/CVE-2025-32434.md b/cves/2025/CVE-2025-32434.md index 1a43c33b9f4..d1c9f900691 100644 --- a/cves/2025/CVE-2025-32434.md +++ b/cves/2025/CVE-2025-32434.md @@ -13,5 +13,7 @@ PyTorch is a Python package that provides tensor computation with strong GPU acc No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AlexanderGumeniuk/CVE-2025-32434 +- https://github.com/B1tBit/CVE-2025-32434-exploit +- https://github.com/cyhe50/cve-2025-32434-poc diff --git a/cves/2025/CVE-2025-32462.md b/cves/2025/CVE-2025-32462.md index 5930643def3..a1fdd7a5ab8 100644 --- a/cves/2025/CVE-2025-32462.md +++ b/cves/2025/CVE-2025-32462.md @@ -21,6 +21,10 @@ No PoCs from references. - https://github.com/cybersentinelx1/CVE-2025-32462-Exploit - https://github.com/j3r1ch0123/CVE-2025-32462 - https://github.com/mylovem313/CVE-2025-32462 +- https://github.com/0p5cur/CVE-2025-32462-POC +- https://github.com/MAAYTHM/CVE-2025-32462_32463-Lab +- https://github.com/OffSecPlaybook/CVE-2025-32462- +- https://github.com/yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab #### ExploitDB - https://www.exploit-db.com/exploits/52354 diff --git a/cves/2025/CVE-2025-32463.md b/cves/2025/CVE-2025-32463.md index beb6c1b0dd9..77f3a378d70 100644 --- a/cves/2025/CVE-2025-32463.md +++ b/cves/2025/CVE-2025-32463.md @@ -59,6 +59,29 @@ Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswi - https://github.com/san8383/CVE-2025-32463 - https://github.com/zhaduchanhzz/CVE-2025-32463_POC - https://github.com/zinzloun/CVE-2025-32463 +- https://github.com/0p5cur/CVE-2025-32463-POC +- https://github.com/0x3c4dfa1/CVE-2025-32463 +- https://github.com/0xBlackash/CVE-2025-32463 +- https://github.com/0xdak/CVE-2025-32463_exploit +- https://github.com/12bijaya/CVE-2025-32463 +- https://github.com/1xPwn/CVE-2025-32463 +- https://github.com/AC8999/CVE-2025-32463 +- https://github.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape +- https://github.com/Fomovet/cve-2025-32463 +- https://github.com/Mr-Alperen/CVE-2025-32463 +- https://github.com/NewComrade12211/CVE-2025-32463 +- https://github.com/SpycioKon/CVE-2025-32463 +- https://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation +- https://github.com/danilo1992-sys/CVE-2025-32463 +- https://github.com/dr4x-c0d3r/sudo-chroot +- https://github.com/dr4xp/sudo-chroot +- https://github.com/gmh5225/Blackash-CVE-2025-32463 +- https://github.com/khoazero123/CVE-2025-32463 +- https://github.com/muhammedkayag/CVE-2025-32463 +- https://github.com/r3dBust3r/CVE-2025-32463 +- https://github.com/robbin0919/CVE-2025-32463 +- https://github.com/secvulnhub/CVE-2025-32463-EXPLOIT +- https://github.com/vpr-labs/CVE-2025-32463 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32463.yaml diff --git a/cves/2025/CVE-2025-3248.md b/cves/2025/CVE-2025-3248.md index 664a67c38c8..581e862e30e 100644 --- a/cves/2025/CVE-2025-3248.md +++ b/cves/2025/CVE-2025-3248.md @@ -37,6 +37,12 @@ Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v - https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE - https://github.com/zapstiko/CVE-2025-3248 - https://github.com/hideki233/CVE-2025-3248-Langflow-RCE +- https://github.com/12-test-12/CVE-2025-3248 +- https://github.com/GraySignal/CVE-2025-3248 +- https://github.com/Kiraly07/Demo_CVE-2025-3248 +- https://github.com/b0ySie7e/CVE-2025-3248-POC +- https://github.com/bambooqj/cve-2025-3248 +- https://github.com/drackyjr/cve-2025-3248-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3248.yaml @@ -47,3 +53,6 @@ Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2025_3248.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/langflow/CVE-2025-3248 diff --git a/cves/2025/CVE-2025-32711.md b/cves/2025/CVE-2025-32711.md index c7d554b3c51..379564e7d4b 100644 --- a/cves/2025/CVE-2025-32711.md +++ b/cves/2025/CVE-2025-32711.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/daryllundy/cve-2025-32711 +- https://github.com/TreRB/markdown-exfil-tester diff --git a/cves/2025/CVE-2025-32966.md b/cves/2025/CVE-2025-32966.md index ac2e98aa3fc..10d2a499d0d 100644 --- a/cves/2025/CVE-2025-32966.md +++ b/cves/2025/CVE-2025-32966.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32966.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dataease/CVE-2025-32966 diff --git a/cves/2025/CVE-2025-33053.md b/cves/2025/CVE-2025-33053.md index 96b8336d909..b9c73829b33 100644 --- a/cves/2025/CVE-2025-33053.md +++ b/cves/2025/CVE-2025-33053.md @@ -59,6 +59,7 @@ External control of file name or path in Internet Shortcut Files allows an unaut - https://github.com/TheTorjanCaptain/CVE-2025-33053-Checker-PoC - https://github.com/kra1t0/CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept - https://github.com/veath1/LNK-File-WEBDAV-Remote-Code-Execution-Vulnerability +- https://github.com/Cyberw1ng/CVE-2025-33053-POC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/unc_url_cve_2025_33053.rb diff --git a/cves/2025/CVE-2025-33073.md b/cves/2025/CVE-2025-33073.md index 37baa017830..1f389617db5 100644 --- a/cves/2025/CVE-2025-33073.md +++ b/cves/2025/CVE-2025-33073.md @@ -87,6 +87,11 @@ Improper access control in Windows SMB allows an authorized attacker to elevate - https://github.com/mbanyamer/-Windows-11-SMB-Client-RCE-Privilege-Escalation-Exploit-Using-DNS-Poisoning-NTLM-Relay-RPC-Coercion - https://github.com/mverschu/CVE-2025-33073 - https://github.com/obscura-cert/CVE-2025-33073 +- https://github.com/EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073- +- https://github.com/SFRDevelopment/windows-smb-vulnerability-framework-cve-2025-33073 +- https://github.com/irjfifndn-prog/Blackash-CVE-2025-33073 +- https://github.com/matejsmycka/CVE-2025-33073-checker +- https://github.com/uziii2208/CVE-2025-33073 #### ExploitDB - https://www.exploit-db.com/exploits/52330 diff --git a/cves/2025/CVE-2025-34028.md b/cves/2025/CVE-2025-34028.md index cca85073701..c43e2e9e76b 100644 --- a/cves/2025/CVE-2025-34028.md +++ b/cves/2025/CVE-2025-34028.md @@ -18,6 +18,7 @@ The Commvault Command Center Innovation Release allows an unauthenticated actor #### Github - https://github.com/Mattb709/CVE-2025-34028-PoC-Commvault-RCE - https://github.com/becrevex/Commvault-CVE-2025-34028 +- https://github.com/watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34028.yaml diff --git a/cves/2025/CVE-2025-34037.md b/cves/2025/CVE-2025-34037.md index 1c94aff3235..12766527370 100644 --- a/cves/2025/CVE-2025-34037.md +++ b/cves/2025/CVE-2025-34037.md @@ -24,7 +24,7 @@ An OS command injection vulnerability exists in various models of E-Series Links - https://www.exploit-db.com/exploits/31683 #### Github -No PoCs found on GitHub currently. +- https://github.com/Taxanehh/CVE-2025-34037 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_themoon_exec.rb diff --git a/cves/2025/CVE-2025-34077.md b/cves/2025/CVE-2025-34077.md index 3f08c3e82d4..128ed2b4f7b 100644 --- a/cves/2025/CVE-2025-34077.md +++ b/cves/2025/CVE-2025-34077.md @@ -17,6 +17,7 @@ An authentication bypass vulnerability exists in the WordPress Pie Register plug #### Github - https://github.com/0xgh057r3c0n/CVE-2025-34077 - https://github.com/MrjHaxcore/CVE-2025-34077 +- https://github.com/salimelh94/Web-Penetration-Test #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34077.yaml diff --git a/cves/2025/CVE-2025-34096.md b/cves/2025/CVE-2025-34096.md index d789e651ee8..75f8e287ff7 100644 --- a/cves/2025/CVE-2025-34096.md +++ b/cves/2025/CVE-2025-34096.md @@ -14,7 +14,7 @@ A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Ser - https://www.exploit-db.com/exploits/42186 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2025-34096 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/easyfilesharing_post.rb diff --git a/cves/2025/CVE-2025-34157.md b/cves/2025/CVE-2025-34157.md index d24bb804bfa..ac19d7bb8a7 100644 --- a/cves/2025/CVE-2025-34157.md +++ b/cves/2025/CVE-2025-34157.md @@ -14,5 +14,5 @@ Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-sit - https://github.com/Eyodav/CVE-2025-34157 #### Github -No PoCs found on GitHub currently. +- https://github.com/Eyodav/CVE-2025-34157 diff --git a/cves/2025/CVE-2025-34227.md b/cves/2025/CVE-2025-34227.md index fc76dbd8d08..cde09e98953 100644 --- a/cves/2025/CVE-2025-34227.md +++ b/cves/2025/CVE-2025-34227.md @@ -13,5 +13,5 @@ Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerabi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/mcorybillington/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard diff --git a/cves/2025/CVE-2025-3464.md b/cves/2025/CVE-2025-3464.md index 6a33f9bc782..7ede8e1ec06 100644 --- a/cves/2025/CVE-2025-3464.md +++ b/cves/2025/CVE-2025-3464.md @@ -14,5 +14,5 @@ A race condition vulnerability exists in Armoury Crate. This vulnerability arise - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2150 #### Github -No PoCs found on GitHub currently. +- https://github.com/jeffaf/CVE-2025-3464-AsIO3-LPE diff --git a/cves/2025/CVE-2025-3616.md b/cves/2025/CVE-2025-3616.md index 8b7bd1f04ad..19820e6220e 100644 --- a/cves/2025/CVE-2025-3616.md +++ b/cves/2025/CVE-2025-3616.md @@ -13,4 +13,4 @@ The Greenshift – animation and page builder blocks plugin for WordPress is vul No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/b4d-53ct0r/CVE-2025-3616 diff --git a/cves/2025/CVE-2025-36911.md b/cves/2025/CVE-2025-36911.md index 1aa4fa33ccf..8548634086d 100644 --- a/cves/2025/CVE-2025-36911.md +++ b/cves/2025/CVE-2025-36911.md @@ -14,3 +14,8 @@ No PoCs from references. #### Github - https://github.com/xarlord/btsec-testtool +- https://github.com/Athexblackhat/BLUE-SPY +- https://github.com/PentHertz/CVE-2025-36911-exploit +- https://github.com/PivotChip/FrostedFastPair +- https://github.com/SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_Finder +- https://github.com/aalex954/whisperpair-poc-tool diff --git a/cves/2025/CVE-2025-38001.md b/cves/2025/CVE-2025-38001.md index be2e209835b..363effd9d8a 100644 --- a/cves/2025/CVE-2025-38001.md +++ b/cves/2025/CVE-2025-38001.md @@ -17,4 +17,6 @@ No PoCs from references. #### Github - https://github.com/0xdevil/CVE-2025-38001 - https://github.com/khoatran107/cve-2025-38001 +- https://github.com/Jevil36239/CVE-2025-38001 +- https://github.com/ngobao2002/CVE-2025-38001-test diff --git a/cves/2025/CVE-2025-38089.md b/cves/2025/CVE-2025-38089.md index 66b8af90adf..fbe01ac6798 100644 --- a/cves/2025/CVE-2025-38089.md +++ b/cves/2025/CVE-2025-38089.md @@ -17,5 +17,5 @@ In the Linux kernel, the following vulnerability has been resolved:sunrpc: handl - https://www.openwall.com/lists/oss-security/2025/07/02/2 #### Github -No PoCs found on GitHub currently. +- https://github.com/keymaker-arch/NFSundown diff --git a/cves/2025/CVE-2025-38352.md b/cves/2025/CVE-2025-38352.md index 4c42f4cc390..9562c7b98cd 100644 --- a/cves/2025/CVE-2025-38352.md +++ b/cves/2025/CVE-2025-38352.md @@ -16,5 +16,8 @@ In the Linux kernel, the following vulnerability has been resolved:posix-cpu-tim No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AnalyticETH/chronomaly-webos +- https://github.com/Crime2/poc-CVE-2025-38352 +- https://github.com/farazsth98/chronomaly +- https://github.com/farazsth98/poc-CVE-2025-38352 diff --git a/cves/2025/CVE-2025-38501.md b/cves/2025/CVE-2025-38501.md index 3ff33145c96..590038e6a82 100644 --- a/cves/2025/CVE-2025-38501.md +++ b/cves/2025/CVE-2025-38501.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: limit - https://github.com/keymaker-arch/KSMBDrain #### Github -No PoCs found on GitHub currently. +- https://github.com/keymaker-arch/KSMBDrain diff --git a/cves/2025/CVE-2025-38561.md b/cves/2025/CVE-2025-38561.md index ab314a6bde3..81261ba6767 100644 --- a/cves/2025/CVE-2025-38561.md +++ b/cves/2025/CVE-2025-38561.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix Pr No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/toshithh/CVE-2025-38561 diff --git a/cves/2025/CVE-2025-39247.md b/cves/2025/CVE-2025-39247.md index 835aae3892b..a57ef4ca7af 100644 --- a/cves/2025/CVE-2025-39247.md +++ b/cves/2025/CVE-2025-39247.md @@ -14,5 +14,5 @@ There is an Access Control Vulnerability in some HikCentral Professional version No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Sita-Technologies/CVE-2025-39247 diff --git a/cves/2025/CVE-2025-39682.md b/cves/2025/CVE-2025-39682.md index 0cc47fa17a0..cf282a7c4d2 100644 --- a/cves/2025/CVE-2025-39682.md +++ b/cves/2025/CVE-2025-39682.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:tls: fix hand No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/khoatran107/cve-2025-39682 diff --git a/cves/2025/CVE-2025-4123.md b/cves/2025/CVE-2025-4123.md index 0dac8db54f3..121d87c1d15 100644 --- a/cves/2025/CVE-2025-4123.md +++ b/cves/2025/CVE-2025-4123.md @@ -24,6 +24,7 @@ No PoCs from references. - https://github.com/NightBloodz/CVE-2025-4123 - https://github.com/punitdarji/Grafana-cve-2025-4123 - https://github.com/ynsmroztas/CVE-2025-4123-Exploit-Tool-Grafana- +- https://github.com/MorphyKutay/CVE-2025-4123-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4123.yaml diff --git a/cves/2025/CVE-2025-41242.md b/cves/2025/CVE-2025-41242.md index e83e313fbae..8686166ce24 100644 --- a/cves/2025/CVE-2025-41242.md +++ b/cves/2025/CVE-2025-41242.md @@ -19,3 +19,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41242.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2025-41242 diff --git a/cves/2025/CVE-2025-4138.md b/cves/2025/CVE-2025-4138.md index 2179541b93d..312ca21ad8e 100644 --- a/cves/2025/CVE-2025-4138.md +++ b/cves/2025/CVE-2025-4138.md @@ -18,5 +18,9 @@ Allows the extraction filter to be ignored, allowing symlink targets to point ou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/DesertDemons/CVE-2025-4138-4517-POC +- https://github.com/d3vn0mi/CVE-2025-4138-POC +- https://github.com/kyakei/CVE-2025-4138-poc +- https://github.com/localh0ste/CVE-2025-4138 +- https://github.com/thefizzyfish/CVE-2025-4138_tarfile_filter_bypass diff --git a/cves/2025/CVE-2025-4322.md b/cves/2025/CVE-2025-4322.md index dbf66d2799d..49ea5c31224 100644 --- a/cves/2025/CVE-2025-4322.md +++ b/cves/2025/CVE-2025-4322.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/IndominusRexes/CVE-2025-4322-Exploit - https://github.com/Yucaerin/CVE-2025-4322 +- https://github.com/gmh5225/Blackash-CVE-2025-4322 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4322.yaml diff --git a/cves/2025/CVE-2025-43300.md b/cves/2025/CVE-2025-43300.md index 9e269fa8229..b93162d1472 100644 --- a/cves/2025/CVE-2025-43300.md +++ b/cves/2025/CVE-2025-43300.md @@ -18,4 +18,6 @@ An out-of-bounds write issue was addressed with improved bounds checking. This i - https://github.com/PwnToday/CVE-2025-43300 - https://github.com/hunters-sec/CVE-2025-43300 - https://github.com/veniversum/cve-2025-43300 +- https://github.com/Dark-life944/CVE-2025 +- https://github.com/ticofookfook/CVE-2025-43300 diff --git a/cves/2025/CVE-2025-4334.md b/cves/2025/CVE-2025-4334.md index 986791581e5..4eab51c201a 100644 --- a/cves/2025/CVE-2025-4334.md +++ b/cves/2025/CVE-2025-4334.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/0xgh057r3c0n/CVE-2025-4334 - https://github.com/Nxploited/CVE-2025-4334 +- https://github.com/vinodwick/CVE-2025-4334 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4334.yaml diff --git a/cves/2025/CVE-2025-4336.md b/cves/2025/CVE-2025-4336.md index 08e15d01ff5..f25e26b856c 100644 --- a/cves/2025/CVE-2025-4336.md +++ b/cves/2025/CVE-2025-4336.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-4336 #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-4336 diff --git a/cves/2025/CVE-2025-43564.md b/cves/2025/CVE-2025-43564.md index b3a5ef8bfa0..5e974b2b14e 100644 --- a/cves/2025/CVE-2025-43564.md +++ b/cves/2025/CVE-2025-43564.md @@ -13,5 +13,5 @@ ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Impr No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2025-43564-tomcat_put_rce_reproduction diff --git a/cves/2025/CVE-2025-43929.md b/cves/2025/CVE-2025-43929.md index 1c4e289ac5f..c610f260dc0 100644 --- a/cves/2025/CVE-2025-43929.md +++ b/cves/2025/CVE-2025-43929.md @@ -13,5 +13,5 @@ open_actions.py in kitty before 0.41.0 does not ask for user confirmation before - https://github.com/0xBenCantCode/CVE-2025-43929 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xBenCantCode/CVE-2025-43929 diff --git a/cves/2025/CVE-2025-4396.md b/cves/2025/CVE-2025-4396.md index 073c210ff6f..426436e234b 100644 --- a/cves/2025/CVE-2025-4396.md +++ b/cves/2025/CVE-2025-4396.md @@ -14,7 +14,7 @@ The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-ba No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sup3rDav3/CVE-2025-4396 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4396.yaml diff --git a/cves/2025/CVE-2025-43960.md b/cves/2025/CVE-2025-43960.md index dee44367c84..f99d64bcd49 100644 --- a/cves/2025/CVE-2025-43960.md +++ b/cves/2025/CVE-2025-43960.md @@ -13,5 +13,5 @@ Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memor - https://github.com/far00t01/CVE-2025-43960 #### Github -No PoCs found on GitHub currently. +- https://github.com/far00t01/CVE-2025-43960 diff --git a/cves/2025/CVE-2025-4404.md b/cves/2025/CVE-2025-4404.md index 3696e260c18..d2be2734cbd 100644 --- a/cves/2025/CVE-2025-4404.md +++ b/cves/2025/CVE-2025-4404.md @@ -30,4 +30,5 @@ No PoCs from references. #### Github - https://github.com/Cyxow/CVE-2025-4404-POC +- https://github.com/Im10n/CVE-2025-4404-POC diff --git a/cves/2025/CVE-2025-44608.md b/cves/2025/CVE-2025-44608.md index 64099f60769..c885e5dbc69 100644 --- a/cves/2025/CVE-2025-44608.md +++ b/cves/2025/CVE-2025-44608.md @@ -13,5 +13,5 @@ CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulner - https://github.com/mr-xmen786/CVE-2025-44608 #### Github -No PoCs found on GitHub currently. +- https://github.com/mr-xmen786/CVE-2025-44608 diff --git a/cves/2025/CVE-2025-44998.md b/cves/2025/CVE-2025-44998.md index e5eb30fc756..f7955cc8699 100644 --- a/cves/2025/CVE-2025-44998.md +++ b/cves/2025/CVE-2025-44998.md @@ -13,5 +13,5 @@ A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemana - https://github.com/l8BL/CVE-2025-44998 #### Github -No PoCs found on GitHub currently. +- https://github.com/l8BL/CVE-2025-44998 diff --git a/cves/2025/CVE-2025-4517.md b/cves/2025/CVE-2025-4517.md index 82d73308f42..5584c40ba61 100644 --- a/cves/2025/CVE-2025-4517.md +++ b/cves/2025/CVE-2025-4517.md @@ -19,4 +19,12 @@ No PoCs from references. #### Github - https://github.com/GarryWhite109909/Graduation-Project +- https://github.com/0xDTC/CVE-2025-4517-tarfile-PATH_MAX-bypass +- https://github.com/AnimePrincess420/CVE-2025-4517-PoC +- https://github.com/AzureADTrent/CVE-2025-4517-POC +- https://github.com/Rohitberiwala/PyPath-Escape-CVE-2025-4517-Exploit-Research +- https://github.com/StealthByte0/CVE-2025-4517-poc +- https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers +- https://github.com/estebanzarate/CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC +- https://github.com/kerburenthusiasm/CVE-2025-4517-PoC diff --git a/cves/2025/CVE-2025-45619.md b/cves/2025/CVE-2025-45619.md index 10eec4a45b8..c037bf5d6de 100644 --- a/cves/2025/CVE-2025-45619.md +++ b/cves/2025/CVE-2025-45619.md @@ -13,5 +13,5 @@ An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to ex - https://github.com/weedl/CVE-2025-45619 #### Github -No PoCs found on GitHub currently. +- https://github.com/weedl/CVE-2025-45619 diff --git a/cves/2025/CVE-2025-45805.md b/cves/2025/CVE-2025-45805.md index ef6fc0cbdbd..7da1b7adf46 100644 --- a/cves/2025/CVE-2025-45805.md +++ b/cves/2025/CVE-2025-45805.md @@ -13,5 +13,5 @@ In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/mohammed-alsaqqaf/CVE-2025-45805 diff --git a/cves/2025/CVE-2025-45809.md b/cves/2025/CVE-2025-45809.md index 4d3db1ebff1..e4a06f20075 100644 --- a/cves/2025/CVE-2025-45809.md +++ b/cves/2025/CVE-2025-45809.md @@ -13,5 +13,5 @@ BerriAI litellm v1.65.4 was discovered to contain a SQL injection vulnerability - https://github.com/shadia0/Patienc/blob/main/litellm/SQL_injection.md #### Github -No PoCs found on GitHub currently. +- https://github.com/learner202649/CVE-2025-45809-PoC diff --git a/cves/2025/CVE-2025-4602.md b/cves/2025/CVE-2025-4602.md index bf4de8694ad..b35c01f85bc 100644 --- a/cves/2025/CVE-2025-4602.md +++ b/cves/2025/CVE-2025-4602.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-4602/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-4602 diff --git a/cves/2025/CVE-2025-4603.md b/cves/2025/CVE-2025-4603.md index deab5cbd767..459cb9b38cd 100644 --- a/cves/2025/CVE-2025-4603.md +++ b/cves/2025/CVE-2025-4603.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-4603/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-4603 diff --git a/cves/2025/CVE-2025-46041.md b/cves/2025/CVE-2025-46041.md index 4c345daa345..1d95d64acc1 100644 --- a/cves/2025/CVE-2025-46041.md +++ b/cves/2025/CVE-2025-46041.md @@ -13,7 +13,7 @@ A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows a - https://github.com/binneko/CVE-2025-46041 #### Github -No PoCs found on GitHub currently. +- https://github.com/binneko/CVE-2025-46041 #### ExploitDB - https://www.exploit-db.com/exploits/52327 diff --git a/cves/2025/CVE-2025-46157.md b/cves/2025/CVE-2025-46157.md index b4f495333fe..89bb52f306a 100644 --- a/cves/2025/CVE-2025-46157.md +++ b/cves/2025/CVE-2025-46157.md @@ -13,5 +13,5 @@ An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitra - https://github.com/morphine009/CVE-2025-46157 #### Github -No PoCs found on GitHub currently. +- https://github.com/morphine009/CVE-2025-46157 diff --git a/cves/2025/CVE-2025-46173.md b/cves/2025/CVE-2025-46173.md index 240f9b57aef..7420ecf7bbc 100644 --- a/cves/2025/CVE-2025-46173.md +++ b/cves/2025/CVE-2025-46173.md @@ -13,5 +13,5 @@ code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scrip - https://github.com/pruthuraut/CVE-2025-46173 #### Github -No PoCs found on GitHub currently. +- https://github.com/pruthuraut/CVE-2025-46173 diff --git a/cves/2025/CVE-2025-46203.md b/cves/2025/CVE-2025-46203.md index 038bdf6896a..67974bdffbd 100644 --- a/cves/2025/CVE-2025-46203.md +++ b/cves/2025/CVE-2025-46203.md @@ -13,5 +13,5 @@ An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privilege - https://github.com/spbavarva/CVE-2025-46203 #### Github -No PoCs found on GitHub currently. +- https://github.com/spbavarva/CVE-2025-46203 diff --git a/cves/2025/CVE-2025-46204.md b/cves/2025/CVE-2025-46204.md index d2325e6e4bf..8bc539639ab 100644 --- a/cves/2025/CVE-2025-46204.md +++ b/cves/2025/CVE-2025-46204.md @@ -13,5 +13,5 @@ An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privilege - https://github.com/spbavarva/CVE-2025-46204 #### Github -No PoCs found on GitHub currently. +- https://github.com/spbavarva/CVE-2025-46204 diff --git a/cves/2025/CVE-2025-4632.md b/cves/2025/CVE-2025-4632.md index 0e8ca08001a..178c3ac3d2b 100644 --- a/cves/2025/CVE-2025-4632.md +++ b/cves/2025/CVE-2025-4632.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/MantisToboggan-git/CVE-2025-4632-POC +- https://github.com/digitalsurgn/CVE-2025-4632_POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4632.yaml diff --git a/cves/2025/CVE-2025-46701.md b/cves/2025/CVE-2025-46701.md index 47bce45558c..28cec68a2d0 100644 --- a/cves/2025/CVE-2025-46701.md +++ b/cves/2025/CVE-2025-46701.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/gregk4sec/CVE-2025-46701 +- https://github.com/gregk4sec/CVE-2025-46701-o diff --git a/cves/2025/CVE-2025-46721.md b/cves/2025/CVE-2025-46721.md index 31721c2a141..495546af6b9 100644 --- a/cves/2025/CVE-2025-46721.md +++ b/cves/2025/CVE-2025-46721.md @@ -14,5 +14,5 @@ nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vuln - https://github.com/justinas/nosurf-cve-2025-46721 #### Github -No PoCs found on GitHub currently. +- https://github.com/justinas/nosurf-cve-2025-46721 diff --git a/cves/2025/CVE-2025-46822.md b/cves/2025/CVE-2025-46822.md index 7c866bbf644..579c03adb45 100644 --- a/cves/2025/CVE-2025-46822.md +++ b/cves/2025/CVE-2025-46822.md @@ -14,6 +14,7 @@ OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code #### Github - https://github.com/d3sca/CVE-2025-46822 +- https://github.com/HORKimhab/CVE-2025-46822 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46822.yaml diff --git a/cves/2025/CVE-2025-47227.md b/cves/2025/CVE-2025-47227.md index a75720a6b93..3930c06bebd 100644 --- a/cves/2025/CVE-2025-47227.md +++ b/cves/2025/CVE-2025-47227.md @@ -13,5 +13,6 @@ In the Production Environment extension in Netmake ScriptCase through 9.12.006 ( - https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228 #### Github -No PoCs found on GitHub currently. +- https://github.com/Outs1d3r-Net/CVE-2025-47227 +- https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228 diff --git a/cves/2025/CVE-2025-47273.md b/cves/2025/CVE-2025-47273.md index 2eeefb59e36..03e13b23129 100644 --- a/cves/2025/CVE-2025-47273.md +++ b/cves/2025/CVE-2025-47273.md @@ -14,5 +14,6 @@ setuptools is a package that allows users to download, build, install, upgrade, - https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf #### Github -No PoCs found on GitHub currently. +- https://github.com/AliElKhatteb/CVE-2025-47273-POC +- https://github.com/ahmedreda38/CVE-2025-47273-PoC diff --git a/cves/2025/CVE-2025-47445.md b/cves/2025/CVE-2025-47445.md index ab849faf2fc..0a8c5fc128d 100644 --- a/cves/2025/CVE-2025-47445.md +++ b/cves/2025/CVE-2025-47445.md @@ -13,7 +13,7 @@ Relative Path Traversal vulnerability in Themewinter Eventin allows Path Travers No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/inverterad/CVE-2025-47445-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47445.yaml diff --git a/cves/2025/CVE-2025-47549.md b/cves/2025/CVE-2025-47549.md index a664f4670aa..4b96a456e9b 100644 --- a/cves/2025/CVE-2025-47549.md +++ b/cves/2025/CVE-2025-47549.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF a - https://ryankozak.com/posts/cve-2025-47549/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-47549 diff --git a/cves/2025/CVE-2025-47550.md b/cves/2025/CVE-2025-47550.md index 1e44fd68d0c..d18ee5a6cac 100644 --- a/cves/2025/CVE-2025-47550.md +++ b/cves/2025/CVE-2025-47550.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instan - https://ryankozak.com/posts/cve-2025-47550/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-47550 diff --git a/cves/2025/CVE-2025-47812.md b/cves/2025/CVE-2025-47812.md index fe4f542a6eb..e5d2058465a 100644 --- a/cves/2025/CVE-2025-47812.md +++ b/cves/2025/CVE-2025-47812.md @@ -25,6 +25,15 @@ In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0 - https://github.com/pevinkumar10/CVE-2025-47812 - https://github.com/r0otk3r/CVE-2025-47812 - https://github.com/rxerium/CVE-2025-47812 +- https://github.com/0xS4N4TG/CVE-2025-47812 +- https://github.com/0xjuarez/CVE-2025-47812 +- https://github.com/H3XploR/Exploit_CVE-2025-47812 +- https://github.com/Majdae/CVE-2025-47812-Research +- https://github.com/dkstar11q/Blackash-CVE-2025-47812 +- https://github.com/estebanzarate/CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC +- https://github.com/havbay/CVE-2025-47812-PoC +- https://github.com/popyue/CVE-2025-47812 +- https://github.com/shadowgit30/CVE-2025-47812 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47812.yaml diff --git a/cves/2025/CVE-2025-4796.md b/cves/2025/CVE-2025-4796.md index 986817e36c1..adf5cc7d1ca 100644 --- a/cves/2025/CVE-2025-4796.md +++ b/cves/2025/CVE-2025-4796.md @@ -13,4 +13,5 @@ The Eventin plugin for WordPress is vulnerable to privilege escalation via accou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AnotherSec/CVE-2025-4796 +- https://github.com/Nxploited/CVE-2025-4796 diff --git a/cves/2025/CVE-2025-47962.md b/cves/2025/CVE-2025-47962.md index 0bc324beb0d..016c087eabd 100644 --- a/cves/2025/CVE-2025-47962.md +++ b/cves/2025/CVE-2025-47962.md @@ -13,5 +13,5 @@ Improper access control in Windows SDK allows an authorized attacker to elevate No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/q1uf3ng/CVE-2025-47962-POC diff --git a/cves/2025/CVE-2025-47987.md b/cves/2025/CVE-2025-47987.md index a57e3d83e7d..ce6b8d7ae38 100644 --- a/cves/2025/CVE-2025-47987.md +++ b/cves/2025/CVE-2025-47987.md @@ -53,6 +53,7 @@ No PoCs from references. #### Github - https://github.com/Kryptoenix/CVE-2025-47987_PoC +- https://github.com/kaleth4/CVE-2025-47987 #### ExploitDB - https://www.exploit-db.com/exploits/52541 diff --git a/cves/2025/CVE-2025-4802.md b/cves/2025/CVE-2025-4802.md index 56b2b40b6b7..7f7e8c2596c 100644 --- a/cves/2025/CVE-2025-4802.md +++ b/cves/2025/CVE-2025-4802.md @@ -13,5 +13,5 @@ Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Librar No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Betim-Hodza/CVE-2025-4802-Proof-of-Concept diff --git a/cves/2025/CVE-2025-48384.md b/cves/2025/CVE-2025-48384.md index 831b8caa1f8..dfe19f3fe5d 100644 --- a/cves/2025/CVE-2025-48384.md +++ b/cves/2025/CVE-2025-48384.md @@ -56,4 +56,7 @@ No PoCs from references. - https://github.com/testdjshan/CVE-2025-48384 - https://github.com/testtianmaaaa/CVE-2025-48384 - https://github.com/vinieger/vinieger-CVE-2025-48384-Dockerfile +- https://github.com/MarcoTondolo/cve-2025-48384-poc +- https://github.com/vignesh21-git/CVE-2025-48384 +- https://github.com/zr0n/CVE-2025-48384-main diff --git a/cves/2025/CVE-2025-48561.md b/cves/2025/CVE-2025-48561.md index 19c895ad6ed..34f1a1b6b92 100644 --- a/cves/2025/CVE-2025-48561.md +++ b/cves/2025/CVE-2025-48561.md @@ -16,5 +16,5 @@ In multiple locations, there is a possible way to access data displayed on the s - https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6 #### Github -No PoCs found on GitHub currently. +- https://github.com/demining/Pixnapping-Attack-on-Android diff --git a/cves/2025/CVE-2025-48734.md b/cves/2025/CVE-2025-48734.md index de94f1e461e..3638dfa6031 100644 --- a/cves/2025/CVE-2025-48734.md +++ b/cves/2025/CVE-2025-48734.md @@ -15,5 +15,5 @@ Improper Access Control vulnerability in Apache Commons.A special BeanIntrospect No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/h3raklez/CVE-2025-48734 diff --git a/cves/2025/CVE-2025-48799.md b/cves/2025/CVE-2025-48799.md index 5126f17a4c2..1cfdba0c0e6 100644 --- a/cves/2025/CVE-2025-48799.md +++ b/cves/2025/CVE-2025-48799.md @@ -31,4 +31,5 @@ Improper link resolution before file access ('link following') in Windows Update #### Github - https://github.com/Wh04m1001/CVE-2025-48799 - https://github.com/painoob/CVE-2025-48799 +- https://github.com/gmh5225/CVE-2025-48799- diff --git a/cves/2025/CVE-2025-48827.md b/cves/2025/CVE-2025-48827.md index e9a7576db8a..ebf7d202cd5 100644 --- a/cves/2025/CVE-2025-48827.md +++ b/cves/2025/CVE-2025-48827.md @@ -17,6 +17,7 @@ vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated use #### Github - https://github.com/0xgh057r3c0n/CVE-2025-48827 - https://github.com/wiseep/CVE-2025-48827 +- https://github.com/sh4den/CVE-2025-48827 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48827.yaml diff --git a/cves/2025/CVE-2025-49001.md b/cves/2025/CVE-2025-49001.md index f2a101e6565..5d785a44ac2 100644 --- a/cves/2025/CVE-2025-49001.md +++ b/cves/2025/CVE-2025-49001.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49001.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dataease/CVE-2025-49001 diff --git a/cves/2025/CVE-2025-49002.md b/cves/2025/CVE-2025-49002.md index f3f943c557b..3b8fcef4217 100644 --- a/cves/2025/CVE-2025-49002.md +++ b/cves/2025/CVE-2025-49002.md @@ -14,7 +14,8 @@ DataEase is an open source business intelligence and data visualization tool. Ve - https://github.com/dataease/dataease/security/advisories/GHSA-h7hj-4j78-cvc7 #### Github -No PoCs found on GitHub currently. +- https://github.com/Feng-Huang-0520/DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002 +- https://github.com/jiuzui129-arch/CVE-2025-49002 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49002.yaml diff --git a/cves/2025/CVE-2025-49091.md b/cves/2025/CVE-2025-49091.md index 889f29b4120..73e3098719e 100644 --- a/cves/2025/CVE-2025-49091.md +++ b/cves/2025/CVE-2025-49091.md @@ -14,5 +14,5 @@ KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. I - https://www.openwall.com/lists/oss-security/2025/06/10/5 #### Github -No PoCs found on GitHub currently. +- https://github.com/thefreestyleresearcher/CVE-2025-49091-Gajim-RCE diff --git a/cves/2025/CVE-2025-49113.md b/cves/2025/CVE-2025-49113.md index 692390b5cbd..184d7dbde5c 100644 --- a/cves/2025/CVE-2025-49113.md +++ b/cves/2025/CVE-2025-49113.md @@ -37,6 +37,8 @@ Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execu - https://github.com/punitdarji/roundcube-cve-2025-49113 - https://github.com/rasool13x/exploit-CVE-2025-49113 - https://github.com/rxerium/CVE-2025-49113 +- https://github.com/Evillm/CVE-2025-49113-PoC +- https://github.com/mooder1/CVE-2025-49113 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49113.yaml diff --git a/cves/2025/CVE-2025-49131.md b/cves/2025/CVE-2025-49131.md index 9e4531a6924..4481bba08cd 100644 --- a/cves/2025/CVE-2025-49131.md +++ b/cves/2025/CVE-2025-49131.md @@ -13,5 +13,5 @@ FastGPT is an open-source project that provides a platform for building, deployi - https://github.com/labring/FastGPT/security/advisories/GHSA-f3pf-r3g7-g895 #### Github -No PoCs found on GitHub currently. +- https://github.com/Wenura17125/cve-2025-49131-poc diff --git a/cves/2025/CVE-2025-49132.md b/cves/2025/CVE-2025-49132.md index 0db562c1b93..55067c28867 100644 --- a/cves/2025/CVE-2025-49132.md +++ b/cves/2025/CVE-2025-49132.md @@ -23,6 +23,23 @@ No PoCs from references. - https://github.com/nfoltc/CVE-2025-49132 - https://github.com/pxxdrobits/CVE-2025-49132 - https://github.com/qiaojojo/CVE-2025-49132_poc +- https://github.com/4nuxd/CVE-2025-49132 +- https://github.com/Ahmedf000/CVE-2025-49132_HTB_SEASON10 +- https://github.com/Pwndalf/CVE-2025-49132-PoC +- https://github.com/YoyoChaud/CVE-2025-49132 +- https://github.com/dollarboysushil/CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE- +- https://github.com/kerburenthusiasm/CVE-2025-49132-PoC +- https://github.com/malw0re/CVE-2025-49132-Mods +- https://github.com/matesz44/CVE-2025-49132 +- https://github.com/nik123-py/CVE-2025-49132_HTB_SEASON10 +- https://github.com/popyue/CVE-2025-49132 +- https://github.com/ramzihafiz/CVE-2025-49132 +- https://github.com/rippsec/CVE-2025-49132-PHP-PEAR +- https://github.com/scroollocker/CVE-2025-49132 +- https://github.com/str1keboo/CVE-2025-49132 +- https://github.com/symphony2colour/HTB-Pterodactyl-RCE-CVE-2025-49132 +- https://github.com/thealchimist86/CVE-2025-49132-Pterodactyl-Panel-RCE +- https://github.com/typicalsmc/CVE-2025-49132-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49132.yaml diff --git a/cves/2025/CVE-2025-49144.md b/cves/2025/CVE-2025-49144.md index 4faf5f4d731..63e134fbb1b 100644 --- a/cves/2025/CVE-2025-49144.md +++ b/cves/2025/CVE-2025-49144.md @@ -23,4 +23,5 @@ Notepad++ is a free and open-source source code editor. In versions 8.8.1 and pr - https://github.com/b0ySie7e/Notepad-8.8.1_CVE-2025-49144 - https://github.com/onniio/CVE-2025-49144 - https://github.com/timsonner/CVE-2025-49144-Research +- https://github.com/havertz2110/CVE-2025-49144-PoC diff --git a/cves/2025/CVE-2025-49493.md b/cves/2025/CVE-2025-49493.md index 8ce72f87415..f24d646443e 100644 --- a/cves/2025/CVE-2025-49493.md +++ b/cves/2025/CVE-2025-49493.md @@ -13,7 +13,7 @@ Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML Exte No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sh4den/CVE-2025-49493 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49493.yaml diff --git a/cves/2025/CVE-2025-49596.md b/cves/2025/CVE-2025-49596.md index 4d2410f6aa1..1d22e5263a1 100644 --- a/cves/2025/CVE-2025-49596.md +++ b/cves/2025/CVE-2025-49596.md @@ -14,6 +14,7 @@ The MCP inspector is a developer tool for testing and debugging MCP servers. Ver #### Github - https://github.com/ashiqrehan-21/MCP-Inspector-CVE-2025-49596 +- https://github.com/pppxo/CVE-2025-49596-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49596.yaml diff --git a/cves/2025/CVE-2025-49844.md b/cves/2025/CVE-2025-49844.md index 9dcb8d7c5dc..585b7b16ad6 100644 --- a/cves/2025/CVE-2025-49844.md +++ b/cves/2025/CVE-2025-49844.md @@ -15,6 +15,19 @@ No PoCs from references. #### Github - https://github.com/Zain3311/CVE-2025-49844 - https://github.com/alsyundawy/eradicate-zimbra-malware +- https://github.com/0xBlackash/CVE-2025-49844 +- https://github.com/Cilectiy/CVE-2025-49844 +- https://github.com/MiclelsonCN/CVE-2025-49844_POC +- https://github.com/angelusrivera/CVE-2025-49844 +- https://github.com/cc3305/CVE-2025-49844 +- https://github.com/dwisiswant0/CVE-2025-49844 +- https://github.com/elyasbassir/CVE-2025-49844 +- https://github.com/lastvocher/redis-CVE-2025-49844 +- https://github.com/open-flaw/CVE-2025-49844 +- https://github.com/pedrorichil/CVE-2025-49844 +- https://github.com/raminfp/redis_exploit +- https://github.com/saneki/cve-2025-49844 +- https://github.com/zbyszkok/CVE-2025-49844-RediShell-AI-made-Revshell #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-49844.yaml diff --git a/cves/2025/CVE-2025-50165.md b/cves/2025/CVE-2025-50165.md index 94556dc3c7c..f37517c488a 100644 --- a/cves/2025/CVE-2025-50165.md +++ b/cves/2025/CVE-2025-50165.md @@ -16,5 +16,5 @@ Untrusted pointer dereference in Microsoft Graphics Component allows an unauthor No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/encrypter15/CVE-2025-50165-x64-Exploit diff --git a/cves/2025/CVE-2025-50168.md b/cves/2025/CVE-2025-50168.md index a8aa994d735..89cf33d01ec 100644 --- a/cves/2025/CVE-2025-50168.md +++ b/cves/2025/CVE-2025-50168.md @@ -23,5 +23,5 @@ Access of resource using incompatible type ('type confusion') in Windows Win32K No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/D4m0n/CVE-2025-50168-pwn2own-berlin-2025 diff --git a/cves/2025/CVE-2025-50286.md b/cves/2025/CVE-2025-50286.md index 0e288de9377..94ab7d907c3 100644 --- a/cves/2025/CVE-2025-50286.md +++ b/cves/2025/CVE-2025-50286.md @@ -13,7 +13,8 @@ A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authen - https://github.com/binneko/CVE-2025-50286 #### Github -No PoCs found on GitHub currently. +- https://github.com/binneko/CVE-2025-50286 +- https://github.com/x1o3/CVE-2025-50286 #### ExploitDB - https://www.exploit-db.com/exploits/52402 diff --git a/cves/2025/CVE-2025-50460.md b/cves/2025/CVE-2025-50460.md index d4a0350d54f..ff980503192 100644 --- a/cves/2025/CVE-2025-50460.md +++ b/cves/2025/CVE-2025-50460.md @@ -13,5 +13,5 @@ A remote code execution (RCE) vulnerability exists in the ms-swift project versi - https://github.com/Anchor0221/CVE-2025-50460 #### Github -No PoCs found on GitHub currently. +- https://github.com/Anchor0221/CVE-2025-50460 diff --git a/cves/2025/CVE-2025-50461.md b/cves/2025/CVE-2025-50461.md index a8b2b7d0d38..73a37e6c0b2 100644 --- a/cves/2025/CVE-2025-50461.md +++ b/cves/2025/CVE-2025-50461.md @@ -13,5 +13,5 @@ A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically - https://github.com/Anchor0221/CVE-2025-50461 #### Github -No PoCs found on GitHub currently. +- https://github.com/Anchor0221/CVE-2025-50461 diff --git a/cves/2025/CVE-2025-50472.md b/cves/2025/CVE-2025-50472.md index 49e18d70147..c2fd68947b2 100644 --- a/cves/2025/CVE-2025-50472.md +++ b/cves/2025/CVE-2025-50472.md @@ -13,5 +13,5 @@ The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execu - https://github.com/xhjy2020/CVE-2025-50472 #### Github -No PoCs found on GitHub currently. +- https://github.com/Before-Rain/CVE-2025-50472 diff --git a/cves/2025/CVE-2025-50481.md b/cves/2025/CVE-2025-50481.md index 9cca1a5957c..73eaf924bfe 100644 --- a/cves/2025/CVE-2025-50481.md +++ b/cves/2025/CVE-2025-50481.md @@ -13,7 +13,7 @@ A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add o - https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS #### Github -No PoCs found on GitHub currently. +- https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS #### ExploitDB - https://www.exploit-db.com/exploits/52385 diff --git a/cves/2025/CVE-2025-5058.md b/cves/2025/CVE-2025-5058.md index 2204b0aac7e..2046ad29fe8 100644 --- a/cves/2025/CVE-2025-5058.md +++ b/cves/2025/CVE-2025-5058.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-5058/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-5058 diff --git a/cves/2025/CVE-2025-50738.md b/cves/2025/CVE-2025-50738.md index 5f54aa1af66..993efd65a1b 100644 --- a/cves/2025/CVE-2025-50738.md +++ b/cves/2025/CVE-2025-50738.md @@ -13,7 +13,7 @@ The Memos application, up to version v0.24.3, allows for the embedding of markdo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/tiemio/CVE-2025-50738-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-50738.yaml diff --git a/cves/2025/CVE-2025-50754.md b/cves/2025/CVE-2025-50754.md index 3e7c63c6c5d..de09fe02866 100644 --- a/cves/2025/CVE-2025-50754.md +++ b/cves/2025/CVE-2025-50754.md @@ -13,5 +13,5 @@ Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerabili - https://github.com/furk4nyildiz/CVE-2025-50754-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/furk4nyildiz/CVE-2025-50754-PoC diff --git a/cves/2025/CVE-2025-50946.md b/cves/2025/CVE-2025-50946.md index 4220d29bad6..5fb1bacb620 100644 --- a/cves/2025/CVE-2025-50946.md +++ b/cves/2025/CVE-2025-50946.md @@ -13,5 +13,5 @@ OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/runt1me/cve-2025-50946 diff --git a/cves/2025/CVE-2025-51040.md b/cves/2025/CVE-2025-51040.md index 198e588fa35..837414b0f51 100644 --- a/cves/2025/CVE-2025-51040.md +++ b/cves/2025/CVE-2025-51040.md @@ -13,5 +13,5 @@ Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vuln - https://github.com/p0et08/Electrolink-FM-DAB-TV #### Github -No PoCs found on GitHub currently. +- https://github.com/p0et08/Electrolink-FM-DAB-TV diff --git a/cves/2025/CVE-2025-51458.md b/cves/2025/CVE-2025-51458.md index f0004d095a8..858c239557a 100644 --- a/cves/2025/CVE-2025-51458.md +++ b/cves/2025/CVE-2025-51458.md @@ -14,5 +14,5 @@ SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows - https://www.gecko.security/blog/cve-2025-51458 #### Github -No PoCs found on GitHub currently. +- https://github.com/q1uf3ng/CVE-2025-51458-exp diff --git a/cves/2025/CVE-2025-51471.md b/cves/2025/CVE-2025-51471.md index cf9d06c1fff..0d9b229342f 100644 --- a/cves/2025/CVE-2025-51471.md +++ b/cves/2025/CVE-2025-51471.md @@ -14,5 +14,5 @@ Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 - https://www.gecko.security/blog/cve-2025-51471 #### Github -No PoCs found on GitHub currently. +- https://github.com/ajtazer/CVE-2025-51471-POC diff --git a/cves/2025/CVE-2025-51482.md b/cves/2025/CVE-2025-51482.md index 5513035ed2f..c42c1c030be 100644 --- a/cves/2025/CVE-2025-51482.md +++ b/cves/2025/CVE-2025-51482.md @@ -15,6 +15,7 @@ Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_so #### Github - https://github.com/Kai-One001/Letta-CVE-2025-51482-RCE +- https://github.com/c0gnit00/CVE-2024-51482 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51482.yaml diff --git a/cves/2025/CVE-2025-51529.md b/cves/2025/CVE-2025-51529.md index e103e0e8679..fdabef2f71e 100644 --- a/cves/2025/CVE-2025-51529.md +++ b/cves/2025/CVE-2025-51529.md @@ -13,5 +13,5 @@ Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cooki - https://github.com/piotrmaciejbednarski/CVE-2025-51529 #### Github -No PoCs found on GitHub currently. +- https://github.com/piotrmaciejbednarski/CVE-2025-51529 diff --git a/cves/2025/CVE-2025-51586.md b/cves/2025/CVE-2025-51586.md index 87d926d7321..249d0e45308 100644 --- a/cves/2025/CVE-2025-51586.md +++ b/cves/2025/CVE-2025-51586.md @@ -13,7 +13,7 @@ An issue was discoverd in file controllers/admin/AdminLoginController.php in Pre - https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md #### Github -No PoCs found on GitHub currently. +- https://github.com/7h30th3r0n3/CVE-2025-51586-PrestaShop-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51586.yaml diff --git a/cves/2025/CVE-2025-51858.md b/cves/2025/CVE-2025-51858.md index 400a6f161cd..2bc8e73a458 100644 --- a/cves/2025/CVE-2025-51858.md +++ b/cves/2025/CVE-2025-51858.md @@ -13,5 +13,5 @@ Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025- - https://github.com/Secsys-FDU/CVE-2025-51858 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51858 diff --git a/cves/2025/CVE-2025-51862.md b/cves/2025/CVE-2025-51862.md index 8cdd0e5c285..e1cbd824435 100644 --- a/cves/2025/CVE-2025-51862.md +++ b/cves/2025/CVE-2025-51862.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) t - https://github.com/Secsys-FDU/CVE-2025-51862 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51862 diff --git a/cves/2025/CVE-2025-51865.md b/cves/2025/CVE-2025-51865.md index 7f5aa3fe0e2..8865eced1ec 100644 --- a/cves/2025/CVE-2025-51865.md +++ b/cves/2025/CVE-2025-51865.md @@ -13,5 +13,5 @@ Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 - https://github.com/Secsys-FDU/CVE-2025-51865 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51865 diff --git a/cves/2025/CVE-2025-51867.md b/cves/2025/CVE-2025-51867.md index db9c1ee204e..0fbc30f8d8d 100644 --- a/cves/2025/CVE-2025-51867.md +++ b/cves/2025/CVE-2025-51867.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfic - https://github.com/Secsys-FDU/CVE-2025-51867 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51867 diff --git a/cves/2025/CVE-2025-51868.md b/cves/2025/CVE-2025-51868.md index aac84c0866c..05f5a0cfa18 100644 --- a/cves/2025/CVE-2025-51868.md +++ b/cves/2025/CVE-2025-51868.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v - https://github.com/Secsys-FDU/CVE-2025-51868 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51868 diff --git a/cves/2025/CVE-2025-51869.md b/cves/2025/CVE-2025-51869.md index 5d92f668eef..e22821067c8 100644 --- a/cves/2025/CVE-2025-51869.md +++ b/cves/2025/CVE-2025-51869.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 a - https://github.com/Secsys-FDU/CVE-2025-51869 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51869 diff --git a/cves/2025/CVE-2025-52289.md b/cves/2025/CVE-2025-52289.md index 2edb78eaaf7..94f39327db7 100644 --- a/cves/2025/CVE-2025-52289.md +++ b/cves/2025/CVE-2025-52289.md @@ -13,5 +13,5 @@ A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly reg - https://github.com/Madhav-Bhardwaj/CVE-2025-52289 #### Github -No PoCs found on GitHub currently. +- https://github.com/Madhav-Bhardwaj/CVE-2025-52289 diff --git a/cves/2025/CVE-2025-52488.md b/cves/2025/CVE-2025-52488.md index d0b28770b3f..08cee7f83ff 100644 --- a/cves/2025/CVE-2025-52488.md +++ b/cves/2025/CVE-2025-52488.md @@ -13,7 +13,7 @@ DNN (formerly DotNetNuke) is an open-source web content management platform (CMS No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sh4den/CVE-2025-52488 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52488.yaml diff --git a/cves/2025/CVE-2025-52689.md b/cves/2025/CVE-2025-52689.md index a01c0bbb663..2dae277949b 100644 --- a/cves/2025/CVE-2025-52689.md +++ b/cves/2025/CVE-2025-52689.md @@ -18,5 +18,5 @@ Successful exploitation of the vulnerability could allow an unauthenticated atta - https://github.com/UltimateHG/CVE-2025-52689-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/UltimateHG/CVE-2025-52689-PoC diff --git a/cves/2025/CVE-2025-52913.md b/cves/2025/CVE-2025-52913.md index 2d0ebfa2aad..f00d9c83902 100644 --- a/cves/2025/CVE-2025-52913.md +++ b/cves/2025/CVE-2025-52913.md @@ -13,5 +13,5 @@ A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiColl No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/pgaSUS99/PoC-CVE-2025-52913 diff --git a/cves/2025/CVE-2025-52970.md b/cves/2025/CVE-2025-52970.md index b12403278b6..7bf1407f434 100644 --- a/cves/2025/CVE-2025-52970.md +++ b/cves/2025/CVE-2025-52970.md @@ -18,6 +18,7 @@ A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, #### Github - https://github.com/34zY/CVE-2025-52970 - https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass +- https://github.com/imbas007/POC-CVE-2025-52970 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52970.yaml diff --git a/cves/2025/CVE-2025-53020.md b/cves/2025/CVE-2025-53020.md index 2847d7d6213..331bf2b9f69 100644 --- a/cves/2025/CVE-2025-53020.md +++ b/cves/2025/CVE-2025-53020.md @@ -13,5 +13,5 @@ Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Ser No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/galbarnahum/CVE-2025-53020-PoC diff --git a/cves/2025/CVE-2025-53367.md b/cves/2025/CVE-2025-53367.md index 22e9f28d601..516474b348c 100644 --- a/cves/2025/CVE-2025-53367.md +++ b/cves/2025/CVE-2025-53367.md @@ -19,4 +19,5 @@ DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing #### Github - https://github.com/kevinbackhouse/DjVuLibre-poc-CVE-2025-53367 +- https://github.com/ThePhykon/CVE-2025-53367-POC diff --git a/cves/2025/CVE-2025-53558.md b/cves/2025/CVE-2025-53558.md index 7619e3b8c97..3cfceb4d6cd 100644 --- a/cves/2025/CVE-2025-53558.md +++ b/cves/2025/CVE-2025-53558.md @@ -15,7 +15,7 @@ ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/houqe/POC_CVE-2025-53558 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53558.yaml diff --git a/cves/2025/CVE-2025-53690.md b/cves/2025/CVE-2025-53690.md index fd1ee3a471b..c64a44d738f 100644 --- a/cves/2025/CVE-2025-53690.md +++ b/cves/2025/CVE-2025-53690.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/rxerium/CVE-2025-53690 +- https://github.com/ErikLearningSec/CVE-2025-53690-POC diff --git a/cves/2025/CVE-2025-53770.md b/cves/2025/CVE-2025-53770.md index 963b6628d50..a03d6fb2b88 100644 --- a/cves/2025/CVE-2025-53770.md +++ b/cves/2025/CVE-2025-53770.md @@ -46,6 +46,11 @@ Deserialization of untrusted data in on-premises Microsoft SharePoint Server all - https://github.com/saladin0x1/CVE-2025-53770 - https://github.com/soltanali0/CVE-2025-53770-Exploit - https://github.com/unk9vvn/sharepoint-toolpane +- https://github.com/0xKr1x/CVE-2025-53770-Scanner +- https://github.com/J4ck3LSyN-Gen2/CVE-2025-53770 +- https://github.com/gmh5225/ZeroPoint +- https://github.com/kaizensecurity/CVE-2025-53770 +- https://github.com/victormbogu1/LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53770.yaml diff --git a/cves/2025/CVE-2025-53772.md b/cves/2025/CVE-2025-53772.md index 3f86e0d1ee6..2504d33b9e7 100644 --- a/cves/2025/CVE-2025-53772.md +++ b/cves/2025/CVE-2025-53772.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Momollax/CVE-2025-53772-IIS-WebDeploy-RCE - https://github.com/fortihack/CVE-2025-53772 +- https://github.com/sailay1996/CVE-2025-53772 diff --git a/cves/2025/CVE-2025-53779.md b/cves/2025/CVE-2025-53779.md index 99edb13e26e..b9a38173cfc 100644 --- a/cves/2025/CVE-2025-53779.md +++ b/cves/2025/CVE-2025-53779.md @@ -14,5 +14,5 @@ Relative path traversal in Windows Kerberos allows an authorized attacker to ele No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2025-53779-kerberos_bypass_reproduction diff --git a/cves/2025/CVE-2025-54068.md b/cves/2025/CVE-2025-54068.md index 3fd63db9dd5..06a887fdf17 100644 --- a/cves/2025/CVE-2025-54068.md +++ b/cves/2025/CVE-2025-54068.md @@ -14,7 +14,12 @@ Livewire is a full-stack framework for Laravel. In Livewire v3 up to and includi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/flame-11/CVE-2025-54068-livewire +- https://github.com/haxorstars/CVE-2025-54068 +- https://github.com/synacktiv/Livepyre #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54068.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/livewire/CVE-2025-54068 diff --git a/cves/2025/CVE-2025-54123.md b/cves/2025/CVE-2025-54123.md index 08351fd8448..127b10c5b3c 100644 --- a/cves/2025/CVE-2025-54123.md +++ b/cves/2025/CVE-2025-54123.md @@ -14,7 +14,12 @@ Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, th - https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-r4h8-hfp2-ggmf #### Github -No PoCs found on GitHub currently. +- https://github.com/0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit +- https://github.com/0xk4rth1/CVE-2025-54123 +- https://github.com/davidzzo23/CVE-2025-54123 +- https://github.com/f4dee-backup/CVE-2025-54123 +- https://github.com/kasem545/CVE-2025-54123-Poc +- https://github.com/tristanqtn/CVE-2025-54123 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54123.yaml diff --git a/cves/2025/CVE-2025-54135.md b/cves/2025/CVE-2025-54135.md index 93ecd367847..5307523fe40 100644 --- a/cves/2025/CVE-2025-54135.md +++ b/cves/2025/CVE-2025-54135.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/anntsmart/CVE-2025-54135 +- https://github.com/hn1e13/test-mcp diff --git a/cves/2025/CVE-2025-5419.md b/cves/2025/CVE-2025-5419.md index 2e7615fd1e2..ed4fccdecd6 100644 --- a/cves/2025/CVE-2025-5419.md +++ b/cves/2025/CVE-2025-5419.md @@ -17,4 +17,5 @@ Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allow - https://github.com/Petitoto/chromium-exploit-dev - https://github.com/mistymntncop/CVE-2025-5419 - https://github.com/riemannj/CVE-2025-5419 +- https://github.com/bjrjk/CVE-2025-5419 diff --git a/cves/2025/CVE-2025-54236.md b/cves/2025/CVE-2025-54236.md index 09ace653f10..06c42c4d88e 100644 --- a/cves/2025/CVE-2025-54236.md +++ b/cves/2025/CVE-2025-54236.md @@ -14,7 +14,10 @@ Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, - https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento #### Github -No PoCs found on GitHub currently. +- https://github.com/Baba01hacker666/cve-2025-54236 +- https://github.com/Dx3iZ/CVE-2025-54236 +- https://github.com/Jenderal92/magento-upload-auto-submit-zoneh +- https://github.com/alexb616/SessionReaper-CVE-2025-54236 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54236.yaml diff --git a/cves/2025/CVE-2025-54253.md b/cves/2025/CVE-2025-54253.md index 3c8eb08cf87..caeb9439660 100644 --- a/cves/2025/CVE-2025-54253.md +++ b/cves/2025/CVE-2025-54253.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Shivshantp/CVE-2025-54253-Exploit-Demo +- https://github.com/AdityaBhatt3010/CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day diff --git a/cves/2025/CVE-2025-54309.md b/cves/2025/CVE-2025-54309.md index 0717fb1835f..a346cc77bc3 100644 --- a/cves/2025/CVE-2025-54309.md +++ b/cves/2025/CVE-2025-54309.md @@ -22,6 +22,7 @@ CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is - https://github.com/foregenix/CVE-2025-54309 - https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 - https://github.com/whisperer1290/CVE-2025-54309__Enhanced_exploit +- https://github.com/0xLittleSpidy/CVE-2025-54309 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-54309.yaml diff --git a/cves/2025/CVE-2025-54352.md b/cves/2025/CVE-2025-54352.md index fa7aebc626d..0e25c373371 100644 --- a/cves/2025/CVE-2025-54352.md +++ b/cves/2025/CVE-2025-54352.md @@ -14,4 +14,6 @@ WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private a #### Github - https://github.com/yohannslm/CVE-2025-54352 +- https://github.com/limmmw/CVE-2025-54352 +- https://github.com/mufasa-noir/XML-RPC-Pingback-Vulnerability diff --git a/cves/2025/CVE-2025-54416.md b/cves/2025/CVE-2025-54416.md index 93aa3a34a6c..c4c666bf487 100644 --- a/cves/2025/CVE-2025-54416.md +++ b/cves/2025/CVE-2025-54416.md @@ -13,5 +13,5 @@ tj-actions/branch-names is a Github actions repository that contains workflows t - https://github.com/tj-actions/branch-names/security/advisories/GHSA-gq52-6phf-x2r6 #### Github -No PoCs found on GitHub currently. +- https://github.com/HexborneStudio/atlas-tj-actions-poc diff --git a/cves/2025/CVE-2025-54424.md b/cves/2025/CVE-2025-54424.md index bfaa17f0aec..6055c35d5f6 100644 --- a/cves/2025/CVE-2025-54424.md +++ b/cves/2025/CVE-2025-54424.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/Mr-xn/CVE-2025-54424 - https://github.com/hophtien/CVE-2025-54424 - https://github.com/RBKD-SEC/POC +- https://github.com/anonnymous5/1Panel-CVE-2025-54424- diff --git a/cves/2025/CVE-2025-54574.md b/cves/2025/CVE-2025-54574.md index 08922a5894d..a3d11161d6a 100644 --- a/cves/2025/CVE-2025-54574.md +++ b/cves/2025/CVE-2025-54574.md @@ -13,5 +13,5 @@ Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulner No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/gmh5225/Blackash-CVE-2025-54574 diff --git a/cves/2025/CVE-2025-54782.md b/cves/2025/CVE-2025-54782.md index 41589816eda..f79d81c04e4 100644 --- a/cves/2025/CVE-2025-54782.md +++ b/cves/2025/CVE-2025-54782.md @@ -16,7 +16,8 @@ Nest is a framework for building scalable Node.js server-side applications. In v - https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7 #### Github -No PoCs found on GitHub currently. +- https://github.com/DDestinys/CVE-2025-54782 +- https://github.com/vxaretra/CVE-2025-54782 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54782.yaml diff --git a/cves/2025/CVE-2025-54874.md b/cves/2025/CVE-2025-54874.md index e4f4bc73950..8f2b24ed41c 100644 --- a/cves/2025/CVE-2025-54874.md +++ b/cves/2025/CVE-2025-54874.md @@ -13,5 +13,5 @@ OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3 - https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV #### Github -No PoCs found on GitHub currently. +- https://github.com/cyhe50/cve-2025-54874-poc diff --git a/cves/2025/CVE-2025-54918.md b/cves/2025/CVE-2025-54918.md index 2c0fddb719e..df0c4d95e83 100644 --- a/cves/2025/CVE-2025-54918.md +++ b/cves/2025/CVE-2025-54918.md @@ -52,4 +52,5 @@ No PoCs from references. #### Github - https://github.com/mrk336/From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps +- https://github.com/Wh0am123/CVE-2025-54918-POC diff --git a/cves/2025/CVE-2025-54939.md b/cves/2025/CVE-2025-54939.md index 70c56c287a4..01e9470406b 100644 --- a/cves/2025/CVE-2025-54939.md +++ b/cves/2025/CVE-2025-54939.md @@ -13,5 +13,5 @@ LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yohannslm/CVE-2025-54939 diff --git a/cves/2025/CVE-2025-55182.md b/cves/2025/CVE-2025-55182.md index 732bde58deb..d643afa4206 100644 --- a/cves/2025/CVE-2025-55182.md +++ b/cves/2025/CVE-2025-55182.md @@ -26,6 +26,273 @@ No PoCs from references. - https://github.com/JotaEspig/CVE-2025-66478-PoC-Reverse-Shell - https://github.com/RBKD-SEC/POC - https://github.com/VaultGuardian/observer +- https://github.com/0x0asif/CVE-2025-55182 +- https://github.com/0xBlackash/CVE-2025-55182 +- https://github.com/0xN7y/CVE-2025-55182 +- https://github.com/0xPThree/cve-2025-55182 +- https://github.com/0xROI/CVE-2025-55182 +- https://github.com/0xSalm0n/CVE-2025-55182 +- https://github.com/0xsj/CVE-2025-55182 +- https://github.com/6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project- +- https://github.com/AbdullahMaqbool22/Explosive-As-Hell-MCS-Qualifer-Web-500 +- https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182 +- https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web +- https://github.com/AggressiveUser/React2Hell +- https://github.com/AkhmadKholmurodov/React2Shell_Exploit +- https://github.com/Alejandro609x/JEFAZO-CVE-2025-55182-Checker +- https://github.com/AliHzSec/CVE-2025-55182 +- https://github.com/Archerkong/CVE-2025-55182 +- https://github.com/AsadAhmad-1337/React-2-Shell +- https://github.com/BBD-YZZ/CVE-2025-55182 +- https://github.com/BIG02-bot/React2Shell-CVE-2025-55182-An-lise-T-cnica +- https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell +- https://github.com/BrianLopezM99/react2shell-CVE-2025-55182 +- https://github.com/Call123X/-cve-2025-55182 +- https://github.com/CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit +- https://github.com/Chocapikk/CVE-2025-55182 +- https://github.com/Cillian-Collins/CVE-2025-55182 +- https://github.com/CirqueiraDev/MassExploit-CVE-2025-55182 +- https://github.com/CrazyloveforWeb/Golang-CVE-2025-55182-POC +- https://github.com/Darker-Ink/react-ssr-vulnerability +- https://github.com/DevVaibhav07/POC-CVE-2025-55182 +- https://github.com/Dh4v4l8/CVE-2025-55182-poc-tool +- https://github.com/DoobTheGoober/CVE-2025-55182-Test-Server +- https://github.com/EQSTLab/CVE-2025-55182 +- https://github.com/Emiyelbarto/CVE-2025-55182-PoC +- https://github.com/Evillm/CVE-2025-55182-PoC +- https://github.com/EynaExp/CVE-2025-55182-POC +- https://github.com/Faithtiannn/CVE-2025-55182 +- https://github.com/Fomovet/cve-2025-55182 +- https://github.com/FurkanKAYAPINAR/ReactNext2Shell +- https://github.com/George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0- +- https://github.com/Golden-Secure/CVE-2025-55182 +- https://github.com/Gymnott1/CVE-2025-55182 +- https://github.com/H4R335HR/reactshell +- https://github.com/HUAHUAI23/CVE-2025-55182-POC +- https://github.com/Herick-Costa/CVE-2025-55182-React2Shell-RCE +- https://github.com/I3r1h0n/React2Shell +- https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell +- https://github.com/IrsyadSEC/CVE-2025-55182-MassPayloadAttack +- https://github.com/J4ck3LSyN-Gen2/CVE-2025-55182 +- https://github.com/Jaycelation/CVE-2025-55182 +- https://github.com/Jenderal92/CVE-2025-55182-React2shell +- https://github.com/KingHacker353/R2C-CVE-2025-55182-66478 +- https://github.com/LC-pro/CVE-2025-55182-EXP +- https://github.com/LQTjim/next-bug-CVE-2025-55182 +- https://github.com/Least-Significant-Bit/CVE-2025-55182 +- https://github.com/Legus-Yeung/CVE-2025-55182-exploit +- https://github.com/LemonTeatw1/CVE-2025-55182-exploit +- https://github.com/LucasPDiniz/CVE-2025-55182 +- https://github.com/LuizHenz/PoC-CVE-2025-55182 +- https://github.com/LvMalware/CVE-2025-55182 +- https://github.com/M4rgs/CVE-2025-55182-React2Shell-Exploit +- https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell +- https://github.com/MammaniNelsonD/React2P4IM0Nshell +- https://github.com/MedusaSH/POC-CVE-2025-55182 +- https://github.com/MikeTheHash/CVE-2025-55182 +- https://github.com/MoLeft/React2Shell-Toolbox +- https://github.com/Mr-Destroyer/CVE-2025-55182 +- https://github.com/MrR0b0t19/CVE-2025-55182-shellinteractive +- https://github.com/MrSol0/CVE-2025-55182-Terminal +- https://github.com/MuharremK0/Info-Sys-Security-CVE-2025-55182 +- https://github.com/MyCompanyOrganization/React2Shell-Kingdom +- https://github.com/Namsom007/CVE-2025-55182-Exploit +- https://github.com/NathanJ60/react2shell-interactive +- https://github.com/Night-have-dreams/CVE-2025-55182-PoC +- https://github.com/Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182 +- https://github.com/Pa2sw0rd/exploit-CVE-2025-55182-poc +- https://github.com/Phucc29/CVE-2025-55182 +- https://github.com/Rat5ak/CVE-2025-55182-React2Shell-RCE-POC +- https://github.com/RavinduRathnayaka/CVE-2025-55182-PoC +- https://github.com/Rsatan/Next.js-Exploit-Tool +- https://github.com/RuoJi6/CVE-2025-55182-RCE-shell +- https://github.com/RyosukeDTomita/CVE-2025-55182 +- https://github.com/S-Mughal/NextJS-app-CVE-2025-55182 +- https://github.com/S3cr3t-SDN/React4Shell +- https://github.com/Sairbo/Unihackers---CVE-2025-55182- +- https://github.com/Saturate/CVE-2025-55182-react2shell +- https://github.com/SentinelXofficial/CVE-2025-55182 +- https://github.com/Shadowroot97/React2Shell-CVE-2025-55182 +- https://github.com/SpeatX/React2Shell-CVE-2025-55182 +- https://github.com/Spritualkb/CVE-2025-55182-exp +- https://github.com/Stonelinks/react-cve-2025-55182 +- https://github.com/TH-SecForge/CVE-2025-55182 +- https://github.com/Tiger-Foxx/exploit-react-CVE-2025-55182 +- https://github.com/UmmItKin/CVE-2025-55182-PoC +- https://github.com/VVVI5HNU/CVE-2025-55182 +- https://github.com/Ya0h4cker/CVE-2025-55182 +- https://github.com/Yyax13/CVE-2025-55182 +- https://github.com/ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner +- https://github.com/aastikgakhar/CVE-2025-55182-react2shell +- https://github.com/acheong08/CVE-2025-55182-poc +- https://github.com/ahmedshamsddin/CVE-2025-55182 +- https://github.com/alfazhossain/CVE-2025-55182-Exploiter +- https://github.com/aliclub0x00/CVE-2025-55182-POC-NEXTJS +- https://github.com/amir-malek/react-cve-2025-55182 +- https://github.com/andressuarezmonk/CVE-2025-55182 +- https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension +- https://github.com/aquinn-r7/CVE-2025-55182-VulnCheckPOC +- https://github.com/aseemyash/krle +- https://github.com/atastycookie/CVE-2025-55182 +- https://github.com/avoidme12/CVE-2025-55182-POC +- https://github.com/bakhod1r/CVE-2025-55182 +- https://github.com/byte16384/CVE-2025-55182 +- https://github.com/c0rydoras/CVE-2025-55182 +- https://github.com/cc3305/CVE-2025-55182 +- https://github.com/ceh-aditya-raj/CVE-2025-55182 +- https://github.com/ceortiz33/CVE-2025-55182 +- https://github.com/chitoz1300/React2Shell-CVE-2025-55182 +- https://github.com/chrahman/react2shell-CVE-2025-55182-full-rce-script +- https://github.com/clevernyyyy/CVE-2025-55182-Dockerized +- https://github.com/cyberleelawat/CVE-2025-55182 +- https://github.com/d0cnull/nextjs-CVE-2025-55182 +- https://github.com/deepankarkumar1/CVE-2025-55182_Vulnerable-Application +- https://github.com/diamorphine666/React2shell-CVE-2025-55182-Exploit +- https://github.com/dotnetguard/CVE-2025-55182-Exploit +- https://github.com/dr4xp/react2shell +- https://github.com/ducducuc111/CVE-2025-55182-poc +- https://github.com/dwisiswant0/CVE-2025-55182 +- https://github.com/eagle-nett/React2Shell-PoC-CVE-2025-55182 +- https://github.com/ejpir/CVE-2025-55182-bypass +- https://github.com/ejpir/CVE-2025-55182-research +- https://github.com/emadshanab/POC-for-CVE-2025-55182 +- https://github.com/emredavut/CVE-2025-55182 +- https://github.com/en0f/CVE-2025-55182-poc-json +- https://github.com/exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC +- https://github.com/eytannatye/R2S_CVE-2025-55182 +- https://github.com/fullhunt/react2shell-test-server +- https://github.com/gagaltotal/tot-react-rce-CVE-2025-55182 +- https://github.com/garux-sec/PoC-react2shell-CVE-2025-55182 +- https://github.com/git0xLai/React2ShellPoC +- https://github.com/greenheadHQ/CVE-2025-55182 +- https://github.com/grejh0t/CVE-2025-55182 +- https://github.com/gunyakit/CVE-2025-55182-PoC-exploit +- https://github.com/h0tak88r/next88 +- https://github.com/hakkuri01/r2rs +- https://github.com/hoosin/CVE-2025-55182 +- https://github.com/hualy13/CVE-2025-55182 +- https://github.com/hujiaozhuzhu/CVE-2025-55182_liyon +- https://github.com/hulh122/CVE-2025-55182 +- https://github.com/hyan0116/Next.js-RCE-CVE-2025-55182 +- https://github.com/iamblacksolo2-BugBounty/POC-CVE-2025-55182 +- https://github.com/iamblacksolo2-BugBounty/POC2-CVE-2025-55182 +- https://github.com/ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-Shell +- https://github.com/ihsansencan/React2Shell-CVE-2025-55182 +- https://github.com/ilixm/PoC-RCE-CVE-2025-55182 +- https://github.com/imbas007/POC-CVE-2025-55182 +- https://github.com/indra-031/React2Shell-Exploit-CVE-2025-55182 +- https://github.com/itsismarcos/Bot-exploit-CVE-2025-55182 +- https://github.com/itumo-arigatone/study-CVE-2025-55182 +- https://github.com/jandelima/cve-2025-55182-poc-test +- https://github.com/jf0x3a/CVE-2025-55182-exploit +- https://github.com/joaovicdev/EXPLOIT-CVE-2025-55182 +- https://github.com/joelvaiju/react2shell-CVE-2025-55182-poc +- https://github.com/joshterrill/CVE-2025-55182-realistic-poc +- https://github.com/k1llmelira/react2shell-exploit +- https://github.com/kOaDT/poc-cve-2025-55182 +- https://github.com/keklick1337/CVE-2025-55182-golang-PoC +- https://github.com/kindone09/CVE-2025-55182 +- https://github.com/klassiker/CVE-2025-55182 +- https://github.com/kondukto-io/vulnerable-next-js-poc +- https://github.com/l0n3m4n/CVE-2025-55182-Waf +- https://github.com/l4rm4nd/CVE-2025-55182 +- https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc +- https://github.com/liamromanis101/cve-2025-55182 +- https://github.com/litndat/React2Shell-PoC-CVE-2025-55182 +- https://github.com/logesh-GIT001/CVE-2025-55182 +- https://github.com/lowercasenumbers/CVE-2025-55182 +- https://github.com/lucyz1125/CVE-2025-55182-Next.js-RCE +- https://github.com/luoluoqingge/CVE-2025-55182 +- https://github.com/luoqichen/CVE-2025-55182-POC +- https://github.com/lutraat/CVE-2025-55182-React-RSC-Exploit +- https://github.com/m3ngx1ng/CVE-2025-55182-GUI +- https://github.com/mahaveer-choudhary/CVE-2025-55182 +- https://github.com/mantvmass/react2shell +- https://github.com/masterwok/PoC-CVE-2025-55182 +- https://github.com/min8282/CVE-2025-55182 +- https://github.com/mohit121312/CVE-2025-55182_full_exploit +- https://github.com/momika233/CVE-2025-55182-bypass +- https://github.com/monarchfish/cve-2025-55182-poc +- https://github.com/mooowu/cve-2025-55182-poc +- https://github.com/mrmtwoj/React2Shell-CVE-2025-55182 +- https://github.com/msanft/CVE-2025-55182 +- https://github.com/nehkark/CVE-2025-55182 +- https://github.com/nexxp90/CVE-2025-55182_RCE_Exploit +- https://github.com/niokagi/react-cve-2025-55182 +- https://github.com/nomorebreach/POC-CVE-2025-55182 +- https://github.com/oguri-souhei/CVE-2025-55182 +- https://github.com/open-flaw/CVE-2025-55182 +- https://github.com/opsecramdan/react2shell-cve-2025-55182 +- https://github.com/orgito1015/CVE-2025-55182-RCE-Exploit +- https://github.com/oscar-mine/R2SAE +- https://github.com/osman-butt/CVE-2025-55182-demo +- https://github.com/p3ta00/react2shell-poc +- https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script +- https://github.com/pkrasulia/CVE-2025-55182-NextJS-RCE-PoC +- https://github.com/premdanav/react2shelldemo +- https://github.com/prestonhashworth/cve-2025-55182 +- https://github.com/ps-interactive/cve-2025-55182 +- https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool +- https://github.com/racall/cve-2025-55182-node +- https://github.com/rahul-securify/React2Shell-CVE-2025-55182 +- https://github.com/raivenLockdown/WEB-CLI_RCE_React2Shell +- https://github.com/randarts/react-rce +- https://github.com/razureink/cve-2025-55182-react2shell_reproduction +- https://github.com/rix4uni/CVE-2025-55182 +- https://github.com/rl0x01/CVE-2025-55182_PoC +- https://github.com/robbin0919/CVE-2025-55182 +- https://github.com/rsch-io/CVE-2025-55182-React2Shell +- https://github.com/rvzsec/react2shell +- https://github.com/ryanhafid/PoC_CVE-2025-55182 +- https://github.com/sangleshubham/React-Security-CVE-2025-55182-Exploit +- https://github.com/scumfrog/FiberBreak +- https://github.com/se1zer/Nextjs_Exploit_Tool +- https://github.com/selectarget/CVE-2025-55182-Exploit +- https://github.com/shen771/Blackash-CVE-2025-55182 +- https://github.com/sherlocksecurity/CVE-2025-55182-Exploit-scanner +- https://github.com/shibaaa204/React2Shell +- https://github.com/shreyas-malhotra/React2Shell-CVE-2025-55182 +- https://github.com/shyambhanushali/React2Shell +- https://github.com/sickwell/CVE-2025-55182 +- https://github.com/simantchaudhari/CVE-2025-55182 +- https://github.com/snipevx/React2Shell-POC +- https://github.com/sohaibeb/CVE-2025-55182 +- https://github.com/sponte/nextjs-cve-version-confusion +- https://github.com/subhdotsol/CVE-2025-55182 +- https://github.com/subzer0x0/React2Shell +- https://github.com/sudo-Yangziran/CVE-2025-55182POC +- https://github.com/sumanrox/rschunter +- https://github.com/sun977/CVE-2025-55182 +- https://github.com/surajhacx/react2shellpoc +- https://github.com/tamagorengs/react2shell-poc-CVE-2025-55182 +- https://github.com/tanvirahmedcs/CVE-2025-55182 +- https://github.com/thekamran/CVE-2025-55182-Proof-of-Concept +- https://github.com/theman001/CVE-2025-55182 +- https://github.com/theman001/CVE-2025-55182_PoC-Test-Server +- https://github.com/timsonner/React2Shell-CVE-2025-55182 +- https://github.com/tinashelorenzi/CVE-2025-55182 +- https://github.com/topstar88/CVE-2025-55182 +- https://github.com/trax69/cve-2025-55182-poc +- https://github.com/vulncheck-oss/cve-2025-55182 +- https://github.com/w3nch/CVE-2025-55182-in-go +- https://github.com/whiteov3rflow/CVE-2025-55182-poc +- https://github.com/wnaspy/CVE-2025-55182 +- https://github.com/woorifisa-service-dev-6th/tech-seminar-React2Shell +- https://github.com/xcanwin/CVE-2025-55182-React-RCE +- https://github.com/xiaoLvChen/CVE-2025-55182 +- https://github.com/xkey8/react2shell +- https://github.com/yannisduvignau/react2shell-exploit +- https://github.com/yanoshercohen/React2Shell_CVE-2025-55182 +- https://github.com/ycseo-git/CVE-2025-55182 +- https://github.com/ynsmroztas/NextRce +- https://github.com/younesZdDz/CVE-2025-55182 +- https://github.com/yunaranyancat/CVE-2025-55182-NSE +- https://github.com/yuta3003/CVE-2025-55182 +- https://github.com/zack0x01/vuln-app-CVE-2025-55182 +- https://github.com/zessu/CVE-2025-55182-Typescript +- https://github.com/zorejt/Rust_CVE-2025-55182 +- https://github.com/zxz3650/CVE-2025-55182-POC +- https://github.com/zzhorc/CVE-2025-55182 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55182.yaml @@ -35,3 +302,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/react/CVE-2025-55182 diff --git a/cves/2025/CVE-2025-55188.md b/cves/2025/CVE-2025-55188.md index 0ebcd343b47..72c2d089700 100644 --- a/cves/2025/CVE-2025-55188.md +++ b/cves/2025/CVE-2025-55188.md @@ -17,4 +17,5 @@ #### Github - https://github.com/hunters-sec/CVE-2025-55188-7z-exploit +- https://github.com/lunbun/CVE-2025-55188 diff --git a/cves/2025/CVE-2025-55319.md b/cves/2025/CVE-2025-55319.md index cd2898890db..e2c631915df 100644 --- a/cves/2025/CVE-2025-55319.md +++ b/cves/2025/CVE-2025-55319.md @@ -13,5 +13,5 @@ Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/nephila016/CVE-2025-55319-PoC diff --git a/cves/2025/CVE-2025-5548.md b/cves/2025/CVE-2025-5548.md index 5d88db91922..ab9ccf7fc29 100644 --- a/cves/2025/CVE-2025-5548.md +++ b/cves/2025/CVE-2025-5548.md @@ -16,6 +16,27 @@ No PoCs from references. #### Github - https://github.com/jesusdominguez87/CVE-2025-5548 +- https://github.com/CryptoMachio/CVE-2025-5548 +- https://github.com/Diego57709/CVE-2025-5548 +- https://github.com/LorenzoPorrasDuque/CVE-2025-5548-POC +- https://github.com/PopClom/CVE-2025-5548 +- https://github.com/TheMalwareGuardian/CVE-2025-5548 +- https://github.com/Victor875/CVE-2025-5548 +- https://github.com/ZoneToolsCiber/Explotando-FreeFloatFTP-CVE-2025-5548 +- https://github.com/alanschmidt81/CVE-2025-5548 +- https://github.com/alfa8sa/CVE-2025-5548 +- https://github.com/alvarosr/CVE-2025-5548 +- https://github.com/anasrami12/CVE-2025-5548 +- https://github.com/celiagomezserra/CVE-2025-5548 +- https://github.com/charlyrr/CVE-2025-5548 +- https://github.com/elrajiii/CVE-2025-5548 +- https://github.com/greycat-amc/CVE-2025-5548 +- https://github.com/iamEscri/CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow +- https://github.com/javyan05/CVE-2025-5548 +- https://github.com/jgs-developer/CVE-2025-5548 +- https://github.com/luisyapura/Analisis-y-Explotacion-de-CVE-2025-5548 +- https://github.com/sudoand3rs0n/CVE-2025-5548 +- https://github.com/x3nt4ur0/CVE-2025-5548 #### ExploitDB - https://www.exploit-db.com/exploits/52323 diff --git a/cves/2025/CVE-2025-55575.md b/cves/2025/CVE-2025-55575.md index 9f44137c194..8a7faa55785 100644 --- a/cves/2025/CVE-2025-55575.md +++ b/cves/2025/CVE-2025-55575.md @@ -13,5 +13,5 @@ SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain s - https://github.com/Aether-0/CVE-2025-55575 #### Github -No PoCs found on GitHub currently. +- https://github.com/Aether-0/CVE-2025-55575 diff --git a/cves/2025/CVE-2025-55763.md b/cves/2025/CVE-2025-55763.md index ca40f5aaeac..8c4af36d2ea 100644 --- a/cves/2025/CVE-2025-55763.md +++ b/cves/2025/CVE-2025-55763.md @@ -13,5 +13,5 @@ Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows - https://github.com/krispybyte/CVE-2025-55763 #### Github -No PoCs found on GitHub currently. +- https://github.com/krispybyte/CVE-2025-55763 diff --git a/cves/2025/CVE-2025-56803.md b/cves/2025/CVE-2025-56803.md index 8ff8f06733f..45922d68f6d 100644 --- a/cves/2025/CVE-2025-56803.md +++ b/cves/2025/CVE-2025-56803.md @@ -14,5 +14,5 @@ Figma Desktop for Windows version 125.6.5 contains a command injection vulnerabi - https://shinycolumn.notion.site/figma-command-injection #### Github -No PoCs found on GitHub currently. +- https://github.com/yosasasutsut/CVE-2025-56803 diff --git a/cves/2025/CVE-2025-57392.md b/cves/2025/CVE-2025-57392.md index 30a3b9c778f..329e6291249 100644 --- a/cves/2025/CVE-2025-57392.md +++ b/cves/2025/CVE-2025-57392.md @@ -14,5 +14,5 @@ BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The applicatio - https://github.com/meisterlos/CVE-2025-57392 #### Github -No PoCs found on GitHub currently. +- https://github.com/meisterlos/CVE-2025-57392 diff --git a/cves/2025/CVE-2025-5777.md b/cves/2025/CVE-2025-5777.md index 429873c1641..d93dcafad82 100644 --- a/cves/2025/CVE-2025-5777.md +++ b/cves/2025/CVE-2025-5777.md @@ -37,6 +37,10 @@ Insufficient input validation leading to memory overread when the NetScaler is - https://github.com/soltanali0/CVE-2025-5777-Exploit - https://github.com/win3zz/CVE-2025-5777 - https://github.com/maxprog-svg/CitrixBleedCVE-2026-8452-2025-5777 +- https://github.com/Sheep-Hunter/CVE-2025-5777-POC +- https://github.com/nicecopy/POC-CVE-2025-5777 +- https://github.com/rashedhasan090/CVE-2025-5777 +- https://github.com/razureink/cve-2025-5777-citrixbleed2_reproduction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5777.yaml diff --git a/cves/2025/CVE-2025-57819.md b/cves/2025/CVE-2025-57819.md index 91384f6e5c6..5fccca72e93 100644 --- a/cves/2025/CVE-2025-57819.md +++ b/cves/2025/CVE-2025-57819.md @@ -24,6 +24,19 @@ No PoCs from references. - https://github.com/rxerium/CVE-2025-57819 - https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819 - https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC +- https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE +- https://github.com/0xyngtg/FreePBX-CVE-2025-57819-CVE-2025-61678 +- https://github.com/Its1Zero/cve-2025-57819-exploit +- https://github.com/JazzTheRabbit/FreePBX-SQLi-RCE +- https://github.com/Jeanback1/CVE-2025-57819-exploit +- https://github.com/K3ysTr0K3R/CVE-2025-57819 +- https://github.com/Neobee714/CVE-2025-57819-POC +- https://github.com/TeteREN/CVE-2025-57819-RCE +- https://github.com/YuvrajSHAD/FreePBX-CVE-2025-57819 +- https://github.com/b4sh2/CVE-2025-57819-poc +- https://github.com/cybertechajju/cve-2025-57819 +- https://github.com/jf-gondim/freepbx-endpoint-sqli-rce +- https://github.com/ozcanpng/CVE-2025-57819-FreePBX-RCE2Root #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57819.yaml diff --git a/cves/2025/CVE-2025-57833.md b/cves/2025/CVE-2025-57833.md index a4eb8a13c33..52dc1b69344 100644 --- a/cves/2025/CVE-2025-57833.md +++ b/cves/2025/CVE-2025-57833.md @@ -18,4 +18,7 @@ No PoCs from references. - https://github.com/EyalSec/EyalSec_CVE - https://github.com/Mkway/CVE-2025-57833 - https://github.com/loic-houchi/Django-faille-CVE-2025-57833_test +- https://github.com/Gayang2902/CVE-2025-57833 +- https://github.com/ianoboyle/CVE-2025-57833 +- https://github.com/sw0rd1ight/CVE-2025-57833 diff --git a/cves/2025/CVE-2025-58434.md b/cves/2025/CVE-2025-58434.md index 5444d948b4d..6d85d37c4b3 100644 --- a/cves/2025/CVE-2025-58434.md +++ b/cves/2025/CVE-2025-58434.md @@ -13,7 +13,18 @@ Flowise is a drag & drop user interface to build a customized large language mod - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wgpv-6j63-x5ph #### Github -No PoCs found on GitHub currently. +- https://github.com/00lucasm/CVE-2025-58434-Flowiseai-Auth-Bypass-PoC +- https://github.com/0xDaeras/Flowise-CVE-2025-58434-Chain-59528 +- https://github.com/AzureADTrent/CVE-2025-58434-59528 +- https://github.com/CVETeam/FlowiseAI-Critical-KillChain +- https://github.com/honney336/CVE-2025-58434_CVE-2025-59528 +- https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf +- https://github.com/kartik2005221/CVE-2025-58434-AND-59528-POC +- https://github.com/kartik2005221/CVE-2025-58434-poc +- https://github.com/mananispiwpiw/CVE-2025-58434-PoC +- https://github.com/p1ctur3p3rf3ct/CVE-2025-58434 +- https://github.com/r3nsi15/Flowise-CVE-2025-58434-PasswordReset +- https://github.com/vincent-vbg/CVE-2025-58434-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58434.yaml diff --git a/cves/2025/CVE-2025-5878.md b/cves/2025/CVE-2025-5878.md index 16257053f6c..a5597bac5d4 100644 --- a/cves/2025/CVE-2025-5878.md +++ b/cves/2025/CVE-2025-5878.md @@ -43,5 +43,5 @@ Eine problematische Schwachstelle wurde in ESAPI esapi-java-legacy gefunden. Es No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/fantasy-fql/ESAPI-SQLinjection-CVE-2025-5878-Exploit diff --git a/cves/2025/CVE-2025-5915.md b/cves/2025/CVE-2025-5915.md index ac9903d7a21..0cee8696acb 100644 --- a/cves/2025/CVE-2025-5915.md +++ b/cves/2025/CVE-2025-5915.md @@ -19,5 +19,5 @@ A vulnerability has been identified in the libarchive library. This flaw can lea - https://github.com/libarchive/libarchive/pull/2599 #### Github -No PoCs found on GitHub currently. +- https://github.com/R3n3r0/cve-2025-5915 diff --git a/cves/2025/CVE-2025-59287.md b/cves/2025/CVE-2025-59287.md index 988c515325c..98f30134b9d 100644 --- a/cves/2025/CVE-2025-59287.md +++ b/cves/2025/CVE-2025-59287.md @@ -32,6 +32,22 @@ No PoCs from references. #### Github - https://github.com/trustedsec/spoonmap +- https://github.com/0x7556/CVE-2025-59287 +- https://github.com/0xBruno/WSUSploit.NET +- https://github.com/Adel-hx0d/cve-2025-59287 +- https://github.com/DaddyBigFish/CVE-2025-59287-hawktrace +- https://github.com/FurkanKAYAPINAR/CVE-2025-59287 +- https://github.com/LuemmelSec/CVE-2025-59287---WSUS-SCCM-RCE +- https://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS +- https://github.com/M507/CVE-2025-59287-PoC +- https://github.com/MaxymGorn/cve-2025-59287-exploit-poc +- https://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE +- https://github.com/garvitv14/CVE-2025-59287 +- https://github.com/jiansiting/CVE-2025-59287 +- https://github.com/mubix/Find-WSUS +- https://github.com/ross-ns/WSUS-CVE-2025-59287 +- https://github.com/swoon69/CVE-2025-59287-Exercise-Use +- https://github.com/tecxx/CVE-2025-59287-WSUS #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59287.yaml diff --git a/cves/2025/CVE-2025-59528.md b/cves/2025/CVE-2025-59528.md index 2daa97ce2ca..223f94c3548 100644 --- a/cves/2025/CVE-2025-59528.md +++ b/cves/2025/CVE-2025-59528.md @@ -14,6 +14,17 @@ No PoCs from references. #### Github - https://github.com/hackpatato/PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability +- https://github.com/Loaxert/CVE-2025-59528-PoC +- https://github.com/Moon-Harvest/CVE-2025-59528 +- https://github.com/NymiiTechTips/CVE-2025-59528 +- https://github.com/UsifAraby/CVE-2025-59528-POC +- https://github.com/corey-farley/CVE-2025-59528-Flowise-RCE +- https://github.com/mananispiwpiw/CVE-2025-59528-PoC +- https://github.com/maradonam18/-CVE-2025-59528-PoC +- https://github.com/r3nsi15/Flowise-RCE-CVE-2025-59528 +- https://github.com/sonnelon/CVE-2025-59528-PoC +- https://github.com/vanhari/CVE-2025-59528 +- https://github.com/zimshk/CVE-2025-59528.yaml #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59528.yaml diff --git a/cves/2025/CVE-2025-59536.md b/cves/2025/CVE-2025-59536.md index dcf612b1588..79380709f71 100644 --- a/cves/2025/CVE-2025-59536.md +++ b/cves/2025/CVE-2025-59536.md @@ -14,3 +14,5 @@ No PoCs from references. #### Github - https://github.com/jaadriano/OWASP-www-project-agentic-skills-top-10 +- https://github.com/NetVanguard-cmd/CVE-2025-59536 +- https://github.com/Rohitberiwala/Claude-Code-MCP-Injection-PoC diff --git a/cves/2025/CVE-2025-5961.md b/cves/2025/CVE-2025-5961.md index 9fd2ef92cbe..4e6fbbef114 100644 --- a/cves/2025/CVE-2025-5961.md +++ b/cves/2025/CVE-2025-5961.md @@ -15,6 +15,7 @@ The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPre #### Github - https://github.com/Nxploited/CVE-2025-5961 +- https://github.com/d0n601/CVE-2025-5961 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5961.yaml diff --git a/cves/2025/CVE-2025-6018.md b/cves/2025/CVE-2025-6018.md index 43650e30a44..05e70d6881d 100644 --- a/cves/2025/CVE-2025-6018.md +++ b/cves/2025/CVE-2025-6018.md @@ -21,6 +21,17 @@ A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-conf - https://github.com/iamgithubber/CVE-2025-6018-19-exploit - https://github.com/mistrust999/PAM-UDisks-PrivEsc-Metasploit - https://github.com/mistrustt/PAM-UDisks-PrivEsc-Metasploit +- https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019 +- https://github.com/DesertDemons/CVE-2025-6018-6019 +- https://github.com/Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn +- https://github.com/MaxKappa/opensuse-leap-privesc-exploit +- https://github.com/MichaelVenturella/CVE-2025-6018-6019-PoC +- https://github.com/e1arth/CVE-2025-6018 +- https://github.com/euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019 +- https://github.com/iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit +- https://github.com/localh0ste/CVE-2025-6018-and-CVE-2025-6019 +- https://github.com/matesz44/CVE-2025-6018-19 +- https://github.com/muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52386 diff --git a/cves/2025/CVE-2025-6019.md b/cves/2025/CVE-2025-6019.md index c6971beca9c..1300d450f7f 100644 --- a/cves/2025/CVE-2025-6019.md +++ b/cves/2025/CVE-2025-6019.md @@ -38,4 +38,11 @@ A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Gener - https://github.com/mistrust999/PAM-UDisks-PrivEsc-Metasploit - https://github.com/mistrustt/PAM-UDisks-PrivEsc-Metasploit - https://github.com/neko205-mx/CVE-2025-6019_Exploit +- https://github.com/0x5chltz/CVE-2025-6019 +- https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation +- https://github.com/boboaung1337/CVE-2025-6019 +- https://github.com/phamdinhquy2512/CVE-2025-6019-Exploitation +- https://github.com/robbin0919/CVE-2025-6019 +- https://github.com/symphony2colour/CVE-2025-6019-udisks-lpe-no-image +- https://github.com/tr3m0x/CVE-2025-6019 diff --git a/cves/2025/CVE-2025-6202.md b/cves/2025/CVE-2025-6202.md index 81375187d1a..0787f422160 100644 --- a/cves/2025/CVE-2025-6202.md +++ b/cves/2025/CVE-2025-6202.md @@ -13,5 +13,5 @@ Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhamm No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/demining/Phoenix-Rowhammer-Attack-CVE-2025-6202 diff --git a/cves/2025/CVE-2025-6220.md b/cves/2025/CVE-2025-6220.md index 8595c703b87..6c8f7bd74fd 100644 --- a/cves/2025/CVE-2025-6220.md +++ b/cves/2025/CVE-2025-6220.md @@ -14,4 +14,4 @@ The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitr - https://ryankozak.com/posts/cve-2025-6220/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-6220 diff --git a/cves/2025/CVE-2025-6440.md b/cves/2025/CVE-2025-6440.md index 74e1b791996..e6e90d65124 100644 --- a/cves/2025/CVE-2025-6440.md +++ b/cves/2025/CVE-2025-6440.md @@ -14,3 +14,9 @@ No PoCs from references. #### Github - https://github.com/katranSefa/CVE-2025-6440 +- https://github.com/AnotherSec/CVE-2025-6440 +- https://github.com/Nxploited/CVE-2025-6440 +- https://github.com/SangSenimanWartefak/CVE-2025-6440 +- https://github.com/m2hcz/CVE-2025-6440-Poc-Exploit +- https://github.com/rimbadirgantara/CVE-2025-6440 +- https://github.com/sahmsec/CVE-2025-6440 diff --git a/cves/2025/CVE-2025-6554.md b/cves/2025/CVE-2025-6554.md index a273de2ad48..f9a94c6f72e 100644 --- a/cves/2025/CVE-2025-6554.md +++ b/cves/2025/CVE-2025-6554.md @@ -19,4 +19,8 @@ No PoCs from references. - https://github.com/ghostn4444/POC-CVE-2025-6554 - https://github.com/gmh5225/CVE-2025-6554 - https://github.com/gmh5225/CVE-2025-6554-2 +- https://github.com/LordBheem/CVE-2025-6554 +- https://github.com/aklnjakln/CVE-2025-6554 +- https://github.com/jopraveen/CVE-2025-6554 +- https://github.com/mistymntncop/CVE-2025-6554 diff --git a/cves/2025/CVE-2025-6563.md b/cves/2025/CVE-2025-6563.md index f3059bae9e0..835e0cab396 100644 --- a/cves/2025/CVE-2025-6563.md +++ b/cves/2025/CVE-2025-6563.md @@ -13,7 +13,7 @@ A cross-site scripting vulnerability is present in the hotspot of MikroTik's Rou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/praksokchea/CVE-2025-6563 #### ExploitDB - https://www.exploit-db.com/exploits/52366 diff --git a/cves/2025/CVE-2025-66034.md b/cves/2025/CVE-2025-66034.md index 0de2012591b..b42808694af 100644 --- a/cves/2025/CVE-2025-66034.md +++ b/cves/2025/CVE-2025-66034.md @@ -14,3 +14,7 @@ No PoCs from references. #### Github - https://github.com/symphony2colour/varlib-cve-2025-66034 +- https://github.com/4nuxd/CVE-2025-66034 +- https://github.com/Liquid1998/Variatype.htb-CVE-2025-66034 +- https://github.com/tristanqtn/CVE-2025-66034 +- https://github.com/v3cn4x00/POC-CVE-2025-66034 diff --git a/cves/2025/CVE-2025-66398.md b/cves/2025/CVE-2025-66398.md index 4d2a120ee93..f6022e263a4 100644 --- a/cves/2025/CVE-2025-66398.md +++ b/cves/2025/CVE-2025-66398.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/showy-headteacher114/cve-2025-66398 +- https://github.com/joshuavanderpoll/cve-2025-66398 diff --git a/cves/2025/CVE-2025-68921.md b/cves/2025/CVE-2025-68921.md index 450b9aea8e2..ee9137ab639 100644 --- a/cves/2025/CVE-2025-68921.md +++ b/cves/2025/CVE-2025-68921.md @@ -14,3 +14,5 @@ No PoCs from references. #### Github - https://github.com/kikiuuw/CVE-2025-68921 +- https://github.com/ZeroMemoryEx/CVE-2025-68921 +- https://github.com/kalibb/CVE-2025-68921 diff --git a/cves/2025/CVE-2025-69212.md b/cves/2025/CVE-2025-69212.md index 0d0f9205ce0..727200f1a61 100644 --- a/cves/2025/CVE-2025-69212.md +++ b/cves/2025/CVE-2025-69212.md @@ -14,3 +14,13 @@ No PoCs from references. #### Github - https://github.com/lolw0/OpenSTA-Exploit +- https://github.com/0Zetrium0/CVE-2025-69212_PoC +- https://github.com/BridgerAlderson/CVE-2025-69212-PoC +- https://github.com/Pasindu-sd/CVE-2025-69212-Exploit +- https://github.com/alaeddine03/CVE-2025-69212-PoC +- https://github.com/c0gnit00/CVE-2026-69212 +- https://github.com/liaomilk/CVE-2025-69212-for-myself +- https://github.com/m2sousa/CVE-2025-69212 +- https://github.com/tohib09/CVE-2025-69212-PoC +- https://github.com/w3nch/CVE-2025-69212 +- https://github.com/xorandd/CVE-2025-69212-PoC diff --git a/cves/2025/CVE-2025-6934.md b/cves/2025/CVE-2025-6934.md index 508f62ae8ce..1e9ed70beb6 100644 --- a/cves/2025/CVE-2025-6934.md +++ b/cves/2025/CVE-2025-6934.md @@ -19,6 +19,11 @@ The Opal Estate Pro – Property Management and Submission plugin for WordPress, - https://github.com/Pwdnx1337/CVE-2025-6934 - https://github.com/Rosemary1337/CVE-2025-6934 - https://github.com/yukinime/CVE-2025-6934 +- https://github.com/0xTerror/CVE-2025-6934 +- https://github.com/1atakan1/CVE-2025-6934 +- https://github.com/AnotherSec/CVE-2025-6934 +- https://github.com/Jenderal92/WP-CVE-2025-6934 +- https://github.com/MejbanKadir/CVE-2025-6934-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6934.yaml diff --git a/cves/2025/CVE-2025-7441.md b/cves/2025/CVE-2025-7441.md index 486c7f8bef5..abdcbc49201 100644 --- a/cves/2025/CVE-2025-7441.md +++ b/cves/2025/CVE-2025-7441.md @@ -13,7 +13,8 @@ The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AnotherSec/CVE-2025-7441 +- https://github.com/Nxploited/CVE-2025-7441 #### ExploitDB - https://www.exploit-db.com/exploits/52422 diff --git a/cves/2025/CVE-2025-7558.md b/cves/2025/CVE-2025-7558.md index 57207ac881b..d9d44d78d8d 100644 --- a/cves/2025/CVE-2025-7558.md +++ b/cves/2025/CVE-2025-7558.md @@ -15,5 +15,5 @@ Eine Schwachstelle wurde in code-projects Voting System 1.0 gefunden. Sie wurde - https://github.com/i-Corner/cve/issues/6 #### Github -No PoCs found on GitHub currently. +- https://github.com/rundas-r00t/CVE-2025-7558-PoC diff --git a/cves/2025/CVE-2025-7771.md b/cves/2025/CVE-2025-7771.md index 57023a987cf..a237f18e38b 100644 --- a/cves/2025/CVE-2025-7771.md +++ b/cves/2025/CVE-2025-7771.md @@ -14,6 +14,13 @@ No PoCs from references. #### Github - https://github.com/Demoo1337/ThrottleStop +- https://github.com/AmrHuss/throttlestop-exploit-rw +- https://github.com/D4rkks/CVE-2025-7771-Vulnerability-Exploration +- https://github.com/Gabriel-Lacorte/CVE-2025-7771 +- https://github.com/enessakircolak/CVE-2025-7771 +- https://github.com/lzty/CVE-2025-7771 +- https://github.com/mein-0/cve-2025-7771 +- https://github.com/xM0kht4r/CVE-2025-7771 #### ExploitDB - https://www.exploit-db.com/exploits/52512 diff --git a/cves/2025/CVE-2025-7775.md b/cves/2025/CVE-2025-7775.md index 5626d1ab11b..7d52103a99d 100644 --- a/cves/2025/CVE-2025-7775.md +++ b/cves/2025/CVE-2025-7775.md @@ -21,4 +21,5 @@ No PoCs from references. - https://github.com/hacker-r3volv3r/CVE-2025-7775-PoC - https://github.com/mr-r3b00t/CVE-2025-7775 - https://github.com/rxerium/CVE-2025-7775 +- https://github.com/swabird/CVE-2025-7775-PoC diff --git a/cves/2025/CVE-2025-7892.md b/cves/2025/CVE-2025-7892.md index c5a144be387..bfba9d86953 100644 --- a/cves/2025/CVE-2025-7892.md +++ b/cves/2025/CVE-2025-7892.md @@ -21,5 +21,5 @@ Es wurde eine Schwachstelle in IDnow App bis 9.6.0 für Android entdeckt. Sie wu - https://github.com/KMov-g/androidapps/blob/main/de.idnow.md#steps-to-reproduce #### Github -No PoCs found on GitHub currently. +- https://github.com/FlyingLemonade/CVE-2025-7892-Proof-of-Concept-Login-Form diff --git a/cves/2025/CVE-2025-8061.md b/cves/2025/CVE-2025-8061.md index a4fc742792e..ae7398994f2 100644 --- a/cves/2025/CVE-2025-8061.md +++ b/cves/2025/CVE-2025-8061.md @@ -14,5 +14,7 @@ A potential insufficient access control vulnerability was reported in the Lenovo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/spawn451/CVE-2025-8061-Exploit +- https://github.com/symeonp/Lenovo-CVE-2025-8061 +- https://github.com/vxqs/Lenovo-CVE-2025-8061 diff --git a/cves/2025/CVE-2025-8081.md b/cves/2025/CVE-2025-8081.md index 5e1b7dc516d..4e0230fcccd 100644 --- a/cves/2025/CVE-2025-8081.md +++ b/cves/2025/CVE-2025-8081.md @@ -13,4 +13,4 @@ The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all v No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/LyesH4ck/CVE-2025-8081-Elementor diff --git a/cves/2025/CVE-2025-8088.md b/cves/2025/CVE-2025-8088.md index 095da171b73..a72204da800 100644 --- a/cves/2025/CVE-2025-8088.md +++ b/cves/2025/CVE-2025-8088.md @@ -37,4 +37,14 @@ A path traversal vulnerability affecting the Windows version of WinRAR allows th - https://github.com/techcorp/CVE-2025-8088-Exploit - https://github.com/travisbgreen/cve-2025-8088 - https://github.com/walidpyh/CVE-2025-8088 +- https://github.com/IsmaelCosma/CVE-2025-8088 +- https://github.com/Lewis-Ricardo/Amaranth-Project +- https://github.com/aldisakti2/CVE-2025-8088-BUILDER-Winrar-Tool +- https://github.com/lennertdefauw/CVE-2025-8088 +- https://github.com/nuky-alt/CVE-2025-8088 +- https://github.com/papcaii2004/CVE-2025-8088-WinRAR-builder +- https://github.com/shaheeryasirofficial/CVE-2025-8088 +- https://github.com/skander1337/winrar-exploit +- https://github.com/undefined-name12/CVE-2025-8088-Winrar +- https://github.com/xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit diff --git a/cves/2025/CVE-2025-8220.md b/cves/2025/CVE-2025-8220.md index 053d315bc82..ab8ac49788a 100644 --- a/cves/2025/CVE-2025-8220.md +++ b/cves/2025/CVE-2025-8220.md @@ -16,5 +16,5 @@ Es wurde eine kritische Schwachstelle in Engeman Web bis 12.0.0.1 entdeckt. Dabe - https://github.com/m3m0o/engeman-web-language-combobox-sqli #### Github -No PoCs found on GitHub currently. +- https://github.com/m3m0o/engeman-web-language-combobox-sqli diff --git a/cves/2025/CVE-2025-8671.md b/cves/2025/CVE-2025-8671.md index fe5051abe9f..bd3626e9117 100644 --- a/cves/2025/CVE-2025-8671.md +++ b/cves/2025/CVE-2025-8671.md @@ -45,4 +45,5 @@ A mismatch caused by client-triggered server-sent stream resets between HTTP/2 s - https://github.com/abiyeenzo/CVE-2025-8671 - https://github.com/mateusm1403/PoC-CVE-2025-8671-MadeYouReset-HTTP-2 - https://github.com/moften/CVE-2025-8671-MadeYouReset-HTTP-2-DDoS +- https://github.com/mysara2022/CVE-2025-8671-vulnerability-POC- diff --git a/cves/2025/CVE-2025-9074.md b/cves/2025/CVE-2025-9074.md index 439ced9a268..7600cdec1ad 100644 --- a/cves/2025/CVE-2025-9074.md +++ b/cves/2025/CVE-2025-9074.md @@ -22,6 +22,19 @@ A vulnerability was identified in Docker Desktop that allows local running Linux - https://github.com/j3r1ch0123/CVE-2025-9074 - https://github.com/pucagit/CVE-2025-9074 - https://github.com/zenzue/CVE-2025-9074 +- https://github.com/3rendil/CVE-2025-9074-POC +- https://github.com/BridgerAlderson/CVE-2025-9074-PoC +- https://github.com/Medaz-Sploit/CVE-2025-9074-Docker-Desktop-API-Escape-PoC +- https://github.com/OilSeller2001/PoC-for-CVE-2025-9074 +- https://github.com/PtechAmanja/CVE-2025-9074-Docker-Desktop-Container-Escape +- https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit +- https://github.com/XRayZen/cve-2025-9074-poc +- https://github.com/c0gnit00/CVE-2025-9074 +- https://github.com/chernandez321/CVE-2025-9074-docker-escape +- https://github.com/pppxo/CVE-2025-9074-PoC-Bash +- https://github.com/rocket-panda/CVE-2025-9074 +- https://github.com/x0da6h/POC-for-CVE-2025-9074 +- https://github.com/zaydbf/CVE-2025-9074-Poc #### ExploitDB - https://www.exploit-db.com/exploits/52472 diff --git a/cves/2025/CVE-2025-9215.md b/cves/2025/CVE-2025-9215.md index 0da0d0c152c..db6b47dca16 100644 --- a/cves/2025/CVE-2025-9215.md +++ b/cves/2025/CVE-2025-9215.md @@ -14,4 +14,4 @@ The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Membership - https://ryankozak.com/posts/cve-2025-9215/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-9215 diff --git a/cves/2025/CVE-2025-9216.md b/cves/2025/CVE-2025-9216.md index aebb305e447..c44eaba3dd1 100644 --- a/cves/2025/CVE-2025-9216.md +++ b/cves/2025/CVE-2025-9216.md @@ -14,4 +14,4 @@ The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Membership - https://ryankozak.com/posts/cve-2025-9216/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-9216 diff --git a/cves/2025/CVE-2025-9242.md b/cves/2025/CVE-2025-9242.md index d7f71994b28..80f7b4e51ea 100644 --- a/cves/2025/CVE-2025-9242.md +++ b/cves/2025/CVE-2025-9242.md @@ -16,7 +16,8 @@ An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remot No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/UnusualGiraffe/WatchGuard-CVE-2025-9242-PoC-and-Mass-Scanner +- https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-9242.yaml diff --git a/cves/2025/CVE-2025-9491.md b/cves/2025/CVE-2025-9491.md index 9b0412014bc..c845b662d81 100644 --- a/cves/2025/CVE-2025-9491.md +++ b/cves/2025/CVE-2025-9491.md @@ -13,5 +13,5 @@ Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerabil No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Amperclock/CVE-2025-9491_POC diff --git a/cves/2025/CVE-2025-9933.md b/cves/2025/CVE-2025-9933.md index 85478958ee1..540e7849e5d 100644 --- a/cves/2025/CVE-2025-9933.md +++ b/cves/2025/CVE-2025-9933.md @@ -15,5 +15,5 @@ In PHPGurukul Beauty Parlour Management System 1.1 ist eine Schwachstelle entdec - https://github.com/xiaoxinkaishi/cve/issues/4 #### Github -No PoCs found on GitHub currently. +- https://github.com/titanmaster96/cve-2025-9933 diff --git a/cves/2025/CVE-2025-9951.md b/cves/2025/CVE-2025-9951.md index c3f88063905..6e82e8feeb1 100644 --- a/cves/2025/CVE-2025-9951.md +++ b/cves/2025/CVE-2025-9951.md @@ -13,5 +13,5 @@ A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attack - https://github.com/google/security-research/security/advisories/GHSA-39q3-f8jq-v6mg #### Github -No PoCs found on GitHub currently. +- https://github.com/fm0ss/cve-2025-9951-ffmpeg-jp2-poc diff --git a/cves/2025/CVE-2025-9961.md b/cves/2025/CVE-2025-9961.md index d23f503182d..da198246839 100644 --- a/cves/2025/CVE-2025-9961.md +++ b/cves/2025/CVE-2025-9961.md @@ -14,5 +14,5 @@ An authenticated attacker may remotely execute arbitrary code via the CWMP binar No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yt2w/CVE-2025-9961 diff --git a/cves/2025/CVE-2025-9983.md b/cves/2025/CVE-2025-9983.md index a6f096f5782..25e4b84c83d 100644 --- a/cves/2025/CVE-2025-9983.md +++ b/cves/2025/CVE-2025-9983.md @@ -13,5 +13,5 @@ GALAYOU G2 cameras stream video output via RTSP streams. By default these stream No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sohaibeb/CVE-2025-9983 diff --git a/cves/2026/CVE-2026-0073.md b/cves/2026/CVE-2026-0073.md index a4665a26237..d30e8bedc91 100644 --- a/cves/2026/CVE-2026-0073.md +++ b/cves/2026/CVE-2026-0073.md @@ -27,3 +27,6 @@ No PoCs from references. - https://github.com/m00ddy/CVE-2026-0073-Android-client-TLS-auth-bypass - https://github.com/fredevsec/CVE-2026-0073 - https://github.com/aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass +- https://github.com/0xbinder/CVE-2026-0073 +- https://github.com/devtint/CVE-2026-0073 +- https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit diff --git a/cves/2026/CVE-2026-0257.md b/cves/2026/CVE-2026-0257.md index 064027741b1..d8ae82f2274 100644 --- a/cves/2026/CVE-2026-0257.md +++ b/cves/2026/CVE-2026-0257.md @@ -27,6 +27,7 @@ No PoCs from references. - https://github.com/akashsingh0454/CVE-2026-0257-PoC - https://github.com/Mr-Robot-LP/CVE-2026-0257 - https://github.com/Ez4rd1x1/CVE-2026-0257 +- https://github.com/HORKimhab/CVE-2026-0257 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml diff --git a/cves/2026/CVE-2026-0300.md b/cves/2026/CVE-2026-0300.md index 60427b26427..e5909c7af2c 100644 --- a/cves/2026/CVE-2026-0300.md +++ b/cves/2026/CVE-2026-0300.md @@ -29,3 +29,4 @@ No PoCs from references. - https://github.com/shizuku198411/CVE-2026-0300 - https://github.com/qassam-315/PAN-OS-User-ID-Buffer-Overflow-PoC - https://github.com/lu4m575/CVE-2026-0300 +- https://github.com/sam00/POC-CVE-2026-0300-exploit diff --git a/cves/2026/CVE-2026-10036.md b/cves/2026/CVE-2026-10036.md index 6f1c8b81ebb..ccf0f7a6cd1 100644 --- a/cves/2026/CVE-2026-10036.md +++ b/cves/2026/CVE-2026-10036.md @@ -13,4 +13,4 @@ SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that - https://github.com/SaiTeja-Erukude/CVE-2026-10036-speechbrain-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-10036-speechbrain-rce diff --git a/cves/2026/CVE-2026-10580.md b/cves/2026/CVE-2026-10580.md index a3186ad9bda..1c2795077c3 100644 --- a/cves/2026/CVE-2026-10580.md +++ b/cves/2026/CVE-2026-10580.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/0xgh057r3c0n/CVE-2026-10580 +- https://github.com/Polosss/By-Poloss..-..CVE-2026-10580 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10580.yaml diff --git a/cves/2026/CVE-2026-11961.md b/cves/2026/CVE-2026-11961.md index 331b7b3aaa1..4c861faf6c2 100644 --- a/cves/2026/CVE-2026-11961.md +++ b/cves/2026/CVE-2026-11961.md @@ -13,4 +13,4 @@ The User Registration & Membership WordPress plugin before 5.2.3 does not valid - https://wpscan.com/vulnerability/2ffab574-8626-472e-b6e4-09bcbaa62349/ #### Github -No PoCs found on GitHub currently. +- https://github.com/JohenLastGen-JLG/CVE-2026-11961 diff --git a/cves/2026/CVE-2026-1312.md b/cves/2026/CVE-2026-1312.md index d5bdcc91f3d..4280106398c 100644 --- a/cves/2026/CVE-2026-1312.md +++ b/cves/2026/CVE-2026-1312.md @@ -19,3 +19,4 @@ No PoCs from references. #### Github - https://github.com/alpinine/CVE-2026-1312-Testing +- https://github.com/sw0rd1ight/CVE-2026-1312 diff --git a/cves/2026/CVE-2026-1337.md b/cves/2026/CVE-2026-1337.md index 778a002b144..e8b114d7936 100644 --- a/cves/2026/CVE-2026-1337.md +++ b/cves/2026/CVE-2026-1337.md @@ -16,4 +16,5 @@ Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337 - https://github.com/JoakimBulow/CVE-2026-1337 #### Github -No PoCs found on GitHub currently. +- https://github.com/George0Papasotiriou/CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape +- https://github.com/JoakimBulow/CVE-2026-1337 diff --git a/cves/2026/CVE-2026-13768.md b/cves/2026/CVE-2026-13768.md index df03e7ea4f6..f92340ed3d9 100644 --- a/cves/2026/CVE-2026-13768.md +++ b/cves/2026/CVE-2026-13768.md @@ -16,3 +16,4 @@ No PoCs from references. #### Github - https://github.com/MichaelAdamGroberman/CVE-2026-13768 +- https://github.com/J4ck3LSyN-Gen2/CVE-2026-13768 diff --git a/cves/2026/CVE-2026-14483.md b/cves/2026/CVE-2026-14483.md index 5b79f23a859..bc83021c269 100644 --- a/cves/2026/CVE-2026-14483.md +++ b/cves/2026/CVE-2026-14483.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/MadExploits/CVE-2026-14483 +- https://github.com/0xdak/CVE-2026-14483_exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14483.yaml diff --git a/cves/2026/CVE-2026-14894.md b/cves/2026/CVE-2026-14894.md index 87dae3e330a..100c2515435 100644 --- a/cves/2026/CVE-2026-14894.md +++ b/cves/2026/CVE-2026-14894.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/1beelze/CVE-2026-14894 +- https://github.com/shinthink/CVE-2026-14894 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14894.yaml diff --git a/cves/2026/CVE-2026-15038.md b/cves/2026/CVE-2026-15038.md index bd48d9ea486..9d69c50dfdb 100644 --- a/cves/2026/CVE-2026-15038.md +++ b/cves/2026/CVE-2026-15038.md @@ -13,4 +13,4 @@ The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify th - https://wpscan.com/vulnerability/629d655f-cdb8-4733-81d5-12fa88c32bb6/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Polosss/By-Poloss..-..CVE-2026-15038-POC diff --git a/cves/2026/CVE-2026-15409.md b/cves/2026/CVE-2026-15409.md index 896dd1b56ac..a43dfc93c4c 100644 --- a/cves/2026/CVE-2026-15409.md +++ b/cves/2026/CVE-2026-15409.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/0xBlackash/CVE-2026-15409 - https://github.com/HORKimhab/CVE-2026-15409 - https://github.com/Ch4120N/CVE-2026-15409 +- https://github.com/tc4dy/CVE-2026-15409-15410-Framework #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-15409.yaml diff --git a/cves/2026/CVE-2026-15410.md b/cves/2026/CVE-2026-15410.md index 39b66f3113e..9acbbbcbb08 100644 --- a/cves/2026/CVE-2026-15410.md +++ b/cves/2026/CVE-2026-15410.md @@ -15,7 +15,7 @@ Post-authentication improper control of generation of code ('Code Injection') vu No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2026-15410 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_wsproxy_rce.rb diff --git a/cves/2026/CVE-2026-15748.md b/cves/2026/CVE-2026-15748.md index 8c6aae54bee..2970bc58c65 100644 --- a/cves/2026/CVE-2026-15748.md +++ b/cves/2026/CVE-2026-15748.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-15826-CVE-2026-15748 - https://github.com/ubaydev/CVE-2026-15748 +- https://github.com/yora1928/cve-2026-15748 diff --git a/cves/2026/CVE-2026-17544.md b/cves/2026/CVE-2026-17544.md index da24181158f..4b56ae7a3ba 100644 --- a/cves/2026/CVE-2026-17544.md +++ b/cves/2026/CVE-2026-17544.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/Boreas37/CVE-2026-17544-PoC +- https://github.com/r2qa/CVE-2026-17544 diff --git a/cves/2026/CVE-2026-18366.md b/cves/2026/CVE-2026-18366.md index 34354c0e849..8bb1f4f02b9 100644 --- a/cves/2026/CVE-2026-18366.md +++ b/cves/2026/CVE-2026-18366.md @@ -14,3 +14,4 @@ The Events Manager WordPress plugin before 7.4.1 does not properly scope its ca #### Github - https://github.com/Nxploited/CVE-2026-18366 +- https://github.com/ghostpels/CVE-2026-18366 diff --git a/cves/2026/CVE-2026-18963.md b/cves/2026/CVE-2026-18963.md index b55a1e5874d..82d5e3d0d6d 100644 --- a/cves/2026/CVE-2026-18963.md +++ b/cves/2026/CVE-2026-18963.md @@ -26,6 +26,8 @@ No PoCs from references. - https://github.com/BlackHatExploitation/Exploit-For-CVE-2026-18963 - https://github.com/c0dejump/UnKeycloak - https://github.com/M4xSec/My-Exploits +- https://github.com/gman0x00/keycloak-CVE-2026-18963 +- https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml diff --git a/cves/2026/CVE-2026-19193.md b/cves/2026/CVE-2026-19193.md index 9536b22e47c..12e567f33e2 100644 --- a/cves/2026/CVE-2026-19193.md +++ b/cves/2026/CVE-2026-19193.md @@ -14,4 +14,4 @@ A flaw has been found in Jiangmin Antivirus 21. Impacted is the function Message - https://github.com/patrickt2017/CVE-2026-19193-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/patrickt2017/CVE-2026-19193-PoC diff --git a/cves/2026/CVE-2026-19195.md b/cves/2026/CVE-2026-19195.md index 7491d1f8e30..dce4854a2ad 100644 --- a/cves/2026/CVE-2026-19195.md +++ b/cves/2026/CVE-2026-19195.md @@ -14,4 +14,4 @@ A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affec - https://github.com/patrickt2017/CVE-2026-19195-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/patrickt2017/CVE-2026-19195-PoC diff --git a/cves/2026/CVE-2026-19478.md b/cves/2026/CVE-2026-19478.md index 640946f66ca..93b07f7ed79 100644 --- a/cves/2026/CVE-2026-19478.md +++ b/cves/2026/CVE-2026-19478.md @@ -22,6 +22,7 @@ GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 - https://github.com/punitdarji/Gitlab-CVE-2026-19478 - https://github.com/renzi25031469/CVE-2026-19478 - https://github.com/n0xdaemon/cve-2026-19478 +- https://github.com/dinosn/gitlab-cve-2026-19478-lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19478.yaml diff --git a/cves/2026/CVE-2026-19500.md b/cves/2026/CVE-2026-19500.md index e17ccb9a755..2c6cf29bb4e 100644 --- a/cves/2026/CVE-2026-19500.md +++ b/cves/2026/CVE-2026-19500.md @@ -13,4 +13,4 @@ The Entries component in Brainstorm Force SureForms version, less than 2.12.3, d - https://github.com/typedefabcd1234ntd/CVE-2026-19500-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/typedefabcd1234ntd/CVE-2026-19500-poc diff --git a/cves/2026/CVE-2026-19501.md b/cves/2026/CVE-2026-19501.md index 6855f4506b1..3b49f6d4577 100644 --- a/cves/2026/CVE-2026-19501.md +++ b/cves/2026/CVE-2026-19501.md @@ -13,4 +13,4 @@ CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails - https://github.com/typedefabcd1234ntd/CVE-2026-19501-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/typedefabcd1234ntd/CVE-2026-19501-poc diff --git a/cves/2026/CVE-2026-20127.md b/cves/2026/CVE-2026-20127.md index 91a665b8b7d..bb1e0ddc803 100644 --- a/cves/2026/CVE-2026-20127.md +++ b/cves/2026/CVE-2026-20127.md @@ -356,6 +356,7 @@ No PoCs from references. - https://github.com/gigachadusers/cve-2026-20127 - https://github.com/0xBlackash/CVE-2026-20127 - https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension +- https://github.com/BugFor-Pings/CVE-2026-20127_EXP #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb diff --git a/cves/2026/CVE-2026-20253.md b/cves/2026/CVE-2026-20253.md index db947116fb2..7e7216d1cfe 100644 --- a/cves/2026/CVE-2026-20253.md +++ b/cves/2026/CVE-2026-20253.md @@ -21,6 +21,7 @@ No PoCs from references. - https://github.com/fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE- - https://github.com/Het-Kalariya/CVE-2026-20253 - https://github.com/shunfeng8421/exploit-library +- https://github.com/0xBlackash/CVE-2026-20253 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20253.yaml diff --git a/cves/2026/CVE-2026-20841.md b/cves/2026/CVE-2026-20841.md index 9b8b96a2c2b..977c52bf08d 100644 --- a/cves/2026/CVE-2026-20841.md +++ b/cves/2026/CVE-2026-20841.md @@ -25,3 +25,4 @@ No PoCs from references. - https://github.com/EleniChristopoulou/PoC-CVE-2026-20841 - https://github.com/hackfaiz/CVE-2026-20841-PoC - https://github.com/0xBlackash/CVE-2026-20841 +- https://github.com/whiskeylab/notepad_CVE_2026_20841 diff --git a/cves/2026/CVE-2026-20896.md b/cves/2026/CVE-2026-20896.md index 1ce78b9180e..01083a3f96b 100644 --- a/cves/2026/CVE-2026-20896.md +++ b/cves/2026/CVE-2026-20896.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/XaocZenon/CVE-2026-20896 - https://github.com/EQSTLab/CVE-2026-20896 - https://github.com/judgedbykira/CVE-2026-20896-Gitea-Authentication-Bypass +- https://github.com/rz1027/CVE-2026-20896 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20896.yaml diff --git a/cves/2026/CVE-2026-21440.md b/cves/2026/CVE-2026-21440.md index 79e0494f406..dcf44a569ca 100644 --- a/cves/2026/CVE-2026-21440.md +++ b/cves/2026/CVE-2026-21440.md @@ -17,3 +17,4 @@ No PoCs from references. - https://github.com/redpack-kr/Ashwesker-CVE-2026-21440 - https://github.com/k0nnect/cve-2026-21440-writeup-poc - https://github.com/TibbersV6/CVE-2026-21440-POC-EXP +- https://github.com/you-ssef9/CVE-2026-21440 diff --git a/cves/2026/CVE-2026-21509.md b/cves/2026/CVE-2026-21509.md index 4ee3be80eab..943335c3bc8 100644 --- a/cves/2026/CVE-2026-21509.md +++ b/cves/2026/CVE-2026-21509.md @@ -26,3 +26,4 @@ No PoCs from references. - https://github.com/DameDode/CVE-2026-21509-POC - https://github.com/razureink/cve-2026-21509-office_security_bypass_reproduction - https://github.com/IsMyPhonePwned/mimic +- https://github.com/SimoesCTT/CTT-NFS-Vortex-RCE diff --git a/cves/2026/CVE-2026-21858.md b/cves/2026/CVE-2026-21858.md index f2d1fd2e5cd..e4f81c9c52a 100644 --- a/cves/2026/CVE-2026-21858.md +++ b/cves/2026/CVE-2026-21858.md @@ -32,3 +32,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/n8n/CVE-2026-21858 diff --git a/cves/2026/CVE-2026-21962.md b/cves/2026/CVE-2026-21962.md index 1c3642a7fc0..fb21bce36f0 100644 --- a/cves/2026/CVE-2026-21962.md +++ b/cves/2026/CVE-2026-21962.md @@ -22,3 +22,5 @@ No PoCs from references. - https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- - https://github.com/0xBlackash/CVE-2026-21962 - https://github.com/zeetee1235/CVE-2026-21962 +- https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962 +- https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool diff --git a/cves/2026/CVE-2026-2256.md b/cves/2026/CVE-2026-2256.md index 1bd79b688e2..f47c1b2c3cd 100644 --- a/cves/2026/CVE-2026-2256.md +++ b/cves/2026/CVE-2026-2256.md @@ -15,3 +15,4 @@ A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 an #### Github - https://github.com/mruniversity/CVE-2026-2256- - https://github.com/melbratic/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection +- https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC diff --git a/cves/2026/CVE-2026-22679.md b/cves/2026/CVE-2026-22679.md index 50d96316f27..1a2087ababd 100644 --- a/cves/2026/CVE-2026-22679.md +++ b/cves/2026/CVE-2026-22679.md @@ -13,4 +13,4 @@ Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthentic No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/keraattin/CVE-2026-22679 diff --git a/cves/2026/CVE-2026-22732.md b/cves/2026/CVE-2026-22732.md index 32bb9a9b997..98fad15bd24 100644 --- a/cves/2026/CVE-2026-22732.md +++ b/cves/2026/CVE-2026-22732.md @@ -22,3 +22,4 @@ No PoCs from references. #### Github - https://github.com/moderneinc/rewrite-cve-2026-22732 +- https://github.com/semgrep/cve-2026-22732-demo diff --git a/cves/2026/CVE-2026-22777.md b/cves/2026/CVE-2026-22777.md index fad5a01b4a3..e0476e8adae 100644 --- a/cves/2026/CVE-2026-22777.md +++ b/cves/2026/CVE-2026-22777.md @@ -15,3 +15,6 @@ No PoCs from references. #### Github - https://github.com/wcnmwcis/CVE-2026-22777 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/comfyui/CVE-2026-22777 diff --git a/cves/2026/CVE-2026-23111.md b/cves/2026/CVE-2026-23111.md index 28ac5f17f53..1ebb9042b10 100644 --- a/cves/2026/CVE-2026-23111.md +++ b/cves/2026/CVE-2026-23111.md @@ -73,3 +73,4 @@ No PoCs from references. - https://github.com/bakano98/cve-2026-23111-poc - https://github.com/vrtlbob/Linux-Kernel-Vulnerabilities-CVE-2026-23111 - https://github.com/Knz-source/CVE-2026-23111-POC-noddlenpottato +- https://github.com/ishankaru/CVE-2026-23111-nftables-lab diff --git a/cves/2026/CVE-2026-23552.md b/cves/2026/CVE-2026-23552.md index 12ce5703b5f..c25d05c771c 100644 --- a/cves/2026/CVE-2026-23552.md +++ b/cves/2026/CVE-2026-23552.md @@ -18,4 +18,4 @@ Users are recommended to upgrade to version 4.18.0, which fixes the issue. - https://github.com/oscerd/CVE-2026-23552 #### Github -No PoCs found on GitHub currently. +- https://github.com/oscerd/CVE-2026-23552 diff --git a/cves/2026/CVE-2026-24061.md b/cves/2026/CVE-2026-24061.md index 2bac7d886b4..f254aac4982 100644 --- a/cves/2026/CVE-2026-24061.md +++ b/cves/2026/CVE-2026-24061.md @@ -65,6 +65,10 @@ No PoCs from references. - https://github.com/s-vx/CVE-2026-24061 - https://github.com/iLokaas/CVE-2026-24061-payload - https://github.com/hackingyseguridad/root +- https://github.com/0xBlackash/CVE-2026-24061 +- https://github.com/franckferman/CVE-2026-24061 +- https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit +- https://github.com/tiborscholtz/CVE-2026-24061 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml @@ -74,3 +78,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/telnet/gnu_inetutils_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/inetutils/CVE-2026-24061 diff --git a/cves/2026/CVE-2026-2441.md b/cves/2026/CVE-2026-2441.md index 663a071b09b..9614e019fa5 100644 --- a/cves/2026/CVE-2026-2441.md +++ b/cves/2026/CVE-2026-2441.md @@ -18,6 +18,8 @@ No PoCs from references. - https://github.com/NetVanguard-cmd/CVE-2026-2441 - https://github.com/D3b0j33t/CVE-2026-2441-PoC - https://github.com/theemperorspath/CVE-2026-2441-PoC +- https://github.com/MartinaStarone/CVE-2026-2441 +- https://github.com/atiilla/CVE-2026-2441_PoC #### ExploitDB - https://www.exploit-db.com/exploits/52542 diff --git a/cves/2026/CVE-2026-24858.md b/cves/2026/CVE-2026-24858.md index 8a667117e34..aebec5967cc 100644 --- a/cves/2026/CVE-2026-24858.md +++ b/cves/2026/CVE-2026-24858.md @@ -27,3 +27,4 @@ No PoCs from references. - https://github.com/m0d0ri205/CVE-2026-24858 - https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass - https://github.com/gagaltotal/cve-2026-24858 +- https://github.com/SimoesCTT/-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858- diff --git a/cves/2026/CVE-2026-25177.md b/cves/2026/CVE-2026-25177.md index c8e85d28f5a..94edbb945ac 100644 --- a/cves/2026/CVE-2026-25177.md +++ b/cves/2026/CVE-2026-25177.md @@ -45,3 +45,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-25177 +- https://github.com/danaug23/detect_CVE-2026-25177 diff --git a/cves/2026/CVE-2026-25253.md b/cves/2026/CVE-2026-25253.md index 8d0cdc5b6c8..d516ee6512d 100644 --- a/cves/2026/CVE-2026-25253.md +++ b/cves/2026/CVE-2026-25253.md @@ -20,3 +20,6 @@ No PoCs from references. - https://github.com/tonydzi/leash-poc - https://github.com/the-void-ia/ai-agent-security-labs - https://github.com/agenticdome/agenticdome-openclaw-security-ts + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openclaw/CVE-2026-25253 diff --git a/cves/2026/CVE-2026-25747.md b/cves/2026/CVE-2026-25747.md index 105b85879cb..701e1e9f21b 100644 --- a/cves/2026/CVE-2026-25747.md +++ b/cves/2026/CVE-2026-25747.md @@ -21,3 +21,4 @@ Users are recommended to upgrade to version 4.18.0, which fixes the issue. For t #### Github - https://github.com/dinosn/CVE-2026-33453 +- https://github.com/oscerd/CVE-2026-25747 diff --git a/cves/2026/CVE-2026-25860.md b/cves/2026/CVE-2026-25860.md index 31f88964a4d..5e20edbc51b 100644 --- a/cves/2026/CVE-2026-25860.md +++ b/cves/2026/CVE-2026-25860.md @@ -14,4 +14,4 @@ OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability i - https://github.com/partywavesec/CVE-2026-25860 #### Github -No PoCs found on GitHub currently. +- https://github.com/partywavesec/CVE-2026-25860 diff --git a/cves/2026/CVE-2026-26198.md b/cves/2026/CVE-2026-26198.md index b85fb2933ca..d2b4b941014 100644 --- a/cves/2026/CVE-2026-26198.md +++ b/cves/2026/CVE-2026-26198.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/NetVanguard-cmd/CVE-2026-26198 +- https://github.com/sergicortesabadia/CVE-2026-26198-analysis diff --git a/cves/2026/CVE-2026-26211.md b/cves/2026/CVE-2026-26211.md index 237359208eb..0b3b71c23dc 100644 --- a/cves/2026/CVE-2026-26211.md +++ b/cves/2026/CVE-2026-26211.md @@ -13,4 +13,4 @@ Ekushey Project Manager CRM stores the administrator-configured system name and - https://github.com/LindHunt/CVE-2026-26211 #### Github -No PoCs found on GitHub currently. +- https://github.com/LindHunt/CVE-2026-26211 diff --git a/cves/2026/CVE-2026-2631.md b/cves/2026/CVE-2026-2631.md index abbc1b11f8b..81dc795b984 100644 --- a/cves/2026/CVE-2026-2631.md +++ b/cves/2026/CVE-2026-2631.md @@ -13,4 +13,4 @@ The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an una - https://wpscan.com/vulnerability/c6a64f26-4007-49a1-aa69-1e3c50223ac7/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Nxploited/CVE-2026-2631 diff --git a/cves/2026/CVE-2026-2636.md b/cves/2026/CVE-2026-2636.md index dcef8fc6c9e..d7b4d84f492 100644 --- a/cves/2026/CVE-2026-2636.md +++ b/cves/2026/CVE-2026-2636.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/uname1able/CVE-2026-2636 +- https://github.com/oxfemale/CVE-2026-2636_PoC diff --git a/cves/2026/CVE-2026-27944.md b/cves/2026/CVE-2026-27944.md index 7cc97cee0e6..6952ff99716 100644 --- a/cves/2026/CVE-2026-27944.md +++ b/cves/2026/CVE-2026-27944.md @@ -18,6 +18,10 @@ No PoCs from references. - https://github.com/NULL200OK/CVE-2026-27944 - https://github.com/Goultarde/CVE-2026-27944-poc - https://github.com/jake-young-dev/CVE-2026-27944 +- https://github.com/BimaBalance/Cve-2026-27944-Tools-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27944.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nginx-ui/CVE-2026-27944 diff --git a/cves/2026/CVE-2026-29000.md b/cves/2026/CVE-2026-29000.md index 1303b7cb80e..90a2e339329 100644 --- a/cves/2026/CVE-2026-29000.md +++ b/cves/2026/CVE-2026-29000.md @@ -32,3 +32,4 @@ pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication by - https://github.com/lucastran05/CVE-2026-29000 - https://github.com/c0gnit00/CVE-2026-29000 - https://github.com/dua2z3rr/CVE-2026-29000-PoC +- https://github.com/tc4dy/CVE-2026-29000-PoC-Exploit diff --git a/cves/2026/CVE-2026-29519.md b/cves/2026/CVE-2026-29519.md index f6abad5dd19..643244dbbc1 100644 --- a/cves/2026/CVE-2026-29519.md +++ b/cves/2026/CVE-2026-29519.md @@ -13,4 +13,4 @@ Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lin - https://github.com/L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS #### Github -No PoCs found on GitHub currently. +- https://github.com/L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS diff --git a/cves/2026/CVE-2026-29923.md b/cves/2026/CVE-2026-29923.md index a643f7a4f93..4a39894b859 100644 --- a/cves/2026/CVE-2026-29923.md +++ b/cves/2026/CVE-2026-29923.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/Smarttfoxx/CVE-2026-29923 - https://github.com/mein-0/cve-2026-29923 +- https://github.com/athenasec16/CVE-2026-29923 diff --git a/cves/2026/CVE-2026-3055.md b/cves/2026/CVE-2026-3055.md index 67a0cae0661..335f4980268 100644 --- a/cves/2026/CVE-2026-3055.md +++ b/cves/2026/CVE-2026-3055.md @@ -19,6 +19,7 @@ No PoCs from references. #### Github - https://github.com/fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC - https://github.com/NetVanguard-cmd/CVE-2026-3055 +- https://github.com/0xBlackash/CVE-2026-3055 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3055.yaml diff --git a/cves/2026/CVE-2026-31431.md b/cves/2026/CVE-2026-31431.md index 79271990696..ed1e199ff58 100644 --- a/cves/2026/CVE-2026-31431.md +++ b/cves/2026/CVE-2026-31431.md @@ -232,6 +232,12 @@ No PoCs from references. - https://github.com/songzzzz/dirtyfrag - https://github.com/nek-3231/copyfail-poc - https://github.com/RBKD-SEC/POC +- https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit +- https://github.com/danimrtzp/CVE-2026-31431-REVSHELL +- https://github.com/liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script +- https://github.com/mauricioportela/CVE-2026-31431-Analysis +- https://github.com/rippsec/CVE-2026-31431-Copy-Fail +- https://github.com/sibersan/cve-2026-31431-checker #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-31431.yaml diff --git a/cves/2026/CVE-2026-31816.md b/cves/2026/CVE-2026-31816.md index fcd7dd0364a..de5de276a74 100644 --- a/cves/2026/CVE-2026-31816.md +++ b/cves/2026/CVE-2026-31816.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31816.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/budibase/CVE-2026-31816 diff --git a/cves/2026/CVE-2026-34197.md b/cves/2026/CVE-2026-34197.md index 9b729ffdefe..5356be4a373 100644 --- a/cves/2026/CVE-2026-34197.md +++ b/cves/2026/CVE-2026-34197.md @@ -42,9 +42,14 @@ No PoCs from references. - https://github.com/hnytgl/CVE-2026-34197 - https://github.com/K3ysTr0K3R/CVE-2026-34197 - https://github.com/pssec-io/CVE-2026-34197 +- https://github.com/Catherines77/ActiveMQ-EXPtools +- https://github.com/asdasddqwdq29-a11y/CVE-2026-34197 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34197.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2026-34197 diff --git a/cves/2026/CVE-2026-34486.md b/cves/2026/CVE-2026-34486.md index 70b6ae0bb8c..8fbbbb3ef29 100644 --- a/cves/2026/CVE-2026-34486.md +++ b/cves/2026/CVE-2026-34486.md @@ -30,3 +30,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34486.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2026-34486 diff --git a/cves/2026/CVE-2026-3844.md b/cves/2026/CVE-2026-3844.md index 13ef991560e..da74a035393 100644 --- a/cves/2026/CVE-2026-3844.md +++ b/cves/2026/CVE-2026-3844.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/0xgh057r3c0n/CVE-2026-3844 - https://github.com/Dhananjayasj/CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution - https://github.com/Alevtinka19/CVE-2026-3844 +- https://github.com/im-hanzou/CVE-2026-3844 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3844.yaml diff --git a/cves/2026/CVE-2026-39363.md b/cves/2026/CVE-2026-39363.md index 59c3f0f4c81..a2976dc5023 100644 --- a/cves/2026/CVE-2026-39363.md +++ b/cves/2026/CVE-2026-39363.md @@ -23,3 +23,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39363.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/vite/CVE-2026-39363 diff --git a/cves/2026/CVE-2026-39808.md b/cves/2026/CVE-2026-39808.md index 83ec3f7d55b..c2191a95177 100644 --- a/cves/2026/CVE-2026-39808.md +++ b/cves/2026/CVE-2026-39808.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/Lechansky/CVE-2026-39808 - https://github.com/HORKimhab/CVE-2026-39808 - https://github.com/error-inside/CVE-2026-39808 +- https://github.com/ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39808.yaml diff --git a/cves/2026/CVE-2026-39987.md b/cves/2026/CVE-2026-39987.md index 7364597ee46..09c25af1b95 100644 --- a/cves/2026/CVE-2026-39987.md +++ b/cves/2026/CVE-2026-39987.md @@ -29,6 +29,8 @@ No PoCs from references. - https://github.com/dodeepsink/CVE-2026-39987.py - https://github.com/MADA0L/CVE-2026-39987-Poc - https://github.com/Wind010/CVE-2026-39987_PoC +- https://github.com/Nxploited/CVE-2026-39987 +- https://github.com/mki9/CVE-2026-39987_exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39987.yaml diff --git a/cves/2026/CVE-2026-40369.md b/cves/2026/CVE-2026-40369.md index 6083708395c..3fe674a2222 100644 --- a/cves/2026/CVE-2026-40369.md +++ b/cves/2026/CVE-2026-40369.md @@ -24,3 +24,4 @@ No PoCs from references. - https://github.com/piffd0s/ntoskrnl-metadata - https://github.com/0xBlackash/CVE-2026-40369 - https://github.com/CCELEND/CVE-2026-40369 +- https://github.com/ercihan/CVE-2026-40369 diff --git a/cves/2026/CVE-2026-4106.md b/cves/2026/CVE-2026-4106.md index 09eec9cf7cb..ba6378e2c3d 100644 --- a/cves/2026/CVE-2026-4106.md +++ b/cves/2026/CVE-2026-4106.md @@ -13,7 +13,7 @@ The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unau - https://wpscan.com/vulnerability/9477ead2-3990-4aae-8e66-09ee2f4daa3e/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ef3tr/CVE-2026-4106 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4106.yaml diff --git a/cves/2026/CVE-2026-41089.md b/cves/2026/CVE-2026-41089.md index bd7367c6089..073ff899a34 100644 --- a/cves/2026/CVE-2026-41089.md +++ b/cves/2026/CVE-2026-41089.md @@ -34,3 +34,4 @@ No PoCs from references. - https://github.com/hnytgl/CVE-2026-41089 - https://github.com/0xBlackash/CVE-2026-41089 - https://github.com/jelasin/CVE-2026-41089 +- https://github.com/HydraSoft/CVE-2026-41089-Netlogon-RCE diff --git a/cves/2026/CVE-2026-41940.md b/cves/2026/CVE-2026-41940.md index c694355081a..d7abde5b3bc 100644 --- a/cves/2026/CVE-2026-41940.md +++ b/cves/2026/CVE-2026-41940.md @@ -64,6 +64,17 @@ No PoCs from references. - https://github.com/lanicer/cve-2026-41940-PoC - https://github.com/t4xo/CVE-2026-41940 - https://github.com/keithbennedict/CVE-2026-41940-Linux +- https://github.com/Ishanoshada/CVE-2026-41940-Exploit-PoC +- https://github.com/Jenderal92/CVE-2026-41940 +- https://github.com/NULL200OK/cve-2026-41940-tool +- https://github.com/george1-adel/CVE-2026-41940_exploit +- https://github.com/ilmndwntr/CVE-2026-41940-MASS-EXPLOIT +- https://github.com/imbas007/POC_CVE-2026-41940 +- https://github.com/sardine-web/Automated-scanner-CVE-2026-41940 +- https://github.com/sercanokur/CVE-2026-41940-cPanel-WHM-Verification-Tool +- https://github.com/tc4dy/CVE-2026-41940-PoC-Exploit +- https://github.com/ynsmroztas/cPanelSniper +- https://github.com/zwanski2019/cPanelSniper #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml diff --git a/cves/2026/CVE-2026-42167.md b/cves/2026/CVE-2026-42167.md index c7b0c7b1073..79fba774334 100644 --- a/cves/2026/CVE-2026-42167.md +++ b/cves/2026/CVE-2026-42167.md @@ -18,6 +18,8 @@ mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary co - https://github.com/jimmexploit/CVE-2026-42167-PoC - https://github.com/Sl4cK0TH/CVE-2026-42167-PoC - https://github.com/SimoesCTT/CTT-ProFTPD-Resonance +- https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc +- https://github.com/dinosn/proftpd-CVE-2026-42167-analysis #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-42167.yaml diff --git a/cves/2026/CVE-2026-42530.md b/cves/2026/CVE-2026-42530.md index 532a34e2e7a..0c477fe1ffc 100644 --- a/cves/2026/CVE-2026-42530.md +++ b/cves/2026/CVE-2026-42530.md @@ -18,3 +18,4 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-42530 - https://github.com/HORKimhab/CVE-2026-42530 +- https://github.com/v4ltonn/CVE-2026-42530 diff --git a/cves/2026/CVE-2026-42588.md b/cves/2026/CVE-2026-42588.md index ee048ad0add..c8725b148c0 100644 --- a/cves/2026/CVE-2026-42588.md +++ b/cves/2026/CVE-2026-42588.md @@ -27,3 +27,4 @@ No PoCs from references. #### Github - https://github.com/hnytgl/CVE-2026-42588 +- https://github.com/gentleman567/POC diff --git a/cves/2026/CVE-2026-42945.md b/cves/2026/CVE-2026-42945.md index d96823d937c..9a363eda0fe 100644 --- a/cves/2026/CVE-2026-42945.md +++ b/cves/2026/CVE-2026-42945.md @@ -39,3 +39,5 @@ No PoCs from references. - https://github.com/sec-sys/CVE-2026-42945-Reverse-Shell-POC - https://github.com/laohuang101/NginxRift-Poc - https://github.com/FranklinF25/cve-2026-42945 +- https://github.com/Kentox493/CVE-2026-42945_NginxRift +- https://github.com/LiaoZiqi-GZFLS/CVE-2026-42945 diff --git a/cves/2026/CVE-2026-43494.md b/cves/2026/CVE-2026-43494.md index 5a9e4f71ae8..53d0fecffd6 100644 --- a/cves/2026/CVE-2026-43494.md +++ b/cves/2026/CVE-2026-43494.md @@ -29,3 +29,6 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-43494 +- https://github.com/jayhutajulu1/CVE-2026-43494-PinTheft-PoC +- https://github.com/letsr00t/CVE-2026-43494-PinTheft-PoC +- https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC diff --git a/cves/2026/CVE-2026-43499.md b/cves/2026/CVE-2026-43499.md index 6bf70580668..b4131917556 100644 --- a/cves/2026/CVE-2026-43499.md +++ b/cves/2026/CVE-2026-43499.md @@ -136,3 +136,7 @@ No PoCs from references. - https://github.com/a15831536502-del/GKI_KernelSU_SUSFS - https://github.com/N1et/samsung-m53-root-4x - https://github.com/zenyxx-xd/RootMyVivo-Payloads +- https://github.com/2932796375github/CVE-2026-43499_OPPO-MT6835 +- https://github.com/fancyzll/CVE-2026-43499_OPPO-MT6835 +- https://github.com/knowlily/cve-2026-43499-honor +- https://github.com/zychen027/CVE-2026-43499_HW-CLT-AL01 diff --git a/cves/2026/CVE-2026-43501.md b/cves/2026/CVE-2026-43501.md index 43fc384d78e..6e19224fe7c 100644 --- a/cves/2026/CVE-2026-43501.md +++ b/cves/2026/CVE-2026-43501.md @@ -43,3 +43,4 @@ No PoCs from references. #### Github - https://github.com/ngtuonghung/CVE-2026-43501 +- https://github.com/Anyone202/cybermeowfia-termux diff --git a/cves/2026/CVE-2026-44401.md b/cves/2026/CVE-2026-44401.md index 084d7db52a1..1670f5da83e 100644 --- a/cves/2026/CVE-2026-44401.md +++ b/cves/2026/CVE-2026-44401.md @@ -13,4 +13,4 @@ Typemill CMS version 2.x contains a persistent cross-site scripting vulnerabilit - https://github.com/sn0x-sharma/CVE-2026-44401 #### Github -No PoCs found on GitHub currently. +- https://github.com/sn0x-sharma/CVE-2026-44401 diff --git a/cves/2026/CVE-2026-45185.md b/cves/2026/CVE-2026-45185.md index b2b58f04e3d..67b92ea4649 100644 --- a/cves/2026/CVE-2026-45185.md +++ b/cves/2026/CVE-2026-45185.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/0init/CVE-2026-45185 +- https://github.com/materaj2/cve-2026-45185-detection-script diff --git a/cves/2026/CVE-2026-45447.md b/cves/2026/CVE-2026-45447.md index e916e1144a4..ca3b916d622 100644 --- a/cves/2026/CVE-2026-45447.md +++ b/cves/2026/CVE-2026-45447.md @@ -43,3 +43,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-45447 +- https://github.com/0xBlackash/CVE-2026-45447 diff --git a/cves/2026/CVE-2026-45829.md b/cves/2026/CVE-2026-45829.md index 853f2ebf3a0..d029902ff88 100644 --- a/cves/2026/CVE-2026-45829.md +++ b/cves/2026/CVE-2026-45829.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-45829 +- https://github.com/fevar54/FULL-ANALYSIS---CVE-2026-45829-ChromaDB- diff --git a/cves/2026/CVE-2026-4631.md b/cves/2026/CVE-2026-4631.md index aa593c6e7a5..774fc8e33e1 100644 --- a/cves/2026/CVE-2026-4631.md +++ b/cves/2026/CVE-2026-4631.md @@ -19,6 +19,7 @@ No PoCs from references. #### Github - https://github.com/cyberheartmi9/CVE-2026-4631-cockpit-RCE +- https://github.com/ExDev994/CVE-2026-4631-cockpit-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4631.yaml diff --git a/cves/2026/CVE-2026-46331.md b/cves/2026/CVE-2026-46331.md index f192228ce22..ee7bcc6bbd6 100644 --- a/cves/2026/CVE-2026-46331.md +++ b/cves/2026/CVE-2026-46331.md @@ -46,3 +46,4 @@ No PoCs from references. - https://github.com/nawalacheker1/CVE-2026-46331 - https://github.com/cherrycherrymay/PoC-CVE-2026-46331 - https://github.com/0xdeadroot/pedit-cow-exploit +- https://github.com/V0IDNETWORK/CVE-2026-46331 diff --git a/cves/2026/CVE-2026-47103.md b/cves/2026/CVE-2026-47103.md index 6802d0c60c3..1697be8872e 100644 --- a/cves/2026/CVE-2026-47103.md +++ b/cves/2026/CVE-2026-47103.md @@ -13,4 +13,4 @@ Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution - https://github.com/SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce diff --git a/cves/2026/CVE-2026-47117.md b/cves/2026/CVE-2026-47117.md index 558294b6a63..a2050a9482e 100644 --- a/cves/2026/CVE-2026-47117.md +++ b/cves/2026/CVE-2026-47117.md @@ -13,4 +13,4 @@ OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII p - https://github.com/SaiTeja-Erukude/CVE-2026-47117-openmed-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-47117-openmed-rce diff --git a/cves/2026/CVE-2026-48611.md b/cves/2026/CVE-2026-48611.md index 535652314b5..98c0b75056e 100644 --- a/cves/2026/CVE-2026-48611.md +++ b/cves/2026/CVE-2026-48611.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/wanmywan/CVE-2026-48611-phpBB - https://github.com/Ethicalgrey/phpBB-CVE-2026-48611 +- https://github.com/Diznev/CVE-2026-48611-EXPLOIT #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48611.yaml diff --git a/cves/2026/CVE-2026-4885.md b/cves/2026/CVE-2026-4885.md index fa5fcde0c2a..31f710552c4 100644 --- a/cves/2026/CVE-2026-4885.md +++ b/cves/2026/CVE-2026-4885.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/xShadow-Here/CVE-2026-4885 +- https://github.com/Jenderal92/CVE-2026-4885 diff --git a/cves/2026/CVE-2026-48907.md b/cves/2026/CVE-2026-48907.md index 227311de278..8c3aba365cf 100644 --- a/cves/2026/CVE-2026-48907.md +++ b/cves/2026/CVE-2026-48907.md @@ -28,6 +28,8 @@ No PoCs from references. - https://github.com/ksotaria1337/-CVE-2026-48907- - https://github.com/CerberusMrXi/JCEzploit-CVE-2026-48907 - https://github.com/itsismarcos/COM_JCE_VANDA +- https://github.com/ChiefYoru/CVE-2026-48907_PoC +- https://github.com/xitexploiter96-dot/CVE-2026-48907- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48907.yaml diff --git a/cves/2026/CVE-2026-48908.md b/cves/2026/CVE-2026-48908.md index 7240f34bac0..969eaed0021 100644 --- a/cves/2026/CVE-2026-48908.md +++ b/cves/2026/CVE-2026-48908.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla - https://github.com/Jenderal92/CVE-2026-48908 - https://github.com/cazzysoci/cve-2026-48908 +- https://github.com/ayiezola/CVE-2026-48908 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48908.yaml diff --git a/cves/2026/CVE-2026-48909.md b/cves/2026/CVE-2026-48909.md index d24ba1b66aa..4349c25c9e9 100644 --- a/cves/2026/CVE-2026-48909.md +++ b/cves/2026/CVE-2026-48909.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/Is4yev/CVE-2026-48909 +- https://github.com/CerberusMrXi/CVE-2026-48909-Joomla-SP-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48909.yaml diff --git a/cves/2026/CVE-2026-48939.md b/cves/2026/CVE-2026-48939.md index d3c1fdd3f2f..95fc65eb7b3 100644 --- a/cves/2026/CVE-2026-48939.md +++ b/cves/2026/CVE-2026-48939.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/Polosss/By-Poloss..-..CVE-2026-48939 +- https://github.com/ChiefYoru/CVE-2026-48939_PoC +- https://github.com/shinthink/CVE-2026-48939 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48939.yaml diff --git a/cves/2026/CVE-2026-49468.md b/cves/2026/CVE-2026-49468.md index 402dec32caf..0723f01f298 100644 --- a/cves/2026/CVE-2026-49468.md +++ b/cves/2026/CVE-2026-49468.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/josephbrito/LiteLLM-Unauthenticated-Command-Injection +- https://github.com/BiiTts/CVE-2026-49468-LiteLLM-Auth-Bypass diff --git a/cves/2026/CVE-2026-5027.md b/cves/2026/CVE-2026-5027.md index 185ab807a44..3706d255c16 100644 --- a/cves/2026/CVE-2026-5027.md +++ b/cves/2026/CVE-2026-5027.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/min8282/CVE-2026-5027 - https://github.com/HORKimhab/CVE-2026-5027 - https://github.com/Layer-6/CVE-2026-5027-Langflow +- https://github.com/0xBlackash/CVE-2026-5027 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml diff --git a/cves/2026/CVE-2026-5118.md b/cves/2026/CVE-2026-5118.md index 6b2e15a8ea3..aa5dcb18c3b 100644 --- a/cves/2026/CVE-2026-5118.md +++ b/cves/2026/CVE-2026-5118.md @@ -14,3 +14,6 @@ No PoCs from references. #### Github - https://github.com/zycoder0day/CVE-2026-5118 +- https://github.com/1beelze/CVE-2026-5118 +- https://github.com/Jenderal92/CVE-2026-5118 +- https://github.com/Yucaerin/CVE-2026-5118 diff --git a/cves/2026/CVE-2026-53753.md b/cves/2026/CVE-2026-53753.md index fece62d6bfc..ecf692446ec 100644 --- a/cves/2026/CVE-2026-53753.md +++ b/cves/2026/CVE-2026-53753.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/0xEnc0der/CVE-2026-53753 +- https://github.com/BiiTts/CVE-2026-53753-Crawl4AI-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53753.yaml diff --git a/cves/2026/CVE-2026-54121.md b/cves/2026/CVE-2026-54121.md index 39e44fb1615..ab8d4ed83f2 100644 --- a/cves/2026/CVE-2026-54121.md +++ b/cves/2026/CVE-2026-54121.md @@ -39,3 +39,4 @@ No PoCs from references. - https://github.com/GlendonNotGlen/certighost-cve-2026-54121-slides - https://github.com/KrakenEU/CVE-2026-54121-CertiGhost - https://github.com/sam00/POC-CVE-2026-54121-Certighost +- https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit diff --git a/cves/2026/CVE-2026-56121.md b/cves/2026/CVE-2026-56121.md index a580843733d..ab885a25449 100644 --- a/cves/2026/CVE-2026-56121.md +++ b/cves/2026/CVE-2026-56121.md @@ -14,3 +14,5 @@ Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows #### Github - https://github.com/joaovicdev/EXPLOIT-CVE-2026-56121 +- https://github.com/0xdak/CVE-2026-56121_exploit +- https://github.com/BiiTts/CVE-2026-56121-Feast-Unauth-RCE diff --git a/cves/2026/CVE-2026-56290.md b/cves/2026/CVE-2026-56290.md index 0e79e4f9165..7e72a4154a4 100644 --- a/cves/2026/CVE-2026-56290.md +++ b/cves/2026/CVE-2026-56290.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit - https://github.com/MRCUKIL/com_pagebuilderck +- https://github.com/ChiefYoru/CVE-2026-56290_PoC +- https://github.com/Jenderal92/CVE-2026-56290 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56290.yaml diff --git a/cves/2026/CVE-2026-56291.md b/cves/2026/CVE-2026-56291.md index aa47651b7fb..fd808e37501 100644 --- a/cves/2026/CVE-2026-56291.md +++ b/cves/2026/CVE-2026-56291.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/shinthink/CVE-2026-56291 - https://github.com/rimbadirgantara/CVE-2026-56291.yaml +- https://github.com/0xdenis77/CVE-2026-56291 +- https://github.com/ChiefYoru/CVE-2026-56291_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56291.yaml diff --git a/cves/2026/CVE-2026-56705.md b/cves/2026/CVE-2026-56705.md index 9fcd71cfd56..72f69fb87ce 100644 --- a/cves/2026/CVE-2026-56705.md +++ b/cves/2026/CVE-2026-56705.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/ChiefYoru/Exploit-CVE-2026-56705 +- https://github.com/Boreas37/CVE-2026-56705 diff --git a/cves/2026/CVE-2026-57850.md b/cves/2026/CVE-2026-57850.md index a1f9e574142..1cf53645684 100644 --- a/cves/2026/CVE-2026-57850.md +++ b/cves/2026/CVE-2026-57850.md @@ -13,4 +13,4 @@ RustDesk before 1.4.9 does not enforce a session's authorized connection scope o - https://github.com/sn0x-sharma/CVE-2026-57850 #### Github -No PoCs found on GitHub currently. +- https://github.com/sn0x-sharma/CVE-2026-57850 diff --git a/cves/2026/CVE-2026-58048.md b/cves/2026/CVE-2026-58048.md index 9a02ee66a30..50bcf38bc03 100644 --- a/cves/2026/CVE-2026-58048.md +++ b/cves/2026/CVE-2026-58048.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/imbas007/POC-CVE-2026-58048 +- https://github.com/tc4dy/CVE-2026-58048-PoC-Exploit diff --git a/cves/2026/CVE-2026-58138.md b/cves/2026/CVE-2026-58138.md index 14c513d9cf0..7dfb2d2194a 100644 --- a/cves/2026/CVE-2026-58138.md +++ b/cves/2026/CVE-2026-58138.md @@ -16,6 +16,8 @@ No PoCs from references. - https://github.com/seqra/cve-2026-58138 - https://github.com/0xgh057r3c0n/CVE-2026-58138 - https://github.com/Procjevt/CVE-2026-58138 +- https://github.com/BiiTts/CVE-2026-58138-Conductor-Unauth-RCE +- https://github.com/Ch4120N/CVE-2026-58138 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58138.yaml diff --git a/cves/2026/CVE-2026-60137.md b/cves/2026/CVE-2026-60137.md index 924fa2ee2b5..ae46fdede65 100644 --- a/cves/2026/CVE-2026-60137.md +++ b/cves/2026/CVE-2026-60137.md @@ -52,6 +52,8 @@ No PoCs from references. - https://github.com/GMJayy/wp-cve-poc - https://github.com/Ka01nq/WpScc - https://github.com/sahmsec/wp2shell +- https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030 +- https://github.com/codeb0ssx/Ultimate-wp2shell #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb diff --git a/cves/2026/CVE-2026-60206.md b/cves/2026/CVE-2026-60206.md index 02e01469036..56626b755b0 100644 --- a/cves/2026/CVE-2026-60206.md +++ b/cves/2026/CVE-2026-60206.md @@ -17,3 +17,6 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-60206 +- https://github.com/Debajyoti0-0/CVE-2026-60206 +- https://github.com/imbas007/POC-CVE-2026-60206 +- https://github.com/tc4dy/CVE-2026-60206-PoC-Exploit diff --git a/cves/2026/CVE-2026-6111.md b/cves/2026/CVE-2026-6111.md index a7030c1b81e..026aa40220d 100644 --- a/cves/2026/CVE-2026-6111.md +++ b/cves/2026/CVE-2026-6111.md @@ -14,4 +14,4 @@ A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. Thi - https://github.com/FoundationAgents/MetaGPT/issues/1934 #### Github -No PoCs found on GitHub currently. +- https://github.com/MonsterWsr-hub/CVE-2026-6111 diff --git a/cves/2026/CVE-2026-61511.md b/cves/2026/CVE-2026-61511.md index 50d74962fa1..8c631ee24e3 100644 --- a/cves/2026/CVE-2026-61511.md +++ b/cves/2026/CVE-2026-61511.md @@ -17,6 +17,7 @@ vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vul #### Github - https://github.com/HORKimhab/CVE-2026-61511 - https://github.com/shootcannon/CVE-2026-61511 +- https://github.com/tc4dy/CVE-2026-61511-PoC-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-61511.yaml diff --git a/cves/2026/CVE-2026-63030.md b/cves/2026/CVE-2026-63030.md index eeaf4516edb..d2d9ed33e43 100644 --- a/cves/2026/CVE-2026-63030.md +++ b/cves/2026/CVE-2026-63030.md @@ -65,9 +65,17 @@ No PoCs from references. - https://github.com/GMJayy/wp-cve-poc - https://github.com/Ka01nq/WpScc - https://github.com/sahmsec/wp2shell +- https://github.com/0xh7ml/CVE-2026-63030 +- https://github.com/0xsha/wp2shell +- https://github.com/ChiefYoru/CVE-2026-63030_PoC +- https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t +- https://github.com/Senanfurkan/wordpress-cve-2026-63030 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/wordpress/CVE-2026-63030 diff --git a/cves/2026/CVE-2026-6307.md b/cves/2026/CVE-2026-6307.md index 494d794ddbc..d41f937325c 100644 --- a/cves/2026/CVE-2026-6307.md +++ b/cves/2026/CVE-2026-6307.md @@ -14,3 +14,5 @@ No PoCs from references. #### Github - https://github.com/J4ck3LSyN-Gen2/CVE-2026-48558 +- https://github.com/0xsha/CVE-2026-6307 +- https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus diff --git a/cves/2026/CVE-2026-63077.md b/cves/2026/CVE-2026-63077.md index 5f6fa2db385..f6e9d275ceb 100644 --- a/cves/2026/CVE-2026-63077.md +++ b/cves/2026/CVE-2026-63077.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/sfewer-r7/CVE-2026-63077 - https://github.com/BoredHackerBlog/teamcity-CVE-2026-63077-pcap +- https://github.com/AnggaTechI/CVE-2026-63077 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63077.yaml diff --git a/cves/2026/CVE-2026-64531.md b/cves/2026/CVE-2026-64531.md index 53223cd8915..287a91b7d28 100644 --- a/cves/2026/CVE-2026-64531.md +++ b/cves/2026/CVE-2026-64531.md @@ -53,3 +53,4 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-64531 +- https://github.com/HackSpeak/CVE-2026-64531 diff --git a/cves/2026/CVE-2026-64600.md b/cves/2026/CVE-2026-64600.md index fe7406196c7..46c9e5d83d6 100644 --- a/cves/2026/CVE-2026-64600.md +++ b/cves/2026/CVE-2026-64600.md @@ -35,3 +35,5 @@ No PoCs from references. - https://github.com/bha-vin/CVE-2026-64600-Exploit - https://github.com/masrikky/CVE-2026-64600-RefluXFS - https://github.com/0xSec1/CVE-2026-64600-RefluXFS-PoC +- https://github.com/Debajyoti0-0/CVE-2026-64600 +- https://github.com/letsr00t/RefluxFS_CVE-2026-64600 diff --git a/cves/2026/CVE-2026-64638.md b/cves/2026/CVE-2026-64638.md index 04ca69275e1..66b27043650 100644 --- a/cves/2026/CVE-2026-64638.md +++ b/cves/2026/CVE-2026-64638.md @@ -42,6 +42,7 @@ No PoCs from references. - https://github.com/686f6c61/POC-WP-XSS2Shell-CVE-2026-64638 - https://github.com/g0d150ne/XSS2Shell - https://github.com/SanchitMhase/XSS2SHELL-POC +- https://github.com/tc4dy/CVE-2026-64638-PoC-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64638.yaml diff --git a/cves/2026/CVE-2026-67599.md b/cves/2026/CVE-2026-67599.md index 9ce809d3c76..7d884cdfbff 100644 --- a/cves/2026/CVE-2026-67599.md +++ b/cves/2026/CVE-2026-67599.md @@ -13,4 +13,4 @@ ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer com - https://lazytitan.ro/clearos #### Github -No PoCs found on GitHub currently. +- https://github.com/LazyTitan33/CVE-2026-67599_ClearOS_RCE diff --git a/cves/2026/CVE-2026-67620.md b/cves/2026/CVE-2026-67620.md index 9be0089870a..87945e93863 100644 --- a/cves/2026/CVE-2026-67620.md +++ b/cves/2026/CVE-2026-67620.md @@ -13,4 +13,4 @@ Flowise through 3.1.4 contains a server-side request forgery vulnerability in th - https://github.com/abdugafforov-bobur/CVE-2026-67620-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/abdugafforov-bobur/CVE-2026-67620-poc diff --git a/cves/2026/CVE-2026-6875.md b/cves/2026/CVE-2026-6875.md index 4c43d319245..19fdb5f6ab6 100644 --- a/cves/2026/CVE-2026-6875.md +++ b/cves/2026/CVE-2026-6875.md @@ -27,6 +27,7 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-6875 +- https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6875.yaml diff --git a/cves/2026/CVE-2026-69098.md b/cves/2026/CVE-2026-69098.md index 5cda1d981a4..c913b1d4de5 100644 --- a/cves/2026/CVE-2026-69098.md +++ b/cves/2026/CVE-2026-69098.md @@ -13,4 +13,4 @@ kotaemon through 0.12.0 contains an insecure deserialization vulnerability in th - https://github.com/Cinnamon/kotaemon/issues/844 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xdak/CVE-2026-69098_exploit diff --git a/cves/2026/CVE-2026-72844.md b/cves/2026/CVE-2026-72844.md index fc6b21625ba..621a97cc852 100644 --- a/cves/2026/CVE-2026-72844.md +++ b/cves/2026/CVE-2026-72844.md @@ -15,4 +15,4 @@ The Lean 4 kernel does not verify that the structure named in a projection expre - https://github.com/xrchz/CollatzLean #### Github -No PoCs found on GitHub currently. +- https://github.com/endrazine/lean-cve-poc diff --git a/cves/2026/CVE-2026-7299.md b/cves/2026/CVE-2026-7299.md index 0cd82c6eccd..bb2f62b5639 100644 --- a/cves/2026/CVE-2026-7299.md +++ b/cves/2026/CVE-2026-7299.md @@ -13,4 +13,4 @@ Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize d - https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit #### Github -No PoCs found on GitHub currently. +- https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit diff --git a/cves/2026/CVE-2026-7482.md b/cves/2026/CVE-2026-7482.md index 9066b1a38af..100471c4dd1 100644 --- a/cves/2026/CVE-2026-7482.md +++ b/cves/2026/CVE-2026-7482.md @@ -16,3 +16,4 @@ No PoCs from references. - https://github.com/0x0OZ/CVE-2026-7482-PoC - https://github.com/kaleth4/CVE-2026-7482 - https://github.com/cylockholmes/assay +- https://github.com/szybnev/CVE-2026-7482 diff --git a/cves/2026/CVE-2026-76070.md b/cves/2026/CVE-2026-76070.md index edaea2d50fb..a52aeee350c 100644 --- a/cves/2026/CVE-2026-76070.md +++ b/cves/2026/CVE-2026-76070.md @@ -14,4 +14,4 @@ Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow v - https://github.com/ozcanpng/CVE-2026-76070 #### Github -No PoCs found on GitHub currently. +- https://github.com/ozcanpng/CVE-2026-76070 diff --git a/cves/2026/CVE-2026-76071.md b/cves/2026/CVE-2026-76071.md index 77348dfe99d..6b883c95821 100644 --- a/cves/2026/CVE-2026-76071.md +++ b/cves/2026/CVE-2026-76071.md @@ -14,4 +14,4 @@ Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow v - https://github.com/ozcanpng/CVE-2026-76071 #### Github -No PoCs found on GitHub currently. +- https://github.com/ozcanpng/CVE-2026-76071 diff --git a/cves/2026/CVE-2026-76639.md b/cves/2026/CVE-2026-76639.md index 3aef299c1ac..fe644295120 100644 --- a/cves/2026/CVE-2026-76639.md +++ b/cves/2026/CVE-2026-76639.md @@ -15,4 +15,4 @@ Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code ex - https://github.com/OlivierLaflamme/UniBLEed #### Github -No PoCs found on GitHub currently. +- https://github.com/OlivierLaflamme/UniBLEed diff --git a/cves/2026/CVE-2026-7669.md b/cves/2026/CVE-2026-7669.md index 9ed3539064a..13173e65585 100644 --- a/cves/2026/CVE-2026-7669.md +++ b/cves/2026/CVE-2026-7669.md @@ -24,4 +24,4 @@ A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the - https://github.com/gouldnicholas/CVE-2026-7669-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/gouldnicholas/CVE-2026-7669-PoC diff --git a/cves/2026/CVE-2026-8181.md b/cves/2026/CVE-2026-8181.md index eaccb182321..9063bd5e0fe 100644 --- a/cves/2026/CVE-2026-8181.md +++ b/cves/2026/CVE-2026-8181.md @@ -20,6 +20,9 @@ No PoCs from references. - https://github.com/Jenderal92/CVE-2026-8181 - https://github.com/Squamity/CVE-2026-8181-PoC - https://github.com/0xTerror/CVE-2026-8181 +- https://github.com/Yucaerin/CVE-2026-8181 +- https://github.com/murrez/CVE-2026-8181 +- https://github.com/zycoder0day/CVE-2026-8181 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8181.yaml diff --git a/cves/2026/CVE-2026-8206.md b/cves/2026/CVE-2026-8206.md index 8beadaf9f1c..cd9a539ae59 100644 --- a/cves/2026/CVE-2026-8206.md +++ b/cves/2026/CVE-2026-8206.md @@ -17,3 +17,4 @@ No PoCs from references. - https://github.com/Dungsocool/CVE-2026-8206 - https://github.com/HackfutSecRoot/multi_exploit_wp/blob/main/multi_exploit.py - https://github.com/HackfutSecRoot/multi_exploit_wp +- https://github.com/Jenderal92/CVE-2026-8206 diff --git a/cves/2026/CVE-2026-8732.md b/cves/2026/CVE-2026-8732.md index 6b9484d4a62..3d5ef073784 100644 --- a/cves/2026/CVE-2026-8732.md +++ b/cves/2026/CVE-2026-8732.md @@ -16,6 +16,8 @@ No PoCs from references. - https://github.com/zycoder0day/CVE-2026-8732 - https://github.com/HORKimhab/CVE-2026-8732 - https://github.com/Diznev/CVE-2026-8732-EXPLOIT +- https://github.com/Jenderal92/CVE-2026-8732 +- https://github.com/p3Nt3st3r-sTAr/CVE-2026-8732-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8732.yaml diff --git a/cves/2026/CVE-2026-9082.md b/cves/2026/CVE-2026-9082.md index f9254d6db50..39e4559de7d 100644 --- a/cves/2026/CVE-2026-9082.md +++ b/cves/2026/CVE-2026-9082.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/11romain/CVE-2026-9082 - https://github.com/ywh-jfellus/CVE-2026-9082 - https://github.com/thinhap/CVE-2026-9082-PoC +- https://github.com/sourcecode347/CVE-2026-9082-Mass_Scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9082.yaml diff --git a/cves/2026/CVE-2026-9147.md b/cves/2026/CVE-2026-9147.md index fabde0a2981..2d1af30a81d 100644 --- a/cves/2026/CVE-2026-9147.md +++ b/cves/2026/CVE-2026-9147.md @@ -13,4 +13,4 @@ uproot dynamically generates Python class source code from ROOT TStreamerInfo re - https://github.com/SaiTeja-Erukude/CVE-2026-9147-uproot-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-9147-uproot-rce diff --git a/cves/2026/CVE-2026-9198.md b/cves/2026/CVE-2026-9198.md index 9d904b82e56..08b54be94ec 100644 --- a/cves/2026/CVE-2026-9198.md +++ b/cves/2026/CVE-2026-9198.md @@ -21,6 +21,8 @@ No PoCs from references. - https://github.com/K3ysTr0K3R/CVE-2026-9198 - https://github.com/rmhowe425/PoC-CVE-2026-9198 - https://github.com/joaovicdev/EXPLOIT-CVE-2026-9198 +- https://github.com/0xdak/CVE-2026-9198_exploit +- https://github.com/chessalekin/cve-2026-9198_exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml diff --git a/cves/2026/CVE-2026-9271.md b/cves/2026/CVE-2026-9271.md index f77725741c3..bd4c17e1aca 100644 --- a/cves/2026/CVE-2026-9271.md +++ b/cves/2026/CVE-2026-9271.md @@ -13,7 +13,7 @@ Vulnerability Title - https://wpscan.com/vulnerability/b5d549b7-17c8-417d-a86a-a7ae356a6eab/ #### Github -No PoCs found on GitHub currently. +- https://github.com/CerberusMrXi/WordPress-KeepInMind-CVE-2026-9271-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52614 diff --git a/scripts/sync_exploits.py b/scripts/sync_exploits.py index 5cf052957d6..fcf7d58ec61 100644 --- a/scripts/sync_exploits.py +++ b/scripts/sync_exploits.py @@ -1,5 +1,5 @@ #!/usr/bin/env python3 -"""Fold the two curated exploit archives into the index. +"""Fold the curated exploit archives into the index. ExploitDB and Metasploit both publish a single machine readable file mapping their entries to CVE ids. Neither is a GitHub repository, so their links are @@ -40,8 +40,12 @@ PER_CVE = 8 SOURCES = ( ("#### ExploitDB", "No ExploitDB entry."), ("#### Metasploit", "No Metasploit module."), + ("#### Vulhub", "No Vulhub environment."), ) +VULHUB_TARBALL = "https://codeload.github.com/vulhub/vulhub/tar.gz/refs/heads/master" +VULHUB_TREE = "https://github.com/vulhub/vulhub/tree/master/" + def fetch(url: str) -> bytes: request = urllib.request.Request(url, headers={"User-Agent": USER_AGENT}) @@ -106,6 +110,29 @@ def metasploit() -> dict[str, list[str]]: } +def vulhub() -> dict[str, list[str]]: + """CVE to the directory holding a runnable vulnerable environment. + + Vulhub ships a docker-compose file and reproduction steps per flaw, which + is a proof of concept anyone can stand up rather than read about. One + directory per environment, the CVE named in its path. + """ + import io + import tarfile + + rows: dict[str, set[str]] = defaultdict(set) + with tarfile.open(fileobj=io.BytesIO(fetch(VULHUB_TARBALL)), mode="r:gz") as tar: + for member in tar: + parts = Path(member.name).parts + # //; anything deeper is its contents + if len(parts) != 3 or not member.isdir(): + continue + for cve in {c.upper() for c in CVE.findall(parts[-1])}: + if plausible(cve): + rows[cve].add(VULHUB_TREE + "/".join(parts[1:])) + return {cve: sorted(found)[:PER_CVE] for cve, found in rows.items()} + + def section_bounds(text: str, header: str) -> tuple[int, int] | None: start = text.find("\n" + header) if start < 0: @@ -157,7 +184,7 @@ def main() -> int: parser.add_argument("--dry-run", action="store_true", help="report without writing") args = parser.parse_args() - for (header, _), collect in zip(SOURCES, (exploitdb, metasploit)): + for (header, _), collect in zip(SOURCES, (exploitdb, metasploit, vulhub)): found = collect() links = sum(len(urls) for urls in found.values()) tally = {"added": 0, "unchanged": 0, "absent": 0} diff --git a/scripts/sync_pocingithub.py b/scripts/sync_pocingithub.py new file mode 100644 index 00000000000..7349c711298 --- /dev/null +++ b/scripts/sync_pocingithub.py @@ -0,0 +1,194 @@ +#!/usr/bin/env python3 +"""Take candidate PoC repositories from PoC-in-GitHub and judge them here. + +GitHub discovery only sees repositories pushed in the last few days, so a PoC +published years ago for an old CVE is unreachable no matter how long the job +runs. nomi-sec/PoC-in-GitHub has been collecting them daily since 1999 and +publishes one JSON file per CVE. + +It collects without filtering, exactly as the workflow this index replaced +did, so nothing here is trusted on arrival: every candidate goes through +qualifying_repo_cves, the same gate a repository found by search must pass. +""" + +from __future__ import annotations + +import argparse +import io +import json +import os +import re +import sys +import tarfile +import urllib.request +from concurrent.futures import ThreadPoolExecutor, as_completed +from pathlib import Path + +sys.path.insert(0, str(Path(__file__).resolve().parent)) + +from update_cves import ( + GITHUB_GRAPHQL_URL, + CVES, + GitHubClient, + github_repo_from_url, + http_json, + is_blacklisted_repo, + load_blacklist, + qualifying_repo_cves, + replace_section, + section_links, +) + +TARBALL = "https://codeload.github.com/nomi-sec/PoC-in-GitHub/tar.gz/refs/heads/master" +SECTION = "#### Github" +EMPTY = "No PoCs found on GitHub currently." +CVE_NAME = re.compile(r"^CVE-\d{4}-\d{4,}$", re.IGNORECASE) +BATCH = 10 +USER_AGENT = "0xMarcio-cve-poc-in-github" + +FIELDS = """ + nameWithOwner url description isFork isArchived + repositoryTopics(first: 20) { nodes { topic { name } } } + readmeMd: object(expression: "HEAD:README.md") { ... on Blob { text } } + readmeUpper: object(expression: "HEAD:README.MD") { ... on Blob { text } } + readmeRst: object(expression: "HEAD:README.rst") { ... on Blob { text } } + readmeBare: object(expression: "HEAD:README") { ... on Blob { text } } + root: object(expression: "HEAD:") { ... on Tree { entries { name type } } } +""" + + +def candidates() -> dict[str, set[str]]: + """CVE to the repository URLs the collection lists for it.""" + request = urllib.request.Request(TARBALL, headers={"User-Agent": USER_AGENT}) + with urllib.request.urlopen(request, timeout=600) as response: + archive = response.read() + found: dict[str, set[str]] = {} + with tarfile.open(fileobj=io.BytesIO(archive), mode="r:gz") as tar: + for member in tar: + if not member.isfile() or not member.name.endswith(".json"): + continue + cve = member.name.rsplit("/", 1)[-1][:-5].upper() + if not CVE_NAME.match(cve): + continue + handle = tar.extractfile(member) + if handle is None: + continue + try: + listed = json.loads(handle.read()) + except (ValueError, UnicodeDecodeError): + continue + urls = { + str(item.get("html_url") or "").rstrip("/") + for item in listed + if item.get("html_url") + } + if urls: + found[cve] = urls + return found + + +def already_linked() -> dict[str, tuple[Path, set[str]]]: + """What each entry in this index already lists under GitHub.""" + held: dict[str, tuple[Path, set[str]]] = {} + for path in sorted(CVES.glob("[12][0-9][0-9][0-9]/CVE-*.md")): + text = path.read_text(encoding="utf-8", errors="replace") + held[path.stem.upper()] = (path, {url.rstrip("/") for url in section_links(text, SECTION)}) + return held + + +def describe(client: GitHubClient, names: list[str]) -> dict[str, dict]: + """Metadata, README and root listing for a batch, as the classifier expects.""" + aliases = " ".join( + f"r{index}: repository(owner: {json.dumps(name.split('/', 1)[0])}, " + f"name: {json.dumps(name.split('/', 1)[1])}) {{ {FIELDS} }}" + for index, name in enumerate(names) + ) + payload = http_json( + GITHUB_GRAPHQL_URL, + headers=client.headers, + data={"query": "query { " + aliases + " rateLimit { remaining } }"}, + ) + data = payload.get("data") or {} + described: dict[str, dict] = {} + for index, name in enumerate(names): + repo = data.get(f"r{index}") + if repo: + described[name] = repo + return described + + +def main() -> int: + parser = argparse.ArgumentParser(description="Judge PoC-in-GitHub candidates against this index") + parser.add_argument("--limit", type=int, default=0, help="Repositories to judge this run") + parser.add_argument("--dry-run", action="store_true", help="Report without writing files") + args = parser.parse_args() + + listed = candidates() + held = already_linked() + print(f"{len(listed):,} CVEs listed upstream | {len(held):,} entries in this index") + + # One repository can be offered for several CVEs; judge it once per pair. + blacklist = load_blacklist() + pending: dict[str, set[str]] = {} + for cve, urls in listed.items(): + entry = held.get(cve) + if entry is None: + continue + for url in urls - entry[1]: + full_name = github_repo_from_url(url) + if full_name and "/" in full_name and not is_blacklisted_repo(full_name, blacklist): + pending.setdefault(full_name, set()).add(cve) + + names = sorted(pending) + if args.limit: + names = names[: args.limit] + print(f"{sum(len(pending[n]) for n in names):,} candidate links across {len(names):,} repositories") + + token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN") or "" + client = GitHubClient(token) + accepted: dict[str, set[str]] = {} + judged = kept = 0 + + batches = [names[i : i + BATCH] for i in range(0, len(names), BATCH)] + with ThreadPoolExecutor(max_workers=4) as executor: + futures = {executor.submit(describe, client, batch): batch for batch in batches} + for future in as_completed(futures): + batch = futures[future] + try: + described = future.result() + except Exception as problem: + print(f"Skipped a batch starting at {batch[0]}: {problem}", file=sys.stderr) + described = {} + for full_name in batch: + judged += 1 + repo = described.get(full_name) + if repo is None: + continue + for cve in pending[full_name]: + year = int(cve.split("-")[1]) + if cve in qualifying_repo_cves(repo, year, blacklist): + accepted.setdefault(cve, set()).add(str(repo.get("url") or "").rstrip("/")) + kept += 1 + if judged % 2000 < BATCH: + print(f" judged {judged:,} of {len(names):,}") + + written = 0 + for cve, urls in sorted(accepted.items()): + path, existing = held[cve] + merged = section_links(path.read_text(encoding="utf-8", errors="replace"), SECTION) + merged = merged + sorted(url for url in urls if url.rstrip("/") not in existing) + with path.open("r", encoding="utf-8", newline="") as handle: + text = handle.read() + updated, changed = replace_section(text, SECTION, merged, EMPTY) + if changed and not args.dry_run: + with path.open("w", encoding="utf-8", newline="") as handle: + handle.write(updated) + written += bool(changed) + + print(f"accepted {kept:,} links for {len(accepted):,} CVEs | {written:,} entries updated") + print(f"rejected {sum(len(pending[n]) for n in names) - kept:,} candidates that did not pass the gate") + return 0 + + +if __name__ == "__main__": + raise SystemExit(main())