From 2821985dd90a319473b4744c337d0b3384add4e1 Mon Sep 17 00:00:00 2001 From: 0xMarcio Date: Tue, 1 Sep 2026 15:21:53 +0200 Subject: [PATCH] Reach the PoCs published before the search window opens Discovery asks GitHub for repositories pushed in the last three days, so a proof of concept written for a 2019 CVE in 2021 is unreachable however long the job runs. nomi-sec/PoC-in-GitHub has collected them daily since 1999. It collects without filtering, which is how this index inherited its junk the first time, so nothing arrives trusted: every candidate goes through qualifying_repo_cves, the same gate a repository found by search must pass. Of 6,945 candidates the gate rejected 4,110 and accepted 2,835, adding links to 1,528 entries that had none or had fewer. Vulhub joins the curated archives beside ExploitDB and Metasploit. It is 241 entries, and each one is a docker-compose file and reproduction steps rather than a description of a flaw. Candidates are judged again every week rather than remembered as rejected: an empty shell in March is often a working exploit by June. --- .github/workflows/site.yml | 1 + .github/workflows/sync_pocingithub.yml | 57 ++++++ cves/1999/CVE-1999-0524.md | 1 + cves/1999/CVE-1999-0678.md | 2 +- cves/2001/CVE-2001-0680.md | 2 +- cves/2001/CVE-2001-0758.md | 2 +- cves/2001/CVE-2001-0932.md | 2 +- cves/2001/CVE-2001-0934.md | 2 +- cves/2001/CVE-2001-1442.md | 2 +- cves/2002/CVE-2002-0082.md | 1 + cves/2002/CVE-2002-0200.md | 2 +- cves/2002/CVE-2002-0201.md | 2 +- cves/2002/CVE-2002-0288.md | 2 +- cves/2002/CVE-2002-0289.md | 2 +- cves/2002/CVE-2002-0346.md | 2 +- cves/2002/CVE-2002-0347.md | 2 +- cves/2002/CVE-2002-0348.md | 2 +- cves/2002/CVE-2002-0448.md | 2 +- cves/2002/CVE-2002-0991.md | 2 +- cves/2002/CVE-2002-1120.md | 2 +- cves/2003/CVE-2003-0127.md | 2 +- cves/2003/CVE-2003-0264.md | 1 + cves/2004/CVE-2004-2549.md | 2 +- cves/2004/CVE-2004-2687.md | 1 + cves/2005/CVE-2005-0575.md | 1 + cves/2006/CVE-2006-3392.md | 1 + cves/2007/CVE-2007-1567.md | 1 + cves/2007/CVE-2007-2447.md | 5 + cves/2007/CVE-2007-3831.md | 2 +- cves/2007/CVE-2007-4560.md | 1 + cves/2007/CVE-2007-5036.md | 2 +- cves/2007/CVE-2007-6638.md | 2 +- cves/2008/CVE-2008-0166.md | 1 + cves/2008/CVE-2008-1930.md | 2 +- cves/2008/CVE-2008-5161.md | 1 + cves/2008/CVE-2008-6827.md | 2 +- cves/2009/CVE-2009-0473.md | 2 +- cves/2009/CVE-2009-3103.md | 2 + cves/2009/CVE-2009-4118.md | 2 +- cves/2009/CVE-2009-4623.md | 1 + cves/2010/CVE-2010-0219.md | 1 + cves/2010/CVE-2010-2075.md | 2 + cves/2010/CVE-2010-2861.md | 5 +- cves/2010/CVE-2010-3863.md | 5 +- cves/2011/CVE-2011-1473.md | 1 + cves/2011/CVE-2011-1485.md | 1 + cves/2011/CVE-2011-1571.md | 1 + cves/2011/CVE-2011-2523.md | 9 + cves/2011/CVE-2011-3192.md | 1 + cves/2012/CVE-2012-1803.md | 2 +- cves/2012/CVE-2012-1823.md | 5 + cves/2012/CVE-2012-2122.md | 4 + cves/2012/CVE-2012-2982.md | 1 + cves/2012/CVE-2012-4929.md | 1 + cves/2012/CVE-2012-6422.md | 2 +- cves/2013/CVE-2013-0156.md | 1 + cves/2013/CVE-2013-3900.md | 1 + cves/2013/CVE-2013-4322.md | 2 +- cves/2013/CVE-2013-4547.md | 3 + cves/2013/CVE-2013-4660.md | 2 +- cves/2014/CVE-2014-0075.md | 2 +- cves/2014/CVE-2014-0160.md | 8 + cves/2014/CVE-2014-3120.md | 4 + cves/2014/CVE-2014-3566.md | 2 + cves/2014/CVE-2014-3704.md | 3 + cves/2014/CVE-2014-4210.md | 1 + cves/2014/CVE-2014-4688.md | 2 + cves/2014/CVE-2014-4725.md | 1 + cves/2014/CVE-2014-6271.md | 11 + cves/2014/CVE-2014-6287.md | 2 + cves/2014/CVE-2014-7169.md | 1 + cves/2014/CVE-2014-8610.md | 2 +- cves/2014/CVE-2014-9173.md | 2 +- cves/2015/CVE-2015-10141.md | 1 + cves/2015/CVE-2015-1328.md | 5 + cves/2015/CVE-2015-1427.md | 3 + cves/2015/CVE-2015-1538.md | 1 + cves/2015/CVE-2015-1635.md | 1 + cves/2015/CVE-2015-1805.md | 1 + cves/2015/CVE-2015-2291.md | 1 + cves/2015/CVE-2015-3224.md | 1 + cves/2015/CVE-2015-3246.md | 2 +- cves/2015/CVE-2015-3306.md | 2 + cves/2015/CVE-2015-3337.md | 3 + cves/2015/CVE-2015-3839.md | 2 +- cves/2015/CVE-2015-5254.md | 3 + cves/2015/CVE-2015-5287.md | 2 +- cves/2015/CVE-2015-5531.md | 4 + cves/2015/CVE-2015-8522.md | 2 +- cves/2015/CVE-2015-8550.md | 2 +- cves/2015/CVE-2015-8562.md | 3 + cves/2015/CVE-2015-9235.md | 2 + cves/2015/CVE-2015-9331.md | 2 +- cves/2015/CVE-2015-9357.md | 2 +- cves/2016/CVE-2016-0638.md | 1 + cves/2016/CVE-2016-10134.md | 3 + cves/2016/CVE-2016-10708.md | 2 +- cves/2016/CVE-2016-10924.md | 2 + cves/2016/CVE-2016-1897.md | 2 + cves/2016/CVE-2016-20012.md | 1 + cves/2016/CVE-2016-3088.md | 4 + cves/2016/CVE-2016-3627.md | 2 +- cves/2016/CVE-2016-3714.md | 3 + cves/2016/CVE-2016-4437.md | 3 + cves/2016/CVE-2016-4977.md | 3 + cves/2016/CVE-2016-5195.md | 6 + cves/2016/CVE-2016-5385.md | 2 + cves/2016/CVE-2016-5696.md | 1 + cves/2016/CVE-2016-5734.md | 3 + cves/2016/CVE-2016-6271.md | 2 +- cves/2016/CVE-2016-7200.md | 2 +- cves/2016/CVE-2016-8462.md | 2 +- cves/2016/CVE-2016-8655.md | 1 + cves/2016/CVE-2016-9086.md | 2 + cves/2016/CVE-2016-9192.md | 2 +- cves/2016/CVE-2016-9793.md | 2 +- cves/2017/CVE-2017-0038.md | 2 +- cves/2017/CVE-2017-0143.md | 1 + cves/2017/CVE-2017-0144.md | 2 + cves/2017/CVE-2017-0785.md | 2 + cves/2017/CVE-2017-1000028.md | 3 + cves/2017/CVE-2017-1000112.md | 2 + cves/2017/CVE-2017-1000353.md | 3 + cves/2017/CVE-2017-1000486.md | 1 + cves/2017/CVE-2017-10271.md | 5 + cves/2017/CVE-2017-11610.md | 4 + cves/2017/CVE-2017-11611.md | 2 +- cves/2017/CVE-2017-11882.md | 2 + cves/2017/CVE-2017-12149.md | 4 + cves/2017/CVE-2017-12542.md | 1 + cves/2017/CVE-2017-12615.md | 5 + cves/2017/CVE-2017-12629.md | 4 + cves/2017/CVE-2017-12635.md | 5 + cves/2017/CVE-2017-12636.md | 3 + cves/2017/CVE-2017-12794.md | 3 + cves/2017/CVE-2017-13089.md | 1 + cves/2017/CVE-2017-13156.md | 1 + cves/2017/CVE-2017-13868.md | 2 +- cves/2017/CVE-2017-14105.md | 2 +- cves/2017/CVE-2017-14849.md | 3 + cves/2017/CVE-2017-14980.md | 5 + cves/2017/CVE-2017-15220.md | 2 +- cves/2017/CVE-2017-15715.md | 3 + cves/2017/CVE-2017-16082.md | 2 + cves/2017/CVE-2017-16524.md | 2 +- cves/2017/CVE-2017-16995.md | 1 + cves/2017/CVE-2017-17405.md | 3 + cves/2017/CVE-2017-17562.md | 3 + cves/2017/CVE-2017-18349.md | 1 + cves/2017/CVE-2017-18635.md | 1 + cves/2017/CVE-2017-2824.md | 2 + cves/2017/CVE-2017-3066.md | 3 + cves/2017/CVE-2017-3248.md | 1 + cves/2017/CVE-2017-4971.md | 2 + cves/2017/CVE-2017-5123.md | 1 + cves/2017/CVE-2017-5124.md | 2 +- cves/2017/CVE-2017-5223.md | 3 + cves/2017/CVE-2017-5638.md | 3 + cves/2017/CVE-2017-5645.md | 3 + cves/2017/CVE-2017-5941.md | 1 + cves/2017/CVE-2017-6206.md | 2 +- cves/2017/CVE-2017-6736.md | 2 +- cves/2017/CVE-2017-6920.md | 2 + cves/2017/CVE-2017-7184.md | 2 + cves/2017/CVE-2017-7269.md | 1 + cves/2017/CVE-2017-7308.md | 1 + cves/2017/CVE-2017-7494.md | 5 + cves/2017/CVE-2017-7504.md | 3 + cves/2017/CVE-2017-7525.md | 2 + cves/2017/CVE-2017-7529.md | 3 + cves/2017/CVE-2017-7679.md | 2 +- cves/2017/CVE-2017-7921.md | 5 + cves/2017/CVE-2017-8046.md | 4 + cves/2017/CVE-2017-8291.md | 4 + cves/2017/CVE-2017-8382.md | 2 +- cves/2017/CVE-2017-8386.md | 2 + cves/2017/CVE-2017-8464.md | 1 + cves/2017/CVE-2017-8570.md | 1 + cves/2017/CVE-2017-8641.md | 2 +- cves/2017/CVE-2017-8890.md | 1 + cves/2017/CVE-2017-8917.md | 4 + cves/2017/CVE-2017-9609.md | 2 +- cves/2017/CVE-2017-9757.md | 1 + cves/2017/CVE-2017-9805.md | 4 + cves/2017/CVE-2017-9841.md | 4 + cves/2017/CVE-2017-9993.md | 2 + cves/2018/CVE-2018-0114.md | 1 + cves/2018/CVE-2018-0802.md | 2 + cves/2018/CVE-2018-0886.md | 2 +- cves/2018/CVE-2018-1000006.md | 3 + cves/2018/CVE-2018-1000529.md | 2 +- cves/2018/CVE-2018-1000533.md | 5 +- cves/2018/CVE-2018-1000861.md | 3 + cves/2018/CVE-2018-1002105.md | 1 + cves/2018/CVE-2018-10054.md | 3 + cves/2018/CVE-2018-1049.md | 1 + cves/2018/CVE-2018-1058.md | 4 +- cves/2018/CVE-2018-10732.md | 2 +- cves/2018/CVE-2018-10933.md | 5 + cves/2018/CVE-2018-11235.md | 1 + cves/2018/CVE-2018-11311.md | 2 +- cves/2018/CVE-2018-11776.md | 1 + cves/2018/CVE-2018-1207.md | 1 + cves/2018/CVE-2018-12463.md | 2 +- cves/2018/CVE-2018-12533.md | 1 + cves/2018/CVE-2018-12596.md | 2 +- cves/2018/CVE-2018-12613.md | 3 + cves/2018/CVE-2018-1270.md | 2 + cves/2018/CVE-2018-1273.md | 3 + cves/2018/CVE-2018-1297.md | 2 + cves/2018/CVE-2018-13379.md | 2 + cves/2018/CVE-2018-14009.md | 1 + cves/2018/CVE-2018-14324.md | 2 +- cves/2018/CVE-2018-14574.md | 3 + cves/2018/CVE-2018-14847.md | 2 + cves/2018/CVE-2018-15133.md | 2 + cves/2018/CVE-2018-15473.md | 7 + cves/2018/CVE-2018-15499.md | 2 +- cves/2018/CVE-2018-15685.md | 3 + cves/2018/CVE-2018-16385.md | 2 +- cves/2018/CVE-2018-16509.md | 4 + cves/2018/CVE-2018-16763.md | 6 + cves/2018/CVE-2018-17081.md | 2 +- cves/2018/CVE-2018-17240.md | 1 + cves/2018/CVE-2018-17246.md | 3 + cves/2018/CVE-2018-18778.md | 4 + cves/2018/CVE-2018-18912.md | 2 +- cves/2018/CVE-2018-18925.md | 3 + cves/2018/CVE-2018-18955.md | 1 + cves/2018/CVE-2018-19466.md | 2 +- cves/2018/CVE-2018-19475.md | 2 + cves/2018/CVE-2018-19518.md | 3 + cves/2018/CVE-2018-19629.md | 2 +- cves/2018/CVE-2018-1999002.md | 1 + cves/2018/CVE-2018-20250.md | 1 + cves/2018/CVE-2018-20343.md | 2 +- cves/2018/CVE-2018-20580.md | 2 +- cves/2018/CVE-2018-2380.md | 2 +- cves/2018/CVE-2018-2628.md | 5 + cves/2018/CVE-2018-2636.md | 2 +- cves/2018/CVE-2018-2894.md | 3 + cves/2018/CVE-2018-3760.md | 3 + cves/2018/CVE-2018-5333.md | 2 +- cves/2018/CVE-2018-5353.md | 2 +- cves/2018/CVE-2018-6242.md | 2 + cves/2018/CVE-2018-6389.md | 1 + cves/2018/CVE-2018-6537.md | 2 +- cves/2018/CVE-2018-6546.md | 2 +- cves/2018/CVE-2018-6574.md | 2 + cves/2018/CVE-2018-6890.md | 2 +- cves/2018/CVE-2018-6892.md | 1 + cves/2018/CVE-2018-6905.md | 1 + cves/2018/CVE-2018-7422.md | 1 + cves/2018/CVE-2018-7490.md | 3 + cves/2018/CVE-2018-7600.md | 12 ++ cves/2018/CVE-2018-7602.md | 3 + cves/2018/CVE-2018-7690.md | 2 +- cves/2018/CVE-2018-7691.md | 2 +- cves/2018/CVE-2018-8060.md | 2 +- cves/2018/CVE-2018-8611.md | 1 + cves/2018/CVE-2018-8715.md | 3 + cves/2018/CVE-2018-8941.md | 2 +- cves/2018/CVE-2018-9206.md | 1 + cves/2018/CVE-2018-9276.md | 1 + cves/2018/CVE-2018-9995.md | 3 + cves/2019/CVE-2019-0193.md | 3 + cves/2019/CVE-2019-0211.md | 1 + cves/2019/CVE-2019-0227.md | 1 + cves/2019/CVE-2019-0232.md | 5 + cves/2019/CVE-2019-0708.md | 3 + cves/2019/CVE-2019-1003000.md | 1 + cves/2019/CVE-2019-1003030.md | 1 + cves/2019/CVE-2019-10068.md | 2 +- cves/2019/CVE-2019-10149.md | 1 + cves/2019/CVE-2019-10392.md | 1 + cves/2019/CVE-2019-1040.md | 1 + cves/2019/CVE-2019-10685.md | 2 +- cves/2019/CVE-2019-10758.md | 3 + cves/2019/CVE-2019-11043.md | 7 + cves/2019/CVE-2019-11076.md | 2 +- cves/2019/CVE-2019-11231.md | 2 +- cves/2019/CVE-2019-11523.md | 2 +- cves/2019/CVE-2019-11581.md | 3 + cves/2019/CVE-2019-11707.md | 1 + cves/2019/CVE-2019-11881.md | 2 +- cves/2019/CVE-2019-12169.md | 2 +- cves/2019/CVE-2019-12170.md | 1 + cves/2019/CVE-2019-12460.md | 2 +- cves/2019/CVE-2019-12476.md | 2 +- cves/2019/CVE-2019-12586.md | 1 + cves/2019/CVE-2019-12840.md | 1 + cves/2019/CVE-2019-13132.md | 2 +- cves/2019/CVE-2019-13272.md | 1 + cves/2019/CVE-2019-13292.md | 1 + cves/2019/CVE-2019-13403.md | 2 +- cves/2019/CVE-2019-13633.md | 2 +- cves/2019/CVE-2019-14206.md | 2 +- cves/2019/CVE-2019-14234.md | 2 + cves/2019/CVE-2019-14287.md | 1 + cves/2019/CVE-2019-14322.md | 1 + cves/2019/CVE-2019-14326.md | 2 +- cves/2019/CVE-2019-14537.md | 2 +- cves/2019/CVE-2019-14751.md | 2 +- cves/2019/CVE-2019-15053.md | 2 +- cves/2019/CVE-2019-15107.md | 6 + cves/2019/CVE-2019-15120.md | 2 +- cves/2019/CVE-2019-15233.md | 2 +- cves/2019/CVE-2019-15715.md | 2 +- cves/2019/CVE-2019-15949.md | 2 +- cves/2019/CVE-2019-16098.md | 1 + cves/2019/CVE-2019-16278.md | 1 + cves/2019/CVE-2019-1663.md | 1 + cves/2019/CVE-2019-16941.md | 2 +- cves/2019/CVE-2019-17124.md | 2 +- cves/2019/CVE-2019-17147.md | 1 + cves/2019/CVE-2019-17427.md | 2 +- cves/2019/CVE-2019-17558.md | 4 + cves/2019/CVE-2019-17564.md | 3 + cves/2019/CVE-2019-17570.md | 1 + cves/2019/CVE-2019-18634.md | 2 + cves/2019/CVE-2019-18885.md | 2 +- cves/2019/CVE-2019-18890.md | 2 +- cves/2019/CVE-2019-18935.md | 3 + cves/2019/CVE-2019-19194.md | 2 +- cves/2019/CVE-2019-19393.md | 2 +- cves/2019/CVE-2019-19576.md | 2 +- cves/2019/CVE-2019-19634.md | 2 +- cves/2019/CVE-2019-19699.md | 2 +- cves/2019/CVE-2019-20085.md | 1 + cves/2019/CVE-2019-20326.md | 2 +- cves/2019/CVE-2019-20933.md | 4 + cves/2019/CVE-2019-2215.md | 7 + cves/2019/CVE-2019-25065.md | 1 + cves/2019/CVE-2019-2618.md | 2 + cves/2019/CVE-2019-2725.md | 1 + cves/2019/CVE-2019-3396.md | 4 + cves/2019/CVE-2019-3980.md | 1 + cves/2019/CVE-2019-5392.md | 1 + cves/2019/CVE-2019-5418.md | 3 + cves/2019/CVE-2019-5591.md | 2 +- cves/2019/CVE-2019-5736.md | 4 + cves/2019/CVE-2019-5893.md | 2 +- cves/2019/CVE-2019-6116.md | 3 + cves/2019/CVE-2019-6225.md | 1 + cves/2019/CVE-2019-6339.md | 2 + cves/2019/CVE-2019-6340.md | 1 + cves/2019/CVE-2019-6341.md | 2 + cves/2019/CVE-2019-6453.md | 1 + cves/2019/CVE-2019-7216.md | 2 +- cves/2019/CVE-2019-7238.md | 3 + cves/2019/CVE-2019-7482.md | 1 + cves/2019/CVE-2019-7609.md | 4 + cves/2019/CVE-2019-7711.md | 3 +- cves/2019/CVE-2019-8451.md | 1 + cves/2019/CVE-2019-8942.md | 1 + cves/2019/CVE-2019-9053.md | 13 ++ cves/2019/CVE-2019-9193.md | 4 + cves/2019/CVE-2019-9194.md | 1 + cves/2019/CVE-2019-9511.md | 2 +- cves/2019/CVE-2019-9624.md | 2 +- cves/2019/CVE-2019-9978.md | 2 + cves/2020/CVE-2020-0022.md | 1 + cves/2020/CVE-2020-0096.md | 1 + cves/2020/CVE-2020-0423.md | 1 + cves/2020/CVE-2020-0601.md | 1 + cves/2020/CVE-2020-0796.md | 1 + cves/2020/CVE-2020-10148.md | 1 + cves/2020/CVE-2020-10199.md | 3 + cves/2020/CVE-2020-10204.md | 3 + cves/2020/CVE-2020-10567.md | 2 +- cves/2020/CVE-2020-10665.md | 2 +- cves/2020/CVE-2020-11022.md | 1 + cves/2020/CVE-2020-11107.md | 1 + cves/2020/CVE-2020-11108.md | 2 +- cves/2020/CVE-2020-11539.md | 2 +- cves/2020/CVE-2020-11651.md | 4 + cves/2020/CVE-2020-11652.md | 3 + cves/2020/CVE-2020-11800.md | 4 +- cves/2020/CVE-2020-11978.md | 3 + cves/2020/CVE-2020-11981.md | 4 + cves/2020/CVE-2020-12432.md | 2 +- cves/2020/CVE-2020-12446.md | 3 + cves/2020/CVE-2020-12712.md | 1 + cves/2020/CVE-2020-12928.md | 1 + cves/2020/CVE-2020-1350.md | 1 + cves/2020/CVE-2020-13654.md | 2 +- cves/2020/CVE-2020-13671.md | 3 +- cves/2020/CVE-2020-13942.md | 3 + cves/2020/CVE-2020-13945.md | 3 + cves/2020/CVE-2020-14008.md | 1 + cves/2020/CVE-2020-14144.md | 1 + cves/2020/CVE-2020-14343.md | 3 + cves/2020/CVE-2020-1472.md | 5 + cves/2020/CVE-2020-14882.md | 5 + cves/2020/CVE-2020-14883.md | 1 + cves/2020/CVE-2020-15367.md | 2 +- cves/2020/CVE-2020-15906.md | 3 + cves/2020/CVE-2020-15956.md | 2 +- cves/2020/CVE-2020-16012.md | 1 + cves/2020/CVE-2020-16270.md | 2 +- cves/2020/CVE-2020-16846.md | 3 + cves/2020/CVE-2020-17103.md | 3 +- cves/2020/CVE-2020-17382.md | 1 + cves/2020/CVE-2020-17518.md | 3 + cves/2020/CVE-2020-17519.md | 3 + cves/2020/CVE-2020-17526.md | 3 + cves/2020/CVE-2020-18324.md | 2 +- cves/2020/CVE-2020-18325.md | 2 +- cves/2020/CVE-2020-18326.md | 2 +- cves/2020/CVE-2020-1938.md | 8 + cves/2020/CVE-2020-1948.md | 1 + cves/2020/CVE-2020-1957.md | 3 + cves/2020/CVE-2020-1971.md | 1 + cves/2020/CVE-2020-23160.md | 2 +- cves/2020/CVE-2020-23839.md | 2 +- cves/2020/CVE-2020-24186.md | 1 + cves/2020/CVE-2020-25042.md | 2 +- cves/2020/CVE-2020-25213.md | 1 + cves/2020/CVE-2020-25265.md | 2 +- cves/2020/CVE-2020-25398.md | 2 +- cves/2020/CVE-2020-25399.md | 2 +- cves/2020/CVE-2020-2546.md | 2 +- cves/2020/CVE-2020-25498.md | 2 +- cves/2020/CVE-2020-2551.md | 1 + cves/2020/CVE-2020-26061.md | 2 +- cves/2020/CVE-2020-26217.md | 1 + cves/2020/CVE-2020-26732.md | 2 +- cves/2020/CVE-2020-26733.md | 2 +- cves/2020/CVE-2020-27194.md | 1 + cves/2020/CVE-2020-27368.md | 2 +- cves/2020/CVE-2020-28458.md | 1 + cves/2020/CVE-2020-29007.md | 2 +- cves/2020/CVE-2020-29599.md | 2 + cves/2020/CVE-2020-29607.md | 3 + cves/2020/CVE-2020-35262.md | 2 +- cves/2020/CVE-2020-35476.md | 3 + cves/2020/CVE-2020-35488.md | 2 +- cves/2020/CVE-2020-3956.md | 2 +- cves/2020/CVE-2020-5504.md | 1 + cves/2020/CVE-2020-5752.md | 1 + cves/2020/CVE-2020-5844.md | 1 + cves/2020/CVE-2020-5902.md | 1 + cves/2020/CVE-2020-6418.md | 1 + cves/2020/CVE-2020-7012.md | 3 + cves/2020/CVE-2020-7247.md | 4 + cves/2020/CVE-2020-7598.md | 1 + cves/2020/CVE-2020-7602.md | 2 +- cves/2020/CVE-2020-7693.md | 3 +- cves/2020/CVE-2020-7934.md | 2 +- cves/2020/CVE-2020-7961.md | 4 + cves/2020/CVE-2020-7980.md | 2 +- cves/2020/CVE-2020-8158.md | 2 +- cves/2020/CVE-2020-8163.md | 1 + cves/2020/CVE-2020-8825.md | 2 +- cves/2020/CVE-2020-8835.md | 1 + cves/2020/CVE-2020-9273.md | 1 + cves/2020/CVE-2020-9380.md | 2 +- cves/2020/CVE-2020-9402.md | 3 + cves/2020/CVE-2020-9496.md | 3 + cves/2020/CVE-2020-9715.md | 1 + cves/2020/CVE-2020-9802.md | 1 + cves/2021/CVE-2021-1585.md | 1 + cves/2021/CVE-2021-1675.md | 1 + cves/2021/CVE-2021-1732.md | 2 + cves/2021/CVE-2021-1931.md | 1 + cves/2021/CVE-2021-21123.md | 2 +- cves/2021/CVE-2021-21220.md | 2 + cves/2021/CVE-2021-21239.md | 1 + cves/2021/CVE-2021-21311.md | 3 + cves/2021/CVE-2021-21351.md | 3 + cves/2021/CVE-2021-21425.md | 3 + cves/2021/CVE-2021-21551.md | 1 + cves/2021/CVE-2021-2173.md | 2 +- cves/2021/CVE-2021-21972.md | 1 + cves/2021/CVE-2021-21974.md | 1 + cves/2021/CVE-2021-21980.md | 3 +- cves/2021/CVE-2021-21985.md | 1 + cves/2021/CVE-2021-22204.md | 2 + cves/2021/CVE-2021-22205.md | 5 + cves/2021/CVE-2021-22555.md | 3 + cves/2021/CVE-2021-22911.md | 5 + cves/2021/CVE-2021-22941.md | 1 + cves/2021/CVE-2021-23394.md | 2 +- cves/2021/CVE-2021-23797.md | 2 +- cves/2021/CVE-2021-24006.md | 2 + cves/2021/CVE-2021-24019.md | 1 + cves/2021/CVE-2021-24160.md | 2 +- cves/2021/CVE-2021-24499.md | 1 + cves/2021/CVE-2021-24762.md | 2 +- cves/2021/CVE-2021-25076.md | 1 + cves/2021/CVE-2021-25646.md | 3 + cves/2021/CVE-2021-25741.md | 1 + cves/2021/CVE-2021-26084.md | 4 + cves/2021/CVE-2021-26120.md | 2 + cves/2021/CVE-2021-26855.md | 6 + cves/2021/CVE-2021-27190.md | 2 +- cves/2021/CVE-2021-27328.md | 2 +- cves/2021/CVE-2021-27365.md | 2 +- cves/2021/CVE-2021-27876.md | 2 +- cves/2021/CVE-2021-27877.md | 2 +- cves/2021/CVE-2021-27905.md | 1 + cves/2021/CVE-2021-27963.md | 2 +- cves/2021/CVE-2021-28164.md | 3 + cves/2021/CVE-2021-28169.md | 3 + cves/2021/CVE-2021-28663.md | 2 +- cves/2021/CVE-2021-29267.md | 2 +- cves/2021/CVE-2021-29337.md | 2 +- cves/2021/CVE-2021-29441.md | 4 + cves/2021/CVE-2021-29442.md | 5 +- cves/2021/CVE-2021-29447.md | 4 + cves/2021/CVE-2021-29505.md | 3 + cves/2021/CVE-2021-3007.md | 1 + cves/2021/CVE-2021-30146.md | 2 +- cves/2021/CVE-2021-30327.md | 2 +- cves/2021/CVE-2021-30809.md | 1 + cves/2021/CVE-2021-3129.md | 5 + cves/2021/CVE-2021-3130.md | 2 +- cves/2021/CVE-2021-31440.md | 1 + cves/2021/CVE-2021-3156.md | 7 + cves/2021/CVE-2021-31602.md | 1 + cves/2021/CVE-2021-31630.md | 1 + cves/2021/CVE-2021-3164.md | 2 +- cves/2021/CVE-2021-31760.md | 3 +- cves/2021/CVE-2021-31761.md | 3 +- cves/2021/CVE-2021-31762.md | 3 +- cves/2021/CVE-2021-32156.md | 2 +- cves/2021/CVE-2021-32157.md | 1 + cves/2021/CVE-2021-32158.md | 2 +- cves/2021/CVE-2021-32159.md | 2 +- cves/2021/CVE-2021-32160.md | 2 +- cves/2021/CVE-2021-32161.md | 2 +- cves/2021/CVE-2021-32162.md | 2 +- cves/2021/CVE-2021-3262.md | 2 +- cves/2021/CVE-2021-32682.md | 3 + cves/2021/CVE-2021-33044.md | 3 + cves/2021/CVE-2021-33393.md | 2 +- cves/2021/CVE-2021-33558.md | 1 + cves/2021/CVE-2021-33564.md | 1 + cves/2021/CVE-2021-3378.md | 2 +- cves/2021/CVE-2021-34371.md | 2 + cves/2021/CVE-2021-34427.md | 2 +- cves/2021/CVE-2021-34429.md | 3 + cves/2021/CVE-2021-3490.md | 2 + cves/2021/CVE-2021-3493.md | 4 + cves/2021/CVE-2021-35042.md | 4 + cves/2021/CVE-2021-35296.md | 2 +- cves/2021/CVE-2021-35448.md | 2 +- cves/2021/CVE-2021-3560.md | 5 + cves/2021/CVE-2021-36260.md | 2 + cves/2021/CVE-2021-36396.md | 1 + cves/2021/CVE-2021-36563.md | 2 +- cves/2021/CVE-2021-36981.md | 2 +- cves/2021/CVE-2021-37740.md | 2 +- cves/2021/CVE-2021-37910.md | 2 +- cves/2021/CVE-2021-38185.md | 2 +- cves/2021/CVE-2021-38699.md | 2 + cves/2021/CVE-2021-39312.md | 2 +- cves/2021/CVE-2021-3975.md | 2 +- cves/2021/CVE-2021-4034.md | 22 ++ cves/2021/CVE-2021-40346.md | 1 + cves/2021/CVE-2021-40438.md | 4 + cves/2021/CVE-2021-40822.md | 3 + cves/2021/CVE-2021-40845.md | 2 +- cves/2021/CVE-2021-40875.md | 2 +- cves/2021/CVE-2021-40904.md | 2 +- cves/2021/CVE-2021-40906.md | 2 +- cves/2021/CVE-2021-40964.md | 1 + cves/2021/CVE-2021-40978.md | 2 +- cves/2021/CVE-2021-41073.md | 1 + cves/2021/CVE-2021-41277.md | 3 + cves/2021/CVE-2021-41773.md | 27 +++ cves/2021/CVE-2021-42008.md | 1 + cves/2021/CVE-2021-42013.md | 9 + cves/2021/CVE-2021-42278.md | 1 + cves/2021/CVE-2021-42342.md | 2 + cves/2021/CVE-2021-42392.md | 2 + cves/2021/CVE-2021-43008.md | 3 + cves/2021/CVE-2021-43032.md | 2 +- cves/2021/CVE-2021-43129.md | 2 +- cves/2021/CVE-2021-43609.md | 2 +- cves/2021/CVE-2021-43798.md | 10 + cves/2021/CVE-2021-44026.md | 1 + cves/2021/CVE-2021-44228.md | 19 ++ cves/2021/CVE-2021-44790.md | 1 + cves/2021/CVE-2021-44967.md | 1 + cves/2021/CVE-2021-45041.md | 2 +- cves/2021/CVE-2021-45232.md | 3 + cves/2021/CVE-2021-45416.md | 1 + cves/2021/CVE-2021-45744.md | 2 + cves/2021/CVE-2021-45745.md | 2 + cves/2021/CVE-2021-45788.md | 2 + cves/2021/CVE-2021-45897.md | 2 +- cves/2021/CVE-2021-46067.md | 2 + cves/2021/CVE-2021-46068.md | 2 + cves/2021/CVE-2021-46070.md | 2 + cves/2021/CVE-2021-46074.md | 2 + cves/2021/CVE-2021-46076.md | 2 + cves/2021/CVE-2021-46078.md | 2 + cves/2021/CVE-2021-46079.md | 2 + cves/2021/CVE-2021-46080.md | 2 + cves/2022/CVE-2022-0185.md | 3 + cves/2022/CVE-2022-0236.md | 2 +- cves/2022/CVE-2022-0435.md | 2 + cves/2022/CVE-2022-0441.md | 1 + cves/2022/CVE-2022-0529.md | 1 + cves/2022/CVE-2022-0543.md | 5 + cves/2022/CVE-2022-0739.md | 1 + cves/2022/CVE-2022-0778.md | 2 + cves/2022/CVE-2022-0847.md | 6 + cves/2022/CVE-2022-0944.md | 1 + cves/2022/CVE-2022-1026.md | 2 + cves/2022/CVE-2022-1364.md | 1 + cves/2022/CVE-2022-1386.md | 1 + cves/2022/CVE-2022-1388.md | 1 + cves/2022/CVE-2022-1471.md | 4 + cves/2022/CVE-2022-1609.md | 1 + cves/2022/CVE-2022-20223.md | 1 + cves/2022/CVE-2022-20829.md | 2 +- cves/2022/CVE-2022-21241.md | 2 +- cves/2022/CVE-2022-21445.md | 1 + cves/2022/CVE-2022-22536.md | 1 + cves/2022/CVE-2022-22706.md | 1 + cves/2022/CVE-2022-22909.md | 1 + cves/2022/CVE-2022-22947.md | 5 + cves/2022/CVE-2022-22954.md | 1 + cves/2022/CVE-2022-22963.md | 6 + cves/2022/CVE-2022-22965.md | 8 + cves/2022/CVE-2022-22978.md | 2 + cves/2022/CVE-2022-22980.md | 1 + cves/2022/CVE-2022-23093.md | 1 + cves/2022/CVE-2022-23221.md | 3 + cves/2022/CVE-2022-23378.md | 2 +- cves/2022/CVE-2022-23529.md | 2 +- cves/2022/CVE-2022-23779.md | 1 + cves/2022/CVE-2022-23861.md | 2 +- cves/2022/CVE-2022-23862.md | 2 +- cves/2022/CVE-2022-23967.md | 2 +- cves/2022/CVE-2022-24124.md | 1 + cves/2022/CVE-2022-24125.md | 2 +- cves/2022/CVE-2022-24355.md | 2 +- cves/2022/CVE-2022-24481.md | 1 + cves/2022/CVE-2022-24521.md | 1 + cves/2022/CVE-2022-24654.md | 2 +- cves/2022/CVE-2022-24706.md | 4 + cves/2022/CVE-2022-24707.md | 1 + cves/2022/CVE-2022-24715.md | 1 + cves/2022/CVE-2022-24716.md | 3 + cves/2022/CVE-2022-24785.md | 1 + cves/2022/CVE-2022-24816.md | 3 + cves/2022/CVE-2022-24834.md | 1 + cves/2022/CVE-2022-25012.md | 1 + cves/2022/CVE-2022-25090.md | 2 +- cves/2022/CVE-2022-25636.md | 1 + cves/2022/CVE-2022-25765.md | 1 + cves/2022/CVE-2022-2586.md | 1 + cves/2022/CVE-2022-2588.md | 1 + cves/2022/CVE-2022-26133.md | 1 + cves/2022/CVE-2022-26134.md | 6 + cves/2022/CVE-2022-26265.md | 1 + cves/2022/CVE-2022-26923.md | 2 + cves/2022/CVE-2022-27226.md | 2 +- cves/2022/CVE-2022-27254.md | 1 + cves/2022/CVE-2022-27255.md | 1 + cves/2022/CVE-2022-27666.md | 1 + cves/2022/CVE-2022-27925.md | 1 + cves/2022/CVE-2022-28368.md | 1 + cves/2022/CVE-2022-29056.md | 1 + cves/2022/CVE-2022-29072.md | 1 + cves/2022/CVE-2022-29078.md | 2 + cves/2022/CVE-2022-29464.md | 2 + cves/2022/CVE-2022-29597.md | 2 +- cves/2022/CVE-2022-29598.md | 2 +- cves/2022/CVE-2022-29799.md | 1 + cves/2022/CVE-2022-29800.md | 1 + cves/2022/CVE-2022-30024.md | 2 +- cves/2022/CVE-2022-30075.md | 2 + cves/2022/CVE-2022-30190.md | 5 + cves/2022/CVE-2022-30292.md | 2 +- cves/2022/CVE-2022-30333.md | 1 + cves/2022/CVE-2022-31138.md | 2 +- cves/2022/CVE-2022-31199.md | 2 +- cves/2022/CVE-2022-31245.md | 2 +- cves/2022/CVE-2022-31262.md | 2 +- cves/2022/CVE-2022-31630.md | 3 +- cves/2022/CVE-2022-31813.md | 1 + cves/2022/CVE-2022-31814.md | 1 + cves/2022/CVE-2022-3218.md | 1 + cves/2022/CVE-2022-32199.md | 2 +- cves/2022/CVE-2022-32947.md | 1 + cves/2022/CVE-2022-33098.md | 1 + cves/2022/CVE-2022-33171.md | 2 +- cves/2022/CVE-2022-34265.md | 3 + cves/2022/CVE-2022-35131.md | 2 +- cves/2022/CVE-2022-35411.md | 1 + cves/2022/CVE-2022-35513.md | 1 + cves/2022/CVE-2022-35650.md | 2 +- cves/2022/CVE-2022-35899.md | 2 +- cves/2022/CVE-2022-3590.md | 2 +- cves/2022/CVE-2022-35914.md | 1 + cves/2022/CVE-2022-36067.md | 1 + cves/2022/CVE-2022-36200.md | 2 +- cves/2022/CVE-2022-36231.md | 2 +- cves/2022/CVE-2022-36271.md | 2 +- cves/2022/CVE-2022-36446.md | 1 + cves/2022/CVE-2022-36804.md | 3 + cves/2022/CVE-2022-36934.md | 1 + cves/2022/CVE-2022-37122.md | 2 +- cves/2022/CVE-2022-37704.md | 2 +- cves/2022/CVE-2022-37705.md | 2 +- cves/2022/CVE-2022-37706.md | 1 + cves/2022/CVE-2022-37969.md | 2 + cves/2022/CVE-2022-38181.md | 1 + cves/2022/CVE-2022-38694.md | 7 + cves/2022/CVE-2022-38813.md | 2 +- cves/2022/CVE-2022-39227.md | 1 + cves/2022/CVE-2022-40032.md | 2 +- cves/2022/CVE-2022-40297.md | 2 +- cves/2022/CVE-2022-40347.md | 2 +- cves/2022/CVE-2022-40348.md | 2 +- cves/2022/CVE-2022-40471.md | 3 +- cves/2022/CVE-2022-40684.md | 1 + cves/2022/CVE-2022-41358.md | 2 +- cves/2022/CVE-2022-41401.md | 2 +- cves/2022/CVE-2022-41445.md | 2 +- cves/2022/CVE-2022-41678.md | 4 + cves/2022/CVE-2022-41840.md | 2 +- cves/2022/CVE-2022-42046.md | 2 +- cves/2022/CVE-2022-42176.md | 2 +- cves/2022/CVE-2022-4223.md | 3 + cves/2022/CVE-2022-42248.md | 1 + cves/2022/CVE-2022-42475.md | 1 + cves/2022/CVE-2022-42889.md | 4 + cves/2022/CVE-2022-43144.md | 2 +- cves/2022/CVE-2022-4361.md | 1 + cves/2022/CVE-2022-43973.md | 2 +- cves/2022/CVE-2022-44215.md | 2 +- cves/2022/CVE-2022-44268.md | 6 + cves/2022/CVE-2022-44276.md | 2 +- cves/2022/CVE-2022-44312.md | 2 +- cves/2022/CVE-2022-44645.md | 2 + cves/2022/CVE-2022-45600.md | 2 +- cves/2022/CVE-2022-46169.md | 7 + cves/2022/CVE-2022-46364.md | 7 +- cves/2022/CVE-2022-46395.md | 1 + cves/2022/CVE-2022-47130.md | 2 +- cves/2022/CVE-2022-47131.md | 2 +- cves/2022/CVE-2022-47447.md | 2 +- cves/2022/CVE-2022-47966.md | 2 + cves/2022/CVE-2022-48311.md | 2 +- cves/2023/CVE-2023-0179.md | 2 + cves/2023/CVE-2023-0214.md | 2 +- cves/2023/CVE-2023-0297.md | 1 + cves/2023/CVE-2023-0386.md | 3 + cves/2023/CVE-2023-0669.md | 1 + cves/2023/CVE-2023-1189.md | 2 +- cves/2023/CVE-2023-1773.md | 2 +- cves/2023/CVE-2023-20052.md | 1 + cves/2023/CVE-2023-20198.md | 2 + cves/2023/CVE-2023-20564.md | 2 +- cves/2023/CVE-2023-20938.md | 3 + cves/2023/CVE-2023-21554.md | 1 + cves/2023/CVE-2023-21716.md | 2 + cves/2023/CVE-2023-21746.md | 1 + cves/2023/CVE-2023-21768.md | 2 + cves/2023/CVE-2023-21839.md | 3 + cves/2023/CVE-2023-22047.md | 2 + cves/2023/CVE-2023-22515.md | 7 + cves/2023/CVE-2023-22518.md | 1 + cves/2023/CVE-2023-22527.md | 4 + cves/2023/CVE-2023-22809.md | 1 + cves/2023/CVE-2023-22894.md | 1 + cves/2023/CVE-2023-22906.md | 2 +- cves/2023/CVE-2023-23169.md | 2 +- cves/2023/CVE-2023-23397.md | 1 + cves/2023/CVE-2023-23752.md | 4 + cves/2023/CVE-2023-23946.md | 1 + cves/2023/CVE-2023-24012.md | 2 +- cves/2023/CVE-2023-24055.md | 1 + cves/2023/CVE-2023-24709.md | 2 +- cves/2023/CVE-2023-24932.md | 1 + cves/2023/CVE-2023-25136.md | 1 + cves/2023/CVE-2023-25157.md | 4 + cves/2023/CVE-2023-25194.md | 3 + cves/2023/CVE-2023-25826.md | 3 + cves/2023/CVE-2023-26035.md | 1 + cves/2023/CVE-2023-26083.md | 1 + cves/2023/CVE-2023-26208.md | 1 + cves/2023/CVE-2023-26209.md | 1 + cves/2023/CVE-2023-26360.md | 6 + cves/2023/CVE-2023-2640.md | 3 + cves/2023/CVE-2023-26469.md | 1 + cves/2023/CVE-2023-26482.md | 2 +- cves/2023/CVE-2023-27163.md | 6 + cves/2023/CVE-2023-27350.md | 2 + cves/2023/CVE-2023-27372.md | 4 + cves/2023/CVE-2023-27524.md | 3 + cves/2023/CVE-2023-27532.md | 1 + cves/2023/CVE-2023-27566.md | 2 +- cves/2023/CVE-2023-27742.md | 2 +- cves/2023/CVE-2023-28121.md | 2 + cves/2023/CVE-2023-28205.md | 1 + cves/2023/CVE-2023-2825.md | 1 + cves/2023/CVE-2023-28432.md | 3 + cves/2023/CVE-2023-29017.md | 1 + cves/2023/CVE-2023-29300.md | 3 + cves/2023/CVE-2023-29357.md | 1 + cves/2023/CVE-2023-29386.md | 2 +- cves/2023/CVE-2023-2986.md | 1 + cves/2023/CVE-2023-29919.md | 2 +- cves/2023/CVE-2023-30146.md | 2 +- cves/2023/CVE-2023-30212.md | 1 + cves/2023/CVE-2023-30253.md | 2 + cves/2023/CVE-2023-30258.md | 2 + cves/2023/CVE-2023-30367.md | 2 +- cves/2023/CVE-2023-30459.md | 2 +- cves/2023/CVE-2023-30547.md | 1 + cves/2023/CVE-2023-30799.md | 2 +- cves/2023/CVE-2023-31059.md | 2 +- cves/2023/CVE-2023-31497.md | 2 +- cves/2023/CVE-2023-31594.md | 2 +- cves/2023/CVE-2023-31595.md | 2 +- cves/2023/CVE-2023-31664.md | 2 +- cves/2023/CVE-2023-31753.md | 2 +- cves/2023/CVE-2023-31851.md | 2 +- cves/2023/CVE-2023-31852.md | 2 +- cves/2023/CVE-2023-31853.md | 2 +- cves/2023/CVE-2023-31902.md | 1 + cves/2023/CVE-2023-32233.md | 2 + cves/2023/CVE-2023-32315.md | 4 + cves/2023/CVE-2023-32571.md | 1 + cves/2023/CVE-2023-32749.md | 1 + cves/2023/CVE-2023-32784.md | 1 + cves/2023/CVE-2023-33107.md | 3 +- cves/2023/CVE-2023-33246.md | 3 + cves/2023/CVE-2023-33253.md | 2 +- cves/2023/CVE-2023-33408.md | 2 +- cves/2023/CVE-2023-33409.md | 2 +- cves/2023/CVE-2023-33410.md | 2 +- cves/2023/CVE-2023-33669.md | 2 + cves/2023/CVE-2023-33733.md | 1 + cves/2023/CVE-2023-33781.md | 2 +- cves/2023/CVE-2023-33782.md | 2 +- cves/2023/CVE-2023-33817.md | 2 +- cves/2023/CVE-2023-34362.md | 1 + cves/2023/CVE-2023-34468.md | 4 + cves/2023/CVE-2023-3452.md | 2 + cves/2023/CVE-2023-34598.md | 1 + cves/2023/CVE-2023-34599.md | 2 +- cves/2023/CVE-2023-34924.md | 2 +- cves/2023/CVE-2023-34960.md | 1 + cves/2023/CVE-2023-34992.md | 1 + cves/2023/CVE-2023-35078.md | 1 + cves/2023/CVE-2023-3519.md | 1 + cves/2023/CVE-2023-35813.md | 2 + cves/2023/CVE-2023-35885.md | 1 + cves/2023/CVE-2023-36003.md | 1 + cves/2023/CVE-2023-36123.md | 2 +- cves/2023/CVE-2023-36143.md | 1 + cves/2023/CVE-2023-36144.md | 2 +- cves/2023/CVE-2023-36644.md | 2 +- cves/2023/CVE-2023-36802.md | 1 + cves/2023/CVE-2023-36844.md | 1 + cves/2023/CVE-2023-36845.md | 2 + cves/2023/CVE-2023-36874.md | 1 + cves/2023/CVE-2023-37582.md | 3 + cves/2023/CVE-2023-37598.md | 2 +- cves/2023/CVE-2023-37941.md | 3 + cves/2023/CVE-2023-38146.md | 1 + cves/2023/CVE-2023-38545.md | 3 + cves/2023/CVE-2023-38633.md | 2 + cves/2023/CVE-2023-38646.md | 6 + cves/2023/CVE-2023-38709.md | 2 +- cves/2023/CVE-2023-38817.md | 1 + cves/2023/CVE-2023-38829.md | 2 +- cves/2023/CVE-2023-38831.md | 6 + cves/2023/CVE-2023-38840.md | 2 +- cves/2023/CVE-2023-38890.md | 3 +- cves/2023/CVE-2023-39063.md | 2 +- cves/2023/CVE-2023-39115.md | 2 +- cves/2023/CVE-2023-39143.md | 2 +- cves/2023/CVE-2023-39361.md | 3 + cves/2023/CVE-2023-40028.md | 2 + cves/2023/CVE-2023-40289.md | 2 +- cves/2023/CVE-2023-40297.md | 2 +- cves/2023/CVE-2023-40362.md | 2 +- cves/2023/CVE-2023-40868.md | 2 +- cves/2023/CVE-2023-41717.md | 2 +- cves/2023/CVE-2023-41892.md | 4 + cves/2023/CVE-2023-4197.md | 1 + cves/2023/CVE-2023-4220.md | 4 + cves/2023/CVE-2023-42283.md | 2 +- cves/2023/CVE-2023-42284.md | 2 +- cves/2023/CVE-2023-42362.md | 2 +- cves/2023/CVE-2023-42793.md | 5 + cves/2023/CVE-2023-42820.md | 2 + cves/2023/CVE-2023-43208.md | 10 + cves/2023/CVE-2023-43261.md | 2 +- cves/2023/CVE-2023-43284.md | 2 +- cves/2023/CVE-2023-43323.md | 2 +- cves/2023/CVE-2023-43325.md | 2 +- cves/2023/CVE-2023-43340.md | 2 +- cves/2023/CVE-2023-43341.md | 2 +- cves/2023/CVE-2023-43342.md | 2 +- cves/2023/CVE-2023-43343.md | 2 +- cves/2023/CVE-2023-43344.md | 2 +- cves/2023/CVE-2023-43345.md | 2 +- cves/2023/CVE-2023-43346.md | 2 +- cves/2023/CVE-2023-43364.md | 1 + cves/2023/CVE-2023-44487.md | 4 + cves/2023/CVE-2023-4450.md | 3 + cves/2023/CVE-2023-44811.md | 2 +- cves/2023/CVE-2023-44812.md | 2 +- cves/2023/CVE-2023-44813.md | 2 +- cves/2023/CVE-2023-45542.md | 2 +- cves/2023/CVE-2023-45612.md | 8 +- cves/2023/CVE-2023-45866.md | 1 + cves/2023/CVE-2023-45992.md | 2 +- cves/2023/CVE-2023-46014.md | 1 + cves/2023/CVE-2023-46015.md | 2 +- cves/2023/CVE-2023-46016.md | 2 +- cves/2023/CVE-2023-46017.md | 2 +- cves/2023/CVE-2023-46018.md | 2 +- cves/2023/CVE-2023-46019.md | 2 +- cves/2023/CVE-2023-46020.md | 2 +- cves/2023/CVE-2023-46021.md | 2 +- cves/2023/CVE-2023-46022.md | 2 +- cves/2023/CVE-2023-46136.md | 2 +- cves/2023/CVE-2023-46229.md | 2 +- cves/2023/CVE-2023-4634.md | 1 + cves/2023/CVE-2023-46371.md | 2 +- cves/2023/CVE-2023-46404.md | 2 +- cves/2023/CVE-2023-46450.md | 2 +- cves/2023/CVE-2023-46451.md | 2 +- cves/2023/CVE-2023-46604.md | 6 + cves/2023/CVE-2023-46694.md | 2 +- cves/2023/CVE-2023-46818.md | 1 + cves/2023/CVE-2023-46865.md | 2 +- cves/2023/CVE-2023-46974.md | 2 +- cves/2023/CVE-2023-46998.md | 2 +- cves/2023/CVE-2023-48084.md | 1 + cves/2023/CVE-2023-48223.md | 2 +- cves/2023/CVE-2023-4861.md | 2 +- cves/2023/CVE-2023-48849.md | 2 +- cves/2023/CVE-2023-48858.md | 2 +- cves/2023/CVE-2023-49031.md | 2 +- cves/2023/CVE-2023-49070.md | 4 + cves/2023/CVE-2023-49103.md | 3 + cves/2023/CVE-2023-4911.md | 2 + cves/2023/CVE-2023-49313.md | 2 +- cves/2023/CVE-2023-49438.md | 2 +- cves/2023/CVE-2023-5002.md | 2 + cves/2023/CVE-2023-50072.md | 2 +- cves/2023/CVE-2023-50564.md | 1 + cves/2023/CVE-2023-50965.md | 2 +- cves/2023/CVE-2023-51126.md | 2 +- cves/2023/CVE-2023-51409.md | 1 + cves/2023/CVE-2023-51449.md | 3 + cves/2023/CVE-2023-51467.md | 3 + cves/2023/CVE-2023-51764.md | 2 + cves/2023/CVE-2023-51810.md | 2 +- cves/2023/CVE-2023-52076.md | 1 + cves/2023/CVE-2023-52235.md | 2 +- cves/2023/CVE-2023-52251.md | 2 +- cves/2023/CVE-2023-52271.md | 2 +- cves/2023/CVE-2023-5360.md | 1 + cves/2023/CVE-2023-5965.md | 2 +- cves/2023/CVE-2023-5966.md | 2 +- cves/2023/CVE-2023-6019.md | 1 + cves/2023/CVE-2023-6246.md | 1 + cves/2023/CVE-2023-6329.md | 2 +- cves/2023/CVE-2023-6553.md | 2 + cves/2023/CVE-2023-6972.md | 2 +- cves/2023/CVE-2023-7172.md | 2 +- cves/2023/CVE-2023-7173.md | 2 +- cves/2024/CVE-2024-0012.md | 1 + cves/2024/CVE-2024-0044.md | 6 + cves/2024/CVE-2024-0368.md | 2 +- cves/2024/CVE-2024-0582.md | 1 + cves/2024/CVE-2024-0670.md | 4 + cves/2024/CVE-2024-0692.md | 2 +- cves/2024/CVE-2024-1065.md | 2 +- cves/2024/CVE-2024-1071.md | 1 + cves/2024/CVE-2024-1086.md | 3 + cves/2024/CVE-2024-10914.md | 1 + cves/2024/CVE-2024-10924.md | 3 + cves/2024/CVE-2024-11003.md | 2 +- cves/2024/CVE-2024-11635.md | 2 +- cves/2024/CVE-2024-11680.md | 1 + cves/2024/CVE-2024-12029.md | 2 +- cves/2024/CVE-2024-12084.md | 1 + cves/2024/CVE-2024-12227.md | 2 +- cves/2024/CVE-2024-12381.md | 3 +- cves/2024/CVE-2024-12484.md | 2 +- cves/2024/CVE-2024-13513.md | 1 + cves/2024/CVE-2024-13869.md | 2 +- cves/2024/CVE-2024-13985.md | 2 +- cves/2024/CVE-2024-1561.md | 4 + cves/2024/CVE-2024-1698.md | 1 + cves/2024/CVE-2024-1708.md | 1 + cves/2024/CVE-2024-1813.md | 2 +- cves/2024/CVE-2024-1874.md | 1 + cves/2024/CVE-2024-20404.md | 1 + cves/2024/CVE-2024-20405.md | 1 + cves/2024/CVE-2024-20767.md | 1 + cves/2024/CVE-2024-2083.md | 2 +- cves/2024/CVE-2024-21182.md | 1 + cves/2024/CVE-2024-21338.md | 1 + cves/2024/CVE-2024-21413.md | 10 + cves/2024/CVE-2024-21534.md | 1 + cves/2024/CVE-2024-21542.md | 2 +- cves/2024/CVE-2024-21626.md | 1 + cves/2024/CVE-2024-21683.md | 1 + cves/2024/CVE-2024-21762.md | 3 + cves/2024/CVE-2024-21887.md | 1 + cves/2024/CVE-2024-21907.md | 2 +- cves/2024/CVE-2024-22120.md | 1 + cves/2024/CVE-2024-22416.md | 1 + cves/2024/CVE-2024-22514.md | 2 +- cves/2024/CVE-2024-22515.md | 2 +- cves/2024/CVE-2024-22532.md | 2 +- cves/2024/CVE-2024-22640.md | 2 +- cves/2024/CVE-2024-22641.md | 2 +- cves/2024/CVE-2024-22889.md | 2 +- cves/2024/CVE-2024-23108.md | 1 + cves/2024/CVE-2024-23113.md | 2 + cves/2024/CVE-2024-23222.md | 3 +- cves/2024/CVE-2024-23334.md | 5 + cves/2024/CVE-2024-23659.md | 2 +- cves/2024/CVE-2024-23692.md | 1 + cves/2024/CVE-2024-23745.md | 2 +- cves/2024/CVE-2024-23746.md | 2 +- cves/2024/CVE-2024-23747.md | 2 +- cves/2024/CVE-2024-23897.md | 11 + cves/2024/CVE-2024-24401.md | 1 + cves/2024/CVE-2024-24590.md | 1 + cves/2024/CVE-2024-24824.md | 2 +- cves/2024/CVE-2024-24919.md | 2 + cves/2024/CVE-2024-25081.md | 2 +- cves/2024/CVE-2024-25082.md | 3 +- cves/2024/CVE-2024-25096.md | 2 +- cves/2024/CVE-2024-25169.md | 2 +- cves/2024/CVE-2024-25170.md | 2 +- cves/2024/CVE-2024-25202.md | 2 +- cves/2024/CVE-2024-25411.md | 2 +- cves/2024/CVE-2024-25412.md | 2 +- cves/2024/CVE-2024-25423.md | 2 +- cves/2024/CVE-2024-25600.md | 5 + cves/2024/CVE-2024-25641.md | 2 + cves/2024/CVE-2024-26229.md | 2 + cves/2024/CVE-2024-26521.md | 2 +- cves/2024/CVE-2024-27130.md | 1 + cves/2024/CVE-2024-27198.md | 5 + cves/2024/CVE-2024-27304.md | 2 +- cves/2024/CVE-2024-27316.md | 1 + cves/2024/CVE-2024-27348.md | 5 + cves/2024/CVE-2024-27518.md | 2 +- cves/2024/CVE-2024-27665.md | 2 +- cves/2024/CVE-2024-27766.md | 3 +- cves/2024/CVE-2024-27956.md | 2 + cves/2024/CVE-2024-28000.md | 1 + cves/2024/CVE-2024-28157.md | 2 +- cves/2024/CVE-2024-28231.md | 2 +- cves/2024/CVE-2024-28397.md | 9 + cves/2024/CVE-2024-28715.md | 2 +- cves/2024/CVE-2024-28752.md | 2 + cves/2024/CVE-2024-2876.md | 2 + cves/2024/CVE-2024-2887.md | 1 + cves/2024/CVE-2024-28987.md | 1 + cves/2024/CVE-2024-28995.md | 1 + cves/2024/CVE-2024-29269.md | 1 + cves/2024/CVE-2024-2961.md | 5 + cves/2024/CVE-2024-29671.md | 2 +- cves/2024/CVE-2024-29943.md | 2 + cves/2024/CVE-2024-29973.md | 1 + cves/2024/CVE-2024-30088.md | 3 + cves/2024/CVE-2024-30212.md | 2 +- cves/2024/CVE-2024-30804.md | 2 +- cves/2024/CVE-2024-30851.md | 2 +- cves/2024/CVE-2024-30896.md | 2 +- cves/2024/CVE-2024-3094.md | 9 + cves/2024/CVE-2024-31317.md | 7 + cves/2024/CVE-2024-31680.md | 2 +- cves/2024/CVE-2024-31777.md | 2 +- cves/2024/CVE-2024-31819.md | 1 + cves/2024/CVE-2024-3183.md | 1 + cves/2024/CVE-2024-31835.md | 2 +- cves/2024/CVE-2024-31982.md | 1 + cves/2024/CVE-2024-32002.md | 6 + cves/2024/CVE-2024-32019.md | 5 + cves/2024/CVE-2024-32113.md | 1 + cves/2024/CVE-2024-32114.md | 3 + cves/2024/CVE-2024-32369.md | 2 +- cves/2024/CVE-2024-32640.md | 1 + cves/2024/CVE-2024-3273.md | 1 + cves/2024/CVE-2024-33438.md | 2 +- cves/2024/CVE-2024-3400.md | 3 + cves/2024/CVE-2024-34070.md | 3 +- cves/2024/CVE-2024-34102.md | 2 + cves/2024/CVE-2024-34220.md | 2 +- cves/2024/CVE-2024-34221.md | 2 +- cves/2024/CVE-2024-34222.md | 2 +- cves/2024/CVE-2024-34223.md | 2 +- cves/2024/CVE-2024-34224.md | 2 +- cves/2024/CVE-2024-34225.md | 2 +- cves/2024/CVE-2024-34226.md | 2 +- cves/2024/CVE-2024-34312.md | 2 +- cves/2024/CVE-2024-34313.md | 2 +- cves/2024/CVE-2024-34327.md | 2 +- cves/2024/CVE-2024-34361.md | 1 + cves/2024/CVE-2024-34444.md | 2 +- cves/2024/CVE-2024-34452.md | 2 +- cves/2024/CVE-2024-34582.md | 2 +- cves/2024/CVE-2024-35333.md | 2 +- cves/2024/CVE-2024-3553.md | 2 +- cves/2024/CVE-2024-35584.md | 2 +- cves/2024/CVE-2024-36039.md | 2 +- cves/2024/CVE-2024-36042.md | 2 +- cves/2024/CVE-2024-36104.md | 1 + cves/2024/CVE-2024-36401.md | 7 + cves/2024/CVE-2024-36420.md | 2 +- cves/2024/CVE-2024-3661.md | 1 + cves/2024/CVE-2024-36821.md | 2 +- cves/2024/CVE-2024-36837.md | 1 + cves/2024/CVE-2024-36971.md | 2 +- cves/2024/CVE-2024-36985.md | 2 +- cves/2024/CVE-2024-36991.md | 2 + cves/2024/CVE-2024-37032.md | 1 + cves/2024/CVE-2024-37054.md | 3 + cves/2024/CVE-2024-37383.md | 1 + cves/2024/CVE-2024-37726.md | 1 + cves/2024/CVE-2024-37742.md | 3 +- cves/2024/CVE-2024-37759.md | 2 +- cves/2024/CVE-2024-38063.md | 5 + cves/2024/CVE-2024-38077.md | 2 + cves/2024/CVE-2024-38355.md | 2 +- cves/2024/CVE-2024-38472.md | 1 + cves/2024/CVE-2024-38820.md | 2 +- cves/2024/CVE-2024-38856.md | 6 + cves/2024/CVE-2024-39031.md | 2 +- cves/2024/CVE-2024-39205.md | 1 + cves/2024/CVE-2024-39248.md | 2 +- cves/2024/CVE-2024-39250.md | 2 +- cves/2024/CVE-2024-39713.md | 1 + cves/2024/CVE-2024-39907.md | 3 + cves/2024/CVE-2024-40110.md | 1 + cves/2024/CVE-2024-4040.md | 4 + cves/2024/CVE-2024-4041.md | 2 +- cves/2024/CVE-2024-40422.md | 1 + cves/2024/CVE-2024-40457.md | 2 +- cves/2024/CVE-2024-40492.md | 2 +- cves/2024/CVE-2024-40891.md | 2 +- cves/2024/CVE-2024-40898.md | 1 + cves/2024/CVE-2024-41290.md | 2 +- cves/2024/CVE-2024-41570.md | 2 + cves/2024/CVE-2024-42009.md | 2 + cves/2024/CVE-2024-42323.md | 5 +- cves/2024/CVE-2024-42327.md | 2 + cves/2024/CVE-2024-42640.md | 1 + cves/2024/CVE-2024-4295.md | 1 + cves/2024/CVE-2024-4322.md | 2 +- cves/2024/CVE-2024-43400.md | 2 +- cves/2024/CVE-2024-43425.md | 1 + cves/2024/CVE-2024-43441.md | 3 + cves/2024/CVE-2024-43451.md | 1 + cves/2024/CVE-2024-4367.md | 7 + cves/2024/CVE-2024-44083.md | 2 +- cves/2024/CVE-2024-44349.md | 2 +- cves/2024/CVE-2024-44610.md | 2 +- cves/2024/CVE-2024-44762.md | 2 +- cves/2024/CVE-2024-44812.md | 2 +- cves/2024/CVE-2024-45195.md | 3 + cves/2024/CVE-2024-45440.md | 1 + cves/2024/CVE-2024-45507.md | 3 + cves/2024/CVE-2024-45590.md | 1 + cves/2024/CVE-2024-4577.md | 6 + cves/2024/CVE-2024-46256.md | 4 +- cves/2024/CVE-2024-46278.md | 2 +- cves/2024/CVE-2024-46982.md | 1 + cves/2024/CVE-2024-46987.md | 10 +- cves/2024/CVE-2024-47176.md | 2 + cves/2024/CVE-2024-47177.md | 3 + cves/2024/CVE-2024-48359.md | 2 +- cves/2024/CVE-2024-48360.md | 2 +- cves/2024/CVE-2024-48392.md | 2 +- cves/2024/CVE-2024-48510.md | 2 +- cves/2024/CVE-2024-4879.md | 1 + cves/2024/CVE-2024-48910.md | 3 +- cves/2024/CVE-2024-4898.md | 1 + cves/2024/CVE-2024-48990.md | 11 + cves/2024/CVE-2024-49039.md | 1 + cves/2024/CVE-2024-49113.md | 2 + cves/2024/CVE-2024-49138.md | 1 + cves/2024/CVE-2024-4947.md | 1 + cves/2024/CVE-2024-4956.md | 5 + cves/2024/CVE-2024-49882.md | 2 +- cves/2024/CVE-2024-50251.md | 2 +- cves/2024/CVE-2024-50330.md | 2 +- cves/2024/CVE-2024-50379.md | 1 + cves/2024/CVE-2024-50498.md | 2 + cves/2024/CVE-2024-50526.md | 2 +- cves/2024/CVE-2024-50677.md | 2 +- cves/2024/CVE-2024-5082.md | 2 +- cves/2024/CVE-2024-5084.md | 1 + cves/2024/CVE-2024-50848.md | 2 +- cves/2024/CVE-2024-50849.md | 1 + cves/2024/CVE-2024-50986.md | 2 +- cves/2024/CVE-2024-51132.md | 2 +- cves/2024/CVE-2024-51378.md | 1 + cves/2024/CVE-2024-51482.md | 6 + cves/2024/CVE-2024-51567.md | 1 + cves/2024/CVE-2024-51793.md | 2 + cves/2024/CVE-2024-52005.md | 2 +- cves/2024/CVE-2024-52010.md | 2 +- cves/2024/CVE-2024-5243.md | 1 + cves/2024/CVE-2024-5326.md | 1 + cves/2024/CVE-2024-53375.md | 2 +- cves/2024/CVE-2024-53376.md | 2 +- cves/2024/CVE-2024-53591.md | 2 +- cves/2024/CVE-2024-53617.md | 2 +- cves/2024/CVE-2024-53677.md | 2 + cves/2024/CVE-2024-53704.md | 1 + cves/2024/CVE-2024-54152.md | 1 + cves/2024/CVE-2024-54772.md | 1 + cves/2024/CVE-2024-54887.md | 2 +- cves/2024/CVE-2024-55457.md | 2 +- cves/2024/CVE-2024-55557.md | 2 +- cves/2024/CVE-2024-55968.md | 3 +- cves/2024/CVE-2024-56145.md | 3 + cves/2024/CVE-2024-56431.md | 2 +- cves/2024/CVE-2024-56511.md | 3 + cves/2024/CVE-2024-56924.md | 2 +- cves/2024/CVE-2024-57241.md | 1 + cves/2024/CVE-2024-57394.md | 2 +- cves/2024/CVE-2024-57429.md | 2 +- cves/2024/CVE-2024-57487.md | 2 +- cves/2024/CVE-2024-57522.md | 2 +- cves/2024/CVE-2024-57523.md | 1 + cves/2024/CVE-2024-57778.md | 2 +- cves/2024/CVE-2024-58239.md | 3 +- cves/2024/CVE-2024-5932.md | 2 + cves/2024/CVE-2024-6232.md | 2 +- cves/2024/CVE-2024-6333.md | 2 +- cves/2024/CVE-2024-6386.md | 1 + cves/2024/CVE-2024-6387.md | 8 + cves/2024/CVE-2024-6651.md | 2 +- cves/2024/CVE-2024-6769.md | 1 + cves/2024/CVE-2024-6783.md | 2 +- cves/2024/CVE-2024-7344.md | 2 +- cves/2024/CVE-2024-7593.md | 1 + cves/2024/CVE-2024-7627.md | 1 + cves/2024/CVE-2024-7928.md | 1 + cves/2024/CVE-2024-7954.md | 1 + cves/2024/CVE-2024-7965.md | 1 + cves/2024/CVE-2024-8068.md | 2 +- cves/2024/CVE-2024-8069.md | 2 +- cves/2024/CVE-2024-8465.md | 3 +- cves/2024/CVE-2024-8503.md | 1 + cves/2024/CVE-2024-8856.md | 1 + cves/2024/CVE-2024-9047.md | 1 + cves/2024/CVE-2024-9162.md | 2 +- cves/2024/CVE-2024-9264.md | 6 + cves/2024/CVE-2024-9796.md | 1 + cves/2024/CVE-2024-9932.md | 1 + cves/2025/CVE-2025-0108.md | 2 + cves/2025/CVE-2025-0184.md | 2 +- cves/2025/CVE-2025-0282.md | 3 + cves/2025/CVE-2025-0288.md | 1 + cves/2025/CVE-2025-0401.md | 1 + cves/2025/CVE-2025-0890.md | 2 +- cves/2025/CVE-2025-10377.md | 1 + cves/2025/CVE-2025-1094.md | 1 + cves/2025/CVE-2025-10951.md | 2 +- cves/2025/CVE-2025-1338.md | 2 +- cves/2025/CVE-2025-1461.md | 1 + cves/2025/CVE-2025-14847.md | 20 ++ cves/2025/CVE-2025-1550.md | 2 +- cves/2025/CVE-2025-1716.md | 3 +- cves/2025/CVE-2025-1738.md | 2 +- cves/2025/CVE-2025-1739.md | 2 +- cves/2025/CVE-2025-1913.md | 2 +- cves/2025/CVE-2025-1974.md | 7 + cves/2025/CVE-2025-2011.md | 4 +- cves/2025/CVE-2025-20260.md | 3 +- cves/2025/CVE-2025-20282.md | 2 +- cves/2025/CVE-2025-21298.md | 3 + cves/2025/CVE-2025-21333.md | 2 + cves/2025/CVE-2025-21420.md | 1 + cves/2025/CVE-2025-21479.md | 5 + cves/2025/CVE-2025-21756.md | 1 + cves/2025/CVE-2025-22457.md | 1 + cves/2025/CVE-2025-22953.md | 2 +- cves/2025/CVE-2025-22968.md | 2 +- cves/2025/CVE-2025-2304.md | 18 +- cves/2025/CVE-2025-23048.md | 2 +- cves/2025/CVE-2025-23061.md | 2 +- cves/2025/CVE-2025-23247.md | 2 +- cves/2025/CVE-2025-23419.md | 2 +- cves/2025/CVE-2025-23968.md | 2 +- cves/2025/CVE-2025-24000.md | 2 +- cves/2025/CVE-2025-24054.md | 5 + cves/2025/CVE-2025-24071.md | 6 + cves/2025/CVE-2025-24132.md | 1 + cves/2025/CVE-2025-24367.md | 8 +- cves/2025/CVE-2025-24472.md | 2 +- cves/2025/CVE-2025-24801.md | 1 + cves/2025/CVE-2025-24813.md | 15 ++ cves/2025/CVE-2025-24893.md | 16 ++ cves/2025/CVE-2025-24963.md | 1 + cves/2025/CVE-2025-25200.md | 2 +- cves/2025/CVE-2025-25257.md | 3 + cves/2025/CVE-2025-25279.md | 1 + cves/2025/CVE-2025-25296.md | 1 + cves/2025/CVE-2025-25461.md | 2 +- cves/2025/CVE-2025-25614.md | 2 +- cves/2025/CVE-2025-25615.md | 2 +- cves/2025/CVE-2025-25616.md | 2 +- cves/2025/CVE-2025-25617.md | 2 +- cves/2025/CVE-2025-25618.md | 2 +- cves/2025/CVE-2025-25620.md | 2 +- cves/2025/CVE-2025-25621.md | 2 +- cves/2025/CVE-2025-2563.md | 2 + cves/2025/CVE-2025-2568.md | 2 +- cves/2025/CVE-2025-2598.md | 2 + cves/2025/CVE-2025-26125.md | 2 +- cves/2025/CVE-2025-26153.md | 2 +- cves/2025/CVE-2025-26198.md | 2 +- cves/2025/CVE-2025-26263.md | 2 +- cves/2025/CVE-2025-26264.md | 2 +- cves/2025/CVE-2025-26318.md | 2 +- cves/2025/CVE-2025-26466.md | 2 + cves/2025/CVE-2025-26794.md | 1 + cves/2025/CVE-2025-27407.md | 2 +- cves/2025/CVE-2025-27515.md | 2 +- cves/2025/CVE-2025-27520.md | 3 +- cves/2025/CVE-2025-27591.md | 6 + cves/2025/CVE-2025-27817.md | 1 + cves/2025/CVE-2025-2783.md | 3 + cves/2025/CVE-2025-28062.md | 2 +- cves/2025/CVE-2025-28121.md | 2 +- cves/2025/CVE-2025-2825.md | 6 +- cves/2025/CVE-2025-29306.md | 2 + cves/2025/CVE-2025-29384.md | 1 + cves/2025/CVE-2025-2945.md | 7 + cves/2025/CVE-2025-29529.md | 2 +- cves/2025/CVE-2025-29556.md | 2 +- cves/2025/CVE-2025-29632.md | 2 +- cves/2025/CVE-2025-29824.md | 1 + cves/2025/CVE-2025-29927.md | 17 ++ cves/2025/CVE-2025-30208.md | 7 + cves/2025/CVE-2025-30349.md | 2 +- cves/2025/CVE-2025-3052.md | 2 +- cves/2025/CVE-2025-31131.md | 1 + cves/2025/CVE-2025-31161.md | 10 + cves/2025/CVE-2025-31324.md | 1 + cves/2025/CVE-2025-31486.md | 1 + cves/2025/CVE-2025-31651.md | 1 + cves/2025/CVE-2025-31722.md | 1 + cves/2025/CVE-2025-32023.md | 1 + cves/2025/CVE-2025-32044.md | 2 +- cves/2025/CVE-2025-32375.md | 1 + cves/2025/CVE-2025-32395.md | 3 + cves/2025/CVE-2025-32407.md | 2 +- cves/2025/CVE-2025-3243.md | 1 + cves/2025/CVE-2025-32432.md | 10 + cves/2025/CVE-2025-32433.md | 17 ++ cves/2025/CVE-2025-32434.md | 4 +- cves/2025/CVE-2025-32462.md | 4 + cves/2025/CVE-2025-32463.md | 23 +++ cves/2025/CVE-2025-3248.md | 9 + cves/2025/CVE-2025-32711.md | 1 + cves/2025/CVE-2025-32966.md | 3 + cves/2025/CVE-2025-33053.md | 1 + cves/2025/CVE-2025-33073.md | 5 + cves/2025/CVE-2025-34028.md | 1 + cves/2025/CVE-2025-34037.md | 2 +- cves/2025/CVE-2025-34077.md | 1 + cves/2025/CVE-2025-34096.md | 2 +- cves/2025/CVE-2025-34157.md | 2 +- cves/2025/CVE-2025-34227.md | 2 +- cves/2025/CVE-2025-3464.md | 2 +- cves/2025/CVE-2025-3616.md | 2 +- cves/2025/CVE-2025-36911.md | 5 + cves/2025/CVE-2025-38001.md | 2 + cves/2025/CVE-2025-38089.md | 2 +- cves/2025/CVE-2025-38352.md | 5 +- cves/2025/CVE-2025-38501.md | 2 +- cves/2025/CVE-2025-38561.md | 2 +- cves/2025/CVE-2025-39247.md | 2 +- cves/2025/CVE-2025-39682.md | 2 +- cves/2025/CVE-2025-4123.md | 1 + cves/2025/CVE-2025-41242.md | 3 + cves/2025/CVE-2025-4138.md | 6 +- cves/2025/CVE-2025-4322.md | 1 + cves/2025/CVE-2025-43300.md | 2 + cves/2025/CVE-2025-4334.md | 1 + cves/2025/CVE-2025-4336.md | 2 +- cves/2025/CVE-2025-43564.md | 2 +- cves/2025/CVE-2025-43929.md | 2 +- cves/2025/CVE-2025-4396.md | 2 +- cves/2025/CVE-2025-43960.md | 2 +- cves/2025/CVE-2025-4404.md | 1 + cves/2025/CVE-2025-44608.md | 2 +- cves/2025/CVE-2025-44998.md | 2 +- cves/2025/CVE-2025-4517.md | 8 + cves/2025/CVE-2025-45619.md | 2 +- cves/2025/CVE-2025-45805.md | 2 +- cves/2025/CVE-2025-45809.md | 2 +- cves/2025/CVE-2025-4602.md | 2 +- cves/2025/CVE-2025-4603.md | 2 +- cves/2025/CVE-2025-46041.md | 2 +- cves/2025/CVE-2025-46157.md | 2 +- cves/2025/CVE-2025-46173.md | 2 +- cves/2025/CVE-2025-46203.md | 2 +- cves/2025/CVE-2025-46204.md | 2 +- cves/2025/CVE-2025-4632.md | 1 + cves/2025/CVE-2025-46701.md | 1 + cves/2025/CVE-2025-46721.md | 2 +- cves/2025/CVE-2025-46822.md | 1 + cves/2025/CVE-2025-47227.md | 3 +- cves/2025/CVE-2025-47273.md | 3 +- cves/2025/CVE-2025-47445.md | 2 +- cves/2025/CVE-2025-47549.md | 2 +- cves/2025/CVE-2025-47550.md | 2 +- cves/2025/CVE-2025-47812.md | 9 + cves/2025/CVE-2025-4796.md | 3 +- cves/2025/CVE-2025-47962.md | 2 +- cves/2025/CVE-2025-47987.md | 1 + cves/2025/CVE-2025-4802.md | 2 +- cves/2025/CVE-2025-48384.md | 3 + cves/2025/CVE-2025-48561.md | 2 +- cves/2025/CVE-2025-48734.md | 2 +- cves/2025/CVE-2025-48799.md | 1 + cves/2025/CVE-2025-48827.md | 1 + cves/2025/CVE-2025-49001.md | 3 + cves/2025/CVE-2025-49002.md | 3 +- cves/2025/CVE-2025-49091.md | 2 +- cves/2025/CVE-2025-49113.md | 2 + cves/2025/CVE-2025-49131.md | 2 +- cves/2025/CVE-2025-49132.md | 17 ++ cves/2025/CVE-2025-49144.md | 1 + cves/2025/CVE-2025-49493.md | 2 +- cves/2025/CVE-2025-49596.md | 1 + cves/2025/CVE-2025-49844.md | 13 ++ cves/2025/CVE-2025-50165.md | 2 +- cves/2025/CVE-2025-50168.md | 2 +- cves/2025/CVE-2025-50286.md | 3 +- cves/2025/CVE-2025-50460.md | 2 +- cves/2025/CVE-2025-50461.md | 2 +- cves/2025/CVE-2025-50472.md | 2 +- cves/2025/CVE-2025-50481.md | 2 +- cves/2025/CVE-2025-5058.md | 2 +- cves/2025/CVE-2025-50738.md | 2 +- cves/2025/CVE-2025-50754.md | 2 +- cves/2025/CVE-2025-50946.md | 2 +- cves/2025/CVE-2025-51040.md | 2 +- cves/2025/CVE-2025-51458.md | 2 +- cves/2025/CVE-2025-51471.md | 2 +- cves/2025/CVE-2025-51482.md | 1 + cves/2025/CVE-2025-51529.md | 2 +- cves/2025/CVE-2025-51586.md | 2 +- cves/2025/CVE-2025-51858.md | 2 +- cves/2025/CVE-2025-51862.md | 2 +- cves/2025/CVE-2025-51865.md | 2 +- cves/2025/CVE-2025-51867.md | 2 +- cves/2025/CVE-2025-51868.md | 2 +- cves/2025/CVE-2025-51869.md | 2 +- cves/2025/CVE-2025-52289.md | 2 +- cves/2025/CVE-2025-52488.md | 2 +- cves/2025/CVE-2025-52689.md | 2 +- cves/2025/CVE-2025-52913.md | 2 +- cves/2025/CVE-2025-52970.md | 1 + cves/2025/CVE-2025-53020.md | 2 +- cves/2025/CVE-2025-53367.md | 1 + cves/2025/CVE-2025-53558.md | 2 +- cves/2025/CVE-2025-53690.md | 1 + cves/2025/CVE-2025-53770.md | 5 + cves/2025/CVE-2025-53772.md | 1 + cves/2025/CVE-2025-53779.md | 2 +- cves/2025/CVE-2025-54068.md | 7 +- cves/2025/CVE-2025-54123.md | 7 +- cves/2025/CVE-2025-54135.md | 1 + cves/2025/CVE-2025-5419.md | 1 + cves/2025/CVE-2025-54236.md | 5 +- cves/2025/CVE-2025-54253.md | 1 + cves/2025/CVE-2025-54309.md | 1 + cves/2025/CVE-2025-54352.md | 2 + cves/2025/CVE-2025-54416.md | 2 +- cves/2025/CVE-2025-54424.md | 1 + cves/2025/CVE-2025-54574.md | 2 +- cves/2025/CVE-2025-54782.md | 3 +- cves/2025/CVE-2025-54874.md | 2 +- cves/2025/CVE-2025-54918.md | 1 + cves/2025/CVE-2025-54939.md | 2 +- cves/2025/CVE-2025-55182.md | 270 +++++++++++++++++++++++++ cves/2025/CVE-2025-55188.md | 1 + cves/2025/CVE-2025-55319.md | 2 +- cves/2025/CVE-2025-5548.md | 21 ++ cves/2025/CVE-2025-55575.md | 2 +- cves/2025/CVE-2025-55763.md | 2 +- cves/2025/CVE-2025-56803.md | 2 +- cves/2025/CVE-2025-57392.md | 2 +- cves/2025/CVE-2025-5777.md | 4 + cves/2025/CVE-2025-57819.md | 13 ++ cves/2025/CVE-2025-57833.md | 3 + cves/2025/CVE-2025-58434.md | 13 +- cves/2025/CVE-2025-5878.md | 2 +- cves/2025/CVE-2025-5915.md | 2 +- cves/2025/CVE-2025-59287.md | 16 ++ cves/2025/CVE-2025-59528.md | 11 + cves/2025/CVE-2025-59536.md | 2 + cves/2025/CVE-2025-5961.md | 1 + cves/2025/CVE-2025-6018.md | 11 + cves/2025/CVE-2025-6019.md | 7 + cves/2025/CVE-2025-6202.md | 2 +- cves/2025/CVE-2025-6220.md | 2 +- cves/2025/CVE-2025-6440.md | 6 + cves/2025/CVE-2025-6554.md | 4 + cves/2025/CVE-2025-6563.md | 2 +- cves/2025/CVE-2025-66034.md | 4 + cves/2025/CVE-2025-66398.md | 1 + cves/2025/CVE-2025-68921.md | 2 + cves/2025/CVE-2025-69212.md | 10 + cves/2025/CVE-2025-6934.md | 5 + cves/2025/CVE-2025-7441.md | 3 +- cves/2025/CVE-2025-7558.md | 2 +- cves/2025/CVE-2025-7771.md | 7 + cves/2025/CVE-2025-7775.md | 1 + cves/2025/CVE-2025-7892.md | 2 +- cves/2025/CVE-2025-8061.md | 4 +- cves/2025/CVE-2025-8081.md | 2 +- cves/2025/CVE-2025-8088.md | 10 + cves/2025/CVE-2025-8220.md | 2 +- cves/2025/CVE-2025-8671.md | 1 + cves/2025/CVE-2025-9074.md | 13 ++ cves/2025/CVE-2025-9215.md | 2 +- cves/2025/CVE-2025-9216.md | 2 +- cves/2025/CVE-2025-9242.md | 3 +- cves/2025/CVE-2025-9491.md | 2 +- cves/2025/CVE-2025-9933.md | 2 +- cves/2025/CVE-2025-9951.md | 2 +- cves/2025/CVE-2025-9961.md | 2 +- cves/2025/CVE-2025-9983.md | 2 +- cves/2026/CVE-2026-0073.md | 3 + cves/2026/CVE-2026-0257.md | 1 + cves/2026/CVE-2026-0300.md | 1 + cves/2026/CVE-2026-10036.md | 2 +- cves/2026/CVE-2026-10580.md | 1 + cves/2026/CVE-2026-11961.md | 2 +- cves/2026/CVE-2026-1312.md | 1 + cves/2026/CVE-2026-1337.md | 3 +- cves/2026/CVE-2026-13768.md | 1 + cves/2026/CVE-2026-14483.md | 1 + cves/2026/CVE-2026-14894.md | 1 + cves/2026/CVE-2026-15038.md | 2 +- cves/2026/CVE-2026-15409.md | 1 + cves/2026/CVE-2026-15410.md | 2 +- cves/2026/CVE-2026-15748.md | 1 + cves/2026/CVE-2026-17544.md | 1 + cves/2026/CVE-2026-18366.md | 1 + cves/2026/CVE-2026-18963.md | 2 + cves/2026/CVE-2026-19193.md | 2 +- cves/2026/CVE-2026-19195.md | 2 +- cves/2026/CVE-2026-19478.md | 1 + cves/2026/CVE-2026-19500.md | 2 +- cves/2026/CVE-2026-19501.md | 2 +- cves/2026/CVE-2026-20127.md | 1 + cves/2026/CVE-2026-20253.md | 1 + cves/2026/CVE-2026-20841.md | 1 + cves/2026/CVE-2026-20896.md | 1 + cves/2026/CVE-2026-21440.md | 1 + cves/2026/CVE-2026-21509.md | 1 + cves/2026/CVE-2026-21858.md | 3 + cves/2026/CVE-2026-21962.md | 2 + cves/2026/CVE-2026-2256.md | 1 + cves/2026/CVE-2026-22679.md | 2 +- cves/2026/CVE-2026-22732.md | 1 + cves/2026/CVE-2026-22777.md | 3 + cves/2026/CVE-2026-23111.md | 1 + cves/2026/CVE-2026-23552.md | 2 +- cves/2026/CVE-2026-24061.md | 7 + cves/2026/CVE-2026-2441.md | 2 + cves/2026/CVE-2026-24858.md | 1 + cves/2026/CVE-2026-25177.md | 1 + cves/2026/CVE-2026-25253.md | 3 + cves/2026/CVE-2026-25747.md | 1 + cves/2026/CVE-2026-25860.md | 2 +- cves/2026/CVE-2026-26198.md | 1 + cves/2026/CVE-2026-26211.md | 2 +- cves/2026/CVE-2026-2631.md | 2 +- cves/2026/CVE-2026-2636.md | 1 + cves/2026/CVE-2026-27944.md | 4 + cves/2026/CVE-2026-29000.md | 1 + cves/2026/CVE-2026-29519.md | 2 +- cves/2026/CVE-2026-29923.md | 1 + cves/2026/CVE-2026-3055.md | 1 + cves/2026/CVE-2026-31431.md | 6 + cves/2026/CVE-2026-31816.md | 3 + cves/2026/CVE-2026-34197.md | 5 + cves/2026/CVE-2026-34486.md | 3 + cves/2026/CVE-2026-3844.md | 1 + cves/2026/CVE-2026-39363.md | 3 + cves/2026/CVE-2026-39808.md | 1 + cves/2026/CVE-2026-39987.md | 2 + cves/2026/CVE-2026-40369.md | 1 + cves/2026/CVE-2026-4106.md | 2 +- cves/2026/CVE-2026-41089.md | 1 + cves/2026/CVE-2026-41940.md | 11 + cves/2026/CVE-2026-42167.md | 2 + cves/2026/CVE-2026-42530.md | 1 + cves/2026/CVE-2026-42588.md | 1 + cves/2026/CVE-2026-42945.md | 2 + cves/2026/CVE-2026-43494.md | 3 + cves/2026/CVE-2026-43499.md | 4 + cves/2026/CVE-2026-43501.md | 1 + cves/2026/CVE-2026-44401.md | 2 +- cves/2026/CVE-2026-45185.md | 1 + cves/2026/CVE-2026-45447.md | 1 + cves/2026/CVE-2026-45829.md | 1 + cves/2026/CVE-2026-4631.md | 1 + cves/2026/CVE-2026-46331.md | 1 + cves/2026/CVE-2026-47103.md | 2 +- cves/2026/CVE-2026-47117.md | 2 +- cves/2026/CVE-2026-48611.md | 1 + cves/2026/CVE-2026-4885.md | 1 + cves/2026/CVE-2026-48907.md | 2 + cves/2026/CVE-2026-48908.md | 1 + cves/2026/CVE-2026-48909.md | 1 + cves/2026/CVE-2026-48939.md | 2 + cves/2026/CVE-2026-49468.md | 1 + cves/2026/CVE-2026-5027.md | 1 + cves/2026/CVE-2026-5118.md | 3 + cves/2026/CVE-2026-53753.md | 1 + cves/2026/CVE-2026-54121.md | 1 + cves/2026/CVE-2026-56121.md | 2 + cves/2026/CVE-2026-56290.md | 2 + cves/2026/CVE-2026-56291.md | 2 + cves/2026/CVE-2026-56705.md | 1 + cves/2026/CVE-2026-57850.md | 2 +- cves/2026/CVE-2026-58048.md | 1 + cves/2026/CVE-2026-58138.md | 2 + cves/2026/CVE-2026-60137.md | 2 + cves/2026/CVE-2026-60206.md | 3 + cves/2026/CVE-2026-6111.md | 2 +- cves/2026/CVE-2026-61511.md | 1 + cves/2026/CVE-2026-63030.md | 8 + cves/2026/CVE-2026-6307.md | 2 + cves/2026/CVE-2026-63077.md | 1 + cves/2026/CVE-2026-64531.md | 1 + cves/2026/CVE-2026-64600.md | 2 + cves/2026/CVE-2026-64638.md | 1 + cves/2026/CVE-2026-67599.md | 2 +- cves/2026/CVE-2026-67620.md | 2 +- cves/2026/CVE-2026-6875.md | 1 + cves/2026/CVE-2026-69098.md | 2 +- cves/2026/CVE-2026-72844.md | 2 +- cves/2026/CVE-2026-7299.md | 2 +- cves/2026/CVE-2026-7482.md | 1 + cves/2026/CVE-2026-76070.md | 2 +- cves/2026/CVE-2026-76071.md | 2 +- cves/2026/CVE-2026-76639.md | 2 +- cves/2026/CVE-2026-7669.md | 2 +- cves/2026/CVE-2026-8181.md | 3 + cves/2026/CVE-2026-8206.md | 1 + cves/2026/CVE-2026-8732.md | 2 + cves/2026/CVE-2026-9082.md | 1 + cves/2026/CVE-2026-9147.md | 2 +- cves/2026/CVE-2026-9198.md | 2 + cves/2026/CVE-2026-9271.md | 2 +- scripts/sync_exploits.py | 31 ++- scripts/sync_pocingithub.py | 194 ++++++++++++++++++ 1670 files changed, 3791 insertions(+), 720 deletions(-) create mode 100644 .github/workflows/sync_pocingithub.yml create mode 100644 scripts/sync_pocingithub.py diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml index f946ba518de..be527dafba0 100644 --- a/.github/workflows/site.yml +++ b/.github/workflows/site.yml @@ -11,6 +11,7 @@ on: - Sync Exploit Archives - Hot CVEs List - Audit PoC Links + - Sync PoC-in-GitHub types: - completed push: diff --git a/.github/workflows/sync_pocingithub.yml b/.github/workflows/sync_pocingithub.yml new file mode 100644 index 00000000000..1796480aa54 --- /dev/null +++ b/.github/workflows/sync_pocingithub.yml @@ -0,0 +1,57 @@ +name: Sync PoC-in-GitHub + +on: + schedule: + - cron: '10 5 * * 3' + workflow_dispatch: + +permissions: + contents: write + +concurrency: + group: repository-updates + cancel-in-progress: false + +jobs: + sync: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v7 + + - name: Set up Python + uses: actions/setup-python@v7 + with: + python-version: '3.13' + + # Every candidate is judged again each week rather than remembered as + # rejected: a repository that was an empty shell in March is often a + # working exploit by June, and re-reading 6,800 of them costs five + # minutes. + - name: Judge upstream PoC candidates + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: python3 scripts/sync_pocingithub.py + + - name: Check for changes and commit + run: | + git config user.name 'CVE-BOT' + git config user.email 'cve@codepwn.win' + git add --all -- cves/ + + if git diff --cached --quiet; then + echo "No changes to commit" + exit 0 + fi + + git commit -m "Add PoC repositories from upstream collection $(date -u +'%Y-%m-%d')" + + for attempt in 1 2 3; do + if git push origin HEAD:main; then + exit 0 + fi + echo "Push rejected; replaying onto the current main (attempt $attempt)" + git fetch --unshallow origin main 2>/dev/null || git fetch origin main + git rebase FETCH_HEAD + done + exit 1 diff --git a/cves/1999/CVE-1999-0524.md b/cves/1999/CVE-1999-0524.md index b63fee7b70a..e9a258cce51 100644 --- a/cves/1999/CVE-1999-0524.md +++ b/cves/1999/CVE-1999-0524.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Ransc0rp1on/ICMP-Timestamp-POC - https://github.com/threatlabindonesia/CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit +- https://github.com/biontdv/CVE-1999-0524-POC diff --git a/cves/1999/CVE-1999-0678.md b/cves/1999/CVE-1999-0678.md index 0335839af64..a14c9774e7a 100644 --- a/cves/1999/CVE-1999-0678.md +++ b/cves/1999/CVE-1999-0678.md @@ -13,7 +13,7 @@ A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /us No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/lto7777777/CVE-1999-0678 #### ExploitDB - https://www.exploit-db.com/exploits/19253 diff --git a/cves/2001/CVE-2001-0680.md b/cves/2001/CVE-2001-0680.md index 25ef87e2b70..ae68f0f60a6 100644 --- a/cves/2001/CVE-2001-0680.md +++ b/cves/2001/CVE-2001-0680.md @@ -13,5 +13,5 @@ Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 al No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0680 diff --git a/cves/2001/CVE-2001-0758.md b/cves/2001/CVE-2001-0758.md index 2c9db8ea4a9..73f0ee8de15 100644 --- a/cves/2001/CVE-2001-0758.md +++ b/cves/2001/CVE-2001-0758.md @@ -13,5 +13,5 @@ Directory traversal vulnerability in Shambala 4.5 allows remote attackers to esc - http://www.securiteam.com/windowsntfocus/5SP011P4KC.html #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0758 diff --git a/cves/2001/CVE-2001-0932.md b/cves/2001/CVE-2001-0932.md index 18bdbca15f8..8919827691f 100644 --- a/cves/2001/CVE-2001-0932.md +++ b/cves/2001/CVE-2001-0932.md @@ -13,7 +13,7 @@ Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cau - http://marc.info/?l=bugtraq&m=100698397818175&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0932 #### ExploitDB - https://www.exploit-db.com/exploits/21163 diff --git a/cves/2001/CVE-2001-0934.md b/cves/2001/CVE-2001-0934.md index f59ede0ae3a..5ea5f24bcaf 100644 --- a/cves/2001/CVE-2001-0934.md +++ b/cves/2001/CVE-2001-0934.md @@ -13,5 +13,5 @@ Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical pa - http://marc.info/?l=bugtraq&m=100698397818175&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-0934 diff --git a/cves/2001/CVE-2001-1442.md b/cves/2001/CVE-2001-1442.md index 5a9faa3de5f..7aabc03c322 100644 --- a/cves/2001/CVE-2001-1442.md +++ b/cves/2001/CVE-2001-1442.md @@ -13,7 +13,7 @@ Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2001-1442 #### ExploitDB - https://www.exploit-db.com/exploits/20778 diff --git a/cves/2002/CVE-2002-0082.md b/cves/2002/CVE-2002-0082.md index 950e7e415e7..d500af5de9b 100644 --- a/cves/2002/CVE-2002-0082.md +++ b/cves/2002/CVE-2002-0082.md @@ -15,6 +15,7 @@ The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SS #### Github - https://github.com/Nishant-Pall/Kioptrix-exploit - https://github.com/ratiros01/CVE-2002-0082 +- https://github.com/anilkashyap01/Binary-Exploitation-and-Kernel-Escalation #### ExploitDB - https://www.exploit-db.com/exploits/21671 diff --git a/cves/2002/CVE-2002-0200.md b/cves/2002/CVE-2002-0200.md index c032b7b4ff4..e199269c4a7 100644 --- a/cves/2002/CVE-2002-0200.md +++ b/cves/2002/CVE-2002-0200.md @@ -13,5 +13,5 @@ Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial o - http://marc.info/?l=bugtraq&m=101174569103289&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0200 diff --git a/cves/2002/CVE-2002-0201.md b/cves/2002/CVE-2002-0201.md index 5a5519c6b6d..a9ac38b2244 100644 --- a/cves/2002/CVE-2002-0201.md +++ b/cves/2002/CVE-2002-0201.md @@ -13,7 +13,7 @@ Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial o - http://marc.info/?l=bugtraq&m=101174569103289&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0201 #### ExploitDB - https://www.exploit-db.com/exploits/21237 diff --git a/cves/2002/CVE-2002-0288.md b/cves/2002/CVE-2002-0288.md index c6c9de3e636..a84904125c4 100644 --- a/cves/2002/CVE-2002-0288.md +++ b/cves/2002/CVE-2002-0288.md @@ -13,7 +13,7 @@ Directory traversal vulnerability in Phusion web server 1.0 allows remote attack - http://marc.info/?l=bugtraq&m=101408906001958&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0288 #### ExploitDB - https://www.exploit-db.com/exploits/21292 diff --git a/cves/2002/CVE-2002-0289.md b/cves/2002/CVE-2002-0289.md index fb17b185a11..13c84e87fc5 100644 --- a/cves/2002/CVE-2002-0289.md +++ b/cves/2002/CVE-2002-0289.md @@ -13,7 +13,7 @@ Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a den - http://marc.info/?l=bugtraq&m=101408906001958&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0289 #### ExploitDB - https://www.exploit-db.com/exploits/21294 diff --git a/cves/2002/CVE-2002-0346.md b/cves/2002/CVE-2002-0346.md index 920a7d0d34b..a7b20f53dc6 100644 --- a/cves/2002/CVE-2002-0346.md +++ b/cves/2002/CVE-2002-0346.md @@ -13,5 +13,5 @@ Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to ex - http://marc.info/?l=bugtraq&m=101495944202452&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0346 diff --git a/cves/2002/CVE-2002-0347.md b/cves/2002/CVE-2002-0347.md index 83bb31ba3fb..ed710841792 100644 --- a/cves/2002/CVE-2002-0347.md +++ b/cves/2002/CVE-2002-0347.md @@ -13,5 +13,5 @@ Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to rea - http://marc.info/?l=bugtraq&m=101495944202452&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0347 diff --git a/cves/2002/CVE-2002-0348.md b/cves/2002/CVE-2002-0348.md index aab358fb64b..61c27871651 100644 --- a/cves/2002/CVE-2002-0348.md +++ b/cves/2002/CVE-2002-0348.md @@ -13,5 +13,5 @@ service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service - http://marc.info/?l=bugtraq&m=101495944202452&w=2 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0348 diff --git a/cves/2002/CVE-2002-0448.md b/cves/2002/CVE-2002-0448.md index 3715d18a44f..faa78ec68c2 100644 --- a/cves/2002/CVE-2002-0448.md +++ b/cves/2002/CVE-2002-0448.md @@ -13,7 +13,7 @@ Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denia No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0448 #### ExploitDB - https://www.exploit-db.com/exploits/21336 diff --git a/cves/2002/CVE-2002-0991.md b/cves/2002/CVE-2002-0991.md index 489d736d188..71c43112b99 100644 --- a/cves/2002/CVE-2002-0991.md +++ b/cves/2002/CVE-2002-0991.md @@ -13,7 +13,7 @@ Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and ea No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2002-0991 #### ExploitDB - https://www.exploit-db.com/exploits/21577 diff --git a/cves/2002/CVE-2002-1120.md b/cves/2002/CVE-2002-1120.md index 8ffdf992b6b..d7b2571a5c8 100644 --- a/cves/2002/CVE-2002-1120.md +++ b/cves/2002/CVE-2002-1120.md @@ -13,7 +13,7 @@ Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to - https://www.exploit-db.com/exploits/16770/ #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2002-1120 #### ExploitDB - https://www.exploit-db.com/exploits/16770 diff --git a/cves/2003/CVE-2003-0127.md b/cves/2003/CVE-2003-0127.md index 990d1c99fc5..5b372061ff1 100644 --- a/cves/2003/CVE-2003-0127.md +++ b/cves/2003/CVE-2003-0127.md @@ -13,7 +13,7 @@ The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2 No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/anilkashyap01/Binary-Exploitation-and-Kernel-Escalation #### ExploitDB - https://www.exploit-db.com/exploits/22363 diff --git a/cves/2003/CVE-2003-0264.md b/cves/2003/CVE-2003-0264.md index aab73e0451e..1445660fab2 100644 --- a/cves/2003/CVE-2003-0264.md +++ b/cves/2003/CVE-2003-0264.md @@ -20,6 +20,7 @@ Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execut - https://github.com/pwncone/CVE-2003-0264-SLmail-5.5 - https://github.com/vrikodar/CVE-2003-0264_EXPLOIT - https://github.com/war4uthor/CVE-2003-0264 +- https://github.com/TheMalwareGuardian/CVE-2003-0264 #### ExploitDB - https://www.exploit-db.com/exploits/16399 diff --git a/cves/2004/CVE-2004-2549.md b/cves/2004/CVE-2004-2549.md index 5c159c5ff14..553ca0c9905 100644 --- a/cves/2004/CVE-2004-2549.md +++ b/cves/2004/CVE-2004-2549.md @@ -13,7 +13,7 @@ Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2004-2549 #### ExploitDB - https://www.exploit-db.com/exploits/23786 diff --git a/cves/2004/CVE-2004-2687.md b/cves/2004/CVE-2004-2687.md index 422c0ec61db..27986215991 100644 --- a/cves/2004/CVE-2004-2687.md +++ b/cves/2004/CVE-2004-2687.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/k4u5h41/distccd_rce_CVE-2004-2687 - https://github.com/n3ov4n1sh/distccd_rce_CVE-2004-2687 - https://github.com/n3rdh4x0r/distccd_rce_CVE-2004-2687 +- https://github.com/nulltrace1336/Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-2687.yaml diff --git a/cves/2005/CVE-2005-0575.md b/cves/2005/CVE-2005-0575.md index 2da516618ea..59590ee709c 100644 --- a/cves/2005/CVE-2005-0575.md +++ b/cves/2005/CVE-2005-0575.md @@ -16,6 +16,7 @@ Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers #### Github - https://github.com/3t3rn4lv01d/CVE-2005-0575 - https://github.com/MayaOfVeil/CVE-2005-0575 +- https://github.com/bluedragonsecurity/CVE-2005-0575-knet-exploit #### ExploitDB - https://www.exploit-db.com/exploits/24950 diff --git a/cves/2006/CVE-2006-3392.md b/cves/2006/CVE-2006-3392.md index 87f25d474a1..0cbdf6f1991 100644 --- a/cves/2006/CVE-2006-3392.md +++ b/cves/2006/CVE-2006-3392.md @@ -22,6 +22,7 @@ No PoCs from references. - https://github.com/gb21oc/ExploitWebmin - https://github.com/kernel-cyber/CVE-2006-3392 - https://github.com/windsormoreira/CVE-2006-3392 +- https://github.com/Adel-hx0d/CVE-2006-3392 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-3392.yaml diff --git a/cves/2007/CVE-2007-1567.md b/cves/2007/CVE-2007-1567.md index 2d57d9aec7b..2de1d521eb8 100644 --- a/cves/2007/CVE-2007-1567.md +++ b/cves/2007/CVE-2007-1567.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/war4uthor/CVE-2007-1567 +- https://github.com/TheMalwareGuardian/CVE-2007-1567 #### ExploitDB - https://www.exploit-db.com/exploits/3570 diff --git a/cves/2007/CVE-2007-2447.md b/cves/2007/CVE-2007-2447.md index 199bb35d453..e580d770378 100644 --- a/cves/2007/CVE-2007-2447.md +++ b/cves/2007/CVE-2007-2447.md @@ -61,6 +61,11 @@ The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote - https://github.com/xbufu/CVE-2007-2447 - https://github.com/xlcc4096/exploit-CVE-2007-2447 - https://github.com/ygbull/Capstone +- https://github.com/Daviddoctor/Samba-CVE-2007-2447-Exploit-Username-Map-Script +- https://github.com/abdulsaabir/CVE-2007-2447 +- https://github.com/nulltrace1336/Samba-Exploit-CVE-2007-2447 +- https://github.com/r3vpwnx/CVE-2007-2447 +- https://github.com/vig9610/Exploiting-Samba-on-Metasploitable-2 #### ExploitDB - https://www.exploit-db.com/exploits/16320 diff --git a/cves/2007/CVE-2007-3831.md b/cves/2007/CVE-2007-3831.md index f552a8f2fd8..0a567f21186 100644 --- a/cves/2007/CVE-2007-3831.md +++ b/cves/2007/CVE-2007-3831.md @@ -13,5 +13,5 @@ PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 an No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2007-3831 diff --git a/cves/2007/CVE-2007-4560.md b/cves/2007/CVE-2007-4560.md index 408d16bde69..d035ec16c32 100644 --- a/cves/2007/CVE-2007-4560.md +++ b/cves/2007/CVE-2007-4560.md @@ -15,6 +15,7 @@ clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remot #### Github - https://github.com/0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution - https://github.com/Sic4rio/-Sendmail-with-clamav-milter-0.91.2---Remote-Command-Execution +- https://github.com/Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-4560 #### ExploitDB - https://www.exploit-db.com/exploits/16924 diff --git a/cves/2007/CVE-2007-5036.md b/cves/2007/CVE-2007-5036.md index 9424c3be990..7016c44dc95 100644 --- a/cves/2007/CVE-2007-5036.md +++ b/cves/2007/CVE-2007-5036.md @@ -13,7 +13,7 @@ Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 - https://www.exploit-db.com/exploits/4426 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2007-5036 #### ExploitDB - https://www.exploit-db.com/exploits/4426 diff --git a/cves/2007/CVE-2007-6638.md b/cves/2007/CVE-2007-6638.md index 0f473f64d89..fcf44c04621 100644 --- a/cves/2007/CVE-2007-6638.md +++ b/cves/2007/CVE-2007-6638.md @@ -13,7 +13,7 @@ March Networks DVR 3204 stores sensitive information under the web root with ins - https://www.exploit-db.com/exploits/4797 #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2007-6638 #### ExploitDB - https://www.exploit-db.com/exploits/4797 diff --git a/cves/2008/CVE-2008-0166.md b/cves/2008/CVE-2008-0166.md index 454e4712a5c..ac3d6b9a622 100644 --- a/cves/2008/CVE-2008-0166.md +++ b/cves/2008/CVE-2008-0166.md @@ -24,6 +24,7 @@ OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating system - https://github.com/demining/Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166 - https://github.com/g0tmi1k/debian-ssh - https://github.com/shn3rd/OpenSSL-PRNG +- https://github.com/Faizan8232403/CVE-Exploit-Research-Development #### ExploitDB - https://www.exploit-db.com/exploits/5720 diff --git a/cves/2008/CVE-2008-1930.md b/cves/2008/CVE-2008-1930.md index bf8bf297c4e..6c47569db15 100644 --- a/cves/2008/CVE-2008-1930.md +++ b/cves/2008/CVE-2008-1930.md @@ -13,7 +13,7 @@ The cookie authentication method in WordPress 2.5 relies on a hash of a concaten No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HeisenbergH4X/CVE-2008-1930 #### Nuclei - https://github.com/topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2008/CVE-2008-1930-wordpress-0a16651c-613b-462b-9d73-10a74892ecdc.yaml diff --git a/cves/2008/CVE-2008-5161.md b/cves/2008/CVE-2008-5161.md index eadee1c69f0..6ae44238e33 100644 --- a/cves/2008/CVE-2008-5161.md +++ b/cves/2008/CVE-2008-5161.md @@ -17,6 +17,7 @@ Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Conne - https://github.com/jarial-sec/OpenSSH_4.7p1-Exploit - https://github.com/mahaoffsec/OpenSSH_4.7p1-Exploit - https://github.com/sec-jarial/OpenSSH_4.7p1-Exploit +- https://github.com/talha3117/OpenSSH-4.7p1-CVE-2008-5161-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_version.rb diff --git a/cves/2008/CVE-2008-6827.md b/cves/2008/CVE-2008-6827.md index b27a2003b80..31f6f5e19cd 100644 --- a/cves/2008/CVE-2008-6827.md +++ b/cves/2008/CVE-2008-6827.md @@ -13,5 +13,5 @@ The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deploym No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2008-6827 diff --git a/cves/2009/CVE-2009-0473.md b/cves/2009/CVE-2009-0473.md index e7e94744de6..9183f62740b 100644 --- a/cves/2009/CVE-2009-0473.md +++ b/cves/2009/CVE-2009-0473.md @@ -13,5 +13,5 @@ Open redirect vulnerability in the web interface in the Rockwell Automation Cont No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/akbarq/CVE-2009-0473-check diff --git a/cves/2009/CVE-2009-3103.md b/cves/2009/CVE-2009-3103.md index b4b292cb009..2864de001f2 100644 --- a/cves/2009/CVE-2009-3103.md +++ b/cves/2009/CVE-2009-3103.md @@ -19,6 +19,8 @@ Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft - https://github.com/ankh2054/python-exploits - https://github.com/joshchalabi/SMBv2-Exploit-PrivEsc - https://github.com/sec13b/ms09-050_CVE-2009-3103 +- https://github.com/afifudinmtop/CVE-2009-3103 +- https://github.com/nicolasdamians/ms09-050-CVE-2009-3103-exploit #### ExploitDB - https://www.exploit-db.com/exploits/16363 diff --git a/cves/2009/CVE-2009-4118.md b/cves/2009/CVE-2009-4118.md index 9accbed7562..8b990b62eb4 100644 --- a/cves/2009/CVE-2009-4118.md +++ b/cves/2009/CVE-2009-4118.md @@ -13,7 +13,7 @@ The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisc - http://packetstormsecurity.org/0911-exploits/sybsec-adv17.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2009-4118 #### ExploitDB - https://www.exploit-db.com/exploits/10190 diff --git a/cves/2009/CVE-2009-4623.md b/cves/2009/CVE-2009-4623.md index 979f8655282..2b649c75361 100644 --- a/cves/2009/CVE-2009-4623.md +++ b/cves/2009/CVE-2009-4623.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/MonsempesSamuel/CVE-2009-4623 - https://github.com/hupe1980/CVE-2009-4623 - https://github.com/kernel-cyber/CVE-2009-4623 +- https://github.com/sammonsempes/CVE-2009-4623 #### ExploitDB - https://www.exploit-db.com/exploits/9623 diff --git a/cves/2010/CVE-2010-0219.md b/cves/2010/CVE-2010-0219.md index ed174a6a536..b036caabcdb 100644 --- a/cves/2010/CVE-2010-0219.md +++ b/cves/2010/CVE-2010-0219.md @@ -15,6 +15,7 @@ Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, #### Github - https://github.com/veritas-rt/CVE-2010-0219 +- https://github.com/vvts-alpha/CVE-2010-0219 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0219.yaml diff --git a/cves/2010/CVE-2010-2075.md b/cves/2010/CVE-2010-2075.md index 27f99b235ea..dd515cfc1e2 100644 --- a/cves/2010/CVE-2010-2075.md +++ b/cves/2010/CVE-2010-2075.md @@ -22,6 +22,8 @@ No PoCs from references. - https://github.com/chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution - https://github.com/djbender7/cybersecurity-labs - https://github.com/kevinpdicks/UnrealIRCD-3.2.8.1-RCE +- https://github.com/Tc-XoNoR/CVE-2010-2075 +- https://github.com/earthbendergara/unrealircd3.2.8.1-local-exploit #### ExploitDB - https://www.exploit-db.com/exploits/16922 diff --git a/cves/2010/CVE-2010-2861.md b/cves/2010/CVE-2010-2861.md index 5ca51658ccf..5448d3de5eb 100644 --- a/cves/2010/CVE-2010-2861.md +++ b/cves/2010/CVE-2010-2861.md @@ -15,7 +15,7 @@ Multiple directory traversal vulnerabilities in the administrator console in Ado - http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/ #### Github -No PoCs found on GitHub currently. +- https://github.com/greysneakthief/14641-v2 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2861.yaml @@ -26,3 +26,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/coldfusion_locale_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2010-2861 diff --git a/cves/2010/CVE-2010-3863.md b/cves/2010/CVE-2010-3863.md index b2e3b6a9305..c9768da4a52 100644 --- a/cves/2010/CVE-2010-3863.md +++ b/cves/2010/CVE-2010-3863.md @@ -13,10 +13,13 @@ Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sh1inroot-alt/shiro-cve-2010-3863 #### ExploitDB - https://www.exploit-db.com/exploits/34952 #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/CVE-2010-3863.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2010-3863 diff --git a/cves/2011/CVE-2011-1473.md b/cves/2011/CVE-2011-1473.md index 303835ad4fa..d0875fcd6c1 100644 --- a/cves/2011/CVE-2011-1473.md +++ b/cves/2011/CVE-2011-1473.md @@ -15,4 +15,5 @@ OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client #### Github - https://github.com/zjt674449039/cve-2011-1473 +- https://github.com/khaledibnalwalid/CVE-2011-1473-POC diff --git a/cves/2011/CVE-2011-1485.md b/cves/2011/CVE-2011-1485.md index 5e033712a54..980b5444010 100644 --- a/cves/2011/CVE-2011-1485.md +++ b/cves/2011/CVE-2011-1485.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/Pashkela/CVE-2011-1485 +- https://github.com/bluedragonsecurity/CVE-2011-1485-pkexec-exploit #### ExploitDB - https://www.exploit-db.com/exploits/35021 diff --git a/cves/2011/CVE-2011-1571.md b/cves/2011/CVE-2011-1571.md index e18dc0c67ad..79e6771c5be 100644 --- a/cves/2011/CVE-2011-1571.md +++ b/cves/2011/CVE-2011-1571.md @@ -15,6 +15,7 @@ Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community #### Github - https://github.com/noobpk/CVE-2011-1571 +- https://github.com/yazgx97/CVE-2011-1571 #### ExploitDB - https://www.exploit-db.com/exploits/18715 diff --git a/cves/2011/CVE-2011-2523.md b/cves/2011/CVE-2011-2523.md index da9fb0528ea..70165712f6b 100644 --- a/cves/2011/CVE-2011-2523.md +++ b/cves/2011/CVE-2011-2523.md @@ -80,6 +80,15 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which - https://github.com/tarikemal/exploit-ftp-samba - https://github.com/thanawut2903/Port-21-tcp-vsftpd-2.3.4-exploit - https://github.com/vaishnavucv/CVE-2011-2523 +- https://github.com/ByteForgeFr/CVE-2011-2523 +- https://github.com/Chathura123git/ethical-hacking-CVE-2011-2523 +- https://github.com/Dahalsamir/CVE-2011-2523-exploit +- https://github.com/Gvln-S/CVE-2011-2523 +- https://github.com/H4R335HR/vsftpd-234-backdoor +- https://github.com/IvoAlbacete/Kali-Metasploitable +- https://github.com/RinAliyeva/metasploitable2-vsftpd-exploitation +- https://github.com/brettsm/vsftpd2.3.4-backdoor-exploit +- https://github.com/tshaq17/vsftpd-2.3.4---Backdoor-Command-Execution #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml diff --git a/cves/2011/CVE-2011-3192.md b/cves/2011/CVE-2011-3192.md index 6633a4e41c3..595e0a0724a 100644 --- a/cves/2011/CVE-2011-3192.md +++ b/cves/2011/CVE-2011-3192.md @@ -19,6 +19,7 @@ The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and - https://github.com/r3p3r/1N3-Exploits - https://github.com/stcmjp/cve-2011-3192 - https://github.com/tkisason/KillApachePy +- https://github.com/bluedragonsecurity/CVE-2011-3192-apache-exploit #### ExploitDB - https://www.exploit-db.com/exploits/18221 diff --git a/cves/2012/CVE-2012-1803.md b/cves/2012/CVE-2012-1803.md index bbb6af650a3..174118f9563 100644 --- a/cves/2012/CVE-2012-1803.md +++ b/cves/2012/CVE-2012-1803.md @@ -13,7 +13,7 @@ RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/x3roxismygood/CVE-2012-1803 #### ExploitDB - https://www.exploit-db.com/exploits/18779 diff --git a/cves/2012/CVE-2012-1823.md b/cves/2012/CVE-2012-1823.md index 41235570241..9f52acff0f9 100644 --- a/cves/2012/CVE-2012-1823.md +++ b/cves/2012/CVE-2012-1823.md @@ -22,6 +22,8 @@ No PoCs from references. - https://github.com/drone789/CVE-2012-1823 - https://github.com/infodox/exploits - https://github.com/zomasec/CVE-2024-4577 +- https://github.com/K3ysTr0K3R/CVE-2012-1823 +- https://github.com/tryj/CVE-2012-1823---PHP-CGI---RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1823.yaml @@ -34,3 +36,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_cgi_arg_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2012-1823 diff --git a/cves/2012/CVE-2012-2122.md b/cves/2012/CVE-2012-2122.md index aee2e68d300..d5b13482720 100644 --- a/cves/2012/CVE-2012-2122.md +++ b/cves/2012/CVE-2012-2122.md @@ -17,6 +17,7 @@ No PoCs from references. - https://github.com/subinyy/docker_CVE_2012_2122 - https://github.com/yunkihong-dev/Vulhub - https://github.com/zhangkaibin0921/CVE-2012-2122 +- https://github.com/K3ysTr0K3R/CVE-2012-2122 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2012/CVE-2012-2122.yaml @@ -26,3 +27,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_authbypass_hashdump.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/mysql/CVE-2012-2122 diff --git a/cves/2012/CVE-2012-2982.md b/cves/2012/CVE-2012-2982.md index 22e7dfa80ec..db9b333202f 100644 --- a/cves/2012/CVE-2012-2982.md +++ b/cves/2012/CVE-2012-2982.md @@ -35,6 +35,7 @@ file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to e - https://github.com/tera-si/PoC-scripts-in-GO - https://github.com/varppi/CVE-2012-2982 - https://github.com/wizardy0ga/CVE_2012-2982 +- https://github.com/JRrooot/CVE-2012-2982-Webmin-RCE #### ExploitDB - https://www.exploit-db.com/exploits/21851 diff --git a/cves/2012/CVE-2012-4929.md b/cves/2012/CVE-2012-4929.md index ed6a6709f13..497d9aacc5e 100644 --- a/cves/2012/CVE-2012-4929.md +++ b/cves/2012/CVE-2012-4929.md @@ -18,4 +18,5 @@ The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, #### Github - https://github.com/SECURED-FP7/secured-psa-reencrypt - https://github.com/jselvi/docker-crime +- https://github.com/mpgn/CRIME-poc diff --git a/cves/2012/CVE-2012-6422.md b/cves/2012/CVE-2012-6422.md index 23d040de247..b16b384b558 100644 --- a/cves/2012/CVE-2012-6422.md +++ b/cves/2012/CVE-2012-6422.md @@ -15,5 +15,5 @@ The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other And - http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices #### Github -No PoCs found on GitHub currently. +- https://github.com/wired0ut/CVE-2012-6422 diff --git a/cves/2013/CVE-2013-0156.md b/cves/2013/CVE-2013-0156.md index 0f6b680cdd0..7b586917720 100644 --- a/cves/2013/CVE-2013-0156.md +++ b/cves/2013/CVE-2013-0156.md @@ -16,6 +16,7 @@ active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0. - https://github.com/R3dKn33-zz/CVE-2013-0156 - https://github.com/bsodmike/rails-exploit-cve-2013-0156 - https://github.com/heroku/heroku-CVE-2013-0156 +- https://github.com/oxben10/CVE-2013-0156 #### ExploitDB - https://www.exploit-db.com/exploits/27527 diff --git a/cves/2013/CVE-2013-3900.md b/cves/2013/CVE-2013-3900.md index 390991939df..830b75c2f33 100644 --- a/cves/2013/CVE-2013-3900.md +++ b/cves/2013/CVE-2013-3900.md @@ -48,4 +48,5 @@ No PoCs from references. - https://github.com/pkblanks/Remediating-CVE-2013-3900-EnableCertPaddingCheck- - https://github.com/ptrstr/MsiAuthenticodeInject - https://github.com/snoopopsec/vulnerability-CVE-2013-3900 +- https://github.com/norvethil/CVE-2013-3900-PowerShell-PoC diff --git a/cves/2013/CVE-2013-4322.md b/cves/2013/CVE-2013-4322.md index ee5a765ebd6..13112bf64e8 100644 --- a/cves/2013/CVE-2013-4322.md +++ b/cves/2013/CVE-2013-4322.md @@ -13,5 +13,5 @@ Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 proces - http://seclists.org/fulldisclosure/2014/Dec/23 #### Github -No PoCs found on GitHub currently. +- https://github.com/LiviuPtr/CVE-2013-4322_PoC diff --git a/cves/2013/CVE-2013-4547.md b/cves/2013/CVE-2013-4547.md index 3abfe31914a..ca7f84379f9 100644 --- a/cves/2013/CVE-2013-4547.md +++ b/cves/2013/CVE-2013-4547.md @@ -17,3 +17,6 @@ No PoCs from references. #### ExploitDB - https://www.exploit-db.com/exploits/38846 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nginx/CVE-2013-4547 diff --git a/cves/2013/CVE-2013-4660.md b/cves/2013/CVE-2013-4660.md index 3cc6bd4c15f..8bbc4015547 100644 --- a/cves/2013/CVE-2013-4660.md +++ b/cves/2013/CVE-2013-4660.md @@ -13,7 +13,7 @@ The JS-YAML module before 2.0.5 for Node.js parses input without properly consid - https://nealpoole.com/blog/2013/06/code-execution-via-yaml-in-js-yaml-nodejs-module/ #### Github -No PoCs found on GitHub currently. +- https://github.com/leehunkoo/cve-2013-4660_PoC #### ExploitDB - https://www.exploit-db.com/exploits/28655 diff --git a/cves/2014/CVE-2014-0075.md b/cves/2014/CVE-2014-0075.md index bca102de008..f8d287e0c9d 100644 --- a/cves/2014/CVE-2014-0075.md +++ b/cves/2014/CVE-2014-0075.md @@ -13,5 +13,5 @@ Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http - http://seclists.org/fulldisclosure/2014/Dec/23 #### Github -No PoCs found on GitHub currently. +- https://github.com/LiviuPtr/CVE-2014-0075_PoC diff --git a/cves/2014/CVE-2014-0160.md b/cves/2014/CVE-2014-0160.md index 0abb2d6165e..1724f18316a 100644 --- a/cves/2014/CVE-2014-0160.md +++ b/cves/2014/CVE-2014-0160.md @@ -71,6 +71,11 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p - https://github.com/tomdevman/heartbleed-bug - https://github.com/undacmic/heartbleed-proof-of-concept - https://github.com/yashfren/CVE-2014-0160-HeartBleed +- https://github.com/0xBlackash/CVE-2014-0160 +- https://github.com/22imer/CVE-2014-0160 +- https://github.com/SimoesCTT/CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160 +- https://github.com/indrajeetmp11/Heartbleed-PoC-Exploit-Script +- https://github.com/tungduongNT/CVE-2014-0160. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2014/CVE-2014-0160.yaml @@ -84,3 +89,6 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_heartbleed.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_heartbeat_client_memory.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160 diff --git a/cves/2014/CVE-2014-3120.md b/cves/2014/CVE-2014-3120.md index 281c92173b9..99f50e354da 100644 --- a/cves/2014/CVE-2014-3120.md +++ b/cves/2014/CVE-2014-3120.md @@ -20,6 +20,7 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting, - https://github.com/echohtp/ElasticSearch-CVE-2014-3120 - https://github.com/pi-2r/Elasticsearch-ExpLoit - https://github.com/xpgdgit/CVE-2014-3120 +- https://github.com/Dungsocool/CVE-2014-3120 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3120.yaml @@ -30,3 +31,6 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting, #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/elasticsearch/script_mvel_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2014-3120 diff --git a/cves/2014/CVE-2014-3566.md b/cves/2014/CVE-2014-3566.md index 67fa6f428bb..642adba0163 100644 --- a/cves/2014/CVE-2014-3566.md +++ b/cves/2014/CVE-2014-3566.md @@ -23,3 +23,5 @@ The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses - https://github.com/mikesplain/CVE-2014-3566-poodle-cookbook - https://github.com/r3p3r/1N3-MassBleed - https://github.com/uthrasri/openssl_g2.5_CVE-2014-3566 +- https://github.com/josecl200/VC-PoodlePOC +- https://github.com/mpgn/poodle-PoC diff --git a/cves/2014/CVE-2014-3704.md b/cves/2014/CVE-2014-3704.md index f0e331af32b..1261c7e4fec 100644 --- a/cves/2014/CVE-2014-3704.md +++ b/cves/2014/CVE-2014-3704.md @@ -38,3 +38,6 @@ The expandArguments function in the database abstraction API in Drupal core 7.x #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/drupal_drupageddon.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2014-3704 diff --git a/cves/2014/CVE-2014-4210.md b/cves/2014/CVE-2014-4210.md index 64522da6d07..f5b4d4ebbdd 100644 --- a/cves/2014/CVE-2014-4210.md +++ b/cves/2014/CVE-2014-4210.md @@ -16,6 +16,7 @@ Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusi - https://github.com/NHPT/WebLogic-SSRF_CVE-2014-4210 - https://github.com/ZorvithonLeo/Exploit-CVE-2014-4210- - https://github.com/unmanarc/CVE-2014-4210-SSRF-PORTSCANNER-POC +- https://github.com/0xn0ne/weblogicScanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4210.yaml diff --git a/cves/2014/CVE-2014-4688.md b/cves/2014/CVE-2014-4688.md index f3f76f0eaa9..5eafdde7f11 100644 --- a/cves/2014/CVE-2014-4688.md +++ b/cves/2014/CVE-2014-4688.md @@ -14,6 +14,8 @@ pfSense before 2.1.4 allows remote authenticated users to execute arbitrary comm #### Github - https://github.com/fenix0499/CVE-2014-4688-NodeJs-Exploit +- https://github.com/jaydenblair/CVE-2014-4688-pfsense +- https://github.com/note0577/CVE-2014-4688-NodeJs-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/43560 diff --git a/cves/2014/CVE-2014-4725.md b/cves/2014/CVE-2014-4725.md index 13cd5f06102..9cecc1da1a2 100644 --- a/cves/2014/CVE-2014-4725.md +++ b/cves/2014/CVE-2014-4725.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/Pwdnx1337/CVE-2014-4725 - https://github.com/Pwdnx1337/MASS-CVE-2014-4725 - https://github.com/pwdnx337/CVE-2014-4725 +- https://github.com/AnotherSec/CVE-2014-4725 #### ExploitDB - https://www.exploit-db.com/exploits/33991 diff --git a/cves/2014/CVE-2014-6271.md b/cves/2014/CVE-2014-6271.md index 3148dac7a4a..719b810af1c 100644 --- a/cves/2014/CVE-2014-6271.md +++ b/cves/2014/CVE-2014-6271.md @@ -110,6 +110,14 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th - https://github.com/woltage/CVE-2014-6271 - https://github.com/yanicklandry/bashfix - https://github.com/zalalov/CVE-2014-6271 +- https://github.com/FacundoMfernandez/pentesting-obioba +- https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2014-6271-Shellshock +- https://github.com/J0hnTh3Kn1ght/CVE-2014-6271 +- https://github.com/TheRealCiscoo/shellshock-poc +- https://github.com/caverm/Shellshock_CVE-2014-6271 +- https://github.com/im2sinister/CVE-2014-6271 +- https://github.com/kaleth4/-CVE-2014-6271 +- https://github.com/kaleth4/CVE-2014-6271 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6271.yaml @@ -133,3 +141,6 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/dhcp/bash_environment.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/dhclient_bash_env.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/vmware_bash_function_root.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/bash/CVE-2014-6271 diff --git a/cves/2014/CVE-2014-6287.md b/cves/2014/CVE-2014-6287.md index 3a18687272e..4d98d10d9c9 100644 --- a/cves/2014/CVE-2014-6287.md +++ b/cves/2014/CVE-2014-6287.md @@ -32,6 +32,8 @@ The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks H - https://github.com/thepedroalves/HFS-2.3-RCE-Exploit - https://github.com/wizardy0ga/THM-Steel_Mountain-CVE-2014-6287 - https://github.com/zhsh9/CVE-2014-6287 +- https://github.com/JoaZ94/rejjeto_hfs-rce-exploit-cve-2014-6287 +- https://github.com/Z3R0space/CVE-2014-6287 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6287.yaml diff --git a/cves/2014/CVE-2014-7169.md b/cves/2014/CVE-2014-7169.md index c5b566cbaae..738cc52217c 100644 --- a/cves/2014/CVE-2014-7169.md +++ b/cves/2014/CVE-2014-7169.md @@ -33,6 +33,7 @@ GNU Bash through 4.3 bash43-025 processes trailing strings after certain malform - https://github.com/rcvalle/exploits - https://github.com/securetiger/Exploit-Shellshock - https://github.com/timb-machine-mirrors/rcvalle-exploits +- https://github.com/Kushiro45/shellshock-poc-cve-2014-7169 #### ExploitDB - https://www.exploit-db.com/exploits/36933 diff --git a/cves/2014/CVE-2014-8610.md b/cves/2014/CVE-2014-8610.md index 9cf79c35fbf..10da3ebfcab 100644 --- a/cves/2014/CVE-2014-8610.md +++ b/cves/2014/CVE-2014-8610.md @@ -14,5 +14,5 @@ AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permis - http://seclists.org/fulldisclosure/2014/Nov/85 #### Github -No PoCs found on GitHub currently. +- https://github.com/eddieoz/dual-ec-drbg diff --git a/cves/2014/CVE-2014-9173.md b/cves/2014/CVE-2014-9173.md index a514a43c4d9..1ae9b9872c5 100644 --- a/cves/2014/CVE-2014-9173.md +++ b/cves/2014/CVE-2014-9173.md @@ -13,7 +13,7 @@ SQL injection vulnerability in view.php in the Google Doc Embedder plugin before - http://www.exploit-db.com/exploits/35371 #### Github -No PoCs found on GitHub currently. +- https://github.com/ratiros01/CVE-2014-9173 #### ExploitDB - https://www.exploit-db.com/exploits/35447 diff --git a/cves/2015/CVE-2015-10141.md b/cves/2015/CVE-2015-10141.md index 0fb9725abbf..46d3fac7d5c 100644 --- a/cves/2015/CVE-2015-10141.md +++ b/cves/2015/CVE-2015-10141.md @@ -17,6 +17,7 @@ An unauthenticated OS command injection vulnerability exists within Xdebug versi #### Github - https://github.com/D3Ext/CVE-2015-10141 - https://github.com/n0m4d22/PoC-CVE-2015-10141-Xdebug +- https://github.com/K3ysTr0K3R/CVE-2015-10141 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-10141.yaml diff --git a/cves/2015/CVE-2015-1328.md b/cves/2015/CVE-2015-1328.md index d73f938d828..03be2f4cc3a 100644 --- a/cves/2015/CVE-2015-1328.md +++ b/cves/2015/CVE-2015-1328.md @@ -20,6 +20,11 @@ The overlayfs implementation in the linux (aka Linux kernel) package before 3.19 - https://github.com/elit3pwner/CVE-2015-1328-GoldenEye - https://github.com/freelancermijan/Linux-Privilege-Escalation-Tryhackme - https://github.com/notlikethis/CVE-2015-1328 +- https://github.com/0xf1d0/CVE-2015-1328 +- https://github.com/FernandoCassioDev/CVE-2015-1328 +- https://github.com/WhatsWrongAndWhy/CVE-2015-1328 +- https://github.com/bansalkrish007-arch/cve-2015-1328 +- https://github.com/saqib-butt2/blackbox-pentesting-infsecos #### ExploitDB - https://www.exploit-db.com/exploits/40688 diff --git a/cves/2015/CVE-2015-1427.md b/cves/2015/CVE-2015-1427.md index bf7ddedc25e..43a9ef8c328 100644 --- a/cves/2015/CVE-2015-1427.md +++ b/cves/2015/CVE-2015-1427.md @@ -38,3 +38,6 @@ The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/elasticsearch/search_groovy_script.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2015-1427 diff --git a/cves/2015/CVE-2015-1538.md b/cves/2015/CVE-2015-1538.md index 6883ab3d230..dc189229679 100644 --- a/cves/2015/CVE-2015-1538.md +++ b/cves/2015/CVE-2015-1538.md @@ -20,6 +20,7 @@ Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTa - https://github.com/niranjanshr13/Stagefright-cve-2015-1538-1 - https://github.com/oguzhantopgul/cve-2015-1538-1 - https://github.com/renjithsasidharan/cve-2015-1538-1 +- https://github.com/xsleaksiki/cve #### ExploitDB - https://www.exploit-db.com/exploits/38124 diff --git a/cves/2015/CVE-2015-1635.md b/cves/2015/CVE-2015-1635.md index 8f439f04389..fe2fa850203 100644 --- a/cves/2015/CVE-2015-1635.md +++ b/cves/2015/CVE-2015-1635.md @@ -49,6 +49,7 @@ HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Wind - https://github.com/n3rdh4x0r/CVE-2015-1635-POC - https://github.com/neu5ron/cve_2015-1635 - https://github.com/w01ke/CVE-2015-1635-POC +- https://github.com/moeinmiadi/CVE-2015-1635_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1635.yaml diff --git a/cves/2015/CVE-2015-1805.md b/cves/2015/CVE-2015-1805.md index 20ea930fcc1..8ff0dac77ab 100644 --- a/cves/2015/CVE-2015-1805.md +++ b/cves/2015/CVE-2015-1805.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/dosomder/iovyroot - https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 - https://github.com/panyu6325/CVE-2015-1805 +- https://github.com/valentineus/hp-slate7-root-kit diff --git a/cves/2015/CVE-2015-2291.md b/cves/2015/CVE-2015-2291.md index eea6c7299ec..f7f1a422fc7 100644 --- a/cves/2015/CVE-2015-2291.md +++ b/cves/2015/CVE-2015-2291.md @@ -17,6 +17,7 @@ #### Github - https://github.com/Tare05/Intel-CVE-2015-2291 - https://github.com/gmh5225/CVE-2015-2291 +- https://github.com/ethanedits/iqvw64e-privilege-escalation #### ExploitDB - https://www.exploit-db.com/exploits/36392 diff --git a/cves/2015/CVE-2015-3224.md b/cves/2015/CVE-2015-3224.md index 342cbc2ba10..9ca172d0c8e 100644 --- a/cves/2015/CVE-2015-3224.md +++ b/cves/2015/CVE-2015-3224.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/n000xy/CVE-2015-3224- - https://github.com/redirected/tricks - https://github.com/xda3m00n/CVE-2015-3224- +- https://github.com/SQU4NCH/CVE-2015-3224 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3224.yaml diff --git a/cves/2015/CVE-2015-3246.md b/cves/2015/CVE-2015-3246.md index 3676eeabe04..260fe8786cb 100644 --- a/cves/2015/CVE-2015-3246.md +++ b/cves/2015/CVE-2015-3246.md @@ -15,7 +15,7 @@ libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper progr - https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve-2015-3246.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2015-3246 #### ExploitDB - https://www.exploit-db.com/exploits/44633 diff --git a/cves/2015/CVE-2015-3306.md b/cves/2015/CVE-2015-3306.md index 8332209f8a3..d5dbd12c8d2 100644 --- a/cves/2015/CVE-2015-3306.md +++ b/cves/2015/CVE-2015-3306.md @@ -35,6 +35,8 @@ The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write t - https://github.com/m4udSec/ProFTPD_CVE-2015-3306 - https://github.com/shk0x/cpx_proftpd - https://github.com/t0kx/exploit-CVE-2015-3306 +- https://github.com/Z3R0space/CVE-2015-3306 +- https://github.com/xyk0x/cpx_proftpd #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml diff --git a/cves/2015/CVE-2015-3337.md b/cves/2015/CVE-2015-3337.md index 971519ca66d..6f0b5c4cb79 100644 --- a/cves/2015/CVE-2015-3337.md +++ b/cves/2015/CVE-2015-3337.md @@ -22,3 +22,6 @@ Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before #### ExploitDB - https://www.exploit-db.com/exploits/37054 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2015-3337 diff --git a/cves/2015/CVE-2015-3839.md b/cves/2015/CVE-2015-3839.md index d46e09caf4d..83b9f67ecae 100644 --- a/cves/2015/CVE-2015-3839.md +++ b/cves/2015/CVE-2015-3839.md @@ -14,5 +14,5 @@ The updateMessageStatus function in Android 5.1.1 and earlier allows local users - http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Cecilia-newbie/cve-2015-3839_PoC diff --git a/cves/2015/CVE-2015-5254.md b/cves/2015/CVE-2015-5254.md index 3f0d90883f2..c381b49ed08 100644 --- a/cves/2015/CVE-2015-5254.md +++ b/cves/2015/CVE-2015-5254.md @@ -16,4 +16,7 @@ No PoCs from references. - https://github.com/Ma1Dong/ActiveMQ_CVE-2015-5254 - https://github.com/guigui237/Exploitation-de-la-vuln-rabilit-CVE-2015-5254- - https://github.com/jas502n/CVE-2015-5254 +- https://github.com/Catherines77/ActiveMQ-EXPtools +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2015-5254 diff --git a/cves/2015/CVE-2015-5287.md b/cves/2015/CVE-2015-5287.md index b3631d28524..6b51c74d092 100644 --- a/cves/2015/CVE-2015-5287.md +++ b/cves/2015/CVE-2015-5287.md @@ -15,7 +15,7 @@ The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2. - https://www.exploit-db.com/exploits/38832/ #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2015-5287 #### ExploitDB - https://www.exploit-db.com/exploits/47421 diff --git a/cves/2015/CVE-2015-5531.md b/cves/2015/CVE-2015-5531.md index 6ebd7706fb3..6c0928b5bd1 100644 --- a/cves/2015/CVE-2015-5531.md +++ b/cves/2015/CVE-2015-5531.md @@ -22,6 +22,7 @@ Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote at - https://github.com/j-jasson/CVE-2015-5531-POC - https://github.com/moonwayy/hindicybersec - https://github.com/xpgdgit/CVE-2015-5531 +- https://github.com/MoCh3n/CVE-2015-5531-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5531.yaml @@ -31,3 +32,6 @@ Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote at #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2015-5531 diff --git a/cves/2015/CVE-2015-8522.md b/cves/2015/CVE-2015-8522.md index ca96eb10ae1..db0b5612c2d 100644 --- a/cves/2015/CVE-2015-8522.md +++ b/cves/2015/CVE-2015-8522.md @@ -13,5 +13,5 @@ Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6 No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/damariion/CVE-2015-8522.RCE diff --git a/cves/2015/CVE-2015-8550.md b/cves/2015/CVE-2015-8550.md index 1efd36939db..eb8a07b4c1a 100644 --- a/cves/2015/CVE-2015-8550.md +++ b/cves/2015/CVE-2015-8550.md @@ -13,5 +13,5 @@ Xen, when used on a system providing PV backends, allows local guest OS administ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2015-8550 diff --git a/cves/2015/CVE-2015-8562.md b/cves/2015/CVE-2015-8562.md index 1d7330475ad..b7277b3b016 100644 --- a/cves/2015/CVE-2015-8562.md +++ b/cves/2015/CVE-2015-8562.md @@ -38,3 +38,6 @@ Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP o #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/joomla_http_header_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/joomla/CVE-2015-8562 diff --git a/cves/2015/CVE-2015-9235.md b/cves/2015/CVE-2015-9235.md index 7c3108b06ab..56492c2bb7f 100644 --- a/cves/2015/CVE-2015-9235.md +++ b/cves/2015/CVE-2015-9235.md @@ -16,4 +16,6 @@ No PoCs from references. - https://github.com/WinDyAlphA/CVE-2015-9235_JWT_key_confusion - https://github.com/aalex954/jwt-key-confusion-poc - https://github.com/achmadismail173/jwt_exploit +- https://github.com/Nxvh1337/CVE-2015-9235_JWT_key_confusion +- https://github.com/tierChampion/POC_CVE-2015-9235 diff --git a/cves/2015/CVE-2015-9331.md b/cves/2015/CVE-2015-9331.md index ecf760822c0..18d37512a9b 100644 --- a/cves/2015/CVE-2015-9331.md +++ b/cves/2015/CVE-2015-9331.md @@ -13,4 +13,4 @@ The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Kairo-one/CVE-2015-9331 diff --git a/cves/2015/CVE-2015-9357.md b/cves/2015/CVE-2015-9357.md index 9f28d9f4d4c..7c7c44683e3 100644 --- a/cves/2015/CVE-2015-9357.md +++ b/cves/2015/CVE-2015-9357.md @@ -13,4 +13,4 @@ The akismet plugin before 3.1.5 for WordPress has XSS. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/saretawa/CVE-2015-9357-POC diff --git a/cves/2016/CVE-2016-0638.md b/cves/2016/CVE-2016-0638.md index 6cdd7e6ec80..599020ffa5a 100644 --- a/cves/2016/CVE-2016-0638.md +++ b/cves/2016/CVE-2016-0638.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/BabyTeam1024/CVE-2016-0638 +- https://github.com/0xn0ne/weblogicScanner diff --git a/cves/2016/CVE-2016-10134.md b/cves/2016/CVE-2016-10134.md index b0725ebaa93..916d4e8c1df 100644 --- a/cves/2016/CVE-2016-10134.md +++ b/cves/2016/CVE-2016-10134.md @@ -20,3 +20,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/zabbix_toggleids_sqli.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/zabbix/CVE-2016-10134 diff --git a/cves/2016/CVE-2016-10708.md b/cves/2016/CVE-2016-10708.md index 0567f2741aa..031036c3003 100644 --- a/cves/2016/CVE-2016-10708.md +++ b/cves/2016/CVE-2016-10708.md @@ -13,5 +13,5 @@ sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/lggcs/CVE-2016-10708 diff --git a/cves/2016/CVE-2016-10924.md b/cves/2016/CVE-2016-10924.md index d73ab826f42..82c6efbd4fe 100644 --- a/cves/2016/CVE-2016-10924.md +++ b/cves/2016/CVE-2016-10924.md @@ -16,6 +16,8 @@ No PoCs from references. - https://github.com/808ale/cve-2016-10924-POC - https://github.com/LGenAgul/Wordpress-ebook-CVE-2016-10924 - https://github.com/rvizx/CVE-2016-10924 +- https://github.com/alealeluyah/cve-2016-10924-POC +- https://github.com/rvzsec/CVE-2016-10924 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10924.yaml diff --git a/cves/2016/CVE-2016-1897.md b/cves/2016/CVE-2016-1897.md index c46b6b9e42c..fc652f4f98a 100644 --- a/cves/2016/CVE-2016-1897.md +++ b/cves/2016/CVE-2016-1897.md @@ -15,3 +15,5 @@ FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbi #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ffmpeg/CVE-2016-1897 diff --git a/cves/2016/CVE-2016-20012.md b/cves/2016/CVE-2016-20012.md index 9748f488a5e..f976bf28ffe 100644 --- a/cves/2016/CVE-2016-20012.md +++ b/cves/2016/CVE-2016-20012.md @@ -16,4 +16,5 @@ OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain #### Github - https://github.com/aztec-eagle/cve-2016-20012 +- https://github.com/arturo-b-cmu/cve-2016-20012 diff --git a/cves/2016/CVE-2016-3088.md b/cves/2016/CVE-2016-3088.md index 358b608d53c..8653546904a 100644 --- a/cves/2016/CVE-2016-3088.md +++ b/cves/2016/CVE-2016-3088.md @@ -22,6 +22,7 @@ The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remot - https://github.com/pudiding/CVE-2016-3088 - https://github.com/vonderchild/CVE-2016-3088 - https://github.com/xbfding/XiaoBai_exploit +- https://github.com/wood03mm/CVE-2016-3088 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3088.yaml @@ -32,3 +33,6 @@ The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remot #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_upload_jsp.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2016-3088 diff --git a/cves/2016/CVE-2016-3627.md b/cves/2016/CVE-2016-3627.md index b0fe41da276..0e1e2911524 100644 --- a/cves/2016/CVE-2016-3627.md +++ b/cves/2016/CVE-2016-3627.md @@ -13,5 +13,5 @@ The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when u No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Oneton429/CVE-2016-3627 diff --git a/cves/2016/CVE-2016-3714.md b/cves/2016/CVE-2016-3714.md index 2925ec8b1da..d6ee4b3ccdb 100644 --- a/cves/2016/CVE-2016-3714.md +++ b/cves/2016/CVE-2016-3714.md @@ -51,3 +51,6 @@ The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/imagemagick_delegate.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/imagemagick/CVE-2016-3714 diff --git a/cves/2016/CVE-2016-4437.md b/cves/2016/CVE-2016-4437.md index 0219c0f0d21..1f2325e5b4a 100644 --- a/cves/2016/CVE-2016-4437.md +++ b/cves/2016/CVE-2016-4437.md @@ -29,3 +29,6 @@ Apache Shiro before 1.2.5, when a cipher key has not been configured for the "re #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/shiro_rememberme_v124_deserialize.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2016-4437 diff --git a/cves/2016/CVE-2016-4977.md b/cves/2016/CVE-2016-4977.md index 8bf094b18aa..d4acc173a95 100644 --- a/cves/2016/CVE-2016-4977.md +++ b/cves/2016/CVE-2016-4977.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4977.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2016-4977 diff --git a/cves/2016/CVE-2016-5195.md b/cves/2016/CVE-2016-5195.md index e13929baa96..70b893b7e2c 100644 --- a/cves/2016/CVE-2016-5195.md +++ b/cves/2016/CVE-2016-5195.md @@ -110,6 +110,12 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo - https://github.com/xpcmdshell/derpyc0w - https://github.com/yhf971/Dirty - https://github.com/zakariamaaraki/Dirty-COW-CVE-2016-5195- +- https://github.com/KongQBin/CVE-2016-5195 +- https://github.com/elhaddadalaa788-alt/kernel-exploit-dirtycow-project-subm +- https://github.com/h1n4mx0z/Research-CVE-2016-5195 +- https://github.com/maur0amaya/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow +- https://github.com/ramahmdr/dirtycow +- https://github.com/voidgguy/lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195 #### ExploitDB - https://www.exploit-db.com/exploits/40847 diff --git a/cves/2016/CVE-2016-5385.md b/cves/2016/CVE-2016-5385.md index 64e7abd40d3..e18b1dbb7e1 100644 --- a/cves/2016/CVE-2016-5385.md +++ b/cves/2016/CVE-2016-5385.md @@ -15,3 +15,5 @@ PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cgi/CVE-2016-5385 diff --git a/cves/2016/CVE-2016-5696.md b/cves/2016/CVE-2016-5696.md index 0ffae385bb4..fe44057c4a4 100644 --- a/cves/2016/CVE-2016-5696.md +++ b/cves/2016/CVE-2016-5696.md @@ -15,4 +15,5 @@ net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine #### Github - https://github.com/jduck/challack - https://github.com/violentshell/rover +- https://github.com/Gnoxter/mountain_goat diff --git a/cves/2016/CVE-2016-5734.md b/cves/2016/CVE-2016-5734.md index b3f977a8d23..1a147f72059 100644 --- a/cves/2016/CVE-2016-5734.md +++ b/cves/2016/CVE-2016-5734.md @@ -22,3 +22,6 @@ phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_null_termination_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpmyadmin/CVE-2016-5734 diff --git a/cves/2016/CVE-2016-6271.md b/cves/2016/CVE-2016-6271.md index 93baea80dc3..946be61c135 100644 --- a/cves/2016/CVE-2016-6271.md +++ b/cves/2016/CVE-2016-6271.md @@ -13,5 +13,5 @@ The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle att - https://github.com/gteissier/CVE-2016-6271 #### Github -No PoCs found on GitHub currently. +- https://github.com/gteissier/CVE-2016-6271 diff --git a/cves/2016/CVE-2016-7200.md b/cves/2016/CVE-2016-7200.md index 2e276e02723..22f83699380 100644 --- a/cves/2016/CVE-2016-7200.md +++ b/cves/2016/CVE-2016-7200.md @@ -17,7 +17,7 @@ The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers - https://www.exploit-db.com/exploits/40990/ #### Github -No PoCs found on GitHub currently. +- https://github.com/theori-io/chakra-2016-11 #### ExploitDB - https://www.exploit-db.com/exploits/40785 diff --git a/cves/2016/CVE-2016-8462.md b/cves/2016/CVE-2016-8462.md index 575f08045ae..e38dfe41dcd 100644 --- a/cves/2016/CVE-2016-8462.md +++ b/cves/2016/CVE-2016-8462.md @@ -14,5 +14,5 @@ An information disclosure vulnerability in the bootloader could enable a local a - https://securityresear.ch/2017/01/04/fastboot-oem-sha1sum/ #### Github -No PoCs found on GitHub currently. +- https://github.com/CunningLogic/PixelDump_CVE-2016-8462 diff --git a/cves/2016/CVE-2016-8655.md b/cves/2016/CVE-2016-8655.md index 657c4d5889a..5cbd27fde92 100644 --- a/cves/2016/CVE-2016-8655.md +++ b/cves/2016/CVE-2016-8655.md @@ -25,6 +25,7 @@ Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allo - https://github.com/martinmullins/CVE-2016-8655_Android - https://github.com/pradeepavula/Linux-Exploits-LES- - https://github.com/scarvell/cve-2016-8655 +- https://github.com/WhatsWrongAndWhy/CVE-2016-8655 #### ExploitDB - https://www.exploit-db.com/exploits/44696 diff --git a/cves/2016/CVE-2016-9086.md b/cves/2016/CVE-2016-9086.md index c53747fd265..07839b291e1 100644 --- a/cves/2016/CVE-2016-9086.md +++ b/cves/2016/CVE-2016-9086.md @@ -15,3 +15,5 @@ GitLab versions 8.9.x and above contain a critical security flaw in the "import/ #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gitlab/CVE-2016-9086 diff --git a/cves/2016/CVE-2016-9192.md b/cves/2016/CVE-2016-9192.md index ec3c7339bc3..89d06cbc6dd 100644 --- a/cves/2016/CVE-2016-9192.md +++ b/cves/2016/CVE-2016-9192.md @@ -14,5 +14,5 @@ A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could all - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1 #### Github -No PoCs found on GitHub currently. +- https://github.com/serializingme/cve-2016-9192 diff --git a/cves/2016/CVE-2016-9793.md b/cves/2016/CVE-2016-9793.md index 867f8a6e568..8514e2eeb98 100644 --- a/cves/2016/CVE-2016-9793.md +++ b/cves/2016/CVE-2016-9793.md @@ -13,7 +13,7 @@ The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.1 - https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2016-9793 #### ExploitDB - https://www.exploit-db.com/exploits/41995 diff --git a/cves/2017/CVE-2017-0038.md b/cves/2017/CVE-2017-0038.md index 634412bb618..101bd805157 100644 --- a/cves/2017/CVE-2017-0038.md +++ b/cves/2017/CVE-2017-0038.md @@ -14,7 +14,7 @@ gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Win - https://www.exploit-db.com/exploits/41363/ #### Github -No PoCs found on GitHub currently. +- https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS #### ExploitDB - https://www.exploit-db.com/exploits/41363 diff --git a/cves/2017/CVE-2017-0143.md b/cves/2017/CVE-2017-0143.md index 1665de3ee27..71daf2ad4dc 100644 --- a/cves/2017/CVE-2017-0143.md +++ b/cves/2017/CVE-2017-0143.md @@ -37,6 +37,7 @@ The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 - https://github.com/n3rdh4x0r/MS17-010 - https://github.com/n3rdh4x0r/MS17-010_CVE-2017-0143 - https://github.com/yeshwanthp999/Windows7-ms17-010- +- https://github.com/hackingyseguridad/smb #### ExploitDB - https://www.exploit-db.com/exploits/47456 diff --git a/cves/2017/CVE-2017-0144.md b/cves/2017/CVE-2017-0144.md index b61b96cf3e1..a82980cba49 100644 --- a/cves/2017/CVE-2017-0144.md +++ b/cves/2017/CVE-2017-0144.md @@ -37,6 +37,8 @@ The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 - https://github.com/sethwhy/BlueDoor - https://github.com/waleedelsmedesy22/EternalBlue-DoublePulsar-Exploit-Windows-7- - https://github.com/zorikcherfas/eternalblue_linux_cpp +- https://github.com/0xBlackash/CVE-2017-0144 +- https://github.com/FireTemple/Blackash-CVE-2017-0144 #### ExploitDB - https://www.exploit-db.com/exploits/47456 diff --git a/cves/2017/CVE-2017-0785.md b/cves/2017/CVE-2017-0785.md index 9f2644751bf..2f78222e51c 100644 --- a/cves/2017/CVE-2017-0785.md +++ b/cves/2017/CVE-2017-0785.md @@ -34,6 +34,8 @@ No PoCs from references. - https://github.com/ojasookert/CVE-2017-0785 - https://github.com/raviwithu/Bluetooth - https://github.com/sh4rknado/BlueBorn +- https://github.com/Alfa100001/-CVE-2017-0785-BlueBorne-PoC +- https://github.com/Richard1031/CVE-2017-0785-PoC #### ExploitDB - https://www.exploit-db.com/exploits/44555 diff --git a/cves/2017/CVE-2017-1000028.md b/cves/2017/CVE-2017-1000028.md index cc82de24c4d..1a872e19fe2 100644 --- a/cves/2017/CVE-2017-1000028.md +++ b/cves/2017/CVE-2017-1000028.md @@ -28,3 +28,6 @@ Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authentic #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfish_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/glassfish/CVE-2017-1000028 diff --git a/cves/2017/CVE-2017-1000112.md b/cves/2017/CVE-2017-1000112.md index d14c526a374..3dc9854c7cc 100644 --- a/cves/2017/CVE-2017-1000112.md +++ b/cves/2017/CVE-2017-1000112.md @@ -20,6 +20,8 @@ Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. W - https://github.com/amrelsadane123/Ecploit-kernel-4.10-linux-local - https://github.com/ol0273st-s/CVE-2017-1000112-Adpated - https://github.com/pradeepavula/Linux-Exploits-LES- +- https://github.com/Spydomain/CVE-2017-1000112-PoC +- https://github.com/WhatsWrongAndWhy/CVE-2017-1000112 #### ExploitDB - https://www.exploit-db.com/exploits/45147 diff --git a/cves/2017/CVE-2017-1000353.md b/cves/2017/CVE-2017-1000353.md index 913600ed964..305f2bd61a4 100644 --- a/cves/2017/CVE-2017-1000353.md +++ b/cves/2017/CVE-2017-1000353.md @@ -27,3 +27,6 @@ Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerab #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/jenkins_cli_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2017-1000353 diff --git a/cves/2017/CVE-2017-1000486.md b/cves/2017/CVE-2017-1000486.md index f37d057b941..a38caba48c5 100644 --- a/cves/2017/CVE-2017-1000486.md +++ b/cves/2017/CVE-2017-1000486.md @@ -23,6 +23,7 @@ Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in rem - https://github.com/mogwailabs/CVE-2017-1000486 - https://github.com/oppsec/pwnfaces - https://github.com/pimps/CVE-2017-1000486 +- https://github.com/dsssssssm/pwnfaces #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000486.yaml diff --git a/cves/2017/CVE-2017-10271.md b/cves/2017/CVE-2017-10271.md index a2d7821aca0..a52e5a36e29 100644 --- a/cves/2017/CVE-2017-10271.md +++ b/cves/2017/CVE-2017-10271.md @@ -41,6 +41,8 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar - https://github.com/s3xy/CVE-2017-10271 - https://github.com/skytina/CNVD-C-2019-48814-COMMON - https://github.com/testwc/CVE-2017-10271 +- https://github.com/Dungsocool/CVE-2017-10271 +- https://github.com/seoyoung-kang/CVE-2017-10271 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10271.yaml @@ -53,3 +55,6 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_weblogic_wsat_deserialization_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2017-10271 diff --git a/cves/2017/CVE-2017-11610.md b/cves/2017/CVE-2017-11610.md index fe7b04d61ed..4aaad13732c 100644 --- a/cves/2017/CVE-2017-11610.md +++ b/cves/2017/CVE-2017-11610.md @@ -16,6 +16,7 @@ The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before - https://github.com/ivanitlearning/CVE-2017-11610 - https://github.com/savior-only/javafx_tools - https://github.com/yaunsky/CVE-2017-11610 +- https://github.com/Dungsocool/CVE-2017-11610 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11610.yaml @@ -25,3 +26,6 @@ The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/supervisor_xmlrpc_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/supervisor/CVE-2017-11610 diff --git a/cves/2017/CVE-2017-11611.md b/cves/2017/CVE-2017-11611.md index e8c2c438388..9e116178a9f 100644 --- a/cves/2017/CVE-2017-11611.md +++ b/cves/2017/CVE-2017-11611.md @@ -13,5 +13,5 @@ Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability ex - https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc #### Github -No PoCs found on GitHub currently. +- https://github.com/faizzaidi/Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc diff --git a/cves/2017/CVE-2017-11882.md b/cves/2017/CVE-2017-11882.md index 41b09bf881d..8744ccf9070 100644 --- a/cves/2017/CVE-2017-11882.md +++ b/cves/2017/CVE-2017-11882.md @@ -52,6 +52,8 @@ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Micr - https://github.com/unamer/CVE-2017-11882 - https://github.com/xdrake1010/CVE-2017-11882-Preventer - https://github.com/zhouat/cve-2017-11882 +- https://github.com/0x09AL/CVE-2017-11882-metasploit +- https://github.com/embedi/CVE-2017-11882 #### ExploitDB - https://www.exploit-db.com/exploits/43163 diff --git a/cves/2017/CVE-2017-12149.md b/cves/2017/CVE-2017-12149.md index e6d7bcddea3..4e707389cda 100644 --- a/cves/2017/CVE-2017-12149.md +++ b/cves/2017/CVE-2017-12149.md @@ -28,6 +28,10 @@ In Jboss Application Server as shipped with Red Hat Enterprise Application Platf - https://github.com/sevck/CVE-2017-12149 - https://github.com/yunxu1/jboss-_CVE-2017-12149 - https://github.com/zesnd/cve-2017-12149 +- https://github.com/galois17/cve-2017-12149-playground #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12149.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jboss/CVE-2017-12149 diff --git a/cves/2017/CVE-2017-12542.md b/cves/2017/CVE-2017-12542.md index 1b4a39d5d46..ff38451452a 100644 --- a/cves/2017/CVE-2017-12542.md +++ b/cves/2017/CVE-2017-12542.md @@ -15,6 +15,7 @@ A authentication bypass and execution of code vulnerability in HPE Integrated Li #### Github - https://github.com/afkfr0mkeyb0ard/CustomKaliSetup - https://github.com/skelsec/CVE-2017-12542 +- https://github.com/Gill-Singh-A/CVE-2017-12542-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12542.yaml diff --git a/cves/2017/CVE-2017-12615.md b/cves/2017/CVE-2017-12615.md index 1ef43e995b7..e9790ec0be9 100644 --- a/cves/2017/CVE-2017-12615.md +++ b/cves/2017/CVE-2017-12615.md @@ -32,9 +32,14 @@ When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e. - https://github.com/wudidwo/CVE-2017-12615-poc - https://github.com/xiaokp7/Tomcat_PUT_GUI_EXP - https://github.com/zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717 +- https://github.com/K3ysTr0K3R/CVE-2017-12615 +- https://github.com/breaktoprotect/CVE-2017-12615 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12615.yaml #### ExploitDB - https://www.exploit-db.com/exploits/42953 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2017-12615 diff --git a/cves/2017/CVE-2017-12629.md b/cves/2017/CVE-2017-12629.md index 4f060941dac..82d8083d92b 100644 --- a/cves/2017/CVE-2017-12629.md +++ b/cves/2017/CVE-2017-12629.md @@ -23,3 +23,7 @@ Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before #### ExploitDB - https://www.exploit-db.com/exploits/43009 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2017-12629-RCE +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2017-12629-XXE diff --git a/cves/2017/CVE-2017-12635.md b/cves/2017/CVE-2017-12635.md index 24f460a8bf7..7c556d6b605 100644 --- a/cves/2017/CVE-2017-12635.md +++ b/cves/2017/CVE-2017-12635.md @@ -19,6 +19,8 @@ Due to differences in the Erlang-based JSON parser and JavaScript-based JSON par - https://github.com/Guillaumeclavel/Etude_Faille_CVE_12636 - https://github.com/assalielmehdi/CVE-2017-12635 - https://github.com/cyberharsh/Apache-couchdb-CVE-2017-12635 +- https://github.com/Darabium/couchdb-exploit +- https://github.com/Dungsocool/CVE-2017-12635_36 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12635.yaml @@ -31,3 +33,6 @@ Due to differences in the Erlang-based JSON parser and JavaScript-based JSON par #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/couchdb/couchdb_enum.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/couchdb/CVE-2017-12635 diff --git a/cves/2017/CVE-2017-12636.md b/cves/2017/CVE-2017-12636.md index de04082831c..d74b34218b7 100644 --- a/cves/2017/CVE-2017-12636.md +++ b/cves/2017/CVE-2017-12636.md @@ -29,3 +29,6 @@ CouchDB administrative users can configure the database server via HTTP(S). Some #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder5/CVE-2017-12636.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/couchdb/CVE-2017-12636 diff --git a/cves/2017/CVE-2017-12794.md b/cves/2017/CVE-2017-12794.md index f97c8b94e65..faa7d7d70c0 100644 --- a/cves/2017/CVE-2017-12794.md +++ b/cves/2017/CVE-2017-12794.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12794.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2017-12794 diff --git a/cves/2017/CVE-2017-13089.md b/cves/2017/CVE-2017-13089.md index bd9303b96bc..9d74fd26deb 100644 --- a/cves/2017/CVE-2017-13089.md +++ b/cves/2017/CVE-2017-13089.md @@ -15,4 +15,5 @@ The http.c:skip_short_body() function is called in some circumstances, such as w #### Github - https://github.com/mzeyong/CVE-2017-13089 +- https://github.com/r1b/CVE-2017-13089 diff --git a/cves/2017/CVE-2017-13156.md b/cves/2017/CVE-2017-13156.md index af677d63734..27dd2ac3bbd 100644 --- a/cves/2017/CVE-2017-13156.md +++ b/cves/2017/CVE-2017-13156.md @@ -29,6 +29,7 @@ An elevation of privilege vulnerability in the Android system (art). Product: An - https://github.com/tea9/CVE-2017-13156-Janus - https://github.com/wrlu/Android-Tools - https://github.com/xyzAsian/Janus-CVE-2017-13156 +- https://github.com/hackerronin/Janus-Vulnerability-CVE-2017-13156-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/47601 diff --git a/cves/2017/CVE-2017-13868.md b/cves/2017/CVE-2017-13868.md index 6096cdb8081..934ab689931 100644 --- a/cves/2017/CVE-2017-13868.md +++ b/cves/2017/CVE-2017-13868.md @@ -13,7 +13,7 @@ An issue was discovered in certain Apple products. iOS before 11.2 is affected. - https://github.com/bazad/ctl_ctloutput-leak #### Github -No PoCs found on GitHub currently. +- https://github.com/bazad/ctl_ctloutput-leak #### ExploitDB - https://www.exploit-db.com/exploits/44234 diff --git a/cves/2017/CVE-2017-14105.md b/cves/2017/CVE-2017-14105.md index 1dda76cd277..0b17000f50e 100644 --- a/cves/2017/CVE-2017-14105.md +++ b/cves/2017/CVE-2017-14105.md @@ -13,5 +13,5 @@ HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifyi - https://github.com/theguly/CVE-2017-14105 #### Github -No PoCs found on GitHub currently. +- https://github.com/theguly/CVE-2017-14105 diff --git a/cves/2017/CVE-2017-14849.md b/cves/2017/CVE-2017-14849.md index 5401b55921c..bb768a1d19f 100644 --- a/cves/2017/CVE-2017-14849.md +++ b/cves/2017/CVE-2017-14849.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14849.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/node/CVE-2017-14849 diff --git a/cves/2017/CVE-2017-14980.md b/cves/2017/CVE-2017-14980.md index 059ff9f99d7..ad7b34500c0 100644 --- a/cves/2017/CVE-2017-14980.md +++ b/cves/2017/CVE-2017-14980.md @@ -17,6 +17,11 @@ Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to hav - https://github.com/TheDarthMole/CVE-2017-14980 - https://github.com/kareemBambo/Boof - https://github.com/xn0kkx/Exploit_Sync_Breeze_v10.0.28_CVE-2017-14980 +- https://github.com/0xkr3pt0n/CVE-2017-14980 +- https://github.com/DaviGSantana/CVE-2017-14980 +- https://github.com/TheMalwareGuardian/CVE-2017-14980 +- https://github.com/ahmedmamdouh6/CVE-2017-14980 +- https://github.com/damariion/CVE-2017-14980.RCE #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/syncbreeze_bof.rb diff --git a/cves/2017/CVE-2017-15220.md b/cves/2017/CVE-2017-15220.md index b9562cc0616..89bb33496c7 100644 --- a/cves/2017/CVE-2017-15220.md +++ b/cves/2017/CVE-2017-15220.md @@ -13,7 +13,7 @@ Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an - https://www.exploit-db.com/exploits/42973/ #### Github -No PoCs found on GitHub currently. +- https://github.com/vasilerevnic/CVE-2017-15220-vxsearch-rce #### ExploitDB - https://www.exploit-db.com/exploits/42973 diff --git a/cves/2017/CVE-2017-15715.md b/cves/2017/CVE-2017-15715.md index bf4a314db60..bbd8e4e2eb0 100644 --- a/cves/2017/CVE-2017-15715.md +++ b/cves/2017/CVE-2017-15715.md @@ -17,3 +17,6 @@ In Apache httpd 2.4.0 to 2.4.29, the expression specified in could #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15715.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2017-15715 diff --git a/cves/2017/CVE-2017-16082.md b/cves/2017/CVE-2017-16082.md index e450b412dc7..e1c666d1670 100644 --- a/cves/2017/CVE-2017-16082.md +++ b/cves/2017/CVE-2017-16082.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/nulldreams/CVE-2017-16082 - https://github.com/ossf-cve-benchmark/CVE-2017-16082 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/node/CVE-2017-16082 diff --git a/cves/2017/CVE-2017-16524.md b/cves/2017/CVE-2017-16524.md index 2929ff75981..0b392bf77a0 100644 --- a/cves/2017/CVE-2017-16524.md +++ b/cves/2017/CVE-2017-16524.md @@ -14,7 +14,7 @@ Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted f - https://www.exploit-db.com/exploits/43138/ #### Github -No PoCs found on GitHub currently. +- https://github.com/realistic-security/CVE-2017-16524 #### ExploitDB - https://www.exploit-db.com/exploits/43138 diff --git a/cves/2017/CVE-2017-16995.md b/cves/2017/CVE-2017-16995.md index c2b0a6c32da..53efd9d077c 100644 --- a/cves/2017/CVE-2017-16995.md +++ b/cves/2017/CVE-2017-16995.md @@ -39,6 +39,7 @@ The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4 - https://github.com/thelostvoice/inept-us-military - https://github.com/vnik5287/CVE-2017-16995 - https://github.com/xxxTectationxxx/CVE-2017-16995 +- https://github.com/WhatsWrongAndWhy/CVE-2017-16995 #### ExploitDB - https://www.exploit-db.com/exploits/45058 diff --git a/cves/2017/CVE-2017-17405.md b/cves/2017/CVE-2017-17405.md index 55f40b6a575..646458c5655 100644 --- a/cves/2017/CVE-2017-17405.md +++ b/cves/2017/CVE-2017-17405.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### ExploitDB - https://www.exploit-db.com/exploits/43381 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ruby/CVE-2017-17405 diff --git a/cves/2017/CVE-2017-17562.md b/cves/2017/CVE-2017-17562.md index aa593bcb102..addd295c722 100644 --- a/cves/2017/CVE-2017-17562.md +++ b/cves/2017/CVE-2017-17562.md @@ -34,3 +34,6 @@ Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled an #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/goahead_ldpreload.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/goahead/CVE-2017-17562 diff --git a/cves/2017/CVE-2017-18349.md b/cves/2017/CVE-2017-18349.md index 7fb0bc57f3a..3ceb63a0266 100644 --- a/cves/2017/CVE-2017-18349.md +++ b/cves/2017/CVE-2017-18349.md @@ -14,6 +14,7 @@ parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 #### Github - https://github.com/h0cksr/Fastjson--CVE-2017-18349- +- https://github.com/Dungsocool/CVE-2017-18349 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18349.yaml diff --git a/cves/2017/CVE-2017-18635.md b/cves/2017/CVE-2017-18635.md index 7750da44c7b..42841c74688 100644 --- a/cves/2017/CVE-2017-18635.md +++ b/cves/2017/CVE-2017-18635.md @@ -15,4 +15,5 @@ An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VN #### Github - https://github.com/ossf-cve-benchmark/CVE-2017-18635 +- https://github.com/ShielderSec/CVE-2017-18635 diff --git a/cves/2017/CVE-2017-2824.md b/cves/2017/CVE-2017-2824.md index 5e3aec15038..a509bc8a6e4 100644 --- a/cves/2017/CVE-2017-2824.md +++ b/cves/2017/CVE-2017-2824.md @@ -15,3 +15,5 @@ An exploitable code execution vulnerability exists in the trapper command functi #### Github - https://github.com/listenquiet/cve-2017-2824-reverse-shell +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/zabbix/CVE-2017-2824 diff --git a/cves/2017/CVE-2017-3066.md b/cves/2017/CVE-2017-3066.md index 1d7de8f366a..ce882099451 100644 --- a/cves/2017/CVE-2017-3066.md +++ b/cves/2017/CVE-2017-3066.md @@ -21,3 +21,6 @@ Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, #### ExploitDB - https://www.exploit-db.com/exploits/43993 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2017-3066 diff --git a/cves/2017/CVE-2017-3248.md b/cves/2017/CVE-2017-3248.md index 113a5cf883a..c1c4e68bb0a 100644 --- a/cves/2017/CVE-2017-3248.md +++ b/cves/2017/CVE-2017-3248.md @@ -22,6 +22,7 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar #### Github - https://github.com/BabyTeam1024/CVE-2017-3248 - https://github.com/ianxtianxt/CVE-2017-3248 +- https://github.com/0xn0ne/weblogicScanner #### ExploitDB - https://www.exploit-db.com/exploits/44998 diff --git a/cves/2017/CVE-2017-4971.md b/cves/2017/CVE-2017-4971.md index 6f7673eea4f..dd69dffb8d2 100644 --- a/cves/2017/CVE-2017-4971.md +++ b/cves/2017/CVE-2017-4971.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github - https://github.com/cved-sources/cve-2017-4971 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2017-4971 diff --git a/cves/2017/CVE-2017-5123.md b/cves/2017/CVE-2017-5123.md index 1c8fdf2c96d..e0293683cac 100644 --- a/cves/2017/CVE-2017-5123.md +++ b/cves/2017/CVE-2017-5123.md @@ -21,6 +21,7 @@ Insufficient data validation in waitid allowed an user to escape sandboxes on Li - https://github.com/h1bAna/CVE-2017-5123 - https://github.com/shamedgh/container-privilege-escalation - https://github.com/teawater/CVE-2017-5123 +- https://github.com/NabilBoudra/cve-2017-5123 #### ExploitDB - https://www.exploit-db.com/exploits/43127 diff --git a/cves/2017/CVE-2017-5124.md b/cves/2017/CVE-2017-5124.md index 571407c33ea..fa8b55ea95c 100644 --- a/cves/2017/CVE-2017-5124.md +++ b/cves/2017/CVE-2017-5124.md @@ -14,7 +14,7 @@ Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202 - https://www.reddit.com/r/netsec/comments/7cus2h/chrome_61_uxss_exploit_cve20175124/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Bo0oM/CVE-2017-5124 #### ExploitDB - https://www.exploit-db.com/exploits/45867 diff --git a/cves/2017/CVE-2017-5223.md b/cves/2017/CVE-2017-5223.md index 3e6f24e397a..11b3ddca59a 100644 --- a/cves/2017/CVE-2017-5223.md +++ b/cves/2017/CVE-2017-5223.md @@ -17,3 +17,6 @@ An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method a #### ExploitDB - https://www.exploit-db.com/exploits/43056 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpmailer/CVE-2017-5223 diff --git a/cves/2017/CVE-2017-5638.md b/cves/2017/CVE-2017-5638.md index 5c360e84dd0..eb07818f1fd 100644 --- a/cves/2017/CVE-2017-5638.md +++ b/cves/2017/CVE-2017-5638.md @@ -125,6 +125,9 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be - https://github.com/xeroxis-xs/Computer-Security-Apache-Struts-Vulnerability - https://github.com/xsscx/cve-2017-5638 - https://github.com/zacharie410/Exploiting-Web-Apps +- https://github.com/AIPEACS/SC3010-Computer-Security +- https://github.com/Dungsocool/CVE-2017-5638 +- https://github.com/smancke/CVE-2017-5638 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5638.yaml diff --git a/cves/2017/CVE-2017-5645.md b/cves/2017/CVE-2017-5645.md index e74095bfb12..f663b2d9577 100644 --- a/cves/2017/CVE-2017-5645.md +++ b/cves/2017/CVE-2017-5645.md @@ -17,3 +17,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2017/CVE-2017-5645.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/log4j/CVE-2017-5645 diff --git a/cves/2017/CVE-2017-5941.md b/cves/2017/CVE-2017-5941.md index 0be794f6d85..4186ed92696 100644 --- a/cves/2017/CVE-2017-5941.md +++ b/cves/2017/CVE-2017-5941.md @@ -21,6 +21,7 @@ An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrust - https://github.com/rodolfomarianocy/nodeserial - https://github.com/turnernator1/Node.js-CVE-2017-5941 - https://github.com/uartu0/nodejshell +- https://github.com/f41k0n/RCE-NodeJs #### ExploitDB - https://www.exploit-db.com/exploits/50036 diff --git a/cves/2017/CVE-2017-6206.md b/cves/2017/CVE-2017-6206.md index d7d8d219a73..ba3054fef9c 100644 --- a/cves/2017/CVE-2017-6206.md +++ b/cves/2017/CVE-2017-6206.md @@ -14,7 +14,7 @@ D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DG - https://www.exploit-db.com/exploits/41662/ #### Github -No PoCs found on GitHub currently. +- https://github.com/varangamin/CVE-2017-6206 #### ExploitDB - https://www.exploit-db.com/exploits/41662 diff --git a/cves/2017/CVE-2017-6736.md b/cves/2017/CVE-2017-6736.md index 47fef146bfc..7cfe6f26779 100644 --- a/cves/2017/CVE-2017-6736.md +++ b/cves/2017/CVE-2017-6736.md @@ -1766,7 +1766,7 @@ The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE - https://www.exploit-db.com/exploits/43450/ #### Github -No PoCs found on GitHub currently. +- https://github.com/plyrthn/CiscoSpectreTakeover #### ExploitDB - https://www.exploit-db.com/exploits/43450 diff --git a/cves/2017/CVE-2017-6920.md b/cves/2017/CVE-2017-6920.md index 3f1902f6797..a15435e0c8e 100644 --- a/cves/2017/CVE-2017-6920.md +++ b/cves/2017/CVE-2017-6920.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2017-6920 diff --git a/cves/2017/CVE-2017-7184.md b/cves/2017/CVE-2017-7184.md index ac200e8e7ce..d1829144840 100644 --- a/cves/2017/CVE-2017-7184.md +++ b/cves/2017/CVE-2017-7184.md @@ -14,4 +14,6 @@ The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel #### Github - https://github.com/b1nhack/CVE-2017-7184 +- https://github.com/Grish-Pradhan/CVE-2017-7184 +- https://github.com/shakyanayann/CVE-2017-7184 diff --git a/cves/2017/CVE-2017-7269.md b/cves/2017/CVE-2017-7269.md index 9e74c2267d6..b425df9f2a0 100644 --- a/cves/2017/CVE-2017-7269.md +++ b/cves/2017/CVE-2017-7269.md @@ -44,6 +44,7 @@ Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in In - https://github.com/xdx57/WebDav_Exploiter - https://github.com/zcgonvh/cve-2017-7269 - https://github.com/zcgonvh/cve-2017-7269-tool +- https://github.com/Killian0713/Assignement_3-CVE-2017-7269 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7269.yaml diff --git a/cves/2017/CVE-2017-7308.md b/cves/2017/CVE-2017-7308.md index 044fd5f37ae..463439576b4 100644 --- a/cves/2017/CVE-2017-7308.md +++ b/cves/2017/CVE-2017-7308.md @@ -17,6 +17,7 @@ The packet_set_ring function in net/packet/af_packet.c in the Linux kernel throu - https://github.com/anldori/CVE-2017-7308 - https://github.com/seclab-ucr/KOOBE - https://github.com/vusec/blindside +- https://github.com/WhatsWrongAndWhy/CVE-2017-7308 #### ExploitDB - https://www.exploit-db.com/exploits/44654 diff --git a/cves/2017/CVE-2017-7494.md b/cves/2017/CVE-2017-7494.md index ee9e7f4dd55..8fb49f215f8 100644 --- a/cves/2017/CVE-2017-7494.md +++ b/cves/2017/CVE-2017-7494.md @@ -39,6 +39,8 @@ Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to r - https://github.com/m4udSec/noSAMBAnoCRY-CVE-2017-7494 - https://github.com/opsxcq/exploit-CVE-2017-7494 - https://github.com/the-aerospace-corporation/counter-reconnaissance-program +- https://github.com/YonLiud/CVE-2017-7494 +- https://github.com/sudlit/CVE-2017-7494 #### ExploitDB - https://www.exploit-db.com/exploits/42084 @@ -46,3 +48,6 @@ Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to r #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/samba/CVE-2017-7494 diff --git a/cves/2017/CVE-2017-7504.md b/cves/2017/CVE-2017-7504.md index 1dfc9c0c759..2c38ad89a99 100644 --- a/cves/2017/CVE-2017-7504.md +++ b/cves/2017/CVE-2017-7504.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7504.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jboss/CVE-2017-7504 diff --git a/cves/2017/CVE-2017-7525.md b/cves/2017/CVE-2017-7525.md index 2e6a1ecdc7f..14027a62c00 100644 --- a/cves/2017/CVE-2017-7525.md +++ b/cves/2017/CVE-2017-7525.md @@ -31,3 +31,5 @@ A deserialization flaw was discovered in the jackson-databind, versions before 2 - https://github.com/ongamse/Scala - https://github.com/wahyuhadi/spel.xml +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jackson/CVE-2017-7525 diff --git a/cves/2017/CVE-2017-7529.md b/cves/2017/CVE-2017-7529.md index 0cef1c242d8..87efbb01a3a 100644 --- a/cves/2017/CVE-2017-7529.md +++ b/cves/2017/CVE-2017-7529.md @@ -39,3 +39,6 @@ Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/cve-2017-7529-3066.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nginx/CVE-2017-7529 diff --git a/cves/2017/CVE-2017-7679.md b/cves/2017/CVE-2017-7679.md index a6264ea253e..659b1b527d3 100644 --- a/cves/2017/CVE-2017-7679.md +++ b/cves/2017/CVE-2017-7679.md @@ -14,5 +14,5 @@ In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read o - https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679 #### Github -No PoCs found on GitHub currently. +- https://github.com/Al-Lord0x/CVE-2017-7679 diff --git a/cves/2017/CVE-2017-7921.md b/cves/2017/CVE-2017-7921.md index cd4b4c44327..b71bc29781b 100644 --- a/cves/2017/CVE-2017-7921.md +++ b/cves/2017/CVE-2017-7921.md @@ -29,6 +29,11 @@ No PoCs from references. - https://github.com/kooroshsanaei/HikVision-CVE-2017-7921 - https://github.com/krypton612/hikivision - https://github.com/p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor +- https://github.com/0xf3d0rq/CVE-2017-7921 +- https://github.com/KelvinWin10/CVE-2017-7921-rewrite +- https://github.com/alkaid176/CVE-2017-7921 +- https://github.com/blacksheepstudio/CVE-2017-7921-EXP +- https://github.com/mverschu/CVE-2017-7921 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7921.yaml diff --git a/cves/2017/CVE-2017-8046.md b/cves/2017/CVE-2017-8046.md index f0252dfa473..6a3d9d72e44 100644 --- a/cves/2017/CVE-2017-8046.md +++ b/cves/2017/CVE-2017-8046.md @@ -20,9 +20,13 @@ Malicious PATCH requests submitted to servers using Spring Data REST versions pr - https://github.com/m3ssap0/SpringBreakVulnerableApp - https://github.com/m3ssap0/spring-break_cve-2017-8046 - https://github.com/sj/spring-data-rest-CVE-2017-8046 +- https://github.com/bkhablenko/CVE-2017-8046 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8046.yaml #### ExploitDB - https://www.exploit-db.com/exploits/44289 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2017-8046 diff --git a/cves/2017/CVE-2017-8291.md b/cves/2017/CVE-2017-8291.md index 484aa255e8f..92959808352 100644 --- a/cves/2017/CVE-2017-8291.md +++ b/cves/2017/CVE-2017-8291.md @@ -17,6 +17,7 @@ Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command - https://github.com/hkcfs/PIL-CVE-2017-8291 - https://github.com/shun1403/CVE-2017-8291 - https://github.com/shun1403/PIL-CVE-2017-8291-study +- https://github.com/DaniilOrchikov/PIL-CVE-2017-8291 #### ExploitDB - https://www.exploit-db.com/exploits/41955 @@ -24,3 +25,6 @@ Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/ghostscript_type_confusion.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/python/PIL-CVE-2017-8291 diff --git a/cves/2017/CVE-2017-8382.md b/cves/2017/CVE-2017-8382.md index 86cbdd1b051..4bc56931a4e 100644 --- a/cves/2017/CVE-2017-8382.md +++ b/cves/2017/CVE-2017-8382.md @@ -16,7 +16,7 @@ admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with - https://www.exploit-db.com/exploits/42005/ #### Github -No PoCs found on GitHub currently. +- https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc #### ExploitDB - https://www.exploit-db.com/exploits/42005 diff --git a/cves/2017/CVE-2017-8386.md b/cves/2017/CVE-2017-8386.md index caaefc0b997..2bc78ec8713 100644 --- a/cves/2017/CVE-2017-8386.md +++ b/cves/2017/CVE-2017-8386.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/cyberharsh/Gitcve-2017-8386 - https://github.com/suz1n/WHS3_vulhub +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/git/CVE-2017-8386 diff --git a/cves/2017/CVE-2017-8464.md b/cves/2017/CVE-2017-8464.md index 13fce707297..155fcf47f9b 100644 --- a/cves/2017/CVE-2017-8464.md +++ b/cves/2017/CVE-2017-8464.md @@ -33,6 +33,7 @@ Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi - https://github.com/tuankiethkt020/Phat-hien-CVE-2017-8464 - https://github.com/xssfile/CVE-2017-8464-EXP - https://github.com/yiyebuhuijia/PowerShell-Suite +- https://github.com/PlayBoiSK8/POC-CVE-2017-8464-OpenCalculator #### ExploitDB - https://www.exploit-db.com/exploits/42429 diff --git a/cves/2017/CVE-2017-8570.md b/cves/2017/CVE-2017-8570.md index aec28db0168..91139b819c3 100644 --- a/cves/2017/CVE-2017-8570.md +++ b/cves/2017/CVE-2017-8570.md @@ -23,6 +23,7 @@ Microsoft Office allows a remote code execution vulnerability due to the way tha - https://github.com/phamphuqui1998/Research-Exploit-Office - https://github.com/sasqwatch/CVE-2017-8570 - https://github.com/tezukanice/Office8570 +- https://github.com/rxwx/CVE-2017-8570 #### ExploitDB - https://www.exploit-db.com/exploits/44263 diff --git a/cves/2017/CVE-2017-8641.md b/cves/2017/CVE-2017-8641.md index deed98b9499..4cbb6808bce 100644 --- a/cves/2017/CVE-2017-8641.md +++ b/cves/2017/CVE-2017-8641.md @@ -13,7 +13,7 @@ Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windo - https://www.exploit-db.com/exploits/42465/ #### Github -No PoCs found on GitHub currently. +- https://github.com/homjxi0e/CVE-2017-8641_chakra_Js_GlobalObject #### ExploitDB - https://www.exploit-db.com/exploits/42465 diff --git a/cves/2017/CVE-2017-8890.md b/cves/2017/CVE-2017-8890.md index 7f1dfb5dda6..1ddc1d024ff 100644 --- a/cves/2017/CVE-2017-8890.md +++ b/cves/2017/CVE-2017-8890.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/7043mcgeep/cve-2017-8890-msf - https://github.com/beraphin/CVE-2017-8890 - https://github.com/thinkycx/CVE-2017-8890 +- https://github.com/sweatyrocket/huawei-p10-cve-2017-8890-unlock diff --git a/cves/2017/CVE-2017-8917.md b/cves/2017/CVE-2017-8917.md index 5e6bfc6c5df..e7d7fb7842c 100644 --- a/cves/2017/CVE-2017-8917.md +++ b/cves/2017/CVE-2017-8917.md @@ -26,6 +26,7 @@ SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to ex - https://github.com/johnkiguru1337/N-Days - https://github.com/stefanlucas/Exploit-Joomla - https://github.com/teranpeterson/Joomblah +- https://github.com/yayateayayatea/cve-2017-8917 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8917.yaml @@ -37,3 +38,6 @@ SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to ex #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_comfields_sqli_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/joomla/CVE-2017-8917 diff --git a/cves/2017/CVE-2017-9609.md b/cves/2017/CVE-2017-9609.md index 6f1a5e958e9..3bd9f2cadcf 100644 --- a/cves/2017/CVE-2017-9609.md +++ b/cves/2017/CVE-2017-9609.md @@ -15,5 +15,5 @@ Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authe - https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc #### Github -No PoCs found on GitHub currently. +- https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc diff --git a/cves/2017/CVE-2017-9757.md b/cves/2017/CVE-2017-9757.md index 79df084ae11..3a3da57fb02 100644 --- a/cves/2017/CVE-2017-9757.md +++ b/cves/2017/CVE-2017-9757.md @@ -15,6 +15,7 @@ IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINK #### Github - https://github.com/davimoreno/ipfire_rce - https://github.com/peterleiva/CVE-2017-9757 +- https://github.com/joaoaugustom/IPFire_2.19_RCE_Authenticated #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_oinkcode_exec.rb diff --git a/cves/2017/CVE-2017-9805.md b/cves/2017/CVE-2017-9805.md index 49a3d605e55..dd10841e7f6 100644 --- a/cves/2017/CVE-2017-9805.md +++ b/cves/2017/CVE-2017-9805.md @@ -35,6 +35,10 @@ The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x bef - https://github.com/sujithvaddi/apache_struts_cve_2017_9805 - https://github.com/wifido/CVE-2017-9805-Exploit - https://github.com/z3bd/CVE-2017-9805 +- https://github.com/7s26simon/CVE-2017-9805-S2-052 +- https://github.com/Fl5xia/CVE-2017-9805 +- https://github.com/NoSpaceAvailable/CVE-2017-9805_example_build +- https://github.com/agent3137/CVE-2017-9805-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9805.yaml diff --git a/cves/2017/CVE-2017-9841.md b/cves/2017/CVE-2017-9841.md index b3fb955091c..86f070f2454 100644 --- a/cves/2017/CVE-2017-9841.md +++ b/cves/2017/CVE-2017-9841.md @@ -30,9 +30,13 @@ Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows rem - https://github.com/mileticluka1/eval-stdin - https://github.com/moonwayy/hindicybersec - https://github.com/p1ckzi/CVE-2017-9841 +- https://github.com/krisdewa/CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml #### ExploitDB - https://www.exploit-db.com/exploits/50702 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpunit/CVE-2017-9841 diff --git a/cves/2017/CVE-2017-9993.md b/cves/2017/CVE-2017-9993.md index 0d308d6284d..81738a4d7ce 100644 --- a/cves/2017/CVE-2017-9993.md +++ b/cves/2017/CVE-2017-9993.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ffmpeg/CVE-2017-9993 diff --git a/cves/2018/CVE-2018-0114.md b/cves/2018/CVE-2018-0114.md index 5f04765b31e..10b9d7d6b82 100644 --- a/cves/2018/CVE-2018-0114.md +++ b/cves/2018/CVE-2018-0114.md @@ -27,6 +27,7 @@ A vulnerability in the Cisco node-jose open source library before 0.11.0 could a - https://github.com/pinnace/burp-jwt-fuzzhelper-extension - https://github.com/scumdestroy/CVE-2018-0114 - https://github.com/sealldeveloper/CVE-2018-0114-PoC +- https://github.com/zi0Black/POC-CVE-2018-0114 #### ExploitDB - https://www.exploit-db.com/exploits/44324 diff --git a/cves/2018/CVE-2018-0802.md b/cves/2018/CVE-2018-0802.md index 0a97e6d14fb..af77fca1d43 100644 --- a/cves/2018/CVE-2018-0802.md +++ b/cves/2018/CVE-2018-0802.md @@ -20,4 +20,6 @@ Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Offic - https://github.com/likekabin/CVE-2018-0802_CVE-2017-11882 - https://github.com/likescam/CVE-2018-0802_CVE-2017-11882 - https://github.com/roninAPT/CVE-2018-0802 +- https://github.com/rxwx/CVE-2018-0802 +- https://github.com/zldww2011/CVE-2018-0802_POC diff --git a/cves/2018/CVE-2018-0886.md b/cves/2018/CVE-2018-0886.md index bcf15a55311..fbb2ec9c020 100644 --- a/cves/2018/CVE-2018-0886.md +++ b/cves/2018/CVE-2018-0886.md @@ -14,7 +14,7 @@ The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows - https://www.exploit-db.com/exploits/44453/ #### Github -No PoCs found on GitHub currently. +- https://github.com/preempt/credssp #### ExploitDB - https://www.exploit-db.com/exploits/44453 diff --git a/cves/2018/CVE-2018-1000006.md b/cves/2018/CVE-2018-1000006.md index 9196e8a057d..89bf85ae310 100644 --- a/cves/2018/CVE-2018-1000006.md +++ b/cves/2018/CVE-2018-1000006.md @@ -23,3 +23,6 @@ GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 an #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/exodus.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/electron/CVE-2018-1000006 diff --git a/cves/2018/CVE-2018-1000529.md b/cves/2018/CVE-2018-1000529.md index 0819cebd18b..7648f37c237 100644 --- a/cves/2018/CVE-2018-1000529.md +++ b/cves/2018/CVE-2018-1000529.md @@ -13,5 +13,5 @@ Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnera - https://github.com/martinfrancois/CVE-2018-1000529 #### Github -No PoCs found on GitHub currently. +- https://github.com/martinfrancois/CVE-2018-1000529 diff --git a/cves/2018/CVE-2018-1000533.md b/cves/2018/CVE-2018-1000533.md index 3edf49e8a30..c32634d5129 100644 --- a/cves/2018/CVE-2018-1000533.md +++ b/cves/2018/CVE-2018-1000533.md @@ -13,10 +13,13 @@ klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized in No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/dddo0/CVE-2018-1000533 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000533.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlist_arg_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gitlist/CVE-2018-1000533 diff --git a/cves/2018/CVE-2018-1000861.md b/cves/2018/CVE-2018-1000861.md index 2ba4e32e7b3..6774d9aa153 100644 --- a/cves/2018/CVE-2018-1000861.md +++ b/cves/2018/CVE-2018-1000861.md @@ -23,3 +23,6 @@ A code execution vulnerability exists in the Stapler web framework used by Jenki #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkins_metaprogramming.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2018-1000861 diff --git a/cves/2018/CVE-2018-1002105.md b/cves/2018/CVE-2018-1002105.md index a4de81382b5..caf839b3db7 100644 --- a/cves/2018/CVE-2018-1002105.md +++ b/cves/2018/CVE-2018-1002105.md @@ -29,6 +29,7 @@ In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect ha - https://github.com/bgeesaman/cve-2018-1002105 - https://github.com/gravitational/cve-2018-1002105 - https://github.com/sh-ubh/CVE-2018-1002105 +- https://github.com/evict/poc_CVE-2018-1002105 #### ExploitDB - https://www.exploit-db.com/exploits/46053 diff --git a/cves/2018/CVE-2018-10054.md b/cves/2018/CVE-2018-10054.md index 94cca59ed78..c37f4835d29 100644 --- a/cves/2018/CVE-2018-10054.md +++ b/cves/2018/CVE-2018-10054.md @@ -19,3 +19,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/h2_webinterface_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/h2database/CVE-2018-10054 diff --git a/cves/2018/CVE-2018-1049.md b/cves/2018/CVE-2018-1049.md index 696ef497be5..5fccd9065a2 100644 --- a/cves/2018/CVE-2018-1049.md +++ b/cves/2018/CVE-2018-1049.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/lukehebe/CVE-2018-1049 +- https://github.com/lukehebe/CVE-2018-1049-POC diff --git a/cves/2018/CVE-2018-1058.md b/cves/2018/CVE-2018-1058.md index 182673c0ace..cf65d2e7ace 100644 --- a/cves/2018/CVE-2018-1058.md +++ b/cves/2018/CVE-2018-1058.md @@ -13,5 +13,7 @@ A flaw was found in the way Postgresql allowed a user to modify the behavior of No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ccchme/CVE-2018-1058 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/postgres/CVE-2018-1058 diff --git a/cves/2018/CVE-2018-10732.md b/cves/2018/CVE-2018-10732.md index 04d22767ac8..c31385ac639 100644 --- a/cves/2018/CVE-2018-10732.md +++ b/cves/2018/CVE-2018-10732.md @@ -13,5 +13,5 @@ The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-10732 diff --git a/cves/2018/CVE-2018-10933.md b/cves/2018/CVE-2018-10933.md index 2cf0b38b4cc..a2242bb8485 100644 --- a/cves/2018/CVE-2018-10933.md +++ b/cves/2018/CVE-2018-10933.md @@ -51,6 +51,8 @@ A vulnerability was found in libssh's server-side state machine before versions - https://github.com/wj158/snowwolf-script - https://github.com/xFreed0m/CVE-2018-10933 - https://github.com/youkergav/CVE-2018-10933 +- https://github.com/K3ysTr0K3R/CVE-2018-10933 +- https://github.com/opsifiz/CVE-2018-10933 #### ExploitDB - https://www.exploit-db.com/exploits/46307 @@ -58,3 +60,6 @@ A vulnerability was found in libssh's server-side state machine before versions #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/libssh_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/libssh/CVE-2018-10933 diff --git a/cves/2018/CVE-2018-11235.md b/cves/2018/CVE-2018-11235.md index a6b07622ebe..80a54883ffe 100644 --- a/cves/2018/CVE-2018-11235.md +++ b/cves/2018/CVE-2018-11235.md @@ -36,4 +36,5 @@ In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before - https://github.com/vmotos/CVE-2018-11235 - https://github.com/xElkomy/CVE-2018-11235 - https://github.com/ygouzerh/CVE-2018-11235 +- https://github.com/Rezy-Dev/CVE-2018-11235 diff --git a/cves/2018/CVE-2018-11311.md b/cves/2018/CVE-2018-11311.md index 69681c26adf..dd1e1588326 100644 --- a/cves/2018/CVE-2018-11311.md +++ b/cves/2018/CVE-2018-11311.md @@ -13,7 +13,7 @@ A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' - https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password #### Github -No PoCs found on GitHub currently. +- https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password #### ExploitDB - https://www.exploit-db.com/exploits/48620 diff --git a/cves/2018/CVE-2018-11776.md b/cves/2018/CVE-2018-11776.md index fb3a6c4d870..b77ff4eacd7 100644 --- a/cves/2018/CVE-2018-11776.md +++ b/cves/2018/CVE-2018-11776.md @@ -49,6 +49,7 @@ Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remo - https://github.com/techgyu/WHS - https://github.com/tuxotron/cve-2018-11776-docker - https://github.com/xfox64x/CVE-2018-11776 +- https://github.com/hook-s3c/CVE-2018-11776-Python-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11776.yaml diff --git a/cves/2018/CVE-2018-1207.md b/cves/2018/CVE-2018-1207.md index c356f56a4b7..70d0c692af7 100644 --- a/cves/2018/CVE-2018-1207.md +++ b/cves/2018/CVE-2018-1207.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/KingPlayzOp1/cve - https://github.com/mgargiullo/cve-2018-1207 - https://github.com/miorin002/H-I_AIO +- https://github.com/hironull/CVE-2018-1207-better #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1207.yaml diff --git a/cves/2018/CVE-2018-12463.md b/cves/2018/CVE-2018-12463.md index 723a837d4fa..96ce5848087 100644 --- a/cves/2018/CVE-2018-12463.md +++ b/cves/2018/CVE-2018-12463.md @@ -13,7 +13,7 @@ An XML external entity (XXE) vulnerability in Fortify Software Security Center ( - https://www.exploit-db.com/exploits/45027/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-12463 #### ExploitDB - https://www.exploit-db.com/exploits/45027 diff --git a/cves/2018/CVE-2018-12533.md b/cves/2018/CVE-2018-12533.md index 8f78614633c..fba6b7f1ef7 100644 --- a/cves/2018/CVE-2018-12533.md +++ b/cves/2018/CVE-2018-12533.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/TheKalin/CVE-2018-12533 - https://github.com/llamaonsecurity/CVE-2018-12533 - https://github.com/mhagnumdw/richfaces-vulnerability-cve-2018-12533-rf-14310 +- https://github.com/LucasKatashi/paint2die diff --git a/cves/2018/CVE-2018-12596.md b/cves/2018/CVE-2018-12596.md index 8dbc5652af7..709690b32f9 100644 --- a/cves/2018/CVE-2018-12596.md +++ b/cves/2018/CVE-2018-12596.md @@ -16,7 +16,7 @@ Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9. - https://www.exploit-db.com/exploits/45577/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-12596 #### ExploitDB - https://www.exploit-db.com/exploits/45577 diff --git a/cves/2018/CVE-2018-12613.md b/cves/2018/CVE-2018-12613.md index 2cd8d949ef1..2067c8fa8e5 100644 --- a/cves/2018/CVE-2018-12613.md +++ b/cves/2018/CVE-2018-12613.md @@ -33,3 +33,6 @@ An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker c #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_lfi_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/phpmyadmin/CVE-2018-12613 diff --git a/cves/2018/CVE-2018-1270.md b/cves/2018/CVE-2018-1270.md index 5b55e25a63e..f1707bed7f3 100644 --- a/cves/2018/CVE-2018-1270.md +++ b/cves/2018/CVE-2018-1270.md @@ -17,3 +17,5 @@ Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 a - https://github.com/Venscor/CVE-2018-1270 - https://github.com/tafamace/CVE-2018-1270 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2018-1270 diff --git a/cves/2018/CVE-2018-1273.md b/cves/2018/CVE-2018-1273.md index c6e7ddfed09..5f53fa77feb 100644 --- a/cves/2018/CVE-2018-1273.md +++ b/cves/2018/CVE-2018-1273.md @@ -23,3 +23,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1273.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2018-1273 diff --git a/cves/2018/CVE-2018-1297.md b/cves/2018/CVE-2018-1297.md index 352beb97783..a08bf6cf4af 100644 --- a/cves/2018/CVE-2018-1297.md +++ b/cves/2018/CVE-2018-1297.md @@ -17,3 +17,5 @@ No PoCs from references. - https://github.com/48484848484848/Jmeter-CVE-2018-1297- - https://github.com/Al1ex/CVE-2018-1297 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jmeter/CVE-2018-1297 diff --git a/cves/2018/CVE-2018-13379.md b/cves/2018/CVE-2018-13379.md index bd15f3a37ca..5ffcf71dd41 100644 --- a/cves/2018/CVE-2018-13379.md +++ b/cves/2018/CVE-2018-13379.md @@ -25,6 +25,8 @@ An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal" - https://github.com/nivdolgin/CVE-2018-13379 - https://github.com/pwn3z/CVE-2018-13379-FortinetVPN - https://github.com/yukar1z0e/CVE-2018-13379 +- https://github.com/Instructor-Admin/Multi-threaded-mass-exploiter-CVE-2018-13379-POC +- https://github.com/Zierax/CVE-2018-13379 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13379.yaml diff --git a/cves/2018/CVE-2018-14009.md b/cves/2018/CVE-2018-14009.md index e1d3130a642..b1b0ba5b20c 100644 --- a/cves/2018/CVE-2018-14009.md +++ b/cves/2018/CVE-2018-14009.md @@ -15,6 +15,7 @@ Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability tha #### Github - https://github.com/WangYihang/Codiad-Remote-Code-Execute-Exploit - https://github.com/hidog123/Codiad-CVE-2018-14009 +- https://github.com/lolameroo/Codiad-CVE-2018-14009 #### ExploitDB - https://www.exploit-db.com/exploits/49705 diff --git a/cves/2018/CVE-2018-14324.md b/cves/2018/CVE-2018-14324.md index 42afa6de775..a3a4c1f15e6 100644 --- a/cves/2018/CVE-2018-14324.md +++ b/cves/2018/CVE-2018-14324.md @@ -13,5 +13,5 @@ The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/matejsmycka/CVE-2018-14324-Exploit diff --git a/cves/2018/CVE-2018-14574.md b/cves/2018/CVE-2018-14574.md index b271880b904..9e47aefdb57 100644 --- a/cves/2018/CVE-2018-14574.md +++ b/cves/2018/CVE-2018-14574.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14574.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2018-14574 diff --git a/cves/2018/CVE-2018-14847.md b/cves/2018/CVE-2018-14847.md index 781b3142a44..8ec24d4436e 100644 --- a/cves/2018/CVE-2018-14847.md +++ b/cves/2018/CVE-2018-14847.md @@ -56,6 +56,8 @@ MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read a - https://github.com/vickysanthosh/routersploit - https://github.com/whiterabb17/MkCheck - https://github.com/yukar1z0e/CVE-2018-14847 +- https://github.com/BasuCert/WinboxPoC +- https://github.com/mourafuseti/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS #### ExploitDB - https://www.exploit-db.com/exploits/45578 diff --git a/cves/2018/CVE-2018-15133.md b/cves/2018/CVE-2018-15133.md index e53081925e7..dc52cf18346 100644 --- a/cves/2018/CVE-2018-15133.md +++ b/cves/2018/CVE-2018-15133.md @@ -26,6 +26,8 @@ In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execut - https://github.com/kozmic/laravel-poc-CVE-2018-15133 - https://github.com/yeahhbean/Laravel-CVE-2018-15133 - https://github.com/z3dxian6/gen_laravel_cookie +- https://github.com/Cr4zyD14m0nd137/Lab-for-cve-2018-15133 +- https://github.com/Loaxert/CVE-2018-15133-PoC #### ExploitDB - https://www.exploit-db.com/exploits/47129 diff --git a/cves/2018/CVE-2018-15473.md b/cves/2018/CVE-2018-15473.md index 3fbac7a847c..d28327f9573 100644 --- a/cves/2018/CVE-2018-15473.md +++ b/cves/2018/CVE-2018-15473.md @@ -67,6 +67,10 @@ OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not dela - https://github.com/yZ1337/CVE-2018-15473 - https://github.com/yZee00/CVE-2018-15473 - https://github.com/yZeetje/CVE-2018-15473 +- https://github.com/K3rn3l-32/Threaded-CVE-2018-15473 +- https://github.com/kaktus5454/CVE-2018-15473 +- https://github.com/kikechans/-SSH-Enum-CVE-2018-15473 +- https://github.com/wtbacon/cve-2018-15473 #### ExploitDB - https://www.exploit-db.com/exploits/45233 @@ -75,3 +79,6 @@ OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not dela #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder5/CVE-2018-15473.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openssh/CVE-2018-15473 diff --git a/cves/2018/CVE-2018-15499.md b/cves/2018/CVE-2018-15499.md index b2b808077c0..d82152956ef 100644 --- a/cves/2018/CVE-2018-15499.md +++ b/cves/2018/CVE-2018-15499.md @@ -13,5 +13,5 @@ GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users - https://github.com/DownWithUp/CVE-2018-15499 #### Github -No PoCs found on GitHub currently. +- https://github.com/DownWithUp/CVE-2018-15499 diff --git a/cves/2018/CVE-2018-15685.md b/cves/2018/CVE-2018-15685.md index 2bdd9596c14..4500a842de8 100644 --- a/cves/2018/CVE-2018-15685.md +++ b/cves/2018/CVE-2018-15685.md @@ -18,3 +18,6 @@ GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios inv #### ExploitDB - https://www.exploit-db.com/exploits/45272 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/electron/CVE-2018-15685 diff --git a/cves/2018/CVE-2018-16385.md b/cves/2018/CVE-2018-16385.md index 476467b8931..1f7ff1c391b 100644 --- a/cves/2018/CVE-2018-16385.md +++ b/cves/2018/CVE-2018-16385.md @@ -13,5 +13,5 @@ ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/inde No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/buzhimingdeaikun/SQL-ThinkPHP-5.0.24-RCE- diff --git a/cves/2018/CVE-2018-16509.md b/cves/2018/CVE-2018-16509.md index 9835e5e16f7..8390bdffdad 100644 --- a/cves/2018/CVE-2018-16509.md +++ b/cves/2018/CVE-2018-16509.md @@ -27,3 +27,7 @@ An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restorati #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/ghostscript_failed_restore.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ghostscript/CVE-2018-16509 +- https://github.com/vulhub/vulhub/tree/master/python/PIL-CVE-2018-16509 diff --git a/cves/2018/CVE-2018-16763.md b/cves/2018/CVE-2018-16763.md index 989f58cce0d..233f843d32a 100644 --- a/cves/2018/CVE-2018-16763.md +++ b/cves/2018/CVE-2018-16763.md @@ -57,6 +57,12 @@ FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter - https://github.com/savior-only/javafx_tools - https://github.com/shoamshilo/Fuel-CMS-Remote-Code-Execution-1.4--RCE-- - https://github.com/wizardy0ga/THM-Vulnerability_Capstone-CVE-2018-16763 +- https://github.com/Cyberuser-hash/CVE-2018-16763 +- https://github.com/ShadowR-Root/fuel-cms-cve-2018-16763-python3-port +- https://github.com/bad-c0de/CVE-2018-16763_FuelCMS-1.4.1_RCE +- https://github.com/estebanzarate/CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC +- https://github.com/gh0stuncle/CVE-2018-16763_fuel_cms_exploit +- https://github.com/kaxm23/exploit_cms_fuel #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16763.yaml diff --git a/cves/2018/CVE-2018-17081.md b/cves/2018/CVE-2018-17081.md index 8c79b2f51bd..6a7dce1b7a8 100644 --- a/cves/2018/CVE-2018-17081.md +++ b/cves/2018/CVE-2018-17081.md @@ -13,5 +13,5 @@ e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used - https://github.com/himanshurahi/e107_2.1.9_CSRF_POC #### Github -No PoCs found on GitHub currently. +- https://github.com/himanshurahi1996/e107_2.1.9_CSRF_POC diff --git a/cves/2018/CVE-2018-17240.md b/cves/2018/CVE-2018-17240.md index b4d08c5c770..ca1e41908d1 100644 --- a/cves/2018/CVE-2018-17240.md +++ b/cves/2018/CVE-2018-17240.md @@ -16,4 +16,5 @@ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcor #### Github - https://github.com/FenrirSec/CVE-2018-17240_exploit - https://github.com/Xewdy444/Netgrave +- https://github.com/BBge/CVE-2018-17240 diff --git a/cves/2018/CVE-2018-17246.md b/cves/2018/CVE-2018-17246.md index 00d097d1a86..220f67bc3f0 100644 --- a/cves/2018/CVE-2018-17246.md +++ b/cves/2018/CVE-2018-17246.md @@ -17,3 +17,6 @@ Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17246.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kibana/CVE-2018-17246 diff --git a/cves/2018/CVE-2018-18778.md b/cves/2018/CVE-2018-18778.md index 476e8131000..1d745d084c3 100644 --- a/cves/2018/CVE-2018-18778.md +++ b/cves/2018/CVE-2018-18778.md @@ -14,6 +14,10 @@ No PoCs from references. #### Github - https://github.com/cyberharsh/Mini_httpd-CVE-2018-18778 +- https://github.com/K3ysTr0K3R/CVE-2018-18778 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18778.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/mini_httpd/CVE-2018-18778 diff --git a/cves/2018/CVE-2018-18912.md b/cves/2018/CVE-2018-18912.md index 43f0916af7e..fa4abe5e632 100644 --- a/cves/2018/CVE-2018-18912.md +++ b/cves/2018/CVE-2018-18912.md @@ -13,5 +13,5 @@ An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based - https://github.com/notkisi/CVE-s/blob/master/CVE-2018-18912.py #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2018-18912 diff --git a/cves/2018/CVE-2018-18925.md b/cves/2018/CVE-2018-18925.md index 52057314a60..e42fa7ee6b5 100644 --- a/cves/2018/CVE-2018-18925.md +++ b/cves/2018/CVE-2018-18925.md @@ -17,3 +17,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18925.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gogs/CVE-2018-18925 diff --git a/cves/2018/CVE-2018-18955.md b/cves/2018/CVE-2018-18955.md index b316fd8001e..8006940715c 100644 --- a/cves/2018/CVE-2018-18955.md +++ b/cves/2018/CVE-2018-18955.md @@ -17,6 +17,7 @@ In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/u #### Github - https://github.com/HaleyWei/POC-available - https://github.com/scheatkode/CVE-2018-18955 +- https://github.com/WhatsWrongAndWhy/CVE-2018-18955 #### ExploitDB - https://www.exploit-db.com/exploits/45915 diff --git a/cves/2018/CVE-2018-19466.md b/cves/2018/CVE-2018-19466.md index 76d3526629d..0e2fa0f6d92 100644 --- a/cves/2018/CVE-2018-19466.md +++ b/cves/2018/CVE-2018-19466.md @@ -13,5 +13,5 @@ A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP cred - https://github.com/MauroEldritch/lempo #### Github -No PoCs found on GitHub currently. +- https://github.com/MauroEldritch/lempo diff --git a/cves/2018/CVE-2018-19475.md b/cves/2018/CVE-2018-19475.md index e07d35cad68..678a694c00c 100644 --- a/cves/2018/CVE-2018-19475.md +++ b/cves/2018/CVE-2018-19475.md @@ -15,3 +15,5 @@ psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to byp #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ghostscript/CVE-2018-19475 diff --git a/cves/2018/CVE-2018-19518.md b/cves/2018/CVE-2018-19518.md index 981726dee99..b0d46220dd5 100644 --- a/cves/2018/CVE-2018-19518.md +++ b/cves/2018/CVE-2018-19518.md @@ -31,3 +31,6 @@ University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in P #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/php_imap_open_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2018-19518 diff --git a/cves/2018/CVE-2018-19629.md b/cves/2018/CVE-2018-19629.md index 7aa50fe7330..4b477ba297e 100644 --- a/cves/2018/CVE-2018-19629.md +++ b/cves/2018/CVE-2018-19629.md @@ -13,5 +13,5 @@ A Denial of Service vulnerability in the ImageNow Server service in Hyland Perce - https://www.oppositionsecurity.com/imagenow-7-1-4-dos/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Excellencedev/CVE-2018-19629 diff --git a/cves/2018/CVE-2018-1999002.md b/cves/2018/CVE-2018-1999002.md index f5b827ddfaa..0833f254778 100644 --- a/cves/2018/CVE-2018-1999002.md +++ b/cves/2018/CVE-2018-1999002.md @@ -15,6 +15,7 @@ A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 #### Github - https://github.com/0x6b7966/CVE-2018-1999002 - https://github.com/slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins +- https://github.com/im23pds/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins #### ExploitDB - https://www.exploit-db.com/exploits/46453 diff --git a/cves/2018/CVE-2018-20250.md b/cves/2018/CVE-2018-20250.md index 9a69100d007..a2d6d81fa8f 100644 --- a/cves/2018/CVE-2018-20250.md +++ b/cves/2018/CVE-2018-20250.md @@ -38,6 +38,7 @@ In WinRAR versions prior to and including 5.61, There is path traversal vulnerab - https://github.com/tannlh/CVE-2018-20250 - https://github.com/tzwlhack/CVE-2018-20250 - https://github.com/zeronohacker/CVE-2018-20250 +- https://github.com/joydragon/Detect-CVE-2018-20250 #### ExploitDB - https://www.exploit-db.com/exploits/46756 diff --git a/cves/2018/CVE-2018-20343.md b/cves/2018/CVE-2018-20343.md index 2489dc022e7..94ddb6b22f1 100644 --- a/cves/2018/CVE-2018-20343.md +++ b/cves/2018/CVE-2018-20343.md @@ -13,5 +13,5 @@ Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build - https://github.com/Alexandre-Bartel/CVE-2018-20343 #### Github -No PoCs found on GitHub currently. +- https://github.com/Alexandre-Bartel/CVE-2018-20343 diff --git a/cves/2018/CVE-2018-20580.md b/cves/2018/CVE-2018-20580.md index 3e4651c2fa7..a67815d71fd 100644 --- a/cves/2018/CVE-2018-20580.md +++ b/cves/2018/CVE-2018-20580.md @@ -15,7 +15,7 @@ The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remot - https://www.exploit-db.com/exploits/46796/ #### Github -No PoCs found on GitHub currently. +- https://github.com/gscamelo/CVE-2018-20580 #### ExploitDB - https://www.exploit-db.com/exploits/46796 diff --git a/cves/2018/CVE-2018-2380.md b/cves/2018/CVE-2018-2380.md index 329fc719cbc..9e854a2e92d 100644 --- a/cves/2018/CVE-2018-2380.md +++ b/cves/2018/CVE-2018-2380.md @@ -21,7 +21,7 @@ SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insuff - https://www.exploit-db.com/exploits/44292/ #### Github -No PoCs found on GitHub currently. +- https://github.com/erpscanteam/CVE-2018-2380 #### ExploitDB - https://www.exploit-db.com/exploits/44292 diff --git a/cves/2018/CVE-2018-2628.md b/cves/2018/CVE-2018-2628.md index d4781c91b95..b7185a95c87 100644 --- a/cves/2018/CVE-2018-2628.md +++ b/cves/2018/CVE-2018-2628.md @@ -52,6 +52,8 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar - https://github.com/w181496/weblogic-gadget-probe - https://github.com/welove88888/k8 - https://github.com/wrysunny/cve-2018-2628 +- https://github.com/0xn0ne/weblogicScanner +- https://github.com/herantong/CVE-2018-2628 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2018/CVE-2018-2628.yaml @@ -64,3 +66,6 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2018-2628 diff --git a/cves/2018/CVE-2018-2636.md b/cves/2018/CVE-2018-2636.md index 6a2e6cbf5fc..0c8a2b4ea12 100644 --- a/cves/2018/CVE-2018-2636.md +++ b/cves/2018/CVE-2018-2636.md @@ -17,7 +17,7 @@ Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality - https://www.exploit-db.com/exploits/43960/ #### Github -No PoCs found on GitHub currently. +- https://github.com/erpscanteam/CVE-2018-2636 #### ExploitDB - https://www.exploit-db.com/exploits/43960 diff --git a/cves/2018/CVE-2018-2894.md b/cves/2018/CVE-2018-2894.md index ec7dc267a0f..2dceec07201 100644 --- a/cves/2018/CVE-2018-2894.md +++ b/cves/2018/CVE-2018-2894.md @@ -21,3 +21,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2894.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2018-2894 diff --git a/cves/2018/CVE-2018-3760.md b/cves/2018/CVE-2018-3760.md index c49ab8dcbf5..d49145fd699 100644 --- a/cves/2018/CVE-2018-3760.md +++ b/cves/2018/CVE-2018-3760.md @@ -19,3 +19,6 @@ There is an information leak vulnerability in Sprockets. Versions Affected: 4.0. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3760.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rails/CVE-2018-3760 diff --git a/cves/2018/CVE-2018-5333.md b/cves/2018/CVE-2018-5333.md index c50fe74c32d..7529a7a2e1a 100644 --- a/cves/2018/CVE-2018-5333.md +++ b/cves/2018/CVE-2018-5333.md @@ -13,7 +13,7 @@ In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdm - http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2018-5333 #### ExploitDB - https://www.exploit-db.com/exploits/47957 diff --git a/cves/2018/CVE-2018-5353.md b/cves/2018/CVE-2018-5353.md index c4c2fa9f604..20d49584630 100644 --- a/cves/2018/CVE-2018-5353.md +++ b/cves/2018/CVE-2018-5353.md @@ -13,5 +13,5 @@ The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 bui - https://github.com/missing0x00/CVE-2018-5353 #### Github -No PoCs found on GitHub currently. +- https://github.com/missing0x00/CVE-2018-5353 diff --git a/cves/2018/CVE-2018-6242.md b/cves/2018/CVE-2018-6242.md index 065b35bdf90..9f50a1403a0 100644 --- a/cves/2018/CVE-2018-6242.md +++ b/cves/2018/CVE-2018-6242.md @@ -19,4 +19,6 @@ No PoCs from references. - https://github.com/mologie/nxboot - https://github.com/persuaded9041/fusee-gelee - https://github.com/soup6020/fusee-launcher +- https://github.com/Resi-le/NXLoader +- https://github.com/oliviaholly/fusee-gelee diff --git a/cves/2018/CVE-2018-6389.md b/cves/2018/CVE-2018-6389.md index 078b58ae8fe..7da3d344293 100644 --- a/cves/2018/CVE-2018-6389.md +++ b/cves/2018/CVE-2018-6389.md @@ -37,6 +37,7 @@ In WordPress through 4.9.2, unauthenticated attackers can cause a denial of serv - https://github.com/safebuffer/CVE-2018-6389 - https://github.com/thechrono13/PoC---CVE-2018-6389 - https://github.com/vineetkia/Wordpress-DOS-Attack-CVE-2018-6389 +- https://github.com/omidsec/CVE-2018-6389 #### ExploitDB - https://www.exploit-db.com/exploits/43968 diff --git a/cves/2018/CVE-2018-6537.md b/cves/2018/CVE-2018-6537.md index 989b4164d01..b8991de436f 100644 --- a/cves/2018/CVE-2018-6537.md +++ b/cves/2018/CVE-2018-6537.md @@ -13,5 +13,5 @@ A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze E - https://www.exploit-db.com/exploits/43936/ #### Github -No PoCs found on GitHub currently. +- https://github.com/damariion/CVE-2018-6537.RCE diff --git a/cves/2018/CVE-2018-6546.md b/cves/2018/CVE-2018-6546.md index b3be8dd7e4e..335983c1bfd 100644 --- a/cves/2018/CVE-2018-6546.md +++ b/cves/2018/CVE-2018-6546.md @@ -15,7 +15,7 @@ plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD - https://www.securifera.com/advisories/CVE-2018-6546/ #### Github -No PoCs found on GitHub currently. +- https://github.com/securifera/CVE-2018-6546-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/44476 diff --git a/cves/2018/CVE-2018-6574.md b/cves/2018/CVE-2018-6574.md index 72b4d34d56b..1005de2e605 100644 --- a/cves/2018/CVE-2018-6574.md +++ b/cves/2018/CVE-2018-6574.md @@ -98,4 +98,6 @@ Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10r - https://github.com/yavolo/CVE-2018-6574 - https://github.com/yitingfan/CVE-2018-6574_demo - https://github.com/zerbaliy3v/cve-2018-6574-exploit +- https://github.com/Saptaktdk/go-get-RCE +- https://github.com/s-p4rk/CVE-2018-6574 diff --git a/cves/2018/CVE-2018-6890.md b/cves/2018/CVE-2018-6890.md index 108b3e7b7d0..49249c481a0 100644 --- a/cves/2018/CVE-2018-6890.md +++ b/cves/2018/CVE-2018-6890.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editin - https://github.com/pradeepjairamani/WolfCMS-XSS-POC/blob/master/Wolfcms%20v0.8.3.1%20xss%20POC%20by%20Pradeep%20Jairamani.pdf #### Github -No PoCs found on GitHub currently. +- https://github.com/pradeepjairamani/WolfCMS-XSS-POC diff --git a/cves/2018/CVE-2018-6892.md b/cves/2018/CVE-2018-6892.md index 007abe3fab6..b6ab9c28ab6 100644 --- a/cves/2018/CVE-2018-6892.md +++ b/cves/2018/CVE-2018-6892.md @@ -23,6 +23,7 @@ An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote atta #### Github - https://github.com/hsteigerFR/Cybersecurity-ROPChain - https://github.com/latortuga71/CVE-2018-6892-Golang +- https://github.com/crypticq/CLOUDME_B0F #### ExploitDB - https://www.exploit-db.com/exploits/44175 diff --git a/cves/2018/CVE-2018-6905.md b/cves/2018/CVE-2018-6905.md index 3ad651f1b9d..9a76a46c5eb 100644 --- a/cves/2018/CVE-2018-6905.md +++ b/cves/2018/CVE-2018-6905.md @@ -14,4 +14,5 @@ The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_C #### Github - https://github.com/dnr6419/CVE-2018-6905 +- https://github.com/pradeepjairamani/TYPO3-XSS-POC diff --git a/cves/2018/CVE-2018-7422.md b/cves/2018/CVE-2018-7422.md index d9382abfef5..4bce5b385c6 100644 --- a/cves/2018/CVE-2018-7422.md +++ b/cves/2018/CVE-2018-7422.md @@ -17,6 +17,7 @@ A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for #### Github - https://github.com/0x00-0x00/CVE-2018-7422 - https://github.com/ndr-repo/CVE-2018-7422 +- https://github.com/nguyenduytoi/CVE-2018-7422 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7422.yaml diff --git a/cves/2018/CVE-2018-7490.md b/cves/2018/CVE-2018-7490.md index 564bb4aa161..30fe457ce35 100644 --- a/cves/2018/CVE-2018-7490.md +++ b/cves/2018/CVE-2018-7490.md @@ -20,3 +20,6 @@ uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-doc #### ExploitDB - https://www.exploit-db.com/exploits/44223 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/uwsgi/CVE-2018-7490 diff --git a/cves/2018/CVE-2018-7600.md b/cves/2018/CVE-2018-7600.md index 25d54157dba..3cff1b484dd 100644 --- a/cves/2018/CVE-2018-7600.md +++ b/cves/2018/CVE-2018-7600.md @@ -73,6 +73,15 @@ Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 - https://github.com/xxxTectationxxx/CVE-2018-7600 - https://github.com/ynsmroztas/drupalhunter - https://github.com/zhzyker/CVE-2018-7600-Drupal-POC-EXP +- https://github.com/4l13n-DN/POC-CVE-2018-7600 +- https://github.com/Dungsocool/CVE-2018-7600 +- https://github.com/RB4C/drupalgeddon2-CVE-2018-7600 +- https://github.com/Shams-Ul-Mehmood/CVE-2018-7600-Drupalgeddon2-RCE +- https://github.com/a2u/CVE-2018-7600 +- https://github.com/elkhaoudari/CVE-2018-7600-PoC +- https://github.com/erman-bolukbasi/web-penetration-drupal +- https://github.com/g0rx/CVE-2018-7600-Drupal-RCE +- https://github.com/nayem-m/drupalgeddon2-cli #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7600.yaml @@ -85,3 +94,6 @@ Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/drupal_drupalgeddon2.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2018-7600 diff --git a/cves/2018/CVE-2018-7602.md b/cves/2018/CVE-2018-7602.md index ec0213f9205..4a79920b732 100644 --- a/cves/2018/CVE-2018-7602.md +++ b/cves/2018/CVE-2018-7602.md @@ -31,3 +31,6 @@ A remote code execution vulnerability exists within multiple subsystems of Drupa - https://www.exploit-db.com/exploits/44557 - https://www.exploit-db.com/exploits/44557 - https://www.exploit-db.com/exploits/44542 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2018-7602 diff --git a/cves/2018/CVE-2018-7690.md b/cves/2018/CVE-2018-7690.md index 3fc0e51d78b..de2f01dd22a 100644 --- a/cves/2018/CVE-2018-7690.md +++ b/cves/2018/CVE-2018-7690.md @@ -13,7 +13,7 @@ A potential Remote Unauthorized Access in Micro Focus Fortify Software Security - https://www.exploit-db.com/exploits/45989/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-7690 #### ExploitDB - https://www.exploit-db.com/exploits/45989 diff --git a/cves/2018/CVE-2018-7691.md b/cves/2018/CVE-2018-7691.md index 325c00bd4cb..73c467b321c 100644 --- a/cves/2018/CVE-2018-7691.md +++ b/cves/2018/CVE-2018-7691.md @@ -13,7 +13,7 @@ A potential Remote Unauthorized Access in Micro Focus Fortify Software Security - https://www.exploit-db.com/exploits/45990/ #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2018-7691 #### ExploitDB - https://www.exploit-db.com/exploits/45990 diff --git a/cves/2018/CVE-2018-8060.md b/cves/2018/CVE-2018-8060.md index ce3f64cac9c..2d328af7ab3 100644 --- a/cves/2018/CVE-2018-8060.md +++ b/cves/2018/CVE-2018-8060.md @@ -13,5 +13,5 @@ HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to - https://github.com/otavioarj/SIOCtl #### Github -No PoCs found on GitHub currently. +- https://github.com/otavioarj/SIOCtl diff --git a/cves/2018/CVE-2018-8611.md b/cves/2018/CVE-2018-8611.md index f7e1e428230..0e9d50d8ac6 100644 --- a/cves/2018/CVE-2018-8611.md +++ b/cves/2018/CVE-2018-8611.md @@ -54,4 +54,5 @@ No PoCs from references. #### Github - https://github.com/lsw29475/CVE-2018-8611 +- https://github.com/ahm3dgg/cve-2018-8611 diff --git a/cves/2018/CVE-2018-8715.md b/cves/2018/CVE-2018-8715.md index 754a1d7a060..9b874d7bae3 100644 --- a/cves/2018/CVE-2018-8715.md +++ b/cves/2018/CVE-2018-8715.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8715.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/appweb/CVE-2018-8715 diff --git a/cves/2018/CVE-2018-8941.md b/cves/2018/CVE-2018-8941.md index fb42667be23..3830bd68eaa 100644 --- a/cves/2018/CVE-2018-8941.md +++ b/cves/2018/CVE-2018-8941.md @@ -13,5 +13,5 @@ Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 ha - https://github.com/SECFORCE/CVE-2018-8941 #### Github -No PoCs found on GitHub currently. +- https://github.com/SECFORCE/CVE-2018-8941 diff --git a/cves/2018/CVE-2018-9206.md b/cves/2018/CVE-2018-9206.md index f6749c30d14..6be18a17e42 100644 --- a/cves/2018/CVE-2018-9206.md +++ b/cves/2018/CVE-2018-9206.md @@ -20,6 +20,7 @@ Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Uploa - https://github.com/cved-sources/cve-2018-9206 - https://github.com/liemkaka/CVE-2018-9206 - https://github.com/mi-hood/CVE-2018-9206 +- https://github.com/flame-11/CVE-2018-9206-jquery-file-upload #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9206.yaml diff --git a/cves/2018/CVE-2018-9276.md b/cves/2018/CVE-2018-9276.md index 833f39c96d1..bb392b8485d 100644 --- a/cves/2018/CVE-2018-9276.md +++ b/cves/2018/CVE-2018-9276.md @@ -21,6 +21,7 @@ An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who - https://github.com/andyfeili/CVE-2018-9276 - https://github.com/backglass/exploit_prtg - https://github.com/wildkindcc/CVE-2018-9276 +- https://github.com/AC8999/PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276 #### ExploitDB - https://www.exploit-db.com/exploits/46527 diff --git a/cves/2018/CVE-2018-9995.md b/cves/2018/CVE-2018-9995.md index c372f485be2..ce583cb0579 100644 --- a/cves/2018/CVE-2018-9995.md +++ b/cves/2018/CVE-2018-9995.md @@ -40,6 +40,9 @@ TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in - https://github.com/sjomurodov/getDVR - https://github.com/tausifzaman/cctv-hack - https://github.com/thaipc2021/camera +- https://github.com/0xDamian/CVE-2018-9995-rs +- https://github.com/F7P-H4NN1B4L/CVE-2018-9995-DVR-Credentials-Extractor +- https://github.com/mesutozsoycom/cve-2018-9995 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9995.yaml diff --git a/cves/2019/CVE-2019-0193.md b/cves/2019/CVE-2019-0193.md index 1c75d50c3ad..b1a63589649 100644 --- a/cves/2019/CVE-2019-0193.md +++ b/cves/2019/CVE-2019-0193.md @@ -23,3 +23,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0193.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2019-0193 diff --git a/cves/2019/CVE-2019-0211.md b/cves/2019/CVE-2019-0211.md index 13b32d65821..c19669d970f 100644 --- a/cves/2019/CVE-2019-0211.md +++ b/cves/2019/CVE-2019-0211.md @@ -20,6 +20,7 @@ In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or p #### Github - https://github.com/0xbigshaq/php7-internals - https://github.com/ozkanbilge/Apache-Exploit-2019 +- https://github.com/Jeanback1/CVE-2019-0211-exploit #### ExploitDB - https://www.exploit-db.com/exploits/46676 diff --git a/cves/2019/CVE-2019-0227.md b/cves/2019/CVE-2019-0227.md index f10e4bfbc6c..c1027db1f1a 100644 --- a/cves/2019/CVE-2019-0227.md +++ b/cves/2019/CVE-2019-0227.md @@ -14,6 +14,7 @@ A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 #### Github - https://github.com/ianxtianxt/cve-2019-0227 +- https://github.com/1475210817/Axis1.4-CVE-2019-0227 #### ExploitDB - https://www.exploit-db.com/exploits/46682 diff --git a/cves/2019/CVE-2019-0232.md b/cves/2019/CVE-2019-0232.md index c8d2e474a20..ddec5aee720 100644 --- a/cves/2019/CVE-2019-0232.md +++ b/cves/2019/CVE-2019-0232.md @@ -29,6 +29,11 @@ When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in - https://github.com/setrus/CVE-2019-0232 - https://github.com/x3m1Sec/CVE-2019-0232_tomcat_cgi_exploit - https://github.com/xsxtw/CVE-2019-0232 +- https://github.com/Jorge2Rubio/CVE-2019-0232 +- https://github.com/blackjuker2/CVE-2019-0232 +- https://github.com/luongchivi/Preproduce-CVE-2019-0232 +- https://github.com/r4vl1t0/CVE-2019-0232 +- https://github.com/yuzuki-ayanami/CVE-2019-0232 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0232.yaml diff --git a/cves/2019/CVE-2019-0708.md b/cves/2019/CVE-2019-0708.md index 25dc1e9877d..9391da9ca0a 100644 --- a/cves/2019/CVE-2019-0708.md +++ b/cves/2019/CVE-2019-0708.md @@ -157,6 +157,9 @@ A remote code execution vulnerability exists in Remote Desktop Services formerly - https://github.com/ze0r/CVE-2019-0708-exp - https://github.com/zerosum0x0-archive/archive - https://github.com/zjw88282740/CVE-2019-0708-win7 +- https://github.com/SebasPV27/Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708- +- https://github.com/benhe119/bluekeepscan +- https://github.com/zoujialan/CVE-2019-0708-RCE #### ExploitDB - https://www.exploit-db.com/exploits/47416 diff --git a/cves/2019/CVE-2019-1003000.md b/cves/2019/CVE-2019-1003000.md index 73f6e242e67..9c9cff9aff4 100644 --- a/cves/2019/CVE-2019-1003000.md +++ b/cves/2019/CVE-2019-1003000.md @@ -18,6 +18,7 @@ A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier - https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc - https://github.com/purple-WL/Jenkins_CVE-2019-1003000 - https://github.com/slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins +- https://github.com/im23pds/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003000.yaml diff --git a/cves/2019/CVE-2019-1003030.md b/cves/2019/CVE-2019-1003030.md index d31a2dd8bf3..4904ec90c87 100644 --- a/cves/2019/CVE-2019-1003030.md +++ b/cves/2019/CVE-2019-1003030.md @@ -16,6 +16,7 @@ A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 an #### Github - https://github.com/Cashiuus/jenkins-checkscript-rce - https://github.com/overgrowncarrot1/CVE-2019-1003030 +- https://github.com/cyberbelly/PoC-CVE-2019-1003030 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003030.yaml diff --git a/cves/2019/CVE-2019-10068.md b/cves/2019/CVE-2019-10068.md index bb595e59bc7..7bc43a8d2fd 100644 --- a/cves/2019/CVE-2019-10068.md +++ b/cves/2019/CVE-2019-10068.md @@ -15,7 +15,7 @@ An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, - https://devnet.kentico.com/download/hotfixes#securityBugs-v12 #### Github -No PoCs found on GitHub currently. +- https://github.com/cianananan/CVE-2019-10068-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10068.yaml diff --git a/cves/2019/CVE-2019-10149.md b/cves/2019/CVE-2019-10149.md index 5201132682c..2a821176d2e 100644 --- a/cves/2019/CVE-2019-10149.md +++ b/cves/2019/CVE-2019-10149.md @@ -35,6 +35,7 @@ A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation - https://github.com/qlusec/CVE-2019-10149 - https://github.com/rahmadsandy/EXIM-4.87-CVE-2019-10149 - https://github.com/uyerr/PoC_CVE-2019-10149--rce +- https://github.com/Ambrella-Security/CVE-2019-10149 #### ExploitDB - https://www.exploit-db.com/exploits/47307 diff --git a/cves/2019/CVE-2019-10392.md b/cves/2019/CVE-2019-10392.md index 939aee26ef4..3e09cf78f59 100644 --- a/cves/2019/CVE-2019-10392.md +++ b/cves/2019/CVE-2019-10392.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/ftk-sostupid/CVE-2019-10392_EXP - https://github.com/jas502n/CVE-2019-10392 - https://github.com/shoucheng3/jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4 +- https://github.com/FortheKahZModan/CVE-2019-10392_EXP diff --git a/cves/2019/CVE-2019-1040.md b/cves/2019/CVE-2019-1040.md index 786c5da3cf9..4648c91ccbb 100644 --- a/cves/2019/CVE-2019-1040.md +++ b/cves/2019/CVE-2019-1040.md @@ -54,4 +54,5 @@ No PoCs from references. - https://github.com/Ridter/CVE-2019-1040 - https://github.com/Ridter/CVE-2019-1040-dcpwn - https://github.com/lazaars/UltraRealy_with_CVE-2019-1040 +- https://github.com/JonyFilc/PrintSpoofer-ReflectiveDLL diff --git a/cves/2019/CVE-2019-10685.md b/cves/2019/CVE-2019-10685.md index 96afb5a51c3..8fc74891d46 100644 --- a/cves/2019/CVE-2019-10685.md +++ b/cves/2019/CVE-2019-10685.md @@ -15,7 +15,7 @@ A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelber - https://medium.com/@alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b #### Github -No PoCs found on GitHub currently. +- https://github.com/alt3kx/CVE-2019-10685 #### ExploitDB - https://www.exploit-db.com/exploits/46804 diff --git a/cves/2019/CVE-2019-10758.md b/cves/2019/CVE-2019-10758.md index 03018f82d63..dffa0a6a7c7 100644 --- a/cves/2019/CVE-2019-10758.md +++ b/cves/2019/CVE-2019-10758.md @@ -20,3 +20,6 @@ mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10758.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/mongo-express/CVE-2019-10758 diff --git a/cves/2019/CVE-2019-11043.md b/cves/2019/CVE-2019-11043.md index fa171e236f1..f18911edfd4 100644 --- a/cves/2019/CVE-2019-11043.md +++ b/cves/2019/CVE-2019-11043.md @@ -41,6 +41,10 @@ In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in - https://github.com/theMiddleBlue/CVE-2019-11043 - https://github.com/tinker-li/CVE-2019-11043 - https://github.com/ypereirareis/docker-CVE-2019-11043 +- https://github.com/CodeHex083/phuip-fpizdam +- https://github.com/MagentaBear/CVE-2019-11043-Vulnerability +- https://github.com/bayazid-bit/CVE-2019-11043 +- https://github.com/gon905332-jpg/cve-2019-11043.py #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11043.yaml @@ -51,3 +55,6 @@ In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_fpm_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 diff --git a/cves/2019/CVE-2019-11076.md b/cves/2019/CVE-2019-11076.md index b7a2a1922d3..6f31813b016 100644 --- a/cves/2019/CVE-2019-11076.md +++ b/cves/2019/CVE-2019-11076.md @@ -13,5 +13,5 @@ Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthen - https://github.com/livehybrid/poc-cribl-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/livehybrid/poc-cribl-rce diff --git a/cves/2019/CVE-2019-11231.md b/cves/2019/CVE-2019-11231.md index 6edc360ec34..a62b73cc92f 100644 --- a/cves/2019/CVE-2019-11231.md +++ b/cves/2019/CVE-2019-11231.md @@ -14,7 +14,7 @@ An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sani - https://ssd-disclosure.com/?p=3899&preview=true #### Github -No PoCs found on GitHub currently. +- https://github.com/akincibor/CVE-2019-11231-PoC #### ExploitDB - https://www.exploit-db.com/exploits/46880 diff --git a/cves/2019/CVE-2019-11523.md b/cves/2019/CVE-2019-11523.md index 89fe8e9370d..4504571c014 100644 --- a/cves/2019/CVE-2019-11523.md +++ b/cves/2019/CVE-2019-11523.md @@ -13,5 +13,5 @@ Anviz Global M3 Outdoor RFID Access Control executes any command received from a - https://github.com/wizlab-it/anviz-m3-rfid-cve-2019-11523-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/wizlab-it/anviz-m3-rfid-cve-2019-11523-poc diff --git a/cves/2019/CVE-2019-11581.md b/cves/2019/CVE-2019-11581.md index afa8b6c0827..b3a68111b41 100644 --- a/cves/2019/CVE-2019-11581.md +++ b/cves/2019/CVE-2019-11581.md @@ -25,3 +25,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11581.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jira/CVE-2019-11581 diff --git a/cves/2019/CVE-2019-11707.md b/cves/2019/CVE-2019-11707.md index 42894789a45..239eb4eb5fc 100644 --- a/cves/2019/CVE-2019-11707.md +++ b/cves/2019/CVE-2019-11707.md @@ -21,6 +21,7 @@ A type confusion vulnerability can occur when manipulating JavaScript objects du - https://github.com/securesystemslab/pkru-safe-cve-html - https://github.com/tunnelshade/cve-2019-11707 - https://github.com/vigneshsrao/CVE-2019-11707 +- https://github.com/CosminGGeorgescu/CVE-2019-11707-PoC #### ExploitDB - https://www.exploit-db.com/exploits/47038 diff --git a/cves/2019/CVE-2019-11881.md b/cves/2019/CVE-2019-11881.md index ea9489e7d11..982caef1657 100644 --- a/cves/2019/CVE-2019-11881.md +++ b/cves/2019/CVE-2019-11881.md @@ -13,5 +13,5 @@ A vulnerability exists in Rancher before 2.2.4 in the login component, where the - https://github.com/MauroEldritch/VanCleef #### Github -No PoCs found on GitHub currently. +- https://github.com/MauroEldritch/VanCleef diff --git a/cves/2019/CVE-2019-12169.md b/cves/2019/CVE-2019-12169.md index a63738fb8bc..3280e0d8394 100644 --- a/cves/2019/CVE-2019-12169.md +++ b/cves/2019/CVE-2019-12169.md @@ -15,7 +15,7 @@ ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in - https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit #### Github -No PoCs found on GitHub currently. +- https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atutor_upload_traversal.rb diff --git a/cves/2019/CVE-2019-12170.md b/cves/2019/CVE-2019-12170.md index d9bba832ef8..05929080015 100644 --- a/cves/2019/CVE-2019-12170.md +++ b/cves/2019/CVE-2019-12170.md @@ -15,4 +15,5 @@ ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/ #### Github - https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit +- https://github.com/fuzzlove/ATutor-Instructor-Backup-Arbitrary-File diff --git a/cves/2019/CVE-2019-12460.md b/cves/2019/CVE-2019-12460.md index 23db9a039ec..52566f7b15a 100644 --- a/cves/2019/CVE-2019-12460.md +++ b/cves/2019/CVE-2019-12460.md @@ -14,7 +14,7 @@ Web Port 1.19.1 allows XSS via the /access/setup type parameter. - https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS/ #### Github -No PoCs found on GitHub currently. +- https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS #### ExploitDB - https://www.exploit-db.com/exploits/48612 diff --git a/cves/2019/CVE-2019-12476.md b/cves/2019/CVE-2019-12476.md index b25c8110b2a..8eaa2a4a198 100644 --- a/cves/2019/CVE-2019-12476.md +++ b/cves/2019/CVE-2019-12476.md @@ -13,5 +13,5 @@ An authentication bypass vulnerability in the password reset functionality in Zo - https://github.com/0katz/CVE-2019-12476 #### Github -No PoCs found on GitHub currently. +- https://github.com/0katz/CVE-2019-12476 diff --git a/cves/2019/CVE-2019-12586.md b/cves/2019/CVE-2019-12586.md index c92d90ba989..9b8a1f568da 100644 --- a/cves/2019/CVE-2019-12586.md +++ b/cves/2019/CVE-2019-12586.md @@ -18,4 +18,5 @@ The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266 - https://github.com/armancswork/esp32_esp8266_attacks - https://github.com/armancwork/esp32_esp8266_attacks - https://github.com/serhatsdev/esp32_esp8266_attacks +- https://github.com/Matheus-Garbelini/esp32_esp8266_attacks diff --git a/cves/2019/CVE-2019-12840.md b/cves/2019/CVE-2019-12840.md index c6407e7fa8d..cbbbe97ed56 100644 --- a/cves/2019/CVE-2019-12840.md +++ b/cves/2019/CVE-2019-12840.md @@ -21,6 +21,7 @@ In Webmin through 1.910, any user authorized to the "Package Updates" module can - https://github.com/bkaraceylan/CVE-2019-12840_POC - https://github.com/fenix0499/CVE-2019-12840-NodeJs-Exploit - https://github.com/zAbuQasem/CVE-2019-12840 +- https://github.com/note0577/CVE-2019-12840-NodeJs-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/46984 diff --git a/cves/2019/CVE-2019-13132.md b/cves/2019/CVE-2019-13132.md index ace2f58f9d2..65e82e49606 100644 --- a/cves/2019/CVE-2019-13132.md +++ b/cves/2019/CVE-2019-13132.md @@ -13,5 +13,5 @@ In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a rem - https://github.com/zeromq/libzmq/issues/3558 #### Github -No PoCs found on GitHub currently. +- https://github.com/dinosn/cve-2019-13132-lab diff --git a/cves/2019/CVE-2019-13272.md b/cves/2019/CVE-2019-13272.md index 5db767f987a..964c3c5309c 100644 --- a/cves/2019/CVE-2019-13272.md +++ b/cves/2019/CVE-2019-13272.md @@ -36,6 +36,7 @@ In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the - https://github.com/polosec/CVE-2019-13272 - https://github.com/sumedhaDharmasena/-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272 - https://github.com/teddy47/CVE-2019-13272---Documentation +- https://github.com/letsr00t/CVE-2019-13272 #### ExploitDB - https://www.exploit-db.com/exploits/47543 diff --git a/cves/2019/CVE-2019-13292.md b/cves/2019/CVE-2019-13292.md index 9aa25379214..24954c3501d 100644 --- a/cves/2019/CVE-2019-13292.md +++ b/cves/2019/CVE-2019-13292.md @@ -15,6 +15,7 @@ A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts paymen #### Github - https://github.com/808ale/CVE-2019-13292-WebERP_4.15 - https://github.com/gustanini/CVE-2019-13292-WebERP_4.15 +- https://github.com/alealeluyah/CVE-2019-13292-WebERP_4.15 #### ExploitDB - https://www.exploit-db.com/exploits/47013 diff --git a/cves/2019/CVE-2019-13403.md b/cves/2019/CVE-2019-13403.md index 3ab94f939ed..0617d670446 100644 --- a/cves/2019/CVE-2019-13403.md +++ b/cves/2019/CVE-2019-13403.md @@ -13,5 +13,5 @@ Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module - https://github.com/B3Bo1d/CVE-2019-13403/ #### Github -No PoCs found on GitHub currently. +- https://github.com/B3Bo1d/CVE-2019-13403 diff --git a/cves/2019/CVE-2019-13633.md b/cves/2019/CVE-2019-13633.md index a620509c6b8..116f05c33a3 100644 --- a/cves/2019/CVE-2019-13633.md +++ b/cves/2019/CVE-2019-13633.md @@ -13,5 +13,5 @@ Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can sen - https://github.com/Security-AVS/CVE-2019-13633 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2019-13633 diff --git a/cves/2019/CVE-2019-14206.md b/cves/2019/CVE-2019-14206.md index e9f7c8a06ed..3cabb34faea 100644 --- a/cves/2019/CVE-2019-14206.md +++ b/cves/2019/CVE-2019-14206.md @@ -15,7 +15,7 @@ An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin bef - https://wpvulndb.com/vulnerabilities/9468 #### Github -No PoCs found on GitHub currently. +- https://github.com/developerfred/cve-2019-14206-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14206.yaml diff --git a/cves/2019/CVE-2019-14234.md b/cves/2019/CVE-2019-14234.md index 5e808d427f9..15e4b9a6118 100644 --- a/cves/2019/CVE-2019-14234.md +++ b/cves/2019/CVE-2019-14234.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/Rivaill/CVE_2019_14234 - https://github.com/malvika-thakur/CVE-2019-14234 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2019-14234 diff --git a/cves/2019/CVE-2019-14287.md b/cves/2019/CVE-2019-14287.md index 672e0e1dd3a..d6abf469c70 100644 --- a/cves/2019/CVE-2019-14287.md +++ b/cves/2019/CVE-2019-14287.md @@ -48,6 +48,7 @@ In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can - https://github.com/n3rdh4x0r/CVE-2019-14287 - https://github.com/shallvhack/Sudo-Security-Bypass-CVE-2019-14287 - https://github.com/thinuri99/Sudo-Security-Bypass-Vulnerability-CVE-2019-14287- +- https://github.com/sachinthadesilva/Exploit-CVE-2019-14287 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2019/CVE-2019-14287.yaml diff --git a/cves/2019/CVE-2019-14322.md b/cves/2019/CVE-2019-14322.md index a4ca4ba9b55..a9cf4c873e1 100644 --- a/cves/2019/CVE-2019-14322.md +++ b/cves/2019/CVE-2019-14322.md @@ -16,6 +16,7 @@ In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names ( - https://github.com/EmreOvunc/Odoo-12.0-LFI-Vulnerabilities - https://github.com/faisalfs10x/http-vuln-cve2019-14322.nse - https://github.com/sergiovks/CVE-2019-14322 +- https://github.com/faisalfs10x/CVE-2019-14322-scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14322.yaml diff --git a/cves/2019/CVE-2019-14326.md b/cves/2019/CVE-2019-14326.md index 9f0804d31db..3ca0e5b5109 100644 --- a/cves/2019/CVE-2019-14326.md +++ b/cves/2019/CVE-2019-14326.md @@ -13,5 +13,5 @@ An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it - https://github.com/seqred-s-a/cve-2019-14326 #### Github -No PoCs found on GitHub currently. +- https://github.com/seqred-s-a/cve-2019-14326 diff --git a/cves/2019/CVE-2019-14537.md b/cves/2019/CVE-2019-14537.md index bace29943df..f82a5e8f465 100644 --- a/cves/2019/CVE-2019-14537.md +++ b/cves/2019/CVE-2019-14537.md @@ -13,5 +13,5 @@ YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api com - https://github.com/Wocanilo/CVE-2019-14537 #### Github -No PoCs found on GitHub currently. +- https://github.com/Wocanilo/CVE-2019-14537 diff --git a/cves/2019/CVE-2019-14751.md b/cves/2019/CVE-2019-14751.md index f6170c9fb5c..e4836897bc3 100644 --- a/cves/2019/CVE-2019-14751.md +++ b/cves/2019/CVE-2019-14751.md @@ -14,5 +14,5 @@ NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing at - https://salvatoresecurity.com/zip-slip-in-nltk-cve-2019-14751/ #### Github -No PoCs found on GitHub currently. +- https://github.com/mssalvatore/CVE-2019-14751_PoC diff --git a/cves/2019/CVE-2019-15053.md b/cves/2019/CVE-2019-15053.md index 32855f36cb6..043c0a52dd7 100644 --- a/cves/2019/CVE-2019-15053.md +++ b/cves/2019/CVE-2019-15053.md @@ -13,5 +13,5 @@ The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server a - https://github.com/l0nax/CVE-2019-15053 #### Github -No PoCs found on GitHub currently. +- https://github.com/l0nax/CVE-2019-15053 diff --git a/cves/2019/CVE-2019-15107.md b/cves/2019/CVE-2019-15107.md index 7b3dad830b5..cbc12373a0d 100644 --- a/cves/2019/CVE-2019-15107.md +++ b/cves/2019/CVE-2019-15107.md @@ -60,6 +60,9 @@ An issue was discovered in Webmin <=1.920. The parameter old in password_change. - https://github.com/squid22/Webmin_CVE-2019-15107 - https://github.com/wenruoya/CVE-2019-15107 - https://github.com/whokilleddb/CVE-2019-15107 +- https://github.com/adampawelczyk/cve-2019-15107 +- https://github.com/jini135wii/CVE-2019-15107 +- https://github.com/viglia/cve-2019-15107 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15107.yaml @@ -70,3 +73,6 @@ An issue was discovered in Webmin <=1.920. The parameter old in password_change. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_backdoor.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/webmin/CVE-2019-15107 diff --git a/cves/2019/CVE-2019-15120.md b/cves/2019/CVE-2019-15120.md index d66f8ede3fb..d2b73c993d7 100644 --- a/cves/2019/CVE-2019-15120.md +++ b/cves/2019/CVE-2019-15120.md @@ -13,5 +13,5 @@ The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode. - https://github.com/h3llraiser/CVE-2019-15120 #### Github -No PoCs found on GitHub currently. +- https://github.com/h3llraiser/CVE-2019-15120 diff --git a/cves/2019/CVE-2019-15233.md b/cves/2019/CVE-2019-15233.md index b691dc53fea..9c6fbf4a286 100644 --- a/cves/2019/CVE-2019-15233.md +++ b/cves/2019/CVE-2019-15233.md @@ -13,5 +13,5 @@ The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for - https://github.com/l0nax/CVE-2019-15233 #### Github -No PoCs found on GitHub currently. +- https://github.com/l0nax/CVE-2019-15233 diff --git a/cves/2019/CVE-2019-15715.md b/cves/2019/CVE-2019-15715.md index da22779baac..e8356d799a1 100644 --- a/cves/2019/CVE-2019-15715.md +++ b/cves/2019/CVE-2019-15715.md @@ -13,7 +13,7 @@ MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, - http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/mcornaglia/CVE-2019-15715 #### ExploitDB - https://www.exploit-db.com/exploits/48818 diff --git a/cves/2019/CVE-2019-15949.md b/cves/2019/CVE-2019-15949.md index 147928c8fef..1ae9a829065 100644 --- a/cves/2019/CVE-2019-15949.md +++ b/cves/2019/CVE-2019-15949.md @@ -16,7 +16,7 @@ Nagios XI before 5.6.6 allows remote command execution as root. The exploit requ - https://github.com/jakgibb/nagiosxi-root-rce-exploit #### Github -No PoCs found on GitHub currently. +- https://github.com/plur1bu5/Nagios-CVE-2019-15949-RCE #### ExploitDB - https://www.exploit-db.com/exploits/48191 diff --git a/cves/2019/CVE-2019-16098.md b/cves/2019/CVE-2019-16098.md index 25b1ec36cc9..1aa0454ecbf 100644 --- a/cves/2019/CVE-2019-16098.md +++ b/cves/2019/CVE-2019-16098.md @@ -16,4 +16,5 @@ The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCor - https://github.com/0xDivyanshu-new/CVE-2019-16098 - https://github.com/Offensive-Panda/NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE - https://github.com/Rydersel/PlaguewareCSGO_3.0 +- https://github.com/Barakat/CVE-2019-16098 diff --git a/cves/2019/CVE-2019-16278.md b/cves/2019/CVE-2019-16278.md index b681c897256..a828c806661 100644 --- a/cves/2019/CVE-2019-16278.md +++ b/cves/2019/CVE-2019-16278.md @@ -41,6 +41,7 @@ Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 - https://github.com/n3ov4n1sh/CVE-2019-16278 - https://github.com/n3rdh4x0r/CVE-2019-16278 - https://github.com/theRealFr13nd/CVE-2019-16278-Nostromo_1.9.6-RCE +- https://github.com/andknownmaly/CVE-2019-16278 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16278.yaml diff --git a/cves/2019/CVE-2019-1663.md b/cves/2019/CVE-2019-1663.md index 37e420d6027..006fdfa5a42 100644 --- a/cves/2019/CVE-2019-1663.md +++ b/cves/2019/CVE-2019-1663.md @@ -19,6 +19,7 @@ A vulnerability in the web-based management interface of the Cisco RV110W Wirele #### Github - https://github.com/StealYourCode/CVE-2019-1663 +- https://github.com/KylVGoi/cve-2019-1663 #### ExploitDB - https://www.exploit-db.com/exploits/47348 diff --git a/cves/2019/CVE-2019-16941.md b/cves/2019/CVE-2019-16941.md index ecf3e6270c9..947675f744a 100644 --- a/cves/2019/CVE-2019-16941.md +++ b/cves/2019/CVE-2019-16941.md @@ -13,5 +13,5 @@ NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary co - https://github.com/purpleracc00n/CVE-2019-16941 #### Github -No PoCs found on GitHub currently. +- https://github.com/purpleracc00n/CVE-2019-16941 diff --git a/cves/2019/CVE-2019-17124.md b/cves/2019/CVE-2019-17124.md index 9aced6ca071..7004c2b7c4f 100644 --- a/cves/2019/CVE-2019-17124.md +++ b/cves/2019/CVE-2019-17124.md @@ -14,7 +14,7 @@ Kramer VIAware 2.5.0719.1034 has Incorrect Access Control. - https://github.com/hessandrew/CVE-2019-17124 #### Github -No PoCs found on GitHub currently. +- https://github.com/hessandrew/CVE-2019-17124 #### ExploitDB - https://www.exploit-db.com/exploits/50848 diff --git a/cves/2019/CVE-2019-17147.md b/cves/2019/CVE-2019-17147.md index 1f7df942b86..1d1e5f49ade 100644 --- a/cves/2019/CVE-2019-17147.md +++ b/cves/2019/CVE-2019-17147.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/DrmnSamoLiu/CVE-2019-17147_Practice_Material +- https://github.com/imnot-ye/CVE-2019-17147 diff --git a/cves/2019/CVE-2019-17427.md b/cves/2019/CVE-2019-17427.md index 50b3ff58cb6..a62946d5a6c 100644 --- a/cves/2019/CVE-2019-17427.md +++ b/cves/2019/CVE-2019-17427.md @@ -13,5 +13,5 @@ In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to te - https://github.com/RealLinkers/CVE-2019-17427 #### Github -No PoCs found on GitHub currently. +- https://github.com/RealLinkers/CVE-2019-17427 diff --git a/cves/2019/CVE-2019-17558.md b/cves/2019/CVE-2019-17558.md index 52daf04211d..a1b3410cecf 100644 --- a/cves/2019/CVE-2019-17558.md +++ b/cves/2019/CVE-2019-17558.md @@ -17,6 +17,7 @@ Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution - https://github.com/Ma1Dong/Solr_CVE-2019-17558 - https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool - https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE +- https://github.com/rogerzeferino/cve-2019-17558-apache-solr-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17558.yaml @@ -27,3 +28,6 @@ Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solr_velocity_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/solr/CVE-2019-17558 diff --git a/cves/2019/CVE-2019-17564.md b/cves/2019/CVE-2019-17564.md index ea8d4f8a794..8484ab5f27f 100644 --- a/cves/2019/CVE-2019-17564.md +++ b/cves/2019/CVE-2019-17564.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17564.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dubbo/CVE-2019-17564 diff --git a/cves/2019/CVE-2019-17570.md b/cves/2019/CVE-2019-17570.md index a3c5f8b77cc..441682b4a94 100644 --- a/cves/2019/CVE-2019-17570.md +++ b/cves/2019/CVE-2019-17570.md @@ -16,4 +16,5 @@ An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcRes #### Github - https://github.com/r00t4dm/CVE-2019-17570 - https://github.com/slowmistio/xmlrpc-common-deserialization +- https://github.com/im23pds/xmlrpc-common-deserialization diff --git a/cves/2019/CVE-2019-18634.md b/cves/2019/CVE-2019-18634.md index 28e65a2adea..cf6f25aebfe 100644 --- a/cves/2019/CVE-2019-18634.md +++ b/cves/2019/CVE-2019-18634.md @@ -28,6 +28,8 @@ In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigg - https://github.com/paras1te-x/CVE-2019-18634 - https://github.com/ptef/CVE-2019-18634 - https://github.com/saleemrashid/sudo-cve-2019-18634 +- https://github.com/dukptkey/CVE-2019-18634 +- https://github.com/letsr00t/-CVE-2019-18634-sudo-pwfeedback #### ExploitDB - https://www.exploit-db.com/exploits/48052 diff --git a/cves/2019/CVE-2019-18885.md b/cves/2019/CVE-2019-18885.md index 23f7888f938..4e1b47f401b 100644 --- a/cves/2019/CVE-2019-18885.md +++ b/cves/2019/CVE-2019-18885.md @@ -14,5 +14,5 @@ fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_exte - https://github.com/bobfuzzer/CVE-2019-18885 #### Github -No PoCs found on GitHub currently. +- https://github.com/bobfuzzer/CVE-2019-18885 diff --git a/cves/2019/CVE-2019-18890.md b/cves/2019/CVE-2019-18890.md index 0917934d0c8..34228d32e04 100644 --- a/cves/2019/CVE-2019-18890.md +++ b/cves/2019/CVE-2019-18890.md @@ -13,5 +13,5 @@ A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 a - https://github.com/RealLinkers/CVE-2019-18890 #### Github -No PoCs found on GitHub currently. +- https://github.com/RealLinkers/CVE-2019-18890 diff --git a/cves/2019/CVE-2019-18935.md b/cves/2019/CVE-2019-18935.md index 64cbeb5ce34..77b3dbbb7e9 100644 --- a/cves/2019/CVE-2019-18935.md +++ b/cves/2019/CVE-2019-18935.md @@ -33,6 +33,9 @@ Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deseria - https://github.com/quyt0/CVE-2019-18935-exploit-study - https://github.com/random-robbie/CVE-2019-18935 - https://github.com/rishaldwivedi/Public_Disclosure +- https://github.com/alanbarret/CVE-2019-18935 +- https://github.com/menashe12346/CVE-2019-18935 +- https://github.com/noperator/CVE-2019-18935 #### ExploitDB - https://www.exploit-db.com/exploits/47793 diff --git a/cves/2019/CVE-2019-19194.md b/cves/2019/CVE-2019-19194.md index be6621da73a..f25307a8a3b 100644 --- a/cves/2019/CVE-2019-19194.md +++ b/cves/2019/CVE-2019-19194.md @@ -13,5 +13,5 @@ The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/louisabricot/writeup-cve-2019-19194 diff --git a/cves/2019/CVE-2019-19393.md b/cves/2019/CVE-2019-19393.md index 1eb9eb8f18e..f35485403f1 100644 --- a/cves/2019/CVE-2019-19393.md +++ b/cves/2019/CVE-2019-19393.md @@ -13,5 +13,5 @@ The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 - https://github.com/miguelhamal/CVE-2019-19393 #### Github -No PoCs found on GitHub currently. +- https://github.com/miguelhamal/CVE-2019-19393 diff --git a/cves/2019/CVE-2019-19576.md b/cves/2019/CVE-2019-19576.md index d1d5b32d030..cdbfb1a3b2a 100644 --- a/cves/2019/CVE-2019-19576.md +++ b/cves/2019/CVE-2019-19576.md @@ -15,7 +15,7 @@ class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as - https://medium.com/%40jra8908/cve-2019-19576-e9da712b779 #### Github -No PoCs found on GitHub currently. +- https://github.com/jra89/CVE-2019-19576 #### ExploitDB - https://www.exploit-db.com/exploits/47749 diff --git a/cves/2019/CVE-2019-19634.md b/cves/2019/CVE-2019-19634.md index cb5806f7bde..fe389db8abb 100644 --- a/cves/2019/CVE-2019-19634.md +++ b/cves/2019/CVE-2019-19634.md @@ -13,5 +13,5 @@ class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, - https://github.com/jra89/CVE-2019-19634 #### Github -No PoCs found on GitHub currently. +- https://github.com/jra89/CVE-2019-19634 diff --git a/cves/2019/CVE-2019-19699.md b/cves/2019/CVE-2019-19699.md index 0de69969e88..f1db8e9b426 100644 --- a/cves/2019/CVE-2019-19699.md +++ b/cves/2019/CVE-2019-19699.md @@ -13,7 +13,7 @@ There is Authenticated remote code execution in Centreon Infrastructure Monitori - https://github.com/SpengeSec/CVE-2019-19699 #### Github -No PoCs found on GitHub currently. +- https://github.com/SpengeSec/CVE-2019-19699 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/centreon_pollers_auth_rce.rb diff --git a/cves/2019/CVE-2019-20085.md b/cves/2019/CVE-2019-20085.md index 7ca10e4432e..84bceec5fd5 100644 --- a/cves/2019/CVE-2019-20085.md +++ b/cves/2019/CVE-2019-20085.md @@ -19,6 +19,7 @@ TVT NVMS-1000 devices allow GET /.. Directory Traversal - https://github.com/AleDiBen/NVMS1000-Exploit - https://github.com/AruN4Sa7/Manual-Exploitation-Development-For-TVT-NVMS-1000-suffers-from-a-directory-traversal-vulnerabilit - https://github.com/Z3R0-0x30/CVE-2019-20085 +- https://github.com/Z3R0space/CVE-2019-20085 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20085.yaml diff --git a/cves/2019/CVE-2019-20326.md b/cves/2019/CVE-2019-20326.md index 3d035f62bd8..38c9d87b6a6 100644 --- a/cves/2019/CVE-2019-20326.md +++ b/cves/2019/CVE-2019-20326.md @@ -13,5 +13,5 @@ A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in exten - https://github.com/Fysac/CVE-2019-20326 #### Github -No PoCs found on GitHub currently. +- https://github.com/Fysac/CVE-2019-20326 diff --git a/cves/2019/CVE-2019-20933.md b/cves/2019/CVE-2019-20933.md index 2bfaf8f4eba..1461c9db432 100644 --- a/cves/2019/CVE-2019-20933.md +++ b/cves/2019/CVE-2019-20933.md @@ -15,6 +15,10 @@ No PoCs from references. #### Github - https://github.com/Hydragyrum/CVE-2019-20933 - https://github.com/LorenzoTullini/InfluxDB-Exploit-CVE-2019-20933 +- https://github.com/Dungsocool/CVE-2019-20933 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20933.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/influxdb/CVE-2019-20933 diff --git a/cves/2019/CVE-2019-2215.md b/cves/2019/CVE-2019-2215.md index 7ecd5f5b31f..dc8b3e8f572 100644 --- a/cves/2019/CVE-2019-2215.md +++ b/cves/2019/CVE-2019-2215.md @@ -43,6 +43,13 @@ A use-after-free in binder.c allows an elevation of privilege from an applicatio - https://github.com/stevejubx/CVE-2019-2215 - https://github.com/timwr/CVE-2019-2215 - https://github.com/willboka/CVE-2019-2215-HuaweiP20Lite +- https://github.com/0xbinder/CVE_2019_2215 +- https://github.com/NESTle19/CVE-2019-2215 +- https://github.com/codecat007/CVE-2019-2215 +- https://github.com/flipphoneguy/root-sonim-xp3800 +- https://github.com/i-redbyte/android-badbinder-demo +- https://github.com/mythicaltree/CVE-2019-2215 +- https://github.com/wired0ut/CVE-2019-2215 #### ExploitDB - https://www.exploit-db.com/exploits/48129 diff --git a/cves/2019/CVE-2019-25065.md b/cves/2019/CVE-2019-25065.md index 98a81355498..0e8abd4b473 100644 --- a/cves/2019/CVE-2019-25065.md +++ b/cves/2019/CVE-2019-25065.md @@ -14,6 +14,7 @@ A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. #### Github - https://github.com/sagisar1/CVE-2019-25065-exploit +- https://github.com/tr3m0x/CVE-2019-25065-poc #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opennetadmin_ping_cmd_injection.rb diff --git a/cves/2019/CVE-2019-2618.md b/cves/2019/CVE-2019-2618.md index 6a71d132423..4fa00596256 100644 --- a/cves/2019/CVE-2019-2618.md +++ b/cves/2019/CVE-2019-2618.md @@ -20,4 +20,6 @@ No PoCs from references. - https://github.com/jas502n/cve-2019-2618 - https://github.com/pyn3rd/CVE-2019-2618 - https://github.com/wsfengfan/CVE-2019-2618- +- https://github.com/0xn0ne/weblogicScanner +- https://github.com/dr0op/WeblogicScan diff --git a/cves/2019/CVE-2019-2725.md b/cves/2019/CVE-2019-2725.md index 4fc058e9b9c..9a9c826446b 100644 --- a/cves/2019/CVE-2019-2725.md +++ b/cves/2019/CVE-2019-2725.md @@ -32,6 +32,7 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar - https://github.com/skytina/CNVD-C-2019-48814-COMMON - https://github.com/welove88888/CVE-2019-2725 - https://github.com/zhusx110/cve-2019-2725 +- https://github.com/loursha/Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2725.yaml diff --git a/cves/2019/CVE-2019-3396.md b/cves/2019/CVE-2019-3396.md index 40b784915b6..723fb995ae9 100644 --- a/cves/2019/CVE-2019-3396.md +++ b/cves/2019/CVE-2019-3396.md @@ -42,6 +42,7 @@ The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 - https://github.com/x-f1v3/CVE-2019-3396 - https://github.com/xiaoshuier/CVE-2019-3396 - https://github.com/yuehanked/cve-2019-3396 +- https://github.com/tranphuc2005/CVE-2019-3396 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3396.yaml @@ -53,3 +54,6 @@ The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/confluence_widget_connector.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2019-3396 diff --git a/cves/2019/CVE-2019-3980.md b/cves/2019/CVE-2019-3980.md index 72b9fe29ae0..505b1fa87bf 100644 --- a/cves/2019/CVE-2019-3980.md +++ b/cves/2019/CVE-2019-3980.md @@ -17,4 +17,5 @@ The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card - https://github.com/Barbarisch/CVE-2019-3980 - https://github.com/CyberQuestor-infosec/CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE - https://github.com/warferik/CVE-2019-3980 +- https://github.com/boydhacks/dameflare diff --git a/cves/2019/CVE-2019-5392.md b/cves/2019/CVE-2019-5392.md index b60212fb0e9..f36f10978ed 100644 --- a/cves/2019/CVE-2019-5392.md +++ b/cves/2019/CVE-2019-5392.md @@ -15,6 +15,7 @@ A disclosure of information vulnerability was identified in HPE Intelligent Mana #### Github - https://github.com/crazywifi/HPE-Intelligent-Management-Center-dbman-Command-10001-Information-Disclosure +- https://github.com/jozliner/CVE-2019-5392-for-Python3 #### ExploitDB - https://www.exploit-db.com/exploits/47408 diff --git a/cves/2019/CVE-2019-5418.md b/cves/2019/CVE-2019-5418.md index 9a67d5fbdd2..4ece1c7bef0 100644 --- a/cves/2019/CVE-2019-5418.md +++ b/cves/2019/CVE-2019-5418.md @@ -35,3 +35,6 @@ There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/rails_doubletap_file_read.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rails/CVE-2019-5418 diff --git a/cves/2019/CVE-2019-5591.md b/cves/2019/CVE-2019-5591.md index 2bee4780dec..a870039973f 100644 --- a/cves/2019/CVE-2019-5591.md +++ b/cves/2019/CVE-2019-5591.md @@ -14,7 +14,7 @@ A Default Configuration vulnerability in FortiOS may allow an unauthenticated at No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ayewo/fortios-ldap-mitm-poc-CVE-2019-5591 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5591.yaml diff --git a/cves/2019/CVE-2019-5736.md b/cves/2019/CVE-2019-5736.md index 6296a407a18..0e88f9cca6e 100644 --- a/cves/2019/CVE-2019-5736.md +++ b/cves/2019/CVE-2019-5736.md @@ -74,6 +74,10 @@ runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allow - https://github.com/vinci-3000/Cloud-Native-Security-Test - https://github.com/wenxi-3000/Cloud-Native-Security-Test - https://github.com/yyqs2008/CVE-2019-5736-PoC-2 +- https://github.com/Frichetten/CVE-2019-5736-PoC +- https://github.com/h-wookie/cve-2019-5736-poc +- https://github.com/q3k/cve-2019-5736-poc +- https://github.com/sastraadiwiguna-purpleeliteteaming/Holistic-Deconstruction-of-CVE-2019-5736- #### ExploitDB - https://www.exploit-db.com/exploits/46369 diff --git a/cves/2019/CVE-2019-5893.md b/cves/2019/CVE-2019-5893.md index 1b1ba1595b1..7dce561b047 100644 --- a/cves/2019/CVE-2019-5893.md +++ b/cves/2019/CVE-2019-5893.md @@ -14,7 +14,7 @@ Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.x - https://www.exploit-db.com/exploits/46118/ #### Github -No PoCs found on GitHub currently. +- https://github.com/EmreOvunc/OpenSource-ERP-SQL-Injection #### ExploitDB - https://www.exploit-db.com/exploits/46118 diff --git a/cves/2019/CVE-2019-6116.md b/cves/2019/CVE-2019-6116.md index 8ef66cb5536..34dd78234e8 100644 --- a/cves/2019/CVE-2019-6116.md +++ b/cves/2019/CVE-2019-6116.md @@ -19,3 +19,6 @@ No PoCs found on GitHub currently. #### ExploitDB - https://www.exploit-db.com/exploits/46242 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ghostscript/CVE-2019-6116 diff --git a/cves/2019/CVE-2019-6225.md b/cves/2019/CVE-2019-6225.md index a95b57bee03..d87d4b08231 100644 --- a/cves/2019/CVE-2019-6225.md +++ b/cves/2019/CVE-2019-6225.md @@ -21,6 +21,7 @@ A memory corruption issue was addressed with improved validation. This issue is - https://github.com/TrungNguyen1909/CVE-2019-6225-macOS - https://github.com/fatgrass/OsirisJailbreak12 - https://github.com/iFenixx/voucher_swap-Exploit-for-iOS-12.1.2 +- https://github.com/ox1111/jailbreak-iOS12 #### ExploitDB - https://www.exploit-db.com/exploits/46248 diff --git a/cves/2019/CVE-2019-6339.md b/cves/2019/CVE-2019-6339.md index 1eab3cd6709..e5c491637f9 100644 --- a/cves/2019/CVE-2019-6339.md +++ b/cves/2019/CVE-2019-6339.md @@ -17,3 +17,5 @@ No PoCs from references. #### Github - https://github.com/Vulnmachines/drupal-cve-2019-6339 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2019-6339 diff --git a/cves/2019/CVE-2019-6340.md b/cves/2019/CVE-2019-6340.md index 227f3e74875..9be94ab7798 100644 --- a/cves/2019/CVE-2019-6340.md +++ b/cves/2019/CVE-2019-6340.md @@ -31,6 +31,7 @@ Some field types do not properly sanitize data from non-form sources in Drupal 8 - https://github.com/oways/CVE-2019-6340 - https://github.com/reanzai/Reanzai-Penetration-Testing-tool - https://github.com/starling021/M3M0 +- https://github.com/joaoaugustom/Drupal_REST-RCE_Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6340.yaml diff --git a/cves/2019/CVE-2019-6341.md b/cves/2019/CVE-2019-6341.md index 87f8be0d677..938457a27a3 100644 --- a/cves/2019/CVE-2019-6341.md +++ b/cves/2019/CVE-2019-6341.md @@ -17,3 +17,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/drupal/CVE-2019-6341 diff --git a/cves/2019/CVE-2019-6453.md b/cves/2019/CVE-2019-6453.md index 4cef991299e..357ad44950a 100644 --- a/cves/2019/CVE-2019-6453.md +++ b/cves/2019/CVE-2019-6453.md @@ -17,6 +17,7 @@ mIRC before 7.55 allows remote command execution by using argument injection thr #### Github - https://github.com/andripwn/mIRC-CVE-2019-6453 +- https://github.com/proofofcalc/cve-2019-6453-poc #### ExploitDB - https://www.exploit-db.com/exploits/46392 diff --git a/cves/2019/CVE-2019-7216.md b/cves/2019/CVE-2019-7216.md index a683678a445..a8f727773bb 100644 --- a/cves/2019/CVE-2019-7216.md +++ b/cves/2019/CVE-2019-7216.md @@ -13,5 +13,5 @@ An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a fil - https://github.com/ekultek/cve-2019-7216 #### Github -No PoCs found on GitHub currently. +- https://github.com/Ekultek/CVE-2019-7216 diff --git a/cves/2019/CVE-2019-7238.md b/cves/2019/CVE-2019-7238.md index dc9c1970326..d128172ce44 100644 --- a/cves/2019/CVE-2019-7238.md +++ b/cves/2019/CVE-2019-7238.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7238.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2019-7238 diff --git a/cves/2019/CVE-2019-7482.md b/cves/2019/CVE-2019-7482.md index 75669d55db9..448680ea241 100644 --- a/cves/2019/CVE-2019-7482.md +++ b/cves/2019/CVE-2019-7482.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/w0lfzhang/sonicwall-cve-2019-7482 +- https://github.com/b4bay/CVE-2019-7482 diff --git a/cves/2019/CVE-2019-7609.md b/cves/2019/CVE-2019-7609.md index 889bf4da87b..4d33c7dcadb 100644 --- a/cves/2019/CVE-2019-7609.md +++ b/cves/2019/CVE-2019-7609.md @@ -25,9 +25,13 @@ Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw - https://github.com/mpgn/CVE-2019-7609 - https://github.com/rhbb/CVE-2019-7609 - https://github.com/wolf1892/CVE-2019-7609 +- https://github.com/toxxxaka/CVE-2019-7609 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7609.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kibana_timelion_prototype_pollution_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kibana/CVE-2019-7609 diff --git a/cves/2019/CVE-2019-7711.md b/cves/2019/CVE-2019-7711.md index 440f8850a31..a2bae25712d 100644 --- a/cves/2019/CVE-2019-7711.md +++ b/cves/2019/CVE-2019-7711.md @@ -13,5 +13,6 @@ An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/kaleth4/CVE-2019-7711 +- https://github.com/mbanyamer/RTOS-F-16-Exploit---CVE-2019-7711 diff --git a/cves/2019/CVE-2019-8451.md b/cves/2019/CVE-2019-8451.md index c758b4fd037..8cccf3638ce 100644 --- a/cves/2019/CVE-2019-8451.md +++ b/cves/2019/CVE-2019-8451.md @@ -17,6 +17,7 @@ No PoCs from references. - https://github.com/h0ffayyy/Jira-CVE-2019-8451 - https://github.com/ianxtianxt/CVE-2019-8451 - https://github.com/jas502n/CVE-2019-8451 +- https://github.com/iuds/CVE-2019-8451 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml diff --git a/cves/2019/CVE-2019-8942.md b/cves/2019/CVE-2019-8942.md index 32f00677d39..e94f6175786 100644 --- a/cves/2019/CVE-2019-8942.md +++ b/cves/2019/CVE-2019-8942.md @@ -22,6 +22,7 @@ WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because - https://github.com/synacktiv/CVE-2019-8942 - https://github.com/tuannq2299/CVE-2019-8942 - https://github.com/v0lck3r/CVE-2019-8943 +- https://github.com/SpeatX/WordPress-RCE-CVE-2019-8942 #### ExploitDB - https://www.exploit-db.com/exploits/46662 diff --git a/cves/2019/CVE-2019-9053.md b/cves/2019/CVE-2019-9053.md index de591cf025e..5f74c29774d 100644 --- a/cves/2019/CVE-2019-9053.md +++ b/cves/2019/CVE-2019-9053.md @@ -54,6 +54,19 @@ An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News m - https://github.com/so1icitx/CVE-2019-9053 - https://github.com/xtafnull/CMS-made-simple-sqli-python3 - https://github.com/zmiddle/Simple_CMS_SQLi +- https://github.com/Boon-Rekcah/CMS-Made-Simple-2.2.9-CVE-2019-9053 +- https://github.com/CaelumIsMe/CVE-2019-9053-POC +- https://github.com/Jeanback1/CVE-2019-9053-exploit +- https://github.com/Perseus99999/CVE-2019-9053-working- +- https://github.com/Vedantrana73/cve-2019-9053-py3 +- https://github.com/killukeren/-CVE-2019-9053 +- https://github.com/pasan2002/CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified- +- https://github.com/quliyevresul7777/CVE-2019-9053 +- https://github.com/rideckszz/poc-CVE-2019-9053 +- https://github.com/v4rr10r/CVE-2019-9053 #### ExploitDB - https://www.exploit-db.com/exploits/46635 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cmsms/CVE-2019-9053 diff --git a/cves/2019/CVE-2019-9193.md b/cves/2019/CVE-2019-9193.md index 74aa1ff5286..43f58224b26 100644 --- a/cves/2019/CVE-2019-9193.md +++ b/cves/2019/CVE-2019-9193.md @@ -22,6 +22,7 @@ In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows super - https://github.com/geniuszlyy/CVE-2019-9193 - https://github.com/jhnhnck/CVE-2019-9193 - https://github.com/paulotrindadec/CVE-2019-9193 +- https://github.com/CybersRMUTL/CVE-2019-9193-Postgresql-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-9193.yaml @@ -31,3 +32,6 @@ In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows super #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/postgres/postgres_copy_from_program_cmd_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/postgres/CVE-2019-9193 diff --git a/cves/2019/CVE-2019-9194.md b/cves/2019/CVE-2019-9194.md index 79bc4e7120a..942b7938eb4 100644 --- a/cves/2019/CVE-2019-9194.md +++ b/cves/2019/CVE-2019-9194.md @@ -16,6 +16,7 @@ elFinder before 2.1.48 has a command injection vulnerability in the PHP connecto #### Github - https://github.com/cved-sources/cve-2019-9194 - https://github.com/hadrian3689/elFinder_2.1.47_php_connector_rce +- https://github.com/estebanzarate/CVE-2019-9194-elFinder-Command-Injection-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9194.yaml diff --git a/cves/2019/CVE-2019-9511.md b/cves/2019/CVE-2019-9511.md index a663deb814b..4aafcf23510 100644 --- a/cves/2019/CVE-2019-9511.md +++ b/cves/2019/CVE-2019-9511.md @@ -13,5 +13,5 @@ Some HTTP/2 implementations are vulnerable to window size manipulation and strea No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/harley-ghostie/CVE-2019-9511_Priority-Churn-Data-Dribble diff --git a/cves/2019/CVE-2019-9624.md b/cves/2019/CVE-2019-9624.md index d8bb440be58..d28eeac4db4 100644 --- a/cves/2019/CVE-2019-9624.md +++ b/cves/2019/CVE-2019-9624.md @@ -14,7 +14,7 @@ Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the - https://www.exploit-db.com/exploits/46201 #### Github -No PoCs found on GitHub currently. +- https://github.com/x0rbeexd/CVE-2019-9624 #### ExploitDB - https://www.exploit-db.com/exploits/46201 diff --git a/cves/2019/CVE-2019-9978.md b/cves/2019/CVE-2019-9978.md index a7cc301ff86..c73f3061cf3 100644 --- a/cves/2019/CVE-2019-9978.md +++ b/cves/2019/CVE-2019-9978.md @@ -32,6 +32,8 @@ The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-a - https://github.com/h8handles/CVE-2019-9978-Python3 - https://github.com/hash3liZer/CVE-2019-9978 - https://github.com/mpgn/CVE-2019-9978 +- https://github.com/Vaidehim55/CVE-2019-9978-RCE-PoC +- https://github.com/yup-Ivan/CVE-2019-9978 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9978.yaml diff --git a/cves/2020/CVE-2020-0022.md b/cves/2020/CVE-2020-0022.md index 22a9746283c..b0ebeb172ea 100644 --- a/cves/2020/CVE-2020-0022.md +++ b/cves/2020/CVE-2020-0022.md @@ -26,4 +26,5 @@ In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bou - https://github.com/leommxj/cve-2020-0022 - https://github.com/lsw29475/CVE-2020-0022 - https://github.com/themmokhtar/CVE-2020-0022 +- https://github.com/kalibb/CVE-2020-0022 diff --git a/cves/2020/CVE-2020-0096.md b/cves/2020/CVE-2020-0096.md index 842558303ef..6d9e7d6982c 100644 --- a/cves/2020/CVE-2020-0096.md +++ b/cves/2020/CVE-2020-0096.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/nahid0x1/CVE-2020-0096-strandhogg-exploit-p0c - https://github.com/nishan0x1/CVE-2020-0096-strandhogg-exploit-p0c - https://github.com/tea9/CVE-2020-0096-StrandHogg2 +- https://github.com/hackerronin/CVE-2020-0096-strandhogg-exploit-p0c diff --git a/cves/2020/CVE-2020-0423.md b/cves/2020/CVE-2020-0423.md index 0b9c36418f9..3656c4fb357 100644 --- a/cves/2020/CVE-2020-0423.md +++ b/cves/2020/CVE-2020-0423.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Stoobyy/Kyocera-A101BM-Exploitation - https://github.com/sparrow-labz/CVE-2020-0423 +- https://github.com/wired0ut/CVE-2020-0423 diff --git a/cves/2020/CVE-2020-0601.md b/cves/2020/CVE-2020-0601.md index 9c9ad9e7880..389c8781888 100644 --- a/cves/2020/CVE-2020-0601.md +++ b/cves/2020/CVE-2020-0601.md @@ -74,6 +74,7 @@ A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) valid - https://github.com/yanghaoi/CVE-2020-0601 - https://github.com/yshneyderman/CS590J-Capstone - https://github.com/ztora/msvuln +- https://github.com/CrackerCat/CurveballCertTool #### ExploitDB - https://www.exploit-db.com/exploits/47933 diff --git a/cves/2020/CVE-2020-0796.md b/cves/2020/CVE-2020-0796.md index d919b7ac456..0076541327b 100644 --- a/cves/2020/CVE-2020-0796.md +++ b/cves/2020/CVE-2020-0796.md @@ -113,6 +113,7 @@ A remote code execution vulnerability exists in the way that the Microsoft Serve - https://github.com/ysyyrps123/CVE-2020-0796-exp - https://github.com/zathizh/cve-796-mit - https://github.com/zerodayblitz/NetSuite-network-exploitation-tool +- https://github.com/thai1012/cve-2020-0796 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-0796.yaml diff --git a/cves/2020/CVE-2020-10148.md b/cves/2020/CVE-2020-10148.md index 37d2b7267c3..6c78aa8fb8b 100644 --- a/cves/2020/CVE-2020-10148.md +++ b/cves/2020/CVE-2020-10148.md @@ -21,6 +21,7 @@ No PoCs from references. #### Github - https://github.com/B1anda0/CVE-2020-10148 - https://github.com/rdoix/CVE-2020-10148-Solarwinds-Orion +- https://github.com/horrister/solarwinds-sunburst-cve-2020-10148 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10148.yaml diff --git a/cves/2020/CVE-2020-10199.md b/cves/2020/CVE-2020-10199.md index 0184ef28cff..7a258fb57c4 100644 --- a/cves/2020/CVE-2020-10199.md +++ b/cves/2020/CVE-2020-10199.md @@ -33,3 +33,6 @@ Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nexus_repo_manager_el_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2020-10199 diff --git a/cves/2020/CVE-2020-10204.md b/cves/2020/CVE-2020-10204.md index 9062dd94b52..5a90ae85d9b 100644 --- a/cves/2020/CVE-2020-10204.md +++ b/cves/2020/CVE-2020-10204.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10204.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2020-10204 diff --git a/cves/2020/CVE-2020-10567.md b/cves/2020/CVE-2020-10567.md index d67033d5d6f..f6d34623bca 100644 --- a/cves/2020/CVE-2020-10567.md +++ b/cves/2020/CVE-2020-10567.md @@ -14,5 +14,5 @@ An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_ca - https://github.com/trippo/ResponsiveFilemanager/issues/600 #### Github -No PoCs found on GitHub currently. +- https://github.com/PierreAdams/CVE-2020-10567 diff --git a/cves/2020/CVE-2020-10665.md b/cves/2020/CVE-2020-10665.md index 96eefe08b77..dc6d7aabbdf 100644 --- a/cves/2020/CVE-2020-10665.md +++ b/cves/2020/CVE-2020-10665.md @@ -14,5 +14,5 @@ Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because - https://github.com/spaceraccoon/CVE-2020-10665 #### Github -No PoCs found on GitHub currently. +- https://github.com/spaceraccoon/CVE-2020-10665 diff --git a/cves/2020/CVE-2020-11022.md b/cves/2020/CVE-2020-11022.md index a8366019260..cf1c85477bc 100644 --- a/cves/2020/CVE-2020-11022.md +++ b/cves/2020/CVE-2020-11022.md @@ -23,6 +23,7 @@ In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML f - https://github.com/LSP1025923/CVE - https://github.com/Snorlyd/https-nj.gov---CVE-2020-11022 - https://github.com/ossf-cve-benchmark/CVE-2020-11022 +- https://github.com/ibnurusdianto/CVE-2020-11022 #### ExploitDB - https://www.exploit-db.com/exploits/49766 diff --git a/cves/2020/CVE-2020-11107.md b/cves/2020/CVE-2020-11107.md index bb2583423ca..de02e19399f 100644 --- a/cves/2020/CVE-2020-11107.md +++ b/cves/2020/CVE-2020-11107.md @@ -15,6 +15,7 @@ An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x #### Github - https://github.com/S1lkys/CVE-2020-11107 - https://github.com/andripwn/CVE-2020-11107 +- https://github.com/Mohnad-AL-saif/Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation #### ExploitDB - https://www.exploit-db.com/exploits/50337 diff --git a/cves/2020/CVE-2020-11108.md b/cves/2020/CVE-2020-11108.md index 9cdb3f86fa7..4ba8807b457 100644 --- a/cves/2020/CVE-2020-11108.md +++ b/cves/2020/CVE-2020-11108.md @@ -18,7 +18,7 @@ The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to - https://github.com/Frichetten/CVE-2020-11108-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/Frichetten/CVE-2020-11108-PoC #### ExploitDB - https://www.exploit-db.com/exploits/48519 diff --git a/cves/2020/CVE-2020-11539.md b/cves/2020/CVE-2020-11539.md index fdd0bfe4940..86fb881770c 100644 --- a/cves/2020/CVE-2020-11539.md +++ b/cves/2020/CVE-2020-11539.md @@ -14,5 +14,5 @@ An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been i - https://medium.com/@sayliambure/hacking-a-5-smartband-824763ab6e8f #### Github -No PoCs found on GitHub currently. +- https://github.com/the-girl-who-lived/CVE-2020-11539 diff --git a/cves/2020/CVE-2020-11651.md b/cves/2020/CVE-2020-11651.md index 6b413ab9816..7c45da1f544 100644 --- a/cves/2020/CVE-2020-11651.md +++ b/cves/2020/CVE-2020-11651.md @@ -29,9 +29,13 @@ An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2 - https://github.com/merlinxcy/ToolBox - https://github.com/ssrsec/CVE-2020-11651-CVE-2020-11652-EXP - https://github.com/zhangchi991022/Comprehensive-experiment-of-infomation-security +- https://github.com/s1lentf00thold/CVE-2020-11651-Poc #### ExploitDB - https://www.exploit-db.com/exploits/48421 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/saltstack_salt_unauth_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-11651 diff --git a/cves/2020/CVE-2020-11652.md b/cves/2020/CVE-2020-11652.md index fbf50e4897d..90baf23f8c3 100644 --- a/cves/2020/CVE-2020-11652.md +++ b/cves/2020/CVE-2020-11652.md @@ -31,3 +31,6 @@ An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/saltstack_salt_unauth_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-11652 diff --git a/cves/2020/CVE-2020-11800.md b/cves/2020/CVE-2020-11800.md index dde72ab4ba8..58f1179c244 100644 --- a/cves/2020/CVE-2020-11800.md +++ b/cves/2020/CVE-2020-11800.md @@ -13,5 +13,7 @@ Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ycseo-git/CVE-2020-11800 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/zabbix/CVE-2020-11800 diff --git a/cves/2020/CVE-2020-11978.md b/cves/2020/CVE-2020-11978.md index 67c67f57472..254e42331fc 100644 --- a/cves/2020/CVE-2020-11978.md +++ b/cves/2020/CVE-2020-11978.md @@ -26,3 +26,6 @@ An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/c #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_airflow_dag_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/airflow/CVE-2020-11978 diff --git a/cves/2020/CVE-2020-11981.md b/cves/2020/CVE-2020-11981.md index bbc759d3a01..ebc7725f29c 100644 --- a/cves/2020/CVE-2020-11981.md +++ b/cves/2020/CVE-2020-11981.md @@ -14,6 +14,10 @@ No PoCs from references. #### Github - https://github.com/navyaks55/Vulnerability_Exploitation +- https://github.com/Evillm/CVE-2020-11981-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-11981.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/airflow/CVE-2020-11981 diff --git a/cves/2020/CVE-2020-12432.md b/cves/2020/CVE-2020-12432.md index dd6ad1f54c1..83dca6f2c2d 100644 --- a/cves/2020/CVE-2020-12432.md +++ b/cves/2020/CVE-2020-12432.md @@ -14,5 +14,5 @@ The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not prope - https://www.youtube.com/watch?v=_tkRnSr6yc0 #### Github -No PoCs found on GitHub currently. +- https://github.com/d7x/CVE-2020-12432 diff --git a/cves/2020/CVE-2020-12446.md b/cves/2020/CVE-2020-12446.md index aa7ba3d1afd..0ddbd701078 100644 --- a/cves/2020/CVE-2020-12446.md +++ b/cves/2020/CVE-2020-12446.md @@ -14,4 +14,7 @@ The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes #### Github - https://github.com/Xacone/Eneio64-Driver-Exploit +- https://github.com/S1lkys/Eneio64-LPE +- https://github.com/enessakircolak/CVE-2020-12446 +- https://github.com/enessakircolak/Windows-11-24h2-Kernel-Exploit diff --git a/cves/2020/CVE-2020-12712.md b/cves/2020/CVE-2020-12712.md index 77994376c13..76f64f3c286 100644 --- a/cves/2020/CVE-2020-12712.md +++ b/cves/2020/CVE-2020-12712.md @@ -14,6 +14,7 @@ A vulnerability based on insecure user/password encryption in the JOE (job edito #### Github - https://github.com/SanderUbink/CVE-2020-12712 +- https://github.com/0xVEDETTE/CVE-2020-12712 #### ExploitDB - https://www.exploit-db.com/exploits/48587 diff --git a/cves/2020/CVE-2020-12928.md b/cves/2020/CVE-2020-12928.md index 74a606dae9b..fde413fa0e2 100644 --- a/cves/2020/CVE-2020-12928.md +++ b/cves/2020/CVE-2020-12928.md @@ -14,4 +14,5 @@ A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may a #### Github - https://github.com/tijme/amd-ryzen-master-driver-v17-exploit +- https://github.com/ch4rli3kop/CVE-2020-12928 diff --git a/cves/2020/CVE-2020-1350.md b/cves/2020/CVE-2020-1350.md index 0b5e70778fb..e949c4e0a8c 100644 --- a/cves/2020/CVE-2020-1350.md +++ b/cves/2020/CVE-2020-1350.md @@ -48,4 +48,5 @@ A remote code execution vulnerability exists in Windows Domain Name System serve - https://github.com/mr-r3b00t/CVE-2020-1350 - https://github.com/tinkersec/cve-2020-1350 - https://github.com/zoomerxsec/Fake_CVE-2020-1350 +- https://github.com/sty886/CVE-2020-1350-SigRed diff --git a/cves/2020/CVE-2020-13654.md b/cves/2020/CVE-2020-13654.md index 8cd8e6b84fb..c5f01ac1731 100644 --- a/cves/2020/CVE-2020-13654.md +++ b/cves/2020/CVE-2020-13654.md @@ -14,5 +14,5 @@ XWiki Platform before 12.8 mishandles escaping in the property displayer. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Astaruf/CVE-2020-13654 diff --git a/cves/2020/CVE-2020-13671.md b/cves/2020/CVE-2020-13671.md index 5a8861990cc..9873b16ef18 100644 --- a/cves/2020/CVE-2020-13671.md +++ b/cves/2020/CVE-2020-13671.md @@ -17,5 +17,6 @@ Drupal core does not properly sanitize certain filenames on uploaded files, whic No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Dungsocool/CVE-2020-13671 +- https://github.com/Dungsocool/CVE-2020-13671-old diff --git a/cves/2020/CVE-2020-13942.md b/cves/2020/CVE-2020-13942.md index dee8655f21e..ca30908df44 100644 --- a/cves/2020/CVE-2020-13942.md +++ b/cves/2020/CVE-2020-13942.md @@ -26,3 +26,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13942.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/unomi/CVE-2020-13942 diff --git a/cves/2020/CVE-2020-13945.md b/cves/2020/CVE-2020-13945.md index c80d76ed39c..73fbd37533a 100644 --- a/cves/2020/CVE-2020-13945.md +++ b/cves/2020/CVE-2020-13945.md @@ -24,3 +24,6 @@ In Apache APISIX, the user enabled the Admin API and deleted the Admin API acces #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_default_token_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apisix/CVE-2020-13945 diff --git a/cves/2020/CVE-2020-14008.md b/cves/2020/CVE-2020-14008.md index 875fe84c6f7..0d3029a9486 100644 --- a/cves/2020/CVE-2020-14008.md +++ b/cves/2020/CVE-2020-14008.md @@ -15,6 +15,7 @@ Zoho ManageEngine Applications Manager 14710 and before allows an authenticated #### Github - https://github.com/JackHars/cve-2020-14008 +- https://github.com/0x0d3ad/CVE-2020-14008 #### ExploitDB - https://www.exploit-db.com/exploits/48793 diff --git a/cves/2020/CVE-2020-14144.md b/cves/2020/CVE-2020-14144.md index bb4de18315a..0ab566675e1 100644 --- a/cves/2020/CVE-2020-14144.md +++ b/cves/2020/CVE-2020-14144.md @@ -15,6 +15,7 @@ The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated #### Github - https://github.com/p0dalirius/CVE-2020-14144-GiTea-git-hooks-rce +- https://github.com/Mohnad-AL-saif/Gitea-Git-Hooks-RCE-CVE-2020-14144- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14144.yaml diff --git a/cves/2020/CVE-2020-14343.md b/cves/2020/CVE-2020-14343.md index b9df6ab9848..b015ab25025 100644 --- a/cves/2020/CVE-2020-14343.md +++ b/cves/2020/CVE-2020-14343.md @@ -14,4 +14,7 @@ A vulnerability was discovered in the PyYAML library in versions before 5.4, whe #### Github - https://github.com/j4k0m/loader-CVE-2020-14343 +- https://github.com/Kairo-one/CVE-2020-14343-PyYAML +- https://github.com/seal-sec-demo-2/Python-Example +- https://github.com/sijie52/yasa-cve-2020-14343 diff --git a/cves/2020/CVE-2020-1472.md b/cves/2020/CVE-2020-1472.md index a2e942f250e..cac8ebe35cb 100644 --- a/cves/2020/CVE-2020-1472.md +++ b/cves/2020/CVE-2020-1472.md @@ -102,6 +102,11 @@ An elevation of privilege vulnerability exists when an attacker establishes a vu - https://github.com/whoami-chmod777/Zerologon-Attack-CVE-2020-1472-POC - https://github.com/wrathfulDiety/zerologon - https://github.com/zahidmm/CVE-Web-Scraper +- https://github.com/FaFcFF41/CVE-2020-1472 +- https://github.com/bvcyber/CVE-2020-1472 +- https://github.com/ckq7703/CVE-2020-1472 +- https://github.com/mods20hh/ZeroLogon-PoC-DC-Pwn +- https://github.com/nyambiblaise/Domain-Controller-DC-Exploitation-with-Metasploit-Impacket #### ExploitDB - https://www.exploit-db.com/exploits/49071 diff --git a/cves/2020/CVE-2020-14882.md b/cves/2020/CVE-2020-14882.md index 750065bc760..6e97bd957e0 100644 --- a/cves/2020/CVE-2020-14882.md +++ b/cves/2020/CVE-2020-14882.md @@ -56,6 +56,8 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware - https://github.com/xMr110/CVE-2020-14882 - https://github.com/xfiftyone/CVE-2020-14882 - https://github.com/zesnd/CVE-2020-14882-POC +- https://github.com/b1g-b33f/CVE-2020-14882 +- https://github.com/hyderpwn/weblogic #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14882.yaml @@ -65,3 +67,6 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/weblogic_admin_handle_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2020-14882 diff --git a/cves/2020/CVE-2020-14883.md b/cves/2020/CVE-2020-14883.md index 54c0988c0ca..6b9918369a4 100644 --- a/cves/2020/CVE-2020-14883.md +++ b/cves/2020/CVE-2020-14883.md @@ -22,6 +22,7 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware - https://github.com/amacloudobia/CVE-2020-14883 - https://github.com/fan1029/CVE-2020-14883EXP - https://github.com/murataydemir/CVE-2020-14883 +- https://github.com/1n7erface/PocList #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14883.yaml diff --git a/cves/2020/CVE-2020-15367.md b/cves/2020/CVE-2020-15367.md index 7220ce7ad18..091bfa676d6 100644 --- a/cves/2020/CVE-2020-15367.md +++ b/cves/2020/CVE-2020-15367.md @@ -13,5 +13,5 @@ Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts - https://github.com/inflixim4be/CVE-2020-15367 #### Github -No PoCs found on GitHub currently. +- https://github.com/inflixim4be/CVE-2020-15367 diff --git a/cves/2020/CVE-2020-15906.md b/cves/2020/CVE-2020-15906.md index 9202a4ed4f5..8cdb474f488 100644 --- a/cves/2020/CVE-2020-15906.md +++ b/cves/2020/CVE-2020-15906.md @@ -17,3 +17,6 @@ tiki-login.php in Tiki before 21.2 sets the admin password to a blank value afte #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15906.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tikiwiki/CVE-2020-15906 diff --git a/cves/2020/CVE-2020-15956.md b/cves/2020/CVE-2020-15956.md index 925c5f1c43c..0eaa741db07 100644 --- a/cves/2020/CVE-2020-15956.md +++ b/cves/2020/CVE-2020-15956.md @@ -14,7 +14,7 @@ ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unaut - https://github.com/megamagnus/cve-2020-15956 #### Github -No PoCs found on GitHub currently. +- https://github.com/megamagnus/cve-2020-15956 #### ExploitDB - https://www.exploit-db.com/exploits/48731 diff --git a/cves/2020/CVE-2020-16012.md b/cves/2020/CVE-2020-16012.md index 52bbe34cf5d..3adbf95c1a6 100644 --- a/cves/2020/CVE-2020-16012.md +++ b/cves/2020/CVE-2020-16012.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/aleksejspopovs/cve-2020-16012 - https://github.com/helidem/CVE-2020-16012-PoC +- https://github.com/leopoldabgn/CVE-2020-16012-PoC diff --git a/cves/2020/CVE-2020-16270.md b/cves/2020/CVE-2020-16270.md index 5164c0ac783..34e43e2c7ad 100644 --- a/cves/2020/CVE-2020-16270.md +++ b/cves/2020/CVE-2020-16270.md @@ -13,7 +13,7 @@ OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can us - https://github.com/Security-AVS/CVE-2020-16270 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2020-16270 #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/cve-2020-16270-4637.yaml diff --git a/cves/2020/CVE-2020-16846.md b/cves/2020/CVE-2020-16846.md index 97fea33be62..37e9058182f 100644 --- a/cves/2020/CVE-2020-16846.md +++ b/cves/2020/CVE-2020-16846.md @@ -22,3 +22,6 @@ An issue was discovered in SaltStack Salt through 3002. Sending crafted web requ #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/saltstack_salt_api_cmd_exec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-16846 diff --git a/cves/2020/CVE-2020-17103.md b/cves/2020/CVE-2020-17103.md index c8cc4c81a94..d1e7dca5ebf 100644 --- a/cves/2020/CVE-2020-17103.md +++ b/cves/2020/CVE-2020-17103.md @@ -27,5 +27,6 @@ Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0xBlackash/CVE-2020-17103 +- https://github.com/AlexLinov/MiniPlasma-Runner diff --git a/cves/2020/CVE-2020-17382.md b/cves/2020/CVE-2020-17382.md index 47d254ebc62..5777b00e13e 100644 --- a/cves/2020/CVE-2020-17382.md +++ b/cves/2020/CVE-2020-17382.md @@ -17,6 +17,7 @@ The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x8 - https://github.com/houseofint3/CVE-2020-17382 - https://github.com/houseofxyz/CVE-2020-17382 - https://github.com/uf0o/CVE-2020-17382 +- https://github.com/typeconfused/CVE-2020-17382 #### ExploitDB - https://www.exploit-db.com/exploits/48836 diff --git a/cves/2020/CVE-2020-17518.md b/cves/2020/CVE-2020-17518.md index 6674a94f4c5..21579edf9d6 100644 --- a/cves/2020/CVE-2020-17518.md +++ b/cves/2020/CVE-2020-17518.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17518.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/flink/CVE-2020-17518 diff --git a/cves/2020/CVE-2020-17519.md b/cves/2020/CVE-2020-17519.md index 88b526d7b8f..2700d266255 100644 --- a/cves/2020/CVE-2020-17519.md +++ b/cves/2020/CVE-2020-17519.md @@ -36,3 +36,6 @@ A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apache_flink_jobmanager_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/flink/CVE-2020-17519 diff --git a/cves/2020/CVE-2020-17526.md b/cves/2020/CVE-2020-17526.md index b1e46059aad..2dc2b820197 100644 --- a/cves/2020/CVE-2020-17526.md +++ b/cves/2020/CVE-2020-17526.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17526.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/airflow/CVE-2020-17526 diff --git a/cves/2020/CVE-2020-18324.md b/cves/2020/CVE-2020-18324.md index 719177726fe..18d5eddc1c1 100644 --- a/cves/2020/CVE-2020-18324.md +++ b/cves/2020/CVE-2020-18324.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q p - https://github.com/hamm0nz/CVE-2020-18324 #### Github -No PoCs found on GitHub currently. +- https://github.com/hamm0nz/CVE-2020-18324 diff --git a/cves/2020/CVE-2020-18325.md b/cves/2020/CVE-2020-18325.md index c7721d173f7..7a2a769b541 100644 --- a/cves/2020/CVE-2020-18325.md +++ b/cves/2020/CVE-2020-18325.md @@ -13,5 +13,5 @@ Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion - https://github.com/hamm0nz/CVE-2020-18325 #### Github -No PoCs found on GitHub currently. +- https://github.com/hamm0nz/CVE-2020-18325 diff --git a/cves/2020/CVE-2020-18326.md b/cves/2020/CVE-2020-18326.md index b4f305af632..2e8f1d1e5f3 100644 --- a/cves/2020/CVE-2020-18326.md +++ b/cves/2020/CVE-2020-18326.md @@ -13,5 +13,5 @@ Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CM - https://github.com/hamm0nz/CVE-2020-18326 #### Github -No PoCs found on GitHub currently. +- https://github.com/hamm0nz/CVE-2020-18326 diff --git a/cves/2020/CVE-2020-1938.md b/cves/2020/CVE-2020-1938.md index 35ea10effc1..5320a94dfdd 100644 --- a/cves/2020/CVE-2020-1938.md +++ b/cves/2020/CVE-2020-1938.md @@ -50,6 +50,11 @@ No PoCs from references. - https://github.com/woaiqiukui/CVE-2020-1938TomcatAjpScanner - https://github.com/wukong-bin/PeiQi-LandGrey-ClassHound - https://github.com/xindongzhuaizhuai/CVE-2020-1938 +- https://github.com/RedTeam-Rediron/CVE-2020-1938 +- https://github.com/With-fate/CVE-2020-1938 +- https://github.com/abrewer251/CVE-2020-1938_Ghostcat-PoC +- https://github.com/cyberguardsec101-sketch/ghostcat +- https://github.com/si1ence90/Ghostcat-Tomcat-AJP-Exploit-Py3 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-1938.yaml @@ -60,3 +65,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/tomcat_ghostcat.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2020-1938 diff --git a/cves/2020/CVE-2020-1948.md b/cves/2020/CVE-2020-1948.md index f4c8e247706..d1a86ff6458 100644 --- a/cves/2020/CVE-2020-1948.md +++ b/cves/2020/CVE-2020-1948.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/M3g4Byt3/cve-2020-1948-poc - https://github.com/ctlyz123/CVE-2020-1948 - https://github.com/txrw/Dubbo-CVE-2020-1948 +- https://github.com/0xl0ki/Dubbo-deserialization diff --git a/cves/2020/CVE-2020-1957.md b/cves/2020/CVE-2020-1957.md index b8c327aef71..04e858ef2b7 100644 --- a/cves/2020/CVE-2020-1957.md +++ b/cves/2020/CVE-2020-1957.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder3/CVE-2020-1957.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2020-1957 diff --git a/cves/2020/CVE-2020-1971.md b/cves/2020/CVE-2020-1971.md index c07dfa05735..2977bc6711b 100644 --- a/cves/2020/CVE-2020-1971.md +++ b/cves/2020/CVE-2020-1971.md @@ -18,4 +18,5 @@ The X.509 GeneralName type is a generic type for representing different types of #### Github - https://github.com/MBHudson/CVE-2020-1971 +- https://github.com/honeyvig/CVE-2020-1971 diff --git a/cves/2020/CVE-2020-23160.md b/cves/2020/CVE-2020-23160.md index 56ae9eff856..23158194343 100644 --- a/cves/2020/CVE-2020-23160.md +++ b/cves/2020/CVE-2020-23160.md @@ -14,5 +14,5 @@ Remote code execution in Pyrescom Termod4 time management devices before 10.04k - https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device #### Github -No PoCs found on GitHub currently. +- https://github.com/Outpost24/Pyrescom-Termod-PoC diff --git a/cves/2020/CVE-2020-23839.md b/cves/2020/CVE-2020-23839.md index b3486c291fe..f6de5e19de5 100644 --- a/cves/2020/CVE-2020-23839.md +++ b/cves/2020/CVE-2020-23839.md @@ -15,7 +15,7 @@ A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, i - https://www.exploit-db.com/exploits/49726 #### Github -No PoCs found on GitHub currently. +- https://github.com/boku7/CVE-2020-23839 #### ExploitDB - https://www.exploit-db.com/exploits/49726 diff --git a/cves/2020/CVE-2020-24186.md b/cves/2020/CVE-2020-24186.md index 72523a04361..5ee307e0b55 100644 --- a/cves/2020/CVE-2020-24186.md +++ b/cves/2020/CVE-2020-24186.md @@ -23,6 +23,7 @@ A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 - https://github.com/hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE - https://github.com/meicookies/CVE-2020-24186 - https://github.com/substing/CVE-2020-24186_reverse_shell_upload +- https://github.com/sec-dojo-com/CVE-2020-24186 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24186.yaml diff --git a/cves/2020/CVE-2020-25042.md b/cves/2020/CVE-2020-25042.md index ed763fb7851..cab77c6868c 100644 --- a/cves/2020/CVE-2020-25042.md +++ b/cves/2020/CVE-2020-25042.md @@ -15,7 +15,7 @@ An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, - https://www.exploit-db.com/exploits/48780 #### Github -No PoCs found on GitHub currently. +- https://github.com/Groppoxx/CVE-2020-25042-PoC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/maracms_upload_exec.rb diff --git a/cves/2020/CVE-2020-25213.md b/cves/2020/CVE-2020-25213.md index fde2e93caef..64e8b95a8eb 100644 --- a/cves/2020/CVE-2020-25213.md +++ b/cves/2020/CVE-2020-25213.md @@ -28,6 +28,7 @@ The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote - https://github.com/mansoorr123/wp-file-manager-CVE-2020-25213 - https://github.com/piruprohacking/CVE-2020-25213 - https://github.com/w4fz5uck5/wp-file-manager-0day +- https://github.com/KienHoSD/wp-file-manager-exploit-CVE-2020-25213-with-Zerologon #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25213.yaml diff --git a/cves/2020/CVE-2020-25265.md b/cves/2020/CVE-2020-25265.md index cb1003a619f..43a50be2a9f 100644 --- a/cves/2020/CVE-2020-25265.md +++ b/cves/2020/CVE-2020-25265.md @@ -13,5 +13,5 @@ AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a - https://github.com/refi64/CVE-2020-25265-25266 #### Github -No PoCs found on GitHub currently. +- https://github.com/refi64/CVE-2020-25265-25266 diff --git a/cves/2020/CVE-2020-25398.md b/cves/2020/CVE-2020-25398.md index d862c6ef72e..f9987adab94 100644 --- a/cves/2020/CVE-2020-25398.md +++ b/cves/2020/CVE-2020-25398.md @@ -13,5 +13,5 @@ CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv expor - https://github.com/h3llraiser/CVE-2020-25398 #### Github -No PoCs found on GitHub currently. +- https://github.com/h3llraiser/CVE-2020-25398 diff --git a/cves/2020/CVE-2020-25399.md b/cves/2020/CVE-2020-25399.md index 1215f32dc70..74aea5d44df 100644 --- a/cves/2020/CVE-2020-25399.md +++ b/cves/2020/CVE-2020-25399.md @@ -13,5 +13,5 @@ Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack a - https://github.com/h3llraiser/CVE-2020-25399 #### Github -No PoCs found on GitHub currently. +- https://github.com/h3llraiser/CVE-2020-25399 diff --git a/cves/2020/CVE-2020-2546.md b/cves/2020/CVE-2020-2546.md index c98ed488fa2..ae95ffdcf7c 100644 --- a/cves/2020/CVE-2020-2546.md +++ b/cves/2020/CVE-2020-2546.md @@ -14,5 +14,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/hktalent/CVE_2020_2546 diff --git a/cves/2020/CVE-2020-25498.md b/cves/2020/CVE-2020-25498.md index 83ea657a38f..abb601204dd 100644 --- a/cves/2020/CVE-2020-25498.md +++ b/cves/2020/CVE-2020-25498.md @@ -15,5 +15,5 @@ Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploite - https://youtu.be/u_6yBIMF74A #### Github -No PoCs found on GitHub currently. +- https://github.com/the-girl-who-lived/CVE-2020-25498 diff --git a/cves/2020/CVE-2020-2551.md b/cves/2020/CVE-2020-2551.md index e3d3fe483ee..eeddd9e18f2 100644 --- a/cves/2020/CVE-2020-2551.md +++ b/cves/2020/CVE-2020-2551.md @@ -31,6 +31,7 @@ No PoCs from references. - https://github.com/samjcs/log4shell-possible-malware - https://github.com/wukong-bin/weblogicpoc - https://github.com/zzwlpx/weblogicPoc +- https://github.com/abbarhissarh/CVE-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2551.yaml diff --git a/cves/2020/CVE-2020-26061.md b/cves/2020/CVE-2020-26061.md index c2e388cdc85..8d8f591e504 100644 --- a/cves/2020/CVE-2020-26061.md +++ b/cves/2020/CVE-2020-26061.md @@ -13,5 +13,5 @@ ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected - https://github.com/missing0x00/CVE-2020-26061 #### Github -No PoCs found on GitHub currently. +- https://github.com/missing0x00/CVE-2020-26061 diff --git a/cves/2020/CVE-2020-26217.md b/cves/2020/CVE-2020-26217.md index 624cfaa1aab..d5dbff4739d 100644 --- a/cves/2020/CVE-2020-26217.md +++ b/cves/2020/CVE-2020-26217.md @@ -20,6 +20,7 @@ XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnera - https://github.com/jas502n/CVE-2020-26259 - https://github.com/novysodope/CVE-2020-26217-XStream-RCE-POC - https://github.com/shoucheng3/x-stream__xstream_CVE-2020-26217_1-4-14-java7 +- https://github.com/Kairo-one/CVE-2020-26217-XStream #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26217.yaml diff --git a/cves/2020/CVE-2020-26732.md b/cves/2020/CVE-2020-26732.md index 675496b9502..a9e500b668d 100644 --- a/cves/2020/CVE-2020-26732.md +++ b/cves/2020/CVE-2020-26732.md @@ -14,5 +14,5 @@ SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set - https://github.com/swzhouu/CVE-2020-26732 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2020-26732 diff --git a/cves/2020/CVE-2020-26733.md b/cves/2020/CVE-2020-26733.md index 8f3a7daa764..254b5b088b8 100644 --- a/cves/2020/CVE-2020-26733.md +++ b/cves/2020/CVE-2020-26733.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Ve - https://github.com/swzhouu/CVE-2020-26733 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2020-26733 diff --git a/cves/2020/CVE-2020-27194.md b/cves/2020/CVE-2020-27194.md index 4bf9cd1dc5e..e03001bd2fc 100644 --- a/cves/2020/CVE-2020-27194.md +++ b/cves/2020/CVE-2020-27194.md @@ -15,4 +15,5 @@ An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or i #### Github - https://github.com/willinin/CVE-2020-27194-exp - https://github.com/xmzyshypnc/CVE-2020-27194 +- https://github.com/WhatsWrongAndWhy/CVE-2020-27194 diff --git a/cves/2020/CVE-2020-27368.md b/cves/2020/CVE-2020-27368.md index dbb74afb3a6..a8b2e34c65c 100644 --- a/cves/2020/CVE-2020-27368.md +++ b/cves/2020/CVE-2020-27368.md @@ -13,5 +13,5 @@ Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B201 - https://github.com/swzhouu/CVE-2020-27368 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2020-27368 diff --git a/cves/2020/CVE-2020-28458.md b/cves/2020/CVE-2020-28458.md index a4bdfb1b004..1201c580bdc 100644 --- a/cves/2020/CVE-2020-28458.md +++ b/cves/2020/CVE-2020-28458.md @@ -14,4 +14,5 @@ All versions of package datatables.net are vulnerable to Prototype Pollution due #### Github - https://github.com/fazilbaig1/CVE-2020-28458 +- https://github.com/Raka200juta/28458 diff --git a/cves/2020/CVE-2020-29007.md b/cves/2020/CVE-2020-29007.md index afc8a83a865..64e7c7a8a16 100644 --- a/cves/2020/CVE-2020-29007.md +++ b/cves/2020/CVE-2020-29007.md @@ -13,5 +13,5 @@ The Score extension through 0.3.0 for MediaWiki has a remote code execution vuln - https://github.com/seqred-s-a/cve-2020-29007 #### Github -No PoCs found on GitHub currently. +- https://github.com/seqred-s-a/cve-2020-29007 diff --git a/cves/2020/CVE-2020-29599.md b/cves/2020/CVE-2020-29599.md index 5aa7cc702be..8ac558b80c1 100644 --- a/cves/2020/CVE-2020-29599.md +++ b/cves/2020/CVE-2020-29599.md @@ -16,3 +16,5 @@ ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authentica - https://github.com/coco0x0a/CVE-2020-29599 - https://github.com/lnwza0x0a/CVE-2020-29599 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/imagemagick/CVE-2020-29599 diff --git a/cves/2020/CVE-2020-29607.md b/cves/2020/CVE-2020-29607.md index dddb9b7440b..b1b3e019065 100644 --- a/cves/2020/CVE-2020-29607.md +++ b/cves/2020/CVE-2020-29607.md @@ -17,6 +17,9 @@ A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows - https://github.com/0xN7y/CVE-2020-29607 - https://github.com/Alienfader/CVE-2020-29607 - https://github.com/ar2o3/CVE-2020-29607 +- https://github.com/CaelumIsMe/CVE-2020-29607-POC +- https://github.com/abbarhissarh/CVE-2020-29607 +- https://github.com/estebanzarate/CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC #### ExploitDB - https://www.exploit-db.com/exploits/49909 diff --git a/cves/2020/CVE-2020-35262.md b/cves/2020/CVE-2020-35262.md index 46c46e62d15..db53aa7cc88 100644 --- a/cves/2020/CVE-2020-35262.md +++ b/cves/2020/CVE-2020-35262.md @@ -14,5 +14,5 @@ Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited v - https://youtu.be/E5wEzf-gkOE #### Github -No PoCs found on GitHub currently. +- https://github.com/the-girl-who-lived/CVE-2020-35262 diff --git a/cves/2020/CVE-2020-35476.md b/cves/2020/CVE-2020-35476.md index c919679fba3..a729bee9ead 100644 --- a/cves/2020/CVE-2020-35476.md +++ b/cves/2020/CVE-2020-35476.md @@ -21,3 +21,6 @@ A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via comma #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opentsdb_yrange_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/opentsdb/CVE-2020-35476 diff --git a/cves/2020/CVE-2020-35488.md b/cves/2020/CVE-2020-35488.md index 879fea379f5..b48085fd7c0 100644 --- a/cves/2020/CVE-2020-35488.md +++ b/cves/2020/CVE-2020-35488.md @@ -13,7 +13,7 @@ The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allo - https://github.com/GuillaumePetit84/CVE-2020-35488 #### Github -No PoCs found on GitHub currently. +- https://github.com/GuillaumePetit84/CVE-2020-35488 #### ExploitDB - https://www.exploit-db.com/exploits/49283 diff --git a/cves/2020/CVE-2020-3956.md b/cves/2020/CVE-2020-3956.md index 9ad40a78c18..910adda66c6 100644 --- a/cves/2020/CVE-2020-3956.md +++ b/cves/2020/CVE-2020-3956.md @@ -15,7 +15,7 @@ VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x be - https://github.com/aaronsvk/CVE-2020-3956 #### Github -No PoCs found on GitHub currently. +- https://github.com/aaronsvk/CVE-2020-3956 #### ExploitDB - https://www.exploit-db.com/exploits/48540 diff --git a/cves/2020/CVE-2020-5504.md b/cves/2020/CVE-2020-5504.md index 10243266671..03ed3b16deb 100644 --- a/cves/2020/CVE-2020-5504.md +++ b/cves/2020/CVE-2020-5504.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/whale-baby/exploitation-of-vulnerability - https://github.com/xMohamed0/CVE-2020-5504-phpMyAdmin +- https://github.com/CerberusMrXi/phpMyAdmin-CVE-2020-5504-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52451 diff --git a/cves/2020/CVE-2020-5752.md b/cves/2020/CVE-2020-5752.md index c2baa4ee493..ece4ccaeb3b 100644 --- a/cves/2020/CVE-2020-5752.md +++ b/cves/2020/CVE-2020-5752.md @@ -16,6 +16,7 @@ Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, una #### Github - https://github.com/yevh/CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- +- https://github.com/x0rbeexd/CVE-2020-5752 #### ExploitDB - https://www.exploit-db.com/exploits/48505 diff --git a/cves/2020/CVE-2020-5844.md b/cves/2020/CVE-2020-5844.md index 6f8819459b5..03f5ad8c5d7 100644 --- a/cves/2020/CVE-2020-5844.md +++ b/cves/2020/CVE-2020-5844.md @@ -15,6 +15,7 @@ index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 #### Github - https://github.com/UNICORDev/exploit-CVE-2020-5844 +- https://github.com/TheCyberGeek/CVE-2020-5844 #### ExploitDB - https://www.exploit-db.com/exploits/50961 diff --git a/cves/2020/CVE-2020-5902.md b/cves/2020/CVE-2020-5902.md index c7b667c3028..cf8ed91f0dd 100644 --- a/cves/2020/CVE-2020-5902.md +++ b/cves/2020/CVE-2020-5902.md @@ -66,6 +66,7 @@ In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12. - https://github.com/yassineaboukir/CVE-2020-5902 - https://github.com/z3n70/CVE-2020-5902 - https://github.com/zhzyker/CVE-2020-5902 +- https://github.com/0xBlackash/CVE-2020-5902 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5902.yaml diff --git a/cves/2020/CVE-2020-6418.md b/cves/2020/CVE-2020-6418.md index d45c6ae6fb7..eb2197f1a69 100644 --- a/cves/2020/CVE-2020-6418.md +++ b/cves/2020/CVE-2020-6418.md @@ -19,6 +19,7 @@ Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote at - https://github.com/SivaPriyaRanganatha/CVE-2020-6418 - https://github.com/tianstcht/v8-exploit - https://github.com/ulexec/ChromeSHELFLoader +- https://github.com/a-mansilla/CVE-2020-6418 #### ExploitDB - https://www.exploit-db.com/exploits/48186 diff --git a/cves/2020/CVE-2020-7012.md b/cves/2020/CVE-2020-7012.md index 9386cd44d3a..a6c4b02433b 100644 --- a/cves/2020/CVE-2020-7012.md +++ b/cves/2020/CVE-2020-7012.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kibana_upgrade_assistant_telemetry_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kibana/CVE-2020-7012 diff --git a/cves/2020/CVE-2020-7247.md b/cves/2020/CVE-2020-7247.md index 5b25eb18545..fb80a7b31f5 100644 --- a/cves/2020/CVE-2020-7247.md +++ b/cves/2020/CVE-2020-7247.md @@ -31,6 +31,7 @@ smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and oth - https://github.com/minhluannguyen/CVE-2020-7247-reproducer - https://github.com/r0lh/CVE-2020-7247 - https://github.com/superzerosec/cve-2020-7247 +- https://github.com/solmin111/OpenSMTPD-CVE-2020-7247- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-7247.yaml @@ -42,3 +43,6 @@ smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and oth #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/opensmtpd_mail_from_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/opensmtpd/CVE-2020-7247 diff --git a/cves/2020/CVE-2020-7598.md b/cves/2020/CVE-2020-7598.md index 574c0409db1..ca49c80b9b6 100644 --- a/cves/2020/CVE-2020-7598.md +++ b/cves/2020/CVE-2020-7598.md @@ -16,4 +16,5 @@ minimist before 1.2.2 could be tricked into adding or modifying properties of Ob - https://github.com/andisfar/LaunchQtCreator - https://github.com/lirantal/pp-minimist-poc - https://github.com/nevermoe/CVE-2021-44906 +- https://github.com/renewablehacking/CVE-2020-7598 diff --git a/cves/2020/CVE-2020-7602.md b/cves/2020/CVE-2020-7602.md index 1c20a243421..117ff34d8ee 100644 --- a/cves/2020/CVE-2020-7602.md +++ b/cves/2020/CVE-2020-7602.md @@ -13,5 +13,5 @@ node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runC - https://snyk.io/vuln/SNYK-JS-NODEPROMPTHERE-560115 #### Github -No PoCs found on GitHub currently. +- https://github.com/dannyEndorTest/node-prompt-here diff --git a/cves/2020/CVE-2020-7693.md b/cves/2020/CVE-2020-7693.md index 73e5f465219..083a0730187 100644 --- a/cves/2020/CVE-2020-7693.md +++ b/cves/2020/CVE-2020-7693.md @@ -15,5 +15,6 @@ Incorrect handling of Upgrade header with the value websocket leads in crashing - https://snyk.io/vuln/SNYK-JS-SOCKJS-575261 #### Github -No PoCs found on GitHub currently. +- https://github.com/andsnw/sockjs-dos-py +- https://github.com/thewindghost/CVE-2020-7693 diff --git a/cves/2020/CVE-2020-7934.md b/cves/2020/CVE-2020-7934.md index 9fd78f10916..55b8df7093f 100644 --- a/cves/2020/CVE-2020-7934.md +++ b/cves/2020/CVE-2020-7934.md @@ -15,7 +15,7 @@ In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and L - https://semanticbits.com/liferay-portal-authenticated-xss-disclosure/ #### Github -No PoCs found on GitHub currently. +- https://github.com/3ndG4me/liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934 #### ExploitDB - https://www.exploit-db.com/exploits/49091 diff --git a/cves/2020/CVE-2020-7961.md b/cves/2020/CVE-2020-7961.md index c205edde969..7291500839c 100644 --- a/cves/2020/CVE-2020-7961.md +++ b/cves/2020/CVE-2020-7961.md @@ -25,6 +25,7 @@ Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows - https://github.com/papa-anniekey/CustomSignatures - https://github.com/pashayogi/CVE-2020-7961-Mass - https://github.com/thelostworldFree/CVE-2020-7961-payloads +- https://github.com/Alaa-abdulridha/POC-CVE-2020-7961-Token-iterate #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7961.yaml @@ -34,3 +35,6 @@ Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/liferay_java_unmarshalling.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/liferay-portal/CVE-2020-7961 diff --git a/cves/2020/CVE-2020-7980.md b/cves/2020/CVE-2020-7980.md index 01e8858028b..f291c23976c 100644 --- a/cves/2020/CVE-2020-7980.md +++ b/cves/2020/CVE-2020-7980.md @@ -15,7 +15,7 @@ Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS command - https://sku11army.blogspot.com/2020/01/intellian-aptus-web-rce-intellian.html #### Github -No PoCs found on GitHub currently. +- https://github.com/Xh4H/Satellian-CVE-2020-7980 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7980.yaml diff --git a/cves/2020/CVE-2020-8158.md b/cves/2020/CVE-2020-8158.md index bbed916fc41..d55778821bc 100644 --- a/cves/2020/CVE-2020-8158.md +++ b/cves/2020/CVE-2020-8158.md @@ -13,5 +13,5 @@ Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow atta - https://hackerone.com/reports/869574 #### Github -No PoCs found on GitHub currently. +- https://github.com/open-flaw/CVE-2020-8158 diff --git a/cves/2020/CVE-2020-8163.md b/cves/2020/CVE-2020-8163.md index 99c3f2c1904..eed57f9a6d9 100644 --- a/cves/2020/CVE-2020-8163.md +++ b/cves/2020/CVE-2020-8163.md @@ -20,6 +20,7 @@ The is a code injection vulnerability in versions of Rails prior to 5.0.1 that w - https://github.com/h4ms1k/CVE-2020-8163 - https://github.com/lucasallan/CVE-2020-8163 - https://github.com/novanazizr/Rails-5.0.1---RCE +- https://github.com/lucasamorimca/CVE-2020-8163 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8163.yaml diff --git a/cves/2020/CVE-2020-8825.md b/cves/2020/CVE-2020-8825.md index 105d37b5244..0e7f0a344d1 100644 --- a/cves/2020/CVE-2020-8825.md +++ b/cves/2020/CVE-2020-8825.md @@ -14,7 +14,7 @@ index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS. - https://github.com/hacky1997/CVE-2020-8825 #### Github -No PoCs found on GitHub currently. +- https://github.com/hacky1997/CVE-2020-8825 #### ExploitDB - https://www.exploit-db.com/exploits/48042 diff --git a/cves/2020/CVE-2020-8835.md b/cves/2020/CVE-2020-8835.md index f133594e1eb..59c4a789165 100644 --- a/cves/2020/CVE-2020-8835.md +++ b/cves/2020/CVE-2020-8835.md @@ -22,6 +22,7 @@ In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) di - https://github.com/johnatag/INF8602-CVE-2020-8835 - https://github.com/snappyJack/Rick_write_exp_CVE-2020-8835 - https://github.com/zilong3033/CVE-2020-8835 +- https://github.com/WhatsWrongAndWhy/CVE-2020-8835 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb diff --git a/cves/2020/CVE-2020-9273.md b/cves/2020/CVE-2020-9273.md index 8208247bba4..d2d2a471ae2 100644 --- a/cves/2020/CVE-2020-9273.md +++ b/cves/2020/CVE-2020-9273.md @@ -14,4 +14,5 @@ In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the #### Github - https://github.com/ptef/CVE-2020-9273 +- https://github.com/dukptkey/CVE-2020-9273 diff --git a/cves/2020/CVE-2020-9380.md b/cves/2020/CVE-2020-9380.md index d9d2f5a6379..621067403cc 100644 --- a/cves/2020/CVE-2020-9380.md +++ b/cves/2020/CVE-2020-9380.md @@ -13,5 +13,5 @@ IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS co - https://github.com/migueltarga/CVE-2020-9380 #### Github -No PoCs found on GitHub currently. +- https://github.com/migueltarga/CVE-2020-9380 diff --git a/cves/2020/CVE-2020-9402.md b/cves/2020/CVE-2020-9402.md index b0b743e6a9f..ad4f3ab949c 100644 --- a/cves/2020/CVE-2020-9402.md +++ b/cves/2020/CVE-2020-9402.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2020/CVE-2020-9402.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2020-9402 diff --git a/cves/2020/CVE-2020-9496.md b/cves/2020/CVE-2020-9496.md index 720c95831eb..af7a2d4196c 100644 --- a/cves/2020/CVE-2020-9496.md +++ b/cves/2020/CVE-2020-9496.md @@ -33,3 +33,6 @@ XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scriptin #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_ofbiz_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2020-9496 diff --git a/cves/2020/CVE-2020-9715.md b/cves/2020/CVE-2020-9715.md index 60759f56562..3986a3bb83c 100644 --- a/cves/2020/CVE-2020-9715.md +++ b/cves/2020/CVE-2020-9715.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/lsw29475/CVE-2020-9715 +- https://github.com/f8al/PoC-CVE-2020-9715 diff --git a/cves/2020/CVE-2020-9802.md b/cves/2020/CVE-2020-9802.md index 53f19e3a5c3..7a0f65ab5f6 100644 --- a/cves/2020/CVE-2020-9802.md +++ b/cves/2020/CVE-2020-9802.md @@ -23,4 +23,5 @@ No PoCs from references. - https://github.com/khcujw/CVE-2020-9802 - https://github.com/wh1te4ever/totally-not-spyware-v2 - https://github.com/wyxdlz54188/safari_jailbreak +- https://github.com/Billy-Ellis/jitsploitation diff --git a/cves/2021/CVE-2021-1585.md b/cves/2021/CVE-2021-1585.md index b402e273f5e..601aa5b4bb9 100644 --- a/cves/2021/CVE-2021-1585.md +++ b/cves/2021/CVE-2021-1585.md @@ -14,4 +14,5 @@ A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher co #### Github - https://github.com/jbaines-r7/cisco_asa_research +- https://github.com/jbaines-r7/staystaystay diff --git a/cves/2021/CVE-2021-1675.md b/cves/2021/CVE-2021-1675.md index 05b6322c253..e188db53916 100644 --- a/cves/2021/CVE-2021-1675.md +++ b/cves/2021/CVE-2021-1675.md @@ -98,6 +98,7 @@ Windows Print Spooler Remote Code Execution Vulnerability - https://github.com/whoami-chmod777/CVE-2021-1675-CVE-2021-34527 - https://github.com/yu2u/CVE-2021-1675 - https://github.com/zha0/Microsoft-CVE-2021-1675 +- https://github.com/ccordeiro/CVE-2021-1675 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/cve_2021_1675_printnightmare.rb diff --git a/cves/2021/CVE-2021-1732.md b/cves/2021/CVE-2021-1732.md index d1ab9bad2c8..b979fe46bdc 100644 --- a/cves/2021/CVE-2021-1732.md +++ b/cves/2021/CVE-2021-1732.md @@ -44,6 +44,8 @@ Windows Win32k Elevation of Privilege Vulnerability - https://github.com/salutdamour/Kernel_Exploit - https://github.com/win32kdie/Kernel_Exploit - https://github.com/yangshifan-git/CVE-2021-1732 +- https://github.com/flyinbedxyz/CVE-2021-1732 +- https://github.com/po4sec/CVE-2021-1732 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21882_win32k.rb diff --git a/cves/2021/CVE-2021-1931.md b/cves/2021/CVE-2021-1931.md index a87448c4a2b..5b64ba8e22d 100644 --- a/cves/2021/CVE-2021-1931.md +++ b/cves/2021/CVE-2021-1931.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/FakeShell/CVE-2021-1931-BBRY-KEY2 - https://github.com/starseed12345/QuestStack +- https://github.com/aomsin2526/xperia_5_bl_unlocker_poc diff --git a/cves/2021/CVE-2021-21123.md b/cves/2021/CVE-2021-21123.md index 33f68fa8431..0c77bb64e03 100644 --- a/cves/2021/CVE-2021-21123.md +++ b/cves/2021/CVE-2021-21123.md @@ -13,5 +13,5 @@ Insufficient data validation in File System API in Google Chrome prior to 88.0.4 No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Puliczek/CVE-2021-21123-PoC-Google-Chrome diff --git a/cves/2021/CVE-2021-21220.md b/cves/2021/CVE-2021-21220.md index 47344c443dc..a7dc57beebc 100644 --- a/cves/2021/CVE-2021-21220.md +++ b/cves/2021/CVE-2021-21220.md @@ -16,6 +16,8 @@ Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0. #### Github - https://github.com/AmesianX/CVE-2021-21220 +- https://github.com/JacobTaylor3/CVE-2021-21220 +- https://github.com/borahll/CVE-2021-21220 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_cve_2021_21220_v8_insufficient_validation.rb diff --git a/cves/2021/CVE-2021-21239.md b/cves/2021/CVE-2021-21239.md index 17e7e0b3ad5..a0205b6f404 100644 --- a/cves/2021/CVE-2021-21239.md +++ b/cves/2021/CVE-2021-21239.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/RyanBoomer30/CVE-2021-21239-Exploit - https://github.com/illera88/CVE-2021-21239 +- https://github.com/Crims-on/CVE-2021-21239 diff --git a/cves/2021/CVE-2021-21311.md b/cves/2021/CVE-2021-21311.md index 25aa17cb480..297246478d6 100644 --- a/cves/2021/CVE-2021-21311.md +++ b/cves/2021/CVE-2021-21311.md @@ -20,3 +20,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21311.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/adminer/CVE-2021-21311 diff --git a/cves/2021/CVE-2021-21351.md b/cves/2021/CVE-2021-21351.md index 76b8ea7b4ff..521211c130e 100644 --- a/cves/2021/CVE-2021-21351.md +++ b/cves/2021/CVE-2021-21351.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21351.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/xstream/CVE-2021-21351 diff --git a/cves/2021/CVE-2021-21425.md b/cves/2021/CVE-2021-21425.md index a6c79a39550..7ba59b0cedb 100644 --- a/cves/2021/CVE-2021-21425.md +++ b/cves/2021/CVE-2021-21425.md @@ -17,6 +17,9 @@ Grav Admin Plugin is an HTML user interface that provides a way to configure Gra #### Github - https://github.com/CsEnox/CVE-2021-21425 - https://github.com/bluetoothStrawberry/cve-2021-21425 +- https://github.com/afifudinmtop/CVE-2021-21425 +- https://github.com/d4ytox/CVE-2021-21425 +- https://github.com/s1lentf00thold/CVE-2021-21425-RCE #### ExploitDB - https://www.exploit-db.com/exploits/49788 diff --git a/cves/2021/CVE-2021-21551.md b/cves/2021/CVE-2021-21551.md index 65b750b2f1a..2688493dfac 100644 --- a/cves/2021/CVE-2021-21551.md +++ b/cves/2021/CVE-2021-21551.md @@ -29,6 +29,7 @@ Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability - https://github.com/nanabingies/CVE-2021-21551 - https://github.com/tijme/kernel-mii - https://github.com/waldo-irc/CVE-2021-21551 +- https://github.com/bengabay1994/cve-2021-21551-PoC #### ExploitDB - https://www.exploit-db.com/exploits/49893 diff --git a/cves/2021/CVE-2021-2173.md b/cves/2021/CVE-2021-2173.md index 5c166d8bc90..3ab8cab0a98 100644 --- a/cves/2021/CVE-2021-2173.md +++ b/cves/2021/CVE-2021-2173.md @@ -17,5 +17,5 @@ Vulnerability in the Recovery component of Oracle Database Server. Supported ver - https://github.com/emad-almousa/CVE-2021-2173 #### Github -No PoCs found on GitHub currently. +- https://github.com/emad-almousa/CVE-2021-2173 diff --git a/cves/2021/CVE-2021-21972.md b/cves/2021/CVE-2021-21972.md index d62abaa3126..d85149debd8 100644 --- a/cves/2021/CVE-2021-21972.md +++ b/cves/2021/CVE-2021-21972.md @@ -52,6 +52,7 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability in a v - https://github.com/viksafe/Get-vSphereVersion - https://github.com/yaunsky/CVE-2021-21972 - https://github.com/zidanfanshao/vcenter_tools +- https://github.com/alt3kx/CVE-2021-21972 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yaml diff --git a/cves/2021/CVE-2021-21974.md b/cves/2021/CVE-2021-21974.md index 104eaeeb180..12eb099e17f 100644 --- a/cves/2021/CVE-2021-21974.md +++ b/cves/2021/CVE-2021-21974.md @@ -22,4 +22,5 @@ OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-20210 - https://github.com/hateme021202/cve-2021-21974 - https://github.com/mercylessghost/CVE-2021-21974 - https://github.com/n2x4/Feb2023-CVE-2021-21974-OSINT +- https://github.com/Aiyakami/CVE-2021-21974 diff --git a/cves/2021/CVE-2021-21980.md b/cves/2021/CVE-2021-21980.md index 630f3aae36a..63fd9be07c2 100644 --- a/cves/2021/CVE-2021-21980.md +++ b/cves/2021/CVE-2021-21980.md @@ -13,5 +13,6 @@ The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/gui2000guix-ui/cve-2021-21980-mock-server +- https://github.com/pratikjojode/vcenter-cve-2021-21980-lab diff --git a/cves/2021/CVE-2021-21985.md b/cves/2021/CVE-2021-21985.md index a97283235d8..e84fed7ba48 100644 --- a/cves/2021/CVE-2021-21985.md +++ b/cves/2021/CVE-2021-21985.md @@ -25,6 +25,7 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability due to - https://github.com/testanull/Project_CVE-2021-21985_PoC - https://github.com/xnianq/cve-2021-21985_exp - https://github.com/zidanfanshao/vcenter_tools +- https://github.com/alt3kx/CVE-2021-21985_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21985.yaml diff --git a/cves/2021/CVE-2021-22204.md b/cves/2021/CVE-2021-22204.md index ace02c0bba5..e05a132cff4 100644 --- a/cves/2021/CVE-2021-22204.md +++ b/cves/2021/CVE-2021-22204.md @@ -40,6 +40,8 @@ Improper neutralization of user data in the DjVu file format in ExifTool version - https://github.com/se162xg/CVE-2021-22204 - https://github.com/szTheory/exifcleaner - https://github.com/trganda/CVE-2021-22204 +- https://github.com/Roronoawjd/CVE-2021-22204 +- https://github.com/d4ytox/CVE-2021-22204 #### ExploitDB - https://www.exploit-db.com/exploits/50911 diff --git a/cves/2021/CVE-2021-22205.md b/cves/2021/CVE-2021-22205.md index a8561e1dd5f..4c7f471d960 100644 --- a/cves/2021/CVE-2021-22205.md +++ b/cves/2021/CVE-2021-22205.md @@ -48,6 +48,8 @@ An issue has been discovered in GitLab CE/EE affecting all versions starting fro - https://github.com/shang159/CVE-2021-22205-getshell - https://github.com/w0x68y/Gitlab-CVE-2021-22205 - https://github.com/whwlsfb/CVE-2021-22205 +- https://github.com/K3ysTr0K3R/CVE-2021-22205 +- https://github.com/ccordeiro/CVE-2021-22205 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22205.yaml @@ -57,3 +59,6 @@ An issue has been discovered in GitLab CE/EE affecting all versions starting fro #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_exif_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gitlab/CVE-2021-22205 diff --git a/cves/2021/CVE-2021-22555.md b/cves/2021/CVE-2021-22555.md index 1b5fe07b407..49b5965a2ca 100644 --- a/cves/2021/CVE-2021-22555.md +++ b/cves/2021/CVE-2021-22555.md @@ -39,6 +39,9 @@ A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in n - https://github.com/tukru/CVE-2021-22555 - https://github.com/veritas501/CVE-2021-22555-PipeVersion - https://github.com/xyjl-ly/CVE-2021-22555-Exploit +- https://github.com/Spydomain/CVE-2021-22555-Poc +- https://github.com/WhatsWrongAndWhy/CVE-2021-22555 +- https://github.com/glutton-su/CVE-2021-22555 #### ExploitDB - https://www.exploit-db.com/exploits/50135 diff --git a/cves/2021/CVE-2021-22911.md b/cves/2021/CVE-2021-22911.md index 9d2f7c9b780..e443f19ff44 100644 --- a/cves/2021/CVE-2021-22911.md +++ b/cves/2021/CVE-2021-22911.md @@ -22,6 +22,8 @@ A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3 - https://github.com/optionalCTF/Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911 - https://github.com/overgrowncarrot1/CVE-2021-22911 - https://github.com/yoohhuu/Rocket-Chat-3.12.1-PoC-CVE-2021-22911- +- https://github.com/TeneBrae93/RocketChat-NoSQLi-Chain-CVE-2021-22911 +- https://github.com/roshanrajbanshi/rocketcat-cve-2021-22911-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22911.yaml @@ -29,3 +31,6 @@ A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3 #### ExploitDB - https://www.exploit-db.com/exploits/50108 - https://www.exploit-db.com/exploits/49960 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rocketchat/CVE-2021-22911 diff --git a/cves/2021/CVE-2021-22941.md b/cves/2021/CVE-2021-22941.md index 45855b6f19a..1acfc8e9613 100644 --- a/cves/2021/CVE-2021-22941.md +++ b/cves/2021/CVE-2021-22941.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/hoavt18/CVE-2021-22941 - https://github.com/hoavt184/CVE-2021-22941 +- https://github.com/hoav18/CVE-2021-22941 diff --git a/cves/2021/CVE-2021-23394.md b/cves/2021/CVE-2021-23394.md index ea4885c476e..e4753531d74 100644 --- a/cves/2021/CVE-2021-23394.md +++ b/cves/2021/CVE-2021-23394.md @@ -16,7 +16,7 @@ The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execu - https://snyk.io/vuln/SNYK-PHP-STUDIO42ELFINDER-1290554 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xnemian/CVE-2021-23394 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23394.yaml diff --git a/cves/2021/CVE-2021-23797.md b/cves/2021/CVE-2021-23797.md index da1890ce00c..d6fade1e0d4 100644 --- a/cves/2021/CVE-2021-23797.md +++ b/cves/2021/CVE-2021-23797.md @@ -13,5 +13,5 @@ All versions of package http-server-node are vulnerable to Directory Traversal v - https://snyk.io/vuln/SNYK-JS-HTTPSERVERNODE-1727656 #### Github -No PoCs found on GitHub currently. +- https://github.com/dannyEndorTest/http-server-node diff --git a/cves/2021/CVE-2021-24006.md b/cves/2021/CVE-2021-24006.md index 750257e6892..5f9699c210d 100644 --- a/cves/2021/CVE-2021-24006.md +++ b/cves/2021/CVE-2021-24006.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2021-24006 - https://github.com/cnetsec/CVE-2021-24006-Fortimanager-Exploit +- https://github.com/chessredoffsec/CVE-2021-24006 +- https://github.com/chessredoffsec/CVE-2021-24006-Fortimanager-Exploit diff --git a/cves/2021/CVE-2021-24019.md b/cves/2021/CVE-2021-24019.md index 39e3a074713..34b0097d53d 100644 --- a/cves/2021/CVE-2021-24019.md +++ b/cves/2021/CVE-2021-24019.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2021-24019 +- https://github.com/chessredoffsec/CVE-2021-24019 diff --git a/cves/2021/CVE-2021-24160.md b/cves/2021/CVE-2021-24160.md index 2c52f1fa337..e59f51720cc 100644 --- a/cves/2021/CVE-2021-24160.md +++ b/cves/2021/CVE-2021-24160.md @@ -14,4 +14,4 @@ In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers - https://wpscan.com/vulnerability/066ba5d4-4aaa-4462-b106-500c1f291c37 #### Github -No PoCs found on GitHub currently. +- https://github.com/likeww/Exploit-CVE-2021-24160 diff --git a/cves/2021/CVE-2021-24499.md b/cves/2021/CVE-2021-24499.md index e4130102016..a55cdc1baac 100644 --- a/cves/2021/CVE-2021-24499.md +++ b/cves/2021/CVE-2021-24499.md @@ -20,6 +20,7 @@ The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_ - https://github.com/hh-hunter/cve-2021-24499 - https://github.com/j4k0m/CVE-2021-24499 - https://github.com/jytmX/CVE-2021-24499 +- https://github.com/jayhutajulu1/CVE-2021-24499 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24499.yaml diff --git a/cves/2021/CVE-2021-24762.md b/cves/2021/CVE-2021-24762.md index 05cf68f2b32..7d2afca45a3 100644 --- a/cves/2021/CVE-2021-24762.md +++ b/cves/2021/CVE-2021-24762.md @@ -14,7 +14,7 @@ The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape th - https://wpscan.com/vulnerability/c1620905-7c31-4e62-80f5-1d9635be11ad #### Github -No PoCs found on GitHub currently. +- https://github.com/c4cnm/Exploit_CVE-2021-24762 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24762.yaml diff --git a/cves/2021/CVE-2021-25076.md b/cves/2021/CVE-2021-25076.md index 646fda6e112..5d7b3476545 100644 --- a/cves/2021/CVE-2021-25076.md +++ b/cves/2021/CVE-2021-25076.md @@ -17,6 +17,7 @@ The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape - https://github.com/0xAbbarhSF/CVE-2021-25076 - https://github.com/0xStarFord/CVE-2021-25076 - https://github.com/ar2o3/CVE-2021-25076 +- https://github.com/abbarhissarh/CVE-2021-25076 #### ExploitDB - https://www.exploit-db.com/exploits/50772 diff --git a/cves/2021/CVE-2021-25646.md b/cves/2021/CVE-2021-25646.md index ed609d402f6..98da04afc1d 100644 --- a/cves/2021/CVE-2021-25646.md +++ b/cves/2021/CVE-2021-25646.md @@ -33,3 +33,6 @@ Apache Druid includes the ability to execute user-provided JavaScript code embed #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_druid_js_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apache-druid/CVE-2021-25646 diff --git a/cves/2021/CVE-2021-25741.md b/cves/2021/CVE-2021-25741.md index 86344d245fe..19cb7a207ce 100644 --- a/cves/2021/CVE-2021-25741.md +++ b/cves/2021/CVE-2021-25741.md @@ -20,4 +20,5 @@ No PoCs from references. - https://github.com/Betep0k/CVE-2021-25741 - https://github.com/brant-ruan/poc-demo - https://github.com/cdxiaodong/CVE-2021-25741 +- https://github.com/Glutenfree69/ZigRaceExploit diff --git a/cves/2021/CVE-2021-26084.md b/cves/2021/CVE-2021-26084.md index 57bc58e4c18..03382978d20 100644 --- a/cves/2021/CVE-2021-26084.md +++ b/cves/2021/CVE-2021-26084.md @@ -58,6 +58,7 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul - https://github.com/taythebot/CVE-2021-26084 - https://github.com/wdjcy/CVE-2021-26084 - https://github.com/wolf1892/confluence-rce-poc +- https://github.com/alt3kx/CVE-2021-26084_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26084.yaml @@ -67,3 +68,6 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_webwork_ognl_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2021-26084 diff --git a/cves/2021/CVE-2021-26120.md b/cves/2021/CVE-2021-26120.md index be75b4b35cd..b050b495c47 100644 --- a/cves/2021/CVE-2021-26120.md +++ b/cves/2021/CVE-2021-26120.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cmsms/CVE-2021-26120 diff --git a/cves/2021/CVE-2021-26855.md b/cves/2021/CVE-2021-26855.md index f711fedb45b..eb35bcb90eb 100644 --- a/cves/2021/CVE-2021-26855.md +++ b/cves/2021/CVE-2021-26855.md @@ -84,6 +84,12 @@ Microsoft Exchange Server Remote Code Execution Vulnerability - https://github.com/thau0x01/poc_proxylogon - https://github.com/timb-machine-mirrors/testanull-CVE-2021-26855_read_poc.txt - https://github.com/yaoxiaoangry3/Flangvik +- https://github.com/KotSec/CVE-2021-26855-Scanner +- https://github.com/SimoesCTT/CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 +- https://github.com/SimoesCTT/CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Microsoft-Exchange-Exploit +- https://github.com/alt3kx/CVE-2021-26855_PoC +- https://github.com/haotiku/CVE-2021-26855-exploit-Exchange +- https://github.com/wysssadda/ExchangeSmash #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26855.yaml diff --git a/cves/2021/CVE-2021-27190.md b/cves/2021/CVE-2021-27190.md index 994a036b6d6..87ee6585555 100644 --- a/cves/2021/CVE-2021-27190.md +++ b/cves/2021/CVE-2021-27190.md @@ -16,5 +16,5 @@ A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING - https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/ #### Github -No PoCs found on GitHub currently. +- https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS diff --git a/cves/2021/CVE-2021-27328.md b/cves/2021/CVE-2021-27328.md index 2b0d8cc84bf..d00e7d3e3e6 100644 --- a/cves/2021/CVE-2021-27328.md +++ b/cves/2021/CVE-2021-27328.md @@ -14,5 +14,5 @@ Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An a - https://github.com/SQSamir/CVE-2021-27328 #### Github -No PoCs found on GitHub currently. +- https://github.com/SQSamir/CVE-2021-27328 diff --git a/cves/2021/CVE-2021-27365.md b/cves/2021/CVE-2021-27365.md index 58aba9f6f3d..8f2dc14ccec 100644 --- a/cves/2021/CVE-2021-27365.md +++ b/cves/2021/CVE-2021-27365.md @@ -16,5 +16,5 @@ An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data s - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5 #### Github -No PoCs found on GitHub currently. +- https://github.com/WhatsWrongAndWhy/CVE-2021-27365 diff --git a/cves/2021/CVE-2021-27876.md b/cves/2021/CVE-2021-27876.md index d6d995780d7..3ded122f018 100644 --- a/cves/2021/CVE-2021-27876.md +++ b/cves/2021/CVE-2021-27876.md @@ -14,7 +14,7 @@ An issue was discovered in Veritas Backup Exec before 21.2. The communication be - http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/wingerbijay/CVE-2021-27876 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/veritas/beagent_sha_auth_rce.rb diff --git a/cves/2021/CVE-2021-27877.md b/cves/2021/CVE-2021-27877.md index 9942280c32e..e0a90d0de10 100644 --- a/cves/2021/CVE-2021-27877.md +++ b/cves/2021/CVE-2021-27877.md @@ -14,7 +14,7 @@ An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple - http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/yashswarup12/CVE-2021-27877-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-27877.yaml diff --git a/cves/2021/CVE-2021-27905.md b/cves/2021/CVE-2021-27905.md index 1968d3e1855..6127e31032a 100644 --- a/cves/2021/CVE-2021-27905.md +++ b/cves/2021/CVE-2021-27905.md @@ -16,6 +16,7 @@ No PoCs from references. - https://github.com/W2Ning/Solr-SSRF - https://github.com/murataydemir/CVE-2021-27905 - https://github.com/pdelteil/CVE-2021-27905.POC +- https://github.com/RIZZZIOM/CVE-2021-27905 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27905.yaml diff --git a/cves/2021/CVE-2021-27963.md b/cves/2021/CVE-2021-27963.md index b934cb53f8c..4e92ff99a2d 100644 --- a/cves/2021/CVE-2021-27963.md +++ b/cves/2021/CVE-2021-27963.md @@ -13,5 +13,5 @@ SonLogger before 6.4.1 is affected by user creation with any user permissions pr - https://github.com/erberkan/SonLogger-vulns #### Github -No PoCs found on GitHub currently. +- https://github.com/erberkan/SonLogger-vulns diff --git a/cves/2021/CVE-2021-28164.md b/cves/2021/CVE-2021-28164.md index c3d031930d1..8324ac43c1d 100644 --- a/cves/2021/CVE-2021-28164.md +++ b/cves/2021/CVE-2021-28164.md @@ -22,3 +22,6 @@ In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mo #### ExploitDB - https://www.exploit-db.com/exploits/50438 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jetty/CVE-2021-28164 diff --git a/cves/2021/CVE-2021-28169.md b/cves/2021/CVE-2021-28169.md index c53d5e31e24..7f22f258e15 100644 --- a/cves/2021/CVE-2021-28169.md +++ b/cves/2021/CVE-2021-28169.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28169.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jetty/CVE-2021-28169 diff --git a/cves/2021/CVE-2021-28663.md b/cves/2021/CVE-2021-28663.md index 0e1528be325..6d52173c023 100644 --- a/cves/2021/CVE-2021-28663.md +++ b/cves/2021/CVE-2021-28663.md @@ -17,5 +17,5 @@ The Arm Mali GPU kernel driver allows privilege escalation or information disclo - https://github.com/lntrx/CVE-2021-28663 #### Github -No PoCs found on GitHub currently. +- https://github.com/lntrx/CVE-2021-28663 diff --git a/cves/2021/CVE-2021-29267.md b/cves/2021/CVE-2021-29267.md index 3c08b4ea305..1ca99e85cfa 100644 --- a/cves/2021/CVE-2021-29267.md +++ b/cves/2021/CVE-2021-29267.md @@ -13,5 +13,5 @@ Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leve - https://github.com/Security-AVS/CVE-2021-29267 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2021-29267 diff --git a/cves/2021/CVE-2021-29337.md b/cves/2021/CVE-2021-29337.md index adcb9befa5d..8784c675ec2 100644 --- a/cves/2021/CVE-2021-29337.md +++ b/cves/2021/CVE-2021-29337.md @@ -13,5 +13,5 @@ MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access - https://github.com/rjt-gupta/CVE-2021-29337 #### Github -No PoCs found on GitHub currently. +- https://github.com/rjt-gupta/CVE-2021-29337 diff --git a/cves/2021/CVE-2021-29441.md b/cves/2021/CVE-2021-29441.md index 530624575ee..be2a0447628 100644 --- a/cves/2021/CVE-2021-29441.md +++ b/cves/2021/CVE-2021-29441.md @@ -17,6 +17,10 @@ No PoCs from references. - https://github.com/azhao1981/CVE-2021-29441 - https://github.com/bysinks/CVE-2021-29441 - https://github.com/hh-hunter/nacos-cve-2021-29441 +- https://github.com/K3ysTr0K3R/CVE-2021-29441 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29441.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nacos/CVE-2021-29441 diff --git a/cves/2021/CVE-2021-29442.md b/cves/2021/CVE-2021-29442.md index 88da0a90373..ff22978c6d4 100644 --- a/cves/2021/CVE-2021-29442.md +++ b/cves/2021/CVE-2021-29442.md @@ -13,7 +13,10 @@ Nacos is a platform designed for dynamic service discovery and configuration and - https://github.com/alibaba/nacos/issues/4463 #### Github -No PoCs found on GitHub currently. +- https://github.com/nanaao/cve-2021-29442-Nacos-Derby-rce-exp #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29442.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nacos/CVE-2021-29442 diff --git a/cves/2021/CVE-2021-29447.md b/cves/2021/CVE-2021-29447.md index 71a645a8b2a..ec7bbf0fcaf 100644 --- a/cves/2021/CVE-2021-29447.md +++ b/cves/2021/CVE-2021-29447.md @@ -36,6 +36,10 @@ Wordpress is an open source CMS. A user with the ability to upload files (like a - https://github.com/specializzazione-cyber-security/demo-CVE-2021-29447-lezione - https://github.com/thomas-osgood/CVE-2021-29447 - https://github.com/viardant/CVE-2021-29447 +- https://github.com/0xricksanchez/CVE-2021-29447 +- https://github.com/danilo1992-sys/CVE-2021-29447 +- https://github.com/davids52/cve-2021-29447_auto-script +- https://github.com/rdana55/CVE-2021-29447-PoC #### ExploitDB - https://www.exploit-db.com/exploits/50304 diff --git a/cves/2021/CVE-2021-29505.md b/cves/2021/CVE-2021-29505.md index 9f85d1527cd..3fd3a0cd937 100644 --- a/cves/2021/CVE-2021-29505.md +++ b/cves/2021/CVE-2021-29505.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29505.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/xstream/CVE-2021-29505 diff --git a/cves/2021/CVE-2021-3007.md b/cves/2021/CVE-2021-3007.md index 531f65be48f..f9c526dfb79 100644 --- a/cves/2021/CVE-2021-3007.md +++ b/cves/2021/CVE-2021-3007.md @@ -14,6 +14,7 @@ Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a dese #### Github - https://github.com/Vulnmachines/ZF3_CVE-2021-3007 +- https://github.com/yunus-a1i/CVE-2021-3007-docker-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3007.yaml diff --git a/cves/2021/CVE-2021-30146.md b/cves/2021/CVE-2021-30146.md index 9e98aa112bc..a563155c9ff 100644 --- a/cves/2021/CVE-2021-30146.md +++ b/cves/2021/CVE-2021-30146.md @@ -13,5 +13,5 @@ Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionali - https://github.com/Security-AVS/CVE-2021-30146 #### Github -No PoCs found on GitHub currently. +- https://github.com/Security-AVS/CVE-2021-30146 diff --git a/cves/2021/CVE-2021-30327.md b/cves/2021/CVE-2021-30327.md index f604cf2b021..f841d05f7ad 100644 --- a/cves/2021/CVE-2021-30327.md +++ b/cves/2021/CVE-2021-30327.md @@ -13,5 +13,5 @@ Buffer overflow in sahara protocol while processing commands leads to overwrite No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Daniel224455/katana diff --git a/cves/2021/CVE-2021-30809.md b/cves/2021/CVE-2021-30809.md index cd7acac1330..8494b5521f9 100644 --- a/cves/2021/CVE-2021-30809.md +++ b/cves/2021/CVE-2021-30809.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/seregonwar/CVE-2021-30809-UAF +- https://github.com/seregonwar/CVE-2021-30809-OOM diff --git a/cves/2021/CVE-2021-3129.md b/cves/2021/CVE-2021-3129.md index 286ab58b52e..b16126e8bb3 100644 --- a/cves/2021/CVE-2021-3129.md +++ b/cves/2021/CVE-2021-3129.md @@ -47,6 +47,8 @@ Ignition before 2.5.2, as used in Laravel and other products, allows unauthentic - https://github.com/withmasday/CVE-2021-3129 - https://github.com/wmasday/CVE-2021-3129 - https://github.com/zhzyker/CVE-2021-3129 +- https://github.com/Giangdurian/CVE-2021-3129 +- https://github.com/theNareshofficial/CVE-2021-3129-Lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3129.yaml @@ -56,3 +58,6 @@ Ignition before 2.5.2, as used in Laravel and other products, allows unauthentic #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/php/ignition_laravel_debug_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/laravel/CVE-2021-3129 diff --git a/cves/2021/CVE-2021-3130.md b/cves/2021/CVE-2021-3130.md index 48c77d5cee0..df786e57036 100644 --- a/cves/2021/CVE-2021-3130.md +++ b/cves/2021/CVE-2021-3130.md @@ -13,5 +13,5 @@ Within the Open-AudIT up to version 3.5.3 application, the web interface hides S No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/lusterx/CVE-2021-3130 diff --git a/cves/2021/CVE-2021-31440.md b/cves/2021/CVE-2021-31440.md index 1993d3c7430..e2ca31ad528 100644 --- a/cves/2021/CVE-2021-31440.md +++ b/cves/2021/CVE-2021-31440.md @@ -14,4 +14,5 @@ This vulnerability allows local attackers to escalate privileges on affected ins #### Github - https://github.com/ChoKyuWon/exploit_articles +- https://github.com/WhatsWrongAndWhy/CVE-2021-31440 diff --git a/cves/2021/CVE-2021-3156.md b/cves/2021/CVE-2021-3156.md index a2c7f7d9cd1..a0b3b923046 100644 --- a/cves/2021/CVE-2021-3156.md +++ b/cves/2021/CVE-2021-3156.md @@ -118,6 +118,13 @@ Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based - https://github.com/wurwur/CVE-2021-3156 - https://github.com/yaunsky/cve-2021-3156 - https://github.com/ymrsmns/CVE-2021-3156 +- https://github.com/Rana-Ali93/CVE-2021-3156-Sudo-Buffer-Overflow-Linux +- https://github.com/Shams-Ul-Mehmood/CVE-2021-3156-Project +- https://github.com/TheLeopard65/CVE-2021-3156-Baron-Samedit +- https://github.com/WhatsWrongAndWhy/CVE-2021-3156 +- https://github.com/czeti/baron-samedit +- https://github.com/ngtuonghung/CVE-2021-3156 +- https://github.com/sbladiamond/CVE-2021-3156 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2021/CVE-2021-3156.yaml diff --git a/cves/2021/CVE-2021-31602.md b/cves/2021/CVE-2021-31602.md index 41ee3cf9705..d56e025c2d8 100644 --- a/cves/2021/CVE-2021-31602.md +++ b/cves/2021/CVE-2021-31602.md @@ -14,6 +14,7 @@ An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Busin #### Github - https://github.com/0cool-design/PWNentaho +- https://github.com/0cool-design/PWNtaho #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31602.yaml diff --git a/cves/2021/CVE-2021-31630.md b/cves/2021/CVE-2021-31630.md index 72c5bf7c669..5828318226d 100644 --- a/cves/2021/CVE-2021-31630.md +++ b/cves/2021/CVE-2021-31630.md @@ -29,4 +29,5 @@ Command Injection in Open PLC Webserver v3 allows remote attackers to execute ar - https://github.com/mind2hex/CVE-2021-31630-OpenPLC-3-Authenticated-RCE - https://github.com/thewhiteh4t/cve-2021-31630 - https://github.com/ttps-byte/cve-2021-31630 +- https://github.com/tranquac/OpenPLC_v3 diff --git a/cves/2021/CVE-2021-3164.md b/cves/2021/CVE-2021-3164.md index 4429cbb5cb9..6a1c6d21a6f 100644 --- a/cves/2021/CVE-2021-3164.md +++ b/cves/2021/CVE-2021-3164.md @@ -13,5 +13,5 @@ ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user - https://github.com/rmccarth/cve-2021-3164 #### Github -No PoCs found on GitHub currently. +- https://github.com/rmccarth/cve-2021-3164 diff --git a/cves/2021/CVE-2021-31760.md b/cves/2021/CVE-2021-31760.md index c8772166613..52da8b117fe 100644 --- a/cves/2021/CVE-2021-31760.md +++ b/cves/2021/CVE-2021-31760.md @@ -15,5 +15,6 @@ Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote - https://youtu.be/D45FN8QrzDo #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-31760 +- https://github.com/electronicbots/CVE-2021-31760 diff --git a/cves/2021/CVE-2021-31761.md b/cves/2021/CVE-2021-31761.md index 53c87423745..4c4c35198f8 100644 --- a/cves/2021/CVE-2021-31761.md +++ b/cves/2021/CVE-2021-31761.md @@ -16,7 +16,8 @@ Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remo - https://youtu.be/23VvUMu-28c #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-31761 +- https://github.com/electronicbots/CVE-2021-31761 #### ExploitDB - https://www.exploit-db.com/exploits/50144 diff --git a/cves/2021/CVE-2021-31762.md b/cves/2021/CVE-2021-31762.md index 6a48c57ffcc..0deef5966ac 100644 --- a/cves/2021/CVE-2021-31762.md +++ b/cves/2021/CVE-2021-31762.md @@ -16,7 +16,8 @@ Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privil - https://youtu.be/qCvEXwyaF5U #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-31762 +- https://github.com/electronicbots/CVE-2021-31762 #### ExploitDB - https://www.exploit-db.com/exploits/50126 diff --git a/cves/2021/CVE-2021-32156.md b/cves/2021/CVE-2021-32156.md index a5bb3b66ea4..62ab1ae6c76 100644 --- a/cves/2021/CVE-2021-32156.md +++ b/cves/2021/CVE-2021-32156.md @@ -13,5 +13,5 @@ A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the - https://github.com/Mesh3l911/CVE-2021-32156 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32156 diff --git a/cves/2021/CVE-2021-32157.md b/cves/2021/CVE-2021-32157.md index fae103b288d..646dfe0d3b5 100644 --- a/cves/2021/CVE-2021-32157.md +++ b/cves/2021/CVE-2021-32157.md @@ -14,4 +14,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Schedu #### Github - https://github.com/dnr6419/CVE-2021-32157 +- https://github.com/Mesh3l911/CVE-2021-32157 diff --git a/cves/2021/CVE-2021-32158.md b/cves/2021/CVE-2021-32158.md index 09c10016c9c..211d1df20ae 100644 --- a/cves/2021/CVE-2021-32158.md +++ b/cves/2021/CVE-2021-32158.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload - https://github.com/Mesh3l911/CVE-2021-32158 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32158 diff --git a/cves/2021/CVE-2021-32159.md b/cves/2021/CVE-2021-32159.md index 34d78a77565..17994c1405a 100644 --- a/cves/2021/CVE-2021-32159.md +++ b/cves/2021/CVE-2021-32159.md @@ -13,5 +13,5 @@ A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the - https://github.com/Mesh3l911/CVE-2021-32159 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32159 diff --git a/cves/2021/CVE-2021-32160.md b/cves/2021/CVE-2021-32160.md index f4be68636b7..9c81b3311cf 100644 --- a/cves/2021/CVE-2021-32160.md +++ b/cves/2021/CVE-2021-32160.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Ad - https://github.com/Mesh3l911/CVE-2021-32160 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32160 diff --git a/cves/2021/CVE-2021-32161.md b/cves/2021/CVE-2021-32161.md index 46e6c43e781..2a945ec9f03 100644 --- a/cves/2021/CVE-2021-32161.md +++ b/cves/2021/CVE-2021-32161.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Fi - https://github.com/Mesh3l911/CVE-2021-32161 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32161 diff --git a/cves/2021/CVE-2021-32162.md b/cves/2021/CVE-2021-32162.md index a32dbc99326..b69438b1971 100644 --- a/cves/2021/CVE-2021-32162.md +++ b/cves/2021/CVE-2021-32162.md @@ -13,5 +13,5 @@ A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through - https://github.com/Mesh3l911/CVE-2021-32162 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mesh3l911/CVE-2021-32162 diff --git a/cves/2021/CVE-2021-3262.md b/cves/2021/CVE-2021-3262.md index 07bdf7c57fc..5f8f4eaee3d 100644 --- a/cves/2021/CVE-2021-3262.md +++ b/cves/2021/CVE-2021-3262.md @@ -13,5 +13,5 @@ TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20 - https://susos.co/blog/f/cve-disclosureuncovered-sql-injection-in-tripspark-veo-transport #### Github -No PoCs found on GitHub currently. +- https://github.com/l0lsec/CVE-2021-3262 diff --git a/cves/2021/CVE-2021-32682.md b/cves/2021/CVE-2021-32682.md index c3a2f1b9776..f9bb01f5e9d 100644 --- a/cves/2021/CVE-2021-32682.md +++ b/cves/2021/CVE-2021-32682.md @@ -22,3 +22,6 @@ No PoCs found on GitHub currently. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/elfinder_archive_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/elfinder/CVE-2021-32682 diff --git a/cves/2021/CVE-2021-33044.md b/cves/2021/CVE-2021-33044.md index 84c4e63e245..bc375c70158 100644 --- a/cves/2021/CVE-2021-33044.md +++ b/cves/2021/CVE-2021-33044.md @@ -29,6 +29,9 @@ The identity authentication bypass vulnerability found in some Dahua products du - https://github.com/naycha/TVT-NVR-config - https://github.com/naycha/TVT-config - https://github.com/readloud/PoC +- https://github.com/Baza-NATO/CVE-2021-33044 +- https://github.com/eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044 +- https://github.com/litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33044.yaml diff --git a/cves/2021/CVE-2021-33393.md b/cves/2021/CVE-2021-33393.md index 5caba7836b2..8cdeaf0fc64 100644 --- a/cves/2021/CVE-2021-33393.md +++ b/cves/2021/CVE-2021-33393.md @@ -13,7 +13,7 @@ lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/ba - http://packetstormsecurity.com/files/163158/IPFire-2.25-Remote-Code-Execution.html #### Github -No PoCs found on GitHub currently. +- https://github.com/joaoaugustom/IPFire_2.25_RCE_Authenticated #### ExploitDB - https://www.exploit-db.com/exploits/49869 diff --git a/cves/2021/CVE-2021-33558.md b/cves/2021/CVE-2021-33558.md index 520bfc0d542..d7d984aa926 100644 --- a/cves/2021/CVE-2021-33558.md +++ b/cves/2021/CVE-2021-33558.md @@ -15,6 +15,7 @@ Boa 0.94.13 allows remote attackers to obtain sensitive information via a miscon #### Github - https://github.com/anldori/CVE-2021-33558 +- https://github.com/mdanzaruddin/CVE-2021-33558. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33558.yaml diff --git a/cves/2021/CVE-2021-33564.md b/cves/2021/CVE-2021-33564.md index fb5497b1571..36ef7eafa30 100644 --- a/cves/2021/CVE-2021-33564.md +++ b/cves/2021/CVE-2021-33564.md @@ -15,6 +15,7 @@ An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby a #### Github - https://github.com/dorkerdevil/CVE-2021-33564 +- https://github.com/mlr0p/CVE-2021-33564 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33564.yaml diff --git a/cves/2021/CVE-2021-3378.md b/cves/2021/CVE-2021-3378.md index beb92f0b17c..f7f0be7bf15 100644 --- a/cves/2021/CVE-2021-3378.md +++ b/cves/2021/CVE-2021-3378.md @@ -15,7 +15,7 @@ FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-T - https://github.com/erberkan/fortilogger_arbitrary_fileupload #### Github -No PoCs found on GitHub currently. +- https://github.com/erberkan/fortilogger_arbitrary_fileupload #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3378.yaml diff --git a/cves/2021/CVE-2021-34371.md b/cves/2021/CVE-2021-34371.md index 71637474a7f..245557743ce 100644 --- a/cves/2021/CVE-2021-34371.md +++ b/cves/2021/CVE-2021-34371.md @@ -16,3 +16,5 @@ Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that - https://github.com/tavgar/CVE-2021-34371 - https://github.com/zwjjustdoit/CVE-2021-34371.jar +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371 diff --git a/cves/2021/CVE-2021-34427.md b/cves/2021/CVE-2021-34427.md index 1784766eb39..fa7f2570023 100644 --- a/cves/2021/CVE-2021-34427.md +++ b/cves/2021/CVE-2021-34427.md @@ -15,7 +15,7 @@ In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters - https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142 #### Github -No PoCs found on GitHub currently. +- https://github.com/rt1252/CVE-2021-34427 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34427.yaml diff --git a/cves/2021/CVE-2021-34429.md b/cves/2021/CVE-2021-34429.md index f0bd6cdbe3e..3fc5dbff3c8 100644 --- a/cves/2021/CVE-2021-34429.md +++ b/cves/2021/CVE-2021-34429.md @@ -24,3 +24,6 @@ No PoCs from references. #### ExploitDB - https://www.exploit-db.com/exploits/50478 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jetty/CVE-2021-34429 diff --git a/cves/2021/CVE-2021-3490.md b/cves/2021/CVE-2021-3490.md index c489194c60d..f28e85a9d52 100644 --- a/cves/2021/CVE-2021-3490.md +++ b/cves/2021/CVE-2021-3490.md @@ -22,6 +22,8 @@ The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux ke #### Github - https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490 - https://github.com/pivik271/CVE-2021-3490 +- https://github.com/WhatsWrongAndWhy/CVE-2021-3490 +- https://github.com/prabeershakya/CVE-2021-3490-POC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb diff --git a/cves/2021/CVE-2021-3493.md b/cves/2021/CVE-2021-3493.md index 03f7e68f18a..136e8f1d3df 100644 --- a/cves/2021/CVE-2021-3493.md +++ b/cves/2021/CVE-2021-3493.md @@ -35,6 +35,10 @@ The overlayfs implementation in the linux kernel did not properly validate with - https://github.com/pmihsan/OverlayFS-CVE-2021-3493 - https://github.com/ptkhai15/OverlayFS---CVE-2021-3493 - https://github.com/puckiestyle/CVE-2021-3493 +- https://github.com/0xlane/CVE-2021-3493 +- https://github.com/WhatsWrongAndWhy/CVE-2021-3493 +- https://github.com/cyberx-1/OverlayFS-CVE-2021-3493 +- https://github.com/r3dw4n48m3d/CVE-2021-3493-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3493_overlayfs.rb diff --git a/cves/2021/CVE-2021-35042.md b/cves/2021/CVE-2021-35042.md index 9025dbcce0d..032758648df 100644 --- a/cves/2021/CVE-2021-35042.md +++ b/cves/2021/CVE-2021-35042.md @@ -21,6 +21,10 @@ No PoCs from references. - https://github.com/n3utr1n00/CVE-2021-35042 - https://github.com/r4vi/CVE-2021-35042 - https://github.com/zer0qs/CVE-2021-35042 +- https://github.com/vutiendat323/INT14107_CVE-2021-35042 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2021-35042 diff --git a/cves/2021/CVE-2021-35296.md b/cves/2021/CVE-2021-35296.md index 44ade342147..c7c019283b5 100644 --- a/cves/2021/CVE-2021-35296.md +++ b/cves/2021/CVE-2021-35296.md @@ -13,5 +13,5 @@ An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows - https://github.com/afaq1337/CVE-2021-35296 #### Github -No PoCs found on GitHub currently. +- https://github.com/afaq1337/CVE-2021-35296 diff --git a/cves/2021/CVE-2021-35448.md b/cves/2021/CVE-2021-35448.md index 01fb70feb89..918625ec891 100644 --- a/cves/2021/CVE-2021-35448.md +++ b/cves/2021/CVE-2021-35448.md @@ -13,7 +13,7 @@ Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbi - https://www.exploit-db.com/exploits/50047 #### Github -No PoCs found on GitHub currently. +- https://github.com/Goultarde/RemoteMouse-3.008-RCE #### ExploitDB - https://www.exploit-db.com/exploits/50047 diff --git a/cves/2021/CVE-2021-3560.md b/cves/2021/CVE-2021-3560.md index 89703edda12..805de703c51 100644 --- a/cves/2021/CVE-2021-3560.md +++ b/cves/2021/CVE-2021-3560.md @@ -58,6 +58,11 @@ It was found that polkit could be tricked into bypassing the credential checks f - https://github.com/swapravo/polkadots - https://github.com/titusG85/SideWinder-Exploit - https://github.com/tufanturhan/Polkit-Linux-Priv +- https://github.com/Jeanback1/CVE-2021-3560-exploit +- https://github.com/SeimuPVE/CVE-2021-3560_Polkit +- https://github.com/WithinOneStem/POC-Bash-CVE-2021-3560 +- https://github.com/adakoifman/CVE-2021-3560 +- https://github.com/yutasato88/CVE-2021-3560-PolkitPrivilegeEsclation #### ExploitDB - https://www.exploit-db.com/exploits/50011 diff --git a/cves/2021/CVE-2021-36260.md b/cves/2021/CVE-2021-36260.md index d09731f7d8b..6d132c9257a 100644 --- a/cves/2021/CVE-2021-36260.md +++ b/cves/2021/CVE-2021-36260.md @@ -31,6 +31,8 @@ A command injection vulnerability in the web server of some Hikvision product. D - https://github.com/readloud/PoC - https://github.com/s0duku/PocSelenium - https://github.com/tuntin9x/CheckHKRCE +- https://github.com/shubtheone/CVE-2021-36260-hikvision +- https://github.com/yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36260.yaml diff --git a/cves/2021/CVE-2021-36396.md b/cves/2021/CVE-2021-36396.md index 68dc5bf88d3..3b0724939cc 100644 --- a/cves/2021/CVE-2021-36396.md +++ b/cves/2021/CVE-2021-36396.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/T0X1Cx/CVE-2021-36396-Exploit +- https://github.com/T0X1Cx/CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit diff --git a/cves/2021/CVE-2021-36563.md b/cves/2021/CVE-2021-36563.md index 0c7b9d89625..dda03398321 100644 --- a/cves/2021/CVE-2021-36563.md +++ b/cves/2021/CVE-2021-36563.md @@ -13,5 +13,5 @@ The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise u - https://github.com/Edgarloyola/CVE-2021-36563 #### Github -No PoCs found on GitHub currently. +- https://github.com/Edgarloyola/CVE-2021-36563 diff --git a/cves/2021/CVE-2021-36981.md b/cves/2021/CVE-2021-36981.md index 7f6d24c604c..8cc280c0d59 100644 --- a/cves/2021/CVE-2021-36981.md +++ b/cves/2021/CVE-2021-36981.md @@ -13,5 +13,5 @@ In the server in SerNet verinice before 1.22.2, insecure Java deserialization al - https://github.com/0xBrAinsTorM/CVE-2021-36981 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xBrAinsTorM/CVE-2021-36981 diff --git a/cves/2021/CVE-2021-37740.md b/cves/2021/CVE-2021-37740.md index 0ad274e3cbf..a01a3d5ff1a 100644 --- a/cves/2021/CVE-2021-37740.md +++ b/cves/2021/CVE-2021-37740.md @@ -13,5 +13,5 @@ A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Sec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/robertguetzkow/CVE-2021-37740 diff --git a/cves/2021/CVE-2021-37910.md b/cves/2021/CVE-2021-37910.md index a22d02cc1d2..0649fcd605b 100644 --- a/cves/2021/CVE-2021-37910.md +++ b/cves/2021/CVE-2021-37910.md @@ -17,5 +17,5 @@ ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper co No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/efchatz/easy-exploits diff --git a/cves/2021/CVE-2021-38185.md b/cves/2021/CVE-2021-38185.md index 1d1078bcfd8..78b873a1508 100644 --- a/cves/2021/CVE-2021-38185.md +++ b/cves/2021/CVE-2021-38185.md @@ -13,5 +13,5 @@ GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted p - https://github.com/fangqyi/cpiopwn #### Github -No PoCs found on GitHub currently. +- https://github.com/fangqyi/cpiopwn diff --git a/cves/2021/CVE-2021-38699.md b/cves/2021/CVE-2021-38699.md index 2e6e0d94317..0db0f4968e9 100644 --- a/cves/2021/CVE-2021-38699.md +++ b/cves/2021/CVE-2021-38699.md @@ -16,4 +16,6 @@ TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and #### Github - https://github.com/Justin-1993/CVE-2021-38699 +- https://github.com/HuskyHacks/CVE-2021-38699-Reflected-XSS +- https://github.com/HuskyHacks/CVE-2021-38699-Stored-XSS diff --git a/cves/2021/CVE-2021-39312.md b/cves/2021/CVE-2021-39312.md index 40ec226814d..b9ea7d2dfef 100644 --- a/cves/2021/CVE-2021-39312.md +++ b/cves/2021/CVE-2021-39312.md @@ -13,7 +13,7 @@ The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including - http://packetstormsecurity.com/files/165434/WordPress-The-True-Ranker-2.2.2-Arbitrary-File-Read.html #### Github -No PoCs found on GitHub currently. +- https://github.com/root-wav/wordpress-true-ranker-cve-2021-39312 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39312.yaml diff --git a/cves/2021/CVE-2021-3975.md b/cves/2021/CVE-2021-3975.md index 841748d1c3c..d923a50e606 100644 --- a/cves/2021/CVE-2021-3975.md +++ b/cves/2021/CVE-2021-3975.md @@ -13,5 +13,5 @@ A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yan5ui/ENV-CVE-2021-3975 diff --git a/cves/2021/CVE-2021-4034.md b/cves/2021/CVE-2021-4034.md index bf212a3c898..77ba7ac7dff 100644 --- a/cves/2021/CVE-2021-4034.md +++ b/cves/2021/CVE-2021-4034.md @@ -218,9 +218,31 @@ A local privilege escalation vulnerability was found on polkit's pkexec utility. - https://github.com/zhzyker/CVE-2021-4034 - https://github.com/ziadsaleemi/polkit_CVE-2021-4034 - https://github.com/zxybfq/CVE-2021-4034 +- https://github.com/Abbykito/KERNELexploits +- https://github.com/Allu-mette/cve-2021-4034 +- https://github.com/B1gN0Se/PwnKit_CVE-2021-4034 +- https://github.com/Leemyunglyul/cve-2021-4034-mock +- https://github.com/Murguii/DEV-CVE-2021-4034 +- https://github.com/RakhithJK/CVE-2021-4034-new +- https://github.com/Z3R0space/CVE-2021-4034 +- https://github.com/cd80-ctf/CVE-2021-4034 +- https://github.com/jayhutajulu1/PwnKit-CVE-2021-4034 +- https://github.com/jscamposx/hack +- https://github.com/krleejihyeong/WHS4_CVE-2021-4034 +- https://github.com/mac3d0/CVE-2021-4034-pwnkit +- https://github.com/nicoibarburu/CVE-2021-4034 +- https://github.com/pombredanne/CVE-2021-4034 +- https://github.com/ramahmdr/PwnKit +- https://github.com/rusakalimantan/PwnKit-CVE-2021-4034 +- https://github.com/rvzsec/CVE-2021-4034 +- https://github.com/tachote/CVE-2021-4034 +- https://github.com/usmansec/-CVE-2021-4034 #### ExploitDB - https://www.exploit-db.com/exploits/50689 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/polkit/CVE-2021-4034 diff --git a/cves/2021/CVE-2021-40346.md b/cves/2021/CVE-2021-40346.md index 6e46ca3b49c..b8f2d712e2c 100644 --- a/cves/2021/CVE-2021-40346.md +++ b/cves/2021/CVE-2021-40346.md @@ -19,4 +19,5 @@ No PoCs from references. - https://github.com/donky16/CVE-2021-40346-POC - https://github.com/knqyf263/CVE-2021-40346 - https://github.com/rizemon/CS5331 +- https://github.com/jmg0929/CVE-2021-40346 diff --git a/cves/2021/CVE-2021-40438.md b/cves/2021/CVE-2021-40438.md index e482a2e1da5..2a84293b059 100644 --- a/cves/2021/CVE-2021-40438.md +++ b/cves/2021/CVE-2021-40438.md @@ -24,6 +24,10 @@ No PoCs from references. - https://github.com/sixpacksecurity/CVE-2021-40438 - https://github.com/vsh00t/BB-PoC - https://github.com/xiaojiangxl/CVE-2021-40438 +- https://github.com/n0m-d/CVE-2021-40438-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40438.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-40438 diff --git a/cves/2021/CVE-2021-40822.md b/cves/2021/CVE-2021-40822.md index 53eb62d76a8..d6405c50002 100644 --- a/cves/2021/CVE-2021-40822.md +++ b/cves/2021/CVE-2021-40822.md @@ -18,3 +18,6 @@ GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option fo #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40822.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2021-40822 diff --git a/cves/2021/CVE-2021-40845.md b/cves/2021/CVE-2021-40845.md index e7ed922f052..94c9263cbe8 100644 --- a/cves/2021/CVE-2021-40845.md +++ b/cves/2021/CVE-2021-40845.md @@ -16,5 +16,5 @@ The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called Alpha - https://ricardojoserf.github.io/CVE-2021-40845/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ricardojoserf/CVE-2021-40845 diff --git a/cves/2021/CVE-2021-40875.md b/cves/2021/CVE-2021-40875.md index 61dcd3d56fb..f08d036bdce 100644 --- a/cves/2021/CVE-2021-40875.md +++ b/cves/2021/CVE-2021-40875.md @@ -14,7 +14,7 @@ Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sen - https://github.com/SakuraSamuraii/derailed #### Github -No PoCs found on GitHub currently. +- https://github.com/SakuraSamuraii/derailed #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40875.yaml diff --git a/cves/2021/CVE-2021-40904.md b/cves/2021/CVE-2021-40904.md index 83363cd561a..37e5b74604a 100644 --- a/cves/2021/CVE-2021-40904.md +++ b/cves/2021/CVE-2021-40904.md @@ -13,5 +13,5 @@ The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allo - https://github.com/Edgarloyola/CVE-2021-40904 #### Github -No PoCs found on GitHub currently. +- https://github.com/Edgarloyola/CVE-2021-40904 diff --git a/cves/2021/CVE-2021-40906.md b/cves/2021/CVE-2021-40906.md index 17146e5d090..e28bdd61d02 100644 --- a/cves/2021/CVE-2021-40906.md +++ b/cves/2021/CVE-2021-40906.md @@ -13,5 +13,5 @@ CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the inp - https://github.com/Edgarloyola/CVE-2021-40906 #### Github -No PoCs found on GitHub currently. +- https://github.com/Edgarloyola/CVE-2021-40906 diff --git a/cves/2021/CVE-2021-40964.md b/cves/2021/CVE-2021-40964.md index cc31702817a..7bdecd3c983 100644 --- a/cves/2021/CVE-2021-40964.md +++ b/cves/2021/CVE-2021-40964.md @@ -14,6 +14,7 @@ A Path Traversal vulnerability exists in TinyFileManager all version up to and i #### Github - https://github.com/Z3R0-0x30/CVE-2021-40964 +- https://github.com/Z3R0space/CVE-2021-40964 #### ExploitDB - https://www.exploit-db.com/exploits/50828 diff --git a/cves/2021/CVE-2021-40978.md b/cves/2021/CVE-2021-40978.md index f668d530017..a7a0d4cb424 100644 --- a/cves/2021/CVE-2021-40978.md +++ b/cves/2021/CVE-2021-40978.md @@ -14,7 +14,7 @@ The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8 - https://github.com/nisdn/CVE-2021-40978/issues/1 #### Github -No PoCs found on GitHub currently. +- https://github.com/nisdn/CVE-2021-40978 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40978.yaml diff --git a/cves/2021/CVE-2021-41073.md b/cves/2021/CVE-2021-41073.md index 7097a17cc7c..8ae439d9364 100644 --- a/cves/2021/CVE-2021-41073.md +++ b/cves/2021/CVE-2021-41073.md @@ -15,4 +15,5 @@ loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows loc #### Github - https://github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073 - https://github.com/smallkirby/seccamp23c2-assets +- https://github.com/WhatsWrongAndWhy/CVE-2021-41073 diff --git a/cves/2021/CVE-2021-41277.md b/cves/2021/CVE-2021-41277.md index e4162b7671d..dc7f75f11b3 100644 --- a/cves/2021/CVE-2021-41277.md +++ b/cves/2021/CVE-2021-41277.md @@ -33,3 +33,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41277.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/metabase/CVE-2021-41277 diff --git a/cves/2021/CVE-2021-41773.md b/cves/2021/CVE-2021-41773.md index 56c7cf233cf..4569936551e 100644 --- a/cves/2021/CVE-2021-41773.md +++ b/cves/2021/CVE-2021-41773.md @@ -165,6 +165,30 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2. - https://github.com/zerodaywolf/CVE-2021-41773_42013 - https://github.com/zeronine9/CVE-2021-41773 - https://github.com/abdulrafay25-svg/CVE-2021-41773-Exploit +- https://github.com/Areeba-Zehra-Jafri/CVE-2021-41773---Apache-Path-Traversal---RCE +- https://github.com/AzkOsDev/CVE-2021-41773 +- https://github.com/DappaNISM/mass_cve-2021-41773 +- https://github.com/Emaar1x/CVE-2021-41773 +- https://github.com/ISabbiI/PoC-Apache-CVE-2021-41773-Infrastructure-LAB +- https://github.com/JKIM72403/CS4277-CVE-Path-Traversal-Apache-HTTP-Server +- https://github.com/Joapath/CVE-2021-41773 +- https://github.com/Nanxsec/exploitApache +- https://github.com/Park123r/CVE-2021-41773 +- https://github.com/SANR01/CVE-2021-41773-Exploit-Lab +- https://github.com/Shams-Ul-Mehmood/CVE-2021-41773-Exploit +- https://github.com/a24ac1/CVE-2021-41773-PoC +- https://github.com/abds059/APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773- +- https://github.com/adrianmafandy/CVE-2021-41773 +- https://github.com/dserdyk3-arch/Serdyuk-DO-homework-CVE-2021-41773 +- https://github.com/fxdyx-a/CVE-2021-41773-POC +- https://github.com/gagaltotal/CVE-2021-41773-apache +- https://github.com/gunzf0x/CVE-2021-41773 +- https://github.com/im2sinister/CVE-2021-41773 +- https://github.com/johnwickakash12/CVE-2021-41773 +- https://github.com/lheeeesoo/Apache-CVE-2021-41773 +- https://github.com/sobanahmed6061/CVE-2021-41773-RedTeam +- https://github.com/sudo0xksh/cve-2021-41773-checker +- https://github.com/zubairahm3d/apache-cve-2021-41773-lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41773.yaml @@ -175,3 +199,6 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_normalize_path_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-41773 diff --git a/cves/2021/CVE-2021-42008.md b/cves/2021/CVE-2021-42008.md index 2a2c6a6cb06..67d003c6cc3 100644 --- a/cves/2021/CVE-2021-42008.md +++ b/cves/2021/CVE-2021-42008.md @@ -16,4 +16,5 @@ The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel bef #### Github - https://github.com/0xdevil/CVE-2021-42008 - https://github.com/numanturle/CVE-2021-42008 +- https://github.com/WhatsWrongAndWhy/CVE-2021-42008 diff --git a/cves/2021/CVE-2021-42013.md b/cves/2021/CVE-2021-42013.md index d37cbbaf54a..2c40d972a4b 100644 --- a/cves/2021/CVE-2021-42013.md +++ b/cves/2021/CVE-2021-42013.md @@ -63,6 +63,12 @@ It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was in - https://github.com/vudala/CVE-2021-42013 - https://github.com/walnutsecurity/cve-2021-42013 - https://github.com/xMohamed0/CVE-2021-42013-ApacheRCE +- https://github.com/FakhriCRD/Apache-CVE-2021-42013-RCE-Exploit +- https://github.com/Joapath/CVE-2021-42013 +- https://github.com/andreamammano89-maker/CVE-2021-42013_821311 +- https://github.com/eunho87/CVE-2021-42013 +- https://github.com/ranasen-rat/cve-2021-42013 +- https://github.com/zeynepglygt/apache-cve-2021-42013-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42013.yaml @@ -74,3 +80,6 @@ It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was in #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_normalize_path_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/httpd/CVE-2021-42013 diff --git a/cves/2021/CVE-2021-42278.md b/cves/2021/CVE-2021-42278.md index 14a3cb240ea..bf3a6d02945 100644 --- a/cves/2021/CVE-2021-42278.md +++ b/cves/2021/CVE-2021-42278.md @@ -40,4 +40,5 @@ No PoCs from references. - https://github.com/puckiestyle/sam-the-admin - https://github.com/safebuffer/sam-the-admin - https://github.com/tufanturhan/sam-the-admin +- https://github.com/xLTJ/noPac diff --git a/cves/2021/CVE-2021-42342.md b/cves/2021/CVE-2021-42342.md index 81f754d9aa4..98aec2bf13f 100644 --- a/cves/2021/CVE-2021-42342.md +++ b/cves/2021/CVE-2021-42342.md @@ -16,3 +16,5 @@ No PoCs from references. - https://github.com/Mr-xn/CVE-2021-42342 - https://github.com/kimusan/goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342- +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/goahead/CVE-2021-42342 diff --git a/cves/2021/CVE-2021-42392.md b/cves/2021/CVE-2021-42392.md index 057f5a4bb39..a2ce3faaf2b 100644 --- a/cves/2021/CVE-2021-42392.md +++ b/cves/2021/CVE-2021-42392.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github - https://github.com/Be-Innova/CVE-2021-42392-exploit-lab +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/h2database/CVE-2021-42392 diff --git a/cves/2021/CVE-2021-43008.md b/cves/2021/CVE-2021-43008.md index 262372f5b73..05c6a7dd5f4 100644 --- a/cves/2021/CVE-2021-43008.md +++ b/cves/2021/CVE-2021-43008.md @@ -15,4 +15,7 @@ No PoCs from references. #### Github - https://github.com/p0dalirius/CVE-2021-43008-AdminerRead - https://github.com/tung6192/llm-security-hackathon +- https://github.com/DaturaSaturated/Adminer-CVE-2021-43008 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/adminer/CVE-2021-43008 diff --git a/cves/2021/CVE-2021-43032.md b/cves/2021/CVE-2021-43032.md index 9985130be65..3ce90364142 100644 --- a/cves/2021/CVE-2021-43032.md +++ b/cves/2021/CVE-2021-43032.md @@ -13,5 +13,5 @@ In XenForo through 2.2.7, a threat actor with access to the admin panel can crea - https://github.com/SakuraSamuraii/CVE-2021-43032 #### Github -No PoCs found on GitHub currently. +- https://github.com/SakuraSamuraii/CVE-2021-43032 diff --git a/cves/2021/CVE-2021-43129.md b/cves/2021/CVE-2021-43129.md index 731c125a5a3..7574bcfc675 100644 --- a/cves/2021/CVE-2021-43129.md +++ b/cves/2021/CVE-2021-43129.md @@ -13,5 +13,5 @@ A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” o - https://github.com/Skotizo/CVE-2021-43129 #### Github -No PoCs found on GitHub currently. +- https://github.com/Skotizo/CVE-2021-43129 diff --git a/cves/2021/CVE-2021-43609.md b/cves/2021/CVE-2021-43609.md index dc8d1bb2d1f..ad60a23c9f4 100644 --- a/cves/2021/CVE-2021-43609.md +++ b/cves/2021/CVE-2021-43609.md @@ -14,5 +14,5 @@ An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boo - https://www.linkedin.com/pulse/cve-2021-43609-write-up-division5-security-4lgwe #### Github -No PoCs found on GitHub currently. +- https://github.com/d5sec/CVE-2021-43609-POC diff --git a/cves/2021/CVE-2021-43798.md b/cves/2021/CVE-2021-43798.md index 647c3d21e9a..bb3f6338339 100644 --- a/cves/2021/CVE-2021-43798.md +++ b/cves/2021/CVE-2021-43798.md @@ -74,6 +74,13 @@ Grafana is an open-source platform for monitoring and observability. Grafana ver - https://github.com/yasindce1998/grafana-cve-2021-43798 - https://github.com/z3n70/CVE-2021-43798 - https://github.com/zer0yu/CVE-2021-43798 +- https://github.com/0xf3d0rq/CVE-2021-43798 +- https://github.com/Asbawy/GrafTraverse-CVE-2021-43798 +- https://github.com/Okymi-X/CVE-2021-43798 +- https://github.com/Shoxake17/CVE-2021-43798 +- https://github.com/baktistr/cve-2021-43798-enum +- https://github.com/davidrxchester/Grafana-8.3-Directory-Traversal +- https://github.com/kikechans/-Grafana-LFI-CVE-2021-43798 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43798.yaml @@ -83,3 +90,6 @@ Grafana is an open-source platform for monitoring and observability. Grafana ver #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/grafana_plugin_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2021-43798 diff --git a/cves/2021/CVE-2021-44026.md b/cves/2021/CVE-2021-44026.md index b5548244680..fc7f5a7b874 100644 --- a/cves/2021/CVE-2021-44026.md +++ b/cves/2021/CVE-2021-44026.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/skyllpro/CVE-2021-44026-PoC +- https://github.com/shanglyu/roundcube-cve-2021-44026 diff --git a/cves/2021/CVE-2021-44228.md b/cves/2021/CVE-2021-44228.md index f41bcd81793..c48523c3788 100644 --- a/cves/2021/CVE-2021-44228.md +++ b/cves/2021/CVE-2021-44228.md @@ -447,6 +447,22 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/zlepper/CVE-2021-44228-Test-Server - https://github.com/zsolt-halo/Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service - https://github.com/zzzz0317/log4j2-vulnerable-spring-app +- https://github.com/0xBlackash/CVE-2021-44228 +- https://github.com/Codepumpking/log4shell-poc +- https://github.com/FacundoMfernandez/pentesting-obioba +- https://github.com/Jiahong-Guan/log4j-shell-poc +- https://github.com/JoseMariaMicoli/Log4Shell-PoC +- https://github.com/Mintimate/log4j2-bugmaker +- https://github.com/Ricardo354/homelab-CVE-2021-44228 +- https://github.com/arabindadora/log4shell +- https://github.com/demining/Log4j-Vulnerability +- https://github.com/hmxh123/Log4Shell-Vulnerability-Replication +- https://github.com/horrister/log4shell-cve-2021-44228 +- https://github.com/joaovicdev/EXPLOIT-CVE-2021-44228 +- https://github.com/kaleth4/CVE-2021-44228 +- https://github.com/mrlnstk/cve-2021-44228-minecraft-poc +- https://github.com/razureink/cve-2021-44228-log4shell_rce_reproduction +- https://github.com/vutiendat323/CVE-2021-44228_Log4Shell #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml @@ -461,3 +477,6 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/log4shell_header_injection.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ubiquiti_unifi_log4shell.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vmware_vcenter_log4shell.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/log4j/CVE-2021-44228 diff --git a/cves/2021/CVE-2021-44790.md b/cves/2021/CVE-2021-44790.md index 8468116ee2b..a82d448aa77 100644 --- a/cves/2021/CVE-2021-44790.md +++ b/cves/2021/CVE-2021-44790.md @@ -14,6 +14,7 @@ A carefully crafted request body can cause a buffer overflow in the mod_lua mult #### Github - https://github.com/nuPacaChi/-CVE-2021-44790 +- https://github.com/CerberusMrXi/Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790 #### ExploitDB - https://www.exploit-db.com/exploits/51193 diff --git a/cves/2021/CVE-2021-44967.md b/cves/2021/CVE-2021-44967.md index 435833b6c7f..60308fc93c9 100644 --- a/cves/2021/CVE-2021-44967.md +++ b/cves/2021/CVE-2021-44967.md @@ -17,4 +17,5 @@ A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the up - https://github.com/D3Ext/CVE-2021-44967 - https://github.com/godylockz/CVE-2021-44967 - https://github.com/monke443/CVE-2021-44967 +- https://github.com/kikechans/-Limesurvey-RCE-CVE-2021-44967 diff --git a/cves/2021/CVE-2021-45041.md b/cves/2021/CVE-2021-45041.md index d6b3124d685..77846bfc1d8 100644 --- a/cves/2021/CVE-2021-45041.md +++ b/cves/2021/CVE-2021-45041.md @@ -13,5 +13,5 @@ SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection v - https://github.com/manuelz120/CVE-2021-45041 #### Github -No PoCs found on GitHub currently. +- https://github.com/manuelz120/CVE-2021-45041 diff --git a/cves/2021/CVE-2021-45232.md b/cves/2021/CVE-2021-45232.md index d76bc63b505..154907491ff 100644 --- a/cves/2021/CVE-2021-45232.md +++ b/cves/2021/CVE-2021-45232.md @@ -29,3 +29,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45232.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apisix/CVE-2021-45232 diff --git a/cves/2021/CVE-2021-45416.md b/cves/2021/CVE-2021-45416.md index 3161890cac5..4c07d15c526 100644 --- a/cves/2021/CVE-2021-45416.md +++ b/cves/2021/CVE-2021-45416.md @@ -14,4 +14,5 @@ Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows at #### Github - https://github.com/dnr6419/CVE-2021-45416 +- https://github.com/86x/CVE-2021-45416 diff --git a/cves/2021/CVE-2021-45744.md b/cves/2021/CVE-2021-45744.md index 0929af07bf7..8efda19726d 100644 --- a/cves/2021/CVE-2021-45744.md +++ b/cves/2021/CVE-2021-45744.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS - https://github.com/plsanu/CVE-2021-45744 +- https://github.com/sanupl/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-45744 diff --git a/cves/2021/CVE-2021-45745.md b/cves/2021/CVE-2021-45745.md index 42af8920fb7..de7a070f948 100644 --- a/cves/2021/CVE-2021-45745.md +++ b/cves/2021/CVE-2021-45745.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS - https://github.com/plsanu/CVE-2021-45745 +- https://github.com/sanupl/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-45745 diff --git a/cves/2021/CVE-2021-45788.md b/cves/2021/CVE-2021-45788.md index 756467b6821..5be03fe9c0f 100644 --- a/cves/2021/CVE-2021-45788.md +++ b/cves/2021/CVE-2021-45788.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/metersphere/CVE-2021-45788 diff --git a/cves/2021/CVE-2021-45897.md b/cves/2021/CVE-2021-45897.md index e49ef17e433..58e4aab3626 100644 --- a/cves/2021/CVE-2021-45897.md +++ b/cves/2021/CVE-2021-45897.md @@ -13,5 +13,5 @@ SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. - https://github.com/manuelz120/CVE-2021-45897 #### Github -No PoCs found on GitHub currently. +- https://github.com/manuelz120/CVE-2021-45897 diff --git a/cves/2021/CVE-2021-46067.md b/cves/2021/CVE-2021-46067.md index 05b25eff928..6b360824c04 100644 --- a/cves/2021/CVE-2021-46067.md +++ b/cves/2021/CVE-2021-46067.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46067 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover +- https://github.com/sanupl/CVE-2021-46067 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover diff --git a/cves/2021/CVE-2021-46068.md b/cves/2021/CVE-2021-46068.md index b8ad140e850..0916e4436af 100644 --- a/cves/2021/CVE-2021-46068.md +++ b/cves/2021/CVE-2021-46068.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46068 - https://github.com/plsanu/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-46068 +- https://github.com/sanupl/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46068.yaml diff --git a/cves/2021/CVE-2021-46070.md b/cves/2021/CVE-2021-46070.md index ada190a1dd5..e7c3e24edba 100644 --- a/cves/2021/CVE-2021-46070.md +++ b/cves/2021/CVE-2021-46070.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46070 - https://github.com/plsanu/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-46070 +- https://github.com/sanupl/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS diff --git a/cves/2021/CVE-2021-46074.md b/cves/2021/CVE-2021-46074.md index 92929338a06..e6770f217c6 100644 --- a/cves/2021/CVE-2021-46074.md +++ b/cves/2021/CVE-2021-46074.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46074 - https://github.com/plsanu/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS +- https://github.com/sanupl/CVE-2021-46074 +- https://github.com/sanupl/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS diff --git a/cves/2021/CVE-2021-46076.md b/cves/2021/CVE-2021-46076.md index b1227a05e7f..f935e5f1ccc 100644 --- a/cves/2021/CVE-2021-46076.md +++ b/cves/2021/CVE-2021-46076.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46076 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution +- https://github.com/sanupl/CVE-2021-46076 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution diff --git a/cves/2021/CVE-2021-46078.md b/cves/2021/CVE-2021-46078.md index e2d3fca7b19..94c3565f440 100644 --- a/cves/2021/CVE-2021-46078.md +++ b/cves/2021/CVE-2021-46078.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46078 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting +- https://github.com/sanupl/CVE-2021-46078 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting diff --git a/cves/2021/CVE-2021-46079.md b/cves/2021/CVE-2021-46079.md index 8bbc6618a53..e98e754b658 100644 --- a/cves/2021/CVE-2021-46079.md +++ b/cves/2021/CVE-2021-46079.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46079 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection +- https://github.com/sanupl/CVE-2021-46079 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection diff --git a/cves/2021/CVE-2021-46080.md b/cves/2021/CVE-2021-46080.md index 787481ed32b..4088bcb499d 100644 --- a/cves/2021/CVE-2021-46080.md +++ b/cves/2021/CVE-2021-46080.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/plsanu/CVE-2021-46080 - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS +- https://github.com/sanupl/CVE-2021-46080 +- https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS diff --git a/cves/2022/CVE-2022-0185.md b/cves/2022/CVE-2022-0185.md index 0d96df9baa3..fbbce3e89ef 100644 --- a/cves/2022/CVE-2022-0185.md +++ b/cves/2022/CVE-2022-0185.md @@ -22,4 +22,7 @@ A heap-based buffer overflow flaw was found in the way the legacy_parse_param fu - https://github.com/featherL/CVE-2022-0185-exploit - https://github.com/khaclep007/CVE-2022-0185 - https://github.com/veritas501/CVE-2022-0185-PipeVersion +- https://github.com/prabeershakya/CVE-2022-0185-POC +- https://github.com/sandesh9978/CVE-2022-0185-Analysis-and-Exploit +- https://github.com/shakyanayann/CVE-2022-0185 diff --git a/cves/2022/CVE-2022-0236.md b/cves/2022/CVE-2022-0236.md index a5e5c553b9c..9331141ebfd 100644 --- a/cves/2022/CVE-2022-0236.md +++ b/cves/2022/CVE-2022-0236.md @@ -14,4 +14,4 @@ The WP Import Export WordPress plugin (both free and premium versions) is vulner - https://github.com/qurbat/CVE-2022-0236 #### Github -No PoCs found on GitHub currently. +- https://github.com/qurbat/CVE-2022-0236 diff --git a/cves/2022/CVE-2022-0435.md b/cves/2022/CVE-2022-0435.md index 20f2061715c..237b9938a1b 100644 --- a/cves/2022/CVE-2022-0435.md +++ b/cves/2022/CVE-2022-0435.md @@ -14,4 +14,6 @@ No PoCs from references. #### Github - https://github.com/wlswotmd/CVE-2022-0435 +- https://github.com/Spydomain/CVE-2022-0435-Poc +- https://github.com/sandesh9978/CVE-2022-0435 diff --git a/cves/2022/CVE-2022-0441.md b/cves/2022/CVE-2022-0441.md index 44d0e20fff4..6a3526a8f5c 100644 --- a/cves/2022/CVE-2022-0441.md +++ b/cves/2022/CVE-2022-0441.md @@ -17,6 +17,7 @@ The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some paramete - https://github.com/biulove0x/CVE-2022-0441 - https://github.com/kyukazamiqq/CVE-2022-0441 - https://github.com/tegal1337/CVE-2022-0441 +- https://github.com/DappaNISM/CVE-2022-0441 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0441.yaml diff --git a/cves/2022/CVE-2022-0529.md b/cves/2022/CVE-2022-0529.md index b45f23ccb08..416f8982578 100644 --- a/cves/2022/CVE-2022-0529.md +++ b/cves/2022/CVE-2022-0529.md @@ -15,4 +15,5 @@ A flaw was found in Unzip. The vulnerability occurs during the conversion of a w #### Github - https://github.com/nanaao/unzip_poc +- https://github.com/ByteHackr/unzip_poc diff --git a/cves/2022/CVE-2022-0543.md b/cves/2022/CVE-2022-0543.md index d2585b78873..67cad7108ea 100644 --- a/cves/2022/CVE-2022-0543.md +++ b/cves/2022/CVE-2022-0543.md @@ -18,9 +18,14 @@ It was discovered, that redis, a persistent key-value database, due to a packagi - https://github.com/0x7eTeam/CVE-2022-0543 - https://github.com/aodsec/CVE-2022-0543 - https://github.com/z92g/CVE-2022-0543 +- https://github.com/K3ysTr0K3R/CVE-2022-0543 +- https://github.com/OpsCipher/CVE-2022-0543 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-0543.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/redis/redis_debian_sandbox_escape.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/redis/CVE-2022-0543 diff --git a/cves/2022/CVE-2022-0739.md b/cves/2022/CVE-2022-0739.md index 3767715cb5d..d4757693645 100644 --- a/cves/2022/CVE-2022-0739.md +++ b/cves/2022/CVE-2022-0739.md @@ -21,6 +21,7 @@ The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user - https://github.com/destr4ct/CVE-2022-0739 - https://github.com/lhamouche/Bash-exploit-for-CVE-2022-0739 - https://github.com/viardant/CVE-2022-0739 +- https://github.com/Manjen1218/CVE-2022-0739-Exploitation #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb diff --git a/cves/2022/CVE-2022-0778.md b/cves/2022/CVE-2022-0778.md index b92a14dfb4c..7881d80907d 100644 --- a/cves/2022/CVE-2022-0778.md +++ b/cves/2022/CVE-2022-0778.md @@ -22,3 +22,5 @@ The BN_mod_sqrt() function, which computes a modular square root, contains a bug - https://github.com/jkakavas/CVE-2022-0778-POC - https://github.com/yywing/cve-2022-0778 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2022-0778 diff --git a/cves/2022/CVE-2022-0847.md b/cves/2022/CVE-2022-0847.md index 8d051d86537..b841e1ac05a 100644 --- a/cves/2022/CVE-2022-0847.md +++ b/cves/2022/CVE-2022-0847.md @@ -144,6 +144,12 @@ A flaw was found in the way the "flags" member of the new pipe buffer structure - https://github.com/xndpxs/CVE-2022-0847 - https://github.com/xsxtw/CVE-2022-0847 - https://github.com/yoeelingBin/CVE-2022-0847-Container-Escape +- https://github.com/SimoesCTT/Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847 +- https://github.com/aswanepo/DirtyPipe +- https://github.com/bluedragonsecurity/Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug- +- https://github.com/stfnw/reproducer-poc-CVE-2022-0847 +- https://github.com/t1ckprivate/CVE-2022-0847-Dirty-Pipe +- https://github.com/xiaoLvChen/CVE-2022-0847 #### ExploitDB - https://www.exploit-db.com/exploits/50808 diff --git a/cves/2022/CVE-2022-0944.md b/cves/2022/CVE-2022-0944.md index c255ab69e88..f3fd4a108ab 100644 --- a/cves/2022/CVE-2022-0944.md +++ b/cves/2022/CVE-2022-0944.md @@ -23,4 +23,5 @@ Template injection in connection test endpoint leads to RCE in GitHub repository - https://github.com/Robocopsita/CVE-2022-0944_RCE_POC - https://github.com/shhrew/CVE-2022-0944 - https://github.com/toneillcodes/CVE-2022-0944 +- https://github.com/NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944 diff --git a/cves/2022/CVE-2022-1026.md b/cves/2022/CVE-2022-1026.md index 9831fbdba93..de3fbeca78a 100644 --- a/cves/2022/CVE-2022-1026.md +++ b/cves/2022/CVE-2022-1026.md @@ -16,6 +16,8 @@ Kyocera multifunction printers running vulnerable versions of Net View unintenti - https://github.com/ac3lives/kyocera-cve-2022-1026 - https://github.com/flamebarke/nmap-printer-nse-scripts - https://github.com/r0lh/kygocera +- https://github.com/D4RKMATT3R/KyoceraCredsDump +- https://github.com/h4po0n/kyocera-cve-2022-1026_SOAP1.1 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml diff --git a/cves/2022/CVE-2022-1364.md b/cves/2022/CVE-2022-1364.md index e367cbe6ac2..4f20617e4ef 100644 --- a/cves/2022/CVE-2022-1364.md +++ b/cves/2022/CVE-2022-1364.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/A1Lin/cve-2022-1364 +- https://github.com/interruptlabs/uc_browser_poc_CVE-2022-1364 diff --git a/cves/2022/CVE-2022-1386.md b/cves/2022/CVE-2022-1386.md index 6b1c3f570dd..bd8b81ab0f2 100644 --- a/cves/2022/CVE-2022-1386.md +++ b/cves/2022/CVE-2022-1386.md @@ -20,6 +20,7 @@ The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does - https://github.com/ptrgits/CVE-2022-1386 - https://github.com/satyasai1460/CVE-2022-1386 - https://github.com/zycoder0day/CVE-2022-1386-Mass_Vulnerability +- https://github.com/kreeksec/CVE-2022-1386 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1386.yaml diff --git a/cves/2022/CVE-2022-1388.md b/cves/2022/CVE-2022-1388.md index 1d665674971..d12ac2d92d0 100644 --- a/cves/2022/CVE-2022-1388.md +++ b/cves/2022/CVE-2022-1388.md @@ -96,6 +96,7 @@ On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5. - https://github.com/vesperp/CVE-2022-1388-F5-BIG-IP- - https://github.com/west9b/F5-BIG-IP-POC - https://github.com/yukar1z0e/CVE-2022-1388 +- https://github.com/alt3kx/CVE-2022-1388_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1388.yaml diff --git a/cves/2022/CVE-2022-1471.md b/cves/2022/CVE-2022-1471.md index 5004d06eca5..a848e4e6c7a 100644 --- a/cves/2022/CVE-2022-1471.md +++ b/cves/2022/CVE-2022-1471.md @@ -17,6 +17,10 @@ SnakeYaml's Constructor() class does not restrict types which can be instantiate - https://github.com/1fabunicorn/SnakeYAML-CVE-2022-1471-POC - https://github.com/Franky-Lim24/snakeyaml_cve_poc - https://github.com/falconkei/snakeyaml_cve_poc +- https://github.com/seal-sean-org/seans-surf-and-skate +- https://github.com/seal-sean-org/yaml-payload +- https://github.com/seal-sec-demo-2/Java-Example +- https://github.com/seal-sec-demo-2/yaml-payload #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/torchserver_cve_2023_43654.rb diff --git a/cves/2022/CVE-2022-1609.md b/cves/2022/CVE-2022-1609.md index b439749f6d0..2c01783d34b 100644 --- a/cves/2022/CVE-2022-1609.md +++ b/cves/2022/CVE-2022-1609.md @@ -22,6 +22,7 @@ The School Management WordPress plugin before 9.9.7 contains an obfuscated backd - https://github.com/savior-only/CVE-2022-1609 - https://github.com/tuxsyscall/cve-2022-1609-exploit - https://github.com/w4r3s/cve-2022-1609-exploit +- https://github.com/itworksig/cve-2022-1609-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1609.yaml diff --git a/cves/2022/CVE-2022-20223.md b/cves/2022/CVE-2022-20223.md index 03049e1db6f..237d196dbed 100644 --- a/cves/2022/CVE-2022-20223.md +++ b/cves/2022/CVE-2022-20223.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/xbee9/cve-2022-20223 +- https://github.com/dsp-security-workflows/cve-2022-20223 diff --git a/cves/2022/CVE-2022-20829.md b/cves/2022/CVE-2022-20829.md index 1a4c0f57b87..5d1cffa2305 100644 --- a/cves/2022/CVE-2022-20829.md +++ b/cves/2022/CVE-2022-20829.md @@ -13,5 +13,5 @@ A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM - https://github.com/jbaines-r7/theway #### Github -No PoCs found on GitHub currently. +- https://github.com/jbaines-r7/theway diff --git a/cves/2022/CVE-2022-21241.md b/cves/2022/CVE-2022-21241.md index 6cab568a4dd..955f8528152 100644 --- a/cves/2022/CVE-2022-21241.md +++ b/cves/2022/CVE-2022-21241.md @@ -13,5 +13,5 @@ Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauth No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/nanaao/csv-plus_vulnerability diff --git a/cves/2022/CVE-2022-21445.md b/cves/2022/CVE-2022-21445.md index fa49ba456b2..2145d3761cb 100644 --- a/cves/2022/CVE-2022-21445.md +++ b/cves/2022/CVE-2022-21445.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/hienkiet/CVE-2022-21445-for-12.2.1.3.0-Weblogic +- https://github.com/NeCr00/CVE-2022-21445 #### Nuclei - https://github.com/linuxadi/40k-nuclei-templates/blob/main/aditya/folder1/CVE-2022-21445.yaml diff --git a/cves/2022/CVE-2022-22536.md b/cves/2022/CVE-2022-22536.md index 665a705f5ce..82a6d119213 100644 --- a/cves/2022/CVE-2022-22536.md +++ b/cves/2022/CVE-2022-22536.md @@ -34,6 +34,7 @@ SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, AB - https://github.com/asurti6783/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 - https://github.com/tes5hacks/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 - https://github.com/tess-ss/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 +- https://github.com/abrewer251/CVE-2022-22536_SAP_Request_Smuggling_Scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22536.yaml diff --git a/cves/2022/CVE-2022-22706.md b/cves/2022/CVE-2022-22706.md index d11d21fc0ac..5a01337a930 100644 --- a/cves/2022/CVE-2022-22706.md +++ b/cves/2022/CVE-2022-22706.md @@ -16,4 +16,5 @@ Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access #### Github - https://github.com/assad12341/Kernel-Exploitation-Techniques- +- https://github.com/byt3quester/CVE-2022-22706-poc diff --git a/cves/2022/CVE-2022-22909.md b/cves/2022/CVE-2022-22909.md index a6197511611..9bddb3852c3 100644 --- a/cves/2022/CVE-2022-22909.md +++ b/cves/2022/CVE-2022-22909.md @@ -14,6 +14,7 @@ HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulner #### Github - https://github.com/kaal18/CVE-2022-22909 +- https://github.com/0z09e/CVE-2022-22909 #### ExploitDB - https://www.exploit-db.com/exploits/50754 diff --git a/cves/2022/CVE-2022-22947.md b/cves/2022/CVE-2022-22947.md index 8079d8c8738..856ce62617f 100644 --- a/cves/2022/CVE-2022-22947.md +++ b/cves/2022/CVE-2022-22947.md @@ -90,6 +90,8 @@ In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are v - https://github.com/viemsr/spring_cloud_gateway_memshell - https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell - https://github.com/wjl110/Spring_CVE_2022_22947 +- https://github.com/MoCh3n/CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE +- https://github.com/entr0pie/demo-cve-2022-22947 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22947.yaml @@ -99,3 +101,6 @@ In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are v #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/spring_cloud_gateway_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22947 diff --git a/cves/2022/CVE-2022-22954.md b/cves/2022/CVE-2022-22954.md index 4596a1ff648..9a80587aaaf 100644 --- a/cves/2022/CVE-2022-22954.md +++ b/cves/2022/CVE-2022-22954.md @@ -44,6 +44,7 @@ VMware Workspace ONE Access and Identity Manager contain a remote code execution - https://github.com/tunelko/CVE-2022-22954-PoC - https://github.com/tyleraharrison/VMware-CVE-2022-22954-Command-Injector - https://github.com/zidanfanshao/vcenter_tools +- https://github.com/nieldk/VMware-CVE-2022-22954 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22954.yaml diff --git a/cves/2022/CVE-2022-22963.md b/cves/2022/CVE-2022-22963.md index 24c92bfa19a..c3dc0b0ece7 100644 --- a/cves/2022/CVE-2022-22963.md +++ b/cves/2022/CVE-2022-22963.md @@ -47,6 +47,9 @@ In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, w - https://github.com/randallbanner/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE - https://github.com/sinjap/spring4shell - https://github.com/twseptian/cve-2022-22963 +- https://github.com/808rsec/CVE-2022-22963 +- https://github.com/r4y-br/CVE-2022-22963 +- https://github.com/xmqaq/CVE-2022-22963 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22963.yaml @@ -56,3 +59,6 @@ In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, w #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spring_cloud_function_spel_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22963 diff --git a/cves/2022/CVE-2022-22965.md b/cves/2022/CVE-2022-22965.md index cdb0a14fb74..65df8bfda6b 100644 --- a/cves/2022/CVE-2022-22965.md +++ b/cves/2022/CVE-2022-22965.md @@ -119,9 +119,17 @@ A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable t - https://github.com/xsxtw/SpringFramework_CVE-2022-22965_RCE - https://github.com/zangcc/CVE-2022-22965-rexbb - https://github.com/zer0yu/CVE-2022-22965 +- https://github.com/0xBlackash/CVE-2022-22965 +- https://github.com/Kuri119/CVE-2022-22965-Spring4Shell +- https://github.com/PrinceH4k/Spring4Shell-POC +- https://github.com/march0n/PoC-CVE-2022-22965-Spring4Shell +- https://github.com/nhattanhh/CVE-2022-22965 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22965.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spring_framework_rce_spring4shell.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22965 diff --git a/cves/2022/CVE-2022-22978.md b/cves/2022/CVE-2022-22978.md index 00230d26d46..6b1fca3556e 100644 --- a/cves/2022/CVE-2022-22978.md +++ b/cves/2022/CVE-2022-22978.md @@ -21,3 +21,5 @@ No PoCs from references. - https://github.com/umakant76705/CVE-2022-22978 - https://github.com/wan9xx/CVE-2022-22978-demo +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22978 diff --git a/cves/2022/CVE-2022-22980.md b/cves/2022/CVE-2022-22980.md index da8cd7f1855..cfc7f3c7872 100644 --- a/cves/2022/CVE-2022-22980.md +++ b/cves/2022/CVE-2022-22980.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/jweny/cve-2022-22980-exp - https://github.com/murataydemir/CVE-2022-22980 - https://github.com/trganda/CVE-2022-22980 +- https://github.com/Eliasdekiniweek/CVE-2022-22980 diff --git a/cves/2022/CVE-2022-23093.md b/cves/2022/CVE-2022-23093.md index bc01796e866..be55df686e7 100644 --- a/cves/2022/CVE-2022-23093.md +++ b/cves/2022/CVE-2022-23093.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/Symbolexe/DrayTek-Exploit +- https://github.com/sh4den/CVE-2022-23093 diff --git a/cves/2022/CVE-2022-23221.md b/cves/2022/CVE-2022-23221.md index 5436a7dd38f..b541e5b2633 100644 --- a/cves/2022/CVE-2022-23221.md +++ b/cves/2022/CVE-2022-23221.md @@ -15,4 +15,7 @@ H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via #### Github - https://github.com/hktalent/exploit-poc +- https://github.com/straightSang/H2-database-CVE-2022-23221 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/h2database/CVE-2022-23221 diff --git a/cves/2022/CVE-2022-23378.md b/cves/2022/CVE-2022-23378.md index adc65b5048c..b8c55d7c20a 100644 --- a/cves/2022/CVE-2022-23378.md +++ b/cves/2022/CVE-2022-23378.md @@ -13,5 +13,5 @@ A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of Ta - https://github.com/TheGetch/CVE-2022-23378 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheGetch/CVE-2022-23378 diff --git a/cves/2022/CVE-2022-23529.md b/cves/2022/CVE-2022-23529.md index 35cd3e22811..498a5d5ac04 100644 --- a/cves/2022/CVE-2022-23529.md +++ b/cves/2022/CVE-2022-23529.md @@ -13,5 +13,5 @@ - https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3 #### Github -No PoCs found on GitHub currently. +- https://github.com/daniel-marchi/CVE-2022-23529-Exploration diff --git a/cves/2022/CVE-2022-23779.md b/cves/2022/CVE-2022-23779.md index fe94d5369f9..e294c373cd8 100644 --- a/cves/2022/CVE-2022-23779.md +++ b/cves/2022/CVE-2022-23779.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/Vulnmachines/Zoho_CVE-2022-23779 - https://github.com/fbusr/CVE-2022-23779 +- https://github.com/Rishi-kaul/CVE-2022-23779 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23779.yaml diff --git a/cves/2022/CVE-2022-23861.md b/cves/2022/CVE-2022-23861.md index 10c1c344456..0c4169fefd1 100644 --- a/cves/2022/CVE-2022-23861.md +++ b/cves/2022/CVE-2022-23861.md @@ -15,5 +15,5 @@ Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft S - https://github.com/mbadanoiu/CVE-2022-23861/blob/main/SafeQ%20-%20CVE-2022-23861.pdf #### Github -No PoCs found on GitHub currently. +- https://github.com/mbadanoiu/CVE-2022-23861 diff --git a/cves/2022/CVE-2022-23862.md b/cves/2022/CVE-2022-23862.md index 0e711262874..86daef2cba4 100644 --- a/cves/2022/CVE-2022-23862.md +++ b/cves/2022/CVE-2022-23862.md @@ -15,5 +15,5 @@ A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. Th - https://github.com/mbadanoiu/CVE-2022-23862/blob/main/SafeQ%20-%20CVE-2022-23862.pdf #### Github -No PoCs found on GitHub currently. +- https://github.com/mbadanoiu/CVE-2022-23862 diff --git a/cves/2022/CVE-2022-23967.md b/cves/2022/CVE-2022-23967.md index b532f56674f..04225fc210c 100644 --- a/cves/2022/CVE-2022-23967.md +++ b/cves/2022/CVE-2022-23967.md @@ -13,5 +13,5 @@ - https://github.com/MaherAzzouzi/CVE-2022-23967 #### Github -No PoCs found on GitHub currently. +- https://github.com/MaherAzzouzi/CVE-2022-23967 diff --git a/cves/2022/CVE-2022-24124.md b/cves/2022/CVE-2022-24124.md index 4c5cef71ab7..d2ec3a1dcf4 100644 --- a/cves/2022/CVE-2022-24124.md +++ b/cves/2022/CVE-2022-24124.md @@ -23,6 +23,7 @@ The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related - https://github.com/b1gdog/CVE-2022-24124_POC - https://github.com/b1gdog/cve_2022_24124 - https://github.com/cukw/CVE-2022-24124_POC +- https://github.com/abbarhissarh/CVE-2022-24124 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24124.yaml diff --git a/cves/2022/CVE-2022-24125.md b/cves/2022/CVE-2022-24125.md index 51046574f5c..c0b5c801410 100644 --- a/cves/2022/CVE-2022-24125.md +++ b/cves/2022/CVE-2022-24125.md @@ -13,5 +13,5 @@ The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022 - https://github.com/tremwil/ds3-nrssr-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/tremwil/ds3-nrssr-rce diff --git a/cves/2022/CVE-2022-24355.md b/cves/2022/CVE-2022-24355.md index 880593ac59b..b6ca7c7deda 100644 --- a/cves/2022/CVE-2022-24355.md +++ b/cves/2022/CVE-2022-24355.md @@ -13,5 +13,5 @@ This vulnerability allows network-adjacent attackers to execute arbitrary code o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ilizavr/CVE-2022-24355 diff --git a/cves/2022/CVE-2022-24481.md b/cves/2022/CVE-2022-24481.md index 182af00b8b5..2b1ad6763c9 100644 --- a/cves/2022/CVE-2022-24481.md +++ b/cves/2022/CVE-2022-24481.md @@ -51,4 +51,5 @@ No PoCs from references. #### Github - https://github.com/fr4nkxixi/CVE-2022-24481-POC - https://github.com/robotMD5/CVE-2022-24481-POC +- https://github.com/uname1able/CVE-2022-24481 diff --git a/cves/2022/CVE-2022-24521.md b/cves/2022/CVE-2022-24521.md index e1e08936ff9..d96597e80b7 100644 --- a/cves/2022/CVE-2022-24521.md +++ b/cves/2022/CVE-2022-24521.md @@ -52,4 +52,5 @@ No PoCs from references. #### Github - https://github.com/fr4nkxixi/CVE-2022-24481-POC - https://github.com/robotMD5/CVE-2022-24481-POC +- https://github.com/uname1able/CVE-2022-24521 diff --git a/cves/2022/CVE-2022-24654.md b/cves/2022/CVE-2022-24654.md index 14ac2ea91bf..b3de05e7cb6 100644 --- a/cves/2022/CVE-2022-24654.md +++ b/cves/2022/CVE-2022-24654.md @@ -14,5 +14,5 @@ Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server A - https://packetstormsecurity.com/files/168064/Intelbras-ATA-200-Cross-Site-Scripting.html #### Github -No PoCs found on GitHub currently. +- https://github.com/leonardobg/CVE-2022-24654 diff --git a/cves/2022/CVE-2022-24706.md b/cves/2022/CVE-2022-24706.md index 20d74e18dcd..d44f4c418d2 100644 --- a/cves/2022/CVE-2022-24706.md +++ b/cves/2022/CVE-2022-24706.md @@ -20,6 +20,7 @@ In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured d - https://github.com/becrevex/CVE-2022-24706 - https://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit - https://github.com/superzerosec/CVE-2022-24706 +- https://github.com/junghyeonkum/CVE-2022-24706 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-24706.yaml @@ -29,3 +30,6 @@ In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured d #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_couchdb_erlang_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/couchdb/CVE-2022-24706 diff --git a/cves/2022/CVE-2022-24707.md b/cves/2022/CVE-2022-24707.md index 40ed8778ce4..60df186eaef 100644 --- a/cves/2022/CVE-2022-24707.md +++ b/cves/2022/CVE-2022-24707.md @@ -14,6 +14,7 @@ Anuko Time Tracker is an open source, web-based time tracking application writte #### Github - https://github.com/Altelus1/CVE-2022-24707 +- https://github.com/thepiyushkumarshukla/CVE-2022-24707_AnukoTimeTracker_Version-1.20.0_POC #### ExploitDB - https://www.exploit-db.com/exploits/50915 diff --git a/cves/2022/CVE-2022-24715.md b/cves/2022/CVE-2022-24715.md index e038994e381..a33035da435 100644 --- a/cves/2022/CVE-2022-24715.md +++ b/cves/2022/CVE-2022-24715.md @@ -16,6 +16,7 @@ Icinga Web 2 is an open source monitoring web interface, framework and command-l #### Github - https://github.com/cxdxnt/CVE-2022-24715 - https://github.com/d4rkb0n3/CVE-2022-24715-go +- https://github.com/nimphtix/CVE-2022-24715 #### ExploitDB - https://www.exploit-db.com/exploits/51586 diff --git a/cves/2022/CVE-2022-24716.md b/cves/2022/CVE-2022-24716.md index 88c8d6adabb..b289ef209e8 100644 --- a/cves/2022/CVE-2022-24716.md +++ b/cves/2022/CVE-2022-24716.md @@ -16,6 +16,9 @@ Icinga Web 2 is an open source monitoring web interface, framework and command-l - https://github.com/antisecc/CVE-2022-24716 - https://github.com/doosec101/CVE-2022-24716 - https://github.com/pumpkinpiteam/CVE-2022-24716 +- https://github.com/0x0Jackal/CVE-2022-24716 +- https://github.com/gmh5225/CVE-2022-24716 +- https://github.com/gmh5225/CVE-2022-24716-2 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24716.yaml diff --git a/cves/2022/CVE-2022-24785.md b/cves/2022/CVE-2022-24785.md index 9280068f4bd..d5534fb93dd 100644 --- a/cves/2022/CVE-2022-24785.md +++ b/cves/2022/CVE-2022-24785.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/pS3ud0RAnD0m/cve-2022-24785-poc-lab +- https://github.com/AnomalousVectors/cve-2022-24785-poc-lab diff --git a/cves/2022/CVE-2022-24816.md b/cves/2022/CVE-2022-24816.md index 886c54d6220..bb776b8fe43 100644 --- a/cves/2022/CVE-2022-24816.md +++ b/cves/2022/CVE-2022-24816.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24816.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2022-24816 diff --git a/cves/2022/CVE-2022-24834.md b/cves/2022/CVE-2022-24834.md index 6047bf18427..2d01971ce65 100644 --- a/cves/2022/CVE-2022-24834.md +++ b/cves/2022/CVE-2022-24834.md @@ -22,4 +22,5 @@ No PoCs from references. - https://github.com/DukeSec97/CVE-2022-24834- - https://github.com/PsychoPunkSage/Chronark - https://github.com/convisolabs/CVE-2022-24834 +- https://github.com/Nullx97/CVE-2022-24834- diff --git a/cves/2022/CVE-2022-25012.md b/cves/2022/CVE-2022-25012.md index 6b774b9e3a4..b03260e76d3 100644 --- a/cves/2022/CVE-2022-25012.md +++ b/cves/2022/CVE-2022-25012.md @@ -15,4 +15,5 @@ Argus Surveillance DVR v4.0 employs weak password encryption. #### Github - https://github.com/G4sp4rCS/CVE-2022-25012-POC - https://github.com/s3l33/CVE-2022-25012 +- https://github.com/m1kb0k/CVE-2022-25012-dvr4-weak-password-encryption diff --git a/cves/2022/CVE-2022-25090.md b/cves/2022/CVE-2022-25090.md index c1a0383e569..0c097036a51 100644 --- a/cves/2022/CVE-2022-25090.md +++ b/cves/2022/CVE-2022-25090.md @@ -16,7 +16,7 @@ Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary tem - https://www.exploit-db.com/exploits/50812 #### Github -No PoCs found on GitHub currently. +- https://github.com/ComparedArray/printix-CVE-2022-25090 #### ExploitDB - https://www.exploit-db.com/exploits/50812 diff --git a/cves/2022/CVE-2022-25636.md b/cves/2022/CVE-2022-25636.md index 76520cd24a2..d69815b21dc 100644 --- a/cves/2022/CVE-2022-25636.md +++ b/cves/2022/CVE-2022-25636.md @@ -17,4 +17,5 @@ net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows loca #### Github - https://github.com/chenaotian/CVE-2022-25636 - https://github.com/veritas501/CVE-2022-25636-PipeVersion +- https://github.com/Bonfee/CVE-2022-25636 diff --git a/cves/2022/CVE-2022-25765.md b/cves/2022/CVE-2022-25765.md index bdbdd436431..a5de05c87a4 100644 --- a/cves/2022/CVE-2022-25765.md +++ b/cves/2022/CVE-2022-25765.md @@ -24,4 +24,5 @@ The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL - https://github.com/lowercasenumbers/CVE-2022-25765 - https://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765 - https://github.com/shamo0/PDFkit-CMD-Injection +- https://github.com/Jeanback1/CVE-2022-25765-exploit diff --git a/cves/2022/CVE-2022-2586.md b/cves/2022/CVE-2022-2586.md index 2c2cb3ac0b1..ed3de61c7e7 100644 --- a/cves/2022/CVE-2022-2586.md +++ b/cves/2022/CVE-2022-2586.md @@ -28,4 +28,5 @@ It was discovered that a nft object or expression could reference a nft set on a - https://github.com/konoha279/2022-LPE-UAF - https://github.com/pirenga/2022-LPE-UAF - https://github.com/sniper404ghostxploit/CVE-2022-2586 +- https://github.com/lanleft/CVE-2022-2586 diff --git a/cves/2022/CVE-2022-2588.md b/cves/2022/CVE-2022-2588.md index 0a7872f889f..54325b90580 100644 --- a/cves/2022/CVE-2022-2588.md +++ b/cves/2022/CVE-2022-2588.md @@ -25,4 +25,5 @@ It was discovered that the cls_route filter implementation in the Linux kernel w - https://github.com/Markakd/CVE-2022-2588 - https://github.com/dom4570/CVE-2022-2588 - https://github.com/veritas501/CVE-2022-2588 +- https://github.com/LSinus/CacheMeIfYouCan diff --git a/cves/2022/CVE-2022-26133.md b/cves/2022/CVE-2022-26133.md index c1ca30a8a83..b51c2a81dd1 100644 --- a/cves/2022/CVE-2022-26133.md +++ b/cves/2022/CVE-2022-26133.md @@ -22,4 +22,5 @@ No PoCs from references. - https://github.com/0xStarFord/CVE-2022-26133 - https://github.com/Pear1y/CVE-2022-26133 - https://github.com/ar2o3/CVE-2022-26133 +- https://github.com/abbarhissarh/CVE-2022-26133 diff --git a/cves/2022/CVE-2022-26134.md b/cves/2022/CVE-2022-26134.md index 833ca0ea248..7511ac752fb 100644 --- a/cves/2022/CVE-2022-26134.md +++ b/cves/2022/CVE-2022-26134.md @@ -100,6 +100,9 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul - https://github.com/yTxZx/CVE-2022-26134 - https://github.com/yigexioabai/CVE-2022-26134-cve1 - https://github.com/yyqxi/CVE-2022-26134 +- https://github.com/crypt0lith/confluence-ognl-rce +- https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection +- https://github.com/secjia/CVE-2022-26134 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26134.yaml @@ -109,3 +112,6 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2022-26134 diff --git a/cves/2022/CVE-2022-26265.md b/cves/2022/CVE-2022-26265.md index 67230d25e0a..46e4b639ba6 100644 --- a/cves/2022/CVE-2022-26265.md +++ b/cves/2022/CVE-2022-26265.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/redteamsecurity2023/CVE-2022-26265 +- https://github.com/sh4den/CVE-2022-26265 diff --git a/cves/2022/CVE-2022-26923.md b/cves/2022/CVE-2022-26923.md index 388e863cc67..1773e96b458 100644 --- a/cves/2022/CVE-2022-26923.md +++ b/cves/2022/CVE-2022-26923.md @@ -43,6 +43,8 @@ No PoCs from references. - https://github.com/lsecqt/CVE-2022-26923-Powershell-POC - https://github.com/r1skkam/TryHackMe-CVE-2022-26923 - https://github.com/rayngnpc/CVE-2022-26923-rayng +- https://github.com/Eliasdekiniweek/CVE-2022-26923 +- https://github.com/Nefhara/CVE-2022-26923 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/dcerpc/cve_2022_26923_certifried.rb diff --git a/cves/2022/CVE-2022-27226.md b/cves/2022/CVE-2022-27226.md index 3262b8f9a9a..fa218f7ed36 100644 --- a/cves/2022/CVE-2022-27226.md +++ b/cves/2022/CVE-2022-27226.md @@ -15,7 +15,7 @@ A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a t - https://johnjhacking.com/blog/cve-2022-27226/ #### Github -No PoCs found on GitHub currently. +- https://github.com/SakuraSamuraii/ez-iRZ #### ExploitDB - https://www.exploit-db.com/exploits/50832 diff --git a/cves/2022/CVE-2022-27254.md b/cves/2022/CVE-2022-27254.md index fa63b0dff60..d4dea0557e4 100644 --- a/cves/2022/CVE-2022-27254.md +++ b/cves/2022/CVE-2022-27254.md @@ -17,4 +17,5 @@ The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal #### Github - https://github.com/SuryaN03/DOS-REMOTE-POC +- https://github.com/nonamecoder/CVE-2022-27254 diff --git a/cves/2022/CVE-2022-27255.md b/cves/2022/CVE-2022-27255.md index 830d3a2ce25..37ffe2d6197 100644 --- a/cves/2022/CVE-2022-27255.md +++ b/cves/2022/CVE-2022-27255.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/infobyte/cve-2022-27255 +- https://github.com/stryker-project/CVE-2022-27255-checker diff --git a/cves/2022/CVE-2022-27666.md b/cves/2022/CVE-2022-27666.md index e95d5ca3b26..e1bc5384298 100644 --- a/cves/2022/CVE-2022-27666.md +++ b/cves/2022/CVE-2022-27666.md @@ -15,4 +15,5 @@ A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ip #### Github - https://github.com/Albocoder/cve-2022-27666-exploits - https://github.com/plummm/CVE-2022-27666 +- https://github.com/ngtuonghung/CVE-2022-27666 diff --git a/cves/2022/CVE-2022-27925.md b/cves/2022/CVE-2022-27925.md index 9ebafb4d3d2..8b88e99b0a2 100644 --- a/cves/2022/CVE-2022-27925.md +++ b/cves/2022/CVE-2022-27925.md @@ -25,6 +25,7 @@ Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that - https://github.com/sanan2004/CVE-2022-27925 - https://github.com/touchmycrazyredhat/CVE-2022-27925-Revshell - https://github.com/vnhacker1337/CVE-2022-27925-PoC +- https://github.com/sh4den/CVE-2022-27925 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbra_mboximport_cve_2022_27925.rb diff --git a/cves/2022/CVE-2022-28368.md b/cves/2022/CVE-2022-28368.md index 8e3153ddfdd..b4ac8c29dab 100644 --- a/cves/2022/CVE-2022-28368.md +++ b/cves/2022/CVE-2022-28368.md @@ -16,6 +16,7 @@ Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field o - https://github.com/Henryisnotavailable/Dompdf-Exploit-RCE - https://github.com/That-Guy-Steve/CVE-2022-28368-handler - https://github.com/rvizx/CVE-2022-28368 +- https://github.com/rvzsec/CVE-2022-28368 #### ExploitDB - https://www.exploit-db.com/exploits/51270 diff --git a/cves/2022/CVE-2022-29056.md b/cves/2022/CVE-2022-29056.md index bc8dfd5ec76..04ec42984cf 100644 --- a/cves/2022/CVE-2022-29056.md +++ b/cves/2022/CVE-2022-29056.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2022-29056 +- https://github.com/chessredoffsec/CVE-2022-29056 diff --git a/cves/2022/CVE-2022-29072.md b/cves/2022/CVE-2022-29072.md index 5ef22129b3e..6dba251d787 100644 --- a/cves/2022/CVE-2022-29072.md +++ b/cves/2022/CVE-2022-29072.md @@ -19,4 +19,5 @@ - https://github.com/rasan2001/CVE-2022-29072 - https://github.com/sentinelblue/CVE-2022-29072 - https://github.com/tiktb8/CVE-2022-29072 +- https://github.com/kagancapar/CVE-2022-29072 diff --git a/cves/2022/CVE-2022-29078.md b/cves/2022/CVE-2022-29078.md index 81e8671d778..1f72f89337c 100644 --- a/cves/2022/CVE-2022-29078.md +++ b/cves/2022/CVE-2022-29078.md @@ -40,6 +40,8 @@ The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows ser - https://github.com/yalinjob/ejs-demo-yalin - https://github.com/yalinjob/express-js-ya - https://github.com/yoitsmikeho/express-js-appbundle +- https://github.com/seal-sec-demo-2/JavaScript-Example +- https://github.com/taka3636/CVE-2022-29078 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29078.yaml diff --git a/cves/2022/CVE-2022-29464.md b/cves/2022/CVE-2022-29464.md index 44c75308cd4..f46a6b6ffbd 100644 --- a/cves/2022/CVE-2022-29464.md +++ b/cves/2022/CVE-2022-29464.md @@ -58,6 +58,8 @@ Certain WSO2 products allow unrestricted file upload with resultant remote code - https://github.com/r4x0r1337/-CVE-2022-29464 - https://github.com/superzerosec/CVE-2022-29464 - https://github.com/tufanturhan/wso2-rce-cve-2022-29464 +- https://github.com/dsssssssm/WSOB +- https://github.com/hakivvi/CVE-2022-29464 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29464.yaml diff --git a/cves/2022/CVE-2022-29597.md b/cves/2022/CVE-2022-29597.md index 0fc873c9da4..c4b20773463 100644 --- a/cves/2022/CVE-2022-29597.md +++ b/cves/2022/CVE-2022-29597.md @@ -13,5 +13,5 @@ Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local - https://github.com/TheGetch/CVE-2022-29597 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheGetch/CVE-2022-29597 diff --git a/cves/2022/CVE-2022-29598.md b/cves/2022/CVE-2022-29598.md index 6c97ddcd350..3db40bcd062 100644 --- a/cves/2022/CVE-2022-29598.md +++ b/cves/2022/CVE-2022-29598.md @@ -13,5 +13,5 @@ Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an re - https://github.com/TheGetch/CVE-2022-29598 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheGetch/CVE-2022-29598 diff --git a/cves/2022/CVE-2022-29799.md b/cves/2022/CVE-2022-29799.md index b45f335a007..d0118e26aec 100644 --- a/cves/2022/CVE-2022-29799.md +++ b/cves/2022/CVE-2022-29799.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/DDNvR/privelege_escalation - https://github.com/jfrog/nimbuspwn-tools +- https://github.com/joshuavanderpoll/NimbusPWN-CVE-2022-29799-29800 diff --git a/cves/2022/CVE-2022-29800.md b/cves/2022/CVE-2022-29800.md index 9c38db691c7..3c826324e49 100644 --- a/cves/2022/CVE-2022-29800.md +++ b/cves/2022/CVE-2022-29800.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/DDNvR/privelege_escalation - https://github.com/jfrog/nimbuspwn-tools +- https://github.com/ngtuonghung/nimbuspwn-CVE-2022-29800-CVE-2022-29799 diff --git a/cves/2022/CVE-2022-30024.md b/cves/2022/CVE-2022-30024.md index 1e7875a1fe4..194f88dc82d 100644 --- a/cves/2022/CVE-2022-30024.md +++ b/cves/2022/CVE-2022-30024.md @@ -13,5 +13,5 @@ A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ilizavr/CVE-2022-30024 diff --git a/cves/2022/CVE-2022-30075.md b/cves/2022/CVE-2022-30075.md index 83fff501e69..4085c683615 100644 --- a/cves/2022/CVE-2022-30075.md +++ b/cves/2022/CVE-2022-30075.md @@ -19,6 +19,8 @@ In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup f - https://github.com/M4fiaB0y/CVE-2022-30075 - https://github.com/SAJIDAMINE/CVE-2022-30075 - https://github.com/QuasyStellar/tplink-archer-root-exploit +- https://github.com/RhestCorp/TP-L-NK-SIZMA-EXPLO-T +- https://github.com/aaronsvk/CVE-2022-30075 #### ExploitDB - https://www.exploit-db.com/exploits/50962 diff --git a/cves/2022/CVE-2022-30190.md b/cves/2022/CVE-2022-30190.md index 3090ae5f603..3fa37d75db4 100644 --- a/cves/2022/CVE-2022-30190.md +++ b/cves/2022/CVE-2022-30190.md @@ -128,6 +128,11 @@ A remote code execution vulnerability exists when MSDT is called using the URL p - https://github.com/yeep1115/ICT287_CVE-2022-30190_Exploit - https://github.com/yrkuo/CVE-2022-30190 - https://github.com/eh050/follina-html-POC +- https://github.com/abbarhissarh/FollinaXploit +- https://github.com/alienkeric/CVE-2022-30190 +- https://github.com/czabatta/THM-Tempest +- https://github.com/kaleth4/CVE-2022-30190 +- https://github.com/shndnth/CVE-2022-30190 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/word_msdtjs_rce.rb diff --git a/cves/2022/CVE-2022-30292.md b/cves/2022/CVE-2022-30292.md index a2b9d500c7f..d11e40ab3a9 100644 --- a/cves/2022/CVE-2022-30292.md +++ b/cves/2022/CVE-2022-30292.md @@ -13,5 +13,5 @@ Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a cer - https://github.com/sprushed/CVE-2022-30292 #### Github -No PoCs found on GitHub currently. +- https://github.com/sprushed/CVE-2022-30292 diff --git a/cves/2022/CVE-2022-30333.md b/cves/2022/CVE-2022-30333.md index a3488fb2f58..48b0234904c 100644 --- a/cves/2022/CVE-2022-30333.md +++ b/cves/2022/CVE-2022-30333.md @@ -19,6 +19,7 @@ RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write t - https://github.com/aslitsecurity/Zimbra-CVE-2022-30333 - https://github.com/paradox0909/cve-2022-30333_online_rar_extracor - https://github.com/rbowes-r7/unrar-cve-2022-30333-poc +- https://github.com/RakhithJK/CVE-2022-30333 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/fileformat/unrar_cve_2022_30333.rb diff --git a/cves/2022/CVE-2022-31138.md b/cves/2022/CVE-2022-31138.md index 715dd093b3c..f93b5bebc01 100644 --- a/cves/2022/CVE-2022-31138.md +++ b/cves/2022/CVE-2022-31138.md @@ -13,5 +13,5 @@ mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an - https://github.com/ly1g3/Mailcow-CVE-2022-31138 #### Github -No PoCs found on GitHub currently. +- https://github.com/ly1g3/Mailcow-CVE-2022-31138 diff --git a/cves/2022/CVE-2022-31199.md b/cves/2022/CVE-2022-31199.md index a65a7bc8bda..48e468e78a5 100644 --- a/cves/2022/CVE-2022-31199.md +++ b/cves/2022/CVE-2022-31199.md @@ -14,5 +14,5 @@ Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/developerfred/CVE-2022-31199 diff --git a/cves/2022/CVE-2022-31245.md b/cves/2022/CVE-2022-31245.md index 8e27b2ce635..8983122304f 100644 --- a/cves/2022/CVE-2022-31245.md +++ b/cves/2022/CVE-2022-31245.md @@ -13,5 +13,5 @@ mailcow before 2022-05d allows a remote authenticated user to inject OS commands - https://github.com/ly1g3/Mailcow-CVE-2022-31245 #### Github -No PoCs found on GitHub currently. +- https://github.com/ly1g3/Mailcow-CVE-2022-31245 diff --git a/cves/2022/CVE-2022-31262.md b/cves/2022/CVE-2022-31262.md index b89f4374566..a20118c6a94 100644 --- a/cves/2022/CVE-2022-31262.md +++ b/cves/2022/CVE-2022-31262.md @@ -16,5 +16,5 @@ An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0 - https://www.youtube.com/watch?v=Bgdbx5TJShI #### Github -No PoCs found on GitHub currently. +- https://github.com/secure-77/CVE-2022-31262 diff --git a/cves/2022/CVE-2022-31630.md b/cves/2022/CVE-2022-31630.md index 46b597ba462..94a0d2c074c 100644 --- a/cves/2022/CVE-2022-31630.md +++ b/cves/2022/CVE-2022-31630.md @@ -16,5 +16,6 @@ In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() f No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sepkascurty-cpu/CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33 +- https://github.com/sepkascurty-cpu/php-exploit_cve-2022-31630 diff --git a/cves/2022/CVE-2022-31813.md b/cves/2022/CVE-2022-31813.md index 64535874203..aa45b2551e1 100644 --- a/cves/2022/CVE-2022-31813.md +++ b/cves/2022/CVE-2022-31813.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/dodiorne/cve-2022-31813 +- https://github.com/yiliufeng168/CVE-2022-31813 diff --git a/cves/2022/CVE-2022-31814.md b/cves/2022/CVE-2022-31814.md index e77a27ff5c0..37003606e53 100644 --- a/cves/2022/CVE-2022-31814.md +++ b/cves/2022/CVE-2022-31814.md @@ -22,6 +22,7 @@ pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrar - https://github.com/Madliife0/CVE-2022-31814 - https://github.com/TheUnknownSoul/CVE-2022-31814 - https://github.com/dkstar11q/CVE-2022-31814 +- https://github.com/sh4den/CVE-2022-31814 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31814.yaml diff --git a/cves/2022/CVE-2022-3218.md b/cves/2022/CVE-2022-3218.md index d6008234b34..0387e9cc503 100644 --- a/cves/2022/CVE-2022-3218.md +++ b/cves/2022/CVE-2022-3218.md @@ -17,6 +17,7 @@ Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) f #### Github - https://github.com/mermehr/MouseServer-1.7.8.5-RCE +- https://github.com/MoisesTapia/cve-2022-3218 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wifi_mouse_rce.rb diff --git a/cves/2022/CVE-2022-32199.md b/cves/2022/CVE-2022-32199.md index eb9f970db6c..adbff2d9e38 100644 --- a/cves/2022/CVE-2022-32199.md +++ b/cves/2022/CVE-2022-32199.md @@ -13,5 +13,5 @@ db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Del - https://github.com/Toxich4/CVE-2022-32199 #### Github -No PoCs found on GitHub currently. +- https://github.com/Toxich4/CVE-2022-32199 diff --git a/cves/2022/CVE-2022-32947.md b/cves/2022/CVE-2022-32947.md index 92eb4a92439..26db286da31 100644 --- a/cves/2022/CVE-2022-32947.md +++ b/cves/2022/CVE-2022-32947.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/asahilina/agx-exploit +- https://github.com/hoshinolina/agx-exploit diff --git a/cves/2022/CVE-2022-33098.md b/cves/2022/CVE-2022-33098.md index 8275e0bd096..bdcc726437d 100644 --- a/cves/2022/CVE-2022-33098.md +++ b/cves/2022/CVE-2022-33098.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/Ozozuz/Mangolia-CMS-Stored-XSS +- https://github.com/Ozozuz/Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098 #### ExploitDB - https://www.exploit-db.com/exploits/50976 diff --git a/cves/2022/CVE-2022-33171.md b/cves/2022/CVE-2022-33171.md index b76fbc228d6..0fd88d11abe 100644 --- a/cves/2022/CVE-2022-33171.md +++ b/cves/2022/CVE-2022-33171.md @@ -13,5 +13,5 @@ The findOne function in TypeORM before 0.3.0 can either be supplied with a strin - http://packetstormsecurity.com/files/168096/TypeORM-0.3.7-Information-Disclosure.html #### Github -No PoCs found on GitHub currently. +- https://github.com/open-flaw/CVE-2022-33171 diff --git a/cves/2022/CVE-2022-34265.md b/cves/2022/CVE-2022-34265.md index 1dd0f822620..553e6f31b41 100644 --- a/cves/2022/CVE-2022-34265.md +++ b/cves/2022/CVE-2022-34265.md @@ -19,3 +19,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-34265.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/django/CVE-2022-34265 diff --git a/cves/2022/CVE-2022-35131.md b/cves/2022/CVE-2022-35131.md index 141b289d945..67804a54afa 100644 --- a/cves/2022/CVE-2022-35131.md +++ b/cves/2022/CVE-2022-35131.md @@ -14,5 +14,5 @@ Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted paylo - https://github.com/ly1g3/Joplin-CVE-2022-35131 #### Github -No PoCs found on GitHub currently. +- https://github.com/ly1g3/Joplin-CVE-2022-35131 diff --git a/cves/2022/CVE-2022-35411.md b/cves/2022/CVE-2022-35411.md index 618f89eedca..6283e7a35ef 100644 --- a/cves/2022/CVE-2022-35411.md +++ b/cves/2022/CVE-2022-35411.md @@ -16,6 +16,7 @@ rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs whe #### Github - https://github.com/CSpanias/rpc-rce.py - https://github.com/ehtec/rpcpy-exploit +- https://github.com/Neo-okami/CVE-2022-35411 #### ExploitDB - https://www.exploit-db.com/exploits/50983 diff --git a/cves/2022/CVE-2022-35513.md b/cves/2022/CVE-2022-35513.md index 9b985c10810..952942a87c6 100644 --- a/cves/2022/CVE-2022-35513.md +++ b/cves/2022/CVE-2022-35513.md @@ -15,6 +15,7 @@ The Blink1Control2 application <= 2.2.7 uses weak password encryption and an ins #### Github - https://github.com/security-anthem/IoTPene +- https://github.com/p1ckzi/CVE-2022-35513 #### ExploitDB - https://www.exploit-db.com/exploits/51014 diff --git a/cves/2022/CVE-2022-35650.md b/cves/2022/CVE-2022-35650.md index b3fc0b5f559..1ac33c0e82f 100644 --- a/cves/2022/CVE-2022-35650.md +++ b/cves/2022/CVE-2022-35650.md @@ -13,5 +13,5 @@ The vulnerability was found in Moodle, occurs due to input validation error when No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Gr4y-r0se/CVE-2022-35650 diff --git a/cves/2022/CVE-2022-35899.md b/cves/2022/CVE-2022-35899.md index dc3e2192e5b..bb7fd490e32 100644 --- a/cves/2022/CVE-2022-35899.md +++ b/cves/2022/CVE-2022-35899.md @@ -15,7 +15,7 @@ There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSD - https://www.exploit-db.com/exploits/50985 #### Github -No PoCs found on GitHub currently. +- https://github.com/angelopioamirante/CVE-2022-35899 #### ExploitDB - https://www.exploit-db.com/exploits/50985 diff --git a/cves/2022/CVE-2022-3590.md b/cves/2022/CVE-2022-3590.md index 373b6bbd3e9..4f22cb4bb40 100644 --- a/cves/2022/CVE-2022-3590.md +++ b/cves/2022/CVE-2022-3590.md @@ -14,7 +14,7 @@ WordPress is affected by an unauthenticated blind SSRF in the pingback feature. - https://wpscan.com/vulnerability/c8814e6e-78b3-4f63-a1d3-6906a84c1f11 #### Github -No PoCs found on GitHub currently. +- https://github.com/TJouleL/WordPress-6.9.1-Blind-SSRF #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3590.yaml diff --git a/cves/2022/CVE-2022-35914.md b/cves/2022/CVE-2022-35914.md index 53bdf47dcec..b28fd410a7d 100644 --- a/cves/2022/CVE-2022-35914.md +++ b/cves/2022/CVE-2022-35914.md @@ -28,6 +28,7 @@ - https://github.com/reewardius/myown-nuclei-poc - https://github.com/senderend/CVE-2022-35914 - https://github.com/xiaobaiakai/CVE-2022-35914 +- https://github.com/cyb3rk0ala/CVE-2022-35914-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35914.yaml diff --git a/cves/2022/CVE-2022-36067.md b/cves/2022/CVE-2022-36067.md index 8658ccd0b12..6a45194294f 100644 --- a/cves/2022/CVE-2022-36067.md +++ b/cves/2022/CVE-2022-36067.md @@ -16,4 +16,5 @@ vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in mo #### Github - https://github.com/0x1nsomnia/CVE-2022-36067-vm2-POC-webapp - https://github.com/Prathamrajgor/Exploit-For-CVE-2022-36067 +- https://github.com/prathamhasnotchanged/Exploit-For-CVE-2022-36067 diff --git a/cves/2022/CVE-2022-36200.md b/cves/2022/CVE-2022-36200.md index 69118c65f79..8e545a1a15c 100644 --- a/cves/2022/CVE-2022-36200.md +++ b/cves/2022/CVE-2022-36200.md @@ -13,5 +13,5 @@ In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in UR - https://github.com/afaq1337/CVE-2022-36200 #### Github -No PoCs found on GitHub currently. +- https://github.com/afaq1337/CVE-2022-36200 diff --git a/cves/2022/CVE-2022-36231.md b/cves/2022/CVE-2022-36231.md index 2391eacec2e..344ab10fbcb 100644 --- a/cves/2022/CVE-2022-36231.md +++ b/cves/2022/CVE-2022-36231.md @@ -13,5 +13,5 @@ pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses bac - https://github.com/affix/CVE-2022-36231 #### Github -No PoCs found on GitHub currently. +- https://github.com/affix/CVE-2022-36231 diff --git a/cves/2022/CVE-2022-36271.md b/cves/2022/CVE-2022-36271.md index dede33a9103..4e8696e294a 100644 --- a/cves/2022/CVE-2022-36271.md +++ b/cves/2022/CVE-2022-36271.md @@ -13,5 +13,5 @@ Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. - https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271 #### Github -No PoCs found on GitHub currently. +- https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271 diff --git a/cves/2022/CVE-2022-36446.md b/cves/2022/CVE-2022-36446.md index 4dcb63eddb0..389245d9038 100644 --- a/cves/2022/CVE-2022-36446.md +++ b/cves/2022/CVE-2022-36446.md @@ -19,6 +19,7 @@ software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command. - https://github.com/emirpolatt/CVE-2022-36446 - https://github.com/monzaviman/CVE_2022_36446 - https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE +- https://github.com/darnabin/CVE-2022-36446-Webmin-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36446.yaml diff --git a/cves/2022/CVE-2022-36804.md b/cves/2022/CVE-2022-36804.md index f15433d8868..0948e8976ac 100644 --- a/cves/2022/CVE-2022-36804.md +++ b/cves/2022/CVE-2022-36804.md @@ -40,6 +40,9 @@ Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 befor - https://github.com/tahtaciburak/cve-2022-36804 - https://github.com/vj4336/CVE-2022-36804-ReverseShell - https://github.com/walnutsecurity/cve-2022-36804 +- https://github.com/DanielHallbro/CVE-2022-36804-Bitbucket-RCE-Analysis +- https://github.com/Junohea/cve-2022-36804 +- https://github.com/sh4den/CVE-2022-36804 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36804.yaml diff --git a/cves/2022/CVE-2022-36934.md b/cves/2022/CVE-2022-36934.md index 43ad3da7a34..16204d8a502 100644 --- a/cves/2022/CVE-2022-36934.md +++ b/cves/2022/CVE-2022-36934.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/Teexo/mailenable-cve-2022-36934 +- https://github.com/tdawg506/mailenable-cve-2022-36934 diff --git a/cves/2022/CVE-2022-37122.md b/cves/2022/CVE-2022-37122.md index 53092a78f8e..53ee29c087b 100644 --- a/cves/2022/CVE-2022-37122.md +++ b/cves/2022/CVE-2022-37122.md @@ -14,7 +14,7 @@ Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application S - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5709.php #### Github -No PoCs found on GitHub currently. +- https://github.com/bughuntar/CVE-2022-37122-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37122.yaml diff --git a/cves/2022/CVE-2022-37704.md b/cves/2022/CVE-2022-37704.md index 056c5e08bb2..54b23aca869 100644 --- a/cves/2022/CVE-2022-37704.md +++ b/cves/2022/CVE-2022-37704.md @@ -13,5 +13,5 @@ Amanda 3.5.1 allows privilege escalation from the regular user backup to root. T - https://github.com/MaherAzzouzi/CVE-2022-37704 #### Github -No PoCs found on GitHub currently. +- https://github.com/MaherAzzouzi/CVE-2022-37704 diff --git a/cves/2022/CVE-2022-37705.md b/cves/2022/CVE-2022-37705.md index ecbdf69a415..68045611b78 100644 --- a/cves/2022/CVE-2022-37705.md +++ b/cves/2022/CVE-2022-37705.md @@ -13,5 +13,5 @@ A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user c - https://github.com/MaherAzzouzi/CVE-2022-37705 #### Github -No PoCs found on GitHub currently. +- https://github.com/MaherAzzouzi/CVE-2022-37705 diff --git a/cves/2022/CVE-2022-37706.md b/cves/2022/CVE-2022-37706.md index 79cfcf4d5be..326d1a17ff6 100644 --- a/cves/2022/CVE-2022-37706.md +++ b/cves/2022/CVE-2022-37706.md @@ -20,6 +20,7 @@ enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain priv - https://github.com/d3ndr1t30x/CVE-2022-37706 - https://github.com/junnythemarksman/CVE-2022-37706 - https://github.com/sanan2004/CVE-2022-37706 +- https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit #### ExploitDB - https://www.exploit-db.com/exploits/51180 diff --git a/cves/2022/CVE-2022-37969.md b/cves/2022/CVE-2022-37969.md index 2bce0418f4a..c6e46c7a2f4 100644 --- a/cves/2022/CVE-2022-37969.md +++ b/cves/2022/CVE-2022-37969.md @@ -51,4 +51,6 @@ No PoCs from references. - https://github.com/NoobCat2000/CVE-2022-37969 - https://github.com/fortra/CVE-2022-37969 - https://github.com/grass341/CVE-2022-37969 +- https://github.com/nhh9905/CVE-2022-37969 +- https://github.com/uname1able/CVE-2022-37969 diff --git a/cves/2022/CVE-2022-38181.md b/cves/2022/CVE-2022-38181.md index ff36fc8f38f..d27b7797c2c 100644 --- a/cves/2022/CVE-2022-38181.md +++ b/cves/2022/CVE-2022-38181.md @@ -21,4 +21,5 @@ The Arm Mali GPU kernel driver allows unprivileged users to access freed memory - https://github.com/Pro-me3us/CVE_2022_38181_Gazelle - https://github.com/Pro-me3us/CVE_2022_38181_Raven - https://github.com/R0rt1z2/CVE-2022-38181 +- https://github.com/soralis0912/CVE-2022-38181-aristotle diff --git a/cves/2022/CVE-2022-38694.md b/cves/2022/CVE-2022-38694.md index d72ada9757f..cbc18b73173 100644 --- a/cves/2022/CVE-2022-38694.md +++ b/cves/2022/CVE-2022-38694.md @@ -14,4 +14,11 @@ No PoCs from references. #### Github - https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader +- https://github.com/AureliusIvan/ubl-itel-s23 +- https://github.com/AureliusIvanInvenioPTL/ubl-itel-s23 +- https://github.com/Gadorach/vankyo-s30-bootloader-unlock +- https://github.com/Gopartner/realme-c53-unlock-root +- https://github.com/JoshAtticus/ztewaste +- https://github.com/LeoChen-CoreMind/spd_flasher +- https://github.com/sloden1977-lang/ROOT-ZTE-X1001 diff --git a/cves/2022/CVE-2022-38813.md b/cves/2022/CVE-2022-38813.md index daeb2f20d06..c2976c8c565 100644 --- a/cves/2022/CVE-2022-38813.md +++ b/cves/2022/CVE-2022-38813.md @@ -15,5 +15,5 @@ PHPGurukul Blood Donor Management System 1.0 does not properly restrict access t - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-38813-privilege-escalations-in-blood-donor-management-system-v1-0 #### Github -No PoCs found on GitHub currently. +- https://github.com/RashidKhanPathan/CVE-2022-38813 diff --git a/cves/2022/CVE-2022-39227.md b/cves/2022/CVE-2022-39227.md index f90e8c7da27..94ec64f685a 100644 --- a/cves/2022/CVE-2022-39227.md +++ b/cves/2022/CVE-2022-39227.md @@ -15,4 +15,5 @@ python-jwt is a module for generating and verifying JSON Web Tokens. Versions pr #### Github - https://github.com/NoSpaceAvailable/CVE-2022-39227 - https://github.com/user0x1337/CVE-2022-39227 +- https://github.com/melikesraoz/cve-2022-39227-jwt-auth-bypass-demo diff --git a/cves/2022/CVE-2022-40032.md b/cves/2022/CVE-2022-40032.md index 23b4f7c2835..350ad395ff4 100644 --- a/cves/2022/CVE-2022-40032.md +++ b/cves/2022/CVE-2022-40032.md @@ -14,7 +14,7 @@ SQL Injection vulnerability in Simple Task Managing System version 1.0 in login. - https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### Github -No PoCs found on GitHub currently. +- https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40032.yaml diff --git a/cves/2022/CVE-2022-40297.md b/cves/2022/CVE-2022-40297.md index 4e1d9cb6b73..e505b197abd 100644 --- a/cves/2022/CVE-2022-40297.md +++ b/cves/2022/CVE-2022-40297.md @@ -13,5 +13,5 @@ UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a pr - https://github.com/filipkarc/PoC-ubuntutouch-pin-privesc #### Github -No PoCs found on GitHub currently. +- https://github.com/filipkarc/PoC-ubuntutouch-pin-privesc diff --git a/cves/2022/CVE-2022-40347.md b/cves/2022/CVE-2022-40347.md index 760db5dde09..a83e75b4c0d 100644 --- a/cves/2022/CVE-2022-40347.md +++ b/cves/2022/CVE-2022-40347.md @@ -14,7 +14,7 @@ SQL Injection vulnerability in Intern Record System version 1.0 in /intern/contr - https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### Github -No PoCs found on GitHub currently. +- https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated #### ExploitDB - https://www.exploit-db.com/exploits/51274 diff --git a/cves/2022/CVE-2022-40348.md b/cves/2022/CVE-2022-40348.md index 6e302153c41..e380e64db63 100644 --- a/cves/2022/CVE-2022-40348.md +++ b/cves/2022/CVE-2022-40348.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in - https://github.com/h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated #### Github -No PoCs found on GitHub currently. +- https://github.com/h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated diff --git a/cves/2022/CVE-2022-40471.md b/cves/2022/CVE-2022-40471.md index 84fc07a1ae6..f29723e43da 100644 --- a/cves/2022/CVE-2022-40471.md +++ b/cves/2022/CVE-2022-40471.md @@ -14,7 +14,8 @@ Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacke - https://github.com/RashidKhanPathan/CVE-2022-40471 #### Github -No PoCs found on GitHub currently. +- https://github.com/Dharan10/CVE-2022-40471 +- https://github.com/RashidKhanPathan/CVE-2022-40471 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/clinic_pms_fileupload_rce.rb diff --git a/cves/2022/CVE-2022-40684.md b/cves/2022/CVE-2022-40684.md index ff750278b4f..c2f63ac143e 100644 --- a/cves/2022/CVE-2022-40684.md +++ b/cves/2022/CVE-2022-40684.md @@ -39,6 +39,7 @@ An authentication bypass using an alternate path or channel [CWE-288] in Fortine - https://github.com/secunnix/CVE-2022-40684 - https://github.com/und3sc0n0c1d0/CVE-2022-40684 - https://github.com/z-bool/CVE-2022-40684 +- https://github.com/ccordeiro/CVE-2022-40684 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40684.yaml diff --git a/cves/2022/CVE-2022-41358.md b/cves/2022/CVE-2022-41358.md index 73482e8bb3a..ceed766800a 100644 --- a/cves/2022/CVE-2022-41358.md +++ b/cves/2022/CVE-2022-41358.md @@ -16,7 +16,7 @@ A stored cross-site scripting (XSS) vulnerability in Garage Management System v1 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2022-41358 #### Github -No PoCs found on GitHub currently. +- https://github.com/thecasual/CVE-2022-41358 #### ExploitDB - https://www.exploit-db.com/exploits/52238 diff --git a/cves/2022/CVE-2022-41401.md b/cves/2022/CVE-2022-41401.md index 22e7eee03d4..ab0e2d10540 100644 --- a/cves/2022/CVE-2022-41401.md +++ b/cves/2022/CVE-2022-41401.md @@ -13,5 +13,5 @@ OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability - https://github.com/ixSly/CVE-2022-41401 #### Github -No PoCs found on GitHub currently. +- https://github.com/ixSly/CVE-2022-41401 diff --git a/cves/2022/CVE-2022-41445.md b/cves/2022/CVE-2022-41445.md index f0dce4b7575..63483235457 100644 --- a/cves/2022/CVE-2022-41445.md +++ b/cves/2022/CVE-2022-41445.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in Record Management System using Cod - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-41445-cross-site-scripting-in-teachers-record-management-system-using-codeignitor #### Github -No PoCs found on GitHub currently. +- https://github.com/RashidKhanPathan/CVE-2022-41445 diff --git a/cves/2022/CVE-2022-41678.md b/cves/2022/CVE-2022-41678.md index c61226cdecd..daa1f39004a 100644 --- a/cves/2022/CVE-2022-41678.md +++ b/cves/2022/CVE-2022-41678.md @@ -16,6 +16,10 @@ No PoCs from references. #### Github - https://github.com/mbadanoiu/CVE-2022-41678 +- https://github.com/URJACK2025/CVE-2022-41678 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41678.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2022-41678 diff --git a/cves/2022/CVE-2022-41840.md b/cves/2022/CVE-2022-41840.md index 1e6f21556fc..3f03f7dfc03 100644 --- a/cves/2022/CVE-2022-41840.md +++ b/cves/2022/CVE-2022-41840.md @@ -13,7 +13,7 @@ Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/PrinceAikinsBaidoo/CVE-2022-41840-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41840.yaml diff --git a/cves/2022/CVE-2022-42046.md b/cves/2022/CVE-2022-42046.md index 3c013f953fa..f3354f76bf9 100644 --- a/cves/2022/CVE-2022-42046.md +++ b/cves/2022/CVE-2022-42046.md @@ -13,5 +13,5 @@ wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to p - https://github.com/kkent030315/CVE-2022-42046 #### Github -No PoCs found on GitHub currently. +- https://github.com/kkent030315/CVE-2022-42046 diff --git a/cves/2022/CVE-2022-42176.md b/cves/2022/CVE-2022-42176.md index 66d982ea08e..e8d7e5a9cca 100644 --- a/cves/2022/CVE-2022-42176.md +++ b/cves/2022/CVE-2022-42176.md @@ -14,5 +14,5 @@ In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration - https://github.com/soy-oreocato/CVE-Advisories/tree/main/PapiQuieroPollo00 #### Github -No PoCs found on GitHub currently. +- https://github.com/soy-oreocato/CVE-2022-42176 diff --git a/cves/2022/CVE-2022-4223.md b/cves/2022/CVE-2022-4223.md index c451e9e2b8a..6c073af0ff5 100644 --- a/cves/2022/CVE-2022-4223.md +++ b/cves/2022/CVE-2022-4223.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4223.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pgadmin/CVE-2022-4223 diff --git a/cves/2022/CVE-2022-42248.md b/cves/2022/CVE-2022-42248.md index d92010e5754..3ce748ef7f7 100644 --- a/cves/2022/CVE-2022-42248.md +++ b/cves/2022/CVE-2022-42248.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/Ozozuz/Qlik-View-Stored-XSS +- https://github.com/Ozozuz/Qlik-View-12.60-Including-SR-Stored-Cross-Site-Scripting-CVE-2022-42248 diff --git a/cves/2022/CVE-2022-42475.md b/cves/2022/CVE-2022-42475.md index 237d1e7a6a1..79cc425dc11 100644 --- a/cves/2022/CVE-2022-42475.md +++ b/cves/2022/CVE-2022-42475.md @@ -39,6 +39,7 @@ No PoCs from references. - https://github.com/rio128128/CVE-2023-27997-POC - https://github.com/scrt/cve-2022-42475 - https://github.com/uLl0a/cve-2022-42475-poc +- https://github.com/ArthurHendrich/CVE-2022-42475-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2022/CVE-2022-42475.yaml diff --git a/cves/2022/CVE-2022-42889.md b/cves/2022/CVE-2022-42889.md index c57b80d4a4b..0dfc6c055bb 100644 --- a/cves/2022/CVE-2022-42889.md +++ b/cves/2022/CVE-2022-42889.md @@ -58,6 +58,10 @@ Apache Commons Text performs variable interpolation, allowing properties to be d - https://github.com/sunnyvale-it/CVE-2022-42889-PoC - https://github.com/uk0/cve-2022-42889-intercept - https://github.com/vickyaryan7/Text4shell-exploit +- https://github.com/Goultarde/CVE-2022-42889-text4shell +- https://github.com/Hkaeeeer/CVE-2022-42889 +- https://github.com/KosmicOwl045/ICT287-CVE-2022-42889 +- https://github.com/alealeluyah/CVE-2022-42889-Text4Shell-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-42889.yaml diff --git a/cves/2022/CVE-2022-43144.md b/cves/2022/CVE-2022-43144.md index b2b420362bf..29ad2775235 100644 --- a/cves/2022/CVE-2022-43144.md +++ b/cves/2022/CVE-2022-43144.md @@ -13,5 +13,5 @@ A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 all - https://github.com/mudassiruddin/CVE-2022-43144-Stored-XSS #### Github -No PoCs found on GitHub currently. +- https://github.com/mudassiruddin/CVE-2022-43144-Stored-XSS diff --git a/cves/2022/CVE-2022-4361.md b/cves/2022/CVE-2022-4361.md index 78552c49f4e..1453e692a6c 100644 --- a/cves/2022/CVE-2022-4361.md +++ b/cves/2022/CVE-2022-4361.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/shoucheng3/keycloak__keycloak_CVE-2022-4361_21-1-1 +- https://github.com/faccimatteo/CVE-2022-4361 diff --git a/cves/2022/CVE-2022-43973.md b/cves/2022/CVE-2022-43973.md index c77b60377bb..284cb9937f7 100644 --- a/cves/2022/CVE-2022-43973.md +++ b/cves/2022/CVE-2022-43973.md @@ -15,5 +15,5 @@ An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G - https://youtu.be/TeWAmZaKQ_w #### Github -No PoCs found on GitHub currently. +- https://github.com/UmbertoDellaMonica/Linksys-WRT54GL-Exploitation diff --git a/cves/2022/CVE-2022-44215.md b/cves/2022/CVE-2022-44215.md index ba8dc5ad19f..a57e3917c49 100644 --- a/cves/2022/CVE-2022-44215.md +++ b/cves/2022/CVE-2022-44215.md @@ -13,5 +13,5 @@ There is an open redirect vulnerability in Titan FTP server 19.0 and below. User - https://github.com/JBalanza/CVE-2022-44215 #### Github -No PoCs found on GitHub currently. +- https://github.com/JBalanza/CVE-2022-44215 diff --git a/cves/2022/CVE-2022-44268.md b/cves/2022/CVE-2022-44268.md index a4c1cf3de04..98388f028a5 100644 --- a/cves/2022/CVE-2022-44268.md +++ b/cves/2022/CVE-2022-44268.md @@ -42,6 +42,12 @@ ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a P - https://github.com/nfm/heroku-CVE-2022-44268-reproduction - https://github.com/voidz0r/CVE-2022-44268 - https://github.com/y1nglamore/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment +- https://github.com/atici/ImageMagick-CVE-2022-44268-PoC +- https://github.com/jnschaeffer/cve-2022-44268-detector +- https://github.com/k-javaman12/CVE-2022-44268- #### ExploitDB - https://www.exploit-db.com/exploits/51261 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/imagemagick/CVE-2022-44268 diff --git a/cves/2022/CVE-2022-44276.md b/cves/2022/CVE-2022-44276.md index 329988f3785..12705468327 100644 --- a/cves/2022/CVE-2022-44276.md +++ b/cves/2022/CVE-2022-44276.md @@ -13,5 +13,5 @@ In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions r - https://github.com/HerrLeStrate/CVE-2022-44276-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/HerrLeStrate/CVE-2022-44276-PoC diff --git a/cves/2022/CVE-2022-44312.md b/cves/2022/CVE-2022-44312.md index 5b04bfc597e..b5227a0a8a8 100644 --- a/cves/2022/CVE-2022-44312.md +++ b/cves/2022/CVE-2022-44312.md @@ -13,5 +13,5 @@ PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the Expr No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Halcy0nic/CVEs-for-picoc-3.2.2 diff --git a/cves/2022/CVE-2022-44645.md b/cves/2022/CVE-2022-44645.md index 7458657785b..d1a33827d61 100644 --- a/cves/2022/CVE-2022-44645.md +++ b/cves/2022/CVE-2022-44645.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/linkis/CVE-2022-44645 diff --git a/cves/2022/CVE-2022-45600.md b/cves/2022/CVE-2022-45600.md index 8a7a7285e13..047cfdf6689 100644 --- a/cves/2022/CVE-2022-45600.md +++ b/cves/2022/CVE-2022-45600.md @@ -13,5 +13,5 @@ Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage - https://github.com/ethancunt/CVE-2022-45600 #### Github -No PoCs found on GitHub currently. +- https://github.com/ethancunt/CVE-2022-45600 diff --git a/cves/2022/CVE-2022-46169.md b/cves/2022/CVE-2022-46169.md index 96248f901d9..4f9758a96f5 100644 --- a/cves/2022/CVE-2022-46169.md +++ b/cves/2022/CVE-2022-46169.md @@ -57,6 +57,10 @@ No PoCs from references. - https://github.com/taythebot/CVE-2022-46169 - https://github.com/yassinebk/CVE-2022-46169 - https://github.com/K4PXD/CVE-2022-46169 +- https://github.com/0x0Jackal/CVE-2022-46169 +- https://github.com/nou-man/CVE-2022-46169 +- https://github.com/sh4den/CVE-2022-46169 +- https://github.com/svchost9913/CVE-2022-46169_unauth_remote_code_execution #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46169.yaml @@ -66,3 +70,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2022-46169 diff --git a/cves/2022/CVE-2022-46364.md b/cves/2022/CVE-2022-46364.md index 4901384970f..ee8c8b74084 100644 --- a/cves/2022/CVE-2022-46364.md +++ b/cves/2022/CVE-2022-46364.md @@ -13,5 +13,10 @@ A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM reque No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0xmid00/CVE-2022-46364-poc +- https://github.com/Shashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC +- https://github.com/c0gnit00/CVE-2022-46364 +- https://github.com/cybermaksx/CVE-2022-46364-Proof-of-the-concept +- https://github.com/jwsly12/CVE-2022-46364-htb-ctf +- https://github.com/kasem545/CVE-2022-46364-Poc diff --git a/cves/2022/CVE-2022-46395.md b/cves/2022/CVE-2022-46395.md index 7512476ec20..85508d49cfc 100644 --- a/cves/2022/CVE-2022-46395.md +++ b/cves/2022/CVE-2022-46395.md @@ -18,4 +18,5 @@ An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user - https://github.com/Pro-me3us/CVE_2022_46395_Gazelle - https://github.com/Pro-me3us/CVE_2022_46395_Raven - https://github.com/SmileTabLabo/CVE-2022-46395 +- https://github.com/Gao-Zuin/cve-2022-46395-qemu diff --git a/cves/2022/CVE-2022-47130.md b/cves/2022/CVE-2022-47130.md index 855deb56771..1c8009b5fd0 100644 --- a/cves/2022/CVE-2022-47130.md +++ b/cves/2022/CVE-2022-47130.md @@ -14,5 +14,5 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discoun - https://www.linkedin.com/in/xvinicius/ #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2022-47130 diff --git a/cves/2022/CVE-2022-47131.md b/cves/2022/CVE-2022-47131.md index 7e6f8043f69..f190ff1828c 100644 --- a/cves/2022/CVE-2022-47131.md +++ b/cves/2022/CVE-2022-47131.md @@ -14,5 +14,5 @@ A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attack - https://www.linkedin.com/in/xvinicius/ #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2022-47131 diff --git a/cves/2022/CVE-2022-47447.md b/cves/2022/CVE-2022-47447.md index 32c96c6bc0b..f1051b8f31d 100644 --- a/cves/2022/CVE-2022-47447.md +++ b/cves/2022/CVE-2022-47447.md @@ -13,4 +13,4 @@ Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yup-Ivan/CVE-2022-47447 diff --git a/cves/2022/CVE-2022-47966.md b/cves/2022/CVE-2022-47966.md index 5203dc4c200..160f6815016 100644 --- a/cves/2022/CVE-2022-47966.md +++ b/cves/2022/CVE-2022-47966.md @@ -20,6 +20,8 @@ Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through #### Github - https://github.com/shameem-testing/PoC-for-ME-SAML-Vulnerability +- https://github.com/horizon3ai/CVE-2022-47966 +- https://github.com/sh4den/CVE-2022-47966 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47966.yaml diff --git a/cves/2022/CVE-2022-48311.md b/cves/2022/CVE-2022-48311.md index 2ec77976f27..492fbbefaa8 100644 --- a/cves/2022/CVE-2022-48311.md +++ b/cves/2022/CVE-2022-48311.md @@ -13,5 +13,5 @@ - https://github.com/swzhouu/CVE-2022-48311 #### Github -No PoCs found on GitHub currently. +- https://github.com/swzhouu/CVE-2022-48311 diff --git a/cves/2023/CVE-2023-0179.md b/cves/2023/CVE-2023-0179.md index a34baabaf87..2e7002cfec9 100644 --- a/cves/2023/CVE-2023-0179.md +++ b/cves/2023/CVE-2023-0179.md @@ -16,4 +16,6 @@ A buffer overflow vulnerability was found in the Netfilter subsystem in the Linu #### Github - https://github.com/H4K6/CVE-2023-0179-PoC - https://github.com/TurtleARM/CVE-2023-0179-PoC +- https://github.com/prabeershakya/CVE-2023-0179-POC- +- https://github.com/shakyanayann/CVE-2023-0179 diff --git a/cves/2023/CVE-2023-0214.md b/cves/2023/CVE-2023-0214.md index e424f1404e3..e83877a15e7 100644 --- a/cves/2023/CVE-2023-0214.md +++ b/cves/2023/CVE-2023-0214.md @@ -15,7 +15,7 @@ A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior - https://kcm.trellix.com/corporate/index?page=content&id=SB10393 #### Github -No PoCs found on GitHub currently. +- https://github.com/0pts/CVE-2023-0214 #### ExploitDB - https://www.exploit-db.com/exploits/51237 diff --git a/cves/2023/CVE-2023-0297.md b/cves/2023/CVE-2023-0297.md index 200ebb362c9..91c464c89cc 100644 --- a/cves/2023/CVE-2023-0297.md +++ b/cves/2023/CVE-2023-0297.md @@ -20,6 +20,7 @@ Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. - https://github.com/bAuh0lz/CVE-2023-0297_Pre-auth_RCE_in_pyLoad - https://github.com/btar1gan/exploit_CVE-2023-0297 - https://github.com/overgrowncarrot1/CVE-2023-0297 +- https://github.com/hazeyez/CVE-2023-0297 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0297.yaml diff --git a/cves/2023/CVE-2023-0386.md b/cves/2023/CVE-2023-0386.md index 6b478725337..ada435f1172 100644 --- a/cves/2023/CVE-2023-0386.md +++ b/cves/2023/CVE-2023-0386.md @@ -33,6 +33,9 @@ A flaw was found in the Linux kernel, where unauthorized access to the execution - https://github.com/sxlmnwb/CVE-2023-0386 - https://github.com/veritas501/CVE-2023-0386 - https://github.com/xkaneiki/CVE-2023-0386 +- https://github.com/dragosbanica/CVE-2023-0386_POC +- https://github.com/huovnn/CVE-2023-0386-go-poc +- https://github.com/pwncone/CVE-2023-0386-OverlayFS #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb diff --git a/cves/2023/CVE-2023-0669.md b/cves/2023/CVE-2023-0669.md index ddf4b9f256c..6939a869c8f 100644 --- a/cves/2023/CVE-2023-0669.md +++ b/cves/2023/CVE-2023-0669.md @@ -20,6 +20,7 @@ Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication - https://github.com/Avento/CVE-2023-0669 - https://github.com/cataiovita/CVE-2023-0669 - https://github.com/cataliniovita/CVE-2023-0669 +- https://github.com/zakaria-laouani/cve-2023-0669-simulation #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0669.yaml diff --git a/cves/2023/CVE-2023-1189.md b/cves/2023/CVE-2023-1189.md index 3534f325035..faa705add92 100644 --- a/cves/2023/CVE-2023-1189.md +++ b/cves/2023/CVE-2023-1189.md @@ -15,5 +15,5 @@ In WiseCleaner Wise Folder Hider 4.4.3.202 wurde eine problematische Schwachstel - https://vuldb.com/?id.222361 #### Github -No PoCs found on GitHub currently. +- https://github.com/le0s1mba/CVE-2023-1189 diff --git a/cves/2023/CVE-2023-1773.md b/cves/2023/CVE-2023-1773.md index a999671346a..aa4dc2adb3b 100644 --- a/cves/2023/CVE-2023-1773.md +++ b/cves/2023/CVE-2023-1773.md @@ -14,5 +14,5 @@ In Rockoa 2.3.2 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eing No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/C1oudfL0w0/CVE-2023-1773-Exploit diff --git a/cves/2023/CVE-2023-20052.md b/cves/2023/CVE-2023-20052.md index f3920568daf..560d7951eb9 100644 --- a/cves/2023/CVE-2023-20052.md +++ b/cves/2023/CVE-2023-20052.md @@ -60,4 +60,5 @@ No PoCs from references. #### Github - https://github.com/cY83rR0H1t/CVE-2023-20052 - https://github.com/nokn0wthing/CVE-2023-20052 +- https://github.com/tralsesec/CVE-2023-20052 diff --git a/cves/2023/CVE-2023-20198.md b/cves/2023/CVE-2023-20198.md index 2c9e0f79309..99523a41370 100644 --- a/cves/2023/CVE-2023-20198.md +++ b/cves/2023/CVE-2023-20198.md @@ -222,6 +222,8 @@ Cisco is providing an update for the ongoing investigation into observed exploit - https://github.com/securityphoenix/cisco-CVE-2023-20198-tester - https://github.com/smokeintheshell/CVE-2023-20198 - https://github.com/sohaibeb/CVE-2023-20198 +- https://github.com/Gill-Singh-A/CVE-2023-20198-Exploit +- https://github.com/djayaGit/cve-2023-20198-poc-cisco #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20198.yaml diff --git a/cves/2023/CVE-2023-20564.md b/cves/2023/CVE-2023-20564.md index 9fe75f64a1c..425f5389945 100644 --- a/cves/2023/CVE-2023-20564.md +++ b/cves/2023/CVE-2023-20564.md @@ -14,5 +14,5 @@ Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004 #### Github -No PoCs found on GitHub currently. +- https://github.com/NtGabrielGomes/CVE-2023-20564 diff --git a/cves/2023/CVE-2023-20938.md b/cves/2023/CVE-2023-20938.md index 5fd3d9f8dcc..89190edef72 100644 --- a/cves/2023/CVE-2023-20938.md +++ b/cves/2023/CVE-2023-20938.md @@ -16,4 +16,7 @@ No PoCs from references. #### Github - https://github.com/anansi2safe/CVE-2023-20938 - https://github.com/sunofva/FosterFix +- https://github.com/0xAtharv/CVE-2023-20938-Public +- https://github.com/byt3quester/CVE-2023-20938-poc +- https://github.com/jaf0rk/CVE-2023-20938 diff --git a/cves/2023/CVE-2023-21554.md b/cves/2023/CVE-2023-21554.md index fa77ee833cd..6232f867370 100644 --- a/cves/2023/CVE-2023-21554.md +++ b/cves/2023/CVE-2023-21554.md @@ -51,6 +51,7 @@ No PoCs from references. - https://github.com/leongxudong/MSMQ-Vulnerability - https://github.com/leongxudong/MSMQ-Vulnerbaility - https://github.com/zoemurmure/CVE-2023-21554-PoC +- https://github.com/shootweb/CVE-2023-21554 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/msmq/cve_2023_21554_queuejumper.rb diff --git a/cves/2023/CVE-2023-21716.md b/cves/2023/CVE-2023-21716.md index 503edf8614e..e4f0f4db2cd 100644 --- a/cves/2023/CVE-2023-21716.md +++ b/cves/2023/CVE-2023-21716.md @@ -47,4 +47,6 @@ No PoCs from references. - https://github.com/maldev866/WordExp_CVE_2023_21716 - https://github.com/mikesxrs/CVE-2023-21716_YARA_Results - https://github.com/r00tb1t/CVE-2024-21413-POC +- https://github.com/REGGYRAIDER/CVE-2023-21716 +- https://github.com/muumthf/CVE-2023-21716 diff --git a/cves/2023/CVE-2023-21746.md b/cves/2023/CVE-2023-21746.md index b57e80946ec..fbf7f9ec7bf 100644 --- a/cves/2023/CVE-2023-21746.md +++ b/cves/2023/CVE-2023-21746.md @@ -48,4 +48,5 @@ No PoCs from references. #### Github - https://github.com/Muhammad-Ali007/LocalPotato_CVE-2023-21746 - https://github.com/decoder-it/LocalPotato +- https://github.com/TailoredSecOps/PEREDBOEMPATAT-BOF diff --git a/cves/2023/CVE-2023-21768.md b/cves/2023/CVE-2023-21768.md index dbdef11abb3..58800324e3f 100644 --- a/cves/2023/CVE-2023-21768.md +++ b/cves/2023/CVE-2023-21768.md @@ -35,6 +35,8 @@ Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabili - https://github.com/radoi-teodor/CVE-2023-21768-DSE-Bypass - https://github.com/xboxoneresearch/CVE-2023-21768-dotnet - https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit +- https://github.com/ivanovick1/Windows_AFD_LPE_CVE-2023-21768 +- https://github.com/leandrofleury/CVE-2023-21768 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2023_21768_afd_lpe.rb diff --git a/cves/2023/CVE-2023-21839.md b/cves/2023/CVE-2023-21839.md index 58de340151d..7ba32f15b29 100644 --- a/cves/2023/CVE-2023-21839.md +++ b/cves/2023/CVE-2023-21839.md @@ -28,3 +28,6 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/iiop/cve_2023_21839_weblogic_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/weblogic/CVE-2023-21839 diff --git a/cves/2023/CVE-2023-22047.md b/cves/2023/CVE-2023-22047.md index b4ecaa94e1e..86221ce29db 100644 --- a/cves/2023/CVE-2023-22047.md +++ b/cves/2023/CVE-2023-22047.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/tuo4n8/CVE-2023-22047 +- https://github.com/0xTerror/CVE-2023-22047---Oracle-PeopleSoft-LFI +- https://github.com/0xTerror/CVE-2023-22047-Oracle-PeopleSoft-LFI #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22047.yaml diff --git a/cves/2023/CVE-2023-22515.md b/cves/2023/CVE-2023-22515.md index 8bea8f765f3..0fd693cecf8 100644 --- a/cves/2023/CVE-2023-22515.md +++ b/cves/2023/CVE-2023-22515.md @@ -62,6 +62,10 @@ Atlassian Cloud sites are not affected by this vulnerability. If your Confluence - https://github.com/vivigotnotime/CVE-2023-22515-Exploit-Script - https://github.com/xorbbo/cve-2023-22515 - https://github.com/youcannotseemeagain/CVE-2023-22515_RCE +- https://github.com/Arkha-Corvus/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197 +- https://github.com/dkq-k/cve-2023-22515-1 +- https://github.com/s1d6point7bugcrowd/CVE-2023-22515-check +- https://github.com/s1incere/CVE-2023-22515 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yaml @@ -69,3 +73,6 @@ Atlassian Cloud sites are not affected by this vulnerability. If your Confluence #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22515.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/atlassian_confluence_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2023-22515 diff --git a/cves/2023/CVE-2023-22518.md b/cves/2023/CVE-2023-22518.md index aca2396be54..8c0ee3b96a4 100644 --- a/cves/2023/CVE-2023-22518.md +++ b/cves/2023/CVE-2023-22518.md @@ -25,6 +25,7 @@ All versions of Confluence Data Center and Server are affected by this unexploit - https://github.com/davidfortytwo/CVE-2023-22518 - https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence - https://github.com/sanjai-AK47/CVE-2023-22518 +- https://github.com/d3ckkNo0b/analyze-Exploit-CVE-2023-22518-Confluence #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22518.yaml diff --git a/cves/2023/CVE-2023-22527.md b/cves/2023/CVE-2023-22527.md index 84dd60804f0..ad6851d052b 100644 --- a/cves/2023/CVE-2023-22527.md +++ b/cves/2023/CVE-2023-22527.md @@ -47,9 +47,13 @@ A template injection vulnerability on older versions of Confluence Data Center a - https://github.com/thompson005/CVE-2023-22527 - https://github.com/vulncheck-oss/cve-2023-22527 - https://github.com/yoryio/CVE-2023-22527 +- https://github.com/mylo-2001/AtlassianPwn #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22527.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22527.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2023-22527 diff --git a/cves/2023/CVE-2023-22809.md b/cves/2023/CVE-2023-22809.md index 06111e88c35..885175e26ba 100644 --- a/cves/2023/CVE-2023-22809.md +++ b/cves/2023/CVE-2023-22809.md @@ -33,6 +33,7 @@ In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra argument - https://github.com/pashayogi/CVE-2023-22809 - https://github.com/spidoman/CVE-2023-22809-automated-python-exploits - https://github.com/stefan11111/rdoedit +- https://github.com/ValeuDoamne/CVE-2023-22809 #### ExploitDB - https://www.exploit-db.com/exploits/51217 diff --git a/cves/2023/CVE-2023-22894.md b/cves/2023/CVE-2023-22894.md index 76e145a53d3..4424d0edd8d 100644 --- a/cves/2023/CVE-2023-22894.md +++ b/cves/2023/CVE-2023-22894.md @@ -17,4 +17,5 @@ Strapi through 4.5.5 allows attackers (with access to the admin panel) to discov #### Github - https://github.com/Saboor-Hakimi/CVE-2023-22894 - https://github.com/maxntv24/CVE-2023-22894-PoC +- https://github.com/maxntv/CVE-2023-22894-PoC diff --git a/cves/2023/CVE-2023-22906.md b/cves/2023/CVE-2023-22906.md index 63b2bb40e3d..f2bd70e0f8b 100644 --- a/cves/2023/CVE-2023-22906.md +++ b/cves/2023/CVE-2023-22906.md @@ -14,5 +14,5 @@ Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileg - https://github.com/nonamecoder/CVE-2023-22906 #### Github -No PoCs found on GitHub currently. +- https://github.com/nonamecoder/CVE-2023-22906 diff --git a/cves/2023/CVE-2023-23169.md b/cves/2023/CVE-2023-23169.md index 65bcdbceff7..dbec7090e09 100644 --- a/cves/2023/CVE-2023-23169.md +++ b/cves/2023/CVE-2023-23169.md @@ -13,5 +13,5 @@ Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side req - https://github.com/S4nshine/CVE-2023-23169 #### Github -No PoCs found on GitHub currently. +- https://github.com/S4nshine/CVE-2023-23169 diff --git a/cves/2023/CVE-2023-23397.md b/cves/2023/CVE-2023-23397.md index 29e52b86023..6bf7d0d72fd 100644 --- a/cves/2023/CVE-2023-23397.md +++ b/cves/2023/CVE-2023-23397.md @@ -50,4 +50,5 @@ No PoCs from references. - https://github.com/tiepologian/CVE-2023-23397 - https://github.com/vlad-a-man/CVE-2023-23397 - https://github.com/praneethnaidu1910-cmd/cve-2023-23397-purple-team +- https://github.com/Phaedrik/CVE-2023-23397-POC diff --git a/cves/2023/CVE-2023-23752.md b/cves/2023/CVE-2023-23752.md index 293375df3a8..1e495d9c601 100644 --- a/cves/2023/CVE-2023-23752.md +++ b/cves/2023/CVE-2023-23752.md @@ -74,6 +74,7 @@ No PoCs from references. - https://github.com/wangking1/CVE-2023-23752-poc - https://github.com/yTxZx/CVE-2023-23752 - https://github.com/z3n70/CVE-2023-23752 +- https://github.com/BardLaudian/CVE-2023-23752 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23752.yaml @@ -83,3 +84,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/joomla_api_improper_access_checks.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/joomla/CVE-2023-23752 diff --git a/cves/2023/CVE-2023-23946.md b/cves/2023/CVE-2023-23946.md index 29c98028be3..72c88c21c40 100644 --- a/cves/2023/CVE-2023-23946.md +++ b/cves/2023/CVE-2023-23946.md @@ -23,4 +23,5 @@ No PoCs from references. #### Github - https://github.com/bruno-1337/CVE-2023-23946-POC +- https://github.com/tralsesec/CVE-2023-23946 diff --git a/cves/2023/CVE-2023-24012.md b/cves/2023/CVE-2023-24012.md index 354f18257c9..68ec9bf10bd 100644 --- a/cves/2023/CVE-2023-24012.md +++ b/cves/2023/CVE-2023-24012.md @@ -13,5 +13,5 @@ An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) wi - https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d #### Github -No PoCs found on GitHub currently. +- https://github.com/SafeLock-D2E/Quiksand-CVE-2023-24012 diff --git a/cves/2023/CVE-2023-24055.md b/cves/2023/CVE-2023-24055.md index 620ba2b6bb8..6d77e449ce0 100644 --- a/cves/2023/CVE-2023-24055.md +++ b/cves/2023/CVE-2023-24055.md @@ -19,4 +19,5 @@ KeePass through 2.53 (in a default installation) allows an attacker, who has wri - https://github.com/n3rada/Invoke-KeePassBackup - https://github.com/yosef0x01/CVE-2023-24055 - https://github.com/zwlsix/KeePass-CVE-2023-24055 +- https://github.com/alt3kx/CVE-2023-24055_PoC diff --git a/cves/2023/CVE-2023-24709.md b/cves/2023/CVE-2023-24709.md index 357a64a32df..6db7967f5ff 100644 --- a/cves/2023/CVE-2023-24709.md +++ b/cves/2023/CVE-2023-24709.md @@ -15,7 +15,7 @@ An issue found in Paradox Security Systems IPR512 allows attackers to cause a de - https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 #### Github -No PoCs found on GitHub currently. +- https://github.com/darknesschieftain/Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC #### ExploitDB - https://www.exploit-db.com/exploits/51356 diff --git a/cves/2023/CVE-2023-24932.md b/cves/2023/CVE-2023-24932.md index e3b9ac0e5db..654e79e8c44 100644 --- a/cves/2023/CVE-2023-24932.md +++ b/cves/2023/CVE-2023-24932.md @@ -57,4 +57,5 @@ No PoCs from references. #### Github - https://github.com/Wack0/CVE-2022-21894 - https://github.com/helleflo1312/Orchestrated-Powershell-for-CVE-2023-24932 +- https://github.com/v1ckxy/Orchestrated-Powershell-for-CVE-2023-24932-en diff --git a/cves/2023/CVE-2023-25136.md b/cves/2023/CVE-2023-25136.md index 25a7c63be24..79afd5feb1e 100644 --- a/cves/2023/CVE-2023-25136.md +++ b/cves/2023/CVE-2023-25136.md @@ -27,4 +27,5 @@ OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options. - https://github.com/nhakobyan685/CVE-2023-25136 - https://github.com/ticofookfook/CVE-2023-25136 - https://github.com/zacharimayer/ssh-exploit +- https://github.com/Lane0218/CVE-2023-25136-PoC diff --git a/cves/2023/CVE-2023-25157.md b/cves/2023/CVE-2023-25157.md index f667ada1083..d2858459f9a 100644 --- a/cves/2023/CVE-2023-25157.md +++ b/cves/2023/CVE-2023-25157.md @@ -22,6 +22,10 @@ No PoCs from references. - https://github.com/dr-cable-tv/Geoserver-CVE-2023-25157 - https://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158 - https://github.com/win3zz/CVE-2023-25157 +- https://github.com/7imbitz/CVE-2023-25157-checker #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25157.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2023-25157 diff --git a/cves/2023/CVE-2023-25194.md b/cves/2023/CVE-2023-25194.md index 979f36e13fe..e28f69764eb 100644 --- a/cves/2023/CVE-2023-25194.md +++ b/cves/2023/CVE-2023-25194.md @@ -22,3 +22,6 @@ A possible security vulnerability has been identified in Apache Kafka Connect AP #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_druid_cve_2023_25194.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/kafka/CVE-2023-25194 diff --git a/cves/2023/CVE-2023-25826.md b/cves/2023/CVE-2023-25826.md index 9c0e0b5e4f9..4314546de20 100644 --- a/cves/2023/CVE-2023-25826.md +++ b/cves/2023/CVE-2023-25826.md @@ -20,3 +20,6 @@ Due to insufficient validation of parameters passed to the legacy HTTP query API #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opentsdb_key_cmd_injection.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/opentsdb/CVE-2023-25826 diff --git a/cves/2023/CVE-2023-26035.md b/cves/2023/CVE-2023-26035.md index 6da68b8a6c0..771e6defd83 100644 --- a/cves/2023/CVE-2023-26035.md +++ b/cves/2023/CVE-2023-26035.md @@ -20,6 +20,7 @@ ZoneMinder is a free, open source Closed-circuit television software application - https://github.com/heapbytes/CVE-2023-26035 - https://github.com/m3m0o/zoneminder-snapshots-rce-poc - https://github.com/rvizx/CVE-2023-26035 +- https://github.com/rvzsec/CVE-2023-26035 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26035.yaml diff --git a/cves/2023/CVE-2023-26083.md b/cves/2023/CVE-2023-26083.md index ed29102768c..79770e1a9b0 100644 --- a/cves/2023/CVE-2023-26083.md +++ b/cves/2023/CVE-2023-26083.md @@ -16,4 +16,5 @@ Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver #### Github - https://github.com/0x36/Pixel_GPU_Exploit - https://github.com/a-roshbaik/Pixel_GPU_Exploit +- https://github.com/noverisp3/CVE-2023-26083 diff --git a/cves/2023/CVE-2023-26208.md b/cves/2023/CVE-2023-26208.md index 3abfbce4c65..dfc9189b3a2 100644 --- a/cves/2023/CVE-2023-26208.md +++ b/cves/2023/CVE-2023-26208.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2023-26208 +- https://github.com/chessredoffsec/CVE-2023-26208 diff --git a/cves/2023/CVE-2023-26209.md b/cves/2023/CVE-2023-26209.md index 6e266418946..a1a9ec06dcc 100644 --- a/cves/2023/CVE-2023-26209.md +++ b/cves/2023/CVE-2023-26209.md @@ -19,4 +19,5 @@ No PoCs from references. #### Github - https://github.com/cnetsec/CVE-2023-26209 +- https://github.com/chessredoffsec/CVE-2023-26209 diff --git a/cves/2023/CVE-2023-26360.md b/cves/2023/CVE-2023-26360.md index 4c5f9f85f93..132bc4883c7 100644 --- a/cves/2023/CVE-2023-26360.md +++ b/cves/2023/CVE-2023-26360.md @@ -16,6 +16,9 @@ Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and ea #### Github - https://github.com/jakabakos/CVE-2023-26360-adobe-coldfusion-rce-exploit - https://github.com/yosef0x01/CVE-2023-26360 +- https://github.com/H3rm1tR3b0rn/CVE-2023-26360-RCE +- https://github.com/RyanRodrigues880/CVE-2023-26360 +- https://github.com/joaoaugustom/Adobe_ColdFusion_RCE_Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26360.yaml @@ -23,3 +26,6 @@ Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and ea #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/adobe_coldfusion_rce_cve_2023_26360.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/adobe_coldfusion_fileread_cve_2023_26360.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2023-26360 diff --git a/cves/2023/CVE-2023-2640.md b/cves/2023/CVE-2023-2640.md index 2d9e71abc8c..fd11ef6d568 100644 --- a/cves/2023/CVE-2023-2640.md +++ b/cves/2023/CVE-2023-2640.md @@ -25,6 +25,9 @@ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip - https://github.com/musorblyat/CVE-2023-2640-CVE-2023-32629 - https://github.com/vinetsuicide/CVE-2023-2640-CVE-2023-32629 - https://github.com/xS9NTX/CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC +- https://github.com/WhatsWrongAndWhy/CVE-2023-2640-CVE-2023-32629 +- https://github.com/amar-imamovic/CVE-2023-2640-CVE-2023-32629-Interactive-PoC +- https://github.com/z3usx01/CVE-2023-2640-3262-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2640.yaml diff --git a/cves/2023/CVE-2023-26469.md b/cves/2023/CVE-2023-26469.md index cdfc554f73b..1039106d8e2 100644 --- a/cves/2023/CVE-2023-26469.md +++ b/cves/2023/CVE-2023-26469.md @@ -17,6 +17,7 @@ In Jorani 1.0.0, an attacker could leverage path traversal to access files and e - https://github.com/d0rb/CVE-2023-26469 - https://github.com/jiao-wt/scamer - https://github.com/samipmainali/Jorani-Reverse-Shell-v1.0.0 +- https://github.com/Kairo-one/CVE-2023-26469-Jorani #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26469.yaml diff --git a/cves/2023/CVE-2023-26482.md b/cves/2023/CVE-2023-26482.md index d2beb8fb67c..1a31ec4ce18 100644 --- a/cves/2023/CVE-2023-26482.md +++ b/cves/2023/CVE-2023-26482.md @@ -14,7 +14,7 @@ Nextcloud server is an open source home cloud implementation. In affected versio No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ISabbiI/PoC---CVE-2023-26482-RCE-LAB-Nextcloud #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/nextcloud_workflows_rce.rb diff --git a/cves/2023/CVE-2023-27163.md b/cves/2023/CVE-2023-27163.md index 17906b3a382..feac1b20032 100644 --- a/cves/2023/CVE-2023-27163.md +++ b/cves/2023/CVE-2023-27163.md @@ -38,6 +38,12 @@ request-baskets up to v1.2.1 was discovered to contain a Server-Side Request For - https://github.com/seanrdev/cve-2023-27163 - https://github.com/theopaid/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer - https://github.com/thomas-osgood/CVE-2023-27163 +- https://github.com/Jeanback1/CVE-2023-27163-exploit +- https://github.com/lukehebe/CVE-2023-27163-POC +- https://github.com/rvzsec/CVE-2023-27163 +- https://github.com/thealchimist86/CVE-2023-27163---Maltrail-0.53---RCE +- https://github.com/thealchimist86/CVE-2023-27163---SSRF-Baskets-Requests +- https://github.com/tombstoneghost/htb-sau-exploit-chain #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27163.yaml diff --git a/cves/2023/CVE-2023-27350.md b/cves/2023/CVE-2023-27350.md index fc3b30ef9f8..613cb39e5a9 100644 --- a/cves/2023/CVE-2023-27350.md +++ b/cves/2023/CVE-2023-27350.md @@ -35,6 +35,8 @@ This vulnerability allows remote attackers to bypass authentication on affected - https://github.com/rasan2001/CVE-2023-27350 - https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability - https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351 +- https://github.com/dezso-dfield/CVE-2023-27350 +- https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27350.yaml diff --git a/cves/2023/CVE-2023-27372.md b/cves/2023/CVE-2023-27372.md index 9114db96a7e..d9662d6bda1 100644 --- a/cves/2023/CVE-2023-27372.md +++ b/cves/2023/CVE-2023-27372.md @@ -27,6 +27,10 @@ SPIP before 4.2.1 allows Remote Code Execution via form values in the public are - https://github.com/izzz0/CVE-2023-27372-POC - https://github.com/nuts7/CVE-2023-27372 - https://github.com/redboltsec/CVE-2023-27372-PoC +- https://github.com/Ap0dexMe0/CVE-2023-27372 +- https://github.com/KirolosKhairy/CVE-2023-27372 +- https://github.com/estebanzarate/CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC +- https://github.com/scriniariii/CVE-2023-27372 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27372.yaml diff --git a/cves/2023/CVE-2023-27524.md b/cves/2023/CVE-2023-27524.md index 0b234185700..946e0a7c191 100644 --- a/cves/2023/CVE-2023-27524.md +++ b/cves/2023/CVE-2023-27524.md @@ -42,3 +42,6 @@ Session Validation attacks in Apache Superset versions up to and including 2.0.1 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/apache_superset_cookie_sig_priv_esc.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/superset/CVE-2023-27524 diff --git a/cves/2023/CVE-2023-27532.md b/cves/2023/CVE-2023-27532.md index a8fd41c1ddf..ecb56c9d5ca 100644 --- a/cves/2023/CVE-2023-27532.md +++ b/cves/2023/CVE-2023-27532.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/horizon3ai/CVE-2023-27532 - https://github.com/puckiestyle/CVE-2023-27532-RCE-Only - https://github.com/sfewer-r7/CVE-2023-27532 +- https://github.com/yunus-a1i/veeam-cve-2023-27532-mock diff --git a/cves/2023/CVE-2023-27566.md b/cves/2023/CVE-2023-27566.md index b61377cd41f..6f38e1a1c91 100644 --- a/cves/2023/CVE-2023-27566.md +++ b/cves/2023/CVE-2023-27566.md @@ -13,5 +13,5 @@ Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a craf - https://github.com/openl2d/moc3ingbird #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenL2D/moc3ingbird diff --git a/cves/2023/CVE-2023-27742.md b/cves/2023/CVE-2023-27742.md index 0ba87f13d66..554e9db6ba1 100644 --- a/cves/2023/CVE-2023-27742.md +++ b/cves/2023/CVE-2023-27742.md @@ -13,5 +13,5 @@ IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via th - https://github.com/G37SYS73M/CVE-2023-27742 #### Github -No PoCs found on GitHub currently. +- https://github.com/G37SYS73M/CVE-2023-27742 diff --git a/cves/2023/CVE-2023-28121.md b/cves/2023/CVE-2023-28121.md index 4142b1fa9bb..a8816c3f79c 100644 --- a/cves/2023/CVE-2023-28121.md +++ b/cves/2023/CVE-2023-28121.md @@ -19,6 +19,8 @@ An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) - https://github.com/im-hanzou/Mass-CVE-2023-28121 - https://github.com/rio128128/Mass-CVE-2023-28121-kdoec - https://github.com/sug4r-wr41th/CVE-2023-28121 +- https://github.com/0axz-tools/CVE-2023-28121 +- https://github.com/luisdevpentest/CVE-2023-28121-WordPress-Privilege-Escalation #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28121.yaml diff --git a/cves/2023/CVE-2023-28205.md b/cves/2023/CVE-2023-28205.md index 97a273f33a8..7fb35caa417 100644 --- a/cves/2023/CVE-2023-28205.md +++ b/cves/2023/CVE-2023-28205.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/ntfargo/uaf-2023-28205 +- https://github.com/seregonwar/uaf-2023-28205 diff --git a/cves/2023/CVE-2023-2825.md b/cves/2023/CVE-2023-2825.md index b5abf3f2fb9..1d2d16edd58 100644 --- a/cves/2023/CVE-2023-2825.md +++ b/cves/2023/CVE-2023-2825.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/alej6/MassCyberCenter-Mentorship-Project- - https://github.com/caopengyan/CVE-2023-2825 - https://github.com/cc3305/CVE-2023-2825 +- https://github.com/Groppoxx/CVE-2023-2825-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2825.yaml diff --git a/cves/2023/CVE-2023-28432.md b/cves/2023/CVE-2023-28432.md index 517f930c1b0..7248d15f736 100644 --- a/cves/2023/CVE-2023-28432.md +++ b/cves/2023/CVE-2023-28432.md @@ -40,3 +40,6 @@ Minio is a Multi-Cloud Object Storage framework. In a cluster deployment startin #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/minio_bootstrap_verify_info_disc.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/minio/CVE-2023-28432 diff --git a/cves/2023/CVE-2023-29017.md b/cves/2023/CVE-2023-29017.md index aea15725e15..71218277384 100644 --- a/cves/2023/CVE-2023-29017.md +++ b/cves/2023/CVE-2023-29017.md @@ -18,4 +18,5 @@ vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in mo - https://github.com/jakabakos/vm2-sandbox-escape-exploits - https://github.com/passwa11/CVE-2023-29017-reverse-shell - https://github.com/timb-machine-mirrors/seongil-wi-CVE-2023-29017 +- https://github.com/gunwoo105/Node_CVE-2023-29017 diff --git a/cves/2023/CVE-2023-29300.md b/cves/2023/CVE-2023-29300.md index 530d59a4c08..4e74c612fe1 100644 --- a/cves/2023/CVE-2023-29300.md +++ b/cves/2023/CVE-2023-29300.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29300.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2023-29300 diff --git a/cves/2023/CVE-2023-29357.md b/cves/2023/CVE-2023-29357.md index da687b24465..959c1a8293d 100644 --- a/cves/2023/CVE-2023-29357.md +++ b/cves/2023/CVE-2023-29357.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/Guillaume-Risch/cve-2023-29357-Sharepoint - https://github.com/KeyStrOke95/CVE-2023-29357-ExE - https://github.com/LuemmelSec/CVE-2023-29357 +- https://github.com/DonVorrin/CVE-2023-29357 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29357.yaml diff --git a/cves/2023/CVE-2023-29386.md b/cves/2023/CVE-2023-29386.md index 9667f324301..10a471917e1 100644 --- a/cves/2023/CVE-2023-29386.md +++ b/cves/2023/CVE-2023-29386.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Ma No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/vigilante-1337/CVE-2023-29386 diff --git a/cves/2023/CVE-2023-2986.md b/cves/2023/CVE-2023-2986.md index b1c03cd8eda..f0555446c1e 100644 --- a/cves/2023/CVE-2023-2986.md +++ b/cves/2023/CVE-2023-2986.md @@ -17,6 +17,7 @@ The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to au #### Github - https://github.com/Alucard0x1/CVE-2023-2986 +- https://github.com/Ayantaker/CVE-2023-2986 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2986.yaml diff --git a/cves/2023/CVE-2023-29919.md b/cves/2023/CVE-2023-29919.md index 383c79e7335..b87e087e4e5 100644 --- a/cves/2023/CVE-2023-29919.md +++ b/cves/2023/CVE-2023-29919.md @@ -13,7 +13,7 @@ SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the - https://github.com/xiaosed/CVE-2023-29919/ #### Github -No PoCs found on GitHub currently. +- https://github.com/xiaosed/CVE-2023-29919 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml diff --git a/cves/2023/CVE-2023-30146.md b/cves/2023/CVE-2023-30146.md index 006609aef38..71ceb0f7c11 100644 --- a/cves/2023/CVE-2023-30146.md +++ b/cves/2023/CVE-2023-30146.md @@ -14,5 +14,5 @@ Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauth - https://github.com/L1-0/CVE-2023-30146 #### Github -No PoCs found on GitHub currently. +- https://github.com/L1-0/CVE-2023-30146 diff --git a/cves/2023/CVE-2023-30212.md b/cves/2023/CVE-2023-30212.md index 573fafc0f8d..5878219577b 100644 --- a/cves/2023/CVE-2023-30212.md +++ b/cves/2023/CVE-2023-30212.md @@ -26,6 +26,7 @@ No PoCs from references. - https://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability - https://github.com/libasv/Exploite-CVE-2023-30212-vulnerability - https://github.com/sungmin20/cve-2023-30212 +- https://github.com/imathewvincent/CVE-2023-30212-OURPHP-Vulnerability #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30212.yaml diff --git a/cves/2023/CVE-2023-30253.md b/cves/2023/CVE-2023-30253.md index b1125c86f9b..5c794b7ec07 100644 --- a/cves/2023/CVE-2023-30253.md +++ b/cves/2023/CVE-2023-30253.md @@ -20,6 +20,8 @@ Dolibarr before 17.0.1 allows remote code execution by an authenticated user via - https://github.com/dollarboysushil/Dolibarr-17.0.0-Exploit-CVE-2023-30253 - https://github.com/g4nkd/CVE-2023-30253-PoC - https://github.com/nikn0laty/Exploit-for-Dolibarr-17.0.0-CVE-2023-30253 +- https://github.com/1lkla/POC-exploit-for-Dolibarr +- https://github.com/Jeanback1/CVE-2023-30253-exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/dolibarr_cms_rce_cve_2023_30253.rb diff --git a/cves/2023/CVE-2023-30258.md b/cves/2023/CVE-2023-30258.md index 3d5b3aaaf79..5d1689eaad7 100644 --- a/cves/2023/CVE-2023-30258.md +++ b/cves/2023/CVE-2023-30258.md @@ -22,6 +22,8 @@ Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allo - https://github.com/n00o00b/CVE-2023-30258-RCE-POC - https://github.com/sk00l/CVE-2023-30258 - https://github.com/tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit +- https://github.com/cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit +- https://github.com/estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30258.yaml diff --git a/cves/2023/CVE-2023-30367.md b/cves/2023/CVE-2023-30367.md index 31259e7ecc7..9015bc98461 100644 --- a/cves/2023/CVE-2023-30367.md +++ b/cves/2023/CVE-2023-30367.md @@ -14,5 +14,5 @@ Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software tha - https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper #### Github -No PoCs found on GitHub currently. +- https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper diff --git a/cves/2023/CVE-2023-30459.md b/cves/2023/CVE-2023-30459.md index bcb118f846f..ec72fa08d42 100644 --- a/cves/2023/CVE-2023-30459.md +++ b/cves/2023/CVE-2023-30459.md @@ -14,5 +14,5 @@ SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has admin - https://smartptt.com #### Github -No PoCs found on GitHub currently. +- https://github.com/Toxich4/CVE-2023-30459 diff --git a/cves/2023/CVE-2023-30547.md b/cves/2023/CVE-2023-30547.md index c62b45f7a0f..c586ea590b7 100644 --- a/cves/2023/CVE-2023-30547.md +++ b/cves/2023/CVE-2023-30547.md @@ -19,4 +19,5 @@ vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in mo - https://github.com/junnythemarksman/CVE-2023-30547 - https://github.com/rvizx/CVE-2023-30547 - https://github.com/user0x1337/CVE-2023-30547 +- https://github.com/rvzsec/CVE-2023-30547 diff --git a/cves/2023/CVE-2023-30799.md b/cves/2023/CVE-2023-30799.md index de7c983149f..9a08b2eb455 100644 --- a/cves/2023/CVE-2023-30799.md +++ b/cves/2023/CVE-2023-30799.md @@ -13,5 +13,5 @@ MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerab - https://github.com/MarginResearch/FOISted #### Github -No PoCs found on GitHub currently. +- https://github.com/alzeer711/MikroTik-RouterOS-6.49.18-Exploit-Kit diff --git a/cves/2023/CVE-2023-31059.md b/cves/2023/CVE-2023-31059.md index 374ae4d9a68..88b410d8772 100644 --- a/cves/2023/CVE-2023-31059.md +++ b/cves/2023/CVE-2023-31059.md @@ -13,7 +13,7 @@ Repetier Server through 1.4.10 allows ..%5c directory traversal for reading file - https://cybir.com/2023/cve/poc-repetier-server-140/ #### Github -No PoCs found on GitHub currently. +- https://github.com/mbanyamer/CVE-2023-31059-Repetier-Server-1.4.10-Unauthenticated-Path-Traversal #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31059.yaml diff --git a/cves/2023/CVE-2023-31497.md b/cves/2023/CVE-2023-31497.md index 1b1c2e7f647..770de0d8953 100644 --- a/cves/2023/CVE-2023-31497.md +++ b/cves/2023/CVE-2023-31497.md @@ -13,5 +13,5 @@ Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Sec - https://github.com/0xInfection/EPScalate #### Github -No PoCs found on GitHub currently. +- https://github.com/0xInfection/EPScalate diff --git a/cves/2023/CVE-2023-31594.md b/cves/2023/CVE-2023-31594.md index 3ca6af13e49..aae8459a8e3 100644 --- a/cves/2023/CVE-2023-31594.md +++ b/cves/2023/CVE-2023-31594.md @@ -13,5 +13,5 @@ IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an e - https://github.com/Yozarseef95/CVE-2023-31594 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yozarseef95/CVE-2023-31594 diff --git a/cves/2023/CVE-2023-31595.md b/cves/2023/CVE-2023-31595.md index b6611497a0b..c3deccb7bf5 100644 --- a/cves/2023/CVE-2023-31595.md +++ b/cves/2023/CVE-2023-31595.md @@ -13,5 +13,5 @@ IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unau - https://github.com/Yozarseef95/CVE-2023-31595 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yozarseef95/CVE-2023-31595 diff --git a/cves/2023/CVE-2023-31664.md b/cves/2023/CVE-2023-31664.md index 4e923692b4b..f1d6395b39d 100644 --- a/cves/2023/CVE-2023-31664.md +++ b/cves/2023/CVE-2023-31664.md @@ -13,5 +13,5 @@ A reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/ - https://github.com/adilkhan7/CVE-2023-31664 #### Github -No PoCs found on GitHub currently. +- https://github.com/adilkhan7/CVE-2023-31664 diff --git a/cves/2023/CVE-2023-31753.md b/cves/2023/CVE-2023-31753.md index 42f46cd8c07..7e31aa691ce 100644 --- a/cves/2023/CVE-2023-31753.md +++ b/cves/2023/CVE-2023-31753.md @@ -13,5 +13,5 @@ SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker - https://github.com/khmk2k/CVE-2023-31753/ #### Github -No PoCs found on GitHub currently. +- https://github.com/KIL0BYT3X/CVE-2023-31753 diff --git a/cves/2023/CVE-2023-31851.md b/cves/2023/CVE-2023-31851.md index 8b02845ad55..9157fc72e01 100644 --- a/cves/2023/CVE-2023-31851.md +++ b/cves/2023/CVE-2023-31851.md @@ -14,5 +14,5 @@ Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/ - https://github.com/CalfCrusher/CVE-2023-31851 #### Github -No PoCs found on GitHub currently. +- https://github.com/CalfCrusher/CVE-2023-31851 diff --git a/cves/2023/CVE-2023-31852.md b/cves/2023/CVE-2023-31852.md index 25b154f382f..88f52fc3858 100644 --- a/cves/2023/CVE-2023-31852.md +++ b/cves/2023/CVE-2023-31852.md @@ -14,5 +14,5 @@ Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/ad - https://github.com/CalfCrusher/CVE-2023-31852 #### Github -No PoCs found on GitHub currently. +- https://github.com/CalfCrusher/CVE-2023-31852 diff --git a/cves/2023/CVE-2023-31853.md b/cves/2023/CVE-2023-31853.md index d9935ee0ea0..806bcf9168a 100644 --- a/cves/2023/CVE-2023-31853.md +++ b/cves/2023/CVE-2023-31853.md @@ -14,5 +14,5 @@ Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admi - https://github.com/CalfCrusher/CVE-2023-31853 #### Github -No PoCs found on GitHub currently. +- https://github.com/CalfCrusher/CVE-2023-31853 diff --git a/cves/2023/CVE-2023-31902.md b/cves/2023/CVE-2023-31902.md index 38332a652ad..18ee888d63b 100644 --- a/cves/2023/CVE-2023-31902.md +++ b/cves/2023/CVE-2023-31902.md @@ -15,6 +15,7 @@ RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE) #### Github - https://github.com/blue0x1/mobilemouse-exploit +- https://github.com/lypd0/mouseserver-exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/mobile_mouse_rce.rb diff --git a/cves/2023/CVE-2023-32233.md b/cves/2023/CVE-2023-32233.md index 40becb36a9f..794ead022c5 100644 --- a/cves/2023/CVE-2023-32233.md +++ b/cves/2023/CVE-2023-32233.md @@ -20,4 +20,6 @@ In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when - https://github.com/djki5s/tools - https://github.com/oferchen/POC-CVE-2023-32233 - https://github.com/void0red/CVE-2023-32233 +- https://github.com/BurnSkyup/CVE-2023-32233-reproduction +- https://github.com/Destawell/gemini-2.5-pro-nf-tables-red-teaming diff --git a/cves/2023/CVE-2023-32315.md b/cves/2023/CVE-2023-32315.md index 0425715de98..dc0cb441f06 100644 --- a/cves/2023/CVE-2023-32315.md +++ b/cves/2023/CVE-2023-32315.md @@ -29,9 +29,13 @@ Openfire is an XMPP server licensed under the Open Source Apache License. Openfi - https://github.com/pulentoski/Explotacion-CVE-2023-32315-Openfire - https://github.com/rag-fish/openfire-exploit-suite - https://github.com/tangxiaofeng7/CVE-2023-32315-Openfire-Bypass +- https://github.com/Ap0dexMe0/CVE-2023-32315 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32315.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/openfire_auth_bypass_rce_cve_2023_32315.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openfire/CVE-2023-32315 diff --git a/cves/2023/CVE-2023-32571.md b/cves/2023/CVE-2023-32571.md index 47f56a0e433..91fc5cdb88b 100644 --- a/cves/2023/CVE-2023-32571.md +++ b/cves/2023/CVE-2023-32571.md @@ -15,4 +15,5 @@ Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute ar #### Github - https://github.com/Tris0n/CVE-2023-32571-POC - https://github.com/vert16x/CVE-2023-32571-POC +- https://github.com/SecTex/CVE-2023-32571 diff --git a/cves/2023/CVE-2023-32749.md b/cves/2023/CVE-2023-32749.md index 4fe510fbddf..d35fbe6575b 100644 --- a/cves/2023/CVE-2023-32749.md +++ b/cves/2023/CVE-2023-32749.md @@ -17,6 +17,7 @@ Pydio Cells allows users by default to create so-called external users in order #### Github - https://github.com/xcr-19/CVE-2023-32749 +- https://github.com/alaeddine03/CVE-2023-32749-PoC #### ExploitDB - https://www.exploit-db.com/exploits/51496 diff --git a/cves/2023/CVE-2023-32784.md b/cves/2023/CVE-2023-32784.md index 3b274e275b8..c2eb0d7f5f7 100644 --- a/cves/2023/CVE-2023-32784.md +++ b/cves/2023/CVE-2023-32784.md @@ -26,4 +26,5 @@ In KeePass 2.x before 2.54, it is possible to recover the cleartext master passw - https://github.com/mister-turtle/cve-2023-32784 - https://github.com/ynuwenhof/keedump - https://github.com/z-jxy/keepass_dump +- https://github.com/vdohney/keepass-password-dumper diff --git a/cves/2023/CVE-2023-33107.md b/cves/2023/CVE-2023-33107.md index a8d387d9ebc..ef60a1538d6 100644 --- a/cves/2023/CVE-2023-33107.md +++ b/cves/2023/CVE-2023-33107.md @@ -256,5 +256,6 @@ Memory corruption in Graphics Linux while assigning shared virtual memory region No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/264312431/picohaxx +- https://github.com/keto0422/CVE-2023-33107 diff --git a/cves/2023/CVE-2023-33246.md b/cves/2023/CVE-2023-33246.md index 570aa03736a..f4e7ccb155f 100644 --- a/cves/2023/CVE-2023-33246.md +++ b/cves/2023/CVE-2023-33246.md @@ -41,3 +41,6 @@ For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_rocketmq_update_config.rb - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/rocketmq_version.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-33246 diff --git a/cves/2023/CVE-2023-33253.md b/cves/2023/CVE-2023-33253.md index 53488032604..8c06145413b 100644 --- a/cves/2023/CVE-2023-33253.md +++ b/cves/2023/CVE-2023-33253.md @@ -13,5 +13,5 @@ LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remo - https://github.com/Toxich4/CVE-2023-33253 #### Github -No PoCs found on GitHub currently. +- https://github.com/Toxich4/CVE-2023-33253 diff --git a/cves/2023/CVE-2023-33408.md b/cves/2023/CVE-2023-33408.md index 5e42e0b8bdf..11743822db5 100644 --- a/cves/2023/CVE-2023-33408.md +++ b/cves/2023/CVE-2023-33408.md @@ -13,5 +13,5 @@ Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exi - https://github.com/Thirukrishnan/CVE-2023-33408 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2023-33408 diff --git a/cves/2023/CVE-2023-33409.md b/cves/2023/CVE-2023-33409.md index 3a2a482f0c7..894fedcb266 100644 --- a/cves/2023/CVE-2023-33409.md +++ b/cves/2023/CVE-2023-33409.md @@ -13,5 +13,5 @@ Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/pub - https://github.com/Thirukrishnan/CVE-2023-33409 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2023-33409 diff --git a/cves/2023/CVE-2023-33410.md b/cves/2023/CVE-2023-33410.md index 09666789234..69f91f37b29 100644 --- a/cves/2023/CVE-2023-33410.md +++ b/cves/2023/CVE-2023-33410.md @@ -13,5 +13,5 @@ Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an - https://github.com/Thirukrishnan/CVE-2023-33410 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2023-33410 diff --git a/cves/2023/CVE-2023-33669.md b/cves/2023/CVE-2023-33669.md index 65856825a50..8f22f8c2839 100644 --- a/cves/2023/CVE-2023-33669.md +++ b/cves/2023/CVE-2023-33669.md @@ -14,4 +14,6 @@ No PoCs from references. #### Github - https://github.com/Mohammaddvd/CVE-2023-33669 +- https://github.com/dhammerg/CVE-2023-33669 +- https://github.com/retr0reg/tenda-ac8v4-rop diff --git a/cves/2023/CVE-2023-33733.md b/cves/2023/CVE-2023-33733.md index 2745d1ea66a..fe299abe817 100644 --- a/cves/2023/CVE-2023-33733.md +++ b/cves/2023/CVE-2023-33733.md @@ -16,4 +16,5 @@ Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying - https://github.com/L41KAA/CVE-2023-33733-Exploit-PoC - https://github.com/buiduchoang24/CVE-2023-33733 - https://github.com/hoangbui24/CVE-2023-33733 +- https://github.com/c53elyas/CVE-2023-33733 diff --git a/cves/2023/CVE-2023-33781.md b/cves/2023/CVE-2023-33781.md index 8adc86f9a50..d708874fc7f 100644 --- a/cves/2023/CVE-2023-33781.md +++ b/cves/2023/CVE-2023-33781.md @@ -13,5 +13,5 @@ An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary comman - https://github.com/s0tr/CVE-2023-33781 #### Github -No PoCs found on GitHub currently. +- https://github.com/s0tr/CVE-2023-33781 diff --git a/cves/2023/CVE-2023-33782.md b/cves/2023/CVE-2023-33782.md index 15bfed41c1d..3e9f372fc4a 100644 --- a/cves/2023/CVE-2023-33782.md +++ b/cves/2023/CVE-2023-33782.md @@ -13,5 +13,5 @@ D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerabil - https://github.com/s0tr/CVE-2023-33782 #### Github -No PoCs found on GitHub currently. +- https://github.com/s0tr/CVE-2023-33782 diff --git a/cves/2023/CVE-2023-33817.md b/cves/2023/CVE-2023-33817.md index f3ed2a67282..0b1d1853dfc 100644 --- a/cves/2023/CVE-2023-33817.md +++ b/cves/2023/CVE-2023-33817.md @@ -13,5 +13,5 @@ hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability. - https://github.com/leekenghwa/CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5 #### Github -No PoCs found on GitHub currently. +- https://github.com/leekenghwa/CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5 diff --git a/cves/2023/CVE-2023-34362.md b/cves/2023/CVE-2023-34362.md index cc95aa064d4..82bd3ddbfeb 100644 --- a/cves/2023/CVE-2023-34362.md +++ b/cves/2023/CVE-2023-34362.md @@ -37,6 +37,7 @@ In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0. - https://github.com/lithuanian-g/cve-2023-34362-iocs - https://github.com/sfewer-r7/CVE-2023-34362 - https://github.com/toorandom/moveit-payload-decrypt-CVE-2023-34362 +- https://github.com/horrister/moveit-transfer-cve-2023-34362 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34362.yaml diff --git a/cves/2023/CVE-2023-34468.md b/cves/2023/CVE-2023-34468.md index 810c7936a65..ad87b9b368a 100644 --- a/cves/2023/CVE-2023-34468.md +++ b/cves/2023/CVE-2023-34468.md @@ -15,6 +15,10 @@ The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache #### Github - https://github.com/mbadanoiu/CVE-2023-34468 - https://github.com/shoucheng3/asf__nifi_CVE-2023-34468_1-21-0 +- https://github.com/Jeanpt/CVE-2023-34468 +- https://github.com/ozcanpng/CVE-2023-34468 +- https://github.com/sbouabid-sec/CVE-2023-34468-POC +- https://github.com/spikeyjr/CVE-2023-34468-PoC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_nifi_h2_rce.rb diff --git a/cves/2023/CVE-2023-3452.md b/cves/2023/CVE-2023-3452.md index 4c9de06ff90..ecf56d67afb 100644 --- a/cves/2023/CVE-2023-3452.md +++ b/cves/2023/CVE-2023-3452.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/leoanggal1/CVE-2023-3452-PoC - https://github.com/tranphuc2005/Exploit_Wordpress +- https://github.com/Alpastx/CVE-2023-3452---WordPress-Canto-Plugin-RCE +- https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3452.yaml diff --git a/cves/2023/CVE-2023-34598.md b/cves/2023/CVE-2023-34598.md index a596f24d29e..ca7709ea810 100644 --- a/cves/2023/CVE-2023-34598.md +++ b/cves/2023/CVE-2023-34598.md @@ -16,6 +16,7 @@ Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible - https://github.com/Lserein/CVE-2023-34598 - https://github.com/Szlein/CVE-2023-34598 - https://github.com/Zer0F8th/CVE-2023-34598 +- https://github.com/maddsec/CVE-2023-34598 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34598.yaml diff --git a/cves/2023/CVE-2023-34599.md b/cves/2023/CVE-2023-34599.md index c6ba85ed4ba..18f03006619 100644 --- a/cves/2023/CVE-2023-34599.md +++ b/cves/2023/CVE-2023-34599.md @@ -13,7 +13,7 @@ Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibb - https://github.com/maddsec/CVE-2023-34599 #### Github -No PoCs found on GitHub currently. +- https://github.com/maddsec/CVE-2023-34599 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34599.yaml diff --git a/cves/2023/CVE-2023-34924.md b/cves/2023/CVE-2023-34924.md index 2de010081c5..6e17bb5c9a9 100644 --- a/cves/2023/CVE-2023-34924.md +++ b/cves/2023/CVE-2023-34924.md @@ -14,5 +14,5 @@ H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the - https://github.com/ChrisL0tus/CVE-2023-34924 #### Github -No PoCs found on GitHub currently. +- https://github.com/ChrisL0tus/CVE-2023-34924 diff --git a/cves/2023/CVE-2023-34960.md b/cves/2023/CVE-2023-34960.md index 9d2dcef8ad8..6b996f07830 100644 --- a/cves/2023/CVE-2023-34960.md +++ b/cves/2023/CVE-2023-34960.md @@ -21,6 +21,7 @@ A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11 - https://github.com/YongYe-Security/CVE-2023-34960 - https://github.com/YongYe-Security/Chamilo_CVE-2023-34960-EXP - https://github.com/tpdlshdmlrkfmcla/cve-2023-34960 +- https://github.com/Ap0dexMe0/CVE-2023-34960 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34960.yaml diff --git a/cves/2023/CVE-2023-34992.md b/cves/2023/CVE-2023-34992.md index 22843bb4970..1471aeb641b 100644 --- a/cves/2023/CVE-2023-34992.md +++ b/cves/2023/CVE-2023-34992.md @@ -19,6 +19,7 @@ No PoCs from references. #### Github - https://github.com/horizon3ai/CVE-2023-34992 +- https://github.com/d0rb/CVE-2023-34992-Checker #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-34992.yaml diff --git a/cves/2023/CVE-2023-35078.md b/cves/2023/CVE-2023-35078.md index 4df4a92adb2..a53c9d58c8e 100644 --- a/cves/2023/CVE-2023-35078.md +++ b/cves/2023/CVE-2023-35078.md @@ -27,6 +27,7 @@ No PoCs from references. - https://github.com/raytheon0x21/CVE-2023-35078 - https://github.com/synfinner/CVE-2023-35078 - https://github.com/vchan-in/CVE-2023-35078-Exploit-POC +- https://github.com/vaishnochaitanya/CVE-2023-35078-Exploit-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35078.yaml diff --git a/cves/2023/CVE-2023-3519.md b/cves/2023/CVE-2023-3519.md index dc63ae5549f..717bad3b161 100644 --- a/cves/2023/CVE-2023-3519.md +++ b/cves/2023/CVE-2023-3519.md @@ -29,6 +29,7 @@ Unauthenticated remote code execution - https://github.com/mr-r3b00t/CVE-2023-3519 - https://github.com/passwa11/CVE-2023-3519 - https://github.com/rwincey/cve-2023-3519 +- https://github.com/dhammerg/CVE-2023-3519 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3519.yaml diff --git a/cves/2023/CVE-2023-35813.md b/cves/2023/CVE-2023-35813.md index 6f75eef9db3..15e03067f5c 100644 --- a/cves/2023/CVE-2023-35813.md +++ b/cves/2023/CVE-2023-35813.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/BagheeraAltered/CVE-2023-35813-PoC - https://github.com/aalexpereira/CVE-2023-35813 +- https://github.com/Rezy-Dev/CVE-2023-35813 +- https://github.com/her3ticAVI/CVE-2023-35813 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35813.yaml diff --git a/cves/2023/CVE-2023-35885.md b/cves/2023/CVE-2023-35885.md index ef228de1e0a..0d374e63aa9 100644 --- a/cves/2023/CVE-2023-35885.md +++ b/cves/2023/CVE-2023-35885.md @@ -14,6 +14,7 @@ CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. #### Github - https://github.com/Chocapikk/CVE-2023-35885 +- https://github.com/datackmy/FallingSkies-CVE-2023-35885 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35885.yaml diff --git a/cves/2023/CVE-2023-36003.md b/cves/2023/CVE-2023-36003.md index 8a8ec622b46..e58a17720bd 100644 --- a/cves/2023/CVE-2023-36003.md +++ b/cves/2023/CVE-2023-36003.md @@ -38,4 +38,5 @@ No PoCs from references. #### Github - https://github.com/m417z/CVE-2023-36003-POC - https://github.com/s3mPr1linux/CVE_2023_360003_POC +- https://github.com/johnnygreeme/CVE-2023-36003 diff --git a/cves/2023/CVE-2023-36123.md b/cves/2023/CVE-2023-36123.md index 43cd2d4e562..b45641f0a46 100644 --- a/cves/2023/CVE-2023-36123.md +++ b/cves/2023/CVE-2023-36123.md @@ -13,5 +13,5 @@ Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version A - https://github.com/9Bakabaka/CVE-2023-36123 #### Github -No PoCs found on GitHub currently. +- https://github.com/9Bakabaka/CVE-2023-36123 diff --git a/cves/2023/CVE-2023-36143.md b/cves/2023/CVE-2023-36143.md index 45b0391a68e..a0efaae8b6f 100644 --- a/cves/2023/CVE-2023-36143.md +++ b/cves/2023/CVE-2023-36143.md @@ -15,4 +15,5 @@ Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the #### Github - https://github.com/RobinTrigon/CVE-2023-36143 +- https://github.com/leonardobg/CVE-2023-36143 diff --git a/cves/2023/CVE-2023-36144.md b/cves/2023/CVE-2023-36144.md index 3218a8080d3..9962b57c1be 100644 --- a/cves/2023/CVE-2023-36144.md +++ b/cves/2023/CVE-2023-36144.md @@ -14,7 +14,7 @@ An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allo - https://github.com/leonardobg/CVE-2023-36144 #### Github -No PoCs found on GitHub currently. +- https://github.com/leonardobg/CVE-2023-36144 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36144.yaml diff --git a/cves/2023/CVE-2023-36644.md b/cves/2023/CVE-2023-36644.md index 72020709fac..5bb21655fd9 100644 --- a/cves/2023/CVE-2023-36644.md +++ b/cves/2023/CVE-2023-36644.md @@ -14,5 +14,5 @@ Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to r - https://github.com/caffeinated-labs/CVE-2023-36644 #### Github -No PoCs found on GitHub currently. +- https://github.com/caffeinated-labs/CVE-2023-36644 diff --git a/cves/2023/CVE-2023-36802.md b/cves/2023/CVE-2023-36802.md index f081ef68368..88674c122c1 100644 --- a/cves/2023/CVE-2023-36802.md +++ b/cves/2023/CVE-2023-36802.md @@ -31,4 +31,5 @@ No PoCs from references. - https://github.com/chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802 - https://github.com/rahul0xkr/Reproducing-CVE-2023-36802 - https://github.com/x0rb3l/CVE-2023-36802-MSKSSRV-LPE +- https://github.com/nhh9905/CVE-2023-36802 diff --git a/cves/2023/CVE-2023-36844.md b/cves/2023/CVE-2023-36844.md index f9be0bb9be8..7885815fbb1 100644 --- a/cves/2023/CVE-2023-36844.md +++ b/cves/2023/CVE-2023-36844.md @@ -28,6 +28,7 @@ A PHP External Variable Modification vulnerability in J-Web of Juniper Networks - https://github.com/ThatNotEasy/CVE-2023-36844 - https://github.com/r3dcl1ff/CVE-2023-36844_Juniper_RCE - https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844 +- https://github.com/Ap0dexMe0/CVE-2023-36844 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36844.yaml diff --git a/cves/2023/CVE-2023-36845.md b/cves/2023/CVE-2023-36845.md index 7a2e976bc0a..676d2e76b0a 100644 --- a/cves/2023/CVE-2023-36845.md +++ b/cves/2023/CVE-2023-36845.md @@ -40,6 +40,8 @@ A PHP External Variable Modification vulnerability in J-Web of Juniper Networks - https://github.com/r3dcl1ff/CVE-2023-36844_Juniper_RCE - https://github.com/simrotion13/CVE-2023-36845 - https://github.com/zaenhaxor/CVE-2023-36845 +- https://github.com/kopfjager007/CVE-2023-36845 +- https://github.com/vulncheck-oss/cve-2023-36845-scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36845.yaml diff --git a/cves/2023/CVE-2023-36874.md b/cves/2023/CVE-2023-36874.md index cea746f9b60..947e38ee31f 100644 --- a/cves/2023/CVE-2023-36874.md +++ b/cves/2023/CVE-2023-36874.md @@ -49,6 +49,7 @@ Windows Error Reporting Service Elevation of Privilege Vulnerability - https://github.com/Wh04m1001/CVE-2023-36874 - https://github.com/crisprss/CVE-2023-36874 - https://github.com/d0rb/CVE-2023-36874 +- https://github.com/johnnygreeme/CVE-2023-36874 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/win_error_cve_2023_36874.rb diff --git a/cves/2023/CVE-2023-37582.md b/cves/2023/CVE-2023-37582.md index 226246497c7..7beff5153d7 100644 --- a/cves/2023/CVE-2023-37582.md +++ b/cves/2023/CVE-2023-37582.md @@ -20,3 +20,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-37582.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-37582 diff --git a/cves/2023/CVE-2023-37598.md b/cves/2023/CVE-2023-37598.md index 64647768dfc..10e4ef90234 100644 --- a/cves/2023/CVE-2023-37598.md +++ b/cves/2023/CVE-2023-37598.md @@ -13,5 +13,5 @@ A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allow - https://github.com/sahiloj/CVE-2023-37598 #### Github -No PoCs found on GitHub currently. +- https://github.com/sahiloj/CVE-2023-37598 diff --git a/cves/2023/CVE-2023-37941.md b/cves/2023/CVE-2023-37941.md index 82a73886c98..18a1a3366d4 100644 --- a/cves/2023/CVE-2023-37941.md +++ b/cves/2023/CVE-2023-37941.md @@ -17,3 +17,6 @@ If an attacker gains write access to the Apache Superset metadata database, they #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/superset/CVE-2023-37941 diff --git a/cves/2023/CVE-2023-38146.md b/cves/2023/CVE-2023-38146.md index fbe30ac37fb..07bde7404d1 100644 --- a/cves/2023/CVE-2023-38146.md +++ b/cves/2023/CVE-2023-38146.md @@ -19,6 +19,7 @@ Windows Themes Remote Code Execution Vulnerability - https://github.com/Jnnshschl/CVE-2023-38146 - https://github.com/exploits-forsale/themebleed - https://github.com/gabe-k/themebleed +- https://github.com/CH0ico/CVE-2023-38146-Poc #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/theme_dll_hijack_cve_2023_38146.rb diff --git a/cves/2023/CVE-2023-38545.md b/cves/2023/CVE-2023-38545.md index 2999cb7cedc..42834359394 100644 --- a/cves/2023/CVE-2023-38545.md +++ b/cves/2023/CVE-2023-38545.md @@ -23,4 +23,7 @@ This flaw makes curl overflow a heap based buffer in the SOCKS5 proxyhandshake.W - https://github.com/fatmo666/CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow - https://github.com/imfht/CVE-2023-38545 - https://github.com/vanigori/CVE-2023-38545-sample +- https://github.com/UTsweetyfish/CVE-2023-38545 +- https://github.com/bcdannyboy/CVE-2023-38545 +- https://github.com/dbrugman/CVE-2023-38545-POC diff --git a/cves/2023/CVE-2023-38633.md b/cves/2023/CVE-2023-38633.md index 449e3789067..8f23f074db2 100644 --- a/cves/2023/CVE-2023-38633.md +++ b/cves/2023/CVE-2023-38633.md @@ -16,3 +16,5 @@ A directory traversal problem in the URL decoder of librsvg before 2.56.3 could #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/librsvg/CVE-2023-38633 diff --git a/cves/2023/CVE-2023-38646.md b/cves/2023/CVE-2023-38646.md index 448e615ec38..acab4a245c8 100644 --- a/cves/2023/CVE-2023-38646.md +++ b/cves/2023/CVE-2023-38646.md @@ -56,9 +56,15 @@ Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 all - https://github.com/shamo0/CVE-2023-38646-PoC - https://github.com/threatHNTR/CVE-2023-38646 - https://github.com/yxl2001/CVE-2023-38646 +- https://github.com/Kushiro45/metabase-cve-2023-38646 +- https://github.com/NosrevytsNg/Metabase-Pre-Auth-RCE-POC +- https://github.com/cleanmgr112/cve-2023-38646-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38646.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/metabase_setup_token_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/metabase/CVE-2023-38646 diff --git a/cves/2023/CVE-2023-38709.md b/cves/2023/CVE-2023-38709.md index 1c900ce1757..eed70df6b33 100644 --- a/cves/2023/CVE-2023-38709.md +++ b/cves/2023/CVE-2023-38709.md @@ -13,5 +13,5 @@ Faulty input validation in the core of Apache allows malicious or exploitable ba - http://seclists.org/fulldisclosure/2024/Jul/18 #### Github -No PoCs found on GitHub currently. +- https://github.com/mrmtwoj/apache-vulnerability-testing diff --git a/cves/2023/CVE-2023-38817.md b/cves/2023/CVE-2023-38817.md index c2b02f8ceb7..f77718a8a9b 100644 --- a/cves/2023/CVE-2023-38817.md +++ b/cves/2023/CVE-2023-38817.md @@ -14,4 +14,5 @@ An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gai #### Github - https://github.com/kite03/echoac-poc +- https://github.com/SecSecBurger/CVE-2023-38817 diff --git a/cves/2023/CVE-2023-38829.md b/cves/2023/CVE-2023-38829.md index ba0b5d12f43..029d8e3b1b8 100644 --- a/cves/2023/CVE-2023-38829.md +++ b/cves/2023/CVE-2023-38829.md @@ -14,5 +14,5 @@ An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execut - https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E #### Github -No PoCs found on GitHub currently. +- https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E diff --git a/cves/2023/CVE-2023-38831.md b/cves/2023/CVE-2023-38831.md index c8cf1eded47..d9bb486f063 100644 --- a/cves/2023/CVE-2023-38831.md +++ b/cves/2023/CVE-2023-38831.md @@ -77,6 +77,12 @@ RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user - https://github.com/thegr1ffyn/CVE-2023-38831 - https://github.com/xaitax/WinRAR-CVE-2023-38831 - https://github.com/z3r0sw0rd/CVE-2023-38831-PoC +- https://github.com/anelya0333/Exploiting-CVE-2023-38831 +- https://github.com/kuyrathdaro/cve-2023-38831 +- https://github.com/lightningspeed221/Winrar-Exploit-CVE-2023-38831 +- https://github.com/mishra0230/CVE-2023-38831 +- https://github.com/ngothienan/CVE-2023-38831 +- https://github.com/sudo-py-dev/CVE-2023-38831 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/winrar_cve_2023_38831.rb diff --git a/cves/2023/CVE-2023-38840.md b/cves/2023/CVE-2023-38840.md index 6cb26c532c7..5672d9f5f66 100644 --- a/cves/2023/CVE-2023-38840.md +++ b/cves/2023/CVE-2023-38840.md @@ -15,5 +15,5 @@ Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obt - https://redmaple.tech/blogs/2023/extract-bitwarden-vault-passwords/ #### Github -No PoCs found on GitHub currently. +- https://github.com/markuta/bw-dump diff --git a/cves/2023/CVE-2023-38890.md b/cves/2023/CVE-2023-38890.md index a9d112e3181..1430b6f1af9 100644 --- a/cves/2023/CVE-2023-38890.md +++ b/cves/2023/CVE-2023-38890.md @@ -13,5 +13,6 @@ Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary - https://github.com/akshadjoshi/CVE-2023-38890 #### Github -No PoCs found on GitHub currently. +- https://github.com/Tagoletta/CVE-2023-38890 +- https://github.com/akshadjoshi/CVE-2023-38890 diff --git a/cves/2023/CVE-2023-39063.md b/cves/2023/CVE-2023-39063.md index b324d22dc86..1e5b89c03d9 100644 --- a/cves/2023/CVE-2023-39063.md +++ b/cves/2023/CVE-2023-39063.md @@ -13,5 +13,5 @@ Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to - https://github.com/AndreGNogueira/CVE-2023-39063 #### Github -No PoCs found on GitHub currently. +- https://github.com/AndreGNogueira/CVE-2023-39063 diff --git a/cves/2023/CVE-2023-39115.md b/cves/2023/CVE-2023-39115.md index 2c186f5aa28..000dc53104f 100644 --- a/cves/2023/CVE-2023-39115.md +++ b/cves/2023/CVE-2023-39115.md @@ -15,7 +15,7 @@ install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Scrip - https://www.exploit-db.com/exploits/51656 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xrajdip/CVE-2023-39115 #### ExploitDB - https://www.exploit-db.com/exploits/51656 diff --git a/cves/2023/CVE-2023-39143.md b/cves/2023/CVE-2023-39143.md index c62f627f6ee..ab92c3d132d 100644 --- a/cves/2023/CVE-2023-39143.md +++ b/cves/2023/CVE-2023-39143.md @@ -13,7 +13,7 @@ PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabl - https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/ #### Github -No PoCs found on GitHub currently. +- https://github.com/foregenix/CVE-2023-39143 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39143.yaml diff --git a/cves/2023/CVE-2023-39361.md b/cves/2023/CVE-2023-39361.md index 8b349e3cf04..20cc813f284 100644 --- a/cves/2023/CVE-2023-39361.md +++ b/cves/2023/CVE-2023-39361.md @@ -18,3 +18,6 @@ Cacti is an open source operational monitoring and fault management framework. A #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39361.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2023-39361 diff --git a/cves/2023/CVE-2023-40028.md b/cves/2023/CVE-2023-40028.md index f8b59bb10df..c059714aa52 100644 --- a/cves/2023/CVE-2023-40028.md +++ b/cves/2023/CVE-2023-40028.md @@ -24,6 +24,8 @@ No PoCs from references. - https://github.com/rvizx/CVE-2023-40028 - https://github.com/sudlit/CVE-2023-40028 - https://github.com/syogod/CVE-2023-40028 +- https://github.com/Stp1t/CVE-2023-40028 +- https://github.com/rvzsec/CVE-2023-40028 #### ExploitDB - https://www.exploit-db.com/exploits/52409 diff --git a/cves/2023/CVE-2023-40289.md b/cves/2023/CVE-2023-40289.md index 973e477fc8a..1d973666bce 100644 --- a/cves/2023/CVE-2023-40289.md +++ b/cves/2023/CVE-2023-40289.md @@ -14,5 +14,5 @@ A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023 #### Github -No PoCs found on GitHub currently. +- https://github.com/s-hamann/CVE-2023-40289 diff --git a/cves/2023/CVE-2023-40297.md b/cves/2023/CVE-2023-40297.md index 8749c6762f0..400f16b9627 100644 --- a/cves/2023/CVE-2023-40297.md +++ b/cves/2023/CVE-2023-40297.md @@ -14,5 +14,5 @@ Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the - https://github.com/sahar042/CVE-2023-40297 #### Github -No PoCs found on GitHub currently. +- https://github.com/sahar042/CVE-2023-40297 diff --git a/cves/2023/CVE-2023-40362.md b/cves/2023/CVE-2023-40362.md index 9c95ab1f32f..7023cac2539 100644 --- a/cves/2023/CVE-2023-40362.md +++ b/cves/2023/CVE-2023-40362.md @@ -13,5 +13,5 @@ An issue was discovered in CentralSquare Click2Gov Building Permit before Octobe - https://github.com/ally-petitt/CVE-2023-40362 #### Github -No PoCs found on GitHub currently. +- https://github.com/ally-petitt/CVE-2023-40362 diff --git a/cves/2023/CVE-2023-40868.md b/cves/2023/CVE-2023-40868.md index 786f765c95b..9a5b7aeac48 100644 --- a/cves/2023/CVE-2023-40868.md +++ b/cves/2023/CVE-2023-40868.md @@ -13,5 +13,5 @@ Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo - https://github.com/MinoTauro2020/CVE-2023-40868 #### Github -No PoCs found on GitHub currently. +- https://github.com/MinoTauro2020/CVE-2023-40868 diff --git a/cves/2023/CVE-2023-41717.md b/cves/2023/CVE-2023-41717.md index 68ad8d9ae69..4f9c8d4714f 100644 --- a/cves/2023/CVE-2023-41717.md +++ b/cves/2023/CVE-2023-41717.md @@ -13,5 +13,5 @@ Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior all No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/federella/CVE-2023-41717 diff --git a/cves/2023/CVE-2023-41892.md b/cves/2023/CVE-2023-41892.md index 2a5095c61fa..5f4b5142001 100644 --- a/cves/2023/CVE-2023-41892.md +++ b/cves/2023/CVE-2023-41892.md @@ -20,9 +20,13 @@ Craft CMS is a platform for creating digital experiences. This is a high-impact, - https://github.com/diegaccio/Craft-CMS-Exploit - https://github.com/user01-1/CVE-2023-41892_poc - https://github.com/zaenhaxor/CVE-2023-41892 +- https://github.com/lyccyc/CVE-2023-41892_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41892.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_unauth_rce_cve_2023_41892.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/craftcms/CVE-2023-41892 diff --git a/cves/2023/CVE-2023-4197.md b/cves/2023/CVE-2023-4197.md index 91b13a6e983..1e56924feff 100644 --- a/cves/2023/CVE-2023-4197.md +++ b/cves/2023/CVE-2023-4197.md @@ -14,4 +14,5 @@ Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain #### Github - https://github.com/alien-keric/CVE-2023-4197 +- https://github.com/alienkeric/CVE-2023-4197 diff --git a/cves/2023/CVE-2023-4220.md b/cves/2023/CVE-2023-4220.md index 06663ff0b91..f24c4ef2d37 100644 --- a/cves/2023/CVE-2023-4220.md +++ b/cves/2023/CVE-2023-4220.md @@ -39,6 +39,10 @@ Unrestricted file upload in big file upload functionality in `/main/inc/lib/java - https://github.com/thefizzyfish/CVE-2023-4220 - https://github.com/thefizzyfish/CVE-2023-4220_Chamilo_RCE - https://github.com/zora-beep/CVE-2023-4220 +- https://github.com/Least-Significant-Bit/CVE-2023-4220 +- https://github.com/RandyNin/CVE-2023-4220 +- https://github.com/Sn0wBaall/CVE-2023-4220-PoC +- https://github.com/SpeatX/ChamiloLMS-CVE-2023-4220 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4220.yaml diff --git a/cves/2023/CVE-2023-42283.md b/cves/2023/CVE-2023-42283.md index 82e31f1fb31..12e4a5cdd7a 100644 --- a/cves/2023/CVE-2023-42283.md +++ b/cves/2023/CVE-2023-42283.md @@ -13,5 +13,5 @@ Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows atta - https://github.com/andreysanyuk/CVE-2023-42283 #### Github -No PoCs found on GitHub currently. +- https://github.com/andreysanyuk/CVE-2023-42283 diff --git a/cves/2023/CVE-2023-42284.md b/cves/2023/CVE-2023-42284.md index 355e8e09597..3ae2e5a80d0 100644 --- a/cves/2023/CVE-2023-42284.md +++ b/cves/2023/CVE-2023-42284.md @@ -13,5 +13,5 @@ Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows - https://github.com/andreysanyuk/CVE-2023-42284 #### Github -No PoCs found on GitHub currently. +- https://github.com/andreysanyuk/CVE-2023-42284 diff --git a/cves/2023/CVE-2023-42362.md b/cves/2023/CVE-2023-42362.md index 6fa10b1126c..5cc137bad9c 100644 --- a/cves/2023/CVE-2023-42362.md +++ b/cves/2023/CVE-2023-42362.md @@ -13,5 +13,5 @@ An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote - https://github.com/Mr-n0b3dy/CVE-2023-42362 #### Github -No PoCs found on GitHub currently. +- https://github.com/Mr-n0b3dy/CVE-2023-42362 diff --git a/cves/2023/CVE-2023-42793.md b/cves/2023/CVE-2023-42793.md index ab71b0d8e78..650546072bf 100644 --- a/cves/2023/CVE-2023-42793.md +++ b/cves/2023/CVE-2023-42793.md @@ -32,6 +32,8 @@ In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on T - https://github.com/johnossawy/CVE-2023-42793_POC - https://github.com/junnythemarksman/CVE-2023-42793 - https://github.com/whoamins/CVE-2023-42793 +- https://github.com/DDestinys/CVE-2023-42793 +- https://github.com/cxdxnt/CVE-2023-42793 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42793.yaml @@ -41,3 +43,6 @@ In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on T #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2023_42793.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/teamcity/CVE-2023-42793 diff --git a/cves/2023/CVE-2023-42820.md b/cves/2023/CVE-2023-42820.md index a1996163d09..8b0abbc94f2 100644 --- a/cves/2023/CVE-2023-42820.md +++ b/cves/2023/CVE-2023-42820.md @@ -19,3 +19,5 @@ No PoCs from references. - https://github.com/tarihub/blackjump - https://github.com/tarimoe/blackjump +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jumpserver/CVE-2023-42820 diff --git a/cves/2023/CVE-2023-43208.md b/cves/2023/CVE-2023-43208.md index d9b6ef3c71d..1e77a22691e 100644 --- a/cves/2023/CVE-2023-43208.md +++ b/cves/2023/CVE-2023-43208.md @@ -20,6 +20,16 @@ NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthent - https://github.com/K3ysTr0K3R/CVE-2023-43208-EXPLOIT - https://github.com/gotr00t0day/NextGen-Mirth-Connect-Exploit - https://github.com/jakabakos/CVE-2023-43208-mirth-connect-rce-poc +- https://github.com/4nuxd/CVE-2023-43208 +- https://github.com/Criz117/CVE-2023-43208-PoC +- https://github.com/D3m0nicw0lf/CVE-2023-43208 +- https://github.com/Humberto-pixel/CVE-2023-43208-PoC +- https://github.com/LunaLynx12/cve-2023-43208-poc +- https://github.com/MKIRAHMET/PoC-2023-43208 +- https://github.com/Pegasus0xx/CVE-2023-43208 +- https://github.com/az4rvs/Mirth-Connect-CVE-2023-43208 +- https://github.com/kyakei/CVE-2023-43208 +- https://github.com/predyy/CVE-2023-43208 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43208.yaml diff --git a/cves/2023/CVE-2023-43261.md b/cves/2023/CVE-2023-43261.md index 6d55deca2a4..aa696de07d5 100644 --- a/cves/2023/CVE-2023-43261.md +++ b/cves/2023/CVE-2023-43261.md @@ -15,7 +15,7 @@ An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35. - https://medium.com/@win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf #### Github -No PoCs found on GitHub currently. +- https://github.com/win3zz/CVE-2023-43261 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43261.yaml diff --git a/cves/2023/CVE-2023-43284.md b/cves/2023/CVE-2023-43284.md index 82d733fbf1e..7f9062a57a3 100644 --- a/cves/2023/CVE-2023-43284.md +++ b/cves/2023/CVE-2023-43284.md @@ -14,5 +14,5 @@ D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices a - https://github.com/MateusTesser/CVE-2023-43284 #### Github -No PoCs found on GitHub currently. +- https://github.com/MateusTesser/CVE-2023-43284 diff --git a/cves/2023/CVE-2023-43323.md b/cves/2023/CVE-2023-43323.md index fc936c89c82..adccb527e25 100644 --- a/cves/2023/CVE-2023-43323.md +++ b/cves/2023/CVE-2023-43323.md @@ -13,7 +13,7 @@ mooSocial 3.1.8 is vulnerable to external service interaction on post function. - https://github.com/ahrixia/CVE-2023-43323 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-43323 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43323.yaml diff --git a/cves/2023/CVE-2023-43325.md b/cves/2023/CVE-2023-43325.md index f2fbc431be8..b3bbeeb147f 100644 --- a/cves/2023/CVE-2023-43325.md +++ b/cves/2023/CVE-2023-43325.md @@ -13,7 +13,7 @@ A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] p - https://github.com/ahrixia/CVE-2023-43325 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-43325 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43325.yaml diff --git a/cves/2023/CVE-2023-43340.md b/cves/2023/CVE-2023-43340.md index 9b3facde10c..287b045a860 100644 --- a/cves/2023/CVE-2023-43340.md +++ b/cves/2023/CVE-2023-43340.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local att - https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Admin-Options #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options diff --git a/cves/2023/CVE-2023-43341.md b/cves/2023/CVE-2023-43341.md index 45ca1f71ea3..aee0f228908 100644 --- a/cves/2023/CVE-2023-43341.md +++ b/cves/2023/CVE-2023-43341.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local - https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Connection- #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection- diff --git a/cves/2023/CVE-2023-43342.md b/cves/2023/CVE-2023-43342.md index 92f37d82cbc..a1b651d273d 100644 --- a/cves/2023/CVE-2023-43342.md +++ b/cves/2023/CVE-2023-43342.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/Quick-CMS-Stored-XSS---Languages-Frontend #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend diff --git a/cves/2023/CVE-2023-43343.md b/cves/2023/CVE-2023-43343.md index f9768b7984b..f7daadd48a6 100644 --- a/cves/2023/CVE-2023-43343.md +++ b/cves/2023/CVE-2023-43343.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/Quick-CMS-Stored-XSS---Pages-Files #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files diff --git a/cves/2023/CVE-2023-43344.md b/cves/2023/CVE-2023-43344.md index 90cca1b3081..6d15c193fd6 100644 --- a/cves/2023/CVE-2023-43344.md +++ b/cves/2023/CVE-2023-43344.md @@ -13,5 +13,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description diff --git a/cves/2023/CVE-2023-43345.md b/cves/2023/CVE-2023-43345.md index b2e6e52546a..ba282af939c 100644 --- a/cves/2023/CVE-2023-43345.md +++ b/cves/2023/CVE-2023-43345.md @@ -13,5 +13,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/CVE-2023-43345-Quick-CMS-Stored-XSS---Pages-Content #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43345-Quick-CMS-Stored-XSS---Pages-Content diff --git a/cves/2023/CVE-2023-43346.md b/cves/2023/CVE-2023-43346.md index a4c441b8a26..1204c227e89 100644 --- a/cves/2023/CVE-2023-43346.md +++ b/cves/2023/CVE-2023-43346.md @@ -14,5 +14,5 @@ Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows - https://github.com/sromanhu/Quick-CMS-Stored-XSS---Languages-Backend #### Github -No PoCs found on GitHub currently. +- https://github.com/sromanhu/CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend diff --git a/cves/2023/CVE-2023-43364.md b/cves/2023/CVE-2023-43364.md index 7f75ff2f889..992c4faa3fe 100644 --- a/cves/2023/CVE-2023-43364.md +++ b/cves/2023/CVE-2023-43364.md @@ -17,4 +17,5 @@ main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpec #### Github - https://github.com/0hmsec/Searchor-2.4.0-Arbitrary-CMD-Injection-Python - https://github.com/libertycityhacker/CVE-2023-43364-Exploit-CVE +- https://github.com/Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit diff --git a/cves/2023/CVE-2023-44487.md b/cves/2023/CVE-2023-44487.md index a9fc8291477..762a4faebe0 100644 --- a/cves/2023/CVE-2023-44487.md +++ b/cves/2023/CVE-2023-44487.md @@ -70,6 +70,10 @@ The HTTP/2 protocol allows a denial of service (server resource consumption) bec - https://github.com/studiogangster/CVE-2023-44487 - https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC - https://github.com/zanks08/cve-2023-44487-demo +- https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit +- https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos +- https://github.com/tahaXafous/CVE-2023-44487-dos +- https://github.com/tpirate/cve-2023-44487-POC #### ExploitDB - https://www.exploit-db.com/exploits/52426 diff --git a/cves/2023/CVE-2023-4450.md b/cves/2023/CVE-2023-4450.md index a236e34ddd8..b42d8048e46 100644 --- a/cves/2023/CVE-2023-4450.md +++ b/cves/2023/CVE-2023-4450.md @@ -24,3 +24,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4450.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jimureport/CVE-2023-4450 diff --git a/cves/2023/CVE-2023-44811.md b/cves/2023/CVE-2023-44811.md index 5ca24d731d8..b79db928f34 100644 --- a/cves/2023/CVE-2023-44811.md +++ b/cves/2023/CVE-2023-44811.md @@ -13,5 +13,5 @@ Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a re - https://github.com/ahrixia/CVE-2023-44811 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-44811 diff --git a/cves/2023/CVE-2023-44812.md b/cves/2023/CVE-2023-44812.md index 802ed89c824..adfe680da04 100644 --- a/cves/2023/CVE-2023-44812.md +++ b/cves/2023/CVE-2023-44812.md @@ -13,7 +13,7 @@ Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote at - https://github.com/ahrixia/CVE-2023-44812 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-44812 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44812.yaml diff --git a/cves/2023/CVE-2023-44813.md b/cves/2023/CVE-2023-44813.md index 8841e241a31..0d5985a62d8 100644 --- a/cves/2023/CVE-2023-44813.md +++ b/cves/2023/CVE-2023-44813.md @@ -13,7 +13,7 @@ Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote at - https://github.com/ahrixia/CVE-2023-44813 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-44813 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44813.yaml diff --git a/cves/2023/CVE-2023-45542.md b/cves/2023/CVE-2023-45542.md index cd2d56647cc..1f17cb95621 100644 --- a/cves/2023/CVE-2023-45542.md +++ b/cves/2023/CVE-2023-45542.md @@ -13,7 +13,7 @@ Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker t - https://github.com/ahrixia/CVE-2023-45542 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-45542 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45542.yaml diff --git a/cves/2023/CVE-2023-45612.md b/cves/2023/CVE-2023-45612.md index c69fbff7cd1..3eeb33bd58e 100644 --- a/cves/2023/CVE-2023-45612.md +++ b/cves/2023/CVE-2023-45612.md @@ -13,5 +13,11 @@ In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/aecelen/ktor-xxe-poc +- https://github.com/clemfavre/cve-2023-45612_exploit +- https://github.com/infernosalex/CVE-2023-45612-PoC +- https://github.com/ksaweryr/CVE-2023-45612-PoC +- https://github.com/razvanclaudiu/ktor-xxe-poc +- https://github.com/seraphimi/ktor-xxe +- https://github.com/stefan-500/ktor-cve-2023-45612-poc diff --git a/cves/2023/CVE-2023-45866.md b/cves/2023/CVE-2023-45866.md index ed67479f207..339b8b4c6ca 100644 --- a/cves/2023/CVE-2023-45866.md +++ b/cves/2023/CVE-2023-45866.md @@ -20,4 +20,5 @@ Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID D - https://github.com/jjjjjjjj987/cve-2023-45866-py - https://github.com/ladyg00se/CVE-2023-45866_WIP - https://github.com/xG3nesis/RustyInjector +- https://github.com/hegaz0y/-BuL diff --git a/cves/2023/CVE-2023-45992.md b/cves/2023/CVE-2023-45992.md index 9eb95605467..1bdc131a30d 100644 --- a/cves/2023/CVE-2023-45992.md +++ b/cves/2023/CVE-2023-45992.md @@ -13,5 +13,5 @@ A vulnerability in the web-based interface of the RUCKUS Cloudpath product on ve - https://github.com/harry935/CVE-2023-45992 #### Github -No PoCs found on GitHub currently. +- https://github.com/harry935/CVE-2023-45992 diff --git a/cves/2023/CVE-2023-46014.md b/cves/2023/CVE-2023-46014.md index e156324f218..819512ab34a 100644 --- a/cves/2023/CVE-2023-46014.md +++ b/cves/2023/CVE-2023-46014.md @@ -14,4 +14,5 @@ SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 #### Github - https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC +- https://github.com/ersinerenler/CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46015.md b/cves/2023/CVE-2023-46015.md index ea4908dcbd0..77504bfc60e 100644 --- a/cves/2023/CVE-2023-46015.md +++ b/cves/2023/CVE-2023-46015.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Ban - https://github.com/ersinerenler/CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46016.md b/cves/2023/CVE-2023-46016.md index b20741e46f0..a8d2774bf07 100644 --- a/cves/2023/CVE-2023-46016.md +++ b/cves/2023/CVE-2023-46016.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows att - https://github.com/ersinerenler/CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46017.md b/cves/2023/CVE-2023-46017.md index 96ff6fd2431..12d98d382b6 100644 --- a/cves/2023/CVE-2023-46017.md +++ b/cves/2023/CVE-2023-46017.md @@ -13,5 +13,5 @@ SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 - https://github.com/ersinerenler/CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46018.md b/cves/2023/CVE-2023-46018.md index f738757e592..c2681f766dd 100644 --- a/cves/2023/CVE-2023-46018.md +++ b/cves/2023/CVE-2023-46018.md @@ -13,5 +13,5 @@ SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \ - https://github.com/ersinerenler/CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46019.md b/cves/2023/CVE-2023-46019.md index 7b1423c067b..92bff774c19 100644 --- a/cves/2023/CVE-2023-46019.md +++ b/cves/2023/CVE-2023-46019.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank - https://github.com/ersinerenler/CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46020.md b/cves/2023/CVE-2023-46020.md index a46ccf1a0d9..e85f941a733 100644 --- a/cves/2023/CVE-2023-46020.md +++ b/cves/2023/CVE-2023-46020.md @@ -13,5 +13,5 @@ Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 - https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability diff --git a/cves/2023/CVE-2023-46021.md b/cves/2023/CVE-2023-46021.md index 4092f3966b7..2915cbd2f1b 100644 --- a/cves/2023/CVE-2023-46021.md +++ b/cves/2023/CVE-2023-46021.md @@ -13,5 +13,5 @@ SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows - https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability diff --git a/cves/2023/CVE-2023-46022.md b/cves/2023/CVE-2023-46022.md index e06ff6e022d..a2c93f9427a 100644 --- a/cves/2023/CVE-2023-46022.md +++ b/cves/2023/CVE-2023-46022.md @@ -13,7 +13,7 @@ SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows - https://github.com/ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability #### ExploitDB - https://www.exploit-db.com/exploits/51912 diff --git a/cves/2023/CVE-2023-46136.md b/cves/2023/CVE-2023-46136.md index e1a9b02b203..b75fbf3b143 100644 --- a/cves/2023/CVE-2023-46136.md +++ b/cves/2023/CVE-2023-46136.md @@ -14,5 +14,5 @@ Werkzeug is a comprehensive WSGI web application library. If an upload of a file No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/JawadPy/WerkGhost diff --git a/cves/2023/CVE-2023-46229.md b/cves/2023/CVE-2023-46229.md index 21dd2fb4b47..4b53b0df272 100644 --- a/cves/2023/CVE-2023-46229.md +++ b/cves/2023/CVE-2023-46229.md @@ -13,5 +13,5 @@ LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.p No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/JarvisDing-sdu/Yasa-CVE-2023-46229 diff --git a/cves/2023/CVE-2023-4634.md b/cves/2023/CVE-2023-4634.md index fb4f4a2630f..ca7755ac156 100644 --- a/cves/2023/CVE-2023-4634.md +++ b/cves/2023/CVE-2023-4634.md @@ -16,6 +16,7 @@ The Media Library Assistant plugin for WordPress is vulnerable to Local File Inc #### Github - https://github.com/Patrowl/CVE-2023-4634 - https://github.com/lehazare/ProjetCL +- https://github.com/Evillm/CVE-2023-4634-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4634.yaml diff --git a/cves/2023/CVE-2023-46371.md b/cves/2023/CVE-2023-46371.md index 76e98a38f55..05b4db5dfdd 100644 --- a/cves/2023/CVE-2023-46371.md +++ b/cves/2023/CVE-2023-46371.md @@ -15,5 +15,5 @@ TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulne - https://github.com/Jianchun-Ding/CVE-poc-update #### Github -No PoCs found on GitHub currently. +- https://github.com/Jianchun-Ding/CVE-poc-update diff --git a/cves/2023/CVE-2023-46404.md b/cves/2023/CVE-2023-46404.md index debe93a65c9..56947b3e87d 100644 --- a/cves/2023/CVE-2023-46404.md +++ b/cves/2023/CVE-2023-46404.md @@ -13,5 +13,5 @@ PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulner No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/windecks/CVE-2023-46404 diff --git a/cves/2023/CVE-2023-46450.md b/cves/2023/CVE-2023-46450.md index dfd26de9610..4d909374056 100644 --- a/cves/2023/CVE-2023-46450.md +++ b/cves/2023/CVE-2023-46450.md @@ -14,5 +14,5 @@ Sourcecodester Free and Open Source inventory management system 1.0 is vulnerabl - https://youtu.be/LQy0_xIK2q0 #### Github -No PoCs found on GitHub currently. +- https://github.com/yte121/-CVE-2023-46450 diff --git a/cves/2023/CVE-2023-46451.md b/cves/2023/CVE-2023-46451.md index d45fa1644ba..20e9ad9acab 100644 --- a/cves/2023/CVE-2023-46451.md +++ b/cves/2023/CVE-2023-46451.md @@ -14,5 +14,5 @@ Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) - https://youtu.be/f8B3_m5YfqI #### Github -No PoCs found on GitHub currently. +- https://github.com/sajaljat/CVE-2023-46451 diff --git a/cves/2023/CVE-2023-46604.md b/cves/2023/CVE-2023-46604.md index 662bb893dae..dacdd598f16 100644 --- a/cves/2023/CVE-2023-46604.md +++ b/cves/2023/CVE-2023-46604.md @@ -45,9 +45,15 @@ The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. Th - https://github.com/tomasmussi/activemq-cve-2023-46604 - https://github.com/vjayant93/CVE-2023-46604-POC - https://github.com/vulncheck-oss/cve-2023-46604 +- https://github.com/KlaasStessens/CVE-2023-46604 +- https://github.com/REGGYRAIDER/CVE-2023-46604-RCE +- https://github.com/RockyDesigne/SSP-Assignment-3-RCEYouLater #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-46604.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2023-46604 diff --git a/cves/2023/CVE-2023-46694.md b/cves/2023/CVE-2023-46694.md index a9113ee47d6..8f932a51c2f 100644 --- a/cves/2023/CVE-2023-46694.md +++ b/cves/2023/CVE-2023-46694.md @@ -14,5 +14,5 @@ Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potent - https://github.com/invisiblebyte/CVE-2023-46694 #### Github -No PoCs found on GitHub currently. +- https://github.com/invisiblebyte/CVE-2023-46694 diff --git a/cves/2023/CVE-2023-46818.md b/cves/2023/CVE-2023-46818.md index 7c9fb6c2d94..89bb31116b9 100644 --- a/cves/2023/CVE-2023-46818.md +++ b/cves/2023/CVE-2023-46818.md @@ -25,6 +25,7 @@ An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be - https://github.com/rvizx/CVE-2023-46818 - https://github.com/vulnerk0/CVE-2023-46818 - https://github.com/zs1n/CVE-2023-46818 +- https://github.com/rvzsec/CVE-2023-46818 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46818.yaml diff --git a/cves/2023/CVE-2023-46865.md b/cves/2023/CVE-2023-46865.md index b7fe5631ed0..7e5f21afbbe 100644 --- a/cves/2023/CVE-2023-46865.md +++ b/cves/2023/CVE-2023-46865.md @@ -15,5 +15,5 @@ - https://notes.netbytesec.com/2023/11/post-auth-rce-in-crater-invoice.html #### Github -No PoCs found on GitHub currently. +- https://github.com/asylumdx/Crater-CVE-2023-46865-RCE diff --git a/cves/2023/CVE-2023-46974.md b/cves/2023/CVE-2023-46974.md index 8ac2207047a..4af8f2ecb6a 100644 --- a/cves/2023/CVE-2023-46974.md +++ b/cves/2023/CVE-2023-46974.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in Best Courier Management System v.1.000 all - https://youtu.be/5oVfJHT_-Ys #### Github -No PoCs found on GitHub currently. +- https://github.com/yte121/CVE-2023-46974 diff --git a/cves/2023/CVE-2023-46998.md b/cves/2023/CVE-2023-46998.md index 11b91329abd..f625465a715 100644 --- a/cves/2023/CVE-2023-46998.md +++ b/cves/2023/CVE-2023-46998.md @@ -13,5 +13,5 @@ Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allow - https://github.com/soy-oreocato/CVE-2023-46998/ #### Github -No PoCs found on GitHub currently. +- https://github.com/soy-oreocato/CVE-2023-46998 diff --git a/cves/2023/CVE-2023-48084.md b/cves/2023/CVE-2023-48084.md index 34a70fa0d8b..ee160f2f692 100644 --- a/cves/2023/CVE-2023-48084.md +++ b/cves/2023/CVE-2023-48084.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/Hamibubu/CVE-2023-48084 - https://github.com/bucketcat/CVE-2023-48084 +- https://github.com/MettHK/CVE-2023-48084-Revised #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48084.yaml diff --git a/cves/2023/CVE-2023-48223.md b/cves/2023/CVE-2023-48223.md index d902d3a8d43..9aab5a06113 100644 --- a/cves/2023/CVE-2023-48223.md +++ b/cves/2023/CVE-2023-48223.md @@ -13,5 +13,5 @@ fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3 - https://github.com/nearform/fast-jwt/security/advisories/GHSA-c2ff-88x2-x9pg #### Github -No PoCs found on GitHub currently. +- https://github.com/lucastran05/CVE-2023-48223 diff --git a/cves/2023/CVE-2023-4861.md b/cves/2023/CVE-2023-4861.md index 19fb2004cfa..1488f3e1f0b 100644 --- a/cves/2023/CVE-2023-4861.md +++ b/cves/2023/CVE-2023-4861.md @@ -13,4 +13,4 @@ The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload - https://wpscan.com/vulnerability/7fa03f00-25c7-4e40-8592-bb4001ce019d #### Github -No PoCs found on GitHub currently. +- https://github.com/noambouillet/CVE-2023-4861-PoC diff --git a/cves/2023/CVE-2023-48849.md b/cves/2023/CVE-2023-48849.md index a1d05d00c82..801d6535db1 100644 --- a/cves/2023/CVE-2023-48849.md +++ b/cves/2023/CVE-2023-48849.md @@ -13,5 +13,5 @@ Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthentica - https://github.com/delsploit/CVE-2023-48849 #### Github -No PoCs found on GitHub currently. +- https://github.com/delsploit/CVE-2023-48849 diff --git a/cves/2023/CVE-2023-48858.md b/cves/2023/CVE-2023-48858.md index a5350848909..c0cd58cca4a 100644 --- a/cves/2023/CVE-2023-48858.md +++ b/cves/2023/CVE-2023-48858.md @@ -13,5 +13,5 @@ A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.C - https://github.com/Shumerez/CVE-2023-48858 #### Github -No PoCs found on GitHub currently. +- https://github.com/Shumerez/CVE-2023-48858 diff --git a/cves/2023/CVE-2023-49031.md b/cves/2023/CVE-2023-49031.md index 16855a00066..62dbf73236d 100644 --- a/cves/2023/CVE-2023-49031.md +++ b/cves/2023/CVE-2023-49031.md @@ -13,5 +13,5 @@ Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) - https://github.com/Yoshik0xF6/CVE-2023-49031 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yoshik0xF6/CVE-2023-49031 diff --git a/cves/2023/CVE-2023-49070.md b/cves/2023/CVE-2023-49070.md index 2e0c36b5226..76a474f244c 100644 --- a/cves/2023/CVE-2023-49070.md +++ b/cves/2023/CVE-2023-49070.md @@ -21,9 +21,13 @@ Pre-auth RCE in Apache Ofbiz 18.12.09.It's due to XML-RPC no longer maintained - https://github.com/bruce120/Apache-OFBiz-Authentication-Bypass - https://github.com/jakabakos/Apache-OFBiz-Authentication-Bypass - https://github.com/yukselberkay/CVE-2023-49070_CVE-2023-51467 +- https://github.com/GraySignal/Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49070.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_ofbiz_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2023-49070 diff --git a/cves/2023/CVE-2023-49103.md b/cves/2023/CVE-2023-49103.md index 7eda7828ddb..3259544347a 100644 --- a/cves/2023/CVE-2023-49103.md +++ b/cves/2023/CVE-2023-49103.md @@ -23,3 +23,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/owncloud_phpinfo_reader.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/owncloud/CVE-2023-49103 diff --git a/cves/2023/CVE-2023-4911.md b/cves/2023/CVE-2023-4911.md index 1733809c6e6..5b741afc354 100644 --- a/cves/2023/CVE-2023-4911.md +++ b/cves/2023/CVE-2023-4911.md @@ -43,6 +43,8 @@ A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so whi - https://github.com/snurkeburk/Looney-Tunables - https://github.com/vscvetkov/code - https://github.com/xiaoQ1z/CVE-2023-4911 +- https://github.com/baeseungwon1010/CVE-2023-4911 +- https://github.com/jarpex/cve-2023-4911-exploit-optimized #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-4911.yaml diff --git a/cves/2023/CVE-2023-49313.md b/cves/2023/CVE-2023-49313.md index 536fccda12f..bcccf8bbb29 100644 --- a/cves/2023/CVE-2023-49313.md +++ b/cves/2023/CVE-2023-49313.md @@ -13,5 +13,5 @@ A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to comprom - https://github.com/louiselalanne/CVE-2023-49313 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2023-49313 diff --git a/cves/2023/CVE-2023-49438.md b/cves/2023/CVE-2023-49438.md index c394a42c041..4e42ed49e56 100644 --- a/cves/2023/CVE-2023-49438.md +++ b/cves/2023/CVE-2023-49438.md @@ -13,7 +13,7 @@ An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 - https://github.com/brandon-t-elliott/CVE-2023-49438 #### Github -No PoCs found on GitHub currently. +- https://github.com/brandon-t-elliott/CVE-2023-49438 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49438.yaml diff --git a/cves/2023/CVE-2023-5002.md b/cves/2023/CVE-2023-5002.md index 6b2e78643af..23430164f65 100644 --- a/cves/2023/CVE-2023-5002.md +++ b/cves/2023/CVE-2023-5002.md @@ -16,3 +16,5 @@ No PoCs from references. #### Github No PoCs found on GitHub currently. +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pgadmin/CVE-2023-5002 diff --git a/cves/2023/CVE-2023-50072.md b/cves/2023/CVE-2023-50072.md index 076605e5c80..b1746a821a5 100644 --- a/cves/2023/CVE-2023-50072.md +++ b/cves/2023/CVE-2023-50072.md @@ -13,5 +13,5 @@ A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.4 - https://github.com/ahrixia/CVE-2023-50072 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2023-50072 diff --git a/cves/2023/CVE-2023-50564.md b/cves/2023/CVE-2023-50564.md index d7e8a1702d0..5e41466e748 100644 --- a/cves/2023/CVE-2023-50564.md +++ b/cves/2023/CVE-2023-50564.md @@ -22,4 +22,5 @@ No PoCs from references. - https://github.com/rwexecute/CVE-2023-50564 - https://github.com/thefizzyfish/CVE-2023-50564-pluck - https://github.com/xpltive/CVE-2023-50564 +- https://github.com/kikechans/-Pluck-CMS-RCE-CVE-2023-50564 diff --git a/cves/2023/CVE-2023-50965.md b/cves/2023/CVE-2023-50965.md index ed1c56d059b..3e325264bf2 100644 --- a/cves/2023/CVE-2023-50965.md +++ b/cves/2023/CVE-2023-50965.md @@ -13,5 +13,5 @@ In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in - https://github.com/starnight/MicroHttpServer/issues/5 #### Github -No PoCs found on GitHub currently. +- https://github.com/DaviGSantana/CVE-2023-50965 diff --git a/cves/2023/CVE-2023-51126.md b/cves/2023/CVE-2023-51126.md index bf413bc24d8..c141aaf80c0 100644 --- a/cves/2023/CVE-2023-51126.md +++ b/cves/2023/CVE-2023-51126.md @@ -13,5 +13,5 @@ Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 al - https://github.com/risuxx/CVE-2023-51126 #### Github -No PoCs found on GitHub currently. +- https://github.com/risuxx/CVE-2023-51126 diff --git a/cves/2023/CVE-2023-51409.md b/cves/2023/CVE-2023-51409.md index 89a7fac367e..cdb774c8732 100644 --- a/cves/2023/CVE-2023-51409.md +++ b/cves/2023/CVE-2023-51409.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/Nxploited/CVE-2023-51409 - https://github.com/RandomRobbieBF/CVE-2023-51409 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51409.yaml diff --git a/cves/2023/CVE-2023-51449.md b/cves/2023/CVE-2023-51449.md index b4629eaf727..fd13c148c6b 100644 --- a/cves/2023/CVE-2023-51449.md +++ b/cves/2023/CVE-2023-51449.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51449.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gradio/CVE-2023-51449 diff --git a/cves/2023/CVE-2023-51467.md b/cves/2023/CVE-2023-51467.md index 4d695e039f6..5d02043ecff 100644 --- a/cves/2023/CVE-2023-51467.md +++ b/cves/2023/CVE-2023-51467.md @@ -35,3 +35,6 @@ The vulnerability permits attackers to circumvent authentication processes, enab #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_ofbiz_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2023-51467 diff --git a/cves/2023/CVE-2023-51764.md b/cves/2023/CVE-2023-51764.md index 3864ab2b630..fcdb9db8f05 100644 --- a/cves/2023/CVE-2023-51764.md +++ b/cves/2023/CVE-2023-51764.md @@ -18,4 +18,6 @@ Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_re #### Github - https://github.com/Double-q1015/CVE-2023-51764 - https://github.com/d4op/CVE-2023-51764-POC +- https://github.com/duy-31/CVE-2023-51764 +- https://github.com/eeenvik1/CVE-2023-51764 diff --git a/cves/2023/CVE-2023-51810.md b/cves/2023/CVE-2023-51810.md index ee66adbceec..2d13b77073d 100644 --- a/cves/2023/CVE-2023-51810.md +++ b/cves/2023/CVE-2023-51810.md @@ -13,5 +13,5 @@ SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0 - https://github.com/Pastea/CVE-2023-51810 #### Github -No PoCs found on GitHub currently. +- https://github.com/Pastea/CVE-2023-51810 diff --git a/cves/2023/CVE-2023-52076.md b/cves/2023/CVE-2023-52076.md index 70cc7f9f513..6cea41ffdf2 100644 --- a/cves/2023/CVE-2023-52076.md +++ b/cves/2023/CVE-2023-52076.md @@ -17,4 +17,5 @@ Atril Document Viewer is the default document reader of the MATE desktop environ #### Github - https://github.com/febinrev/slippy-book-exploit +- https://github.com/Groppoxx/CVE-2023-52076-PoC diff --git a/cves/2023/CVE-2023-52235.md b/cves/2023/CVE-2023-52235.md index 0c6049349dd..0c73a8c84fd 100644 --- a/cves/2023/CVE-2023-52235.md +++ b/cves/2023/CVE-2023-52235.md @@ -14,5 +14,5 @@ SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07d No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/hackintoanetwork/CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding diff --git a/cves/2023/CVE-2023-52251.md b/cves/2023/CVE-2023-52251.md index d31ffcbba9b..9ec8671c54a 100644 --- a/cves/2023/CVE-2023-52251.md +++ b/cves/2023/CVE-2023-52251.md @@ -14,7 +14,7 @@ An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote atta - https://github.com/BobTheShoplifter/CVE-2023-52251-POC #### Github -No PoCs found on GitHub currently. +- https://github.com/BobTheShoplifter/CVE-2023-52251-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52251.yaml diff --git a/cves/2023/CVE-2023-52271.md b/cves/2023/CVE-2023-52271.md index fd2aa28e4f8..c5883720aed 100644 --- a/cves/2023/CVE-2023-52271.md +++ b/cves/2023/CVE-2023-52271.md @@ -13,5 +13,5 @@ The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/victoni/BYOVD-CVE-2023-52271-POC diff --git a/cves/2023/CVE-2023-5360.md b/cves/2023/CVE-2023-5360.md index cc992038ca8..e634a1fcfc5 100644 --- a/cves/2023/CVE-2023-5360.md +++ b/cves/2023/CVE-2023-5360.md @@ -22,6 +22,7 @@ The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not - https://github.com/nastar-id/CVE-2023-5360 - https://github.com/phankz/Worpress-CVE-2023-5360 - https://github.com/sagsooz/CVE-2023-5360 +- https://github.com/LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5360.yaml diff --git a/cves/2023/CVE-2023-5965.md b/cves/2023/CVE-2023-5965.md index cac013571e9..fd54e6c3655 100644 --- a/cves/2023/CVE-2023-5965.md +++ b/cves/2023/CVE-2023-5965.md @@ -13,5 +13,5 @@ An authenticated privileged attacker could upload a specially crafted zip to the No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/josemlwdf/CVE-2023-5965 diff --git a/cves/2023/CVE-2023-5966.md b/cves/2023/CVE-2023-5966.md index d09ef1e930b..d290d9ba5b1 100644 --- a/cves/2023/CVE-2023-5966.md +++ b/cves/2023/CVE-2023-5966.md @@ -13,5 +13,5 @@ An authenticated privileged attacker could upload a specially crafted zip to the No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ll104567/cve-2023-5966 diff --git a/cves/2023/CVE-2023-6019.md b/cves/2023/CVE-2023-6019.md index 2f8a068c5eb..5e2a9ab218b 100644 --- a/cves/2023/CVE-2023-6019.md +++ b/cves/2023/CVE-2023-6019.md @@ -15,6 +15,7 @@ A command injection existed in Ray's cpu_profile URL parameter allowing attacker #### Github - https://github.com/Clydeston/CVE-2023-6019 - https://github.com/FireWolfWang/CVE-2023-6019 +- https://github.com/joaquinrrr/CVE-2023-6019 #### ExploitDB - https://www.exploit-db.com/exploits/51978 diff --git a/cves/2023/CVE-2023-6246.md b/cves/2023/CVE-2023-6246.md index b4633878ab2..9bc21ec4579 100644 --- a/cves/2023/CVE-2023-6246.md +++ b/cves/2023/CVE-2023-6246.md @@ -23,6 +23,7 @@ A heap-based buffer overflow was found in the __vsyslog_internal function of the #### Github - https://github.com/elpe-pinillo/CVE-2023-6246 +- https://github.com/SimoesCTT/CTT-Vsyslog-Vortex-CVE-2023-6246 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-6246.yaml diff --git a/cves/2023/CVE-2023-6329.md b/cves/2023/CVE-2023-6329.md index 88fe860bef1..99d60e591e0 100644 --- a/cves/2023/CVE-2023-6329.md +++ b/cves/2023/CVE-2023-6329.md @@ -13,7 +13,7 @@ An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. - https://tenable.com/security/research/tra-2023-36 #### Github -No PoCs found on GitHub currently. +- https://github.com/itzvenom/CVE-2023-6329 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6329.yaml diff --git a/cves/2023/CVE-2023-6553.md b/cves/2023/CVE-2023-6553.md index b2fd70b5ca5..e091040ccfc 100644 --- a/cves/2023/CVE-2023-6553.md +++ b/cves/2023/CVE-2023-6553.md @@ -18,6 +18,8 @@ The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution - https://github.com/Harshit-Mashru/CVE-2023-6553 - https://github.com/cc3305/CVE-2023-6553 - https://github.com/motikan2010/CVE-2023-6553-PoC +- https://github.com/0x00phantom-hat/CVE-2023-6553-RCE-Exploit +- https://github.com/joaoaugustom/WordPress_Backup_Migration-RCE_Unauthenticated #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6553.yaml diff --git a/cves/2023/CVE-2023-6972.md b/cves/2023/CVE-2023-6972.md index c802735fff0..bafdb765761 100644 --- a/cves/2023/CVE-2023-6972.md +++ b/cves/2023/CVE-2023-6972.md @@ -13,4 +13,4 @@ The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0x00phantom-hat/CVE-2023-6972-Exploit-Arbitrary-File-Deletion diff --git a/cves/2023/CVE-2023-7172.md b/cves/2023/CVE-2023-7172.md index abbe1e7f372..bae02dfb227 100644 --- a/cves/2023/CVE-2023-7172.md +++ b/cves/2023/CVE-2023-7172.md @@ -14,5 +14,5 @@ Eine kritische Schwachstelle wurde in PHPGurukul Hospital Management System 1.0 - https://github.com/sharathc213/CVE-2023-7172 #### Github -No PoCs found on GitHub currently. +- https://github.com/sharathc213/CVE-2023-7172 diff --git a/cves/2023/CVE-2023-7173.md b/cves/2023/CVE-2023-7173.md index 1702fa48a1f..03a2a476b5e 100644 --- a/cves/2023/CVE-2023-7173.md +++ b/cves/2023/CVE-2023-7173.md @@ -15,5 +15,5 @@ Es wurde eine problematische Schwachstelle in PHPGurukul Hospital Management Sys - https://github.com/sharathc213/CVE-2023-7173 #### Github -No PoCs found on GitHub currently. +- https://github.com/sharathc213/CVE-2023-7173 diff --git a/cves/2024/CVE-2024-0012.md b/cves/2024/CVE-2024-0012.md index 52ab1d3cb2a..fe77c5e7b92 100644 --- a/cves/2024/CVE-2024-0012.md +++ b/cves/2024/CVE-2024-0012.md @@ -30,6 +30,7 @@ An authentication bypass in Palo Alto Networks PAN-OS software enables an unauth - https://github.com/iSee857/CVE-2024-0012-poc - https://github.com/punitdarji/Paloalto-CVE-2024-0012 - https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012 +- https://github.com/razureink/cve-2024-0012_9474-panos_authbypass_reproduction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0012.yaml diff --git a/cves/2024/CVE-2024-0044.md b/cves/2024/CVE-2024-0044.md index e3a378b83ea..8ee19aa6ee9 100644 --- a/cves/2024/CVE-2024-0044.md +++ b/cves/2024/CVE-2024-0044.md @@ -37,4 +37,10 @@ In createSessionInternal of PackageInstallerService.java, there is a possible ru - https://github.com/nishan0x1/CVE-2024-0044 - https://github.com/pl4int3xt/cve_2024_0044 - https://github.com/scs-labrat/android_autorooter +- https://github.com/Athexblackhat/EXPLOITER +- https://github.com/HoyoenKim/CVE-2024-0044_PoC +- https://github.com/JackTekno/Chrome-Forensic_CVE-2024-0044 +- https://github.com/TheBl4ckPh4nt0m/CVE-2024-0044 +- https://github.com/hackerronin/CVE-2024-0044 +- https://github.com/k4ran909/cve_2024_0044 diff --git a/cves/2024/CVE-2024-0368.md b/cves/2024/CVE-2024-0368.md index b33bbade74b..cdc80b0dfdb 100644 --- a/cves/2024/CVE-2024-0368.md +++ b/cves/2024/CVE-2024-0368.md @@ -15,4 +15,4 @@ The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordP - https://developers.hubspot.com/docs/api/webhooks#scopes #### Github -No PoCs found on GitHub currently. +- https://github.com/RandomRobbieBF/CVE-2024-0368 diff --git a/cves/2024/CVE-2024-0582.md b/cves/2024/CVE-2024-0582.md index cbe650d3d76..394945e22fa 100644 --- a/cves/2024/CVE-2024-0582.md +++ b/cves/2024/CVE-2024-0582.md @@ -27,4 +27,5 @@ No PoCs from references. - https://github.com/kuzeyardabulut/CVE-2024-0582 - https://github.com/pwnmonk/io_uring-n-day - https://github.com/ysanatomic/io_uring_LPE-CVE-2024-0582 +- https://github.com/nanabingies/CVE-2024-0582 diff --git a/cves/2024/CVE-2024-0670.md b/cves/2024/CVE-2024-0670.md index bc56184b3a4..f51cc14d35f 100644 --- a/cves/2024/CVE-2024-0670.md +++ b/cves/2024/CVE-2024-0670.md @@ -17,4 +17,8 @@ Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p4 #### Github - https://github.com/Nikopmpm/Fsociety-CVE-2024-0670-CheckMK-LPE +- https://github.com/dfdxarjy/HTB-NanoCorp-CVE-2024-0670 +- https://github.com/elsevar11/CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit +- https://github.com/magicrc/CVE-2024-0670 +- https://github.com/tralsesec/CVE-2024-0670 diff --git a/cves/2024/CVE-2024-0692.md b/cves/2024/CVE-2024-0692.md index 90d075e5d3b..962029c5de8 100644 --- a/cves/2024/CVE-2024-0692.md +++ b/cves/2024/CVE-2024-0692.md @@ -14,7 +14,7 @@ The SolarWinds Security Event Manager was susceptible to Remote Code Execution V No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/machevalia/CVE-2024-0692-SolarWinds-SEM-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0692.yaml diff --git a/cves/2024/CVE-2024-1065.md b/cves/2024/CVE-2024-1065.md index e509bbf29ff..2df6cf3e31b 100644 --- a/cves/2024/CVE-2024-1065.md +++ b/cves/2024/CVE-2024-1065.md @@ -15,5 +15,5 @@ Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valha - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities #### Github -No PoCs found on GitHub currently. +- https://github.com/kuzeyardabulut/CVE-2024-1065 diff --git a/cves/2024/CVE-2024-1071.md b/cves/2024/CVE-2024-1071.md index 957dddd0340..058c6c4bf89 100644 --- a/cves/2024/CVE-2024-1071.md +++ b/cves/2024/CVE-2024-1071.md @@ -23,6 +23,7 @@ No PoCs from references. - https://github.com/fa-rrel/CVE-2024-1071-SQL-Injection - https://github.com/gbrsh/CVE-2024-1071 - https://github.com/gh-ost00/CVE-2024-1071-SQL-Injection +- https://github.com/dogucyber/WordPress-Exploit-CVE-2024-1071 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1071.yaml diff --git a/cves/2024/CVE-2024-1086.md b/cves/2024/CVE-2024-1086.md index 68c6fd5e10f..60ddaf67184 100644 --- a/cves/2024/CVE-2024-1086.md +++ b/cves/2024/CVE-2024-1086.md @@ -26,4 +26,7 @@ A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables compon - https://github.com/karim4353/CVE-2024-1086-Exploit - https://github.com/lobo360/iptables-ubuntu - https://github.com/xzx482/CVE-2024-1086 +- https://github.com/Notselwyn/CVE-2024-1086 +- https://github.com/b1nhack/CVE-2024-1086 +- https://github.com/vettrivel007/CVE-2024-1086 diff --git a/cves/2024/CVE-2024-10914.md b/cves/2024/CVE-2024-10914.md index 8d019f4603b..f024ec8975a 100644 --- a/cves/2024/CVE-2024-10914.md +++ b/cves/2024/CVE-2024-10914.md @@ -37,6 +37,7 @@ In D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L bis 20241028 wurde eine kriti - https://github.com/retuci0/cve-2024-10914-port - https://github.com/verylazytech/CVE-2024-10914 - https://github.com/yenyangmjaze/cve-2024-10914 +- https://github.com/0xSS3K/CVE-2024-10914__POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10914.yaml diff --git a/cves/2024/CVE-2024-10924.md b/cves/2024/CVE-2024-10924.md index b9fa3a372c5..2027ede91d0 100644 --- a/cves/2024/CVE-2024-10924.md +++ b/cves/2024/CVE-2024-10924.md @@ -32,6 +32,9 @@ No PoCs from references. - https://github.com/m3ssap0/wordpress-really-simple-security-authn-bypass-vulnerable-application - https://github.com/sariamubeen/CVE-2024-10924 - https://github.com/z0roday/Realy-Simple-Security-Vulnerabilities-Exploit +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-10924 +- https://github.com/bodoinon/CVE-2024-10924 +- https://github.com/d0x-awrqxavc/-CVE-2024-10924 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10924.yaml diff --git a/cves/2024/CVE-2024-11003.md b/cves/2024/CVE-2024-11003.md index 0409e9e28df..18461097de4 100644 --- a/cves/2024/CVE-2024-11003.md +++ b/cves/2024/CVE-2024-11003.md @@ -13,5 +13,5 @@ Qualys discovered that needrestart, before version 3.8, passes unsanitized data No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sychikov/CVE-2024-11003-POC diff --git a/cves/2024/CVE-2024-11635.md b/cves/2024/CVE-2024-11635.md index f38dd467b43..391f80dd480 100644 --- a/cves/2024/CVE-2024-11635.md +++ b/cves/2024/CVE-2024-11635.md @@ -13,4 +13,4 @@ The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Exec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/vigilante-1337/CVE-2024-11635 diff --git a/cves/2024/CVE-2024-11680.md b/cves/2024/CVE-2024-11680.md index 8954155c352..986e4727f7e 100644 --- a/cves/2024/CVE-2024-11680.md +++ b/cves/2024/CVE-2024-11680.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/D3N14LD15K/CVE-2024-11680_PoC_Exploit +- https://github.com/qucklecrabik/CVE-2024-11680 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11680.yaml diff --git a/cves/2024/CVE-2024-12029.md b/cves/2024/CVE-2024-12029.md index 7df34b3fca3..c657dcdcebe 100644 --- a/cves/2024/CVE-2024-12029.md +++ b/cves/2024/CVE-2024-12029.md @@ -13,7 +13,7 @@ A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Lu3ky13/Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb diff --git a/cves/2024/CVE-2024-12084.md b/cves/2024/CVE-2024-12084.md index fe80371f2d7..fd711d2998e 100644 --- a/cves/2024/CVE-2024-12084.md +++ b/cves/2024/CVE-2024-12084.md @@ -23,4 +23,5 @@ A heap-based buffer overflow flaw was found in the rsync daemon. This issue is d #### Github - https://github.com/rxerium/CVE-2024-12084 - https://github.com/themirze/cve-2024-12084 +- https://github.com/InkeyP/CVE-2024-12084 diff --git a/cves/2024/CVE-2024-12227.md b/cves/2024/CVE-2024-12227.md index 82748ba70af..5f629376fa4 100644 --- a/cves/2024/CVE-2024-12227.md +++ b/cves/2024/CVE-2024-12227.md @@ -15,5 +15,5 @@ Es wurde eine problematische Schwachstelle in MSI Dragon Center bis 2.0.146.0 ge - https://shareforall.notion.site/MSI-Dragon-Center-NTIOLib_X64-0xC3506104-MmMapIoSpace-DOS-15160437bb1e801daf58d4aea052970e #### Github -No PoCs found on GitHub currently. +- https://github.com/HI0U/POC-CVE-2024-12227 diff --git a/cves/2024/CVE-2024-12381.md b/cves/2024/CVE-2024-12381.md index ce606232fe8..8a41014385d 100644 --- a/cves/2024/CVE-2024-12381.md +++ b/cves/2024/CVE-2024-12381.md @@ -13,5 +13,6 @@ Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote a - https://issues.chromium.org/issues/381696874 #### Github -No PoCs found on GitHub currently. +- https://github.com/FatfishIO/CVE-2024-12381-PoC +- https://github.com/VictorNS69/CVE-2024-12381 diff --git a/cves/2024/CVE-2024-12484.md b/cves/2024/CVE-2024-12484.md index 57b845486d4..03b90cf3600 100644 --- a/cves/2024/CVE-2024-12484.md +++ b/cves/2024/CVE-2024-12484.md @@ -16,5 +16,5 @@ In Codezips Technical Discussion Forum 1.0 wurde eine Schwachstelle entdeckt. Si - https://github.com/LiChaser/CVE-2024-12484 #### Github -No PoCs found on GitHub currently. +- https://github.com/LiChaser/CVE-2024-12484 diff --git a/cves/2024/CVE-2024-13513.md b/cves/2024/CVE-2024-13513.md index d3d44105a4b..25316b4b65d 100644 --- a/cves/2024/CVE-2024-13513.md +++ b/cves/2024/CVE-2024-13513.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/KTN1990/CVE-2024-13513 +- https://github.com/0axz-tools/CVE-2024-13513.py diff --git a/cves/2024/CVE-2024-13869.md b/cves/2024/CVE-2024-13869.md index 37594065248..50657e3750f 100644 --- a/cves/2024/CVE-2024-13869.md +++ b/cves/2024/CVE-2024-13869.md @@ -14,4 +14,4 @@ The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPre - https://ryankozak.com/posts/cve-2024-13869/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2024-13869 diff --git a/cves/2024/CVE-2024-13985.md b/cves/2024/CVE-2024-13985.md index 901173feb56..ed404c5a4ee 100644 --- a/cves/2024/CVE-2024-13985.md +++ b/cves/2024/CVE-2024-13985.md @@ -14,7 +14,7 @@ A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows - https://www.vulncheck.com/advisories/dahua-eims-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/CrimsonfiedOfficial/CVE-2024-13985 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13985.yaml diff --git a/cves/2024/CVE-2024-1561.md b/cves/2024/CVE-2024-1561.md index 0a55b0e78a3..29850f54836 100644 --- a/cves/2024/CVE-2024-1561.md +++ b/cves/2024/CVE-2024-1561.md @@ -15,6 +15,10 @@ No PoCs from references. #### Github - https://github.com/DiabloHTB/CVE-2024-1561 +- https://github.com/K3ysTr0K3R/CVE-2024-1561 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1561.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/gradio/CVE-2024-1561 diff --git a/cves/2024/CVE-2024-1698.md b/cves/2024/CVE-2024-1698.md index 9c78781cfb9..88c80771d8c 100644 --- a/cves/2024/CVE-2024-1698.md +++ b/cves/2024/CVE-2024-1698.md @@ -17,6 +17,7 @@ The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notific - https://github.com/jesicatjan/WordPress-NotificationX-CVE-2024-1698 - https://github.com/kamranhasan/CVE-2024-1698-Exploit - https://github.com/shanglyu/CVE-2024-1698 +- https://github.com/Dhananjayasj/CVE-2024-1698-NotificationX-WordPress-Plugin-SQL-Injection-to-Admin-Credential-Extraction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1698.yaml diff --git a/cves/2024/CVE-2024-1708.md b/cves/2024/CVE-2024-1708.md index 0597b23b349..367b6cdb1e2 100644 --- a/cves/2024/CVE-2024-1708.md +++ b/cves/2024/CVE-2024-1708.md @@ -17,6 +17,7 @@ ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulner - https://github.com/W01fh4cker/ScreenConnect-AuthBypass-RCE - https://github.com/cjybao/CVE-2024-1709-and-CVE-2024-1708 - https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc +- https://github.com/razureink/cve-2024-1708-connectwise_rce_reproduction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1708.yaml diff --git a/cves/2024/CVE-2024-1813.md b/cves/2024/CVE-2024-1813.md index fceb2353aa1..222345ce8cd 100644 --- a/cves/2024/CVE-2024-1813.md +++ b/cves/2024/CVE-2024-1813.md @@ -13,4 +13,4 @@ The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/MobetaSec/CVE-2024-1813-POC diff --git a/cves/2024/CVE-2024-1874.md b/cves/2024/CVE-2024-1874.md index 1cc4f94cc4a..73d9d426a94 100644 --- a/cves/2024/CVE-2024-1874.md +++ b/cves/2024/CVE-2024-1874.md @@ -21,4 +21,5 @@ In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, wh #### Github - https://github.com/Tgcohce/CVE-2024-1874 +- https://github.com/MrBongoC/CVE-2024-1874 diff --git a/cves/2024/CVE-2024-20404.md b/cves/2024/CVE-2024-20404.md index 3ccf04e8b5d..988407cbe52 100644 --- a/cves/2024/CVE-2024-20404.md +++ b/cves/2024/CVE-2024-20404.md @@ -22,6 +22,7 @@ No PoCs from references. #### Github - https://github.com/AbdElRahmanEzzat1995/CVE-2024-20404 +- https://github.com/3zz4t/CVE-2024-20404 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20404.yaml diff --git a/cves/2024/CVE-2024-20405.md b/cves/2024/CVE-2024-20405.md index 60399d6dc9f..79cf5cb16cb 100644 --- a/cves/2024/CVE-2024-20405.md +++ b/cves/2024/CVE-2024-20405.md @@ -20,4 +20,5 @@ No PoCs from references. #### Github - https://github.com/AbdElRahmanEzzat1995/CVE-2024-20405 +- https://github.com/3zz4t/CVE-2024-20405 diff --git a/cves/2024/CVE-2024-20767.md b/cves/2024/CVE-2024-20767.md index 20046f34cc6..3edaa12275e 100644 --- a/cves/2024/CVE-2024-20767.md +++ b/cves/2024/CVE-2024-20767.md @@ -21,6 +21,7 @@ No PoCs from references. - https://github.com/alm6no5/CVE-2024-20767 - https://github.com/m-cetin/CVE-2024-20767 - https://github.com/yoryio/CVE-2024-20767 +- https://github.com/GraySignal/CVE-2024-20767-Adobe-ColdFusion #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20767.yaml diff --git a/cves/2024/CVE-2024-2083.md b/cves/2024/CVE-2024-2083.md index d527dd782db..166026c698e 100644 --- a/cves/2024/CVE-2024-2083.md +++ b/cves/2024/CVE-2024-2083.md @@ -14,5 +14,5 @@ A directory traversal vulnerability exists in the zenml-io/zenml repository, spe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Saptaktdk/zenml-CVE-2024-2083-POC diff --git a/cves/2024/CVE-2024-21182.md b/cves/2024/CVE-2024-21182.md index 426eda10ce3..ab72af18dc6 100644 --- a/cves/2024/CVE-2024-21182.md +++ b/cves/2024/CVE-2024-21182.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/k4it0k1d/CVE-2024-21182 - https://github.com/kursadalsan/CVE-2024-21182 +- https://github.com/fevar54/CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE diff --git a/cves/2024/CVE-2024-21338.md b/cves/2024/CVE-2024-21338.md index 76394391380..75d98bc5ac5 100644 --- a/cves/2024/CVE-2024-21338.md +++ b/cves/2024/CVE-2024-21338.md @@ -38,6 +38,7 @@ Windows Kernel Elevation of Privilege Vulnerability - https://github.com/hakaioffsec/CVE-2024-21338 - https://github.com/tykawaii98/CVE-2024-21338_PoC - https://github.com/wusijie/CVE-2024-21338-1 +- https://github.com/MistyFir/CVE-2024-21338-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52275 diff --git a/cves/2024/CVE-2024-21413.md b/cves/2024/CVE-2024-21413.md index 0ab384206a8..9269feae5f4 100644 --- a/cves/2024/CVE-2024-21413.md +++ b/cves/2024/CVE-2024-21413.md @@ -43,4 +43,14 @@ Microsoft Outlook Remote Code Execution Vulnerability - https://github.com/th3Hellion/CVE-2024-21413 - https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability - https://github.com/yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413- +- https://github.com/Dhananjayasj/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability +- https://github.com/FathanahHidayati/https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability +- https://github.com/H1ssBl1tz/Blind-Trust-CVE-2024-21413-Research +- https://github.com/KaiHaoChen04/monikerlinktest +- https://github.com/YoguiCR/CVE-2024-21413-Outlook-Assessment +- https://github.com/bhatbhupendra/Moniker-Link--CVE-2024-21413- +- https://github.com/dionissh/CVE-2024-21413 +- https://github.com/gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC +- https://github.com/mmathivanan17/CVE-2024-21413 +- https://github.com/pedro-lucas-melo/Estudo-de-Caso-CVE-2024-21413 diff --git a/cves/2024/CVE-2024-21534.md b/cves/2024/CVE-2024-21534.md index 9bcda61ceed..67535910046 100644 --- a/cves/2024/CVE-2024-21534.md +++ b/cves/2024/CVE-2024-21534.md @@ -18,4 +18,5 @@ All versions of the package jsonpath-plus are vulnerable to Remote Code Executio #### Github - https://github.com/pabloopez/CVE-2024-21534 - https://github.com/verylazytech/cve-2024-21534 +- https://github.com/BohemianHacks/CVE-2024-21534-poc diff --git a/cves/2024/CVE-2024-21542.md b/cves/2024/CVE-2024-21542.md index b5ab7fff53b..46b2e1c00ea 100644 --- a/cves/2024/CVE-2024-21542.md +++ b/cves/2024/CVE-2024-21542.md @@ -14,5 +14,5 @@ Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Writ - https://security.snyk.io/vuln/SNYK-PYTHON-LUIGI-7830489 #### Github -No PoCs found on GitHub currently. +- https://github.com/L3ster1337/Poc-CVE-2024-21542 diff --git a/cves/2024/CVE-2024-21626.md b/cves/2024/CVE-2024-21626.md index 356732daa87..cbc23caf928 100644 --- a/cves/2024/CVE-2024-21626.md +++ b/cves/2024/CVE-2024-21626.md @@ -29,6 +29,7 @@ runc is a CLI tool for spawning and running containers on Linux according to the - https://github.com/laysakura/CVE-2024-21626-demo - https://github.com/zhangguanzhang/CVE-2024-21626 - https://github.com/zpxlz/CVE-2024-21626-POC +- https://github.com/Strikoder-Premium/cve-2024-21626-runc-1.1.11-escape #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/runc_cwd_priv_esc.rb diff --git a/cves/2024/CVE-2024-21683.md b/cves/2024/CVE-2024-21683.md index 7393578cdec..8092b591b95 100644 --- a/cves/2024/CVE-2024-21683.md +++ b/cves/2024/CVE-2024-21683.md @@ -43,6 +43,7 @@ No PoCs from references. - https://github.com/absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server - https://github.com/phucrio/CVE-2024-21683-RCE - https://github.com/r00t7oo2jm/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server +- https://github.com/r3db34rdh4x/cve-2024-21683-rce #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21683.yaml diff --git a/cves/2024/CVE-2024-21762.md b/cves/2024/CVE-2024-21762.md index b7afe2ec236..b97436feb82 100644 --- a/cves/2024/CVE-2024-21762.md +++ b/cves/2024/CVE-2024-21762.md @@ -29,4 +29,7 @@ No PoCs from references. - https://github.com/d0rb/CVE-2024-21762 - https://github.com/h4x0r-dz/CVE-2024-21762 - https://github.com/r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check +- https://github.com/0x0asif/CVE-2024-21762 +- https://github.com/0x13-ByteZer0/CVE-2024-21762 +- https://github.com/CrackerCat/cve-2024-21762-poc diff --git a/cves/2024/CVE-2024-21887.md b/cves/2024/CVE-2024-21887.md index c47af0dd032..69540dcb214 100644 --- a/cves/2024/CVE-2024-21887.md +++ b/cves/2024/CVE-2024-21887.md @@ -24,6 +24,7 @@ A command injection vulnerability in web components of Ivanti Connect Secure (9. - https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887 - https://github.com/rxwx/pulse-meter - https://github.com/stephen-murcott/Ivanti-ICT-Snapshot-decryption +- https://github.com/pwniel/ivanti_shell #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21887.yaml diff --git a/cves/2024/CVE-2024-21907.md b/cves/2024/CVE-2024-21907.md index 7763a16040a..a37996c4cfd 100644 --- a/cves/2024/CVE-2024-21907.md +++ b/cves/2024/CVE-2024-21907.md @@ -14,5 +14,5 @@ Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptiona - https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678 #### Github -No PoCs found on GitHub currently. +- https://github.com/seal-sec-demo-2/seal-security-nuget-demo-net7 diff --git a/cves/2024/CVE-2024-22120.md b/cves/2024/CVE-2024-22120.md index 5df715ba2e5..f54d8a5ed8c 100644 --- a/cves/2024/CVE-2024-22120.md +++ b/cves/2024/CVE-2024-22120.md @@ -18,6 +18,7 @@ Zabbix server can perform command execution for configured scripts. After comman - https://github.com/W01fh4cker/CVE-2024-22120-RCE - https://github.com/g4nkd/CVE-2024-22120-RCE-with-gopher - https://github.com/isPique/CVE-2024-22120-RCE-with-gopher +- https://github.com/darkbytehunter/CVE-2024-22120-RCE-with-gopher #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-22120.yaml diff --git a/cves/2024/CVE-2024-22416.md b/cves/2024/CVE-2024-22416.md index 7fb5633ad7d..a70ea684a83 100644 --- a/cves/2024/CVE-2024-22416.md +++ b/cves/2024/CVE-2024-22416.md @@ -14,4 +14,5 @@ pyLoad is a free and open-source Download Manager written in pure Python. The `p #### Github - https://github.com/mindstorm38/ensimag-secu3a-cve-2024-22416 +- https://github.com/theorzr/ensimag-secu3a-cve-2024-22416 diff --git a/cves/2024/CVE-2024-22514.md b/cves/2024/CVE-2024-22514.md index 5b2ac102e87..01f3c8b9ed7 100644 --- a/cves/2024/CVE-2024-22514.md +++ b/cves/2024/CVE-2024-22514.md @@ -14,5 +14,5 @@ An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run - https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution #### Github -No PoCs found on GitHub currently. +- https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution diff --git a/cves/2024/CVE-2024-22515.md b/cves/2024/CVE-2024-22515.md index 9f61618305a..3d728462845 100644 --- a/cves/2024/CVE-2024-22515.md +++ b/cves/2024/CVE-2024-22515.md @@ -13,5 +13,5 @@ Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allo - https://github.com/Orange-418/CVE-2024-22515-File-Upload-Vulnerability #### Github -No PoCs found on GitHub currently. +- https://github.com/Orange-418/CVE-2024-22515-File-Upload-Vulnerability diff --git a/cves/2024/CVE-2024-22532.md b/cves/2024/CVE-2024-22532.md index 9ba42f3f536..e2853239394 100644 --- a/cves/2024/CVE-2024-22532.md +++ b/cves/2024/CVE-2024-22532.md @@ -14,5 +14,5 @@ Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows - https://github.com/pwndorei/CVE-2024-22532 #### Github -No PoCs found on GitHub currently. +- https://github.com/pwndorei/CVE-2024-22532 diff --git a/cves/2024/CVE-2024-22640.md b/cves/2024/CVE-2024-22640.md index dc2de4a0839..e6204355081 100644 --- a/cves/2024/CVE-2024-22640.md +++ b/cves/2024/CVE-2024-22640.md @@ -14,5 +14,5 @@ TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Servi - https://github.com/zunak/CVE-2024-22640 #### Github -No PoCs found on GitHub currently. +- https://github.com/zunak/CVE-2024-22640 diff --git a/cves/2024/CVE-2024-22641.md b/cves/2024/CVE-2024-22641.md index 469e0c5e511..daf86ffc515 100644 --- a/cves/2024/CVE-2024-22641.md +++ b/cves/2024/CVE-2024-22641.md @@ -14,5 +14,5 @@ TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial - https://github.com/zunak/CVE-2024-22641 #### Github -No PoCs found on GitHub currently. +- https://github.com/zunak/CVE-2024-22641 diff --git a/cves/2024/CVE-2024-22889.md b/cves/2024/CVE-2024-22889.md index 4967228dce4..31363316b17 100644 --- a/cves/2024/CVE-2024-22889.md +++ b/cves/2024/CVE-2024-22889.md @@ -13,5 +13,5 @@ Due to incorrect access control in Plone version v6.0.9, remote attackers can vi - https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9 #### Github -No PoCs found on GitHub currently. +- https://github.com/shenhav12/CVE-2024-22889-Plone-v6.0.9 diff --git a/cves/2024/CVE-2024-23108.md b/cves/2024/CVE-2024-23108.md index e36b7a3a835..463eba3642b 100644 --- a/cves/2024/CVE-2024-23108.md +++ b/cves/2024/CVE-2024-23108.md @@ -19,6 +19,7 @@ An improper neutralization of special elements used in an os command ('os comman #### Github - https://github.com/hitem/CVE-2024-23108 +- https://github.com/horizon3ai/CVE-2024-23108 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-23108.yaml diff --git a/cves/2024/CVE-2024-23113.md b/cves/2024/CVE-2024-23113.md index cc7fe504176..ea9d8822a4c 100644 --- a/cves/2024/CVE-2024-23113.md +++ b/cves/2024/CVE-2024-23113.md @@ -28,4 +28,6 @@ No PoCs from references. - https://github.com/puckiestyle/CVE-2024-23113 - https://github.com/valornode/CVE-2024-23113 - https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575 +- https://github.com/MinhPham123456789/PoC-CVE-2024-23113 +- https://github.com/ownouwa/cve-2024-23113-poc diff --git a/cves/2024/CVE-2024-23222.md b/cves/2024/CVE-2024-23222.md index dd683ebf236..0493315c156 100644 --- a/cves/2024/CVE-2024-23222.md +++ b/cves/2024/CVE-2024-23222.md @@ -16,5 +16,6 @@ A type confusion issue was addressed with improved checks. This issue is fixed i No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/FuzzySecurity/Cassowary-CVE-2024-23222-x86_64 +- https://github.com/Rohitberiwala/CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated diff --git a/cves/2024/CVE-2024-23334.md b/cves/2024/CVE-2024-23334.md index ab60fd651e2..93b930b6d20 100644 --- a/cves/2024/CVE-2024-23334.md +++ b/cves/2024/CVE-2024-23334.md @@ -27,9 +27,14 @@ aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. - https://github.com/sxyrxyy/aiohttp-exploit-CVE-2024-23334-certstream - https://github.com/wizarddos/CVE-2024-23334 - https://github.com/z3rObyte/CVE-2024-23334-PoC +- https://github.com/0xR00/CVE-2024-23334 +- https://github.com/Sn0wBaall/CVE-2024-23334-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23334.yaml #### ExploitDB - https://www.exploit-db.com/exploits/52474 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/python/CVE-2024-23334 diff --git a/cves/2024/CVE-2024-23659.md b/cves/2024/CVE-2024-23659.md index bb9b0ff4a0a..0eed7b790a5 100644 --- a/cves/2024/CVE-2024-23659.md +++ b/cves/2024/CVE-2024-23659.md @@ -13,5 +13,5 @@ SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/amis13/SPIP-CVE-2024-23659- diff --git a/cves/2024/CVE-2024-23692.md b/cves/2024/CVE-2024-23692.md index efd7a5b4057..e919d5b3a02 100644 --- a/cves/2024/CVE-2024-23692.md +++ b/cves/2024/CVE-2024-23692.md @@ -31,6 +31,7 @@ Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a t - https://github.com/pradeepboo/Rejetto-HFS-2.x-RCE-CVE-2024-23692 - https://github.com/vanboomqi/CVE-2024-23692 - https://github.com/verylazytech/CVE-2024-23692 +- https://github.com/sandimfz/CVE-2024-23692 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23692.yaml diff --git a/cves/2024/CVE-2024-23745.md b/cves/2024/CVE-2024-23745.md index 3d9380f5b1f..43b2434b068 100644 --- a/cves/2024/CVE-2024-23745.md +++ b/cves/2024/CVE-2024-23745.md @@ -15,5 +15,5 @@ In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB atta - https://github.com/louiselalanne/CVE-2024-23745 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2024-23745 diff --git a/cves/2024/CVE-2024-23746.md b/cves/2024/CVE-2024-23746.md index fd1b29da034..0d6d72ad386 100644 --- a/cves/2024/CVE-2024-23746.md +++ b/cves/2024/CVE-2024-23746.md @@ -13,5 +13,5 @@ Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex - https://github.com/louiselalanne/CVE-2024-23746 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2024-23746 diff --git a/cves/2024/CVE-2024-23747.md b/cves/2024/CVE-2024-23747.md index 51ff893038b..71e6e0646d4 100644 --- a/cves/2024/CVE-2024-23747.md +++ b/cves/2024/CVE-2024-23747.md @@ -13,5 +13,5 @@ The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible t - https://github.com/louiselalanne/CVE-2024-23747 #### Github -No PoCs found on GitHub currently. +- https://github.com/louiselalanne/CVE-2024-23747 diff --git a/cves/2024/CVE-2024-23897.md b/cves/2024/CVE-2024-23897.md index 874657cb3ac..d5b05580455 100644 --- a/cves/2024/CVE-2024-23897.md +++ b/cves/2024/CVE-2024-23897.md @@ -61,6 +61,14 @@ Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of - https://github.com/xaitax/CVE-2024-23897 - https://github.com/yoryio/CVE-2024-23897 - https://github.com/MachiavelliII/CVE-2024-23897 +- https://github.com/Ap0dexMe0/CVE-2024-23897 +- https://github.com/Dungsocool/CVE-2024-23897 +- https://github.com/GraySignal/CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability +- https://github.com/aadi0258/Exploit-CVE-2024-23897 +- https://github.com/classic130/CVE-2024-23897-Jenkins-4.441 +- https://github.com/razureink/cve-2024-23897-jenkins_lfi_reproduction +- https://github.com/rivaedoardo62-boop/cve-2024-23897-jenkins-poc +- https://github.com/vmc8ll/poc-CVE-2024-23897 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-23897.yaml @@ -70,3 +78,6 @@ Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jenkins_cli_ampersand_arbitrary_file_read.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/jenkins/CVE-2024-23897 diff --git a/cves/2024/CVE-2024-24401.md b/cves/2024/CVE-2024-24401.md index 66c7765e088..c61b329f70b 100644 --- a/cves/2024/CVE-2024-24401.md +++ b/cves/2024/CVE-2024-24401.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/MAWK0235/CVE-2024-24401 +- https://github.com/JIBEG-UNIX/CVE-2024-24401 diff --git a/cves/2024/CVE-2024-24590.md b/cves/2024/CVE-2024-24590.md index 7ff3d56e251..ed9edf7b432 100644 --- a/cves/2024/CVE-2024-24590.md +++ b/cves/2024/CVE-2024-24590.md @@ -20,4 +20,5 @@ No PoCs from references. - https://github.com/sviim/ClearML-CVE-2024-24590 - https://github.com/sviim/ClearML-CVE-2024-24590-RCE - https://github.com/xffsec/CVE-2024-24590-ClearML-RCE-Exploit +- https://github.com/rippsec/CVE-2024-24590-ClearML-RCE-Exploit diff --git a/cves/2024/CVE-2024-24824.md b/cves/2024/CVE-2024-24824.md index 9e3651e17b1..efe41db9108 100644 --- a/cves/2024/CVE-2024-24824.md +++ b/cves/2024/CVE-2024-24824.md @@ -15,5 +15,5 @@ Graylog is a free and open log management platform. Starting in version 2.0.0 an - https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-p6gg-5hf4-4rgj #### Github -No PoCs found on GitHub currently. +- https://github.com/rootkiTED/graylog-cve-2024-24824-exploit diff --git a/cves/2024/CVE-2024-24919.md b/cves/2024/CVE-2024-24919.md index 7eb025839af..745a62edb87 100644 --- a/cves/2024/CVE-2024-24919.md +++ b/cves/2024/CVE-2024-24919.md @@ -71,6 +71,8 @@ Potentially allowing an attacker to read certain information on Check Point Secu - https://github.com/verylazytech/CVE-2024-24919 - https://github.com/zam89/CVE-2024-24919 - https://github.com/zxcod3/CVE-2024-24919 +- https://github.com/SpiX-7/CVE-2024-24919-POC +- https://github.com/kernel364/CVE-2024-24919 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24919.yaml diff --git a/cves/2024/CVE-2024-25081.md b/cves/2024/CVE-2024-25081.md index 685ac105afb..ae6aa0c91d3 100644 --- a/cves/2024/CVE-2024-25081.md +++ b/cves/2024/CVE-2024-25081.md @@ -14,5 +14,5 @@ Splinefont in FontForge through 20230101 allows command injection via crafted fi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/InzegoSec/CVE-2024-25081_2025-47273 diff --git a/cves/2024/CVE-2024-25082.md b/cves/2024/CVE-2024-25082.md index 5da8ca359fb..4d80fc40741 100644 --- a/cves/2024/CVE-2024-25082.md +++ b/cves/2024/CVE-2024-25082.md @@ -13,5 +13,6 @@ Splinefont in FontForge through 20230101 allows command injection via crafted ar No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AliElKhatteb/CVE-2024-25082_CVE-2024-25081 +- https://github.com/moamenx8/CVE-2024-25082 diff --git a/cves/2024/CVE-2024-25096.md b/cves/2024/CVE-2024-25096.md index 0d6289b7e4a..dea5cb6aaa5 100644 --- a/cves/2024/CVE-2024-25096.md +++ b/cves/2024/CVE-2024-25096.md @@ -14,4 +14,4 @@ Improper Control of Generation of Code ('Code Injection') vulnerability in Canto No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE diff --git a/cves/2024/CVE-2024-25169.md b/cves/2024/CVE-2024-25169.md index a1f767e3a91..875177cb813 100644 --- a/cves/2024/CVE-2024-25169.md +++ b/cves/2024/CVE-2024-25169.md @@ -13,5 +13,5 @@ An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanism - https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0 #### Github -No PoCs found on GitHub currently. +- https://github.com/shenhav12/CVE-2024-25169-Mezzanine-v6.0.0 diff --git a/cves/2024/CVE-2024-25170.md b/cves/2024/CVE-2024-25170.md index d14b5a31f11..b36c1f48de5 100644 --- a/cves/2024/CVE-2024-25170.md +++ b/cves/2024/CVE-2024-25170.md @@ -14,5 +14,5 @@ An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via mani - https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0 #### Github -No PoCs found on GitHub currently. +- https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0 diff --git a/cves/2024/CVE-2024-25202.md b/cves/2024/CVE-2024-25202.md index b65a1095029..7943ba80925 100644 --- a/cves/2024/CVE-2024-25202.md +++ b/cves/2024/CVE-2024-25202.md @@ -16,5 +16,5 @@ Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and U - https://medium.com/@agampreetsingh_93704/cve-2024-25202-discover-by-agampreet-singh-cyber-security-expert-ff8e32f5cf52 #### Github -No PoCs found on GitHub currently. +- https://github.com/Agampreet-Singh/CVE-2024-25202 diff --git a/cves/2024/CVE-2024-25411.md b/cves/2024/CVE-2024-25411.md index 79d2ba629f7..af9ce9ff295 100644 --- a/cves/2024/CVE-2024-25411.md +++ b/cves/2024/CVE-2024-25411.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to - https://github.com/paragbagul111/CVE-2024-25411 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-25411 diff --git a/cves/2024/CVE-2024-25412.md b/cves/2024/CVE-2024-25412.md index 12faf4037d1..993a7446568 100644 --- a/cves/2024/CVE-2024-25412.md +++ b/cves/2024/CVE-2024-25412.md @@ -13,5 +13,5 @@ A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to - https://github.com/paragbagul111/CVE-2024-25412 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-25412 diff --git a/cves/2024/CVE-2024-25423.md b/cves/2024/CVE-2024-25423.md index ee6b05fa2aa..15cd7072bcc 100644 --- a/cves/2024/CVE-2024-25423.md +++ b/cves/2024/CVE-2024-25423.md @@ -14,5 +14,5 @@ An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitra - https://github.com/DriverUnload/cve-2024-25423 #### Github -No PoCs found on GitHub currently. +- https://github.com/DriverUnload/cve-2024-25423 diff --git a/cves/2024/CVE-2024-25600.md b/cves/2024/CVE-2024-25600.md index 85904af2203..fc96ac0d3fd 100644 --- a/cves/2024/CVE-2024-25600.md +++ b/cves/2024/CVE-2024-25600.md @@ -29,6 +29,11 @@ Improper Control of Generation of Code ('Code Injection') vulnerability in Codee - https://github.com/so1icitx/CVE-2024-25600 - https://github.com/svchostmm/CVE-2024-25600-mass - https://github.com/wh6amiGit/CVE-2024-25600 +- https://github.com/CerberusMrXi/WP-Bricks-Exploit-CVE-2024-25600 +- https://github.com/Chocapikk/CVE-2024-25600 +- https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT +- https://github.com/estebanzarate/CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC +- https://github.com/ranjithxploit/CVE-2024-25600 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25600.yaml diff --git a/cves/2024/CVE-2024-25641.md b/cves/2024/CVE-2024-25641.md index 8b4d353bc68..3b98564d508 100644 --- a/cves/2024/CVE-2024-25641.md +++ b/cves/2024/CVE-2024-25641.md @@ -20,6 +20,8 @@ Cacti provides an operational monitoring and fault management framework. Prior t - https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26 - https://github.com/regantemudo/CVE-2024-25641-Exploit-for-Cacti-1.2.26 - https://github.com/thisisveryfunny/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 +- https://github.com/GabrielCF10/CVE-2024-25641---Cacti +- https://github.com/leo-mitch/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 #### ExploitDB - https://www.exploit-db.com/exploits/52225 diff --git a/cves/2024/CVE-2024-26229.md b/cves/2024/CVE-2024-26229.md index 1b085e61da5..ec640af5116 100644 --- a/cves/2024/CVE-2024-26229.md +++ b/cves/2024/CVE-2024-26229.md @@ -57,4 +57,6 @@ No PoCs from references. - https://github.com/mqxmm/CVE-2024-26229 - https://github.com/shinspace92/cve-2024-26229 - https://github.com/team-MineDEV/CVE-2024-26229 +- https://github.com/0xGunrunner/CVE-2024-26229-BOF +- https://github.com/vettrivel007/CVE-2024-26229 diff --git a/cves/2024/CVE-2024-26521.md b/cves/2024/CVE-2024-26521.md index 7e9b2d00e5e..cbdebc8f79a 100644 --- a/cves/2024/CVE-2024-26521.md +++ b/cves/2024/CVE-2024-26521.md @@ -15,5 +15,5 @@ HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote - https://github.com/hackervegas001/CVE-2024-26521 #### Github -No PoCs found on GitHub currently. +- https://github.com/hackervegas001/CVE-2024-26521 diff --git a/cves/2024/CVE-2024-27130.md b/cves/2024/CVE-2024-27130.md index 8f53b71964b..fc3d8726c63 100644 --- a/cves/2024/CVE-2024-27130.md +++ b/cves/2024/CVE-2024-27130.md @@ -19,4 +19,5 @@ No PoCs from references. #### Github - https://github.com/d0rb/CVE-2024-27130 - https://github.com/watchtowrlabs/CVE-2024-27130 +- https://github.com/dkstar11q/cve-2024-27130-poc diff --git a/cves/2024/CVE-2024-27198.md b/cves/2024/CVE-2024-27198.md index 43bb0bfacd9..a786969625f 100644 --- a/cves/2024/CVE-2024-27198.md +++ b/cves/2024/CVE-2024-27198.md @@ -32,6 +32,8 @@ In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform - https://github.com/passwa11/CVE-2024-27198-RCE - https://github.com/rampantspark/CVE-2024-27198 - https://github.com/yoryio/CVE-2024-27198 +- https://github.com/EynaExp/CVE-2024-27198-POC +- https://github.com/kxom9ks/CVE-2024-27198-TeamCity #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27198.yaml @@ -41,3 +43,6 @@ In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/teamcity/CVE-2024-27198 diff --git a/cves/2024/CVE-2024-27304.md b/cves/2024/CVE-2024-27304.md index a715d72d836..c0093ead8bf 100644 --- a/cves/2024/CVE-2024-27304.md +++ b/cves/2024/CVE-2024-27304.md @@ -17,5 +17,5 @@ pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an att - https://www.youtube.com/watch?v=Tfg1B8u1yvE #### Github -No PoCs found on GitHub currently. +- https://github.com/roaris/CVE-2024-27304-PoC diff --git a/cves/2024/CVE-2024-27316.md b/cves/2024/CVE-2024-27316.md index ef056e2439c..c05cfdc7502 100644 --- a/cves/2024/CVE-2024-27316.md +++ b/cves/2024/CVE-2024-27316.md @@ -14,4 +14,5 @@ HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 #### Github - https://github.com/aeyesec/CVE-2024-27316_poc +- https://github.com/lockness-Ko/CVE-2024-27316 diff --git a/cves/2024/CVE-2024-27348.md b/cves/2024/CVE-2024-27348.md index 89c0529710d..1f89ddaf440 100644 --- a/cves/2024/CVE-2024-27348.md +++ b/cves/2024/CVE-2024-27348.md @@ -18,6 +18,8 @@ RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue - https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE - https://github.com/kljunowsky/CVE-2024-27348 - https://github.com/p0et08/CVE-2024-27348 +- https://github.com/akelaqe/CVE-2024-27348-HugeGraph-RCE +- https://github.com/wqfh/CVE-2024-27348 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27348.yaml @@ -27,3 +29,6 @@ RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_hugegraph_gremlin_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/hugegraph/CVE-2024-27348 diff --git a/cves/2024/CVE-2024-27518.md b/cves/2024/CVE-2024-27518.md index 673c9b78229..97d63f2b754 100644 --- a/cves/2024/CVE-2024-27518.md +++ b/cves/2024/CVE-2024-27518.md @@ -16,5 +16,5 @@ An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unpriv - https://www.youtube.com/watch?v=FM5XlZPdvdo #### Github -No PoCs found on GitHub currently. +- https://github.com/secunnix/CVE-2024-27518 diff --git a/cves/2024/CVE-2024-27665.md b/cves/2024/CVE-2024-27665.md index e8c5b787664..c1ed79f32d8 100644 --- a/cves/2024/CVE-2024-27665.md +++ b/cves/2024/CVE-2024-27665.md @@ -13,5 +13,5 @@ Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via fil - https://github.com/Thirukrishnan/CVE-2024-27665/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Thirukrishnan/CVE-2024-27665 diff --git a/cves/2024/CVE-2024-27766.md b/cves/2024/CVE-2024-27766.md index ae1b4e72607..9e5da234107 100644 --- a/cves/2024/CVE-2024-27766.md +++ b/cves/2024/CVE-2024-27766.md @@ -14,5 +14,6 @@ An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code vi - https://github.com/Ant1sec-ops/CVE-2024-27766 #### Github -No PoCs found on GitHub currently. +- https://github.com/Hissec/Mysql_CVE-2024-27766 +- https://github.com/y0un9eee/CVE-2024-27766 diff --git a/cves/2024/CVE-2024-27956.md b/cves/2024/CVE-2024-27956.md index 8143fad1567..aad0675d5c6 100644 --- a/cves/2024/CVE-2024-27956.md +++ b/cves/2024/CVE-2024-27956.md @@ -33,6 +33,8 @@ No PoCs from references. - https://github.com/k3ppf0r/CVE-2024-27956 - https://github.com/m4nInTh3mIdDle/wordpress-CVE-2024-27956 - https://github.com/truonghuuphuc/CVE-2024-27956 +- https://github.com/Ap0dexMe0/CVE-2024-27956 +- https://github.com/hitazuranahiro/Valve-Press-CVE-2024-27956-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27956.yaml diff --git a/cves/2024/CVE-2024-28000.md b/cves/2024/CVE-2024-28000.md index 7773ed66643..bfb0a7b9bb2 100644 --- a/cves/2024/CVE-2024-28000.md +++ b/cves/2024/CVE-2024-28000.md @@ -19,6 +19,7 @@ Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed - https://github.com/SSSSuperX/CVE-2024-28000 - https://github.com/arch1m3d/CVE-2024-28000 - https://github.com/ebrasha/CVE-2024-28000 +- https://github.com/shawnng078-ops/CVE-2024-28000-Exploit-Lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28000.yaml diff --git a/cves/2024/CVE-2024-28157.md b/cves/2024/CVE-2024-28157.md index 189cbe785e2..a8e1620ac33 100644 --- a/cves/2024/CVE-2024-28157.md +++ b/cves/2024/CVE-2024-28157.md @@ -13,5 +13,5 @@ Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on bui No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/shinigami-777/PoC_CVE-2024-28157 diff --git a/cves/2024/CVE-2024-28231.md b/cves/2024/CVE-2024-28231.md index bc9e6dfea84..847e6489026 100644 --- a/cves/2024/CVE-2024-28231.md +++ b/cves/2024/CVE-2024-28231.md @@ -20,5 +20,5 @@ eprosima Fast DDS is a C++ implementation of the Data Distribution Service stand - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-9m2j-qw67-ph4w #### Github -No PoCs found on GitHub currently. +- https://github.com/grimmmbo/ros2_CVE-2024-28231 diff --git a/cves/2024/CVE-2024-28397.md b/cves/2024/CVE-2024-28397.md index 72d15ea0489..c7c83cf2c7a 100644 --- a/cves/2024/CVE-2024-28397.md +++ b/cves/2024/CVE-2024-28397.md @@ -28,6 +28,15 @@ An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows a - https://github.com/releaseown/exploit-js2py - https://github.com/vitaciminIPI/CVE-2024-28397-RCE - https://github.com/waleed-hassan569/CVE-2024-28397-command-execution-poc +- https://github.com/3z-p0wn/CVE-2024-28397-exploit +- https://github.com/D3ltaFormation/CVE-2024-28397-Js2Py-RCE +- https://github.com/GhostOverflow/CVE-2024-28397-command-execution-poc +- https://github.com/L1337Xi/CVE-2024-28397-Exploit-Automation +- https://github.com/Marven11/CVE-2024-28397-js2py-Sandbox-Escape +- https://github.com/Udayveer17/Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py- +- https://github.com/somisec/CVE-2024-28397-Reverse-Shell +- https://github.com/xeloxa/CVE-2024-28397-Js2Py-RCE-Exploit +- https://github.com/y0naldez/CVE-2024-28397-Js2Py-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28397.yaml diff --git a/cves/2024/CVE-2024-28715.md b/cves/2024/CVE-2024-28715.md index d0ba7c56057..e666498d34d 100644 --- a/cves/2024/CVE-2024-28715.md +++ b/cves/2024/CVE-2024-28715.md @@ -13,5 +13,5 @@ Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote - https://github.com/Lq0ne/CVE-2024-28715 #### Github -No PoCs found on GitHub currently. +- https://github.com/Lq0ne/CVE-2024-28715 diff --git a/cves/2024/CVE-2024-28752.md b/cves/2024/CVE-2024-28752.md index c3c8bbb9a78..abbb2864c40 100644 --- a/cves/2024/CVE-2024-28752.md +++ b/cves/2024/CVE-2024-28752.md @@ -15,3 +15,5 @@ No PoCs from references. #### Github - https://github.com/ReaJason/CVE-2024-28752 +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/apache-cxf/CVE-2024-28752 diff --git a/cves/2024/CVE-2024-2876.md b/cves/2024/CVE-2024-2876.md index 80e4d7ca78f..69ff61cfa7c 100644 --- a/cves/2024/CVE-2024-2876.md +++ b/cves/2024/CVE-2024-2876.md @@ -24,6 +24,8 @@ No PoCs from references. - https://github.com/khushi8080/wp-SQL_Injection - https://github.com/skyrowalker/CVE-2024-2876 - https://github.com/zxcod3/CVE-2024-2876 +- https://github.com/chsxthwik/CVE-2024-2876 +- https://github.com/kernel364/CVE-2024-2876 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2876.yaml diff --git a/cves/2024/CVE-2024-2887.md b/cves/2024/CVE-2024-2887.md index abd2baaf107..e3f0c6dd138 100644 --- a/cves/2024/CVE-2024-2887.md +++ b/cves/2024/CVE-2024-2887.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/PumpkinBridge/Chrome-CVE-2024-2887-RCE-POC - https://github.com/jjyuorg/reproduce-cve-2024-2887 - https://github.com/rycbar77/CVE-2024-2887 +- https://github.com/ad3210/CVE-2024-2887-REPORT diff --git a/cves/2024/CVE-2024-28987.md b/cves/2024/CVE-2024-28987.md index 482b2f83ac7..794409ef9bf 100644 --- a/cves/2024/CVE-2024-28987.md +++ b/cves/2024/CVE-2024-28987.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/fa-rrel/CVE-2024-28987-POC - https://github.com/gh-ost00/CVE-2024-28987-POC - https://github.com/horizon3ai/CVE-2024-28987 +- https://github.com/Darabium/CVE-2024-28987 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28987.yaml diff --git a/cves/2024/CVE-2024-28995.md b/cves/2024/CVE-2024-28995.md index 926f9e39769..b0001fc32e7 100644 --- a/cves/2024/CVE-2024-28995.md +++ b/cves/2024/CVE-2024-28995.md @@ -25,6 +25,7 @@ No PoCs from references. - https://github.com/ggfzx/CVE-2024-28995 - https://github.com/gotr00t0day/CVE-2024-28995 - https://github.com/muhammetali20/CVE-2024-28995 +- https://github.com/GraySignal/CVE-2024-28995-SolarWinds-Serv-U #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28995.yaml diff --git a/cves/2024/CVE-2024-29269.md b/cves/2024/CVE-2024-29269.md index ea40f9a7dca..ab2492622d1 100644 --- a/cves/2024/CVE-2024-29269.md +++ b/cves/2024/CVE-2024-29269.md @@ -23,6 +23,7 @@ No PoCs from references. - https://github.com/dream434/CVE-2024-29269 - https://github.com/hack-with-rohit/CVE-2024-29269-RCE - https://github.com/wutalent/CVE-2024-29269 +- https://github.com/chsxthwik/CVE-2024-29269 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml diff --git a/cves/2024/CVE-2024-2961.md b/cves/2024/CVE-2024-2961.md index edce0d05e12..0ae4bcb6a96 100644 --- a/cves/2024/CVE-2024-2961.md +++ b/cves/2024/CVE-2024-2961.md @@ -24,9 +24,14 @@ No PoCs from references. - https://github.com/rvizx/CVE-2024-2961 - https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7 - https://github.com/tnishiox/cve-2024-2961 +- https://github.com/Clarissss/osTicketFileReadIntoRCE +- https://github.com/suce0155/CVE-2024-2961 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2024/CVE-2024-2961.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/php/CVE-2024-2961 diff --git a/cves/2024/CVE-2024-29671.md b/cves/2024/CVE-2024-29671.md index d08431c72de..5fb25f1753f 100644 --- a/cves/2024/CVE-2024-29671.md +++ b/cves/2024/CVE-2024-29671.md @@ -14,5 +14,5 @@ Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remo - https://github.com/laskdjlaskdj12/CVE-2024-29671-POC #### Github -No PoCs found on GitHub currently. +- https://github.com/laskdjlaskdj12/CVE-2024-29671-POC diff --git a/cves/2024/CVE-2024-29943.md b/cves/2024/CVE-2024-29943.md index 28dbe3d46f3..219a73913da 100644 --- a/cves/2024/CVE-2024-29943.md +++ b/cves/2024/CVE-2024-29943.md @@ -15,4 +15,6 @@ No PoCs from references. #### Github - https://github.com/bjrjk/CVE-2024-29943 +- https://github.com/SneakyNachos/CVE-2024-29943-but-with-wasm +- https://github.com/seadragnol/CVE-2024-29943 diff --git a/cves/2024/CVE-2024-29973.md b/cves/2024/CVE-2024-29973.md index 593ecf72380..96e7b3755c0 100644 --- a/cves/2024/CVE-2024-29973.md +++ b/cves/2024/CVE-2024-29973.md @@ -26,6 +26,7 @@ - https://github.com/p0et08/CVE-2024-29973 - https://github.com/skyrowalker/CVE-2024-29973 - https://github.com/zxcod3/CVE-2024-29973 +- https://github.com/kernel364/CVE-2024-29973 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29973.yaml diff --git a/cves/2024/CVE-2024-30088.md b/cves/2024/CVE-2024-30088.md index 749c8f9c841..227f92462b1 100644 --- a/cves/2024/CVE-2024-30088.md +++ b/cves/2024/CVE-2024-30088.md @@ -43,6 +43,9 @@ No PoCs from references. - https://github.com/Zombie-Kaiser/CVE-2024-30088-Windows-poc - https://github.com/exploits-forsale/collateral-damage - https://github.com/tykawaii98/CVE-2024-30088 +- https://github.com/FangFang-Yi/CVE-2024-30088 +- https://github.com/cyghtinc/cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU +- https://github.com/th3g3ntl3m4n84/CVE-2024-30088__Windows-TOCTOU-exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2024_30088_authz_basep.rb diff --git a/cves/2024/CVE-2024-30212.md b/cves/2024/CVE-2024-30212.md index fa30f8de693..a04835599e3 100644 --- a/cves/2024/CVE-2024-30212.md +++ b/cves/2024/CVE-2024-30212.md @@ -13,5 +13,5 @@ If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFF - https://github.com/Fehr-GmbH/blackleak #### Github -No PoCs found on GitHub currently. +- https://github.com/Fehr-GmbH/blackleak diff --git a/cves/2024/CVE-2024-30804.md b/cves/2024/CVE-2024-30804.md index 32ae7c3f111..4805441b4bc 100644 --- a/cves/2024/CVE-2024-30804.md +++ b/cves/2024/CVE-2024-30804.md @@ -14,5 +14,5 @@ An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/ekfkawl/CVE-2024-30804 diff --git a/cves/2024/CVE-2024-30851.md b/cves/2024/CVE-2024-30851.md index 35afbc31d60..e9ece5671e7 100644 --- a/cves/2024/CVE-2024-30851.md +++ b/cves/2024/CVE-2024-30851.md @@ -13,7 +13,7 @@ Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allo - https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jasmin_ransomware_dir_traversal.rb diff --git a/cves/2024/CVE-2024-30896.md b/cves/2024/CVE-2024-30896.md index fc0f7f04b57..1678cca8eac 100644 --- a/cves/2024/CVE-2024-30896.md +++ b/cves/2024/CVE-2024-30896.md @@ -15,7 +15,7 @@ InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under t - https://github.com/influxdata/influxdb/issues/24797 #### Github -No PoCs found on GitHub currently. +- https://github.com/XenoM0rph97/CVE-2024-30896 #### ExploitDB - https://www.exploit-db.com/exploits/52142 diff --git a/cves/2024/CVE-2024-3094.md b/cves/2024/CVE-2024-3094.md index 0b59cf8a505..87b478614df 100644 --- a/cves/2024/CVE-2024-3094.md +++ b/cves/2024/CVE-2024-3094.md @@ -61,6 +61,15 @@ Through a series of complex obfuscations, the liblzma build process extracts a p - https://github.com/shefirot/CVE-2024-3094 - https://github.com/teyhouse/CVE-2024-3094 - https://github.com/valeriot30/cve-2024-3094 +- https://github.com/0xBlackash/CVE-2024-3094 +- https://github.com/FabioBaroni/CVE-2024-3094-checker +- https://github.com/Security-Phoenix-demo/CVE-2024-3094-fix-exploits +- https://github.com/ThomRgn/xzutils_backdoor_obfuscation +- https://github.com/extracoding-dozen/CVE-2024-3094 +- https://github.com/h3raklez/CVE-2024-3094 +- https://github.com/hackura/xz-cve-2024-3094 +- https://github.com/vesjolyjd/Kaspersky_CVE-2024-3094 +- https://github.com/vnchk1/sec_review_cve-2024-3094 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-3094.yaml diff --git a/cves/2024/CVE-2024-31317.md b/cves/2024/CVE-2024-31317.md index 0f37b96ba76..64bad5f3534 100644 --- a/cves/2024/CVE-2024-31317.md +++ b/cves/2024/CVE-2024-31317.md @@ -24,4 +24,11 @@ No PoCs from references. - https://github.com/agg23/android_31317_exploit_rs - https://github.com/agg23/cve-2024-31317 - https://github.com/fuhei/CVE-2024-31317 +- https://github.com/CleoV2/Debuggable-App-Exploit +- https://github.com/GitAmanS/ZygoteExploitDemo +- https://github.com/Tinnci/cve-2024-31317 +- https://github.com/chengfeng30121/CVE-2024-31317-PoC +- https://github.com/fcy10012/CVE-2024-31317-Deployer +- https://github.com/kalibb/CVE-2024-31317-Deployer +- https://github.com/wqry085/PoC-Deployer-System diff --git a/cves/2024/CVE-2024-31680.md b/cves/2024/CVE-2024-31680.md index 04df4e40952..88ddda1fd90 100644 --- a/cves/2024/CVE-2024-31680.md +++ b/cves/2024/CVE-2024-31680.md @@ -14,5 +14,5 @@ File Upload vulnerability in Shibang Communications Co., Ltd. IP network interco - https://github.com/h3rkk/CVE-2024-31680/blob/main/upload.md #### Github -No PoCs found on GitHub currently. +- https://github.com/h3rkk/CVE-2024-31680 diff --git a/cves/2024/CVE-2024-31777.md b/cves/2024/CVE-2024-31777.md index 2492f7672d5..5d4e1d4792a 100644 --- a/cves/2024/CVE-2024-31777.md +++ b/cves/2024/CVE-2024-31777.md @@ -14,7 +14,7 @@ File Upload vulnerability in openeclass v.3.15 and before allows an attacker to - https://github.com/FreySolarEye/Exploit-CVE-2024-31777 #### Github -No PoCs found on GitHub currently. +- https://github.com/FreySolarEye/Exploit-CVE-2024-31777 #### ExploitDB - https://www.exploit-db.com/exploits/51975 diff --git a/cves/2024/CVE-2024-31819.md b/cves/2024/CVE-2024-31819.md index 5439c62ae68..723ff68b9fb 100644 --- a/cves/2024/CVE-2024-31819.md +++ b/cves/2024/CVE-2024-31819.md @@ -17,6 +17,7 @@ An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execut #### Github - https://github.com/Jhonsonwannaa/CVE-2024-31819 - https://github.com/dream434/CVE-2024-31819 +- https://github.com/Chocapikk/CVE-2024-31819 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/avideo_wwbnindex_unauth_rce.rb diff --git a/cves/2024/CVE-2024-3183.md b/cves/2024/CVE-2024-3183.md index 38fd95bb323..beb093cd4c0 100644 --- a/cves/2024/CVE-2024-3183.md +++ b/cves/2024/CVE-2024-3183.md @@ -28,4 +28,5 @@ No PoCs from references. #### Github - https://github.com/Cyxow/CVE-2024-3183-POC +- https://github.com/Im10n/CVE-2024-3183-POC diff --git a/cves/2024/CVE-2024-31835.md b/cves/2024/CVE-2024-31835.md index 99975087cbe..53826723a5b 100644 --- a/cves/2024/CVE-2024-31835.md +++ b/cves/2024/CVE-2024-31835.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remo - https://github.com/paragbagul111/CVE-2024-31835 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-31835 diff --git a/cves/2024/CVE-2024-31982.md b/cves/2024/CVE-2024-31982.md index 6382edbc55c..77e3a9af383 100644 --- a/cves/2024/CVE-2024-31982.md +++ b/cves/2024/CVE-2024-31982.md @@ -24,6 +24,7 @@ XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 a - https://github.com/bigb0x/CVE-2024-31982 - https://github.com/k3lpi3b4nsh33/CVE-2024-31982 - https://github.com/th3gokul/CVE-2024-31982 +- https://github.com/raishin1/CVE-2024-31982 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31982.yaml diff --git a/cves/2024/CVE-2024-32002.md b/cves/2024/CVE-2024-32002.md index 3366a41cafa..e0e71454481 100644 --- a/cves/2024/CVE-2024-32002.md +++ b/cves/2024/CVE-2024-32002.md @@ -99,4 +99,10 @@ No PoCs from references. - https://github.com/vincepsh/CVE-2024-32002 - https://github.com/vincepsh/CVE-2024-32002-hook - https://github.com/winstest/test2 +- https://github.com/BasyacatX/CVE-2024-32002-PoC_Chinese +- https://github.com/BohemianHacks/CVE-2024-32002-poc +- https://github.com/jakob-pennington/cve-2024-32002-poc-aw +- https://github.com/jakob-pennington/cve-2024-32002-poc-rce +- https://github.com/jakob-pennington/cve-2024-32002-submodule-aw +- https://github.com/jakob-pennington/cve-2024-32002-submodule-rce diff --git a/cves/2024/CVE-2024-32019.md b/cves/2024/CVE-2024-32019.md index aaff8422997..1aeaca2b2f9 100644 --- a/cves/2024/CVE-2024-32019.md +++ b/cves/2024/CVE-2024-32019.md @@ -24,6 +24,11 @@ Netdata is an open source observability tool. In affected versions the `ndsudo` - https://github.com/juanbelin/CVE-2024-32019-POC - https://github.com/sPhyos/cve-2024-32019-PoC - https://github.com/x0da6h/POC-for-CVE-2024-32019 +- https://github.com/80Ottanta80/CVE-2024-32019-PoC +- https://github.com/hexared/CVE-2024-32019_poc +- https://github.com/julichaan/CVE-2024-32019-ndsudo-local-privilege-escalation-NetData +- https://github.com/justjoeyking/CVE-2024-32019-ndsudo +- https://github.com/kikechans/-Netdata-PrivEsc-CVE-2024-32019 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ndsudo_cve_2024_32019.rb diff --git a/cves/2024/CVE-2024-32113.md b/cves/2024/CVE-2024-32113.md index 89ae780c86e..f5eaf6965f0 100644 --- a/cves/2024/CVE-2024-32113.md +++ b/cves/2024/CVE-2024-32113.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/RacerZ-fighting/CVE-2024-32113-POC - https://github.com/YongYe-Security/CVE-2024-32113 - https://github.com/absholi7ly/Apache-OFBiz-Directory-Traversal-exploit +- https://github.com/luizgaf/CVE-2024-32113-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32113.yaml diff --git a/cves/2024/CVE-2024-32114.md b/cves/2024/CVE-2024-32114.md index b4305d175a9..1eb4c0301d5 100644 --- a/cves/2024/CVE-2024-32114.md +++ b/cves/2024/CVE-2024-32114.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32114.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2024-32114 diff --git a/cves/2024/CVE-2024-32369.md b/cves/2024/CVE-2024-32369.md index f02235eb1c3..54b74cf1de6 100644 --- a/cves/2024/CVE-2024-32369.md +++ b/cves/2024/CVE-2024-32369.md @@ -14,5 +14,5 @@ SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 throu - https://github.com/chucrutis/CVE-2024-32369 #### Github -No PoCs found on GitHub currently. +- https://github.com/chucrutis/CVE-2024-32369 diff --git a/cves/2024/CVE-2024-32640.md b/cves/2024/CVE-2024-32640.md index 64dce361c22..52ff5b1f5c2 100644 --- a/cves/2024/CVE-2024-32640.md +++ b/cves/2024/CVE-2024-32640.md @@ -20,6 +20,7 @@ MASA CMS is an Enterprise Content Management platform based on open source techn - https://github.com/0xYumeko/CVE-2024-32640-SQLI-MuraCMS - https://github.com/pizza-power/CVE-2024-32640 - https://github.com/sammings/CVE-2024-32640 +- https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32640.yaml diff --git a/cves/2024/CVE-2024-3273.md b/cves/2024/CVE-2024-3273.md index d047c630ef9..8836b6881e7 100644 --- a/cves/2024/CVE-2024-3273.md +++ b/cves/2024/CVE-2024-3273.md @@ -25,6 +25,7 @@ Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L b - https://github.com/X-Projetion/CVE-2024-3273-D-Link-Remote-Code-Execution-RCE - https://github.com/adhikara13/CVE-2024-3273 - https://github.com/mrrobot0o/CVE-2024-3273- +- https://github.com/Ap0dexMe0/CVE-2024-3273 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3273.yaml diff --git a/cves/2024/CVE-2024-33438.md b/cves/2024/CVE-2024-33438.md index fe6f425b09b..6247107b47e 100644 --- a/cves/2024/CVE-2024-33438.md +++ b/cves/2024/CVE-2024-33438.md @@ -14,5 +14,5 @@ File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user - https://github.com/julio-cfa/CVE-2024-33438 #### Github -No PoCs found on GitHub currently. +- https://github.com/julio-cfa/CVE-2024-33438 diff --git a/cves/2024/CVE-2024-3400.md b/cves/2024/CVE-2024-3400.md index 448c3ba1fca..30abd131bef 100644 --- a/cves/2024/CVE-2024-3400.md +++ b/cves/2024/CVE-2024-3400.md @@ -56,6 +56,9 @@ A command injection as a result of arbitrary file creation vulnerability in the - https://github.com/tfrederick74656/cve-2024-3400-poc - https://github.com/workshop748/CVE-2024-3400 - https://github.com/zam89/CVE-2024-3400-pot +- https://github.com/GhassanSabir/CVE-2024-3400-poc +- https://github.com/razureink/cve-2024-3400-panos_rce_reproduction +- https://github.com/wa6n3r/CVE-2024-3400 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3400.yaml diff --git a/cves/2024/CVE-2024-34070.md b/cves/2024/CVE-2024-34070.md index 335558dfce2..e8980d85556 100644 --- a/cves/2024/CVE-2024-34070.md +++ b/cves/2024/CVE-2024-34070.md @@ -15,5 +15,6 @@ Froxlor is open source server administration software. Prior to 2.1.9, a Stored - https://github.com/froxlor/Froxlor/security/advisories/GHSA-x525-54hf-xr53 #### Github -No PoCs found on GitHub currently. +- https://github.com/Akira07210/Exploit-CVE-2024-34070 +- https://github.com/Okymi-X/CVE-2024-34070 diff --git a/cves/2024/CVE-2024-34102.md b/cves/2024/CVE-2024-34102.md index b0f42babe0c..a7b8d5146fe 100644 --- a/cves/2024/CVE-2024-34102.md +++ b/cves/2024/CVE-2024-34102.md @@ -34,6 +34,8 @@ Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affe - https://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento - https://github.com/mksundaram69/CVE-2024-34102 - https://github.com/th3gokul/CVE-2024-34102 +- https://github.com/nmmorette/CVE-2024-34102 +- https://github.com/russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34102.yaml diff --git a/cves/2024/CVE-2024-34220.md b/cves/2024/CVE-2024-34220.md index 0691e403c57..98c7c7118ef 100644 --- a/cves/2024/CVE-2024-34220.md +++ b/cves/2024/CVE-2024-34220.md @@ -14,5 +14,5 @@ Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injecti - https://github.com/dovankha/CVE-2024-34220 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34220 diff --git a/cves/2024/CVE-2024-34221.md b/cves/2024/CVE-2024-34221.md index fedcc28861c..083e15e7c7b 100644 --- a/cves/2024/CVE-2024-34221.md +++ b/cves/2024/CVE-2024-34221.md @@ -14,5 +14,5 @@ Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Pe - https://github.com/dovankha/CVE-2024-34221 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34221 diff --git a/cves/2024/CVE-2024-34222.md b/cves/2024/CVE-2024-34222.md index 673d0626484..7f7a2d1fc86 100644 --- a/cves/2024/CVE-2024-34222.md +++ b/cves/2024/CVE-2024-34222.md @@ -14,5 +14,5 @@ Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injecti - https://github.com/dovankha/CVE-2024-34222 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34222 diff --git a/cves/2024/CVE-2024-34223.md b/cves/2024/CVE-2024-34223.md index 3b603b2cbca..e9f5fe1327b 100644 --- a/cves/2024/CVE-2024-34223.md +++ b/cves/2024/CVE-2024-34223.md @@ -14,5 +14,5 @@ Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Hum - https://github.com/dovankha/CVE-2024-34223 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34223 diff --git a/cves/2024/CVE-2024-34224.md b/cves/2024/CVE-2024-34224.md index 09805e3fe99..5fdad22dd1b 100644 --- a/cves/2024/CVE-2024-34224.md +++ b/cves/2024/CVE-2024-34224.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Compu - https://github.com/dovankha/CVE-2024-34224 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34224 diff --git a/cves/2024/CVE-2024-34225.md b/cves/2024/CVE-2024-34225.md index 142f739356c..2fa107ca34c 100644 --- a/cves/2024/CVE-2024-34225.md +++ b/cves/2024/CVE-2024-34225.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Compute - https://github.com/dovankha/CVE-2024-34225 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34225 diff --git a/cves/2024/CVE-2024-34226.md b/cves/2024/CVE-2024-34226.md index 952bfd738c4..b1ce3ab1b34 100644 --- a/cves/2024/CVE-2024-34226.md +++ b/cves/2024/CVE-2024-34226.md @@ -14,5 +14,5 @@ SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in Sour - https://github.com/dovankha/CVE-2024-34226 #### Github -No PoCs found on GitHub currently. +- https://github.com/dovankha/CVE-2024-34226 diff --git a/cves/2024/CVE-2024-34312.md b/cves/2024/CVE-2024-34312.md index 923a1df9cfc..acab200b9f5 100644 --- a/cves/2024/CVE-2024-34312.md +++ b/cves/2024/CVE-2024-34312.md @@ -14,5 +14,5 @@ Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cros - https://github.com/vincentscode/CVE-2024-34312 #### Github -No PoCs found on GitHub currently. +- https://github.com/vincentscode/CVE-2024-34312 diff --git a/cves/2024/CVE-2024-34313.md b/cves/2024/CVE-2024-34313.md index 38b6808ad93..fce1199d0ed 100644 --- a/cves/2024/CVE-2024-34313.md +++ b/cves/2024/CVE-2024-34313.md @@ -14,5 +14,5 @@ An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory - https://github.com/vincentscode/CVE-2024-34313 #### Github -No PoCs found on GitHub currently. +- https://github.com/vincentscode/CVE-2024-34313 diff --git a/cves/2024/CVE-2024-34327.md b/cves/2024/CVE-2024-34327.md index 02189873d84..012f2f8bd8e 100644 --- a/cves/2024/CVE-2024-34327.md +++ b/cves/2024/CVE-2024-34327.md @@ -13,5 +13,5 @@ Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability vi - https://github.com/0xsu3ks/CVE-2024-34327 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xsu3ks/CVE-2024-34327 diff --git a/cves/2024/CVE-2024-34361.md b/cves/2024/CVE-2024-34361.md index 3b580df69b6..178c797193b 100644 --- a/cves/2024/CVE-2024-34361.md +++ b/cves/2024/CVE-2024-34361.md @@ -15,4 +15,5 @@ Pi-hole is a DNS sinkhole that protects devices from unwanted content without in #### Github - https://github.com/T0X1Cx/CVE-2024-34361-PiHole-SSRF-to-RCE +- https://github.com/T0X1Cx/CVE-2024-34361-Pi-Hole-SSRF-to-RCE diff --git a/cves/2024/CVE-2024-34444.md b/cves/2024/CVE-2024-34444.md index 25300d51632..f33e476f032 100644 --- a/cves/2024/CVE-2024-34444.md +++ b/cves/2024/CVE-2024-34444.md @@ -13,4 +13,4 @@ Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This iss No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/dzmind2312/CVE-2024-34444-Exploit-Poc diff --git a/cves/2024/CVE-2024-34452.md b/cves/2024/CVE-2024-34452.md index 6aa1aa1a2e3..e44186b6c41 100644 --- a/cves/2024/CVE-2024-34452.md +++ b/cves/2024/CVE-2024-34452.md @@ -14,5 +14,5 @@ CMSimple_XH 1.7.6 allows XSS by uploading a crafted SVG document. - https://github.com/surajhacx/CVE-2024-34452/ #### Github -No PoCs found on GitHub currently. +- https://github.com/surajhacx/CVE-2024-34452 diff --git a/cves/2024/CVE-2024-34582.md b/cves/2024/CVE-2024-34582.md index 81807342d12..c5ebe89ac25 100644 --- a/cves/2024/CVE-2024-34582.md +++ b/cves/2024/CVE-2024-34582.md @@ -14,5 +14,5 @@ Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi u - https://github.com/silent6trinity/CVE-2024-34582 #### Github -No PoCs found on GitHub currently. +- https://github.com/silent6trinity/CVE-2024-34582 diff --git a/cves/2024/CVE-2024-35333.md b/cves/2024/CVE-2024-35333.md index 9726072ecbf..2ba201c678e 100644 --- a/cves/2024/CVE-2024-35333.md +++ b/cves/2024/CVE-2024-35333.md @@ -14,5 +14,5 @@ A stack-buffer-overflow vulnerability exists in the read_charset_decl function o - https://github.com/momo1239/CVE-2024-35333 #### Github -No PoCs found on GitHub currently. +- https://github.com/momo1239/CVE-2024-35333 diff --git a/cves/2024/CVE-2024-3553.md b/cves/2024/CVE-2024-3553.md index 5935bcfeecd..a601949c8a0 100644 --- a/cves/2024/CVE-2024-3553.md +++ b/cves/2024/CVE-2024-3553.md @@ -14,4 +14,4 @@ The Tutor LMS – eLearning and online course solution plugin for WordPress is v No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/RandomRobbieBF/CVE-2024-3553 diff --git a/cves/2024/CVE-2024-35584.md b/cves/2024/CVE-2024-35584.md index 44da143a267..5788a920766 100644 --- a/cves/2024/CVE-2024-35584.md +++ b/cves/2024/CVE-2024-35584.md @@ -15,7 +15,7 @@ SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExp - https://github.com/whwhwh96/CVE-2024-35584 #### Github -No PoCs found on GitHub currently. +- https://github.com/whwhwh96/CVE-2024-35584 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35584.yaml diff --git a/cves/2024/CVE-2024-36039.md b/cves/2024/CVE-2024-36039.md index 3e4ff437bde..1f511c7983d 100644 --- a/cves/2024/CVE-2024-36039.md +++ b/cves/2024/CVE-2024-36039.md @@ -13,5 +13,5 @@ PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input bec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/zenniskayy2k4/CVE-2024-36039_PoC diff --git a/cves/2024/CVE-2024-36042.md b/cves/2024/CVE-2024-36042.md index 55b501e8c4a..6a3216a9ac5 100644 --- a/cves/2024/CVE-2024-36042.md +++ b/cves/2024/CVE-2024-36042.md @@ -14,5 +14,5 @@ Silverpeas before 6.3.5 allows authentication bypass by omitting the Password fi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HA5ANT/Silverpeas-AuthBypass-CVE-2024-36042 diff --git a/cves/2024/CVE-2024-36104.md b/cves/2024/CVE-2024-36104.md index a4515f9320b..2e0906c61be 100644 --- a/cves/2024/CVE-2024-36104.md +++ b/cves/2024/CVE-2024-36104.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/RacerZ-fighting/CVE-2024-32113-POC - https://github.com/ggfzx/CVE-2024-36104 +- https://github.com/Groppoxx/CVE-2024-36104-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36104.yaml diff --git a/cves/2024/CVE-2024-36401.md b/cves/2024/CVE-2024-36401.md index 3a5e28b0dee..5997aa59324 100644 --- a/cves/2024/CVE-2024-36401.md +++ b/cves/2024/CVE-2024-36401.md @@ -43,9 +43,16 @@ GeoServer is an open source server that allows users to share and edit geospatia - https://github.com/whitebear-ch/GeoServerExploit - https://github.com/y1s4s/CVE-2024-36401-PoC - https://github.com/yisas93/CVE-2024-36401-PoC +- https://github.com/DanieleGiovanardi2408/cve-2024-36401-geoserver-rce +- https://github.com/Delt-A/CVE-2024-36401-poc +- https://github.com/URJACK2025/CVE-2024-36401 +- https://github.com/keelanbrady1011/CVE-2024-36401 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36401.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/geoserver_unauth_rce_cve_2024_36401.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2024-36401 diff --git a/cves/2024/CVE-2024-36420.md b/cves/2024/CVE-2024-36420.md index 7b26ca24d00..988fe602332 100644 --- a/cves/2024/CVE-2024-36420.md +++ b/cves/2024/CVE-2024-36420.md @@ -14,7 +14,7 @@ Flowise is a drag & drop user interface to build a customized large language mod No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/fineman999/POC_CVE-2024-36420 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36420.yaml diff --git a/cves/2024/CVE-2024-3661.md b/cves/2024/CVE-2024-3661.md index 05d6e80c07e..3e73c00432a 100644 --- a/cves/2024/CVE-2024-3661.md +++ b/cves/2024/CVE-2024-3661.md @@ -17,4 +17,5 @@ DHCP can add routes to a client’s routing table via the classless static route #### Github - https://github.com/Roundthe-clock/CVE-2024-3661VPN +- https://github.com/YardenFadida/CVE-2024-3661_Demo diff --git a/cves/2024/CVE-2024-36821.md b/cves/2024/CVE-2024-36821.md index 9cbbc92aa3e..0380ef58cd3 100644 --- a/cves/2024/CVE-2024-36821.md +++ b/cves/2024/CVE-2024-36821.md @@ -14,5 +14,5 @@ Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows atta - https://github.com/IvanGlinkin/CVE-2024-36821 #### Github -No PoCs found on GitHub currently. +- https://github.com/IvanGlinkin/CVE-2024-36821 diff --git a/cves/2024/CVE-2024-36837.md b/cves/2024/CVE-2024-36837.md index cc890047087..6a7aa095105 100644 --- a/cves/2024/CVE-2024-36837.md +++ b/cves/2024/CVE-2024-36837.md @@ -15,6 +15,7 @@ SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain #### Github - https://github.com/lhc321-source/CVE-2024-36837 +- https://github.com/phtcloud-dev/CVE-2024-36837 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36837.yaml diff --git a/cves/2024/CVE-2024-36971.md b/cves/2024/CVE-2024-36971.md index 2268a720ce5..928b5cc71ad 100644 --- a/cves/2024/CVE-2024-36971.md +++ b/cves/2024/CVE-2024-36971.md @@ -17,5 +17,5 @@ In the Linux kernel, the following vulnerability has been resolved:net: fix __ds No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/M4G1XX/CVE-2024-36971 diff --git a/cves/2024/CVE-2024-36985.md b/cves/2024/CVE-2024-36985.md index 171ef3ea3b8..1b0a8ffdd17 100644 --- a/cves/2024/CVE-2024-36985.md +++ b/cves/2024/CVE-2024-36985.md @@ -15,7 +15,7 @@ In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged u No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/LittleSuRii/CVE-2024-36985 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/splunk_auth_rce_cve_2024_36985.rb diff --git a/cves/2024/CVE-2024-36991.md b/cves/2024/CVE-2024-36991.md index baa795d4854..0d2b194c1d3 100644 --- a/cves/2024/CVE-2024-36991.md +++ b/cves/2024/CVE-2024-36991.md @@ -28,6 +28,8 @@ No PoCs from references. - https://github.com/jaytiwari05/CVE-2024-36991 - https://github.com/sardine-web/CVE-2024-36991 - https://github.com/th3gokul/CVE-2024-36991 +- https://github.com/0xFZin/CVE-2024-36991 +- https://github.com/jhurtadomi/CVE-2024-36991-Splunk #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36991.yaml diff --git a/cves/2024/CVE-2024-37032.md b/cves/2024/CVE-2024-37032.md index 5590068a85d..072bcf3850a 100644 --- a/cves/2024/CVE-2024-37032.md +++ b/cves/2024/CVE-2024-37032.md @@ -16,6 +16,7 @@ Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 - https://github.com/Bi0x/CVE-2024-37032 - https://github.com/badboy0/Ollama_Exploit_Tool - https://github.com/pankass/CVE-2024-37032_CVE-2024-45436 +- https://github.com/itzSh4dowxZ/CVE-2024-37032-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37032.yaml diff --git a/cves/2024/CVE-2024-37054.md b/cves/2024/CVE-2024-37054.md index 2802f9c1d2e..9ed1eeaea50 100644 --- a/cves/2024/CVE-2024-37054.md +++ b/cves/2024/CVE-2024-37054.md @@ -14,4 +14,7 @@ No PoCs from references. #### Github - https://github.com/NiteeshPujari/CVE-2024-37054-MLflow-RCE +- https://github.com/ben-slates/CVE-2024-37054 +- https://github.com/jimmexploit/CVE-2024-37054-PoC +- https://github.com/tristanqtn/CVE-2024-37054 diff --git a/cves/2024/CVE-2024-37383.md b/cves/2024/CVE-2024-37383.md index d96dac724e8..b0fe04e201f 100644 --- a/cves/2024/CVE-2024-37383.md +++ b/cves/2024/CVE-2024-37383.md @@ -18,6 +18,7 @@ No PoCs from references. #### Github - https://github.com/amirzargham/CVE-2024-37383-exploit - https://github.com/bartfroklage/CVE-2024-37383-POC +- https://github.com/hyungin0505/CVE-2024-37383_PoC #### ExploitDB - https://www.exploit-db.com/exploits/52173 diff --git a/cves/2024/CVE-2024-37726.md b/cves/2024/CVE-2024-37726.md index 86d57565063..a52ed9775f3 100644 --- a/cves/2024/CVE-2024-37726.md +++ b/cves/2024/CVE-2024-37726.md @@ -15,4 +15,5 @@ Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Cent #### Github - https://github.com/NextGenPentesters/CVE-2024-37726-MSI-Center-Local-Privilege-Escalation +- https://github.com/carsonchan12345/CVE-2024-37726-MSI-Center-Local-Privilege-Escalation diff --git a/cves/2024/CVE-2024-37742.md b/cves/2024/CVE-2024-37742.md index 1eefe8fe3ec..aab69373c54 100644 --- a/cves/2024/CVE-2024-37742.md +++ b/cves/2024/CVE-2024-37742.md @@ -14,5 +14,6 @@ Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulne No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Aar0nD0m1n1c/CVE-2024-37742 +- https://github.com/tungdn9988/CVE-2024-37742 diff --git a/cves/2024/CVE-2024-37759.md b/cves/2024/CVE-2024-37759.md index c46efdfd2ba..95415dc9acd 100644 --- a/cves/2024/CVE-2024-37759.md +++ b/cves/2024/CVE-2024-37759.md @@ -14,5 +14,5 @@ DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression - https://github.com/crumbledwall/CVE-2024-37759_PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/crumbledwall/CVE-2024-37759_PoC diff --git a/cves/2024/CVE-2024-38063.md b/cves/2024/CVE-2024-38063.md index 1a880cb04df..ea982761851 100644 --- a/cves/2024/CVE-2024-38063.md +++ b/cves/2024/CVE-2024-38063.md @@ -77,4 +77,9 @@ No PoCs from references. - https://github.com/thanawee321/CVE-2024-38063 - https://github.com/ynwarcs/CVE-2024-38063 - https://github.com/zenzue/CVE-2024-38063-POC +- https://github.com/AvidanMaatuk/CVE-2024-38063 +- https://github.com/almogopp/Disable-IPv6-CVE-2024-38063-Fix +- https://github.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring +- https://github.com/jip-0-0-0-0-0/CVE-2024-38063-scanner +- https://github.com/thealice01/CVE-2024-38063 diff --git a/cves/2024/CVE-2024-38077.md b/cves/2024/CVE-2024-38077.md index 213c1fdcd64..a222a60b358 100644 --- a/cves/2024/CVE-2024-38077.md +++ b/cves/2024/CVE-2024-38077.md @@ -41,4 +41,6 @@ No PoCs from references. - https://github.com/mrmtwoj/CVE-2024-38077 - https://github.com/qi4L/CVE-2024-38077 - https://github.com/zhuxi1965/CVE-2024-38077-RDLCheck +- https://github.com/Ermensonx/CVE-2024-38077-MadLicense-exploit +- https://github.com/razureink/cve-2024-38077-madlicense_reproduction diff --git a/cves/2024/CVE-2024-38355.md b/cves/2024/CVE-2024-38355.md index c0918bd8294..59fdac0b7e4 100644 --- a/cves/2024/CVE-2024-38355.md +++ b/cves/2024/CVE-2024-38355.md @@ -17,5 +17,5 @@ Socket.IO is an open source, real-time, bidirectional, event-based, communicatio - https://www.vicarius.io/vsociety/posts/unhandled-exception-in-socketio-cve-2024-38355 #### Github -No PoCs found on GitHub currently. +- https://github.com/PawelMurdzek/CVE-2024-38355-PoC diff --git a/cves/2024/CVE-2024-38472.md b/cves/2024/CVE-2024-38472.md index f707daa0366..d725d14cddd 100644 --- a/cves/2024/CVE-2024-38472.md +++ b/cves/2024/CVE-2024-38472.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/Abdurahmon3236/CVE-2024-38472 +- https://github.com/mrmtwoj/apache-vulnerability-testing #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml diff --git a/cves/2024/CVE-2024-38820.md b/cves/2024/CVE-2024-38820.md index b7b4d481530..1d92f268d9a 100644 --- a/cves/2024/CVE-2024-38820.md +++ b/cves/2024/CVE-2024-38820.md @@ -15,5 +15,5 @@ The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case i No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/kadamnayan/POC-CVE-2024-38820 diff --git a/cves/2024/CVE-2024-38856.md b/cves/2024/CVE-2024-38856.md index d832d6bbb15..42bb49e1ee1 100644 --- a/cves/2024/CVE-2024-38856.md +++ b/cves/2024/CVE-2024-38856.md @@ -23,9 +23,15 @@ No PoCs from references. - https://github.com/ThatNotEasy/CVE-2024-38856 - https://github.com/emanueldosreis/CVE-2024-38856 - https://github.com/guinea-offensive-security/Ofbiz-RCE +- https://github.com/GraySignal/CVE-2024-38856-ApacheOfBiz +- https://github.com/Hex00-0x4/CVE-2024-38856-Apache-OFBiz +- https://github.com/securelayer7/CVE-2024-38856_Scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38856.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_ofbiz_forgot_password_directory_traversal.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2024-38856 diff --git a/cves/2024/CVE-2024-39031.md b/cves/2024/CVE-2024-39031.md index 1bf67fd9117..bde4c061576 100644 --- a/cves/2024/CVE-2024-39031.md +++ b/cves/2024/CVE-2024-39031.md @@ -14,5 +14,5 @@ In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and ad - https://github.com/toneemarqus/CVE-2024-39031 #### Github -No PoCs found on GitHub currently. +- https://github.com/toneemarqus/CVE-2024-39031 diff --git a/cves/2024/CVE-2024-39205.md b/cves/2024/CVE-2024-39205.md index ee1537bf2f9..b3b4e18cc8e 100644 --- a/cves/2024/CVE-2024-39205.md +++ b/cves/2024/CVE-2024-39205.md @@ -16,6 +16,7 @@ An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows at #### Github - https://github.com/Marven11/CVE-2024-39205-Pyload-RCE +- https://github.com/btar1gan/exploit_CVE-2024-39205 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pyload_js2py_cve_2024_39205.rb diff --git a/cves/2024/CVE-2024-39248.md b/cves/2024/CVE-2024-39248.md index 55185af0b41..0dc94026432 100644 --- a/cves/2024/CVE-2024-39248.md +++ b/cves/2024/CVE-2024-39248.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to e - https://packetstormsecurity.com/files/179219 #### Github -No PoCs found on GitHub currently. +- https://github.com/jasonthename/CVE-2024-39248 diff --git a/cves/2024/CVE-2024-39250.md b/cves/2024/CVE-2024-39250.md index 30ece9fa2cf..3c619e12db7 100644 --- a/cves/2024/CVE-2024-39250.md +++ b/cves/2024/CVE-2024-39250.md @@ -14,7 +14,7 @@ EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injectio - https://github.com/efrann/CVE-2024-39250 #### Github -No PoCs found on GitHub currently. +- https://github.com/efrann/CVE-2024-39250 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39250.yaml diff --git a/cves/2024/CVE-2024-39713.md b/cves/2024/CVE-2024-39713.md index 2b04b80e87e..8a7ce266823 100644 --- a/cves/2024/CVE-2024-39713.md +++ b/cves/2024/CVE-2024-39713.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/typical-pashochek/CVE-2024-39713 +- https://github.com/blackcodersec/exploit-cve #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39713.yaml diff --git a/cves/2024/CVE-2024-39907.md b/cves/2024/CVE-2024-39907.md index 1224c63777e..01ddafb93e4 100644 --- a/cves/2024/CVE-2024-39907.md +++ b/cves/2024/CVE-2024-39907.md @@ -18,3 +18,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39907.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/1panel/CVE-2024-39907 diff --git a/cves/2024/CVE-2024-40110.md b/cves/2024/CVE-2024-40110.md index 3347ba2c56f..51d241fc805 100644 --- a/cves/2024/CVE-2024-40110.md +++ b/cves/2024/CVE-2024-40110.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/Abdurahmon3236/CVE-2024-40110 - https://github.com/shacrony/redcock.py - https://github.com/thiagosmith/CVE-2024-40110 +- https://github.com/AnGrY-Althaf/CVE-2024-40110 diff --git a/cves/2024/CVE-2024-4040.md b/cves/2024/CVE-2024-4040.md index 388c95c13a3..0dca8073f94 100644 --- a/cves/2024/CVE-2024-4040.md +++ b/cves/2024/CVE-2024-4040.md @@ -35,6 +35,10 @@ A server side template injection vulnerability in CrushFTP in all versions befor - https://github.com/rbih-boulanouar/CVE-2024-4040 - https://github.com/safeer-accuknox/CrushFTP-cve-2024-4040-poc - https://github.com/tongchengbin/nuclei-sdk +- https://github.com/GraySignal/CVE-2024-4040-CrushFTP-server +- https://github.com/Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept +- https://github.com/dhammerg/CVE-2024-4040 +- https://github.com/juanorts/CrushFTP10-Docker-CVE-2024-4040 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4040.yaml diff --git a/cves/2024/CVE-2024-4041.md b/cves/2024/CVE-2024-4041.md index 036dc629f92..bcbc457c46c 100644 --- a/cves/2024/CVE-2024-4041.md +++ b/cves/2024/CVE-2024-4041.md @@ -13,4 +13,4 @@ The Yoast SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripti No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/RandomRobbieBF/CVE-2024-4041 diff --git a/cves/2024/CVE-2024-40422.md b/cves/2024/CVE-2024-40422.md index c3badc51a93..3177695b4dd 100644 --- a/cves/2024/CVE-2024-40422.md +++ b/cves/2024/CVE-2024-40422.md @@ -17,6 +17,7 @@ The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stition #### Github - https://github.com/alpernae/vulnerability-research - https://github.com/j3r1ch0123/CVE-2024-40422 +- https://github.com/alpernae/CVE-2024-40422 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40422.yaml diff --git a/cves/2024/CVE-2024-40457.md b/cves/2024/CVE-2024-40457.md index da7d949c88a..73c4ede5cea 100644 --- a/cves/2024/CVE-2024-40457.md +++ b/cves/2024/CVE-2024-40457.md @@ -14,5 +14,5 @@ No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur - https://github.com/jeppojeps/CVE-2024-40457-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/jeppojeps/CVE-2024-40457-PoC diff --git a/cves/2024/CVE-2024-40492.md b/cves/2024/CVE-2024-40492.md index b8196656c44..9ac3beefeaf 100644 --- a/cves/2024/CVE-2024-40492.md +++ b/cves/2024/CVE-2024-40492.md @@ -14,5 +14,5 @@ Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote at - https://github.com/minendie/POC_CVE-2024-40492 #### Github -No PoCs found on GitHub currently. +- https://github.com/minendie/POC_CVE-2024-40492 diff --git a/cves/2024/CVE-2024-40891.md b/cves/2024/CVE-2024-40891.md index bf90f90bbc3..38de825852c 100644 --- a/cves/2024/CVE-2024-40891.md +++ b/cves/2024/CVE-2024-40891.md @@ -14,5 +14,5 @@ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Danyw24/zyxel-p870hn-hardware-hacking diff --git a/cves/2024/CVE-2024-40898.md b/cves/2024/CVE-2024-40898.md index 7dbd35317ad..d697b3514cd 100644 --- a/cves/2024/CVE-2024-40898.md +++ b/cves/2024/CVE-2024-40898.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898 - https://github.com/anilpatel199n/CVE-2024-40898 +- https://github.com/ForceEA001/CVE-2024-40898-SSL-Bypass-Detection diff --git a/cves/2024/CVE-2024-41290.md b/cves/2024/CVE-2024-41290.md index 917a60f50df..96fcef3d139 100644 --- a/cves/2024/CVE-2024-41290.md +++ b/cves/2024/CVE-2024-41290.md @@ -14,5 +14,5 @@ FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authent - https://github.com/paragbagul111/CVE-2024-41290 #### Github -No PoCs found on GitHub currently. +- https://github.com/paragbagul111/CVE-2024-41290 diff --git a/cves/2024/CVE-2024-41570.md b/cves/2024/CVE-2024-41570.md index 7b2d9e36333..f8a4c500da6 100644 --- a/cves/2024/CVE-2024-41570.md +++ b/cves/2024/CVE-2024-41570.md @@ -19,4 +19,6 @@ An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling - https://github.com/dxlerYT/Havoc-C2-RCE-2024 - https://github.com/kit4py/CVE-2024-41570 - https://github.com/thisisveryfunny/CVE-2024-41570-Havoc-C2-RCE +- https://github.com/UnDefinedCS/HavocPwn +- https://github.com/diemoeve/CVE-2024-41570 diff --git a/cves/2024/CVE-2024-42009.md b/cves/2024/CVE-2024-42009.md index 15d0f263c6d..d72b2d07540 100644 --- a/cves/2024/CVE-2024-42009.md +++ b/cves/2024/CVE-2024-42009.md @@ -19,6 +19,8 @@ A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x throug - https://github.com/DaniTheHack3r/CVE-2024-42009-PoC - https://github.com/Foxer131/CVE-2024-42008-9-exploit - https://github.com/Shubhankargupta691/CVE-2024-42009 +- https://github.com/ZaidArif47/CVE-2024-42009 +- https://github.com/segunakinsoyinu/CVE-2024-42009-roundcube-xss #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42009.yaml diff --git a/cves/2024/CVE-2024-42323.md b/cves/2024/CVE-2024-42323.md index 4207bf0b065..b0e10bfd09c 100644 --- a/cves/2024/CVE-2024-42323.md +++ b/cves/2024/CVE-2024-42323.md @@ -13,7 +13,10 @@ SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incuba No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/forwjm/CVE-2024-42323 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42323.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/hertzbeat/CVE-2024-42323 diff --git a/cves/2024/CVE-2024-42327.md b/cves/2024/CVE-2024-42327.md index e28ee6d50a9..3b4f5861b05 100644 --- a/cves/2024/CVE-2024-42327.md +++ b/cves/2024/CVE-2024-42327.md @@ -24,6 +24,8 @@ No PoCs from references. - https://github.com/igorbf495/CVE-2024-42327 - https://github.com/itform-fr/Zabbix---CVE-2024-42327 - https://github.com/saad0x1/Exploits +- https://github.com/fellipefelix06/Zabbix-CVE-2024-42327 +- https://github.com/watchdog1337/CVE-2024-42327_Zabbix_SQLI #### ExploitDB - https://www.exploit-db.com/exploits/52230 diff --git a/cves/2024/CVE-2024-42640.md b/cves/2024/CVE-2024-42640.md index f6741dfe803..88b0f8387bf 100644 --- a/cves/2024/CVE-2024-42640.md +++ b/cves/2024/CVE-2024-42640.md @@ -16,6 +16,7 @@ angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote c #### Github - https://github.com/KTN1990/CVE-2024-42640 - https://github.com/rvizx/CVE-2024-42640 +- https://github.com/rvzsec/CVE-2024-42640 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42640.yaml diff --git a/cves/2024/CVE-2024-4295.md b/cves/2024/CVE-2024-4295.md index 8b598248d9f..5e4afb4e511 100644 --- a/cves/2024/CVE-2024-4295.md +++ b/cves/2024/CVE-2024-4295.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/cve-2024/CVE-2024-4295-Poc - https://github.com/rtenacity/cve-docker-test +- https://github.com/TgHook/CVE-2024-4295-Poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4295.yaml diff --git a/cves/2024/CVE-2024-4322.md b/cves/2024/CVE-2024-4322.md index 78a000f7e11..e356dbdaadc 100644 --- a/cves/2024/CVE-2024-4322.md +++ b/cves/2024/CVE-2024-4322.md @@ -13,7 +13,7 @@ A path traversal vulnerability exists in the parisneo/lollms-webui application, No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/MJ-bin/POC_CVE-2024-4322 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4322.yaml diff --git a/cves/2024/CVE-2024-43400.md b/cves/2024/CVE-2024-43400.md index a8026a2cf6d..8649be6e277 100644 --- a/cves/2024/CVE-2024-43400.md +++ b/cves/2024/CVE-2024-43400.md @@ -20,5 +20,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/rain321654/yasa-cve-2024-43400-main1 diff --git a/cves/2024/CVE-2024-43425.md b/cves/2024/CVE-2024-43425.md index 68da3056071..856e42e3e19 100644 --- a/cves/2024/CVE-2024-43425.md +++ b/cves/2024/CVE-2024-43425.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/Snizi/Moodle-CVE-2024-43425-Exploit - https://github.com/aayush256-sys/Moodle-authenticated-RCE - https://github.com/aninfosec/CVE-2024-43425-Poc +- https://github.com/kazuya256/Moodle-authenticated-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43425.yaml diff --git a/cves/2024/CVE-2024-43441.md b/cves/2024/CVE-2024-43441.md index 55a29e60e44..3ceafe52c7e 100644 --- a/cves/2024/CVE-2024-43441.md +++ b/cves/2024/CVE-2024-43441.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43441.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/hugegraph/CVE-2024-43441 diff --git a/cves/2024/CVE-2024-43451.md b/cves/2024/CVE-2024-43451.md index 07895d50347..e819df11f71 100644 --- a/cves/2024/CVE-2024-43451.md +++ b/cves/2024/CVE-2024-43451.md @@ -50,4 +50,5 @@ No PoCs from references. #### Github - https://github.com/RonF98/CVE-2024-43451-POC +- https://github.com/razureink/cve-2024-43451-ntlm_hash_disclosure_reproduction diff --git a/cves/2024/CVE-2024-4367.md b/cves/2024/CVE-2024-4367.md index 55591e6c9c6..cf3023f8abb 100644 --- a/cves/2024/CVE-2024-4367.md +++ b/cves/2024/CVE-2024-4367.md @@ -39,6 +39,13 @@ A type check was missing when handling fonts in PDF.js, which would allow arbitr - https://github.com/rzte/pdf-exploit - https://github.com/s4vvysec/CVE-2024-4367-POC - https://github.com/snyk-labs/pdfjs-vuln-demo +- https://github.com/AnomalousVectors/cve-2024-4367-poc +- https://github.com/J1nKsC/CVE-2024-4367_test +- https://github.com/veronimo669/pdf.js-CVE-2024-4367 +- https://github.com/yuimamur/CVE-2024-4367-hands-on-01 #### ExploitDB - https://www.exploit-db.com/exploits/52273 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pdfjs/CVE-2024-4367 diff --git a/cves/2024/CVE-2024-44083.md b/cves/2024/CVE-2024-44083.md index ba1f4eac6f8..db86b33ef7c 100644 --- a/cves/2024/CVE-2024-44083.md +++ b/cves/2024/CVE-2024-44083.md @@ -14,5 +14,5 @@ ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that h - https://github.com/Azvanzed/IdaMeme #### Github -No PoCs found on GitHub currently. +- https://github.com/dynamicx64/CVE-2024-44083 diff --git a/cves/2024/CVE-2024-44349.md b/cves/2024/CVE-2024-44349.md index d5d25e03640..be10b2f4081 100644 --- a/cves/2024/CVE-2024-44349.md +++ b/cves/2024/CVE-2024-44349.md @@ -15,7 +15,7 @@ A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows - https://github.com/AndreaF17/PoC-CVE-2024-44349 #### Github -No PoCs found on GitHub currently. +- https://github.com/AndreaF17/PoC-CVE-2024-44349 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44349.yaml diff --git a/cves/2024/CVE-2024-44610.md b/cves/2024/CVE-2024-44610.md index 54573fe9f9e..6a1c94a1e63 100644 --- a/cves/2024/CVE-2024-44610.md +++ b/cves/2024/CVE-2024-44610.md @@ -15,5 +15,5 @@ PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 ar - https://github.com/BertoldVdb/PcanExploit #### Github -No PoCs found on GitHub currently. +- https://github.com/BertoldVdb/PcanExploit diff --git a/cves/2024/CVE-2024-44762.md b/cves/2024/CVE-2024-44762.md index 6e801aea19a..47b14342098 100644 --- a/cves/2024/CVE-2024-44762.md +++ b/cves/2024/CVE-2024-44762.md @@ -14,7 +14,7 @@ A discrepancy in error messages for invalid login attempts in Webmin Usermin v2. No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/arbaaz29/CVE-2024-44762-webmin-userenum #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml diff --git a/cves/2024/CVE-2024-44812.md b/cves/2024/CVE-2024-44812.md index 7ccca0fc70b..d5ec1f468ea 100644 --- a/cves/2024/CVE-2024-44812.md +++ b/cves/2024/CVE-2024-44812.md @@ -14,5 +14,5 @@ SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attac - https://github.com/b1u3st0rm/CVE-2024-44812-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/b1u3st0rm/CVE-2024-44812-PoC diff --git a/cves/2024/CVE-2024-45195.md b/cves/2024/CVE-2024-45195.md index 786df6caac2..8d947010701 100644 --- a/cves/2024/CVE-2024-45195.md +++ b/cves/2024/CVE-2024-45195.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45195.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2024-45195 diff --git a/cves/2024/CVE-2024-45440.md b/cves/2024/CVE-2024-45440.md index e57debb41aa..5b59237366a 100644 --- a/cves/2024/CVE-2024-45440.md +++ b/cves/2024/CVE-2024-45440.md @@ -15,6 +15,7 @@ core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when err #### Github - https://github.com/w0r1i0g1ht/CVE-2024-45440 +- https://github.com/zoomdbz/CVE-2024-45440 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45440.yaml diff --git a/cves/2024/CVE-2024-45507.md b/cves/2024/CVE-2024-45507.md index d09430704f1..e64e8bc2927 100644 --- a/cves/2024/CVE-2024-45507.md +++ b/cves/2024/CVE-2024-45507.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45507.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ofbiz/CVE-2024-45507 diff --git a/cves/2024/CVE-2024-45590.md b/cves/2024/CVE-2024-45590.md index 414798299fc..5df248c4d6a 100644 --- a/cves/2024/CVE-2024-45590.md +++ b/cves/2024/CVE-2024-45590.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/dhruvik-git/CVE-2024-45590 +- https://github.com/Evillm/CVE-2024-45590-PoC diff --git a/cves/2024/CVE-2024-4577.md b/cves/2024/CVE-2024-4577.md index 646a03d2a29..40179e8943a 100644 --- a/cves/2024/CVE-2024-4577.md +++ b/cves/2024/CVE-2024-4577.md @@ -91,6 +91,12 @@ In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, w - https://github.com/wilss0n/CVE-2024-4577 - https://github.com/xcanwin/CVE-2024-4577-PHP-RCE - https://github.com/zomasec/CVE-2024-4577 +- https://github.com/0XFFFF-XD/CVE-2024-4577-PHP-CGI-RCE +- https://github.com/11whoami99/CVE-2024-4577 +- https://github.com/aavamin/cve-2024-4577 +- https://github.com/graphite-org/CVE-2024-4577 +- https://github.com/razureink/cve-2024-4577-phpcgi_rce_reproduction +- https://github.com/watchtowrlabs/CVE-2024-4577 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4577.yaml diff --git a/cves/2024/CVE-2024-46256.md b/cves/2024/CVE-2024-46256.md index 7608bcbcadd..0b2aac33c35 100644 --- a/cves/2024/CVE-2024-46256.md +++ b/cves/2024/CVE-2024-46256.md @@ -15,5 +15,7 @@ A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager - https://github.com/barttran2k/POC_CVE-2024-46256 #### Github -No PoCs found on GitHub currently. +- https://github.com/TranDongA3/Simulation_CVE-2024-46256 +- https://github.com/barttran2k/POC_CVE-2024-46256 +- https://github.com/kimtangker/CVE-2024-46256 diff --git a/cves/2024/CVE-2024-46278.md b/cves/2024/CVE-2024-46278.md index 469ae5e53d4..553fc4af530 100644 --- a/cves/2024/CVE-2024-46278.md +++ b/cves/2024/CVE-2024-46278.md @@ -15,7 +15,7 @@ Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management consol - https://github.com/ayato-shitomi/teedy_1.11_account-takeover #### Github -No PoCs found on GitHub currently. +- https://github.com/ayato-shitomi/CVE-2024-46278-teedy_1.11_account-takeover #### ExploitDB - https://www.exploit-db.com/exploits/52228 diff --git a/cves/2024/CVE-2024-46982.md b/cves/2024/CVE-2024-46982.md index c77000c1b4a..bdb16e8954b 100644 --- a/cves/2024/CVE-2024-46982.md +++ b/cves/2024/CVE-2024-46982.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/Lercas/CVE-2024-46982 - https://github.com/melmathari/CVE-2024-46982-NUCLEI +- https://github.com/samuel871211/CVE-2024-46982-Reproduction diff --git a/cves/2024/CVE-2024-46987.md b/cves/2024/CVE-2024-46987.md index c7f897fa689..9ebf61778a0 100644 --- a/cves/2024/CVE-2024-46987.md +++ b/cves/2024/CVE-2024-46987.md @@ -16,7 +16,15 @@ Camaleon CMS is a dynamic and advanced content management system based on Ruby o - https://securitylab.github.com/advisories/GHSL-2024-182_GHSL-2024-186_Camaleon_CMS #### Github -No PoCs found on GitHub currently. +- https://github.com/BLUEBERRYP1LL/CVE-2024-46987 +- https://github.com/Goultarde/CVE-2024-46987 +- https://github.com/Ik0nw/CVE-2024-46987 +- https://github.com/L1337Xi/CVE-2024-46987 +- https://github.com/Rival420/CVE-2024-46987 +- https://github.com/SuriyaBoon/HackTheBox-Facts +- https://github.com/advaitpathak21/CVE-2024-46987 +- https://github.com/bootstrapbool/msf-cve-2024-46987 +- https://github.com/sparrowhawk1113/Exploit-for-CVE-2024-46987 #### ExploitDB - https://www.exploit-db.com/exploits/52531 diff --git a/cves/2024/CVE-2024-47176.md b/cves/2024/CVE-2024-47176.md index f0f21ddb4c9..de41fd9072c 100644 --- a/cves/2024/CVE-2024-47176.md +++ b/cves/2024/CVE-2024-47176.md @@ -29,6 +29,8 @@ CUPS is a standards-based, open-source printing system, and `cups-browsed` conta - https://github.com/nma-io/CVE-2024-47176 - https://github.com/onhexgroup/Exploits-Review - https://github.com/workabhiwin09/CVE-2024-47176 +- https://github.com/Stickxx00/Cups-RCE-Exploit +- https://github.com/deancooreman/CVE-2024-47176 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-47176.yaml diff --git a/cves/2024/CVE-2024-47177.md b/cves/2024/CVE-2024-47177.md index f3fba7122fc..4b9fac33c50 100644 --- a/cves/2024/CVE-2024-47177.md +++ b/cves/2024/CVE-2024-47177.md @@ -21,3 +21,6 @@ #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/cups_ipp_remote_code_execution.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cups-browsed/CVE-2024-47177 diff --git a/cves/2024/CVE-2024-48359.md b/cves/2024/CVE-2024-48359.md index 76e005521ab..1c5cb1e8cfd 100644 --- a/cves/2024/CVE-2024-48359.md +++ b/cves/2024/CVE-2024-48359.md @@ -14,5 +14,5 @@ Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerabi - https://github.com/OpenXP-Research/CVE-2024-48359 #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2024-48359 diff --git a/cves/2024/CVE-2024-48360.md b/cves/2024/CVE-2024-48360.md index 9fe3b93dfbf..2ae40991ec9 100644 --- a/cves/2024/CVE-2024-48360.md +++ b/cves/2024/CVE-2024-48360.md @@ -14,7 +14,7 @@ Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) vi - https://github.com/OpenXP-Research/CVE-2024-48360 #### Github -No PoCs found on GitHub currently. +- https://github.com/OpenXP-Research/CVE-2024-48360 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48360.yaml diff --git a/cves/2024/CVE-2024-48392.md b/cves/2024/CVE-2024-48392.md index 0e530975163..65a89185c0c 100644 --- a/cves/2024/CVE-2024-48392.md +++ b/cves/2024/CVE-2024-48392.md @@ -14,5 +14,5 @@ OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can - https://github.com/Renzusclarke/CVE-2024-48392-PoC/blob/main/poc.txt #### Github -No PoCs found on GitHub currently. +- https://github.com/Renzusclarke/CVE-2024-48392-PoC diff --git a/cves/2024/CVE-2024-48510.md b/cves/2024/CVE-2024-48510.md index 0aa37fc782f..dde56fc24f0 100644 --- a/cves/2024/CVE-2024-48510.md +++ b/cves/2024/CVE-2024-48510.md @@ -14,5 +14,5 @@ Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/havertz2110/CVE-2024-48510-PoC diff --git a/cves/2024/CVE-2024-4879.md b/cves/2024/CVE-2024-4879.md index e244a4ceef0..012d57e8a64 100644 --- a/cves/2024/CVE-2024-4879.md +++ b/cves/2024/CVE-2024-4879.md @@ -23,6 +23,7 @@ ServiceNow has addressed an input validation vulnerability that was identified i - https://github.com/gh-ost00/CVE-2024-4879 - https://github.com/jdusane/CVE-2024-4879 - https://github.com/tequilasunsh1ne/CVE_2024_4879 +- https://github.com/GraySignal/CVE-2024-4879-ServiceNow #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4879.yaml diff --git a/cves/2024/CVE-2024-48910.md b/cves/2024/CVE-2024-48910.md index 6bb389e346f..080c01c8ace 100644 --- a/cves/2024/CVE-2024-48910.md +++ b/cves/2024/CVE-2024-48910.md @@ -14,5 +14,6 @@ DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathM No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Alex-Acero-Security/CVE-2024-48910-POC +- https://github.com/Mitchellzhou1/CVE-2024-48910-PoC diff --git a/cves/2024/CVE-2024-4898.md b/cves/2024/CVE-2024-4898.md index 5c9f44af45b..55e664fcadc 100644 --- a/cves/2024/CVE-2024-4898.md +++ b/cves/2024/CVE-2024-4898.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/cve-2024/CVE-2024-4898-Poc +- https://github.com/gh-ost00/CVE-2024-4898 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4898.yaml diff --git a/cves/2024/CVE-2024-48990.md b/cves/2024/CVE-2024-48990.md index 78a2f4cbfe8..465ae72f500 100644 --- a/cves/2024/CVE-2024-48990.md +++ b/cves/2024/CVE-2024-48990.md @@ -23,6 +23,17 @@ No PoCs from references. - https://github.com/pentestfunctions/CVE-2024-48990-PoC-Testing - https://github.com/ten-ops/CVE-2024-48990_needrestart - https://github.com/ProsteKubo/npm_poisoning_poc +- https://github.com/BLUEBERRYP1LL/CVE-2024-48990 +- https://github.com/Loaxert/CVE-2024-48990-PoC +- https://github.com/Mr-DJ/CVE-2024-48990 +- https://github.com/Serner77/CVE-2024-48990-Automatic-Exploit +- https://github.com/czeti/CVE-2024-48990_needrestart +- https://github.com/grecosamuel/CVE-2024-48990 +- https://github.com/kikechans/-Linux-PrivEsc-CVE-2024-48990 +- https://github.com/mladicstefan/CVE-2024-48990 +- https://github.com/o-sec/CVE-2024-48990 +- https://github.com/sobbing333/CVE-2024-48990-POC +- https://github.com/tahsinunluturk/needrestart-privesc-cve-2024-48990 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb diff --git a/cves/2024/CVE-2024-49039.md b/cves/2024/CVE-2024-49039.md index 036b3546009..407ac4b30d0 100644 --- a/cves/2024/CVE-2024-49039.md +++ b/cves/2024/CVE-2024-49039.md @@ -40,4 +40,5 @@ No PoCs from references. #### Github - https://github.com/je5442804/WPTaskScheduler_CVE-2024-49039 +- https://github.com/razureink/cve-2024-49039-task_scheduler_eop_reproduction diff --git a/cves/2024/CVE-2024-49113.md b/cves/2024/CVE-2024-49113.md index 653e8fdc6a4..deded970bf1 100644 --- a/cves/2024/CVE-2024-49113.md +++ b/cves/2024/CVE-2024-49113.md @@ -53,4 +53,6 @@ No PoCs from references. #### Github - https://github.com/0xMetr0/metasploit-ldapnightmare - https://github.com/SafeBreach-Labs/CVE-2024-49113 +- https://github.com/alphatin123/CVE-2024-49113 +- https://github.com/razureink/cve-2024-49113-ldap_nightmare_reproduction diff --git a/cves/2024/CVE-2024-49138.md b/cves/2024/CVE-2024-49138.md index 6412805781e..54a3f1f2843 100644 --- a/cves/2024/CVE-2024-49138.md +++ b/cves/2024/CVE-2024-49138.md @@ -57,6 +57,7 @@ Windows Common Log File System Driver Elevation of Privilege Vulnerability - https://github.com/MrAle98/CVE-2024-49138-POC - https://github.com/bananoname/CVE-2024-49138-POC - https://github.com/onixgod/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup +- https://github.com/Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected #### ExploitDB - https://www.exploit-db.com/exploits/52270 diff --git a/cves/2024/CVE-2024-4947.md b/cves/2024/CVE-2024-4947.md index 10053cbeb8a..5ef8bb22d69 100644 --- a/cves/2024/CVE-2024-4947.md +++ b/cves/2024/CVE-2024-4947.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/bjrjk/CVE-2024-4947 +- https://github.com/l1m3syc/CVE-2024-4947-PoC diff --git a/cves/2024/CVE-2024-4956.md b/cves/2024/CVE-2024-4956.md index ba85d1104d0..e03e5834d9f 100644 --- a/cves/2024/CVE-2024-4956.md +++ b/cves/2024/CVE-2024-4956.md @@ -29,9 +29,14 @@ Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker - https://github.com/thinhap/CVE-2024-4956-PoC - https://github.com/verylazytech/CVE-2024-4956 - https://github.com/xungzzz/CVE-2024-4956 +- https://github.com/GraySignal/CVE-2024-4956-Sonatype-Nexus-Repository-Manager +- https://github.com/art-of-defence/CVE-2024-4956 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4956.yaml #### ExploitDB - https://www.exploit-db.com/exploits/52101 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nexus/CVE-2024-4956 diff --git a/cves/2024/CVE-2024-49882.md b/cves/2024/CVE-2024-49882.md index b04687407a9..ccb16224bcd 100644 --- a/cves/2024/CVE-2024-49882.md +++ b/cves/2024/CVE-2024-49882.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:ext4: fix dou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiralBL0CK/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882 diff --git a/cves/2024/CVE-2024-50251.md b/cves/2024/CVE-2024-50251.md index 2d6bc1497e4..3119ef8c353 100644 --- a/cves/2024/CVE-2024-50251.md +++ b/cves/2024/CVE-2024-50251.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:netfilter: nf - https://github.com/slavin-ayu/CVE-2024-50251-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/slavin-ayu/CVE-2024-50251-PoC diff --git a/cves/2024/CVE-2024-50330.md b/cves/2024/CVE-2024-50330.md index 68a2c43ee00..7406fdfe8d3 100644 --- a/cves/2024/CVE-2024-50330.md +++ b/cves/2024/CVE-2024-50330.md @@ -14,5 +14,5 @@ SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2024-50330-ivanti_epm_sqli_reproduction diff --git a/cves/2024/CVE-2024-50379.md b/cves/2024/CVE-2024-50379.md index e7117aa29fe..8a9a0159985 100644 --- a/cves/2024/CVE-2024-50379.md +++ b/cves/2024/CVE-2024-50379.md @@ -31,4 +31,5 @@ No PoCs from references. - https://github.com/thunww/CVE-2024-50379 - https://github.com/v3153/CVE-2024-50379-POC - https://github.com/yiliufeng168/CVE-2024-50379-POC +- https://github.com/Lux-J/CVE-2024-50379-exp diff --git a/cves/2024/CVE-2024-50498.md b/cves/2024/CVE-2024-50498.md index 2eb9b1b34d9..748e403d5b0 100644 --- a/cves/2024/CVE-2024-50498.md +++ b/cves/2024/CVE-2024-50498.md @@ -17,6 +17,8 @@ No PoCs from references. - https://github.com/Nxploited/CVE-2024-50498 - https://github.com/RandomRobbieBF/CVE-2024-50498 - https://github.com/p0et08/CVE-2024-50498 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498 +- https://github.com/androidteacher/CVE-2024-50498-wpquery #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50498.yaml diff --git a/cves/2024/CVE-2024-50526.md b/cves/2024/CVE-2024-50526.md index 67595881da1..aede757e67a 100644 --- a/cves/2024/CVE-2024-50526.md +++ b/cves/2024/CVE-2024-50526.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50526 diff --git a/cves/2024/CVE-2024-50677.md b/cves/2024/CVE-2024-50677.md index f55f50777dd..1b054ffa349 100644 --- a/cves/2024/CVE-2024-50677.md +++ b/cves/2024/CVE-2024-50677.md @@ -14,5 +14,5 @@ A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attack - https://github.com/ZumiYumi/CVE-2024-50677 #### Github -No PoCs found on GitHub currently. +- https://github.com/ZumiYumi/CVE-2024-50677 diff --git a/cves/2024/CVE-2024-5082.md b/cves/2024/CVE-2024-5082.md index cb1aa68a787..70e9cdcadd8 100644 --- a/cves/2024/CVE-2024-5082.md +++ b/cves/2024/CVE-2024-5082.md @@ -13,7 +13,7 @@ A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repo - https://support.sonatype.com/hc/en-us/articles/30694125380755 #### Github -No PoCs found on GitHub currently. +- https://github.com/h4mr3r/CVE-2024-5082 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5082.yaml diff --git a/cves/2024/CVE-2024-5084.md b/cves/2024/CVE-2024-5084.md index f246960f798..7fda54150b9 100644 --- a/cves/2024/CVE-2024-5084.md +++ b/cves/2024/CVE-2024-5084.md @@ -22,6 +22,7 @@ No PoCs from references. - https://github.com/WOOOOONG/CVE-2024-5084 - https://github.com/amessedad/autoexploitGPT - https://github.com/k3lpi3b4nsh33/CVE-2024-5084 +- https://github.com/RedTeamBlueTeam/CVE-2024-5084-Red-Team #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5084.yaml diff --git a/cves/2024/CVE-2024-50848.md b/cves/2024/CVE-2024-50848.md index d8c29821839..a910e3ab89d 100644 --- a/cves/2024/CVE-2024-50848.md +++ b/cves/2024/CVE-2024-50848.md @@ -13,5 +13,5 @@ An XML External Entity (XXE) vulnerability in the Import object and Translation - https://github.com/Wh1teSnak3/CVE-2024-50848 #### Github -No PoCs found on GitHub currently. +- https://github.com/1mhr4b/CVE-2024-50848 diff --git a/cves/2024/CVE-2024-50849.md b/cves/2024/CVE-2024-50849.md index def43d4ddb2..2a416dd5d54 100644 --- a/cves/2024/CVE-2024-50849.md +++ b/cves/2024/CVE-2024-50849.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/Wh1teSnak3/CVE-2024-50849 +- https://github.com/1mhr4b/CVE-2024-50849 diff --git a/cves/2024/CVE-2024-50986.md b/cves/2024/CVE-2024-50986.md index 42093ea9040..8df43f45bcf 100644 --- a/cves/2024/CVE-2024-50986.md +++ b/cves/2024/CVE-2024-50986.md @@ -14,5 +14,5 @@ An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code - https://github.com/riftsandroses/CVE-2024-50986/ #### Github -No PoCs found on GitHub currently. +- https://github.com/riftsandroses/CVE-2024-50986 diff --git a/cves/2024/CVE-2024-51132.md b/cves/2024/CVE-2024-51132.md index 79d7629cb55..3ed1f94888f 100644 --- a/cves/2024/CVE-2024-51132.md +++ b/cves/2024/CVE-2024-51132.md @@ -14,5 +14,5 @@ An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows att - https://github.com/JAckLosingHeart/CVE-2024-51132-POC #### Github -No PoCs found on GitHub currently. +- https://github.com/JAckLosingHeart/CVE-2024-51132-POC diff --git a/cves/2024/CVE-2024-51378.md b/cves/2024/CVE-2024-51378.md index c6a360892db..23e0d623db3 100644 --- a/cves/2024/CVE-2024-51378.md +++ b/cves/2024/CVE-2024-51378.md @@ -18,6 +18,7 @@ getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) #### Github - https://github.com/qnole000/CVE-2024-51378 - https://github.com/refr4g/CVE-2024-51378 +- https://github.com/rimbadirgantara/CVE-2024-51378 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51378.yaml diff --git a/cves/2024/CVE-2024-51482.md b/cves/2024/CVE-2024-51482.md index c63a89354be..2404a9e4695 100644 --- a/cves/2024/CVE-2024-51482.md +++ b/cves/2024/CVE-2024-51482.md @@ -15,6 +15,12 @@ ZoneMinder is a free, open source closed-circuit television software application #### Github - https://github.com/BwithE/CVE-2024-51482 +- https://github.com/0xDaeras/CVE-2024-51482-POC +- https://github.com/BridgerAlderson/CVE-2024-51482 +- https://github.com/Ravi-lk/CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC +- https://github.com/c0gnit00/CVE-2024-51482 +- https://github.com/lnn0v4/sqli-hunter-CVE-2024-51482-PoC +- https://github.com/plur1bu5/CVE-2024-51482-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51482.yaml diff --git a/cves/2024/CVE-2024-51567.md b/cves/2024/CVE-2024-51567.md index 0d611f4bf87..1c6f4acd9f8 100644 --- a/cves/2024/CVE-2024-51567.md +++ b/cves/2024/CVE-2024-51567.md @@ -18,6 +18,7 @@ upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before #### Github - https://github.com/ajayalf/CVE-2024-51567 - https://github.com/thehash007/CVE-2024-51567-RCE-EXPLOIT +- https://github.com/KKDT12138/cve-2024-51567-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51567.yaml diff --git a/cves/2024/CVE-2024-51793.md b/cves/2024/CVE-2024-51793.md index 09cd7d32553..52256200373 100644 --- a/cves/2024/CVE-2024-51793.md +++ b/cves/2024/CVE-2024-51793.md @@ -16,3 +16,5 @@ No PoCs from references. #### Github - https://github.com/KTN1990/CVE-2024-51793 - https://github.com/Nxploited/CVE-2024-51793 +- https://github.com/0axz-tools/CVE-2024-51793 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-51793 diff --git a/cves/2024/CVE-2024-52005.md b/cves/2024/CVE-2024-52005.md index f023630153f..4a15dffae0d 100644 --- a/cves/2024/CVE-2024-52005.md +++ b/cves/2024/CVE-2024-52005.md @@ -22,5 +22,5 @@ Git is a source code management tool. When cloning from a server (or fetching, o No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/andrewd-cg/cve-2024-52005-poc diff --git a/cves/2024/CVE-2024-52010.md b/cves/2024/CVE-2024-52010.md index 968fbbe34c4..e9e8e26347c 100644 --- a/cves/2024/CVE-2024-52010.md +++ b/cves/2024/CVE-2024-52010.md @@ -13,5 +13,5 @@ Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command in - https://github.com/tobychui/zoraxy/security/advisories/GHSA-7hpf-g48v-hw3j #### Github -No PoCs found on GitHub currently. +- https://github.com/iuds/-CVE-2024-52010- diff --git a/cves/2024/CVE-2024-5243.md b/cves/2024/CVE-2024-5243.md index 55542699877..37889393d99 100644 --- a/cves/2024/CVE-2024-5243.md +++ b/cves/2024/CVE-2024-5243.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/dilagluc/CVE_2024_5243 +- https://github.com/redpack-kr/CVE-2024-5243-pwn2own-toronto-2023 diff --git a/cves/2024/CVE-2024-5326.md b/cves/2024/CVE-2024-5326.md index 95ea4039f25..ec2eeaef61c 100644 --- a/cves/2024/CVE-2024-5326.md +++ b/cves/2024/CVE-2024-5326.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/cve-2024/CVE-2024-5326-Poc +- https://github.com/djayaGit/CVE-2024-5326-Poc diff --git a/cves/2024/CVE-2024-53375.md b/cves/2024/CVE-2024-53375.md index 38b3f0edea6..d11d1a3c262 100644 --- a/cves/2024/CVE-2024-53375.md +++ b/cves/2024/CVE-2024-53375.md @@ -14,5 +14,5 @@ An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link A - https://github.com/ThottySploity/CVE-2024-53375 #### Github -No PoCs found on GitHub currently. +- https://github.com/ThottySploity/CVE-2024-53375 diff --git a/cves/2024/CVE-2024-53376.md b/cves/2024/CVE-2024-53376.md index 314542f7e88..efb01cefd3e 100644 --- a/cves/2024/CVE-2024-53376.md +++ b/cves/2024/CVE-2024-53376.md @@ -15,5 +15,5 @@ CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary c - https://thottysploity.github.io/posts/cve-2024-53376 #### Github -No PoCs found on GitHub currently. +- https://github.com/ThottySploity/CVE-2024-53376 diff --git a/cves/2024/CVE-2024-53591.md b/cves/2024/CVE-2024-53591.md index 5958d325533..35d894b0f10 100644 --- a/cves/2024/CVE-2024-53591.md +++ b/cves/2024/CVE-2024-53591.md @@ -13,5 +13,5 @@ An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authe - https://github.com/aljoharasubaie/CVE-2024-53591 #### Github -No PoCs found on GitHub currently. +- https://github.com/aljoharasubaie/CVE-2024-53591 diff --git a/cves/2024/CVE-2024-53617.md b/cves/2024/CVE-2024-53617.md index 1f9131d4f20..b9632370573 100644 --- a/cves/2024/CVE-2024-53617.md +++ b/cves/2024/CVE-2024-53617.md @@ -13,5 +13,5 @@ A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows a - https://github.com/ii5mai1/CVE-2024-53617 #### Github -No PoCs found on GitHub currently. +- https://github.com/ii5mai1/CVE-2024-53617 diff --git a/cves/2024/CVE-2024-53677.md b/cves/2024/CVE-2024-53677.md index 861102b39ee..c710fa431c4 100644 --- a/cves/2024/CVE-2024-53677.md +++ b/cves/2024/CVE-2024-53677.md @@ -29,4 +29,6 @@ No PoCs from references. - https://github.com/saad0x1/Exploits - https://github.com/shishirghimir/CVE-2024-53677-Exploit - https://github.com/yangyanglo/CVE-2024-53677 +- https://github.com/hiteshpatra/CVE-2024-53677 +- https://github.com/seoyoung-kang/CVE-2024-53677 diff --git a/cves/2024/CVE-2024-53704.md b/cves/2024/CVE-2024-53704.md index 7691edbf92c..4c3530a5a66 100644 --- a/cves/2024/CVE-2024-53704.md +++ b/cves/2024/CVE-2024-53704.md @@ -17,6 +17,7 @@ No PoCs from references. #### Github - https://github.com/istagmbh/CVE-2024-53704 +- https://github.com/sfewer-r7/SonicSessionLeak #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53704.yaml diff --git a/cves/2024/CVE-2024-54152.md b/cves/2024/CVE-2024-54152.md index 5f934dd7186..92089ecb0de 100644 --- a/cves/2024/CVE-2024-54152.md +++ b/cves/2024/CVE-2024-54152.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/math-x-io/CVE-2024-54152-poc +- https://github.com/math-x-io/CVE-2024-54152 diff --git a/cves/2024/CVE-2024-54772.md b/cves/2024/CVE-2024-54772.md index c54f0e02b56..ed41118186f 100644 --- a/cves/2024/CVE-2024-54772.md +++ b/cves/2024/CVE-2024-54772.md @@ -16,4 +16,5 @@ An issue was discovered in the Winbox service of MikroTik RouterOS long-term rel - https://github.com/Seven11Eleven/CVE-2024-54772 - https://github.com/caster0x00/Sara - https://github.com/casterbyte/Sara +- https://github.com/deauther890/CVE-2024-54772 diff --git a/cves/2024/CVE-2024-54887.md b/cves/2024/CVE-2024-54887.md index 28bcdedd290..0db24c02b02 100644 --- a/cves/2024/CVE-2024-54887.md +++ b/cves/2024/CVE-2024-54887.md @@ -13,5 +13,5 @@ TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer ov - https://github.com/JBince/vulnerability-research/tree/main/CVE-2024-54887 #### Github -No PoCs found on GitHub currently. +- https://github.com/Gumbraise/CVE-2024-54887-PoC diff --git a/cves/2024/CVE-2024-55457.md b/cves/2024/CVE-2024-55457.md index 70561af5576..7b89d35aebe 100644 --- a/cves/2024/CVE-2024-55457.md +++ b/cves/2024/CVE-2024-55457.md @@ -13,7 +13,7 @@ MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/dow - https://github.com/h13nh04ng/CVE-2024-55457-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/h13nh04ng/CVE-2024-55457-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml diff --git a/cves/2024/CVE-2024-55557.md b/cves/2024/CVE-2024-55557.md index 02fac54367a..50fb3be192b 100644 --- a/cves/2024/CVE-2024-55557.md +++ b/cves/2024/CVE-2024-55557.md @@ -14,5 +14,5 @@ ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key fo - https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1 #### Github -No PoCs found on GitHub currently. +- https://github.com/partywavesec/CVE-2024-55557 diff --git a/cves/2024/CVE-2024-55968.md b/cves/2024/CVE-2024-55968.md index 976b0d87395..605d3e71755 100644 --- a/cves/2024/CVE-2024-55968.md +++ b/cves/2024/CVE-2024-55968.md @@ -14,5 +14,6 @@ An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystem - https://github.com/null-event/CVE-2024-55968 #### Github -No PoCs found on GitHub currently. +- https://github.com/Wi1DN00B/CVE-2024-55968 +- https://github.com/null-event/CVE-2024-55968 diff --git a/cves/2024/CVE-2024-56145.md b/cves/2024/CVE-2024-56145.md index 6de888e3987..8a395a88ed7 100644 --- a/cves/2024/CVE-2024-56145.md +++ b/cves/2024/CVE-2024-56145.md @@ -25,3 +25,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_ftp_template.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/craftcms/CVE-2024-56145 diff --git a/cves/2024/CVE-2024-56431.md b/cves/2024/CVE-2024-56431.md index b4690e8286e..6e6b3fd979f 100644 --- a/cves/2024/CVE-2024-56431.md +++ b/cves/2024/CVE-2024-56431.md @@ -16,5 +16,5 @@ oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has - https://www.openwall.com/lists/oss-security/2025/04/25/6 #### Github -No PoCs found on GitHub currently. +- https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC diff --git a/cves/2024/CVE-2024-56511.md b/cves/2024/CVE-2024-56511.md index 28bff254e19..1de775d4c6f 100644 --- a/cves/2024/CVE-2024-56511.md +++ b/cves/2024/CVE-2024-56511.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56511.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dataease/CVE-2024-56511 diff --git a/cves/2024/CVE-2024-56924.md b/cves/2024/CVE-2024-56924.md index fe140f1ffca..af0a7f29f93 100644 --- a/cves/2024/CVE-2024-56924.md +++ b/cves/2024/CVE-2024-56924.md @@ -13,5 +13,5 @@ A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking - https://github.com/ipratheep/CVE-2024-56924 #### Github -No PoCs found on GitHub currently. +- https://github.com/ipratheep/CVE-2024-56924 diff --git a/cves/2024/CVE-2024-57241.md b/cves/2024/CVE-2024-57241.md index 170e1bd8504..2402932621b 100644 --- a/cves/2024/CVE-2024-57241.md +++ b/cves/2024/CVE-2024-57241.md @@ -14,6 +14,7 @@ Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web applicatio #### Github - https://github.com/woshidaheike/CVE-2024-57241 +- https://github.com/hkl1x/CVE-2024-57241 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57241.yaml diff --git a/cves/2024/CVE-2024-57394.md b/cves/2024/CVE-2024-57394.md index eb0d548c29b..842228763ad 100644 --- a/cves/2024/CVE-2024-57394.md +++ b/cves/2024/CVE-2024-57394.md @@ -13,5 +13,5 @@ The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Managem - https://github.com/cwjchoi01/CVE-2024-57394 #### Github -No PoCs found on GitHub currently. +- https://github.com/cwjchoi01/CVE-2024-57394 diff --git a/cves/2024/CVE-2024-57429.md b/cves/2024/CVE-2024-57429.md index efaee00c328..5675e600340 100644 --- a/cves/2024/CVE-2024-57429.md +++ b/cves/2024/CVE-2024-57429.md @@ -13,5 +13,5 @@ A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function - https://github.com/ahrixia/CVE-2024-57429 #### Github -No PoCs found on GitHub currently. +- https://github.com/ahrixia/CVE-2024-57429 diff --git a/cves/2024/CVE-2024-57487.md b/cves/2024/CVE-2024-57487.md index 9bdeaedf086..201d96105e8 100644 --- a/cves/2024/CVE-2024-57487.md +++ b/cves/2024/CVE-2024-57487.md @@ -13,7 +13,7 @@ In Code-Projects Online Car Rental System 1.0, the file upload feature does not - https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488 #### Github -No PoCs found on GitHub currently. +- https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/carrental_fileupload_rce.rb diff --git a/cves/2024/CVE-2024-57522.md b/cves/2024/CVE-2024-57522.md index 2ad0846b339..745aa609a2c 100644 --- a/cves/2024/CVE-2024-57522.md +++ b/cves/2024/CVE-2024-57522.md @@ -13,5 +13,5 @@ SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross - https://github.com/HackWidMaddy/CVE-2024-57522 #### Github -No PoCs found on GitHub currently. +- https://github.com/HackWidMaddy/CVE-2024-57522 diff --git a/cves/2024/CVE-2024-57523.md b/cves/2024/CVE-2024-57523.md index 6ee4e09a32c..fd210a22bae 100644 --- a/cves/2024/CVE-2024-57523.md +++ b/cves/2024/CVE-2024-57523.md @@ -14,4 +14,5 @@ Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Mov #### Github - https://github.com/HackWidMaddy/CVE-2024-57522 +- https://github.com/HackWidMaddy/CVE-2024-57523. diff --git a/cves/2024/CVE-2024-57778.md b/cves/2024/CVE-2024-57778.md index 76f87856db0..8bde571c44b 100644 --- a/cves/2024/CVE-2024-57778.md +++ b/cves/2024/CVE-2024-57778.md @@ -13,5 +13,5 @@ An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote atta - https://github.com/KUK3N4N/CVE-2024-57778 #### Github -No PoCs found on GitHub currently. +- https://github.com/KUK3N4N/CVE-2024-57778 diff --git a/cves/2024/CVE-2024-58239.md b/cves/2024/CVE-2024-58239.md index 17d5b1c6c5f..8a3669eaed6 100644 --- a/cves/2024/CVE-2024-58239.md +++ b/cves/2024/CVE-2024-58239.md @@ -15,5 +15,6 @@ In the Linux kernel, the following vulnerability has been resolved:tls: stop rec No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/khoatran107/cve-2024-58239 +- https://github.com/khoatran107/cve-2025-39682 diff --git a/cves/2024/CVE-2024-5932.md b/cves/2024/CVE-2024-5932.md index 247ca59ffde..c7215809f3a 100644 --- a/cves/2024/CVE-2024-5932.md +++ b/cves/2024/CVE-2024-5932.md @@ -21,6 +21,8 @@ The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is - https://github.com/OxLmahdi/cve-2024-5932 - https://github.com/hlc23/CVE-2024-5932-web-ui - https://github.com/tk-1001/PHPexploit_pack +- https://github.com/autom4il/CVE-2024-5932 +- https://github.com/nishant-kumar-5173/CVE-2024-5932 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5932.yaml diff --git a/cves/2024/CVE-2024-6232.md b/cves/2024/CVE-2024-6232.md index 4664b749ed7..5d69d06d3b6 100644 --- a/cves/2024/CVE-2024-6232.md +++ b/cves/2024/CVE-2024-6232.md @@ -18,5 +18,5 @@ There is a MEDIUM severity vulnerability affecting CPython.Regular expressions t No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers diff --git a/cves/2024/CVE-2024-6333.md b/cves/2024/CVE-2024-6333.md index a1f0f4543f3..9c2b6ea173b 100644 --- a/cves/2024/CVE-2024-6333.md +++ b/cves/2024/CVE-2024-6333.md @@ -46,5 +46,5 @@ Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products - http://seclists.org/fulldisclosure/2024/Oct/17 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xQRx/CVE-2024-6333 diff --git a/cves/2024/CVE-2024-6386.md b/cves/2024/CVE-2024-6386.md index 94928534748..be69ba8df0c 100644 --- a/cves/2024/CVE-2024-6386.md +++ b/cves/2024/CVE-2024-6386.md @@ -16,3 +16,4 @@ The WPML plugin for WordPress is vulnerable to Remote Code Execution in all vers #### Github - https://github.com/argendo/CVE-2024-6386 - https://github.com/vladko312/extras +- https://github.com/bananoname/CVE-2024-6386-WPML-SSTI diff --git a/cves/2024/CVE-2024-6387.md b/cves/2024/CVE-2024-6387.md index 18063f6383a..60e7a0d17ff 100644 --- a/cves/2024/CVE-2024-6387.md +++ b/cves/2024/CVE-2024-6387.md @@ -101,6 +101,14 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). - https://github.com/th3gokul/CVE-2024-6387 - https://github.com/thegenetic/CVE-2024-6387-exploit - https://github.com/xonoxitron/regreSSHion +- https://github.com/7etsuo/cve-2024-6387-poc +- https://github.com/HadesNull123/CVE-2024-6387_Check +- https://github.com/devarshishimpi/CVE-2024-6387-Check +- https://github.com/hasan8babiker/CVE-2024-6387 +- https://github.com/kaleth4/CVE-2024-6387 +- https://github.com/kinu404/CVE-2024-6387 +- https://github.com/particle99/CVE-2024-6387-POC +- https://github.com/vuducmanhno100-cloud/CVE-2024-6387 #### ExploitDB - https://www.exploit-db.com/exploits/52269 diff --git a/cves/2024/CVE-2024-6651.md b/cves/2024/CVE-2024-6651.md index 487fbdd516f..1f9f2b759b1 100644 --- a/cves/2024/CVE-2024-6651.md +++ b/cves/2024/CVE-2024-6651.md @@ -13,7 +13,7 @@ The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and e - https://wpscan.com/vulnerability/65e2c77d-09bd-4a44-81d9-d7a5db0e0f84/ #### Github -No PoCs found on GitHub currently. +- https://github.com/yup-Ivan/CVE-2024-6651 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6651.yaml diff --git a/cves/2024/CVE-2024-6769.md b/cves/2024/CVE-2024-6769.md index 7dfeb8afe7d..8ab7e5fee9f 100644 --- a/cves/2024/CVE-2024-6769.md +++ b/cves/2024/CVE-2024-6769.md @@ -19,4 +19,5 @@ A DLL Hijacking caused by drive remapping combined with a poisoning of the activ #### Github - https://github.com/Swayampadhy/CurveLock +- https://github.com/fortra/CVE-2024-6769 diff --git a/cves/2024/CVE-2024-6783.md b/cves/2024/CVE-2024-6783.md index 4b96110a987..c7603cdfcac 100644 --- a/cves/2024/CVE-2024-6783.md +++ b/cves/2024/CVE-2024-6783.md @@ -14,5 +14,5 @@ A vulnerability has been discovered in Vue, that allows an attacker to perform X - https://www.herodevs.com/vulnerability-directory/cve-2024-6783---vue-client-side-xss #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2024-6783 diff --git a/cves/2024/CVE-2024-7344.md b/cves/2024/CVE-2024-7344.md index b5718ea1d7a..3e89b4edd61 100644 --- a/cves/2024/CVE-2024-7344.md +++ b/cves/2024/CVE-2024-7344.md @@ -20,5 +20,5 @@ Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execut - https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/ #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2024-7344 diff --git a/cves/2024/CVE-2024-7593.md b/cves/2024/CVE-2024-7593.md index 9b36ed93597..64bed3c2a8f 100644 --- a/cves/2024/CVE-2024-7593.md +++ b/cves/2024/CVE-2024-7593.md @@ -26,6 +26,7 @@ No PoCs from references. - https://github.com/rxerium/CVE-2024-7593 - https://github.com/skyrowalker/CVE-2024-7593 - https://github.com/zxcod3/CVE-2024-7593 +- https://github.com/kernel364/CVE-2024-7593 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7593.yaml diff --git a/cves/2024/CVE-2024-7627.md b/cves/2024/CVE-2024-7627.md index f5c4c0756a2..cd30108b46f 100644 --- a/cves/2024/CVE-2024-7627.md +++ b/cves/2024/CVE-2024-7627.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/siunam321/CVE-2024-7627-PoC +- https://github.com/lkmn1/CVE-2024-7627 diff --git a/cves/2024/CVE-2024-7928.md b/cves/2024/CVE-2024-7928.md index c7442ca44bf..ef6d1cef26c 100644 --- a/cves/2024/CVE-2024-7928.md +++ b/cves/2024/CVE-2024-7928.md @@ -21,6 +21,7 @@ Eine problematische Schwachstelle wurde in FastAdmin bis 1.3.3.20220121 entdeckt - https://github.com/gh-ost00/CVE-2024-7928 - https://github.com/th3gokul/CVE-2024-7928 - https://github.com/wh6amiGit/CVE-2024-7928 +- https://github.com/diamorphine666/CVE-2024-7928 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7928.yaml diff --git a/cves/2024/CVE-2024-7954.md b/cves/2024/CVE-2024-7954.md index 09868630292..62982b656aa 100644 --- a/cves/2024/CVE-2024-7954.md +++ b/cves/2024/CVE-2024-7954.md @@ -24,6 +24,7 @@ The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vu - https://github.com/fa-rrel/CVE-2024-7954-RCE - https://github.com/gh-ost00/CVE-2024-7954-RCE - https://github.com/r0otk3r/CVE-2024-7954 +- https://github.com/ShivanshKuntal/Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7954.yaml diff --git a/cves/2024/CVE-2024-7965.md b/cves/2024/CVE-2024-7965.md index 6f1f36509df..e8a3db83322 100644 --- a/cves/2024/CVE-2024-7965.md +++ b/cves/2024/CVE-2024-7965.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/bi-zone/CVE-2024-7965 +- https://github.com/XueDugu/cve-2024-7965-poc diff --git a/cves/2024/CVE-2024-8068.md b/cves/2024/CVE-2024-8068.md index 14f08ea017f..d6a3f16f3aa 100644 --- a/cves/2024/CVE-2024-8068.md +++ b/cves/2024/CVE-2024-8068.md @@ -17,5 +17,5 @@ Privilege escalation to NetworkService Account access in Citrix Session Recordi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2024-8068-CVE-2024-8069 diff --git a/cves/2024/CVE-2024-8069.md b/cves/2024/CVE-2024-8069.md index 9032b14ab80..f9adbdbec5f 100644 --- a/cves/2024/CVE-2024-8069.md +++ b/cves/2024/CVE-2024-8069.md @@ -17,5 +17,5 @@ Limited remote code execution with privilege of a NetworkService Account access No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/mdiqbalahmad/cve-2024-8069-exp-Citrix-Virtual-Apps-XEN diff --git a/cves/2024/CVE-2024-8465.md b/cves/2024/CVE-2024-8465.md index 82d3814d56f..a9743d7b290 100644 --- a/cves/2024/CVE-2024-8465.md +++ b/cves/2024/CVE-2024-8465.md @@ -13,5 +13,6 @@ SQL injection vulnerability, by which an attacker could send a specially designe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/19melek19/TheMisfits-CVE-2024-8465-SQLi +- https://github.com/Sholls000/CVE-2024-8465-PoC diff --git a/cves/2024/CVE-2024-8503.md b/cves/2024/CVE-2024-8503.md index 764a8d792cc..dc79b89ca4a 100644 --- a/cves/2024/CVE-2024-8503.md +++ b/cves/2024/CVE-2024-8503.md @@ -14,6 +14,7 @@ An unauthenticated attacker can leverage a time-based SQL injection vulnerabilit #### Github - https://github.com/Chocapikk/CVE-2024-8504 +- https://github.com/Machine-farmer/vicidial-cve-2024-8503-blind-sqli-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8503.yaml diff --git a/cves/2024/CVE-2024-8856.md b/cves/2024/CVE-2024-8856.md index 45f5f18ad59..003f5741323 100644 --- a/cves/2024/CVE-2024-8856.md +++ b/cves/2024/CVE-2024-8856.md @@ -17,6 +17,7 @@ The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to - https://github.com/Jenderal92/CVE-2024-8856 - https://github.com/ubaii/CVE-2024-8856 - https://github.com/ubaydev/CVE-2024-8856 +- https://github.com/Evillm/CVE-2024-8856-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8856.yaml diff --git a/cves/2024/CVE-2024-9047.md b/cves/2024/CVE-2024-9047.md index d44fbd2b154..44815e378aa 100644 --- a/cves/2024/CVE-2024-9047.md +++ b/cves/2024/CVE-2024-9047.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/mr-won/CVE-2024-9047 - https://github.com/tpdlshdmlrkfmcla/CVE-2024-9047 - https://github.com/verylazytech/CVE-2024-9047 +- https://github.com/amirqusairy99/WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9047.yaml diff --git a/cves/2024/CVE-2024-9162.md b/cves/2024/CVE-2024-9162.md index 71c9ded606c..3a5b24664c0 100644 --- a/cves/2024/CVE-2024-9162.md +++ b/cves/2024/CVE-2024-9162.md @@ -14,4 +14,4 @@ The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arb - https://github.com/d0n601/CVE-2024-9162 #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2024-9162 diff --git a/cves/2024/CVE-2024-9264.md b/cves/2024/CVE-2024-9264.md index 14709709f1f..621d843ce54 100644 --- a/cves/2024/CVE-2024-9264.md +++ b/cves/2024/CVE-2024-9264.md @@ -29,6 +29,12 @@ No PoCs from references. - https://github.com/rvizx/CVE-2024-9264 - https://github.com/z3k0sec/CVE-2024-9264-RCE-Exploit - https://github.com/z3k0sec/File-Read-CVE-2024-9264 +- https://github.com/ozcanpng/CVE-2024-9264 +- https://github.com/rvzsec/CVE-2024-9264 +- https://github.com/yeonchoda/CVE-2024-9264 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9264.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 diff --git a/cves/2024/CVE-2024-9796.md b/cves/2024/CVE-2024-9796.md index 94e59d18540..3472661e46b 100644 --- a/cves/2024/CVE-2024-9796.md +++ b/cves/2024/CVE-2024-9796.md @@ -16,6 +16,7 @@ The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and esc - https://github.com/BwithE/CVE-2024-9796 - https://github.com/RandomRobbieBF/CVE-2024-9796 - https://github.com/viniciuslazzari/CVE-2024-9796 +- https://github.com/yup-Ivan/CVE-2024-9796 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9796.yaml diff --git a/cves/2024/CVE-2024-9932.md b/cves/2024/CVE-2024-9932.md index 0fcbe768120..a0dbe9f5b5a 100644 --- a/cves/2024/CVE-2024-9932.md +++ b/cves/2024/CVE-2024-9932.md @@ -16,3 +16,4 @@ No PoCs from references. #### Github - https://github.com/Nxploited/CVE-2024-9932-POC - https://github.com/RandomRobbieBF/CVE-2024-9932 +- https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932 diff --git a/cves/2025/CVE-2025-0108.md b/cves/2025/CVE-2025-0108.md index c2ddb867bcb..e586c71bb6b 100644 --- a/cves/2025/CVE-2025-0108.md +++ b/cves/2025/CVE-2025-0108.md @@ -25,6 +25,8 @@ An authentication bypass in the Palo Alto Networks PAN-OS software enables an un - https://github.com/FOLKS-iwd/CVE-2025-0108-PoC - https://github.com/becrevex/CVE-2025-0108 - https://github.com/sohaibeb/CVE-2025-0108 +- https://github.com/iSee857/CVE-2025-0108-PoC +- https://github.com/kso4more/CVE-2025-0108 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0108.yaml diff --git a/cves/2025/CVE-2025-0184.md b/cves/2025/CVE-2025-0184.md index b2780c5ca1e..382b3125ea4 100644 --- a/cves/2025/CVE-2025-0184.md +++ b/cves/2025/CVE-2025-0184.md @@ -13,5 +13,5 @@ A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/m0d0ri205/wargame_Re-LS diff --git a/cves/2025/CVE-2025-0282.md b/cves/2025/CVE-2025-0282.md index 23d535c6179..86d0702be30 100644 --- a/cves/2025/CVE-2025-0282.md +++ b/cves/2025/CVE-2025-0282.md @@ -28,6 +28,9 @@ A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, - https://github.com/almanatra/CVE-2025-0282 - https://github.com/punitdarji/Ivanti-CVE-2025-0282 - https://github.com/watchtowrlabs/CVE-2025-0282 +- https://github.com/gmh5225/Blackash-CVE-2025-0282 +- https://github.com/razureink/cve-2025-0282-ivanti_rce_reproduction +- https://github.com/sfewer-r7/CVE-2025-0282 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0282.yaml diff --git a/cves/2025/CVE-2025-0288.md b/cves/2025/CVE-2025-0288.md index 86e06e49d48..9fdb39f967c 100644 --- a/cves/2025/CVE-2025-0288.md +++ b/cves/2025/CVE-2025-0288.md @@ -20,4 +20,5 @@ No PoCs from references. #### Github - https://github.com/barhen12/CVE-2025-0288 +- https://github.com/MeisamEb/CVE-2025-0288 diff --git a/cves/2025/CVE-2025-0401.md b/cves/2025/CVE-2025-0401.md index fe82c0b9145..9006b951564 100644 --- a/cves/2025/CVE-2025-0401.md +++ b/cves/2025/CVE-2025-0401.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/CyberSecurityUP/CVE-2025-0401 - https://github.com/Darabium/Gombruc +- https://github.com/JoasASantos/CVE-2025-0401 diff --git a/cves/2025/CVE-2025-0890.md b/cves/2025/CVE-2025-0890.md index c551a2bcd9a..aec7961eb48 100644 --- a/cves/2025/CVE-2025-0890.md +++ b/cves/2025/CVE-2025-0890.md @@ -13,5 +13,5 @@ No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Danyw24/zyxel-p870hn-hardware-hacking diff --git a/cves/2025/CVE-2025-10377.md b/cves/2025/CVE-2025-10377.md index b2b727644c7..7a45d0c6e63 100644 --- a/cves/2025/CVE-2025-10377.md +++ b/cves/2025/CVE-2025-10377.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/NagisaYumaa/Cross-Site-Request-Forgery-CSRF-in-Plugin-System-Dashboard-Funtion-sd_toggle_logs +- https://github.com/NagisaYumaa/CVE-2025-10377 diff --git a/cves/2025/CVE-2025-1094.md b/cves/2025/CVE-2025-1094.md index ed57ad10af2..4411e535248 100644 --- a/cves/2025/CVE-2025-1094.md +++ b/cves/2025/CVE-2025-1094.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/aninfosec/CVE-2025-1094 - https://github.com/ishwardeepp/CVE-2025-1094-PoC-Postgre-SQLi - https://github.com/soltanali0/CVE-2025-1094-Exploit +- https://github.com/TranDongA3/POC-CVE-2025-1094 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb diff --git a/cves/2025/CVE-2025-10951.md b/cves/2025/CVE-2025-10951.md index a800684a6c4..81342f4317f 100644 --- a/cves/2025/CVE-2025-10951.md +++ b/cves/2025/CVE-2025-10951.md @@ -14,5 +14,5 @@ Es wurde eine Schwachstelle in geyang ml-logger up to acf255bade5be6ad88d90735c8 - https://github.com/geyang/ml-logger/issues/73 #### Github -No PoCs found on GitHub currently. +- https://github.com/1amUnvalid/CVE-2025-10951 diff --git a/cves/2025/CVE-2025-1338.md b/cves/2025/CVE-2025-1338.md index 20de52a7ab3..d93ef5611bb 100644 --- a/cves/2025/CVE-2025-1338.md +++ b/cves/2025/CVE-2025-1338.md @@ -15,7 +15,7 @@ In NUUO Camera bis 20250203 wurde eine Schwachstelle ausgemacht. Sie wurde als k No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/jxcaxtc/CVE-2025-1338 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1338.yaml diff --git a/cves/2025/CVE-2025-1461.md b/cves/2025/CVE-2025-1461.md index ca0eb259912..c6f1d5b5308 100644 --- a/cves/2025/CVE-2025-1461.md +++ b/cves/2025/CVE-2025-1461.md @@ -15,4 +15,5 @@ Improper neutralization of the value of the 'eventMoreText' property of the 'VCa #### Github - https://github.com/hroacastillo/grupo05_ethical_hacking +- https://github.com/neverendingsupport/nes-vuetify-cve-2025-1461 diff --git a/cves/2025/CVE-2025-14847.md b/cves/2025/CVE-2025-14847.md index ce1bbc2156c..4e9215abbb6 100644 --- a/cves/2025/CVE-2025-14847.md +++ b/cves/2025/CVE-2025-14847.md @@ -23,6 +23,26 @@ No PoCs from references. #### Github - https://github.com/sakthivel10q/CVE-2025-14847 +- https://github.com/0xBlackash/CVE-2025-14847 +- https://github.com/CadGoose/MongoBleed-CVE-2025-14847-Fully-Automated-scanner +- https://github.com/FurkanKAYAPINAR/CVE-2025-14847-MongoBleed-Exploit +- https://github.com/NoNameError/MongoBLEED---CVE-2025-14847-POC- +- https://github.com/ProbiusOfficial/CVE-2025-14847 +- https://github.com/Rishi-kaul/CVE-2025-14847-MongoBleed +- https://github.com/Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847 +- https://github.com/alexcyberx/CVE-2025-14847_Expolit +- https://github.com/codeb0ssx/CVE-2025-14847-PoC +- https://github.com/cybertechajju/CVE-2025-14847_Expolit +- https://github.com/franksec42/mongobleed-exploit-CVE-2025-14847 +- https://github.com/im-hanzou/mongobleed +- https://github.com/joshuavanderpoll/CVE-2025-14847 +- https://github.com/kuyrathdaro/cve-2025-14847 +- https://github.com/peakcyber-security/CVE-2025-14847 +- https://github.com/saereya/CVE-2025-14847---MongoBleed +- https://github.com/sahar042/CVE-2025-14847 +- https://github.com/shokribardiya/CVE-2025-14847-mongobleed +- https://github.com/vfa-tuannt/CVE-2025-14847 +- https://github.com/waheeb71/CVE-2025-14847 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-14847.yaml diff --git a/cves/2025/CVE-2025-1550.md b/cves/2025/CVE-2025-1550.md index 68a786d030c..eb3b4cc24b4 100644 --- a/cves/2025/CVE-2025-1550.md +++ b/cves/2025/CVE-2025-1550.md @@ -14,7 +14,7 @@ The Keras Model.load_model function permits arbitrary code execution, even with - https://towerofhanoi.it/writeups/cve-2025-1550/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ChCh0i/cve-2025-1550 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-1550.yaml diff --git a/cves/2025/CVE-2025-1716.md b/cves/2025/CVE-2025-1716.md index c1ade4ae65e..66160d9170f 100644 --- a/cves/2025/CVE-2025-1716.md +++ b/cves/2025/CVE-2025-1716.md @@ -14,5 +14,6 @@ picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker c - https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716 #### Github -No PoCs found on GitHub currently. +- https://github.com/danigil/cve-2025-1716 +- https://github.com/xp3s/poc_CVE-2025-1716 diff --git a/cves/2025/CVE-2025-1738.md b/cves/2025/CVE-2025-1738.md index 3a151055485..fd19c391437 100644 --- a/cves/2025/CVE-2025-1738.md +++ b/cves/2025/CVE-2025-1738.md @@ -13,5 +13,5 @@ A Password Transmitted over Query String vulnerability has been found in Trivisi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/n0n4m3x41/CVE-2025-1738 diff --git a/cves/2025/CVE-2025-1739.md b/cves/2025/CVE-2025-1739.md index 40d4d97f466..c58c4455086 100644 --- a/cves/2025/CVE-2025-1739.md +++ b/cves/2025/CVE-2025-1739.md @@ -13,5 +13,5 @@ An Authentication Bypass vulnerability has been found in Trivision Camera NC227W No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/n0n4m3x41/CVE-2025-1739 diff --git a/cves/2025/CVE-2025-1913.md b/cves/2025/CVE-2025-1913.md index d28f65268f4..22bbe016732 100644 --- a/cves/2025/CVE-2025-1913.md +++ b/cves/2025/CVE-2025-1913.md @@ -13,4 +13,4 @@ The Product Import Export for WooCommerce – Import Export Product CSV Suite pl No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/S0haib518-KSA/CVE-2025-1913-PoC diff --git a/cves/2025/CVE-2025-1974.md b/cves/2025/CVE-2025-1974.md index 11674b158b8..b21766ba280 100644 --- a/cves/2025/CVE-2025-1974.md +++ b/cves/2025/CVE-2025-1974.md @@ -34,6 +34,10 @@ No PoCs from references. - https://github.com/yoshino-s/CVE-2025-1974 - https://github.com/zulloper/CVE-2025-1974 - https://github.com/zwxxb/CVE-2025-1974 +- https://github.com/BoianEduard/CVE-2025-1974 +- https://github.com/I3r1h0n/IngressNightterror +- https://github.com/gunyakit/CVE-2025-1974-PoC-exploit +- https://github.com/zsxen/CVE-2025-1974 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1974.yaml @@ -41,3 +45,6 @@ No PoCs from references. #### ExploitDB - https://www.exploit-db.com/exploits/52338 - https://www.exploit-db.com/exploits/52475 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/ingress-nginx/CVE-2025-1974 diff --git a/cves/2025/CVE-2025-2011.md b/cves/2025/CVE-2025-2011.md index 83f32b082c6..919496698a0 100644 --- a/cves/2025/CVE-2025-2011.md +++ b/cves/2025/CVE-2025-2011.md @@ -13,7 +13,9 @@ The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to gen - https://github.com/datagoboom/CVE-2025-2011 #### Github -No PoCs found on GitHub currently. +- https://github.com/X3RX3SSec/CVE-2025-2011 +- https://github.com/datagoboom/CVE-2025-2011 +- https://github.com/zsy107u/CVE-2025-2011-poc #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2011.yaml diff --git a/cves/2025/CVE-2025-20260.md b/cves/2025/CVE-2025-20260.md index c71a15e5a93..d35854d9323 100644 --- a/cves/2025/CVE-2025-20260.md +++ b/cves/2025/CVE-2025-20260.md @@ -22,5 +22,6 @@ A vulnerability in the PDF scanning processes of ClamAV could allow an unauthent No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Alex-Acero-Security/CVE-2025-20260-POC +- https://github.com/keyuraghao/CVE-2025-20260 diff --git a/cves/2025/CVE-2025-20282.md b/cves/2025/CVE-2025-20282.md index 3c4baee58cb..45a46eaaa85 100644 --- a/cves/2025/CVE-2025-20282.md +++ b/cves/2025/CVE-2025-20282.md @@ -16,7 +16,7 @@ This vulnerability is due a lack of file validation checks that would prevent up No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/skadevare/CiscoISE-CVE-2025-20282-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20282.yaml diff --git a/cves/2025/CVE-2025-21298.md b/cves/2025/CVE-2025-21298.md index 16ba0848a2e..c1fa7d4d4f9 100644 --- a/cves/2025/CVE-2025-21298.md +++ b/cves/2025/CVE-2025-21298.md @@ -54,4 +54,7 @@ No PoCs from references. - https://github.com/Dit-Developers/CVE-2025-21298 - https://github.com/fy-poc/full-poc-CVE-2025_21298 - https://github.com/ynwarcs/CVE-2025-21298 +- https://github.com/Arkha-Corvus/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298- +- https://github.com/C-G-creator/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298 +- https://github.com/TheBl4ckPh4nt0m/CVE-2025-21298 diff --git a/cves/2025/CVE-2025-21333.md b/cves/2025/CVE-2025-21333.md index 3deaa5184cc..6f27871eec6 100644 --- a/cves/2025/CVE-2025-21333.md +++ b/cves/2025/CVE-2025-21333.md @@ -29,6 +29,8 @@ No PoCs from references. #### Github - https://github.com/MrAle98/CVE-2025-21333-POC - https://github.com/aleongx/KQL_sentinel_CVE-2025-21333 +- https://github.com/nu1lptr0/CVE-2025-21333 +- https://github.com/uname1able/CVE-2025-21333 #### ExploitDB - https://www.exploit-db.com/exploits/52436 diff --git a/cves/2025/CVE-2025-21420.md b/cves/2025/CVE-2025-21420.md index 595972ed11b..a1edb9aa84c 100644 --- a/cves/2025/CVE-2025-21420.md +++ b/cves/2025/CVE-2025-21420.md @@ -45,4 +45,5 @@ No PoCs from references. #### Github - https://github.com/moiz-2x/CVE-2025-21420_POC +- https://github.com/Dmitri131313/CVE-2025-21420-PoC diff --git a/cves/2025/CVE-2025-21479.md b/cves/2025/CVE-2025-21479.md index 3bf5f2349c9..9d2efd3c203 100644 --- a/cves/2025/CVE-2025-21479.md +++ b/cves/2025/CVE-2025-21479.md @@ -92,4 +92,9 @@ No PoCs from references. - https://github.com/zhuowei/cheese - https://github.com/Type010/cve-2025-21479-iqoo11pro - https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 +- https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479 +- https://github.com/Qingizi7/cve-2025-21479_iqooneo8 +- https://github.com/ma4the/omae-wa-cheese-da +- https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479 +- https://github.com/sarabpal-dev/cheese-cake diff --git a/cves/2025/CVE-2025-21756.md b/cves/2025/CVE-2025-21756.md index d05a44a81cc..9b6bc23da7a 100644 --- a/cves/2025/CVE-2025-21756.md +++ b/cves/2025/CVE-2025-21756.md @@ -18,4 +18,5 @@ No PoCs from references. - https://github.com/hoefler02/CVE-2025-21756 - https://github.com/khoatran107/cve-2025-21756 - https://github.com/volticks/CVE-2025-21692-poc +- https://github.com/h3raklez/CVE-2025-21756 diff --git a/cves/2025/CVE-2025-22457.md b/cves/2025/CVE-2025-22457.md index 51c7e7bb3ed..a35cfb4ead1 100644 --- a/cves/2025/CVE-2025-22457.md +++ b/cves/2025/CVE-2025-22457.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/TRone-ux/CVE-2025-22457 - https://github.com/securekomodo/CVE-2025-22457 - https://github.com/sfewer-r7/CVE-2025-22457 +- https://github.com/benmevic/cve-2025-22457 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-22457.yaml diff --git a/cves/2025/CVE-2025-22953.md b/cves/2025/CVE-2025-22953.md index ca928e36e5e..a9eaf3220a9 100644 --- a/cves/2025/CVE-2025-22953.md +++ b/cves/2025/CVE-2025-22953.md @@ -13,5 +13,5 @@ A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches availa - https://github.com/maliktawfiq/CVE-2025-22953 #### Github -No PoCs found on GitHub currently. +- https://github.com/maliktawfiq/CVE-2025-22953 diff --git a/cves/2025/CVE-2025-22968.md b/cves/2025/CVE-2025-22968.md index 2824be1a26f..d60aa419830 100644 --- a/cves/2025/CVE-2025-22968.md +++ b/cves/2025/CVE-2025-22968.md @@ -14,5 +14,5 @@ An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitra - https://github.com/CRUNZEX/CVE-DLINK-LTE #### Github -No PoCs found on GitHub currently. +- https://github.com/CRUNZEX/CVE-2025-22968 diff --git a/cves/2025/CVE-2025-2304.md b/cves/2025/CVE-2025-2304.md index 239e3fe4f2c..3c6eafc50f9 100644 --- a/cves/2025/CVE-2025-2304.md +++ b/cves/2025/CVE-2025-2304.md @@ -13,5 +13,21 @@ A Privilege Escalation through a Mass Assignment exists in Camaleon CMSWhen a us No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/0xk4rth1/CVE-2025-2304 +- https://github.com/7acini/CVE-2025-2304-CamaleonCMS-PoC +- https://github.com/Alien0ne/CVE-2025-2304 +- https://github.com/AzureADTrent/CVE-2025-2304_POC +- https://github.com/CsuriBird/CVE-2025-2304 +- https://github.com/Jeanback1/CVE-2025-2304-exploit +- https://github.com/PwnManjaro/CVE-2025-2304 +- https://github.com/askiesec/CVE-2025-2304-POC +- https://github.com/d3vn0mi/CVE-2025-2304-POC +- https://github.com/estebanzarate/CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC +- https://github.com/innocentx0/CVE-2025-2304-POC +- https://github.com/lil0xplorer/CVE-2025-2304-PoC +- https://github.com/mattiapertusati/htb-facts +- https://github.com/predyy/CVE-2025-2304 +- https://github.com/sparrowhawk1113/Exploit-for-CVE-2025-2304 +- https://github.com/the8frust/CVE-2025-2304 +- https://github.com/whiteov3rflow/CVE-2025-2304-POC diff --git a/cves/2025/CVE-2025-23048.md b/cves/2025/CVE-2025-23048.md index 2ce2ae3f0ef..e1b0ade4e7e 100644 --- a/cves/2025/CVE-2025-23048.md +++ b/cves/2025/CVE-2025-23048.md @@ -13,5 +13,5 @@ In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/absholi7ly/CVE-2025-23048-POC diff --git a/cves/2025/CVE-2025-23061.md b/cves/2025/CVE-2025-23061.md index 03adb851c47..b954b0f84f2 100644 --- a/cves/2025/CVE-2025-23061.md +++ b/cves/2025/CVE-2025-23061.md @@ -15,7 +15,7 @@ Mongoose before 8.9.5 can improperly use a nested $where filter with a populate( No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/open-flaw/CVE-2025-23061 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23061.yaml diff --git a/cves/2025/CVE-2025-23247.md b/cves/2025/CVE-2025-23247.md index e3d1edf9b11..3615c6d8cbd 100644 --- a/cves/2025/CVE-2025-23247.md +++ b/cves/2025/CVE-2025-23247.md @@ -13,5 +13,5 @@ NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2151 #### Github -No PoCs found on GitHub currently. +- https://github.com/SpiralBL0CK/CVE-2025-23247 diff --git a/cves/2025/CVE-2025-23419.md b/cves/2025/CVE-2025-23419.md index bf34ab5cbdc..c792787bfb5 100644 --- a/cves/2025/CVE-2025-23419.md +++ b/cves/2025/CVE-2025-23419.md @@ -15,5 +15,5 @@ When multiple server blocks are configured to share the same IP address and port No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/xitexploiter96-dot/CVE-2025-23419 diff --git a/cves/2025/CVE-2025-23968.md b/cves/2025/CVE-2025-23968.md index d0e8cbbc858..c24faa53489 100644 --- a/cves/2025/CVE-2025-23968.md +++ b/cves/2025/CVE-2025-23968.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in WPCenter AiBud - https://ryankozak.com/posts/cve-2025-23968/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-23968 diff --git a/cves/2025/CVE-2025-24000.md b/cves/2025/CVE-2025-24000.md index a34abdaf871..a3cf7e126d4 100644 --- a/cves/2025/CVE-2025-24000.md +++ b/cves/2025/CVE-2025-24000.md @@ -13,4 +13,4 @@ Authentication Bypass Using an Alternate Path or Channel vulnerability in WPExpe No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/bsdrip/CVE-2025-24000-exploit diff --git a/cves/2025/CVE-2025-24054.md b/cves/2025/CVE-2025-24054.md index 32517e2f54b..3b9d8d35b08 100644 --- a/cves/2025/CVE-2025-24054.md +++ b/cves/2025/CVE-2025-24054.md @@ -58,6 +58,11 @@ External control of file name or path in Windows NTLM allows an unauthorized att - https://github.com/moften/CVE-2025-24054 - https://github.com/pswalia2u/CVE-2025-24071_POC - https://github.com/xigney/CVE-2025-24054_PoC +- https://github.com/Fomovet/cve-2025-24054 +- https://github.com/SecurityLayer404/CVE-2025-24054-24071---Metasploit-Module +- https://github.com/Untouchable17/CVE-2025-24054 +- https://github.com/Wind010/CVE-2025-24054_PoC +- https://github.com/simantchaudhari/CVE-2025-24054-PoC #### ExploitDB - https://www.exploit-db.com/exploits/52480 diff --git a/cves/2025/CVE-2025-24071.md b/cves/2025/CVE-2025-24071.md index bee591039ce..c80e084c751 100644 --- a/cves/2025/CVE-2025-24071.md +++ b/cves/2025/CVE-2025-24071.md @@ -63,6 +63,12 @@ Exposure of sensitive information to an unauthorized actor in Windows File Explo - https://github.com/pswalia2u/CVE-2025-24071_POC - https://github.com/rubbxalc/CVE-2025-24071 - https://github.com/xigney/CVE-2025-24054_PoC +- https://github.com/Abdelrahman0Sayed/CVE-2025-24071 +- https://github.com/Fomovet/cve-2025-24071 +- https://github.com/ephunter/CVE-2025-24071-Exploit +- https://github.com/hyperchk/CVE-2025-24071-POC +- https://github.com/kaIIsyms/CVE-2025-24071 +- https://github.com/zbs54/Blackash-CVE-2025-24071 #### ExploitDB - https://www.exploit-db.com/exploits/52325 diff --git a/cves/2025/CVE-2025-24132.md b/cves/2025/CVE-2025-24132.md index 97793f241d0..6c2da7bf447 100644 --- a/cves/2025/CVE-2025-24132.md +++ b/cves/2025/CVE-2025-24132.md @@ -17,4 +17,5 @@ No PoCs from references. #### Github - https://github.com/cesco345/Airplay-CVE - https://github.com/ekomsSavior/AirBorne-PoC +- https://github.com/TheGamingGallifreyan/LiberationPlay-CVE-2025-24132-AirBourne-POC diff --git a/cves/2025/CVE-2025-24367.md b/cves/2025/CVE-2025-24367.md index 2b60cf2d998..01463eadc6a 100644 --- a/cves/2025/CVE-2025-24367.md +++ b/cves/2025/CVE-2025-24367.md @@ -13,7 +13,13 @@ Cacti is an open source performance and fault management framework. An authentic - https://github.com/Cacti/cacti/security/advisories/GHSA-fxrq-fr7h-9rqq #### Github -No PoCs found on GitHub currently. +- https://github.com/ShoshinMaster/CVE-2025-24367 +- https://github.com/SoftAndoWetto/CVE-2025-24367-PoC-Cacti +- https://github.com/TheCyberGeek/CVE-2025-24367-Cacti-PoC +- https://github.com/dantedansh/CVE-2025-24367-Cacti-Exploit #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cacti_graph_template_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2025-24367 diff --git a/cves/2025/CVE-2025-24472.md b/cves/2025/CVE-2025-24472.md index 032211a125f..9147f34870f 100644 --- a/cves/2025/CVE-2025-24472.md +++ b/cves/2025/CVE-2025-24472.md @@ -16,5 +16,5 @@ An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE- No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2025-24472-fortinet_authbypass_reproduction diff --git a/cves/2025/CVE-2025-24801.md b/cves/2025/CVE-2025-24801.md index f47e3bd65f6..7949f147d96 100644 --- a/cves/2025/CVE-2025-24801.md +++ b/cves/2025/CVE-2025-24801.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/fatkz/CVE-2025-24801 - https://github.com/r1beirin/CVE-2025-24801 +- https://github.com/r1beirin/Exploit-CVE-2025-24801 diff --git a/cves/2025/CVE-2025-24813.md b/cves/2025/CVE-2025-24813.md index 408bfb7e77c..c860cdd66be 100644 --- a/cves/2025/CVE-2025-24813.md +++ b/cves/2025/CVE-2025-24813.md @@ -63,6 +63,18 @@ Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution a - https://github.com/s1lentf00thold/ZoneMinder-v1.29.0 - https://github.com/leonzhao7/jvuln-platform - https://github.com/mrzero-cool/cve-poc-search +- https://github.com/Arthurabriel/POC-CVE-2025-24813 +- https://github.com/Dhananjayasj/CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE- +- https://github.com/EQSTLab/CVE-2025-24813 +- https://github.com/Loufa0/CVE-2025-24813 +- https://github.com/Mattb709/CVE-2025-24813-Scanner +- https://github.com/NamelessSaint8/CVE-2025-24813-POC +- https://github.com/ThHardvester/CVE-2025-24813 +- https://github.com/gunyakit/CVE-2025-24813-PoC-exploit +- https://github.com/pirenga/CVE-2025-24813 +- https://github.com/qzy0x/cve-2025-24813_poc +- https://github.com/seahcy/CVE-2025-24813 +- https://github.com/yuzuki-ayanami/CVE-2025-24813 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24813.yaml @@ -72,3 +84,6 @@ Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution a #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_partial_put_deserialization.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2025-24813 diff --git a/cves/2025/CVE-2025-24893.md b/cves/2025/CVE-2025-24893.md index 3808ef7352a..b0f6fef3745 100644 --- a/cves/2025/CVE-2025-24893.md +++ b/cves/2025/CVE-2025-24893.md @@ -44,6 +44,22 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat - https://github.com/torjan0/xwiki_solrsearch-rce-exploit - https://github.com/x0da6h/POC-for-CVE-2025-24893 - https://github.com/zs1n/CVE-2025-24893 +- https://github.com/0xDTC/XWiki-Platform-RCE-CVE-2025-24893 +- https://github.com/80Ottanta80/CVE-2025-24893-PoC +- https://github.com/BreakingRohit/CVE-2025-24893-PoC +- https://github.com/Fomovet/cve-2025-24893 +- https://github.com/TomKingori/xwiki-cve-2025-24893-exploit +- https://github.com/Y2F05p2w/CVE-2025-24893 +- https://github.com/Yukik4z3/CVE-2025-24893 +- https://github.com/endusdksla/xwiki-cve-2025-24893 +- https://github.com/gmh5225/CVE-2025-24893-RCE-PoC +- https://github.com/gotr00t0day/CVE-2025-24893 +- https://github.com/hasecto/CVE-2025-24893 +- https://github.com/kimtangker/CVE-2025-24893 +- https://github.com/nohack1212/CVE-2025-24893- +- https://github.com/o0wo0o/CVE-2025-24893_Shell +- https://github.com/rippsec/CVE-2025-24893-XWiki-SSTI-RCE +- https://github.com/vasilysaint/CVE-2025-24893 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml diff --git a/cves/2025/CVE-2025-24963.md b/cves/2025/CVE-2025-24963.md index 931e00ce058..4f678b3bab4 100644 --- a/cves/2025/CVE-2025-24963.md +++ b/cves/2025/CVE-2025-24963.md @@ -15,6 +15,7 @@ Vitest is a testing framework powered by Vite. The `__screenshot-error` handler #### Github - https://github.com/0xdeviner/CVE-2025-24963 +- https://github.com/hiteshpatra/CVE-2025-24963 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24963.yaml diff --git a/cves/2025/CVE-2025-25200.md b/cves/2025/CVE-2025-25200.md index 27bb5d7a95b..206bb2c65bb 100644 --- a/cves/2025/CVE-2025-25200.md +++ b/cves/2025/CVE-2025-25200.md @@ -16,5 +16,5 @@ Koa is expressive middleware for Node.js using ES2017 async functions. Prior to - https://github.com/koajs/koa/security/advisories/GHSA-593f-38f6-jp5m #### Github -No PoCs found on GitHub currently. +- https://github.com/dwictor0/PoC-CVE-2025-25200 diff --git a/cves/2025/CVE-2025-25257.md b/cves/2025/CVE-2025-25257.md index f2062087242..3312ca81aea 100644 --- a/cves/2025/CVE-2025-25257.md +++ b/cves/2025/CVE-2025-25257.md @@ -25,6 +25,9 @@ An improper neutralization of special elements used in an SQL command ('SQL Inje - https://github.com/mrmtwoj/CVE-2025-25257 - https://github.com/segfault-it/CVE-2025-25257 - https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257 +- https://github.com/0xbigshaq/CVE-2025-25257 +- https://github.com/lytianahkone-boop/cve-2025-25257 +- https://github.com/mr-r3b00t/CVE-2025-25257 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25257.yaml diff --git a/cves/2025/CVE-2025-25279.md b/cves/2025/CVE-2025-25279.md index ae948baf3e5..847945ba9e8 100644 --- a/cves/2025/CVE-2025-25279.md +++ b/cves/2025/CVE-2025-25279.md @@ -18,4 +18,5 @@ Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x #### Github - https://github.com/numanturle/CVE-2025-25279 +- https://github.com/AbokorMAHAMMADMOUSSE/CVE-2025-25279-Mattermost-Path-Traversal diff --git a/cves/2025/CVE-2025-25296.md b/cves/2025/CVE-2025-25296.md index 2348e27415f..be5f37ec3cd 100644 --- a/cves/2025/CVE-2025-25296.md +++ b/cves/2025/CVE-2025-25296.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/math-x-io/CVE-2025-25296-POC +- https://github.com/math-x-io/CVE-2025-25296 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25296.yaml diff --git a/cves/2025/CVE-2025-25461.md b/cves/2025/CVE-2025-25461.md index 82d45888c39..10580a4e96f 100644 --- a/cves/2025/CVE-2025-25461.md +++ b/cves/2025/CVE-2025-25461.md @@ -13,5 +13,5 @@ A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A us - https://github.com/RoNiXxCybSeC0101/CVE-2025-25461 #### Github -No PoCs found on GitHub currently. +- https://github.com/RoNiXxCybSeC0101/CVE-2025-25461 diff --git a/cves/2025/CVE-2025-25614.md b/cves/2025/CVE-2025-25614.md index 1097e3f7171..bbd4355645e 100644 --- a/cves/2025/CVE-2025-25614.md +++ b/cves/2025/CVE-2025-25614.md @@ -13,5 +13,5 @@ Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, - https://github.com/armaansidana2003/CVE-2025-25614 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25614 diff --git a/cves/2025/CVE-2025-25615.md b/cves/2025/CVE-2025-25615.md index 8aed506b588..2b64e884a2b 100644 --- a/cves/2025/CVE-2025-25615.md +++ b/cves/2025/CVE-2025-25615.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows view - https://github.com/armaansidana2003/CVE-2025-25615 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25615 diff --git a/cves/2025/CVE-2025-25616.md b/cves/2025/CVE-2025-25616.md index 5d99885869c..2f2dc55dddc 100644 --- a/cves/2025/CVE-2025-25616.md +++ b/cves/2025/CVE-2025-25616.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows stu - https://github.com/armaansidana2003/CVE-2025-25616 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25616 diff --git a/cves/2025/CVE-2025-25617.md b/cves/2025/CVE-2025-25617.md index 1e753beda85..a2b7a6cbc75 100644 --- a/cves/2025/CVE-2025-25617.md +++ b/cves/2025/CVE-2025-25617.md @@ -13,5 +13,5 @@ Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation a - https://github.com/armaansidana2003/CVE-2025-25617 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25617 diff --git a/cves/2025/CVE-2025-25618.md b/cves/2025/CVE-2025-25618.md index 06d438a1538..313b2779e41 100644 --- a/cves/2025/CVE-2025-25618.md +++ b/cves/2025/CVE-2025-25618.md @@ -13,5 +13,5 @@ Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation a - https://github.com/armaansidana2003/CVE-2025-25618 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25618 diff --git a/cves/2025/CVE-2025-25620.md b/cves/2025/CVE-2025-25620.md index 8922966cca6..50a1b1c5124 100644 --- a/cves/2025/CVE-2025-25620.md +++ b/cves/2025/CVE-2025-25620.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create a - https://github.com/armaansidana2003/CVE-2025-25620 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25620 diff --git a/cves/2025/CVE-2025-25621.md b/cves/2025/CVE-2025-25621.md index 3fa27882693..583789b7902 100644 --- a/cves/2025/CVE-2025-25621.md +++ b/cves/2025/CVE-2025-25621.md @@ -13,5 +13,5 @@ Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows tea - https://github.com/armaansidana2003/CVE-2025-25621 #### Github -No PoCs found on GitHub currently. +- https://github.com/armaansidana2003/CVE-2025-25621 diff --git a/cves/2025/CVE-2025-2563.md b/cves/2025/CVE-2025-2563.md index a5159d337eb..0d0bb05e737 100644 --- a/cves/2025/CVE-2025-2563.md +++ b/cves/2025/CVE-2025-2563.md @@ -14,6 +14,8 @@ The User Registration & Membership WordPress plugin before 4.1.2 does not preve #### Github - https://github.com/ubaydev/CVE-2025-2563 +- https://github.com/0axz-tools/CVE-2025-2563-POC +- https://github.com/dokter69/CVE-2025-2563 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2563.yaml diff --git a/cves/2025/CVE-2025-2568.md b/cves/2025/CVE-2025-2568.md index 43834707867..0de503dae45 100644 --- a/cves/2025/CVE-2025-2568.md +++ b/cves/2025/CVE-2025-2568.md @@ -13,4 +13,4 @@ The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for Word No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/shinigami-777/PoC_CVE-2025-2568 diff --git a/cves/2025/CVE-2025-2598.md b/cves/2025/CVE-2025-2598.md index 4dbe04be35d..f8595efd820 100644 --- a/cves/2025/CVE-2025-2598.md +++ b/cves/2025/CVE-2025-2598.md @@ -14,4 +14,6 @@ No PoCs from references. #### Github - https://github.com/SpongeBob-369/CVE-2025-2598 +- https://github.com/Catnip-Express-Maxim/AWSTESTEXPLOIT +- https://github.com/SallyXVIII/Final-Proj diff --git a/cves/2025/CVE-2025-26125.md b/cves/2025/CVE-2025-26125.md index 6b8c36494a0..7b6743b3a9d 100644 --- a/cves/2025/CVE-2025-26125.md +++ b/cves/2025/CVE-2025-26125.md @@ -14,5 +14,5 @@ An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 a - https://github.com/ZeroMemoryEx/IObit-EoP #### Github -No PoCs found on GitHub currently. +- https://github.com/ZeroMemoryEx/CVE-2025-26125 diff --git a/cves/2025/CVE-2025-26153.md b/cves/2025/CVE-2025-26153.md index 675662e96e9..20a5ad819ef 100644 --- a/cves/2025/CVE-2025-26153.md +++ b/cves/2025/CVE-2025-26153.md @@ -13,5 +13,5 @@ A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS - https://gist.github.com/NoSpaceAvailable/234acdf57b5d7b29b2f39090c1686bc8 #### Github -No PoCs found on GitHub currently. +- https://github.com/mexeck88/CSRF-via-stored-XSS-for-PrivEsc diff --git a/cves/2025/CVE-2025-26198.md b/cves/2025/CVE-2025-26198.md index eef944301e6..3a28f67fc15 100644 --- a/cves/2025/CVE-2025-26198.md +++ b/cves/2025/CVE-2025-26198.md @@ -14,5 +14,5 @@ CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability - https://github.com/tansique-17/CVE-2025-26198/ #### Github -No PoCs found on GitHub currently. +- https://github.com/WailYacoubi9/CVE-2025-26198 diff --git a/cves/2025/CVE-2025-26263.md b/cves/2025/CVE-2025-26263.md index 3c8bf4e3e3c..6a416478f1d 100644 --- a/cves/2025/CVE-2025-26263.md +++ b/cves/2025/CVE-2025-26263.md @@ -13,7 +13,7 @@ GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less - https://github.com/DRAGOWN/CVE-2025-26263 #### Github -No PoCs found on GitHub currently. +- https://github.com/beleknarcisse169-cmd/CVE-2025-26263 #### ExploitDB - https://www.exploit-db.com/exploits/52423 diff --git a/cves/2025/CVE-2025-26264.md b/cves/2025/CVE-2025-26264.md index caac976934c..c317d43c000 100644 --- a/cves/2025/CVE-2025-26264.md +++ b/cves/2025/CVE-2025-26264.md @@ -13,7 +13,7 @@ GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a - https://github.com/DRAGOWN/CVE-2025-26264 #### Github -No PoCs found on GitHub currently. +- https://github.com/hxlxmj/CVE-2025-26264 #### ExploitDB - https://www.exploit-db.com/exploits/52424 diff --git a/cves/2025/CVE-2025-26318.md b/cves/2025/CVE-2025-26318.md index ef56a03ee9f..cc50a2b6d0e 100644 --- a/cves/2025/CVE-2025-26318.md +++ b/cves/2025/CVE-2025-26318.md @@ -13,5 +13,5 @@ hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers t - https://github.com/Frozenka/CVE-2025-26318 #### Github -No PoCs found on GitHub currently. +- https://github.com/Frozenka/CVE-2025-26318 diff --git a/cves/2025/CVE-2025-26466.md b/cves/2025/CVE-2025-26466.md index 7a75cfeca5f..3ca50d96086 100644 --- a/cves/2025/CVE-2025-26466.md +++ b/cves/2025/CVE-2025-26466.md @@ -24,4 +24,6 @@ A flaw was found in the OpenSSH package. For each ping packet the SSH server rec #### Github - https://github.com/mrowkoob/CVE-2025-26466-msf - https://github.com/rxerium/CVE-2025-26466 +- https://github.com/acidboonrs/cve-2025-26466-openssh-poc +- https://github.com/tpirate/CVE-2025-26466 diff --git a/cves/2025/CVE-2025-26794.md b/cves/2025/CVE-2025-26794.md index 14b177d215b..06f73124e2c 100644 --- a/cves/2025/CVE-2025-26794.md +++ b/cves/2025/CVE-2025-26794.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/OscarBataille/CVE-2025-26794 - https://github.com/ishwardeepp/CVE-2025-26794-Exim-Mail-SQLi +- https://github.com/XploitGh0st/CVE-2025-26794-exploit diff --git a/cves/2025/CVE-2025-27407.md b/cves/2025/CVE-2025-27407.md index 7bcd5a7fc3f..31f506efb6e 100644 --- a/cves/2025/CVE-2025-27407.md +++ b/cves/2025/CVE-2025-27407.md @@ -19,5 +19,5 @@ graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/LoGGGG2402/CVE-2025-27407 diff --git a/cves/2025/CVE-2025-27515.md b/cves/2025/CVE-2025-27515.md index 9fd73cb4125..c26754367f8 100644 --- a/cves/2025/CVE-2025-27515.md +++ b/cves/2025/CVE-2025-27515.md @@ -14,5 +14,5 @@ Laravel is a web application framework. When using wildcard validation to valida No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/joaovicdev/EXPLOIT-CVE-2025-27515 diff --git a/cves/2025/CVE-2025-27520.md b/cves/2025/CVE-2025-27520.md index 7ab9bfff624..49d840950ec 100644 --- a/cves/2025/CVE-2025-27520.md +++ b/cves/2025/CVE-2025-27520.md @@ -13,7 +13,8 @@ BentoML is a Python library for building online serving systems optimized for AI - https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc #### Github -No PoCs found on GitHub currently. +- https://github.com/Evillm/CVE-2025-27520-PoC +- https://github.com/electricsheep08/CVE-2025-27520 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb diff --git a/cves/2025/CVE-2025-27591.md b/cves/2025/CVE-2025-27591.md index a785ea081e2..386195b1475 100644 --- a/cves/2025/CVE-2025-27591.md +++ b/cves/2025/CVE-2025-27591.md @@ -27,4 +27,10 @@ No PoCs from references. - https://github.com/obamalaolu/CVE-2025-27591 - https://github.com/rvizx/CVE-2025-27591 - https://github.com/umutcamliyurt/CVE-2025-27591 +- https://github.com/0x00Jeff/CVE-2025-27591 +- https://github.com/MoTechStore/CVE-2025-27591-PoC +- https://github.com/Stp1t/CVE-2025-27591 +- https://github.com/VisaiCyber/CVE-2025-27591-below- +- https://github.com/krn966/CVE-2025-27591 +- https://github.com/rvzsec/CVE-2025-27591 diff --git a/cves/2025/CVE-2025-27817.md b/cves/2025/CVE-2025-27817.md index cf32e13c02c..d82837cb9e3 100644 --- a/cves/2025/CVE-2025-27817.md +++ b/cves/2025/CVE-2025-27817.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/iSee857/CVE-2025-27817 +- https://github.com/oriolrius/kafka-keycloak-oauth #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27817.yaml diff --git a/cves/2025/CVE-2025-2783.md b/cves/2025/CVE-2025-2783.md index 93a3e7f2623..133ddc89b51 100644 --- a/cves/2025/CVE-2025-2783.md +++ b/cves/2025/CVE-2025-2783.md @@ -16,6 +16,9 @@ No PoCs from references. #### Github - https://github.com/Alchemist3dot14/CVE-2025-2783 - https://github.com/byteReaper77/CVE-2025-2783 +- https://github.com/ElianGonzi00/CVE-2025-2783 +- https://github.com/bjrjk/CVE-2025-2783 +- https://github.com/razureink/cve-2025-2783-chrome_sandbox_escape_reproduction #### ExploitDB - https://www.exploit-db.com/exploits/52403 diff --git a/cves/2025/CVE-2025-28062.md b/cves/2025/CVE-2025-28062.md index a4a98622c21..6fd87c65dbc 100644 --- a/cves/2025/CVE-2025-28062.md +++ b/cves/2025/CVE-2025-28062.md @@ -13,7 +13,7 @@ A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.8 - https://github.com/Thvt0ne/CVE-2025-28062 #### Github -No PoCs found on GitHub currently. +- https://github.com/Thvt0ne/CVE-2025-28062 #### ExploitDB - https://www.exploit-db.com/exploits/52283 diff --git a/cves/2025/CVE-2025-28121.md b/cves/2025/CVE-2025-28121.md index bac20769f23..896eecce57c 100644 --- a/cves/2025/CVE-2025-28121.md +++ b/cves/2025/CVE-2025-28121.md @@ -13,7 +13,7 @@ code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scrip - https://github.com/pruthuraut/CVE-2025-28121 #### Github -No PoCs found on GitHub currently. +- https://github.com/pruthuraut/CVE-2025-28121 #### ExploitDB - https://www.exploit-db.com/exploits/52272 diff --git a/cves/2025/CVE-2025-2825.md b/cves/2025/CVE-2025-2825.md index 99c211674f8..2052274e1a9 100644 --- a/cves/2025/CVE-2025-2825.md +++ b/cves/2025/CVE-2025-2825.md @@ -15,7 +15,11 @@ CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected b - https://projectdiscovery.io/blog/crushftp-authentication-bypass #### Github -No PoCs found on GitHub currently. +- https://github.com/Shivshantp/CVE-2025-2825-CrushFTP-AuthBypass +- https://github.com/WOOOOONG/CVE-2025-2825 +- https://github.com/ghostsec420/ShatteredFTP +- https://github.com/iteride/CVE-2025-2825 +- https://github.com/punitdarji/crushftp-CVE-2025-2825 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb diff --git a/cves/2025/CVE-2025-29306.md b/cves/2025/CVE-2025-29306.md index 143bbd4e8a5..6d61c09f45e 100644 --- a/cves/2025/CVE-2025-29306.md +++ b/cves/2025/CVE-2025-29306.md @@ -17,6 +17,8 @@ An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code vi - https://github.com/congdong007/CVE-2025-29306_poc - https://github.com/inok009/FOXCMS-CVE-2025-29306-POC - https://github.com/verylazytech/CVE-2025-29306 +- https://github.com/mantanhacker/Mass-CVE-2025-29306 +- https://github.com/somatrasss/CVE-2025-29306 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29306.yaml diff --git a/cves/2025/CVE-2025-29384.md b/cves/2025/CVE-2025-29384.md index 5d9f515f70c..9dd82adb768 100644 --- a/cves/2025/CVE-2025-29384.md +++ b/cves/2025/CVE-2025-29384.md @@ -14,4 +14,5 @@ In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacM #### Github - https://github.com/Otsmane-Ahmed/cve-2025-29384-poc +- https://github.com/Fomovet/cve-2025-29384 diff --git a/cves/2025/CVE-2025-2945.md b/cves/2025/CVE-2025-2945.md index 5c84bf9c290..73d6a2e4937 100644 --- a/cves/2025/CVE-2025-2945.md +++ b/cves/2025/CVE-2025-2945.md @@ -16,6 +16,13 @@ Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud - https://github.com/Cycloctane/cve-2025-2945-poc - https://github.com/abrewer251/CVE-2025-2945_PgAdmin_PoC - https://github.com/Khashayarnzk/CVE-2025-2945-pgAdmin-RCE +- https://github.com/I3r1h0n/pgAdminOpendoor +- https://github.com/Udayveer17/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC- +- https://github.com/g0d150ne/CVE-2025-2945 +- https://github.com/plur1bu5/CVE-2025-2945-pgadmin-rce #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pgadmin_query_tool_authenticated.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/pgadmin/CVE-2025-2945 diff --git a/cves/2025/CVE-2025-29529.md b/cves/2025/CVE-2025-29529.md index 2d71a887be1..8a130d49d94 100644 --- a/cves/2025/CVE-2025-29529.md +++ b/cves/2025/CVE-2025-29529.md @@ -13,5 +13,5 @@ ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to cont - https://github.com/Yoshik0xF6/CVE-2025-29529 #### Github -No PoCs found on GitHub currently. +- https://github.com/Yoshik0xF6/CVE-2025-29529 diff --git a/cves/2025/CVE-2025-29556.md b/cves/2025/CVE-2025-29556.md index 9f3debfae12..a3841fe4b42 100644 --- a/cves/2025/CVE-2025-29556.md +++ b/cves/2025/CVE-2025-29556.md @@ -13,5 +13,5 @@ ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since ve - https://github.com/0xsu3ks/CVE-2025-29556 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xsu3ks/CVE-2025-29556 diff --git a/cves/2025/CVE-2025-29632.md b/cves/2025/CVE-2025-29632.md index 2a9a66fc188..58a7fd2ce22 100644 --- a/cves/2025/CVE-2025-29632.md +++ b/cves/2025/CVE-2025-29632.md @@ -13,5 +13,5 @@ Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cau - https://github.com/OHnogood/CVE-2025-29632/ #### Github -No PoCs found on GitHub currently. +- https://github.com/OHnogood/CVE-2025-29632 diff --git a/cves/2025/CVE-2025-29824.md b/cves/2025/CVE-2025-29824.md index 6fc8982fb91..b346bf340d6 100644 --- a/cves/2025/CVE-2025-29824.md +++ b/cves/2025/CVE-2025-29824.md @@ -55,4 +55,5 @@ No PoCs from references. - https://github.com/AfanPan/CVE-2025-29824-Exploit - https://github.com/AntonyNRM/vulnerable-flask-app - https://github.com/encrypter15/CVE-2025-29824 +- https://github.com/uname1able/CVE-2025-29824 diff --git a/cves/2025/CVE-2025-29927.md b/cves/2025/CVE-2025-29927.md index d60b30e9139..6715bd0a076 100644 --- a/cves/2025/CVE-2025-29927.md +++ b/cves/2025/CVE-2025-29927.md @@ -113,6 +113,20 @@ No PoCs from references. - https://github.com/yuzu-juice/CVE-2025-29927_demo - https://github.com/zs1n/CVE-2025-29927 - https://github.com/kuyrathdaro/cve-2025-29927 +- https://github.com/DanielHallbro/CVE-2025-29927-Nextjs-Bypass-PoC +- https://github.com/Ev3rPalestine/0xMiddleware +- https://github.com/Fomovet/cve-2025-29927 +- https://github.com/Nayekah/Next.js-Proof-of-Concept +- https://github.com/Si-Ni/CVE-2025-29927-Proof-of-Concept +- https://github.com/SwapnilDeshpande/cve-2025-29927-lab +- https://github.com/diogolourencodev/middleforce +- https://github.com/ferpalma21/Automated-Next.js-Security-Scanner-for-CVE-2025-29927 +- https://github.com/gitgudKrish/cve-2025-29927-nextjs +- https://github.com/hujiaozhuzhu/CVE-2025-29927__Next.js +- https://github.com/kazuya256/next-js-auth-bypass +- https://github.com/liamromanis101/CVE-2025-29927-NextJS +- https://github.com/moften/CVE-2025-29927_Next.js_Auth_Bypass +- https://github.com/w3shinew/CVE-2025-29927 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29927.yaml @@ -122,3 +136,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nextjs_middleware_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/next.js/CVE-2025-29927 diff --git a/cves/2025/CVE-2025-30208.md b/cves/2025/CVE-2025-30208.md index 6f00a620030..a7a966e961e 100644 --- a/cves/2025/CVE-2025-30208.md +++ b/cves/2025/CVE-2025-30208.md @@ -36,9 +36,16 @@ Vite, a provider of frontend development tooling, has a vulnerability in version - https://github.com/sadhfdw129/CVE-2025-30208-Vite - https://github.com/sumeet-darekar/CVE-2025-30208 - https://github.com/xuemian168/CVE-2025-30208 +- https://github.com/HazaVVIP/CVE-2025-30208 +- https://github.com/MiclelsonCN/CVE-2025-30208_POC +- https://github.com/On1onss/CVE-2025-30208 +- https://github.com/cc3305/CVE-2025-30208 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30208.yaml #### ExploitDB - https://www.exploit-db.com/exploits/52111 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/vite/CVE-2025-30208 diff --git a/cves/2025/CVE-2025-30349.md b/cves/2025/CVE-2025-30349.md index 4cc310f2e51..bf6897a5daf 100644 --- a/cves/2025/CVE-2025-30349.md +++ b/cves/2025/CVE-2025-30349.md @@ -13,5 +13,5 @@ Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.2 - https://github.com/natasaka/CVE-2025-30349/ #### Github -No PoCs found on GitHub currently. +- https://github.com/natasaka/CVE-2025-30349 diff --git a/cves/2025/CVE-2025-3052.md b/cves/2025/CVE-2025-3052.md index ad82b7159a1..5de293a6ad5 100644 --- a/cves/2025/CVE-2025-3052.md +++ b/cves/2025/CVE-2025-3052.md @@ -27,5 +27,5 @@ An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for co - https://www.binarly.io/advisories/brly-dva-2025-001 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2025-3052 diff --git a/cves/2025/CVE-2025-31131.md b/cves/2025/CVE-2025-31131.md index 4c54451f028..44295bc50d0 100644 --- a/cves/2025/CVE-2025-31131.md +++ b/cves/2025/CVE-2025-31131.md @@ -14,6 +14,7 @@ YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable t #### Github - https://github.com/MuhammadWaseem29/CVE-2025-31131 +- https://github.com/gmh5225/Blackash-CVE-2025-31131 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31131.yaml diff --git a/cves/2025/CVE-2025-31161.md b/cves/2025/CVE-2025-31161.md index 93d04f71ef0..bb695479e27 100644 --- a/cves/2025/CVE-2025-31161.md +++ b/cves/2025/CVE-2025-31161.md @@ -33,6 +33,16 @@ CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and - https://github.com/ghostsec420/ShatteredFTP - https://github.com/gvincenti/Soulmate - https://github.com/r0otk3r/CVE-2025-31161 +- https://github.com/0xBlackash/CVE-2025-31161 +- https://github.com/Dairrow/CVE-2025-31161 +- https://github.com/Drelinss/Blackash-CVE-2025-31161 +- https://github.com/Shisones/CVE-2025-31161 +- https://github.com/cesarbtakeda/CVE-2025-31161 +- https://github.com/ch3m1cl/CVE-2025-31161 +- https://github.com/eserror/CVE-2025-31161 +- https://github.com/rufflabs/crushftp_cve-2025-31161 +- https://github.com/rufflabs/ludus_crushftp_cve-2025-31161 +- https://github.com/rufflabs/ludus_crushftp_cve-2025-31161_sim #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31161.yaml diff --git a/cves/2025/CVE-2025-31324.md b/cves/2025/CVE-2025-31324.md index 0ece620c6f3..dc884ef6cb2 100644 --- a/cves/2025/CVE-2025-31324.md +++ b/cves/2025/CVE-2025-31324.md @@ -31,6 +31,7 @@ No PoCs from references. - https://github.com/rf-peixoto/sap_netweaver_cve-2025-31324- - https://github.com/rxerium/CVE-2025-31324 - https://github.com/sug4r-wr41th/CVE-2025-31324 +- https://github.com/aristois913/CVE-2025-31324 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yaml diff --git a/cves/2025/CVE-2025-31486.md b/cves/2025/CVE-2025-31486.md index 5bdc515b48f..3977f2eaa07 100644 --- a/cves/2025/CVE-2025-31486.md +++ b/cves/2025/CVE-2025-31486.md @@ -20,6 +20,7 @@ Vite is a frontend tooling framework for javascript. The contents of arbitrary f #### Github - https://github.com/hackmelocal/CVE-2025-31486-Simulation - https://github.com/iSee857/CVE-2025-31486-PoC +- https://github.com/ll104567/CVE-2025-31486 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31486.yaml diff --git a/cves/2025/CVE-2025-31651.md b/cves/2025/CVE-2025-31651.md index daf9a994ef4..a53d1b56120 100644 --- a/cves/2025/CVE-2025-31651.md +++ b/cves/2025/CVE-2025-31651.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/gregk4sec/CVE-2025-31651 +- https://github.com/gregk4sec/CVE-2025-31651-o diff --git a/cves/2025/CVE-2025-31722.md b/cves/2025/CVE-2025-31722.md index 942576da96e..0ecac93405b 100644 --- a/cves/2025/CVE-2025-31722.md +++ b/cves/2025/CVE-2025-31722.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/Nick6371/CVE-2025-31722 +- https://github.com/h3raklez/CVE-2025-31722 diff --git a/cves/2025/CVE-2025-32023.md b/cves/2025/CVE-2025-32023.md index 5c889a1ac9a..921a55eb92a 100644 --- a/cves/2025/CVE-2025-32023.md +++ b/cves/2025/CVE-2025-32023.md @@ -18,6 +18,7 @@ No PoCs from references. #### Github - https://github.com/LordBheem/CVE-2025-32023 - https://github.com/leesh3288/CVE-2025-32023 +- https://github.com/44528zja/Blackash-CVE-2025-32023 #### ExploitDB - https://www.exploit-db.com/exploits/52477 diff --git a/cves/2025/CVE-2025-32044.md b/cves/2025/CVE-2025-32044.md index 6439950fcfe..2be8974f529 100644 --- a/cves/2025/CVE-2025-32044.md +++ b/cves/2025/CVE-2025-32044.md @@ -13,5 +13,5 @@ A flaw has been identified in Moodle where, on certain sites, unauthenticated us No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/shinthink/CVE-2025-32044 diff --git a/cves/2025/CVE-2025-32375.md b/cves/2025/CVE-2025-32375.md index 51c9ea9d2f6..be4657be0ab 100644 --- a/cves/2025/CVE-2025-32375.md +++ b/cves/2025/CVE-2025-32375.md @@ -14,6 +14,7 @@ BentoML is a Python library for building online serving systems optimized for AI #### Github - https://github.com/theGEBIRGE/CVE-2025-32375 +- https://github.com/SevdaKhidirova/CVE-2025-32375-PoC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bentoml_runner_server_rce_cve_2025_32375.rb diff --git a/cves/2025/CVE-2025-32395.md b/cves/2025/CVE-2025-32395.md index b23d8598aa6..a8e3d118db1 100644 --- a/cves/2025/CVE-2025-32395.md +++ b/cves/2025/CVE-2025-32395.md @@ -22,3 +22,6 @@ Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32395.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/vite/CVE-2025-32395 diff --git a/cves/2025/CVE-2025-32407.md b/cves/2025/CVE-2025-32407.md index f3d39acf088..08b064ec2ff 100644 --- a/cves/2025/CVE-2025-32407.md +++ b/cves/2025/CVE-2025-32407.md @@ -13,5 +13,5 @@ Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Gala - https://github.com/diegovargasj/CVE-2025-32407 #### Github -No PoCs found on GitHub currently. +- https://github.com/diegovargasj/CVE-2025-32407 diff --git a/cves/2025/CVE-2025-3243.md b/cves/2025/CVE-2025-3243.md index 60642af07f8..fc18973722b 100644 --- a/cves/2025/CVE-2025-3243.md +++ b/cves/2025/CVE-2025-3243.md @@ -16,4 +16,5 @@ Eine kritische Schwachstelle wurde in code-projects Patient Record Management Sy #### Github - https://github.com/TeneBrae93/CVE-2025-3243 +- https://github.com/ladosudeste/CVE-2025-3243 diff --git a/cves/2025/CVE-2025-32432.md b/cves/2025/CVE-2025-32432.md index a9e8852989c..8a08151067a 100644 --- a/cves/2025/CVE-2025-32432.md +++ b/cves/2025/CVE-2025-32432.md @@ -21,6 +21,13 @@ Craft is a flexible, user-friendly CMS for creating custom digital experiences o - https://github.com/Sachinart/CVE-2025-32432 - https://github.com/apostolovd/PoCs - https://github.com/bambooqj/CVE-2025-32432 +- https://github.com/EzraMansor/CVE-2025-32432-PoC +- https://github.com/HeltonPojo/CVE-2025-32432 +- https://github.com/TheMursalin/CVE-2025-32432 +- https://github.com/c0gnit00/CVE-2025-32432 +- https://github.com/cd-ratel/CVE-2025-32432 +- https://github.com/n40y/PoC_CVE-2025-32432 +- https://github.com/theeomega/CVE-2025-32432-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32432.yaml @@ -30,3 +37,6 @@ Craft is a flexible, user-friendly CMS for creating custom digital experiences o #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/craftcms/CVE-2025-32432 diff --git a/cves/2025/CVE-2025-32433.md b/cves/2025/CVE-2025-32433.md index 3be66c99f58..7757432ff8a 100644 --- a/cves/2025/CVE-2025-32433.md +++ b/cves/2025/CVE-2025-32433.md @@ -42,9 +42,26 @@ Erlang/OTP is a set of libraries for the Erlang programming language. Prior to v - https://github.com/platsecurity/CVE-2025-32433 - https://github.com/teamtopkarl/CVE-2025-32433 - https://github.com/vigilante-1337/CVE-2025-32433 +- https://github.com/0xBlackash/CVE-2025-32433 +- https://github.com/AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433 +- https://github.com/Batman529/PoC-CVE-2025-32433 +- https://github.com/Liam-Worsley/CVE-2025-32433-PoC-Analysis +- https://github.com/ProDefense/CVE-2025-32433 +- https://github.com/blackcat4347/CVE-2025-32433-available-for-windows +- https://github.com/chuzouX/CVE-2025-32433-Exploit-edited +- https://github.com/giriaryan694-a11y/cve-2025-32433_rce_exploit +- https://github.com/joshuavanderpoll/cve-2025-32433 +- https://github.com/l1nuxkid/CVE-2025-32433-exploit +- https://github.com/razureink/cve-2025-32433-erlang_ssh_rce_reproduction +- https://github.com/soltanali0/CVE-2025-32433-Eploit +- https://github.com/toshithh/CVE-2025-32433 +- https://github.com/yonathanpy/CVE-2025-32433.py #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32433.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/ssh_erlangotp_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/erlang/CVE-2025-32433 diff --git a/cves/2025/CVE-2025-32434.md b/cves/2025/CVE-2025-32434.md index 1a43c33b9f4..d1c9f900691 100644 --- a/cves/2025/CVE-2025-32434.md +++ b/cves/2025/CVE-2025-32434.md @@ -13,5 +13,7 @@ PyTorch is a Python package that provides tensor computation with strong GPU acc No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AlexanderGumeniuk/CVE-2025-32434 +- https://github.com/B1tBit/CVE-2025-32434-exploit +- https://github.com/cyhe50/cve-2025-32434-poc diff --git a/cves/2025/CVE-2025-32462.md b/cves/2025/CVE-2025-32462.md index 5930643def3..a1fdd7a5ab8 100644 --- a/cves/2025/CVE-2025-32462.md +++ b/cves/2025/CVE-2025-32462.md @@ -21,6 +21,10 @@ No PoCs from references. - https://github.com/cybersentinelx1/CVE-2025-32462-Exploit - https://github.com/j3r1ch0123/CVE-2025-32462 - https://github.com/mylovem313/CVE-2025-32462 +- https://github.com/0p5cur/CVE-2025-32462-POC +- https://github.com/MAAYTHM/CVE-2025-32462_32463-Lab +- https://github.com/OffSecPlaybook/CVE-2025-32462- +- https://github.com/yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab #### ExploitDB - https://www.exploit-db.com/exploits/52354 diff --git a/cves/2025/CVE-2025-32463.md b/cves/2025/CVE-2025-32463.md index beb6c1b0dd9..77f3a378d70 100644 --- a/cves/2025/CVE-2025-32463.md +++ b/cves/2025/CVE-2025-32463.md @@ -59,6 +59,29 @@ Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswi - https://github.com/san8383/CVE-2025-32463 - https://github.com/zhaduchanhzz/CVE-2025-32463_POC - https://github.com/zinzloun/CVE-2025-32463 +- https://github.com/0p5cur/CVE-2025-32463-POC +- https://github.com/0x3c4dfa1/CVE-2025-32463 +- https://github.com/0xBlackash/CVE-2025-32463 +- https://github.com/0xdak/CVE-2025-32463_exploit +- https://github.com/12bijaya/CVE-2025-32463 +- https://github.com/1xPwn/CVE-2025-32463 +- https://github.com/AC8999/CVE-2025-32463 +- https://github.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape +- https://github.com/Fomovet/cve-2025-32463 +- https://github.com/Mr-Alperen/CVE-2025-32463 +- https://github.com/NewComrade12211/CVE-2025-32463 +- https://github.com/SpycioKon/CVE-2025-32463 +- https://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation +- https://github.com/danilo1992-sys/CVE-2025-32463 +- https://github.com/dr4x-c0d3r/sudo-chroot +- https://github.com/dr4xp/sudo-chroot +- https://github.com/gmh5225/Blackash-CVE-2025-32463 +- https://github.com/khoazero123/CVE-2025-32463 +- https://github.com/muhammedkayag/CVE-2025-32463 +- https://github.com/r3dBust3r/CVE-2025-32463 +- https://github.com/robbin0919/CVE-2025-32463 +- https://github.com/secvulnhub/CVE-2025-32463-EXPLOIT +- https://github.com/vpr-labs/CVE-2025-32463 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32463.yaml diff --git a/cves/2025/CVE-2025-3248.md b/cves/2025/CVE-2025-3248.md index 664a67c38c8..581e862e30e 100644 --- a/cves/2025/CVE-2025-3248.md +++ b/cves/2025/CVE-2025-3248.md @@ -37,6 +37,12 @@ Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v - https://github.com/ynsmroztas/CVE-2025-3248-Langflow-RCE - https://github.com/zapstiko/CVE-2025-3248 - https://github.com/hideki233/CVE-2025-3248-Langflow-RCE +- https://github.com/12-test-12/CVE-2025-3248 +- https://github.com/GraySignal/CVE-2025-3248 +- https://github.com/Kiraly07/Demo_CVE-2025-3248 +- https://github.com/b0ySie7e/CVE-2025-3248-POC +- https://github.com/bambooqj/cve-2025-3248 +- https://github.com/drackyjr/cve-2025-3248-exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3248.yaml @@ -47,3 +53,6 @@ Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_unauth_rce_cve_2025_3248.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/langflow/CVE-2025-3248 diff --git a/cves/2025/CVE-2025-32711.md b/cves/2025/CVE-2025-32711.md index c7d554b3c51..379564e7d4b 100644 --- a/cves/2025/CVE-2025-32711.md +++ b/cves/2025/CVE-2025-32711.md @@ -14,4 +14,5 @@ No PoCs from references. #### Github - https://github.com/daryllundy/cve-2025-32711 +- https://github.com/TreRB/markdown-exfil-tester diff --git a/cves/2025/CVE-2025-32966.md b/cves/2025/CVE-2025-32966.md index ac2e98aa3fc..10d2a499d0d 100644 --- a/cves/2025/CVE-2025-32966.md +++ b/cves/2025/CVE-2025-32966.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32966.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dataease/CVE-2025-32966 diff --git a/cves/2025/CVE-2025-33053.md b/cves/2025/CVE-2025-33053.md index 96b8336d909..b9c73829b33 100644 --- a/cves/2025/CVE-2025-33053.md +++ b/cves/2025/CVE-2025-33053.md @@ -59,6 +59,7 @@ External control of file name or path in Internet Shortcut Files allows an unaut - https://github.com/TheTorjanCaptain/CVE-2025-33053-Checker-PoC - https://github.com/kra1t0/CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept - https://github.com/veath1/LNK-File-WEBDAV-Remote-Code-Execution-Vulnerability +- https://github.com/Cyberw1ng/CVE-2025-33053-POC #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/unc_url_cve_2025_33053.rb diff --git a/cves/2025/CVE-2025-33073.md b/cves/2025/CVE-2025-33073.md index 37baa017830..1f389617db5 100644 --- a/cves/2025/CVE-2025-33073.md +++ b/cves/2025/CVE-2025-33073.md @@ -87,6 +87,11 @@ Improper access control in Windows SMB allows an authorized attacker to elevate - https://github.com/mbanyamer/-Windows-11-SMB-Client-RCE-Privilege-Escalation-Exploit-Using-DNS-Poisoning-NTLM-Relay-RPC-Coercion - https://github.com/mverschu/CVE-2025-33073 - https://github.com/obscura-cert/CVE-2025-33073 +- https://github.com/EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073- +- https://github.com/SFRDevelopment/windows-smb-vulnerability-framework-cve-2025-33073 +- https://github.com/irjfifndn-prog/Blackash-CVE-2025-33073 +- https://github.com/matejsmycka/CVE-2025-33073-checker +- https://github.com/uziii2208/CVE-2025-33073 #### ExploitDB - https://www.exploit-db.com/exploits/52330 diff --git a/cves/2025/CVE-2025-34028.md b/cves/2025/CVE-2025-34028.md index cca85073701..c43e2e9e76b 100644 --- a/cves/2025/CVE-2025-34028.md +++ b/cves/2025/CVE-2025-34028.md @@ -18,6 +18,7 @@ The Commvault Command Center Innovation Release allows an unauthenticated actor #### Github - https://github.com/Mattb709/CVE-2025-34028-PoC-Commvault-RCE - https://github.com/becrevex/Commvault-CVE-2025-34028 +- https://github.com/watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34028.yaml diff --git a/cves/2025/CVE-2025-34037.md b/cves/2025/CVE-2025-34037.md index 1c94aff3235..12766527370 100644 --- a/cves/2025/CVE-2025-34037.md +++ b/cves/2025/CVE-2025-34037.md @@ -24,7 +24,7 @@ An OS command injection vulnerability exists in various models of E-Series Links - https://www.exploit-db.com/exploits/31683 #### Github -No PoCs found on GitHub currently. +- https://github.com/Taxanehh/CVE-2025-34037 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_themoon_exec.rb diff --git a/cves/2025/CVE-2025-34077.md b/cves/2025/CVE-2025-34077.md index 3f08c3e82d4..128ed2b4f7b 100644 --- a/cves/2025/CVE-2025-34077.md +++ b/cves/2025/CVE-2025-34077.md @@ -17,6 +17,7 @@ An authentication bypass vulnerability exists in the WordPress Pie Register plug #### Github - https://github.com/0xgh057r3c0n/CVE-2025-34077 - https://github.com/MrjHaxcore/CVE-2025-34077 +- https://github.com/salimelh94/Web-Penetration-Test #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34077.yaml diff --git a/cves/2025/CVE-2025-34096.md b/cves/2025/CVE-2025-34096.md index d789e651ee8..75f8e287ff7 100644 --- a/cves/2025/CVE-2025-34096.md +++ b/cves/2025/CVE-2025-34096.md @@ -14,7 +14,7 @@ A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Ser - https://www.exploit-db.com/exploits/42186 #### Github -No PoCs found on GitHub currently. +- https://github.com/TheMalwareGuardian/CVE-2025-34096 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/easyfilesharing_post.rb diff --git a/cves/2025/CVE-2025-34157.md b/cves/2025/CVE-2025-34157.md index d24bb804bfa..ac19d7bb8a7 100644 --- a/cves/2025/CVE-2025-34157.md +++ b/cves/2025/CVE-2025-34157.md @@ -14,5 +14,5 @@ Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-sit - https://github.com/Eyodav/CVE-2025-34157 #### Github -No PoCs found on GitHub currently. +- https://github.com/Eyodav/CVE-2025-34157 diff --git a/cves/2025/CVE-2025-34227.md b/cves/2025/CVE-2025-34227.md index fc76dbd8d08..cde09e98953 100644 --- a/cves/2025/CVE-2025-34227.md +++ b/cves/2025/CVE-2025-34227.md @@ -13,5 +13,5 @@ Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerabi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/mcorybillington/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard diff --git a/cves/2025/CVE-2025-3464.md b/cves/2025/CVE-2025-3464.md index 6a33f9bc782..7ede8e1ec06 100644 --- a/cves/2025/CVE-2025-3464.md +++ b/cves/2025/CVE-2025-3464.md @@ -14,5 +14,5 @@ A race condition vulnerability exists in Armoury Crate. This vulnerability arise - https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2150 #### Github -No PoCs found on GitHub currently. +- https://github.com/jeffaf/CVE-2025-3464-AsIO3-LPE diff --git a/cves/2025/CVE-2025-3616.md b/cves/2025/CVE-2025-3616.md index 8b7bd1f04ad..19820e6220e 100644 --- a/cves/2025/CVE-2025-3616.md +++ b/cves/2025/CVE-2025-3616.md @@ -13,4 +13,4 @@ The Greenshift – animation and page builder blocks plugin for WordPress is vul No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/b4d-53ct0r/CVE-2025-3616 diff --git a/cves/2025/CVE-2025-36911.md b/cves/2025/CVE-2025-36911.md index 1aa4fa33ccf..8548634086d 100644 --- a/cves/2025/CVE-2025-36911.md +++ b/cves/2025/CVE-2025-36911.md @@ -14,3 +14,8 @@ No PoCs from references. #### Github - https://github.com/xarlord/btsec-testtool +- https://github.com/Athexblackhat/BLUE-SPY +- https://github.com/PentHertz/CVE-2025-36911-exploit +- https://github.com/PivotChip/FrostedFastPair +- https://github.com/SteamPunk424/CVE-2025-36911-Wisper_Pair_Target_Finder +- https://github.com/aalex954/whisperpair-poc-tool diff --git a/cves/2025/CVE-2025-38001.md b/cves/2025/CVE-2025-38001.md index be2e209835b..363effd9d8a 100644 --- a/cves/2025/CVE-2025-38001.md +++ b/cves/2025/CVE-2025-38001.md @@ -17,4 +17,6 @@ No PoCs from references. #### Github - https://github.com/0xdevil/CVE-2025-38001 - https://github.com/khoatran107/cve-2025-38001 +- https://github.com/Jevil36239/CVE-2025-38001 +- https://github.com/ngobao2002/CVE-2025-38001-test diff --git a/cves/2025/CVE-2025-38089.md b/cves/2025/CVE-2025-38089.md index 66b8af90adf..fbe01ac6798 100644 --- a/cves/2025/CVE-2025-38089.md +++ b/cves/2025/CVE-2025-38089.md @@ -17,5 +17,5 @@ In the Linux kernel, the following vulnerability has been resolved:sunrpc: handl - https://www.openwall.com/lists/oss-security/2025/07/02/2 #### Github -No PoCs found on GitHub currently. +- https://github.com/keymaker-arch/NFSundown diff --git a/cves/2025/CVE-2025-38352.md b/cves/2025/CVE-2025-38352.md index 4c42f4cc390..9562c7b98cd 100644 --- a/cves/2025/CVE-2025-38352.md +++ b/cves/2025/CVE-2025-38352.md @@ -16,5 +16,8 @@ In the Linux kernel, the following vulnerability has been resolved:posix-cpu-tim No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AnalyticETH/chronomaly-webos +- https://github.com/Crime2/poc-CVE-2025-38352 +- https://github.com/farazsth98/chronomaly +- https://github.com/farazsth98/poc-CVE-2025-38352 diff --git a/cves/2025/CVE-2025-38501.md b/cves/2025/CVE-2025-38501.md index 3ff33145c96..590038e6a82 100644 --- a/cves/2025/CVE-2025-38501.md +++ b/cves/2025/CVE-2025-38501.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: limit - https://github.com/keymaker-arch/KSMBDrain #### Github -No PoCs found on GitHub currently. +- https://github.com/keymaker-arch/KSMBDrain diff --git a/cves/2025/CVE-2025-38561.md b/cves/2025/CVE-2025-38561.md index ab314a6bde3..81261ba6767 100644 --- a/cves/2025/CVE-2025-38561.md +++ b/cves/2025/CVE-2025-38561.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix Pr No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/toshithh/CVE-2025-38561 diff --git a/cves/2025/CVE-2025-39247.md b/cves/2025/CVE-2025-39247.md index 835aae3892b..a57ef4ca7af 100644 --- a/cves/2025/CVE-2025-39247.md +++ b/cves/2025/CVE-2025-39247.md @@ -14,5 +14,5 @@ There is an Access Control Vulnerability in some HikCentral Professional version No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Sita-Technologies/CVE-2025-39247 diff --git a/cves/2025/CVE-2025-39682.md b/cves/2025/CVE-2025-39682.md index 0cc47fa17a0..cf282a7c4d2 100644 --- a/cves/2025/CVE-2025-39682.md +++ b/cves/2025/CVE-2025-39682.md @@ -15,5 +15,5 @@ In the Linux kernel, the following vulnerability has been resolved:tls: fix hand No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/khoatran107/cve-2025-39682 diff --git a/cves/2025/CVE-2025-4123.md b/cves/2025/CVE-2025-4123.md index 0dac8db54f3..121d87c1d15 100644 --- a/cves/2025/CVE-2025-4123.md +++ b/cves/2025/CVE-2025-4123.md @@ -24,6 +24,7 @@ No PoCs from references. - https://github.com/NightBloodz/CVE-2025-4123 - https://github.com/punitdarji/Grafana-cve-2025-4123 - https://github.com/ynsmroztas/CVE-2025-4123-Exploit-Tool-Grafana- +- https://github.com/MorphyKutay/CVE-2025-4123-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4123.yaml diff --git a/cves/2025/CVE-2025-41242.md b/cves/2025/CVE-2025-41242.md index e83e313fbae..8686166ce24 100644 --- a/cves/2025/CVE-2025-41242.md +++ b/cves/2025/CVE-2025-41242.md @@ -19,3 +19,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41242.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/spring/CVE-2025-41242 diff --git a/cves/2025/CVE-2025-4138.md b/cves/2025/CVE-2025-4138.md index 2179541b93d..312ca21ad8e 100644 --- a/cves/2025/CVE-2025-4138.md +++ b/cves/2025/CVE-2025-4138.md @@ -18,5 +18,9 @@ Allows the extraction filter to be ignored, allowing symlink targets to point ou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/DesertDemons/CVE-2025-4138-4517-POC +- https://github.com/d3vn0mi/CVE-2025-4138-POC +- https://github.com/kyakei/CVE-2025-4138-poc +- https://github.com/localh0ste/CVE-2025-4138 +- https://github.com/thefizzyfish/CVE-2025-4138_tarfile_filter_bypass diff --git a/cves/2025/CVE-2025-4322.md b/cves/2025/CVE-2025-4322.md index dbf66d2799d..49ea5c31224 100644 --- a/cves/2025/CVE-2025-4322.md +++ b/cves/2025/CVE-2025-4322.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/IndominusRexes/CVE-2025-4322-Exploit - https://github.com/Yucaerin/CVE-2025-4322 +- https://github.com/gmh5225/Blackash-CVE-2025-4322 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4322.yaml diff --git a/cves/2025/CVE-2025-43300.md b/cves/2025/CVE-2025-43300.md index 9e269fa8229..b93162d1472 100644 --- a/cves/2025/CVE-2025-43300.md +++ b/cves/2025/CVE-2025-43300.md @@ -18,4 +18,6 @@ An out-of-bounds write issue was addressed with improved bounds checking. This i - https://github.com/PwnToday/CVE-2025-43300 - https://github.com/hunters-sec/CVE-2025-43300 - https://github.com/veniversum/cve-2025-43300 +- https://github.com/Dark-life944/CVE-2025 +- https://github.com/ticofookfook/CVE-2025-43300 diff --git a/cves/2025/CVE-2025-4334.md b/cves/2025/CVE-2025-4334.md index 986791581e5..4eab51c201a 100644 --- a/cves/2025/CVE-2025-4334.md +++ b/cves/2025/CVE-2025-4334.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/0xgh057r3c0n/CVE-2025-4334 - https://github.com/Nxploited/CVE-2025-4334 +- https://github.com/vinodwick/CVE-2025-4334 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4334.yaml diff --git a/cves/2025/CVE-2025-4336.md b/cves/2025/CVE-2025-4336.md index 08e15d01ff5..f25e26b856c 100644 --- a/cves/2025/CVE-2025-4336.md +++ b/cves/2025/CVE-2025-4336.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-4336 #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-4336 diff --git a/cves/2025/CVE-2025-43564.md b/cves/2025/CVE-2025-43564.md index b3a5ef8bfa0..5e974b2b14e 100644 --- a/cves/2025/CVE-2025-43564.md +++ b/cves/2025/CVE-2025-43564.md @@ -13,5 +13,5 @@ ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Impr No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2025-43564-tomcat_put_rce_reproduction diff --git a/cves/2025/CVE-2025-43929.md b/cves/2025/CVE-2025-43929.md index 1c4e289ac5f..c610f260dc0 100644 --- a/cves/2025/CVE-2025-43929.md +++ b/cves/2025/CVE-2025-43929.md @@ -13,5 +13,5 @@ open_actions.py in kitty before 0.41.0 does not ask for user confirmation before - https://github.com/0xBenCantCode/CVE-2025-43929 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xBenCantCode/CVE-2025-43929 diff --git a/cves/2025/CVE-2025-4396.md b/cves/2025/CVE-2025-4396.md index 073c210ff6f..426436e234b 100644 --- a/cves/2025/CVE-2025-4396.md +++ b/cves/2025/CVE-2025-4396.md @@ -14,7 +14,7 @@ The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-ba No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sup3rDav3/CVE-2025-4396 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4396.yaml diff --git a/cves/2025/CVE-2025-43960.md b/cves/2025/CVE-2025-43960.md index dee44367c84..f99d64bcd49 100644 --- a/cves/2025/CVE-2025-43960.md +++ b/cves/2025/CVE-2025-43960.md @@ -13,5 +13,5 @@ Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memor - https://github.com/far00t01/CVE-2025-43960 #### Github -No PoCs found on GitHub currently. +- https://github.com/far00t01/CVE-2025-43960 diff --git a/cves/2025/CVE-2025-4404.md b/cves/2025/CVE-2025-4404.md index 3696e260c18..d2be2734cbd 100644 --- a/cves/2025/CVE-2025-4404.md +++ b/cves/2025/CVE-2025-4404.md @@ -30,4 +30,5 @@ No PoCs from references. #### Github - https://github.com/Cyxow/CVE-2025-4404-POC +- https://github.com/Im10n/CVE-2025-4404-POC diff --git a/cves/2025/CVE-2025-44608.md b/cves/2025/CVE-2025-44608.md index 64099f60769..c885e5dbc69 100644 --- a/cves/2025/CVE-2025-44608.md +++ b/cves/2025/CVE-2025-44608.md @@ -13,5 +13,5 @@ CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulner - https://github.com/mr-xmen786/CVE-2025-44608 #### Github -No PoCs found on GitHub currently. +- https://github.com/mr-xmen786/CVE-2025-44608 diff --git a/cves/2025/CVE-2025-44998.md b/cves/2025/CVE-2025-44998.md index e5eb30fc756..f7955cc8699 100644 --- a/cves/2025/CVE-2025-44998.md +++ b/cves/2025/CVE-2025-44998.md @@ -13,5 +13,5 @@ A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemana - https://github.com/l8BL/CVE-2025-44998 #### Github -No PoCs found on GitHub currently. +- https://github.com/l8BL/CVE-2025-44998 diff --git a/cves/2025/CVE-2025-4517.md b/cves/2025/CVE-2025-4517.md index 82d73308f42..5584c40ba61 100644 --- a/cves/2025/CVE-2025-4517.md +++ b/cves/2025/CVE-2025-4517.md @@ -19,4 +19,12 @@ No PoCs from references. #### Github - https://github.com/GarryWhite109909/Graduation-Project +- https://github.com/0xDTC/CVE-2025-4517-tarfile-PATH_MAX-bypass +- https://github.com/AnimePrincess420/CVE-2025-4517-PoC +- https://github.com/AzureADTrent/CVE-2025-4517-POC +- https://github.com/Rohitberiwala/PyPath-Escape-CVE-2025-4517-Exploit-Research +- https://github.com/StealthByte0/CVE-2025-4517-poc +- https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers +- https://github.com/estebanzarate/CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC +- https://github.com/kerburenthusiasm/CVE-2025-4517-PoC diff --git a/cves/2025/CVE-2025-45619.md b/cves/2025/CVE-2025-45619.md index 10eec4a45b8..c037bf5d6de 100644 --- a/cves/2025/CVE-2025-45619.md +++ b/cves/2025/CVE-2025-45619.md @@ -13,5 +13,5 @@ An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to ex - https://github.com/weedl/CVE-2025-45619 #### Github -No PoCs found on GitHub currently. +- https://github.com/weedl/CVE-2025-45619 diff --git a/cves/2025/CVE-2025-45805.md b/cves/2025/CVE-2025-45805.md index ef6fc0cbdbd..7da1b7adf46 100644 --- a/cves/2025/CVE-2025-45805.md +++ b/cves/2025/CVE-2025-45805.md @@ -13,5 +13,5 @@ In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/mohammed-alsaqqaf/CVE-2025-45805 diff --git a/cves/2025/CVE-2025-45809.md b/cves/2025/CVE-2025-45809.md index 4d3db1ebff1..e4a06f20075 100644 --- a/cves/2025/CVE-2025-45809.md +++ b/cves/2025/CVE-2025-45809.md @@ -13,5 +13,5 @@ BerriAI litellm v1.65.4 was discovered to contain a SQL injection vulnerability - https://github.com/shadia0/Patienc/blob/main/litellm/SQL_injection.md #### Github -No PoCs found on GitHub currently. +- https://github.com/learner202649/CVE-2025-45809-PoC diff --git a/cves/2025/CVE-2025-4602.md b/cves/2025/CVE-2025-4602.md index bf4de8694ad..b35c01f85bc 100644 --- a/cves/2025/CVE-2025-4602.md +++ b/cves/2025/CVE-2025-4602.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-4602/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-4602 diff --git a/cves/2025/CVE-2025-4603.md b/cves/2025/CVE-2025-4603.md index deab5cbd767..459cb9b38cd 100644 --- a/cves/2025/CVE-2025-4603.md +++ b/cves/2025/CVE-2025-4603.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-4603/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-4603 diff --git a/cves/2025/CVE-2025-46041.md b/cves/2025/CVE-2025-46041.md index 4c345daa345..1d95d64acc1 100644 --- a/cves/2025/CVE-2025-46041.md +++ b/cves/2025/CVE-2025-46041.md @@ -13,7 +13,7 @@ A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows a - https://github.com/binneko/CVE-2025-46041 #### Github -No PoCs found on GitHub currently. +- https://github.com/binneko/CVE-2025-46041 #### ExploitDB - https://www.exploit-db.com/exploits/52327 diff --git a/cves/2025/CVE-2025-46157.md b/cves/2025/CVE-2025-46157.md index b4f495333fe..89bb52f306a 100644 --- a/cves/2025/CVE-2025-46157.md +++ b/cves/2025/CVE-2025-46157.md @@ -13,5 +13,5 @@ An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitra - https://github.com/morphine009/CVE-2025-46157 #### Github -No PoCs found on GitHub currently. +- https://github.com/morphine009/CVE-2025-46157 diff --git a/cves/2025/CVE-2025-46173.md b/cves/2025/CVE-2025-46173.md index 240f9b57aef..7420ecf7bbc 100644 --- a/cves/2025/CVE-2025-46173.md +++ b/cves/2025/CVE-2025-46173.md @@ -13,5 +13,5 @@ code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scrip - https://github.com/pruthuraut/CVE-2025-46173 #### Github -No PoCs found on GitHub currently. +- https://github.com/pruthuraut/CVE-2025-46173 diff --git a/cves/2025/CVE-2025-46203.md b/cves/2025/CVE-2025-46203.md index 038bdf6896a..67974bdffbd 100644 --- a/cves/2025/CVE-2025-46203.md +++ b/cves/2025/CVE-2025-46203.md @@ -13,5 +13,5 @@ An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privilege - https://github.com/spbavarva/CVE-2025-46203 #### Github -No PoCs found on GitHub currently. +- https://github.com/spbavarva/CVE-2025-46203 diff --git a/cves/2025/CVE-2025-46204.md b/cves/2025/CVE-2025-46204.md index d2325e6e4bf..8bc539639ab 100644 --- a/cves/2025/CVE-2025-46204.md +++ b/cves/2025/CVE-2025-46204.md @@ -13,5 +13,5 @@ An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privilege - https://github.com/spbavarva/CVE-2025-46204 #### Github -No PoCs found on GitHub currently. +- https://github.com/spbavarva/CVE-2025-46204 diff --git a/cves/2025/CVE-2025-4632.md b/cves/2025/CVE-2025-4632.md index 0e8ca08001a..178c3ac3d2b 100644 --- a/cves/2025/CVE-2025-4632.md +++ b/cves/2025/CVE-2025-4632.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/MantisToboggan-git/CVE-2025-4632-POC +- https://github.com/digitalsurgn/CVE-2025-4632_POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4632.yaml diff --git a/cves/2025/CVE-2025-46701.md b/cves/2025/CVE-2025-46701.md index 47bce45558c..28cec68a2d0 100644 --- a/cves/2025/CVE-2025-46701.md +++ b/cves/2025/CVE-2025-46701.md @@ -18,4 +18,5 @@ No PoCs from references. #### Github - https://github.com/gregk4sec/CVE-2025-46701 +- https://github.com/gregk4sec/CVE-2025-46701-o diff --git a/cves/2025/CVE-2025-46721.md b/cves/2025/CVE-2025-46721.md index 31721c2a141..495546af6b9 100644 --- a/cves/2025/CVE-2025-46721.md +++ b/cves/2025/CVE-2025-46721.md @@ -14,5 +14,5 @@ nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vuln - https://github.com/justinas/nosurf-cve-2025-46721 #### Github -No PoCs found on GitHub currently. +- https://github.com/justinas/nosurf-cve-2025-46721 diff --git a/cves/2025/CVE-2025-46822.md b/cves/2025/CVE-2025-46822.md index 7c866bbf644..579c03adb45 100644 --- a/cves/2025/CVE-2025-46822.md +++ b/cves/2025/CVE-2025-46822.md @@ -14,6 +14,7 @@ OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code #### Github - https://github.com/d3sca/CVE-2025-46822 +- https://github.com/HORKimhab/CVE-2025-46822 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46822.yaml diff --git a/cves/2025/CVE-2025-47227.md b/cves/2025/CVE-2025-47227.md index a75720a6b93..3930c06bebd 100644 --- a/cves/2025/CVE-2025-47227.md +++ b/cves/2025/CVE-2025-47227.md @@ -13,5 +13,6 @@ In the Production Environment extension in Netmake ScriptCase through 9.12.006 ( - https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228 #### Github -No PoCs found on GitHub currently. +- https://github.com/Outs1d3r-Net/CVE-2025-47227 +- https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228 diff --git a/cves/2025/CVE-2025-47273.md b/cves/2025/CVE-2025-47273.md index 2eeefb59e36..03e13b23129 100644 --- a/cves/2025/CVE-2025-47273.md +++ b/cves/2025/CVE-2025-47273.md @@ -14,5 +14,6 @@ setuptools is a package that allows users to download, build, install, upgrade, - https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf #### Github -No PoCs found on GitHub currently. +- https://github.com/AliElKhatteb/CVE-2025-47273-POC +- https://github.com/ahmedreda38/CVE-2025-47273-PoC diff --git a/cves/2025/CVE-2025-47445.md b/cves/2025/CVE-2025-47445.md index ab849faf2fc..0a8c5fc128d 100644 --- a/cves/2025/CVE-2025-47445.md +++ b/cves/2025/CVE-2025-47445.md @@ -13,7 +13,7 @@ Relative Path Traversal vulnerability in Themewinter Eventin allows Path Travers No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/inverterad/CVE-2025-47445-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47445.yaml diff --git a/cves/2025/CVE-2025-47549.md b/cves/2025/CVE-2025-47549.md index a664f4670aa..4b96a456e9b 100644 --- a/cves/2025/CVE-2025-47549.md +++ b/cves/2025/CVE-2025-47549.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF a - https://ryankozak.com/posts/cve-2025-47549/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-47549 diff --git a/cves/2025/CVE-2025-47550.md b/cves/2025/CVE-2025-47550.md index 1e44fd68d0c..d18ee5a6cac 100644 --- a/cves/2025/CVE-2025-47550.md +++ b/cves/2025/CVE-2025-47550.md @@ -14,4 +14,4 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instan - https://ryankozak.com/posts/cve-2025-47550/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-47550 diff --git a/cves/2025/CVE-2025-47812.md b/cves/2025/CVE-2025-47812.md index fe4f542a6eb..e5d2058465a 100644 --- a/cves/2025/CVE-2025-47812.md +++ b/cves/2025/CVE-2025-47812.md @@ -25,6 +25,15 @@ In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0 - https://github.com/pevinkumar10/CVE-2025-47812 - https://github.com/r0otk3r/CVE-2025-47812 - https://github.com/rxerium/CVE-2025-47812 +- https://github.com/0xS4N4TG/CVE-2025-47812 +- https://github.com/0xjuarez/CVE-2025-47812 +- https://github.com/H3XploR/Exploit_CVE-2025-47812 +- https://github.com/Majdae/CVE-2025-47812-Research +- https://github.com/dkstar11q/Blackash-CVE-2025-47812 +- https://github.com/estebanzarate/CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC +- https://github.com/havbay/CVE-2025-47812-PoC +- https://github.com/popyue/CVE-2025-47812 +- https://github.com/shadowgit30/CVE-2025-47812 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47812.yaml diff --git a/cves/2025/CVE-2025-4796.md b/cves/2025/CVE-2025-4796.md index 986817e36c1..adf5cc7d1ca 100644 --- a/cves/2025/CVE-2025-4796.md +++ b/cves/2025/CVE-2025-4796.md @@ -13,4 +13,5 @@ The Eventin plugin for WordPress is vulnerable to privilege escalation via accou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AnotherSec/CVE-2025-4796 +- https://github.com/Nxploited/CVE-2025-4796 diff --git a/cves/2025/CVE-2025-47962.md b/cves/2025/CVE-2025-47962.md index 0bc324beb0d..016c087eabd 100644 --- a/cves/2025/CVE-2025-47962.md +++ b/cves/2025/CVE-2025-47962.md @@ -13,5 +13,5 @@ Improper access control in Windows SDK allows an authorized attacker to elevate No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/q1uf3ng/CVE-2025-47962-POC diff --git a/cves/2025/CVE-2025-47987.md b/cves/2025/CVE-2025-47987.md index a57e3d83e7d..ce6b8d7ae38 100644 --- a/cves/2025/CVE-2025-47987.md +++ b/cves/2025/CVE-2025-47987.md @@ -53,6 +53,7 @@ No PoCs from references. #### Github - https://github.com/Kryptoenix/CVE-2025-47987_PoC +- https://github.com/kaleth4/CVE-2025-47987 #### ExploitDB - https://www.exploit-db.com/exploits/52541 diff --git a/cves/2025/CVE-2025-4802.md b/cves/2025/CVE-2025-4802.md index 56b2b40b6b7..7f7e8c2596c 100644 --- a/cves/2025/CVE-2025-4802.md +++ b/cves/2025/CVE-2025-4802.md @@ -13,5 +13,5 @@ Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Librar No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Betim-Hodza/CVE-2025-4802-Proof-of-Concept diff --git a/cves/2025/CVE-2025-48384.md b/cves/2025/CVE-2025-48384.md index 831b8caa1f8..dfe19f3fe5d 100644 --- a/cves/2025/CVE-2025-48384.md +++ b/cves/2025/CVE-2025-48384.md @@ -56,4 +56,7 @@ No PoCs from references. - https://github.com/testdjshan/CVE-2025-48384 - https://github.com/testtianmaaaa/CVE-2025-48384 - https://github.com/vinieger/vinieger-CVE-2025-48384-Dockerfile +- https://github.com/MarcoTondolo/cve-2025-48384-poc +- https://github.com/vignesh21-git/CVE-2025-48384 +- https://github.com/zr0n/CVE-2025-48384-main diff --git a/cves/2025/CVE-2025-48561.md b/cves/2025/CVE-2025-48561.md index 19c895ad6ed..34f1a1b6b92 100644 --- a/cves/2025/CVE-2025-48561.md +++ b/cves/2025/CVE-2025-48561.md @@ -16,5 +16,5 @@ In multiple locations, there is a possible way to access data displayed on the s - https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6 #### Github -No PoCs found on GitHub currently. +- https://github.com/demining/Pixnapping-Attack-on-Android diff --git a/cves/2025/CVE-2025-48734.md b/cves/2025/CVE-2025-48734.md index de94f1e461e..3638dfa6031 100644 --- a/cves/2025/CVE-2025-48734.md +++ b/cves/2025/CVE-2025-48734.md @@ -15,5 +15,5 @@ Improper Access Control vulnerability in Apache Commons.A special BeanIntrospect No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/h3raklez/CVE-2025-48734 diff --git a/cves/2025/CVE-2025-48799.md b/cves/2025/CVE-2025-48799.md index 5126f17a4c2..1cfdba0c0e6 100644 --- a/cves/2025/CVE-2025-48799.md +++ b/cves/2025/CVE-2025-48799.md @@ -31,4 +31,5 @@ Improper link resolution before file access ('link following') in Windows Update #### Github - https://github.com/Wh04m1001/CVE-2025-48799 - https://github.com/painoob/CVE-2025-48799 +- https://github.com/gmh5225/CVE-2025-48799- diff --git a/cves/2025/CVE-2025-48827.md b/cves/2025/CVE-2025-48827.md index e9a7576db8a..ebf7d202cd5 100644 --- a/cves/2025/CVE-2025-48827.md +++ b/cves/2025/CVE-2025-48827.md @@ -17,6 +17,7 @@ vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated use #### Github - https://github.com/0xgh057r3c0n/CVE-2025-48827 - https://github.com/wiseep/CVE-2025-48827 +- https://github.com/sh4den/CVE-2025-48827 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48827.yaml diff --git a/cves/2025/CVE-2025-49001.md b/cves/2025/CVE-2025-49001.md index f2a101e6565..5d785a44ac2 100644 --- a/cves/2025/CVE-2025-49001.md +++ b/cves/2025/CVE-2025-49001.md @@ -17,3 +17,6 @@ No PoCs found on GitHub currently. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49001.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/dataease/CVE-2025-49001 diff --git a/cves/2025/CVE-2025-49002.md b/cves/2025/CVE-2025-49002.md index f3f943c557b..3b8fcef4217 100644 --- a/cves/2025/CVE-2025-49002.md +++ b/cves/2025/CVE-2025-49002.md @@ -14,7 +14,8 @@ DataEase is an open source business intelligence and data visualization tool. Ve - https://github.com/dataease/dataease/security/advisories/GHSA-h7hj-4j78-cvc7 #### Github -No PoCs found on GitHub currently. +- https://github.com/Feng-Huang-0520/DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002 +- https://github.com/jiuzui129-arch/CVE-2025-49002 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49002.yaml diff --git a/cves/2025/CVE-2025-49091.md b/cves/2025/CVE-2025-49091.md index 889f29b4120..73e3098719e 100644 --- a/cves/2025/CVE-2025-49091.md +++ b/cves/2025/CVE-2025-49091.md @@ -14,5 +14,5 @@ KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. I - https://www.openwall.com/lists/oss-security/2025/06/10/5 #### Github -No PoCs found on GitHub currently. +- https://github.com/thefreestyleresearcher/CVE-2025-49091-Gajim-RCE diff --git a/cves/2025/CVE-2025-49113.md b/cves/2025/CVE-2025-49113.md index 692390b5cbd..184d7dbde5c 100644 --- a/cves/2025/CVE-2025-49113.md +++ b/cves/2025/CVE-2025-49113.md @@ -37,6 +37,8 @@ Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execu - https://github.com/punitdarji/roundcube-cve-2025-49113 - https://github.com/rasool13x/exploit-CVE-2025-49113 - https://github.com/rxerium/CVE-2025-49113 +- https://github.com/Evillm/CVE-2025-49113-PoC +- https://github.com/mooder1/CVE-2025-49113 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49113.yaml diff --git a/cves/2025/CVE-2025-49131.md b/cves/2025/CVE-2025-49131.md index 9e4531a6924..4481bba08cd 100644 --- a/cves/2025/CVE-2025-49131.md +++ b/cves/2025/CVE-2025-49131.md @@ -13,5 +13,5 @@ FastGPT is an open-source project that provides a platform for building, deployi - https://github.com/labring/FastGPT/security/advisories/GHSA-f3pf-r3g7-g895 #### Github -No PoCs found on GitHub currently. +- https://github.com/Wenura17125/cve-2025-49131-poc diff --git a/cves/2025/CVE-2025-49132.md b/cves/2025/CVE-2025-49132.md index 0db562c1b93..55067c28867 100644 --- a/cves/2025/CVE-2025-49132.md +++ b/cves/2025/CVE-2025-49132.md @@ -23,6 +23,23 @@ No PoCs from references. - https://github.com/nfoltc/CVE-2025-49132 - https://github.com/pxxdrobits/CVE-2025-49132 - https://github.com/qiaojojo/CVE-2025-49132_poc +- https://github.com/4nuxd/CVE-2025-49132 +- https://github.com/Ahmedf000/CVE-2025-49132_HTB_SEASON10 +- https://github.com/Pwndalf/CVE-2025-49132-PoC +- https://github.com/YoyoChaud/CVE-2025-49132 +- https://github.com/dollarboysushil/CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE- +- https://github.com/kerburenthusiasm/CVE-2025-49132-PoC +- https://github.com/malw0re/CVE-2025-49132-Mods +- https://github.com/matesz44/CVE-2025-49132 +- https://github.com/nik123-py/CVE-2025-49132_HTB_SEASON10 +- https://github.com/popyue/CVE-2025-49132 +- https://github.com/ramzihafiz/CVE-2025-49132 +- https://github.com/rippsec/CVE-2025-49132-PHP-PEAR +- https://github.com/scroollocker/CVE-2025-49132 +- https://github.com/str1keboo/CVE-2025-49132 +- https://github.com/symphony2colour/HTB-Pterodactyl-RCE-CVE-2025-49132 +- https://github.com/thealchimist86/CVE-2025-49132-Pterodactyl-Panel-RCE +- https://github.com/typicalsmc/CVE-2025-49132-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49132.yaml diff --git a/cves/2025/CVE-2025-49144.md b/cves/2025/CVE-2025-49144.md index 4faf5f4d731..63e134fbb1b 100644 --- a/cves/2025/CVE-2025-49144.md +++ b/cves/2025/CVE-2025-49144.md @@ -23,4 +23,5 @@ Notepad++ is a free and open-source source code editor. In versions 8.8.1 and pr - https://github.com/b0ySie7e/Notepad-8.8.1_CVE-2025-49144 - https://github.com/onniio/CVE-2025-49144 - https://github.com/timsonner/CVE-2025-49144-Research +- https://github.com/havertz2110/CVE-2025-49144-PoC diff --git a/cves/2025/CVE-2025-49493.md b/cves/2025/CVE-2025-49493.md index 8ce72f87415..f24d646443e 100644 --- a/cves/2025/CVE-2025-49493.md +++ b/cves/2025/CVE-2025-49493.md @@ -13,7 +13,7 @@ Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML Exte No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sh4den/CVE-2025-49493 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49493.yaml diff --git a/cves/2025/CVE-2025-49596.md b/cves/2025/CVE-2025-49596.md index 4d2410f6aa1..1d22e5263a1 100644 --- a/cves/2025/CVE-2025-49596.md +++ b/cves/2025/CVE-2025-49596.md @@ -14,6 +14,7 @@ The MCP inspector is a developer tool for testing and debugging MCP servers. Ver #### Github - https://github.com/ashiqrehan-21/MCP-Inspector-CVE-2025-49596 +- https://github.com/pppxo/CVE-2025-49596-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49596.yaml diff --git a/cves/2025/CVE-2025-49844.md b/cves/2025/CVE-2025-49844.md index 9dcb8d7c5dc..585b7b16ad6 100644 --- a/cves/2025/CVE-2025-49844.md +++ b/cves/2025/CVE-2025-49844.md @@ -15,6 +15,19 @@ No PoCs from references. #### Github - https://github.com/Zain3311/CVE-2025-49844 - https://github.com/alsyundawy/eradicate-zimbra-malware +- https://github.com/0xBlackash/CVE-2025-49844 +- https://github.com/Cilectiy/CVE-2025-49844 +- https://github.com/MiclelsonCN/CVE-2025-49844_POC +- https://github.com/angelusrivera/CVE-2025-49844 +- https://github.com/cc3305/CVE-2025-49844 +- https://github.com/dwisiswant0/CVE-2025-49844 +- https://github.com/elyasbassir/CVE-2025-49844 +- https://github.com/lastvocher/redis-CVE-2025-49844 +- https://github.com/open-flaw/CVE-2025-49844 +- https://github.com/pedrorichil/CVE-2025-49844 +- https://github.com/raminfp/redis_exploit +- https://github.com/saneki/cve-2025-49844 +- https://github.com/zbyszkok/CVE-2025-49844-RediShell-AI-made-Revshell #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-49844.yaml diff --git a/cves/2025/CVE-2025-50165.md b/cves/2025/CVE-2025-50165.md index 94556dc3c7c..f37517c488a 100644 --- a/cves/2025/CVE-2025-50165.md +++ b/cves/2025/CVE-2025-50165.md @@ -16,5 +16,5 @@ Untrusted pointer dereference in Microsoft Graphics Component allows an unauthor No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/encrypter15/CVE-2025-50165-x64-Exploit diff --git a/cves/2025/CVE-2025-50168.md b/cves/2025/CVE-2025-50168.md index a8aa994d735..89cf33d01ec 100644 --- a/cves/2025/CVE-2025-50168.md +++ b/cves/2025/CVE-2025-50168.md @@ -23,5 +23,5 @@ Access of resource using incompatible type ('type confusion') in Windows Win32K No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/D4m0n/CVE-2025-50168-pwn2own-berlin-2025 diff --git a/cves/2025/CVE-2025-50286.md b/cves/2025/CVE-2025-50286.md index 0e288de9377..94ab7d907c3 100644 --- a/cves/2025/CVE-2025-50286.md +++ b/cves/2025/CVE-2025-50286.md @@ -13,7 +13,8 @@ A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authen - https://github.com/binneko/CVE-2025-50286 #### Github -No PoCs found on GitHub currently. +- https://github.com/binneko/CVE-2025-50286 +- https://github.com/x1o3/CVE-2025-50286 #### ExploitDB - https://www.exploit-db.com/exploits/52402 diff --git a/cves/2025/CVE-2025-50460.md b/cves/2025/CVE-2025-50460.md index d4a0350d54f..ff980503192 100644 --- a/cves/2025/CVE-2025-50460.md +++ b/cves/2025/CVE-2025-50460.md @@ -13,5 +13,5 @@ A remote code execution (RCE) vulnerability exists in the ms-swift project versi - https://github.com/Anchor0221/CVE-2025-50460 #### Github -No PoCs found on GitHub currently. +- https://github.com/Anchor0221/CVE-2025-50460 diff --git a/cves/2025/CVE-2025-50461.md b/cves/2025/CVE-2025-50461.md index a8b2b7d0d38..73a37e6c0b2 100644 --- a/cves/2025/CVE-2025-50461.md +++ b/cves/2025/CVE-2025-50461.md @@ -13,5 +13,5 @@ A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically - https://github.com/Anchor0221/CVE-2025-50461 #### Github -No PoCs found on GitHub currently. +- https://github.com/Anchor0221/CVE-2025-50461 diff --git a/cves/2025/CVE-2025-50472.md b/cves/2025/CVE-2025-50472.md index 49e18d70147..c2fd68947b2 100644 --- a/cves/2025/CVE-2025-50472.md +++ b/cves/2025/CVE-2025-50472.md @@ -13,5 +13,5 @@ The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execu - https://github.com/xhjy2020/CVE-2025-50472 #### Github -No PoCs found on GitHub currently. +- https://github.com/Before-Rain/CVE-2025-50472 diff --git a/cves/2025/CVE-2025-50481.md b/cves/2025/CVE-2025-50481.md index 9cca1a5957c..73eaf924bfe 100644 --- a/cves/2025/CVE-2025-50481.md +++ b/cves/2025/CVE-2025-50481.md @@ -13,7 +13,7 @@ A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add o - https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS #### Github -No PoCs found on GitHub currently. +- https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS #### ExploitDB - https://www.exploit-db.com/exploits/52385 diff --git a/cves/2025/CVE-2025-5058.md b/cves/2025/CVE-2025-5058.md index 2204b0aac7e..2046ad29fe8 100644 --- a/cves/2025/CVE-2025-5058.md +++ b/cves/2025/CVE-2025-5058.md @@ -14,4 +14,4 @@ The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable t - https://ryankozak.com/posts/cve-2025-5058/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-5058 diff --git a/cves/2025/CVE-2025-50738.md b/cves/2025/CVE-2025-50738.md index 5f54aa1af66..993efd65a1b 100644 --- a/cves/2025/CVE-2025-50738.md +++ b/cves/2025/CVE-2025-50738.md @@ -13,7 +13,7 @@ The Memos application, up to version v0.24.3, allows for the embedding of markdo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/tiemio/CVE-2025-50738-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-50738.yaml diff --git a/cves/2025/CVE-2025-50754.md b/cves/2025/CVE-2025-50754.md index 3e7c63c6c5d..de09fe02866 100644 --- a/cves/2025/CVE-2025-50754.md +++ b/cves/2025/CVE-2025-50754.md @@ -13,5 +13,5 @@ Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerabili - https://github.com/furk4nyildiz/CVE-2025-50754-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/furk4nyildiz/CVE-2025-50754-PoC diff --git a/cves/2025/CVE-2025-50946.md b/cves/2025/CVE-2025-50946.md index 4220d29bad6..5fb1bacb620 100644 --- a/cves/2025/CVE-2025-50946.md +++ b/cves/2025/CVE-2025-50946.md @@ -13,5 +13,5 @@ OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/runt1me/cve-2025-50946 diff --git a/cves/2025/CVE-2025-51040.md b/cves/2025/CVE-2025-51040.md index 198e588fa35..837414b0f51 100644 --- a/cves/2025/CVE-2025-51040.md +++ b/cves/2025/CVE-2025-51040.md @@ -13,5 +13,5 @@ Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vuln - https://github.com/p0et08/Electrolink-FM-DAB-TV #### Github -No PoCs found on GitHub currently. +- https://github.com/p0et08/Electrolink-FM-DAB-TV diff --git a/cves/2025/CVE-2025-51458.md b/cves/2025/CVE-2025-51458.md index f0004d095a8..858c239557a 100644 --- a/cves/2025/CVE-2025-51458.md +++ b/cves/2025/CVE-2025-51458.md @@ -14,5 +14,5 @@ SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows - https://www.gecko.security/blog/cve-2025-51458 #### Github -No PoCs found on GitHub currently. +- https://github.com/q1uf3ng/CVE-2025-51458-exp diff --git a/cves/2025/CVE-2025-51471.md b/cves/2025/CVE-2025-51471.md index cf9d06c1fff..0d9b229342f 100644 --- a/cves/2025/CVE-2025-51471.md +++ b/cves/2025/CVE-2025-51471.md @@ -14,5 +14,5 @@ Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 - https://www.gecko.security/blog/cve-2025-51471 #### Github -No PoCs found on GitHub currently. +- https://github.com/ajtazer/CVE-2025-51471-POC diff --git a/cves/2025/CVE-2025-51482.md b/cves/2025/CVE-2025-51482.md index 5513035ed2f..c42c1c030be 100644 --- a/cves/2025/CVE-2025-51482.md +++ b/cves/2025/CVE-2025-51482.md @@ -15,6 +15,7 @@ Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_so #### Github - https://github.com/Kai-One001/Letta-CVE-2025-51482-RCE +- https://github.com/c0gnit00/CVE-2024-51482 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51482.yaml diff --git a/cves/2025/CVE-2025-51529.md b/cves/2025/CVE-2025-51529.md index e103e0e8679..fdabef2f71e 100644 --- a/cves/2025/CVE-2025-51529.md +++ b/cves/2025/CVE-2025-51529.md @@ -13,5 +13,5 @@ Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cooki - https://github.com/piotrmaciejbednarski/CVE-2025-51529 #### Github -No PoCs found on GitHub currently. +- https://github.com/piotrmaciejbednarski/CVE-2025-51529 diff --git a/cves/2025/CVE-2025-51586.md b/cves/2025/CVE-2025-51586.md index 87d926d7321..249d0e45308 100644 --- a/cves/2025/CVE-2025-51586.md +++ b/cves/2025/CVE-2025-51586.md @@ -13,7 +13,7 @@ An issue was discoverd in file controllers/admin/AdminLoginController.php in Pre - https://maxime-morel.github.io/advisories/2025/CVE-2025-51586.md #### Github -No PoCs found on GitHub currently. +- https://github.com/7h30th3r0n3/CVE-2025-51586-PrestaShop-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51586.yaml diff --git a/cves/2025/CVE-2025-51858.md b/cves/2025/CVE-2025-51858.md index 400a6f161cd..2bc8e73a458 100644 --- a/cves/2025/CVE-2025-51858.md +++ b/cves/2025/CVE-2025-51858.md @@ -13,5 +13,5 @@ Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025- - https://github.com/Secsys-FDU/CVE-2025-51858 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51858 diff --git a/cves/2025/CVE-2025-51862.md b/cves/2025/CVE-2025-51862.md index 8cdd0e5c285..e1cbd824435 100644 --- a/cves/2025/CVE-2025-51862.md +++ b/cves/2025/CVE-2025-51862.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) t - https://github.com/Secsys-FDU/CVE-2025-51862 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51862 diff --git a/cves/2025/CVE-2025-51865.md b/cves/2025/CVE-2025-51865.md index 7f5aa3fe0e2..8865eced1ec 100644 --- a/cves/2025/CVE-2025-51865.md +++ b/cves/2025/CVE-2025-51865.md @@ -13,5 +13,5 @@ Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 - https://github.com/Secsys-FDU/CVE-2025-51865 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51865 diff --git a/cves/2025/CVE-2025-51867.md b/cves/2025/CVE-2025-51867.md index db9c1ee204e..0fbc30f8d8d 100644 --- a/cves/2025/CVE-2025-51867.md +++ b/cves/2025/CVE-2025-51867.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfic - https://github.com/Secsys-FDU/CVE-2025-51867 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51867 diff --git a/cves/2025/CVE-2025-51868.md b/cves/2025/CVE-2025-51868.md index aac84c0866c..05f5a0cfa18 100644 --- a/cves/2025/CVE-2025-51868.md +++ b/cves/2025/CVE-2025-51868.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v - https://github.com/Secsys-FDU/CVE-2025-51868 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51868 diff --git a/cves/2025/CVE-2025-51869.md b/cves/2025/CVE-2025-51869.md index 5d92f668eef..e22821067c8 100644 --- a/cves/2025/CVE-2025-51869.md +++ b/cves/2025/CVE-2025-51869.md @@ -13,5 +13,5 @@ Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 a - https://github.com/Secsys-FDU/CVE-2025-51869 #### Github -No PoCs found on GitHub currently. +- https://github.com/Secsys-FDU/CVE-2025-51869 diff --git a/cves/2025/CVE-2025-52289.md b/cves/2025/CVE-2025-52289.md index 2edb78eaaf7..94f39327db7 100644 --- a/cves/2025/CVE-2025-52289.md +++ b/cves/2025/CVE-2025-52289.md @@ -13,5 +13,5 @@ A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly reg - https://github.com/Madhav-Bhardwaj/CVE-2025-52289 #### Github -No PoCs found on GitHub currently. +- https://github.com/Madhav-Bhardwaj/CVE-2025-52289 diff --git a/cves/2025/CVE-2025-52488.md b/cves/2025/CVE-2025-52488.md index d0b28770b3f..08cee7f83ff 100644 --- a/cves/2025/CVE-2025-52488.md +++ b/cves/2025/CVE-2025-52488.md @@ -13,7 +13,7 @@ DNN (formerly DotNetNuke) is an open-source web content management platform (CMS No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sh4den/CVE-2025-52488 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52488.yaml diff --git a/cves/2025/CVE-2025-52689.md b/cves/2025/CVE-2025-52689.md index a01c0bbb663..2dae277949b 100644 --- a/cves/2025/CVE-2025-52689.md +++ b/cves/2025/CVE-2025-52689.md @@ -18,5 +18,5 @@ Successful exploitation of the vulnerability could allow an unauthenticated atta - https://github.com/UltimateHG/CVE-2025-52689-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/UltimateHG/CVE-2025-52689-PoC diff --git a/cves/2025/CVE-2025-52913.md b/cves/2025/CVE-2025-52913.md index 2d0ebfa2aad..f00d9c83902 100644 --- a/cves/2025/CVE-2025-52913.md +++ b/cves/2025/CVE-2025-52913.md @@ -13,5 +13,5 @@ A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiColl No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/pgaSUS99/PoC-CVE-2025-52913 diff --git a/cves/2025/CVE-2025-52970.md b/cves/2025/CVE-2025-52970.md index b12403278b6..7bf1407f434 100644 --- a/cves/2025/CVE-2025-52970.md +++ b/cves/2025/CVE-2025-52970.md @@ -18,6 +18,7 @@ A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, #### Github - https://github.com/34zY/CVE-2025-52970 - https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass +- https://github.com/imbas007/POC-CVE-2025-52970 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52970.yaml diff --git a/cves/2025/CVE-2025-53020.md b/cves/2025/CVE-2025-53020.md index 2847d7d6213..331bf2b9f69 100644 --- a/cves/2025/CVE-2025-53020.md +++ b/cves/2025/CVE-2025-53020.md @@ -13,5 +13,5 @@ Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Ser No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/galbarnahum/CVE-2025-53020-PoC diff --git a/cves/2025/CVE-2025-53367.md b/cves/2025/CVE-2025-53367.md index 22e9f28d601..516474b348c 100644 --- a/cves/2025/CVE-2025-53367.md +++ b/cves/2025/CVE-2025-53367.md @@ -19,4 +19,5 @@ DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing #### Github - https://github.com/kevinbackhouse/DjVuLibre-poc-CVE-2025-53367 +- https://github.com/ThePhykon/CVE-2025-53367-POC diff --git a/cves/2025/CVE-2025-53558.md b/cves/2025/CVE-2025-53558.md index 7619e3b8c97..3cfceb4d6cd 100644 --- a/cves/2025/CVE-2025-53558.md +++ b/cves/2025/CVE-2025-53558.md @@ -15,7 +15,7 @@ ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/houqe/POC_CVE-2025-53558 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53558.yaml diff --git a/cves/2025/CVE-2025-53690.md b/cves/2025/CVE-2025-53690.md index fd1ee3a471b..c64a44d738f 100644 --- a/cves/2025/CVE-2025-53690.md +++ b/cves/2025/CVE-2025-53690.md @@ -16,4 +16,5 @@ No PoCs from references. #### Github - https://github.com/rxerium/CVE-2025-53690 +- https://github.com/ErikLearningSec/CVE-2025-53690-POC diff --git a/cves/2025/CVE-2025-53770.md b/cves/2025/CVE-2025-53770.md index 963b6628d50..a03d6fb2b88 100644 --- a/cves/2025/CVE-2025-53770.md +++ b/cves/2025/CVE-2025-53770.md @@ -46,6 +46,11 @@ Deserialization of untrusted data in on-premises Microsoft SharePoint Server all - https://github.com/saladin0x1/CVE-2025-53770 - https://github.com/soltanali0/CVE-2025-53770-Exploit - https://github.com/unk9vvn/sharepoint-toolpane +- https://github.com/0xKr1x/CVE-2025-53770-Scanner +- https://github.com/J4ck3LSyN-Gen2/CVE-2025-53770 +- https://github.com/gmh5225/ZeroPoint +- https://github.com/kaizensecurity/CVE-2025-53770 +- https://github.com/victormbogu1/LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53770.yaml diff --git a/cves/2025/CVE-2025-53772.md b/cves/2025/CVE-2025-53772.md index 3f86e0d1ee6..2504d33b9e7 100644 --- a/cves/2025/CVE-2025-53772.md +++ b/cves/2025/CVE-2025-53772.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Momollax/CVE-2025-53772-IIS-WebDeploy-RCE - https://github.com/fortihack/CVE-2025-53772 +- https://github.com/sailay1996/CVE-2025-53772 diff --git a/cves/2025/CVE-2025-53779.md b/cves/2025/CVE-2025-53779.md index 99edb13e26e..b9a38173cfc 100644 --- a/cves/2025/CVE-2025-53779.md +++ b/cves/2025/CVE-2025-53779.md @@ -14,5 +14,5 @@ Relative path traversal in Windows Kerberos allows an authorized attacker to ele No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/razureink/cve-2025-53779-kerberos_bypass_reproduction diff --git a/cves/2025/CVE-2025-54068.md b/cves/2025/CVE-2025-54068.md index 3fd63db9dd5..06a887fdf17 100644 --- a/cves/2025/CVE-2025-54068.md +++ b/cves/2025/CVE-2025-54068.md @@ -14,7 +14,12 @@ Livewire is a full-stack framework for Laravel. In Livewire v3 up to and includi No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/flame-11/CVE-2025-54068-livewire +- https://github.com/haxorstars/CVE-2025-54068 +- https://github.com/synacktiv/Livepyre #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54068.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/livewire/CVE-2025-54068 diff --git a/cves/2025/CVE-2025-54123.md b/cves/2025/CVE-2025-54123.md index 08351fd8448..127b10c5b3c 100644 --- a/cves/2025/CVE-2025-54123.md +++ b/cves/2025/CVE-2025-54123.md @@ -14,7 +14,12 @@ Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, th - https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-r4h8-hfp2-ggmf #### Github -No PoCs found on GitHub currently. +- https://github.com/0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit +- https://github.com/0xk4rth1/CVE-2025-54123 +- https://github.com/davidzzo23/CVE-2025-54123 +- https://github.com/f4dee-backup/CVE-2025-54123 +- https://github.com/kasem545/CVE-2025-54123-Poc +- https://github.com/tristanqtn/CVE-2025-54123 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54123.yaml diff --git a/cves/2025/CVE-2025-54135.md b/cves/2025/CVE-2025-54135.md index 93ecd367847..5307523fe40 100644 --- a/cves/2025/CVE-2025-54135.md +++ b/cves/2025/CVE-2025-54135.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/anntsmart/CVE-2025-54135 +- https://github.com/hn1e13/test-mcp diff --git a/cves/2025/CVE-2025-5419.md b/cves/2025/CVE-2025-5419.md index 2e7615fd1e2..ed4fccdecd6 100644 --- a/cves/2025/CVE-2025-5419.md +++ b/cves/2025/CVE-2025-5419.md @@ -17,4 +17,5 @@ Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allow - https://github.com/Petitoto/chromium-exploit-dev - https://github.com/mistymntncop/CVE-2025-5419 - https://github.com/riemannj/CVE-2025-5419 +- https://github.com/bjrjk/CVE-2025-5419 diff --git a/cves/2025/CVE-2025-54236.md b/cves/2025/CVE-2025-54236.md index 09ace653f10..06c42c4d88e 100644 --- a/cves/2025/CVE-2025-54236.md +++ b/cves/2025/CVE-2025-54236.md @@ -14,7 +14,10 @@ Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, - https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento #### Github -No PoCs found on GitHub currently. +- https://github.com/Baba01hacker666/cve-2025-54236 +- https://github.com/Dx3iZ/CVE-2025-54236 +- https://github.com/Jenderal92/magento-upload-auto-submit-zoneh +- https://github.com/alexb616/SessionReaper-CVE-2025-54236 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54236.yaml diff --git a/cves/2025/CVE-2025-54253.md b/cves/2025/CVE-2025-54253.md index 3c8eb08cf87..caeb9439660 100644 --- a/cves/2025/CVE-2025-54253.md +++ b/cves/2025/CVE-2025-54253.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/Shivshantp/CVE-2025-54253-Exploit-Demo +- https://github.com/AdityaBhatt3010/CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day diff --git a/cves/2025/CVE-2025-54309.md b/cves/2025/CVE-2025-54309.md index 0717fb1835f..a346cc77bc3 100644 --- a/cves/2025/CVE-2025-54309.md +++ b/cves/2025/CVE-2025-54309.md @@ -22,6 +22,7 @@ CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is - https://github.com/foregenix/CVE-2025-54309 - https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 - https://github.com/whisperer1290/CVE-2025-54309__Enhanced_exploit +- https://github.com/0xLittleSpidy/CVE-2025-54309 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-54309.yaml diff --git a/cves/2025/CVE-2025-54352.md b/cves/2025/CVE-2025-54352.md index fa7aebc626d..0e25c373371 100644 --- a/cves/2025/CVE-2025-54352.md +++ b/cves/2025/CVE-2025-54352.md @@ -14,4 +14,6 @@ WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private a #### Github - https://github.com/yohannslm/CVE-2025-54352 +- https://github.com/limmmw/CVE-2025-54352 +- https://github.com/mufasa-noir/XML-RPC-Pingback-Vulnerability diff --git a/cves/2025/CVE-2025-54416.md b/cves/2025/CVE-2025-54416.md index 93aa3a34a6c..c4c666bf487 100644 --- a/cves/2025/CVE-2025-54416.md +++ b/cves/2025/CVE-2025-54416.md @@ -13,5 +13,5 @@ tj-actions/branch-names is a Github actions repository that contains workflows t - https://github.com/tj-actions/branch-names/security/advisories/GHSA-gq52-6phf-x2r6 #### Github -No PoCs found on GitHub currently. +- https://github.com/HexborneStudio/atlas-tj-actions-poc diff --git a/cves/2025/CVE-2025-54424.md b/cves/2025/CVE-2025-54424.md index bfaa17f0aec..6055c35d5f6 100644 --- a/cves/2025/CVE-2025-54424.md +++ b/cves/2025/CVE-2025-54424.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/Mr-xn/CVE-2025-54424 - https://github.com/hophtien/CVE-2025-54424 - https://github.com/RBKD-SEC/POC +- https://github.com/anonnymous5/1Panel-CVE-2025-54424- diff --git a/cves/2025/CVE-2025-54574.md b/cves/2025/CVE-2025-54574.md index 08922a5894d..a3d11161d6a 100644 --- a/cves/2025/CVE-2025-54574.md +++ b/cves/2025/CVE-2025-54574.md @@ -13,5 +13,5 @@ Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulner No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/gmh5225/Blackash-CVE-2025-54574 diff --git a/cves/2025/CVE-2025-54782.md b/cves/2025/CVE-2025-54782.md index 41589816eda..f79d81c04e4 100644 --- a/cves/2025/CVE-2025-54782.md +++ b/cves/2025/CVE-2025-54782.md @@ -16,7 +16,8 @@ Nest is a framework for building scalable Node.js server-side applications. In v - https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7 #### Github -No PoCs found on GitHub currently. +- https://github.com/DDestinys/CVE-2025-54782 +- https://github.com/vxaretra/CVE-2025-54782 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54782.yaml diff --git a/cves/2025/CVE-2025-54874.md b/cves/2025/CVE-2025-54874.md index e4f4bc73950..8f2b24ed41c 100644 --- a/cves/2025/CVE-2025-54874.md +++ b/cves/2025/CVE-2025-54874.md @@ -13,5 +13,5 @@ OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3 - https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV #### Github -No PoCs found on GitHub currently. +- https://github.com/cyhe50/cve-2025-54874-poc diff --git a/cves/2025/CVE-2025-54918.md b/cves/2025/CVE-2025-54918.md index 2c0fddb719e..df0c4d95e83 100644 --- a/cves/2025/CVE-2025-54918.md +++ b/cves/2025/CVE-2025-54918.md @@ -52,4 +52,5 @@ No PoCs from references. #### Github - https://github.com/mrk336/From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps +- https://github.com/Wh0am123/CVE-2025-54918-POC diff --git a/cves/2025/CVE-2025-54939.md b/cves/2025/CVE-2025-54939.md index 70c56c287a4..01e9470406b 100644 --- a/cves/2025/CVE-2025-54939.md +++ b/cves/2025/CVE-2025-54939.md @@ -13,5 +13,5 @@ LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yohannslm/CVE-2025-54939 diff --git a/cves/2025/CVE-2025-55182.md b/cves/2025/CVE-2025-55182.md index 732bde58deb..d643afa4206 100644 --- a/cves/2025/CVE-2025-55182.md +++ b/cves/2025/CVE-2025-55182.md @@ -26,6 +26,273 @@ No PoCs from references. - https://github.com/JotaEspig/CVE-2025-66478-PoC-Reverse-Shell - https://github.com/RBKD-SEC/POC - https://github.com/VaultGuardian/observer +- https://github.com/0x0asif/CVE-2025-55182 +- https://github.com/0xBlackash/CVE-2025-55182 +- https://github.com/0xN7y/CVE-2025-55182 +- https://github.com/0xPThree/cve-2025-55182 +- https://github.com/0xROI/CVE-2025-55182 +- https://github.com/0xSalm0n/CVE-2025-55182 +- https://github.com/0xsj/CVE-2025-55182 +- https://github.com/6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project- +- https://github.com/AbdullahMaqbool22/Explosive-As-Hell-MCS-Qualifer-Web-500 +- https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182 +- https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web +- https://github.com/AggressiveUser/React2Hell +- https://github.com/AkhmadKholmurodov/React2Shell_Exploit +- https://github.com/Alejandro609x/JEFAZO-CVE-2025-55182-Checker +- https://github.com/AliHzSec/CVE-2025-55182 +- https://github.com/Archerkong/CVE-2025-55182 +- https://github.com/AsadAhmad-1337/React-2-Shell +- https://github.com/BBD-YZZ/CVE-2025-55182 +- https://github.com/BIG02-bot/React2Shell-CVE-2025-55182-An-lise-T-cnica +- https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell +- https://github.com/BrianLopezM99/react2shell-CVE-2025-55182 +- https://github.com/Call123X/-cve-2025-55182 +- https://github.com/CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit +- https://github.com/Chocapikk/CVE-2025-55182 +- https://github.com/Cillian-Collins/CVE-2025-55182 +- https://github.com/CirqueiraDev/MassExploit-CVE-2025-55182 +- https://github.com/CrazyloveforWeb/Golang-CVE-2025-55182-POC +- https://github.com/Darker-Ink/react-ssr-vulnerability +- https://github.com/DevVaibhav07/POC-CVE-2025-55182 +- https://github.com/Dh4v4l8/CVE-2025-55182-poc-tool +- https://github.com/DoobTheGoober/CVE-2025-55182-Test-Server +- https://github.com/EQSTLab/CVE-2025-55182 +- https://github.com/Emiyelbarto/CVE-2025-55182-PoC +- https://github.com/Evillm/CVE-2025-55182-PoC +- https://github.com/EynaExp/CVE-2025-55182-POC +- https://github.com/Faithtiannn/CVE-2025-55182 +- https://github.com/Fomovet/cve-2025-55182 +- https://github.com/FurkanKAYAPINAR/ReactNext2Shell +- https://github.com/George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0- +- https://github.com/Golden-Secure/CVE-2025-55182 +- https://github.com/Gymnott1/CVE-2025-55182 +- https://github.com/H4R335HR/reactshell +- https://github.com/HUAHUAI23/CVE-2025-55182-POC +- https://github.com/Herick-Costa/CVE-2025-55182-React2Shell-RCE +- https://github.com/I3r1h0n/React2Shell +- https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell +- https://github.com/IrsyadSEC/CVE-2025-55182-MassPayloadAttack +- https://github.com/J4ck3LSyN-Gen2/CVE-2025-55182 +- https://github.com/Jaycelation/CVE-2025-55182 +- https://github.com/Jenderal92/CVE-2025-55182-React2shell +- https://github.com/KingHacker353/R2C-CVE-2025-55182-66478 +- https://github.com/LC-pro/CVE-2025-55182-EXP +- https://github.com/LQTjim/next-bug-CVE-2025-55182 +- https://github.com/Least-Significant-Bit/CVE-2025-55182 +- https://github.com/Legus-Yeung/CVE-2025-55182-exploit +- https://github.com/LemonTeatw1/CVE-2025-55182-exploit +- https://github.com/LucasPDiniz/CVE-2025-55182 +- https://github.com/LuizHenz/PoC-CVE-2025-55182 +- https://github.com/LvMalware/CVE-2025-55182 +- https://github.com/M4rgs/CVE-2025-55182-React2Shell-Exploit +- https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell +- https://github.com/MammaniNelsonD/React2P4IM0Nshell +- https://github.com/MedusaSH/POC-CVE-2025-55182 +- https://github.com/MikeTheHash/CVE-2025-55182 +- https://github.com/MoLeft/React2Shell-Toolbox +- https://github.com/Mr-Destroyer/CVE-2025-55182 +- https://github.com/MrR0b0t19/CVE-2025-55182-shellinteractive +- https://github.com/MrSol0/CVE-2025-55182-Terminal +- https://github.com/MuharremK0/Info-Sys-Security-CVE-2025-55182 +- https://github.com/MyCompanyOrganization/React2Shell-Kingdom +- https://github.com/Namsom007/CVE-2025-55182-Exploit +- https://github.com/NathanJ60/react2shell-interactive +- https://github.com/Night-have-dreams/CVE-2025-55182-PoC +- https://github.com/Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182 +- https://github.com/Pa2sw0rd/exploit-CVE-2025-55182-poc +- https://github.com/Phucc29/CVE-2025-55182 +- https://github.com/Rat5ak/CVE-2025-55182-React2Shell-RCE-POC +- https://github.com/RavinduRathnayaka/CVE-2025-55182-PoC +- https://github.com/Rsatan/Next.js-Exploit-Tool +- https://github.com/RuoJi6/CVE-2025-55182-RCE-shell +- https://github.com/RyosukeDTomita/CVE-2025-55182 +- https://github.com/S-Mughal/NextJS-app-CVE-2025-55182 +- https://github.com/S3cr3t-SDN/React4Shell +- https://github.com/Sairbo/Unihackers---CVE-2025-55182- +- https://github.com/Saturate/CVE-2025-55182-react2shell +- https://github.com/SentinelXofficial/CVE-2025-55182 +- https://github.com/Shadowroot97/React2Shell-CVE-2025-55182 +- https://github.com/SpeatX/React2Shell-CVE-2025-55182 +- https://github.com/Spritualkb/CVE-2025-55182-exp +- https://github.com/Stonelinks/react-cve-2025-55182 +- https://github.com/TH-SecForge/CVE-2025-55182 +- https://github.com/Tiger-Foxx/exploit-react-CVE-2025-55182 +- https://github.com/UmmItKin/CVE-2025-55182-PoC +- https://github.com/VVVI5HNU/CVE-2025-55182 +- https://github.com/Ya0h4cker/CVE-2025-55182 +- https://github.com/Yyax13/CVE-2025-55182 +- https://github.com/ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner +- https://github.com/aastikgakhar/CVE-2025-55182-react2shell +- https://github.com/acheong08/CVE-2025-55182-poc +- https://github.com/ahmedshamsddin/CVE-2025-55182 +- https://github.com/alfazhossain/CVE-2025-55182-Exploiter +- https://github.com/aliclub0x00/CVE-2025-55182-POC-NEXTJS +- https://github.com/amir-malek/react-cve-2025-55182 +- https://github.com/andressuarezmonk/CVE-2025-55182 +- https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension +- https://github.com/aquinn-r7/CVE-2025-55182-VulnCheckPOC +- https://github.com/aseemyash/krle +- https://github.com/atastycookie/CVE-2025-55182 +- https://github.com/avoidme12/CVE-2025-55182-POC +- https://github.com/bakhod1r/CVE-2025-55182 +- https://github.com/byte16384/CVE-2025-55182 +- https://github.com/c0rydoras/CVE-2025-55182 +- https://github.com/cc3305/CVE-2025-55182 +- https://github.com/ceh-aditya-raj/CVE-2025-55182 +- https://github.com/ceortiz33/CVE-2025-55182 +- https://github.com/chitoz1300/React2Shell-CVE-2025-55182 +- https://github.com/chrahman/react2shell-CVE-2025-55182-full-rce-script +- https://github.com/clevernyyyy/CVE-2025-55182-Dockerized +- https://github.com/cyberleelawat/CVE-2025-55182 +- https://github.com/d0cnull/nextjs-CVE-2025-55182 +- https://github.com/deepankarkumar1/CVE-2025-55182_Vulnerable-Application +- https://github.com/diamorphine666/React2shell-CVE-2025-55182-Exploit +- https://github.com/dotnetguard/CVE-2025-55182-Exploit +- https://github.com/dr4xp/react2shell +- https://github.com/ducducuc111/CVE-2025-55182-poc +- https://github.com/dwisiswant0/CVE-2025-55182 +- https://github.com/eagle-nett/React2Shell-PoC-CVE-2025-55182 +- https://github.com/ejpir/CVE-2025-55182-bypass +- https://github.com/ejpir/CVE-2025-55182-research +- https://github.com/emadshanab/POC-for-CVE-2025-55182 +- https://github.com/emredavut/CVE-2025-55182 +- https://github.com/en0f/CVE-2025-55182-poc-json +- https://github.com/exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC +- https://github.com/eytannatye/R2S_CVE-2025-55182 +- https://github.com/fullhunt/react2shell-test-server +- https://github.com/gagaltotal/tot-react-rce-CVE-2025-55182 +- https://github.com/garux-sec/PoC-react2shell-CVE-2025-55182 +- https://github.com/git0xLai/React2ShellPoC +- https://github.com/greenheadHQ/CVE-2025-55182 +- https://github.com/grejh0t/CVE-2025-55182 +- https://github.com/gunyakit/CVE-2025-55182-PoC-exploit +- https://github.com/h0tak88r/next88 +- https://github.com/hakkuri01/r2rs +- https://github.com/hoosin/CVE-2025-55182 +- https://github.com/hualy13/CVE-2025-55182 +- https://github.com/hujiaozhuzhu/CVE-2025-55182_liyon +- https://github.com/hulh122/CVE-2025-55182 +- https://github.com/hyan0116/Next.js-RCE-CVE-2025-55182 +- https://github.com/iamblacksolo2-BugBounty/POC-CVE-2025-55182 +- https://github.com/iamblacksolo2-BugBounty/POC2-CVE-2025-55182 +- https://github.com/ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-Shell +- https://github.com/ihsansencan/React2Shell-CVE-2025-55182 +- https://github.com/ilixm/PoC-RCE-CVE-2025-55182 +- https://github.com/imbas007/POC-CVE-2025-55182 +- https://github.com/indra-031/React2Shell-Exploit-CVE-2025-55182 +- https://github.com/itsismarcos/Bot-exploit-CVE-2025-55182 +- https://github.com/itumo-arigatone/study-CVE-2025-55182 +- https://github.com/jandelima/cve-2025-55182-poc-test +- https://github.com/jf0x3a/CVE-2025-55182-exploit +- https://github.com/joaovicdev/EXPLOIT-CVE-2025-55182 +- https://github.com/joelvaiju/react2shell-CVE-2025-55182-poc +- https://github.com/joshterrill/CVE-2025-55182-realistic-poc +- https://github.com/k1llmelira/react2shell-exploit +- https://github.com/kOaDT/poc-cve-2025-55182 +- https://github.com/keklick1337/CVE-2025-55182-golang-PoC +- https://github.com/kindone09/CVE-2025-55182 +- https://github.com/klassiker/CVE-2025-55182 +- https://github.com/kondukto-io/vulnerable-next-js-poc +- https://github.com/l0n3m4n/CVE-2025-55182-Waf +- https://github.com/l4rm4nd/CVE-2025-55182 +- https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc +- https://github.com/liamromanis101/cve-2025-55182 +- https://github.com/litndat/React2Shell-PoC-CVE-2025-55182 +- https://github.com/logesh-GIT001/CVE-2025-55182 +- https://github.com/lowercasenumbers/CVE-2025-55182 +- https://github.com/lucyz1125/CVE-2025-55182-Next.js-RCE +- https://github.com/luoluoqingge/CVE-2025-55182 +- https://github.com/luoqichen/CVE-2025-55182-POC +- https://github.com/lutraat/CVE-2025-55182-React-RSC-Exploit +- https://github.com/m3ngx1ng/CVE-2025-55182-GUI +- https://github.com/mahaveer-choudhary/CVE-2025-55182 +- https://github.com/mantvmass/react2shell +- https://github.com/masterwok/PoC-CVE-2025-55182 +- https://github.com/min8282/CVE-2025-55182 +- https://github.com/mohit121312/CVE-2025-55182_full_exploit +- https://github.com/momika233/CVE-2025-55182-bypass +- https://github.com/monarchfish/cve-2025-55182-poc +- https://github.com/mooowu/cve-2025-55182-poc +- https://github.com/mrmtwoj/React2Shell-CVE-2025-55182 +- https://github.com/msanft/CVE-2025-55182 +- https://github.com/nehkark/CVE-2025-55182 +- https://github.com/nexxp90/CVE-2025-55182_RCE_Exploit +- https://github.com/niokagi/react-cve-2025-55182 +- https://github.com/nomorebreach/POC-CVE-2025-55182 +- https://github.com/oguri-souhei/CVE-2025-55182 +- https://github.com/open-flaw/CVE-2025-55182 +- https://github.com/opsecramdan/react2shell-cve-2025-55182 +- https://github.com/orgito1015/CVE-2025-55182-RCE-Exploit +- https://github.com/oscar-mine/R2SAE +- https://github.com/osman-butt/CVE-2025-55182-demo +- https://github.com/p3ta00/react2shell-poc +- https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script +- https://github.com/pkrasulia/CVE-2025-55182-NextJS-RCE-PoC +- https://github.com/premdanav/react2shelldemo +- https://github.com/prestonhashworth/cve-2025-55182 +- https://github.com/ps-interactive/cve-2025-55182 +- https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool +- https://github.com/racall/cve-2025-55182-node +- https://github.com/rahul-securify/React2Shell-CVE-2025-55182 +- https://github.com/raivenLockdown/WEB-CLI_RCE_React2Shell +- https://github.com/randarts/react-rce +- https://github.com/razureink/cve-2025-55182-react2shell_reproduction +- https://github.com/rix4uni/CVE-2025-55182 +- https://github.com/rl0x01/CVE-2025-55182_PoC +- https://github.com/robbin0919/CVE-2025-55182 +- https://github.com/rsch-io/CVE-2025-55182-React2Shell +- https://github.com/rvzsec/react2shell +- https://github.com/ryanhafid/PoC_CVE-2025-55182 +- https://github.com/sangleshubham/React-Security-CVE-2025-55182-Exploit +- https://github.com/scumfrog/FiberBreak +- https://github.com/se1zer/Nextjs_Exploit_Tool +- https://github.com/selectarget/CVE-2025-55182-Exploit +- https://github.com/shen771/Blackash-CVE-2025-55182 +- https://github.com/sherlocksecurity/CVE-2025-55182-Exploit-scanner +- https://github.com/shibaaa204/React2Shell +- https://github.com/shreyas-malhotra/React2Shell-CVE-2025-55182 +- https://github.com/shyambhanushali/React2Shell +- https://github.com/sickwell/CVE-2025-55182 +- https://github.com/simantchaudhari/CVE-2025-55182 +- https://github.com/snipevx/React2Shell-POC +- https://github.com/sohaibeb/CVE-2025-55182 +- https://github.com/sponte/nextjs-cve-version-confusion +- https://github.com/subhdotsol/CVE-2025-55182 +- https://github.com/subzer0x0/React2Shell +- https://github.com/sudo-Yangziran/CVE-2025-55182POC +- https://github.com/sumanrox/rschunter +- https://github.com/sun977/CVE-2025-55182 +- https://github.com/surajhacx/react2shellpoc +- https://github.com/tamagorengs/react2shell-poc-CVE-2025-55182 +- https://github.com/tanvirahmedcs/CVE-2025-55182 +- https://github.com/thekamran/CVE-2025-55182-Proof-of-Concept +- https://github.com/theman001/CVE-2025-55182 +- https://github.com/theman001/CVE-2025-55182_PoC-Test-Server +- https://github.com/timsonner/React2Shell-CVE-2025-55182 +- https://github.com/tinashelorenzi/CVE-2025-55182 +- https://github.com/topstar88/CVE-2025-55182 +- https://github.com/trax69/cve-2025-55182-poc +- https://github.com/vulncheck-oss/cve-2025-55182 +- https://github.com/w3nch/CVE-2025-55182-in-go +- https://github.com/whiteov3rflow/CVE-2025-55182-poc +- https://github.com/wnaspy/CVE-2025-55182 +- https://github.com/woorifisa-service-dev-6th/tech-seminar-React2Shell +- https://github.com/xcanwin/CVE-2025-55182-React-RCE +- https://github.com/xiaoLvChen/CVE-2025-55182 +- https://github.com/xkey8/react2shell +- https://github.com/yannisduvignau/react2shell-exploit +- https://github.com/yanoshercohen/React2Shell_CVE-2025-55182 +- https://github.com/ycseo-git/CVE-2025-55182 +- https://github.com/ynsmroztas/NextRce +- https://github.com/younesZdDz/CVE-2025-55182 +- https://github.com/yunaranyancat/CVE-2025-55182-NSE +- https://github.com/yuta3003/CVE-2025-55182 +- https://github.com/zack0x01/vuln-app-CVE-2025-55182 +- https://github.com/zessu/CVE-2025-55182-Typescript +- https://github.com/zorejt/Rust_CVE-2025-55182 +- https://github.com/zxz3650/CVE-2025-55182-POC +- https://github.com/zzhorc/CVE-2025-55182 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55182.yaml @@ -35,3 +302,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/react/CVE-2025-55182 diff --git a/cves/2025/CVE-2025-55188.md b/cves/2025/CVE-2025-55188.md index 0ebcd343b47..72c2d089700 100644 --- a/cves/2025/CVE-2025-55188.md +++ b/cves/2025/CVE-2025-55188.md @@ -17,4 +17,5 @@ #### Github - https://github.com/hunters-sec/CVE-2025-55188-7z-exploit +- https://github.com/lunbun/CVE-2025-55188 diff --git a/cves/2025/CVE-2025-55319.md b/cves/2025/CVE-2025-55319.md index cd2898890db..e2c631915df 100644 --- a/cves/2025/CVE-2025-55319.md +++ b/cves/2025/CVE-2025-55319.md @@ -13,5 +13,5 @@ Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/nephila016/CVE-2025-55319-PoC diff --git a/cves/2025/CVE-2025-5548.md b/cves/2025/CVE-2025-5548.md index 5d88db91922..ab9ccf7fc29 100644 --- a/cves/2025/CVE-2025-5548.md +++ b/cves/2025/CVE-2025-5548.md @@ -16,6 +16,27 @@ No PoCs from references. #### Github - https://github.com/jesusdominguez87/CVE-2025-5548 +- https://github.com/CryptoMachio/CVE-2025-5548 +- https://github.com/Diego57709/CVE-2025-5548 +- https://github.com/LorenzoPorrasDuque/CVE-2025-5548-POC +- https://github.com/PopClom/CVE-2025-5548 +- https://github.com/TheMalwareGuardian/CVE-2025-5548 +- https://github.com/Victor875/CVE-2025-5548 +- https://github.com/ZoneToolsCiber/Explotando-FreeFloatFTP-CVE-2025-5548 +- https://github.com/alanschmidt81/CVE-2025-5548 +- https://github.com/alfa8sa/CVE-2025-5548 +- https://github.com/alvarosr/CVE-2025-5548 +- https://github.com/anasrami12/CVE-2025-5548 +- https://github.com/celiagomezserra/CVE-2025-5548 +- https://github.com/charlyrr/CVE-2025-5548 +- https://github.com/elrajiii/CVE-2025-5548 +- https://github.com/greycat-amc/CVE-2025-5548 +- https://github.com/iamEscri/CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow +- https://github.com/javyan05/CVE-2025-5548 +- https://github.com/jgs-developer/CVE-2025-5548 +- https://github.com/luisyapura/Analisis-y-Explotacion-de-CVE-2025-5548 +- https://github.com/sudoand3rs0n/CVE-2025-5548 +- https://github.com/x3nt4ur0/CVE-2025-5548 #### ExploitDB - https://www.exploit-db.com/exploits/52323 diff --git a/cves/2025/CVE-2025-55575.md b/cves/2025/CVE-2025-55575.md index 9f44137c194..8a7faa55785 100644 --- a/cves/2025/CVE-2025-55575.md +++ b/cves/2025/CVE-2025-55575.md @@ -13,5 +13,5 @@ SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain s - https://github.com/Aether-0/CVE-2025-55575 #### Github -No PoCs found on GitHub currently. +- https://github.com/Aether-0/CVE-2025-55575 diff --git a/cves/2025/CVE-2025-55763.md b/cves/2025/CVE-2025-55763.md index ca40f5aaeac..8c4af36d2ea 100644 --- a/cves/2025/CVE-2025-55763.md +++ b/cves/2025/CVE-2025-55763.md @@ -13,5 +13,5 @@ Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows - https://github.com/krispybyte/CVE-2025-55763 #### Github -No PoCs found on GitHub currently. +- https://github.com/krispybyte/CVE-2025-55763 diff --git a/cves/2025/CVE-2025-56803.md b/cves/2025/CVE-2025-56803.md index 8ff8f06733f..45922d68f6d 100644 --- a/cves/2025/CVE-2025-56803.md +++ b/cves/2025/CVE-2025-56803.md @@ -14,5 +14,5 @@ Figma Desktop for Windows version 125.6.5 contains a command injection vulnerabi - https://shinycolumn.notion.site/figma-command-injection #### Github -No PoCs found on GitHub currently. +- https://github.com/yosasasutsut/CVE-2025-56803 diff --git a/cves/2025/CVE-2025-57392.md b/cves/2025/CVE-2025-57392.md index 30a3b9c778f..329e6291249 100644 --- a/cves/2025/CVE-2025-57392.md +++ b/cves/2025/CVE-2025-57392.md @@ -14,5 +14,5 @@ BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The applicatio - https://github.com/meisterlos/CVE-2025-57392 #### Github -No PoCs found on GitHub currently. +- https://github.com/meisterlos/CVE-2025-57392 diff --git a/cves/2025/CVE-2025-5777.md b/cves/2025/CVE-2025-5777.md index 429873c1641..d93dcafad82 100644 --- a/cves/2025/CVE-2025-5777.md +++ b/cves/2025/CVE-2025-5777.md @@ -37,6 +37,10 @@ Insufficient input validation leading to memory overread when the NetScaler is - https://github.com/soltanali0/CVE-2025-5777-Exploit - https://github.com/win3zz/CVE-2025-5777 - https://github.com/maxprog-svg/CitrixBleedCVE-2026-8452-2025-5777 +- https://github.com/Sheep-Hunter/CVE-2025-5777-POC +- https://github.com/nicecopy/POC-CVE-2025-5777 +- https://github.com/rashedhasan090/CVE-2025-5777 +- https://github.com/razureink/cve-2025-5777-citrixbleed2_reproduction #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5777.yaml diff --git a/cves/2025/CVE-2025-57819.md b/cves/2025/CVE-2025-57819.md index 91384f6e5c6..5fccca72e93 100644 --- a/cves/2025/CVE-2025-57819.md +++ b/cves/2025/CVE-2025-57819.md @@ -24,6 +24,19 @@ No PoCs from references. - https://github.com/rxerium/CVE-2025-57819 - https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819 - https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC +- https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE +- https://github.com/0xyngtg/FreePBX-CVE-2025-57819-CVE-2025-61678 +- https://github.com/Its1Zero/cve-2025-57819-exploit +- https://github.com/JazzTheRabbit/FreePBX-SQLi-RCE +- https://github.com/Jeanback1/CVE-2025-57819-exploit +- https://github.com/K3ysTr0K3R/CVE-2025-57819 +- https://github.com/Neobee714/CVE-2025-57819-POC +- https://github.com/TeteREN/CVE-2025-57819-RCE +- https://github.com/YuvrajSHAD/FreePBX-CVE-2025-57819 +- https://github.com/b4sh2/CVE-2025-57819-poc +- https://github.com/cybertechajju/cve-2025-57819 +- https://github.com/jf-gondim/freepbx-endpoint-sqli-rce +- https://github.com/ozcanpng/CVE-2025-57819-FreePBX-RCE2Root #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57819.yaml diff --git a/cves/2025/CVE-2025-57833.md b/cves/2025/CVE-2025-57833.md index a4eb8a13c33..52dc1b69344 100644 --- a/cves/2025/CVE-2025-57833.md +++ b/cves/2025/CVE-2025-57833.md @@ -18,4 +18,7 @@ No PoCs from references. - https://github.com/EyalSec/EyalSec_CVE - https://github.com/Mkway/CVE-2025-57833 - https://github.com/loic-houchi/Django-faille-CVE-2025-57833_test +- https://github.com/Gayang2902/CVE-2025-57833 +- https://github.com/ianoboyle/CVE-2025-57833 +- https://github.com/sw0rd1ight/CVE-2025-57833 diff --git a/cves/2025/CVE-2025-58434.md b/cves/2025/CVE-2025-58434.md index 5444d948b4d..6d85d37c4b3 100644 --- a/cves/2025/CVE-2025-58434.md +++ b/cves/2025/CVE-2025-58434.md @@ -13,7 +13,18 @@ Flowise is a drag & drop user interface to build a customized large language mod - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wgpv-6j63-x5ph #### Github -No PoCs found on GitHub currently. +- https://github.com/00lucasm/CVE-2025-58434-Flowiseai-Auth-Bypass-PoC +- https://github.com/0xDaeras/Flowise-CVE-2025-58434-Chain-59528 +- https://github.com/AzureADTrent/CVE-2025-58434-59528 +- https://github.com/CVETeam/FlowiseAI-Critical-KillChain +- https://github.com/honney336/CVE-2025-58434_CVE-2025-59528 +- https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf +- https://github.com/kartik2005221/CVE-2025-58434-AND-59528-POC +- https://github.com/kartik2005221/CVE-2025-58434-poc +- https://github.com/mananispiwpiw/CVE-2025-58434-PoC +- https://github.com/p1ctur3p3rf3ct/CVE-2025-58434 +- https://github.com/r3nsi15/Flowise-CVE-2025-58434-PasswordReset +- https://github.com/vincent-vbg/CVE-2025-58434-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58434.yaml diff --git a/cves/2025/CVE-2025-5878.md b/cves/2025/CVE-2025-5878.md index 16257053f6c..a5597bac5d4 100644 --- a/cves/2025/CVE-2025-5878.md +++ b/cves/2025/CVE-2025-5878.md @@ -43,5 +43,5 @@ Eine problematische Schwachstelle wurde in ESAPI esapi-java-legacy gefunden. Es No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/fantasy-fql/ESAPI-SQLinjection-CVE-2025-5878-Exploit diff --git a/cves/2025/CVE-2025-5915.md b/cves/2025/CVE-2025-5915.md index ac9903d7a21..0cee8696acb 100644 --- a/cves/2025/CVE-2025-5915.md +++ b/cves/2025/CVE-2025-5915.md @@ -19,5 +19,5 @@ A vulnerability has been identified in the libarchive library. This flaw can lea - https://github.com/libarchive/libarchive/pull/2599 #### Github -No PoCs found on GitHub currently. +- https://github.com/R3n3r0/cve-2025-5915 diff --git a/cves/2025/CVE-2025-59287.md b/cves/2025/CVE-2025-59287.md index 988c515325c..98f30134b9d 100644 --- a/cves/2025/CVE-2025-59287.md +++ b/cves/2025/CVE-2025-59287.md @@ -32,6 +32,22 @@ No PoCs from references. #### Github - https://github.com/trustedsec/spoonmap +- https://github.com/0x7556/CVE-2025-59287 +- https://github.com/0xBruno/WSUSploit.NET +- https://github.com/Adel-hx0d/cve-2025-59287 +- https://github.com/DaddyBigFish/CVE-2025-59287-hawktrace +- https://github.com/FurkanKAYAPINAR/CVE-2025-59287 +- https://github.com/LuemmelSec/CVE-2025-59287---WSUS-SCCM-RCE +- https://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS +- https://github.com/M507/CVE-2025-59287-PoC +- https://github.com/MaxymGorn/cve-2025-59287-exploit-poc +- https://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE +- https://github.com/garvitv14/CVE-2025-59287 +- https://github.com/jiansiting/CVE-2025-59287 +- https://github.com/mubix/Find-WSUS +- https://github.com/ross-ns/WSUS-CVE-2025-59287 +- https://github.com/swoon69/CVE-2025-59287-Exercise-Use +- https://github.com/tecxx/CVE-2025-59287-WSUS #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59287.yaml diff --git a/cves/2025/CVE-2025-59528.md b/cves/2025/CVE-2025-59528.md index 2daa97ce2ca..223f94c3548 100644 --- a/cves/2025/CVE-2025-59528.md +++ b/cves/2025/CVE-2025-59528.md @@ -14,6 +14,17 @@ No PoCs from references. #### Github - https://github.com/hackpatato/PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability +- https://github.com/Loaxert/CVE-2025-59528-PoC +- https://github.com/Moon-Harvest/CVE-2025-59528 +- https://github.com/NymiiTechTips/CVE-2025-59528 +- https://github.com/UsifAraby/CVE-2025-59528-POC +- https://github.com/corey-farley/CVE-2025-59528-Flowise-RCE +- https://github.com/mananispiwpiw/CVE-2025-59528-PoC +- https://github.com/maradonam18/-CVE-2025-59528-PoC +- https://github.com/r3nsi15/Flowise-RCE-CVE-2025-59528 +- https://github.com/sonnelon/CVE-2025-59528-PoC +- https://github.com/vanhari/CVE-2025-59528 +- https://github.com/zimshk/CVE-2025-59528.yaml #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59528.yaml diff --git a/cves/2025/CVE-2025-59536.md b/cves/2025/CVE-2025-59536.md index dcf612b1588..79380709f71 100644 --- a/cves/2025/CVE-2025-59536.md +++ b/cves/2025/CVE-2025-59536.md @@ -14,3 +14,5 @@ No PoCs from references. #### Github - https://github.com/jaadriano/OWASP-www-project-agentic-skills-top-10 +- https://github.com/NetVanguard-cmd/CVE-2025-59536 +- https://github.com/Rohitberiwala/Claude-Code-MCP-Injection-PoC diff --git a/cves/2025/CVE-2025-5961.md b/cves/2025/CVE-2025-5961.md index 9fd2ef92cbe..4e6fbbef114 100644 --- a/cves/2025/CVE-2025-5961.md +++ b/cves/2025/CVE-2025-5961.md @@ -15,6 +15,7 @@ The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPre #### Github - https://github.com/Nxploited/CVE-2025-5961 +- https://github.com/d0n601/CVE-2025-5961 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5961.yaml diff --git a/cves/2025/CVE-2025-6018.md b/cves/2025/CVE-2025-6018.md index 43650e30a44..05e70d6881d 100644 --- a/cves/2025/CVE-2025-6018.md +++ b/cves/2025/CVE-2025-6018.md @@ -21,6 +21,17 @@ A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-conf - https://github.com/iamgithubber/CVE-2025-6018-19-exploit - https://github.com/mistrust999/PAM-UDisks-PrivEsc-Metasploit - https://github.com/mistrustt/PAM-UDisks-PrivEsc-Metasploit +- https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019 +- https://github.com/DesertDemons/CVE-2025-6018-6019 +- https://github.com/Goultarde/CVE-2025-6018_CVE-2025-6019_autopwn +- https://github.com/MaxKappa/opensuse-leap-privesc-exploit +- https://github.com/MichaelVenturella/CVE-2025-6018-6019-PoC +- https://github.com/e1arth/CVE-2025-6018 +- https://github.com/euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019 +- https://github.com/iOxsec/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit +- https://github.com/localh0ste/CVE-2025-6018-and-CVE-2025-6019 +- https://github.com/matesz44/CVE-2025-6018-19 +- https://github.com/muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52386 diff --git a/cves/2025/CVE-2025-6019.md b/cves/2025/CVE-2025-6019.md index c6971beca9c..1300d450f7f 100644 --- a/cves/2025/CVE-2025-6019.md +++ b/cves/2025/CVE-2025-6019.md @@ -38,4 +38,11 @@ A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Gener - https://github.com/mistrust999/PAM-UDisks-PrivEsc-Metasploit - https://github.com/mistrustt/PAM-UDisks-PrivEsc-Metasploit - https://github.com/neko205-mx/CVE-2025-6019_Exploit +- https://github.com/0x5chltz/CVE-2025-6019 +- https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation +- https://github.com/boboaung1337/CVE-2025-6019 +- https://github.com/phamdinhquy2512/CVE-2025-6019-Exploitation +- https://github.com/robbin0919/CVE-2025-6019 +- https://github.com/symphony2colour/CVE-2025-6019-udisks-lpe-no-image +- https://github.com/tr3m0x/CVE-2025-6019 diff --git a/cves/2025/CVE-2025-6202.md b/cves/2025/CVE-2025-6202.md index 81375187d1a..0787f422160 100644 --- a/cves/2025/CVE-2025-6202.md +++ b/cves/2025/CVE-2025-6202.md @@ -13,5 +13,5 @@ Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhamm No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/demining/Phoenix-Rowhammer-Attack-CVE-2025-6202 diff --git a/cves/2025/CVE-2025-6220.md b/cves/2025/CVE-2025-6220.md index 8595c703b87..6c8f7bd74fd 100644 --- a/cves/2025/CVE-2025-6220.md +++ b/cves/2025/CVE-2025-6220.md @@ -14,4 +14,4 @@ The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitr - https://ryankozak.com/posts/cve-2025-6220/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-6220 diff --git a/cves/2025/CVE-2025-6440.md b/cves/2025/CVE-2025-6440.md index 74e1b791996..e6e90d65124 100644 --- a/cves/2025/CVE-2025-6440.md +++ b/cves/2025/CVE-2025-6440.md @@ -14,3 +14,9 @@ No PoCs from references. #### Github - https://github.com/katranSefa/CVE-2025-6440 +- https://github.com/AnotherSec/CVE-2025-6440 +- https://github.com/Nxploited/CVE-2025-6440 +- https://github.com/SangSenimanWartefak/CVE-2025-6440 +- https://github.com/m2hcz/CVE-2025-6440-Poc-Exploit +- https://github.com/rimbadirgantara/CVE-2025-6440 +- https://github.com/sahmsec/CVE-2025-6440 diff --git a/cves/2025/CVE-2025-6554.md b/cves/2025/CVE-2025-6554.md index a273de2ad48..f9a94c6f72e 100644 --- a/cves/2025/CVE-2025-6554.md +++ b/cves/2025/CVE-2025-6554.md @@ -19,4 +19,8 @@ No PoCs from references. - https://github.com/ghostn4444/POC-CVE-2025-6554 - https://github.com/gmh5225/CVE-2025-6554 - https://github.com/gmh5225/CVE-2025-6554-2 +- https://github.com/LordBheem/CVE-2025-6554 +- https://github.com/aklnjakln/CVE-2025-6554 +- https://github.com/jopraveen/CVE-2025-6554 +- https://github.com/mistymntncop/CVE-2025-6554 diff --git a/cves/2025/CVE-2025-6563.md b/cves/2025/CVE-2025-6563.md index f3059bae9e0..835e0cab396 100644 --- a/cves/2025/CVE-2025-6563.md +++ b/cves/2025/CVE-2025-6563.md @@ -13,7 +13,7 @@ A cross-site scripting vulnerability is present in the hotspot of MikroTik's Rou No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/praksokchea/CVE-2025-6563 #### ExploitDB - https://www.exploit-db.com/exploits/52366 diff --git a/cves/2025/CVE-2025-66034.md b/cves/2025/CVE-2025-66034.md index 0de2012591b..b42808694af 100644 --- a/cves/2025/CVE-2025-66034.md +++ b/cves/2025/CVE-2025-66034.md @@ -14,3 +14,7 @@ No PoCs from references. #### Github - https://github.com/symphony2colour/varlib-cve-2025-66034 +- https://github.com/4nuxd/CVE-2025-66034 +- https://github.com/Liquid1998/Variatype.htb-CVE-2025-66034 +- https://github.com/tristanqtn/CVE-2025-66034 +- https://github.com/v3cn4x00/POC-CVE-2025-66034 diff --git a/cves/2025/CVE-2025-66398.md b/cves/2025/CVE-2025-66398.md index 4d2a120ee93..f6022e263a4 100644 --- a/cves/2025/CVE-2025-66398.md +++ b/cves/2025/CVE-2025-66398.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/showy-headteacher114/cve-2025-66398 +- https://github.com/joshuavanderpoll/cve-2025-66398 diff --git a/cves/2025/CVE-2025-68921.md b/cves/2025/CVE-2025-68921.md index 450b9aea8e2..ee9137ab639 100644 --- a/cves/2025/CVE-2025-68921.md +++ b/cves/2025/CVE-2025-68921.md @@ -14,3 +14,5 @@ No PoCs from references. #### Github - https://github.com/kikiuuw/CVE-2025-68921 +- https://github.com/ZeroMemoryEx/CVE-2025-68921 +- https://github.com/kalibb/CVE-2025-68921 diff --git a/cves/2025/CVE-2025-69212.md b/cves/2025/CVE-2025-69212.md index 0d0f9205ce0..727200f1a61 100644 --- a/cves/2025/CVE-2025-69212.md +++ b/cves/2025/CVE-2025-69212.md @@ -14,3 +14,13 @@ No PoCs from references. #### Github - https://github.com/lolw0/OpenSTA-Exploit +- https://github.com/0Zetrium0/CVE-2025-69212_PoC +- https://github.com/BridgerAlderson/CVE-2025-69212-PoC +- https://github.com/Pasindu-sd/CVE-2025-69212-Exploit +- https://github.com/alaeddine03/CVE-2025-69212-PoC +- https://github.com/c0gnit00/CVE-2026-69212 +- https://github.com/liaomilk/CVE-2025-69212-for-myself +- https://github.com/m2sousa/CVE-2025-69212 +- https://github.com/tohib09/CVE-2025-69212-PoC +- https://github.com/w3nch/CVE-2025-69212 +- https://github.com/xorandd/CVE-2025-69212-PoC diff --git a/cves/2025/CVE-2025-6934.md b/cves/2025/CVE-2025-6934.md index 508f62ae8ce..1e9ed70beb6 100644 --- a/cves/2025/CVE-2025-6934.md +++ b/cves/2025/CVE-2025-6934.md @@ -19,6 +19,11 @@ The Opal Estate Pro – Property Management and Submission plugin for WordPress, - https://github.com/Pwdnx1337/CVE-2025-6934 - https://github.com/Rosemary1337/CVE-2025-6934 - https://github.com/yukinime/CVE-2025-6934 +- https://github.com/0xTerror/CVE-2025-6934 +- https://github.com/1atakan1/CVE-2025-6934 +- https://github.com/AnotherSec/CVE-2025-6934 +- https://github.com/Jenderal92/WP-CVE-2025-6934 +- https://github.com/MejbanKadir/CVE-2025-6934-PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6934.yaml diff --git a/cves/2025/CVE-2025-7441.md b/cves/2025/CVE-2025-7441.md index 486c7f8bef5..abdcbc49201 100644 --- a/cves/2025/CVE-2025-7441.md +++ b/cves/2025/CVE-2025-7441.md @@ -13,7 +13,8 @@ The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in a No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/AnotherSec/CVE-2025-7441 +- https://github.com/Nxploited/CVE-2025-7441 #### ExploitDB - https://www.exploit-db.com/exploits/52422 diff --git a/cves/2025/CVE-2025-7558.md b/cves/2025/CVE-2025-7558.md index 57207ac881b..d9d44d78d8d 100644 --- a/cves/2025/CVE-2025-7558.md +++ b/cves/2025/CVE-2025-7558.md @@ -15,5 +15,5 @@ Eine Schwachstelle wurde in code-projects Voting System 1.0 gefunden. Sie wurde - https://github.com/i-Corner/cve/issues/6 #### Github -No PoCs found on GitHub currently. +- https://github.com/rundas-r00t/CVE-2025-7558-PoC diff --git a/cves/2025/CVE-2025-7771.md b/cves/2025/CVE-2025-7771.md index 57023a987cf..a237f18e38b 100644 --- a/cves/2025/CVE-2025-7771.md +++ b/cves/2025/CVE-2025-7771.md @@ -14,6 +14,13 @@ No PoCs from references. #### Github - https://github.com/Demoo1337/ThrottleStop +- https://github.com/AmrHuss/throttlestop-exploit-rw +- https://github.com/D4rkks/CVE-2025-7771-Vulnerability-Exploration +- https://github.com/Gabriel-Lacorte/CVE-2025-7771 +- https://github.com/enessakircolak/CVE-2025-7771 +- https://github.com/lzty/CVE-2025-7771 +- https://github.com/mein-0/cve-2025-7771 +- https://github.com/xM0kht4r/CVE-2025-7771 #### ExploitDB - https://www.exploit-db.com/exploits/52512 diff --git a/cves/2025/CVE-2025-7775.md b/cves/2025/CVE-2025-7775.md index 5626d1ab11b..7d52103a99d 100644 --- a/cves/2025/CVE-2025-7775.md +++ b/cves/2025/CVE-2025-7775.md @@ -21,4 +21,5 @@ No PoCs from references. - https://github.com/hacker-r3volv3r/CVE-2025-7775-PoC - https://github.com/mr-r3b00t/CVE-2025-7775 - https://github.com/rxerium/CVE-2025-7775 +- https://github.com/swabird/CVE-2025-7775-PoC diff --git a/cves/2025/CVE-2025-7892.md b/cves/2025/CVE-2025-7892.md index c5a144be387..bfba9d86953 100644 --- a/cves/2025/CVE-2025-7892.md +++ b/cves/2025/CVE-2025-7892.md @@ -21,5 +21,5 @@ Es wurde eine Schwachstelle in IDnow App bis 9.6.0 für Android entdeckt. Sie wu - https://github.com/KMov-g/androidapps/blob/main/de.idnow.md#steps-to-reproduce #### Github -No PoCs found on GitHub currently. +- https://github.com/FlyingLemonade/CVE-2025-7892-Proof-of-Concept-Login-Form diff --git a/cves/2025/CVE-2025-8061.md b/cves/2025/CVE-2025-8061.md index a4fc742792e..ae7398994f2 100644 --- a/cves/2025/CVE-2025-8061.md +++ b/cves/2025/CVE-2025-8061.md @@ -14,5 +14,7 @@ A potential insufficient access control vulnerability was reported in the Lenovo No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/spawn451/CVE-2025-8061-Exploit +- https://github.com/symeonp/Lenovo-CVE-2025-8061 +- https://github.com/vxqs/Lenovo-CVE-2025-8061 diff --git a/cves/2025/CVE-2025-8081.md b/cves/2025/CVE-2025-8081.md index 5e1b7dc516d..4e0230fcccd 100644 --- a/cves/2025/CVE-2025-8081.md +++ b/cves/2025/CVE-2025-8081.md @@ -13,4 +13,4 @@ The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all v No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/LyesH4ck/CVE-2025-8081-Elementor diff --git a/cves/2025/CVE-2025-8088.md b/cves/2025/CVE-2025-8088.md index 095da171b73..a72204da800 100644 --- a/cves/2025/CVE-2025-8088.md +++ b/cves/2025/CVE-2025-8088.md @@ -37,4 +37,14 @@ A path traversal vulnerability affecting the Windows version of WinRAR allows th - https://github.com/techcorp/CVE-2025-8088-Exploit - https://github.com/travisbgreen/cve-2025-8088 - https://github.com/walidpyh/CVE-2025-8088 +- https://github.com/IsmaelCosma/CVE-2025-8088 +- https://github.com/Lewis-Ricardo/Amaranth-Project +- https://github.com/aldisakti2/CVE-2025-8088-BUILDER-Winrar-Tool +- https://github.com/lennertdefauw/CVE-2025-8088 +- https://github.com/nuky-alt/CVE-2025-8088 +- https://github.com/papcaii2004/CVE-2025-8088-WinRAR-builder +- https://github.com/shaheeryasirofficial/CVE-2025-8088 +- https://github.com/skander1337/winrar-exploit +- https://github.com/undefined-name12/CVE-2025-8088-Winrar +- https://github.com/xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit diff --git a/cves/2025/CVE-2025-8220.md b/cves/2025/CVE-2025-8220.md index 053d315bc82..ab8ac49788a 100644 --- a/cves/2025/CVE-2025-8220.md +++ b/cves/2025/CVE-2025-8220.md @@ -16,5 +16,5 @@ Es wurde eine kritische Schwachstelle in Engeman Web bis 12.0.0.1 entdeckt. Dabe - https://github.com/m3m0o/engeman-web-language-combobox-sqli #### Github -No PoCs found on GitHub currently. +- https://github.com/m3m0o/engeman-web-language-combobox-sqli diff --git a/cves/2025/CVE-2025-8671.md b/cves/2025/CVE-2025-8671.md index fe5051abe9f..bd3626e9117 100644 --- a/cves/2025/CVE-2025-8671.md +++ b/cves/2025/CVE-2025-8671.md @@ -45,4 +45,5 @@ A mismatch caused by client-triggered server-sent stream resets between HTTP/2 s - https://github.com/abiyeenzo/CVE-2025-8671 - https://github.com/mateusm1403/PoC-CVE-2025-8671-MadeYouReset-HTTP-2 - https://github.com/moften/CVE-2025-8671-MadeYouReset-HTTP-2-DDoS +- https://github.com/mysara2022/CVE-2025-8671-vulnerability-POC- diff --git a/cves/2025/CVE-2025-9074.md b/cves/2025/CVE-2025-9074.md index 439ced9a268..7600cdec1ad 100644 --- a/cves/2025/CVE-2025-9074.md +++ b/cves/2025/CVE-2025-9074.md @@ -22,6 +22,19 @@ A vulnerability was identified in Docker Desktop that allows local running Linux - https://github.com/j3r1ch0123/CVE-2025-9074 - https://github.com/pucagit/CVE-2025-9074 - https://github.com/zenzue/CVE-2025-9074 +- https://github.com/3rendil/CVE-2025-9074-POC +- https://github.com/BridgerAlderson/CVE-2025-9074-PoC +- https://github.com/Medaz-Sploit/CVE-2025-9074-Docker-Desktop-API-Escape-PoC +- https://github.com/OilSeller2001/PoC-for-CVE-2025-9074 +- https://github.com/PtechAmanja/CVE-2025-9074-Docker-Desktop-Container-Escape +- https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit +- https://github.com/XRayZen/cve-2025-9074-poc +- https://github.com/c0gnit00/CVE-2025-9074 +- https://github.com/chernandez321/CVE-2025-9074-docker-escape +- https://github.com/pppxo/CVE-2025-9074-PoC-Bash +- https://github.com/rocket-panda/CVE-2025-9074 +- https://github.com/x0da6h/POC-for-CVE-2025-9074 +- https://github.com/zaydbf/CVE-2025-9074-Poc #### ExploitDB - https://www.exploit-db.com/exploits/52472 diff --git a/cves/2025/CVE-2025-9215.md b/cves/2025/CVE-2025-9215.md index 0da0d0c152c..db6b47dca16 100644 --- a/cves/2025/CVE-2025-9215.md +++ b/cves/2025/CVE-2025-9215.md @@ -14,4 +14,4 @@ The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Membership - https://ryankozak.com/posts/cve-2025-9215/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-9215 diff --git a/cves/2025/CVE-2025-9216.md b/cves/2025/CVE-2025-9216.md index aebb305e447..c44eaba3dd1 100644 --- a/cves/2025/CVE-2025-9216.md +++ b/cves/2025/CVE-2025-9216.md @@ -14,4 +14,4 @@ The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Membership - https://ryankozak.com/posts/cve-2025-9216/ #### Github -No PoCs found on GitHub currently. +- https://github.com/d0n601/CVE-2025-9216 diff --git a/cves/2025/CVE-2025-9242.md b/cves/2025/CVE-2025-9242.md index d7f71994b28..80f7b4e51ea 100644 --- a/cves/2025/CVE-2025-9242.md +++ b/cves/2025/CVE-2025-9242.md @@ -16,7 +16,8 @@ An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remot No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/UnusualGiraffe/WatchGuard-CVE-2025-9242-PoC-and-Mass-Scanner +- https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-9242.yaml diff --git a/cves/2025/CVE-2025-9491.md b/cves/2025/CVE-2025-9491.md index 9b0412014bc..c845b662d81 100644 --- a/cves/2025/CVE-2025-9491.md +++ b/cves/2025/CVE-2025-9491.md @@ -13,5 +13,5 @@ Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerabil No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/Amperclock/CVE-2025-9491_POC diff --git a/cves/2025/CVE-2025-9933.md b/cves/2025/CVE-2025-9933.md index 85478958ee1..540e7849e5d 100644 --- a/cves/2025/CVE-2025-9933.md +++ b/cves/2025/CVE-2025-9933.md @@ -15,5 +15,5 @@ In PHPGurukul Beauty Parlour Management System 1.1 ist eine Schwachstelle entdec - https://github.com/xiaoxinkaishi/cve/issues/4 #### Github -No PoCs found on GitHub currently. +- https://github.com/titanmaster96/cve-2025-9933 diff --git a/cves/2025/CVE-2025-9951.md b/cves/2025/CVE-2025-9951.md index c3f88063905..6e82e8feeb1 100644 --- a/cves/2025/CVE-2025-9951.md +++ b/cves/2025/CVE-2025-9951.md @@ -13,5 +13,5 @@ A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attack - https://github.com/google/security-research/security/advisories/GHSA-39q3-f8jq-v6mg #### Github -No PoCs found on GitHub currently. +- https://github.com/fm0ss/cve-2025-9951-ffmpeg-jp2-poc diff --git a/cves/2025/CVE-2025-9961.md b/cves/2025/CVE-2025-9961.md index d23f503182d..da198246839 100644 --- a/cves/2025/CVE-2025-9961.md +++ b/cves/2025/CVE-2025-9961.md @@ -14,5 +14,5 @@ An authenticated attacker may remotely execute arbitrary code via the CWMP binar No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/yt2w/CVE-2025-9961 diff --git a/cves/2025/CVE-2025-9983.md b/cves/2025/CVE-2025-9983.md index a6f096f5782..25e4b84c83d 100644 --- a/cves/2025/CVE-2025-9983.md +++ b/cves/2025/CVE-2025-9983.md @@ -13,5 +13,5 @@ GALAYOU G2 cameras stream video output via RTSP streams. By default these stream No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/sohaibeb/CVE-2025-9983 diff --git a/cves/2026/CVE-2026-0073.md b/cves/2026/CVE-2026-0073.md index a4665a26237..d30e8bedc91 100644 --- a/cves/2026/CVE-2026-0073.md +++ b/cves/2026/CVE-2026-0073.md @@ -27,3 +27,6 @@ No PoCs from references. - https://github.com/m00ddy/CVE-2026-0073-Android-client-TLS-auth-bypass - https://github.com/fredevsec/CVE-2026-0073 - https://github.com/aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass +- https://github.com/0xbinder/CVE-2026-0073 +- https://github.com/devtint/CVE-2026-0073 +- https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit diff --git a/cves/2026/CVE-2026-0257.md b/cves/2026/CVE-2026-0257.md index 064027741b1..d8ae82f2274 100644 --- a/cves/2026/CVE-2026-0257.md +++ b/cves/2026/CVE-2026-0257.md @@ -27,6 +27,7 @@ No PoCs from references. - https://github.com/akashsingh0454/CVE-2026-0257-PoC - https://github.com/Mr-Robot-LP/CVE-2026-0257 - https://github.com/Ez4rd1x1/CVE-2026-0257 +- https://github.com/HORKimhab/CVE-2026-0257 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml diff --git a/cves/2026/CVE-2026-0300.md b/cves/2026/CVE-2026-0300.md index 60427b26427..e5909c7af2c 100644 --- a/cves/2026/CVE-2026-0300.md +++ b/cves/2026/CVE-2026-0300.md @@ -29,3 +29,4 @@ No PoCs from references. - https://github.com/shizuku198411/CVE-2026-0300 - https://github.com/qassam-315/PAN-OS-User-ID-Buffer-Overflow-PoC - https://github.com/lu4m575/CVE-2026-0300 +- https://github.com/sam00/POC-CVE-2026-0300-exploit diff --git a/cves/2026/CVE-2026-10036.md b/cves/2026/CVE-2026-10036.md index 6f1c8b81ebb..ccf0f7a6cd1 100644 --- a/cves/2026/CVE-2026-10036.md +++ b/cves/2026/CVE-2026-10036.md @@ -13,4 +13,4 @@ SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that - https://github.com/SaiTeja-Erukude/CVE-2026-10036-speechbrain-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-10036-speechbrain-rce diff --git a/cves/2026/CVE-2026-10580.md b/cves/2026/CVE-2026-10580.md index a3186ad9bda..1c2795077c3 100644 --- a/cves/2026/CVE-2026-10580.md +++ b/cves/2026/CVE-2026-10580.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/0xgh057r3c0n/CVE-2026-10580 +- https://github.com/Polosss/By-Poloss..-..CVE-2026-10580 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10580.yaml diff --git a/cves/2026/CVE-2026-11961.md b/cves/2026/CVE-2026-11961.md index 331b7b3aaa1..4c861faf6c2 100644 --- a/cves/2026/CVE-2026-11961.md +++ b/cves/2026/CVE-2026-11961.md @@ -13,4 +13,4 @@ The User Registration & Membership WordPress plugin before 5.2.3 does not valid - https://wpscan.com/vulnerability/2ffab574-8626-472e-b6e4-09bcbaa62349/ #### Github -No PoCs found on GitHub currently. +- https://github.com/JohenLastGen-JLG/CVE-2026-11961 diff --git a/cves/2026/CVE-2026-1312.md b/cves/2026/CVE-2026-1312.md index d5bdcc91f3d..4280106398c 100644 --- a/cves/2026/CVE-2026-1312.md +++ b/cves/2026/CVE-2026-1312.md @@ -19,3 +19,4 @@ No PoCs from references. #### Github - https://github.com/alpinine/CVE-2026-1312-Testing +- https://github.com/sw0rd1ight/CVE-2026-1312 diff --git a/cves/2026/CVE-2026-1337.md b/cves/2026/CVE-2026-1337.md index 778a002b144..e8b114d7936 100644 --- a/cves/2026/CVE-2026-1337.md +++ b/cves/2026/CVE-2026-1337.md @@ -16,4 +16,5 @@ Proof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337 - https://github.com/JoakimBulow/CVE-2026-1337 #### Github -No PoCs found on GitHub currently. +- https://github.com/George0Papasotiriou/CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape +- https://github.com/JoakimBulow/CVE-2026-1337 diff --git a/cves/2026/CVE-2026-13768.md b/cves/2026/CVE-2026-13768.md index df03e7ea4f6..f92340ed3d9 100644 --- a/cves/2026/CVE-2026-13768.md +++ b/cves/2026/CVE-2026-13768.md @@ -16,3 +16,4 @@ No PoCs from references. #### Github - https://github.com/MichaelAdamGroberman/CVE-2026-13768 +- https://github.com/J4ck3LSyN-Gen2/CVE-2026-13768 diff --git a/cves/2026/CVE-2026-14483.md b/cves/2026/CVE-2026-14483.md index 5b79f23a859..bc83021c269 100644 --- a/cves/2026/CVE-2026-14483.md +++ b/cves/2026/CVE-2026-14483.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/MadExploits/CVE-2026-14483 +- https://github.com/0xdak/CVE-2026-14483_exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14483.yaml diff --git a/cves/2026/CVE-2026-14894.md b/cves/2026/CVE-2026-14894.md index 87dae3e330a..100c2515435 100644 --- a/cves/2026/CVE-2026-14894.md +++ b/cves/2026/CVE-2026-14894.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/1beelze/CVE-2026-14894 +- https://github.com/shinthink/CVE-2026-14894 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14894.yaml diff --git a/cves/2026/CVE-2026-15038.md b/cves/2026/CVE-2026-15038.md index bd48d9ea486..9d69c50dfdb 100644 --- a/cves/2026/CVE-2026-15038.md +++ b/cves/2026/CVE-2026-15038.md @@ -13,4 +13,4 @@ The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify th - https://wpscan.com/vulnerability/629d655f-cdb8-4733-81d5-12fa88c32bb6/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Polosss/By-Poloss..-..CVE-2026-15038-POC diff --git a/cves/2026/CVE-2026-15409.md b/cves/2026/CVE-2026-15409.md index 896dd1b56ac..a43dfc93c4c 100644 --- a/cves/2026/CVE-2026-15409.md +++ b/cves/2026/CVE-2026-15409.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/0xBlackash/CVE-2026-15409 - https://github.com/HORKimhab/CVE-2026-15409 - https://github.com/Ch4120N/CVE-2026-15409 +- https://github.com/tc4dy/CVE-2026-15409-15410-Framework #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-15409.yaml diff --git a/cves/2026/CVE-2026-15410.md b/cves/2026/CVE-2026-15410.md index 39b66f3113e..9acbbbcbb08 100644 --- a/cves/2026/CVE-2026-15410.md +++ b/cves/2026/CVE-2026-15410.md @@ -15,7 +15,7 @@ Post-authentication improper control of generation of code ('Code Injection') vu No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/HORKimhab/CVE-2026-15410 #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sonicwall_sma1000_wsproxy_rce.rb diff --git a/cves/2026/CVE-2026-15748.md b/cves/2026/CVE-2026-15748.md index 8c6aae54bee..2970bc58c65 100644 --- a/cves/2026/CVE-2026-15748.md +++ b/cves/2026/CVE-2026-15748.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-15826-CVE-2026-15748 - https://github.com/ubaydev/CVE-2026-15748 +- https://github.com/yora1928/cve-2026-15748 diff --git a/cves/2026/CVE-2026-17544.md b/cves/2026/CVE-2026-17544.md index da24181158f..4b56ae7a3ba 100644 --- a/cves/2026/CVE-2026-17544.md +++ b/cves/2026/CVE-2026-17544.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/Boreas37/CVE-2026-17544-PoC +- https://github.com/r2qa/CVE-2026-17544 diff --git a/cves/2026/CVE-2026-18366.md b/cves/2026/CVE-2026-18366.md index 34354c0e849..8bb1f4f02b9 100644 --- a/cves/2026/CVE-2026-18366.md +++ b/cves/2026/CVE-2026-18366.md @@ -14,3 +14,4 @@ The Events Manager WordPress plugin before 7.4.1 does not properly scope its ca #### Github - https://github.com/Nxploited/CVE-2026-18366 +- https://github.com/ghostpels/CVE-2026-18366 diff --git a/cves/2026/CVE-2026-18963.md b/cves/2026/CVE-2026-18963.md index b55a1e5874d..82d5e3d0d6d 100644 --- a/cves/2026/CVE-2026-18963.md +++ b/cves/2026/CVE-2026-18963.md @@ -26,6 +26,8 @@ No PoCs from references. - https://github.com/BlackHatExploitation/Exploit-For-CVE-2026-18963 - https://github.com/c0dejump/UnKeycloak - https://github.com/M4xSec/My-Exploits +- https://github.com/gman0x00/keycloak-CVE-2026-18963 +- https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml diff --git a/cves/2026/CVE-2026-19193.md b/cves/2026/CVE-2026-19193.md index 9536b22e47c..12e567f33e2 100644 --- a/cves/2026/CVE-2026-19193.md +++ b/cves/2026/CVE-2026-19193.md @@ -14,4 +14,4 @@ A flaw has been found in Jiangmin Antivirus 21. Impacted is the function Message - https://github.com/patrickt2017/CVE-2026-19193-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/patrickt2017/CVE-2026-19193-PoC diff --git a/cves/2026/CVE-2026-19195.md b/cves/2026/CVE-2026-19195.md index 7491d1f8e30..dce4854a2ad 100644 --- a/cves/2026/CVE-2026-19195.md +++ b/cves/2026/CVE-2026-19195.md @@ -14,4 +14,4 @@ A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affec - https://github.com/patrickt2017/CVE-2026-19195-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/patrickt2017/CVE-2026-19195-PoC diff --git a/cves/2026/CVE-2026-19478.md b/cves/2026/CVE-2026-19478.md index 640946f66ca..93b07f7ed79 100644 --- a/cves/2026/CVE-2026-19478.md +++ b/cves/2026/CVE-2026-19478.md @@ -22,6 +22,7 @@ GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 - https://github.com/punitdarji/Gitlab-CVE-2026-19478 - https://github.com/renzi25031469/CVE-2026-19478 - https://github.com/n0xdaemon/cve-2026-19478 +- https://github.com/dinosn/gitlab-cve-2026-19478-lab #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19478.yaml diff --git a/cves/2026/CVE-2026-19500.md b/cves/2026/CVE-2026-19500.md index e17ccb9a755..2c6cf29bb4e 100644 --- a/cves/2026/CVE-2026-19500.md +++ b/cves/2026/CVE-2026-19500.md @@ -13,4 +13,4 @@ The Entries component in Brainstorm Force SureForms version, less than 2.12.3, d - https://github.com/typedefabcd1234ntd/CVE-2026-19500-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/typedefabcd1234ntd/CVE-2026-19500-poc diff --git a/cves/2026/CVE-2026-19501.md b/cves/2026/CVE-2026-19501.md index 6855f4506b1..3b49f6d4577 100644 --- a/cves/2026/CVE-2026-19501.md +++ b/cves/2026/CVE-2026-19501.md @@ -13,4 +13,4 @@ CSV export functionality in Brainstorm Force SureForms version, <= 2.12.1, fails - https://github.com/typedefabcd1234ntd/CVE-2026-19501-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/typedefabcd1234ntd/CVE-2026-19501-poc diff --git a/cves/2026/CVE-2026-20127.md b/cves/2026/CVE-2026-20127.md index 91a665b8b7d..bb1e0ddc803 100644 --- a/cves/2026/CVE-2026-20127.md +++ b/cves/2026/CVE-2026-20127.md @@ -356,6 +356,7 @@ No PoCs from references. - https://github.com/gigachadusers/cve-2026-20127 - https://github.com/0xBlackash/CVE-2026-20127 - https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension +- https://github.com/BugFor-Pings/CVE-2026-20127_EXP #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb diff --git a/cves/2026/CVE-2026-20253.md b/cves/2026/CVE-2026-20253.md index db947116fb2..7e7216d1cfe 100644 --- a/cves/2026/CVE-2026-20253.md +++ b/cves/2026/CVE-2026-20253.md @@ -21,6 +21,7 @@ No PoCs from references. - https://github.com/fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE- - https://github.com/Het-Kalariya/CVE-2026-20253 - https://github.com/shunfeng8421/exploit-library +- https://github.com/0xBlackash/CVE-2026-20253 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20253.yaml diff --git a/cves/2026/CVE-2026-20841.md b/cves/2026/CVE-2026-20841.md index 9b8b96a2c2b..977c52bf08d 100644 --- a/cves/2026/CVE-2026-20841.md +++ b/cves/2026/CVE-2026-20841.md @@ -25,3 +25,4 @@ No PoCs from references. - https://github.com/EleniChristopoulou/PoC-CVE-2026-20841 - https://github.com/hackfaiz/CVE-2026-20841-PoC - https://github.com/0xBlackash/CVE-2026-20841 +- https://github.com/whiskeylab/notepad_CVE_2026_20841 diff --git a/cves/2026/CVE-2026-20896.md b/cves/2026/CVE-2026-20896.md index 1ce78b9180e..01083a3f96b 100644 --- a/cves/2026/CVE-2026-20896.md +++ b/cves/2026/CVE-2026-20896.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/XaocZenon/CVE-2026-20896 - https://github.com/EQSTLab/CVE-2026-20896 - https://github.com/judgedbykira/CVE-2026-20896-Gitea-Authentication-Bypass +- https://github.com/rz1027/CVE-2026-20896 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20896.yaml diff --git a/cves/2026/CVE-2026-21440.md b/cves/2026/CVE-2026-21440.md index 79e0494f406..dcf44a569ca 100644 --- a/cves/2026/CVE-2026-21440.md +++ b/cves/2026/CVE-2026-21440.md @@ -17,3 +17,4 @@ No PoCs from references. - https://github.com/redpack-kr/Ashwesker-CVE-2026-21440 - https://github.com/k0nnect/cve-2026-21440-writeup-poc - https://github.com/TibbersV6/CVE-2026-21440-POC-EXP +- https://github.com/you-ssef9/CVE-2026-21440 diff --git a/cves/2026/CVE-2026-21509.md b/cves/2026/CVE-2026-21509.md index 4ee3be80eab..943335c3bc8 100644 --- a/cves/2026/CVE-2026-21509.md +++ b/cves/2026/CVE-2026-21509.md @@ -26,3 +26,4 @@ No PoCs from references. - https://github.com/DameDode/CVE-2026-21509-POC - https://github.com/razureink/cve-2026-21509-office_security_bypass_reproduction - https://github.com/IsMyPhonePwned/mimic +- https://github.com/SimoesCTT/CTT-NFS-Vortex-RCE diff --git a/cves/2026/CVE-2026-21858.md b/cves/2026/CVE-2026-21858.md index f2d1fd2e5cd..e4f81c9c52a 100644 --- a/cves/2026/CVE-2026-21858.md +++ b/cves/2026/CVE-2026-21858.md @@ -32,3 +32,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/n8n/CVE-2026-21858 diff --git a/cves/2026/CVE-2026-21962.md b/cves/2026/CVE-2026-21962.md index 1c3642a7fc0..fb21bce36f0 100644 --- a/cves/2026/CVE-2026-21962.md +++ b/cves/2026/CVE-2026-21962.md @@ -22,3 +22,5 @@ No PoCs from references. - https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- - https://github.com/0xBlackash/CVE-2026-21962 - https://github.com/zeetee1235/CVE-2026-21962 +- https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962 +- https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool diff --git a/cves/2026/CVE-2026-2256.md b/cves/2026/CVE-2026-2256.md index 1bd79b688e2..f47c1b2c3cd 100644 --- a/cves/2026/CVE-2026-2256.md +++ b/cves/2026/CVE-2026-2256.md @@ -15,3 +15,4 @@ A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 an #### Github - https://github.com/mruniversity/CVE-2026-2256- - https://github.com/melbratic/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection +- https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC diff --git a/cves/2026/CVE-2026-22679.md b/cves/2026/CVE-2026-22679.md index 50d96316f27..1a2087ababd 100644 --- a/cves/2026/CVE-2026-22679.md +++ b/cves/2026/CVE-2026-22679.md @@ -13,4 +13,4 @@ Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthentic No PoCs from references. #### Github -No PoCs found on GitHub currently. +- https://github.com/keraattin/CVE-2026-22679 diff --git a/cves/2026/CVE-2026-22732.md b/cves/2026/CVE-2026-22732.md index 32bb9a9b997..98fad15bd24 100644 --- a/cves/2026/CVE-2026-22732.md +++ b/cves/2026/CVE-2026-22732.md @@ -22,3 +22,4 @@ No PoCs from references. #### Github - https://github.com/moderneinc/rewrite-cve-2026-22732 +- https://github.com/semgrep/cve-2026-22732-demo diff --git a/cves/2026/CVE-2026-22777.md b/cves/2026/CVE-2026-22777.md index fad5a01b4a3..e0476e8adae 100644 --- a/cves/2026/CVE-2026-22777.md +++ b/cves/2026/CVE-2026-22777.md @@ -15,3 +15,6 @@ No PoCs from references. #### Github - https://github.com/wcnmwcis/CVE-2026-22777 + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/comfyui/CVE-2026-22777 diff --git a/cves/2026/CVE-2026-23111.md b/cves/2026/CVE-2026-23111.md index 28ac5f17f53..1ebb9042b10 100644 --- a/cves/2026/CVE-2026-23111.md +++ b/cves/2026/CVE-2026-23111.md @@ -73,3 +73,4 @@ No PoCs from references. - https://github.com/bakano98/cve-2026-23111-poc - https://github.com/vrtlbob/Linux-Kernel-Vulnerabilities-CVE-2026-23111 - https://github.com/Knz-source/CVE-2026-23111-POC-noddlenpottato +- https://github.com/ishankaru/CVE-2026-23111-nftables-lab diff --git a/cves/2026/CVE-2026-23552.md b/cves/2026/CVE-2026-23552.md index 12ce5703b5f..c25d05c771c 100644 --- a/cves/2026/CVE-2026-23552.md +++ b/cves/2026/CVE-2026-23552.md @@ -18,4 +18,4 @@ Users are recommended to upgrade to version 4.18.0, which fixes the issue. - https://github.com/oscerd/CVE-2026-23552 #### Github -No PoCs found on GitHub currently. +- https://github.com/oscerd/CVE-2026-23552 diff --git a/cves/2026/CVE-2026-24061.md b/cves/2026/CVE-2026-24061.md index 2bac7d886b4..f254aac4982 100644 --- a/cves/2026/CVE-2026-24061.md +++ b/cves/2026/CVE-2026-24061.md @@ -65,6 +65,10 @@ No PoCs from references. - https://github.com/s-vx/CVE-2026-24061 - https://github.com/iLokaas/CVE-2026-24061-payload - https://github.com/hackingyseguridad/root +- https://github.com/0xBlackash/CVE-2026-24061 +- https://github.com/franckferman/CVE-2026-24061 +- https://github.com/tc4dy/CVE-2026-24061-PoC-Exploit +- https://github.com/tiborscholtz/CVE-2026-24061 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml @@ -74,3 +78,6 @@ No PoCs from references. #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/telnet/gnu_inetutils_auth_bypass.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/inetutils/CVE-2026-24061 diff --git a/cves/2026/CVE-2026-2441.md b/cves/2026/CVE-2026-2441.md index 663a071b09b..9614e019fa5 100644 --- a/cves/2026/CVE-2026-2441.md +++ b/cves/2026/CVE-2026-2441.md @@ -18,6 +18,8 @@ No PoCs from references. - https://github.com/NetVanguard-cmd/CVE-2026-2441 - https://github.com/D3b0j33t/CVE-2026-2441-PoC - https://github.com/theemperorspath/CVE-2026-2441-PoC +- https://github.com/MartinaStarone/CVE-2026-2441 +- https://github.com/atiilla/CVE-2026-2441_PoC #### ExploitDB - https://www.exploit-db.com/exploits/52542 diff --git a/cves/2026/CVE-2026-24858.md b/cves/2026/CVE-2026-24858.md index 8a667117e34..aebec5967cc 100644 --- a/cves/2026/CVE-2026-24858.md +++ b/cves/2026/CVE-2026-24858.md @@ -27,3 +27,4 @@ No PoCs from references. - https://github.com/m0d0ri205/CVE-2026-24858 - https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass - https://github.com/gagaltotal/cve-2026-24858 +- https://github.com/SimoesCTT/-CTT-NSP-Convergent-Time-Theory---Network-Stack-Projection-CVE-2026-24858- diff --git a/cves/2026/CVE-2026-25177.md b/cves/2026/CVE-2026-25177.md index c8e85d28f5a..94edbb945ac 100644 --- a/cves/2026/CVE-2026-25177.md +++ b/cves/2026/CVE-2026-25177.md @@ -45,3 +45,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-25177 +- https://github.com/danaug23/detect_CVE-2026-25177 diff --git a/cves/2026/CVE-2026-25253.md b/cves/2026/CVE-2026-25253.md index 8d0cdc5b6c8..d516ee6512d 100644 --- a/cves/2026/CVE-2026-25253.md +++ b/cves/2026/CVE-2026-25253.md @@ -20,3 +20,6 @@ No PoCs from references. - https://github.com/tonydzi/leash-poc - https://github.com/the-void-ia/ai-agent-security-labs - https://github.com/agenticdome/agenticdome-openclaw-security-ts + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/openclaw/CVE-2026-25253 diff --git a/cves/2026/CVE-2026-25747.md b/cves/2026/CVE-2026-25747.md index 105b85879cb..701e1e9f21b 100644 --- a/cves/2026/CVE-2026-25747.md +++ b/cves/2026/CVE-2026-25747.md @@ -21,3 +21,4 @@ Users are recommended to upgrade to version 4.18.0, which fixes the issue. For t #### Github - https://github.com/dinosn/CVE-2026-33453 +- https://github.com/oscerd/CVE-2026-25747 diff --git a/cves/2026/CVE-2026-25860.md b/cves/2026/CVE-2026-25860.md index 31f88964a4d..5e20edbc51b 100644 --- a/cves/2026/CVE-2026-25860.md +++ b/cves/2026/CVE-2026-25860.md @@ -14,4 +14,4 @@ OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability i - https://github.com/partywavesec/CVE-2026-25860 #### Github -No PoCs found on GitHub currently. +- https://github.com/partywavesec/CVE-2026-25860 diff --git a/cves/2026/CVE-2026-26198.md b/cves/2026/CVE-2026-26198.md index b85fb2933ca..d2b4b941014 100644 --- a/cves/2026/CVE-2026-26198.md +++ b/cves/2026/CVE-2026-26198.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/NetVanguard-cmd/CVE-2026-26198 +- https://github.com/sergicortesabadia/CVE-2026-26198-analysis diff --git a/cves/2026/CVE-2026-26211.md b/cves/2026/CVE-2026-26211.md index 237359208eb..0b3b71c23dc 100644 --- a/cves/2026/CVE-2026-26211.md +++ b/cves/2026/CVE-2026-26211.md @@ -13,4 +13,4 @@ Ekushey Project Manager CRM stores the administrator-configured system name and - https://github.com/LindHunt/CVE-2026-26211 #### Github -No PoCs found on GitHub currently. +- https://github.com/LindHunt/CVE-2026-26211 diff --git a/cves/2026/CVE-2026-2631.md b/cves/2026/CVE-2026-2631.md index abbc1b11f8b..81dc795b984 100644 --- a/cves/2026/CVE-2026-2631.md +++ b/cves/2026/CVE-2026-2631.md @@ -13,4 +13,4 @@ The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an una - https://wpscan.com/vulnerability/c6a64f26-4007-49a1-aa69-1e3c50223ac7/ #### Github -No PoCs found on GitHub currently. +- https://github.com/Nxploited/CVE-2026-2631 diff --git a/cves/2026/CVE-2026-2636.md b/cves/2026/CVE-2026-2636.md index dcef8fc6c9e..d7b4d84f492 100644 --- a/cves/2026/CVE-2026-2636.md +++ b/cves/2026/CVE-2026-2636.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/uname1able/CVE-2026-2636 +- https://github.com/oxfemale/CVE-2026-2636_PoC diff --git a/cves/2026/CVE-2026-27944.md b/cves/2026/CVE-2026-27944.md index 7cc97cee0e6..6952ff99716 100644 --- a/cves/2026/CVE-2026-27944.md +++ b/cves/2026/CVE-2026-27944.md @@ -18,6 +18,10 @@ No PoCs from references. - https://github.com/NULL200OK/CVE-2026-27944 - https://github.com/Goultarde/CVE-2026-27944-poc - https://github.com/jake-young-dev/CVE-2026-27944 +- https://github.com/BimaBalance/Cve-2026-27944-Tools-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27944.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/nginx-ui/CVE-2026-27944 diff --git a/cves/2026/CVE-2026-29000.md b/cves/2026/CVE-2026-29000.md index 1303b7cb80e..90a2e339329 100644 --- a/cves/2026/CVE-2026-29000.md +++ b/cves/2026/CVE-2026-29000.md @@ -32,3 +32,4 @@ pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication by - https://github.com/lucastran05/CVE-2026-29000 - https://github.com/c0gnit00/CVE-2026-29000 - https://github.com/dua2z3rr/CVE-2026-29000-PoC +- https://github.com/tc4dy/CVE-2026-29000-PoC-Exploit diff --git a/cves/2026/CVE-2026-29519.md b/cves/2026/CVE-2026-29519.md index f6abad5dd19..643244dbbc1 100644 --- a/cves/2026/CVE-2026-29519.md +++ b/cves/2026/CVE-2026-29519.md @@ -13,4 +13,4 @@ Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lin - https://github.com/L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS #### Github -No PoCs found on GitHub currently. +- https://github.com/L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS diff --git a/cves/2026/CVE-2026-29923.md b/cves/2026/CVE-2026-29923.md index a643f7a4f93..4a39894b859 100644 --- a/cves/2026/CVE-2026-29923.md +++ b/cves/2026/CVE-2026-29923.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/Smarttfoxx/CVE-2026-29923 - https://github.com/mein-0/cve-2026-29923 +- https://github.com/athenasec16/CVE-2026-29923 diff --git a/cves/2026/CVE-2026-3055.md b/cves/2026/CVE-2026-3055.md index 67a0cae0661..335f4980268 100644 --- a/cves/2026/CVE-2026-3055.md +++ b/cves/2026/CVE-2026-3055.md @@ -19,6 +19,7 @@ No PoCs from references. #### Github - https://github.com/fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC - https://github.com/NetVanguard-cmd/CVE-2026-3055 +- https://github.com/0xBlackash/CVE-2026-3055 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3055.yaml diff --git a/cves/2026/CVE-2026-31431.md b/cves/2026/CVE-2026-31431.md index 79271990696..ed1e199ff58 100644 --- a/cves/2026/CVE-2026-31431.md +++ b/cves/2026/CVE-2026-31431.md @@ -232,6 +232,12 @@ No PoCs from references. - https://github.com/songzzzz/dirtyfrag - https://github.com/nek-3231/copyfail-poc - https://github.com/RBKD-SEC/POC +- https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit +- https://github.com/danimrtzp/CVE-2026-31431-REVSHELL +- https://github.com/liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script +- https://github.com/mauricioportela/CVE-2026-31431-Analysis +- https://github.com/rippsec/CVE-2026-31431-Copy-Fail +- https://github.com/sibersan/cve-2026-31431-checker #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-31431.yaml diff --git a/cves/2026/CVE-2026-31816.md b/cves/2026/CVE-2026-31816.md index fcd7dd0364a..de5de276a74 100644 --- a/cves/2026/CVE-2026-31816.md +++ b/cves/2026/CVE-2026-31816.md @@ -18,3 +18,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31816.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/budibase/CVE-2026-31816 diff --git a/cves/2026/CVE-2026-34197.md b/cves/2026/CVE-2026-34197.md index 9b729ffdefe..5356be4a373 100644 --- a/cves/2026/CVE-2026-34197.md +++ b/cves/2026/CVE-2026-34197.md @@ -42,9 +42,14 @@ No PoCs from references. - https://github.com/hnytgl/CVE-2026-34197 - https://github.com/K3ysTr0K3R/CVE-2026-34197 - https://github.com/pssec-io/CVE-2026-34197 +- https://github.com/Catherines77/ActiveMQ-EXPtools +- https://github.com/asdasddqwdq29-a11y/CVE-2026-34197 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34197.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/activemq/CVE-2026-34197 diff --git a/cves/2026/CVE-2026-34486.md b/cves/2026/CVE-2026-34486.md index 70b6ae0bb8c..8fbbbb3ef29 100644 --- a/cves/2026/CVE-2026-34486.md +++ b/cves/2026/CVE-2026-34486.md @@ -30,3 +30,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34486.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/tomcat/CVE-2026-34486 diff --git a/cves/2026/CVE-2026-3844.md b/cves/2026/CVE-2026-3844.md index 13ef991560e..da74a035393 100644 --- a/cves/2026/CVE-2026-3844.md +++ b/cves/2026/CVE-2026-3844.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/0xgh057r3c0n/CVE-2026-3844 - https://github.com/Dhananjayasj/CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution - https://github.com/Alevtinka19/CVE-2026-3844 +- https://github.com/im-hanzou/CVE-2026-3844 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3844.yaml diff --git a/cves/2026/CVE-2026-39363.md b/cves/2026/CVE-2026-39363.md index 59c3f0f4c81..a2976dc5023 100644 --- a/cves/2026/CVE-2026-39363.md +++ b/cves/2026/CVE-2026-39363.md @@ -23,3 +23,6 @@ No PoCs from references. #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39363.yaml + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/vite/CVE-2026-39363 diff --git a/cves/2026/CVE-2026-39808.md b/cves/2026/CVE-2026-39808.md index 83ec3f7d55b..c2191a95177 100644 --- a/cves/2026/CVE-2026-39808.md +++ b/cves/2026/CVE-2026-39808.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/Lechansky/CVE-2026-39808 - https://github.com/HORKimhab/CVE-2026-39808 - https://github.com/error-inside/CVE-2026-39808 +- https://github.com/ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39808.yaml diff --git a/cves/2026/CVE-2026-39987.md b/cves/2026/CVE-2026-39987.md index 7364597ee46..09c25af1b95 100644 --- a/cves/2026/CVE-2026-39987.md +++ b/cves/2026/CVE-2026-39987.md @@ -29,6 +29,8 @@ No PoCs from references. - https://github.com/dodeepsink/CVE-2026-39987.py - https://github.com/MADA0L/CVE-2026-39987-Poc - https://github.com/Wind010/CVE-2026-39987_PoC +- https://github.com/Nxploited/CVE-2026-39987 +- https://github.com/mki9/CVE-2026-39987_exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39987.yaml diff --git a/cves/2026/CVE-2026-40369.md b/cves/2026/CVE-2026-40369.md index 6083708395c..3fe674a2222 100644 --- a/cves/2026/CVE-2026-40369.md +++ b/cves/2026/CVE-2026-40369.md @@ -24,3 +24,4 @@ No PoCs from references. - https://github.com/piffd0s/ntoskrnl-metadata - https://github.com/0xBlackash/CVE-2026-40369 - https://github.com/CCELEND/CVE-2026-40369 +- https://github.com/ercihan/CVE-2026-40369 diff --git a/cves/2026/CVE-2026-4106.md b/cves/2026/CVE-2026-4106.md index 09eec9cf7cb..ba6378e2c3d 100644 --- a/cves/2026/CVE-2026-4106.md +++ b/cves/2026/CVE-2026-4106.md @@ -13,7 +13,7 @@ The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unau - https://wpscan.com/vulnerability/9477ead2-3990-4aae-8e66-09ee2f4daa3e/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ef3tr/CVE-2026-4106 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4106.yaml diff --git a/cves/2026/CVE-2026-41089.md b/cves/2026/CVE-2026-41089.md index bd7367c6089..073ff899a34 100644 --- a/cves/2026/CVE-2026-41089.md +++ b/cves/2026/CVE-2026-41089.md @@ -34,3 +34,4 @@ No PoCs from references. - https://github.com/hnytgl/CVE-2026-41089 - https://github.com/0xBlackash/CVE-2026-41089 - https://github.com/jelasin/CVE-2026-41089 +- https://github.com/HydraSoft/CVE-2026-41089-Netlogon-RCE diff --git a/cves/2026/CVE-2026-41940.md b/cves/2026/CVE-2026-41940.md index c694355081a..d7abde5b3bc 100644 --- a/cves/2026/CVE-2026-41940.md +++ b/cves/2026/CVE-2026-41940.md @@ -64,6 +64,17 @@ No PoCs from references. - https://github.com/lanicer/cve-2026-41940-PoC - https://github.com/t4xo/CVE-2026-41940 - https://github.com/keithbennedict/CVE-2026-41940-Linux +- https://github.com/Ishanoshada/CVE-2026-41940-Exploit-PoC +- https://github.com/Jenderal92/CVE-2026-41940 +- https://github.com/NULL200OK/cve-2026-41940-tool +- https://github.com/george1-adel/CVE-2026-41940_exploit +- https://github.com/ilmndwntr/CVE-2026-41940-MASS-EXPLOIT +- https://github.com/imbas007/POC_CVE-2026-41940 +- https://github.com/sardine-web/Automated-scanner-CVE-2026-41940 +- https://github.com/sercanokur/CVE-2026-41940-cPanel-WHM-Verification-Tool +- https://github.com/tc4dy/CVE-2026-41940-PoC-Exploit +- https://github.com/ynsmroztas/cPanelSniper +- https://github.com/zwanski2019/cPanelSniper #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml diff --git a/cves/2026/CVE-2026-42167.md b/cves/2026/CVE-2026-42167.md index c7b0c7b1073..79fba774334 100644 --- a/cves/2026/CVE-2026-42167.md +++ b/cves/2026/CVE-2026-42167.md @@ -18,6 +18,8 @@ mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary co - https://github.com/jimmexploit/CVE-2026-42167-PoC - https://github.com/Sl4cK0TH/CVE-2026-42167-PoC - https://github.com/SimoesCTT/CTT-ProFTPD-Resonance +- https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc +- https://github.com/dinosn/proftpd-CVE-2026-42167-analysis #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-42167.yaml diff --git a/cves/2026/CVE-2026-42530.md b/cves/2026/CVE-2026-42530.md index 532a34e2e7a..0c477fe1ffc 100644 --- a/cves/2026/CVE-2026-42530.md +++ b/cves/2026/CVE-2026-42530.md @@ -18,3 +18,4 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-42530 - https://github.com/HORKimhab/CVE-2026-42530 +- https://github.com/v4ltonn/CVE-2026-42530 diff --git a/cves/2026/CVE-2026-42588.md b/cves/2026/CVE-2026-42588.md index ee048ad0add..c8725b148c0 100644 --- a/cves/2026/CVE-2026-42588.md +++ b/cves/2026/CVE-2026-42588.md @@ -27,3 +27,4 @@ No PoCs from references. #### Github - https://github.com/hnytgl/CVE-2026-42588 +- https://github.com/gentleman567/POC diff --git a/cves/2026/CVE-2026-42945.md b/cves/2026/CVE-2026-42945.md index d96823d937c..9a363eda0fe 100644 --- a/cves/2026/CVE-2026-42945.md +++ b/cves/2026/CVE-2026-42945.md @@ -39,3 +39,5 @@ No PoCs from references. - https://github.com/sec-sys/CVE-2026-42945-Reverse-Shell-POC - https://github.com/laohuang101/NginxRift-Poc - https://github.com/FranklinF25/cve-2026-42945 +- https://github.com/Kentox493/CVE-2026-42945_NginxRift +- https://github.com/LiaoZiqi-GZFLS/CVE-2026-42945 diff --git a/cves/2026/CVE-2026-43494.md b/cves/2026/CVE-2026-43494.md index 5a9e4f71ae8..53d0fecffd6 100644 --- a/cves/2026/CVE-2026-43494.md +++ b/cves/2026/CVE-2026-43494.md @@ -29,3 +29,6 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-43494 +- https://github.com/jayhutajulu1/CVE-2026-43494-PinTheft-PoC +- https://github.com/letsr00t/CVE-2026-43494-PinTheft-PoC +- https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC diff --git a/cves/2026/CVE-2026-43499.md b/cves/2026/CVE-2026-43499.md index 6bf70580668..b4131917556 100644 --- a/cves/2026/CVE-2026-43499.md +++ b/cves/2026/CVE-2026-43499.md @@ -136,3 +136,7 @@ No PoCs from references. - https://github.com/a15831536502-del/GKI_KernelSU_SUSFS - https://github.com/N1et/samsung-m53-root-4x - https://github.com/zenyxx-xd/RootMyVivo-Payloads +- https://github.com/2932796375github/CVE-2026-43499_OPPO-MT6835 +- https://github.com/fancyzll/CVE-2026-43499_OPPO-MT6835 +- https://github.com/knowlily/cve-2026-43499-honor +- https://github.com/zychen027/CVE-2026-43499_HW-CLT-AL01 diff --git a/cves/2026/CVE-2026-43501.md b/cves/2026/CVE-2026-43501.md index 43fc384d78e..6e19224fe7c 100644 --- a/cves/2026/CVE-2026-43501.md +++ b/cves/2026/CVE-2026-43501.md @@ -43,3 +43,4 @@ No PoCs from references. #### Github - https://github.com/ngtuonghung/CVE-2026-43501 +- https://github.com/Anyone202/cybermeowfia-termux diff --git a/cves/2026/CVE-2026-44401.md b/cves/2026/CVE-2026-44401.md index 084d7db52a1..1670f5da83e 100644 --- a/cves/2026/CVE-2026-44401.md +++ b/cves/2026/CVE-2026-44401.md @@ -13,4 +13,4 @@ Typemill CMS version 2.x contains a persistent cross-site scripting vulnerabilit - https://github.com/sn0x-sharma/CVE-2026-44401 #### Github -No PoCs found on GitHub currently. +- https://github.com/sn0x-sharma/CVE-2026-44401 diff --git a/cves/2026/CVE-2026-45185.md b/cves/2026/CVE-2026-45185.md index b2b58f04e3d..67b92ea4649 100644 --- a/cves/2026/CVE-2026-45185.md +++ b/cves/2026/CVE-2026-45185.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/0init/CVE-2026-45185 +- https://github.com/materaj2/cve-2026-45185-detection-script diff --git a/cves/2026/CVE-2026-45447.md b/cves/2026/CVE-2026-45447.md index e916e1144a4..ca3b916d622 100644 --- a/cves/2026/CVE-2026-45447.md +++ b/cves/2026/CVE-2026-45447.md @@ -43,3 +43,4 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-45447 +- https://github.com/0xBlackash/CVE-2026-45447 diff --git a/cves/2026/CVE-2026-45829.md b/cves/2026/CVE-2026-45829.md index 853f2ebf3a0..d029902ff88 100644 --- a/cves/2026/CVE-2026-45829.md +++ b/cves/2026/CVE-2026-45829.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-45829 +- https://github.com/fevar54/FULL-ANALYSIS---CVE-2026-45829-ChromaDB- diff --git a/cves/2026/CVE-2026-4631.md b/cves/2026/CVE-2026-4631.md index aa593c6e7a5..774fc8e33e1 100644 --- a/cves/2026/CVE-2026-4631.md +++ b/cves/2026/CVE-2026-4631.md @@ -19,6 +19,7 @@ No PoCs from references. #### Github - https://github.com/cyberheartmi9/CVE-2026-4631-cockpit-RCE +- https://github.com/ExDev994/CVE-2026-4631-cockpit-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4631.yaml diff --git a/cves/2026/CVE-2026-46331.md b/cves/2026/CVE-2026-46331.md index f192228ce22..ee7bcc6bbd6 100644 --- a/cves/2026/CVE-2026-46331.md +++ b/cves/2026/CVE-2026-46331.md @@ -46,3 +46,4 @@ No PoCs from references. - https://github.com/nawalacheker1/CVE-2026-46331 - https://github.com/cherrycherrymay/PoC-CVE-2026-46331 - https://github.com/0xdeadroot/pedit-cow-exploit +- https://github.com/V0IDNETWORK/CVE-2026-46331 diff --git a/cves/2026/CVE-2026-47103.md b/cves/2026/CVE-2026-47103.md index 6802d0c60c3..1697be8872e 100644 --- a/cves/2026/CVE-2026-47103.md +++ b/cves/2026/CVE-2026-47103.md @@ -13,4 +13,4 @@ Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution - https://github.com/SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-47103-python-statemachine-rce diff --git a/cves/2026/CVE-2026-47117.md b/cves/2026/CVE-2026-47117.md index 558294b6a63..a2050a9482e 100644 --- a/cves/2026/CVE-2026-47117.md +++ b/cves/2026/CVE-2026-47117.md @@ -13,4 +13,4 @@ OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII p - https://github.com/SaiTeja-Erukude/CVE-2026-47117-openmed-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-47117-openmed-rce diff --git a/cves/2026/CVE-2026-48611.md b/cves/2026/CVE-2026-48611.md index 535652314b5..98c0b75056e 100644 --- a/cves/2026/CVE-2026-48611.md +++ b/cves/2026/CVE-2026-48611.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/wanmywan/CVE-2026-48611-phpBB - https://github.com/Ethicalgrey/phpBB-CVE-2026-48611 +- https://github.com/Diznev/CVE-2026-48611-EXPLOIT #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48611.yaml diff --git a/cves/2026/CVE-2026-4885.md b/cves/2026/CVE-2026-4885.md index fa5fcde0c2a..31f710552c4 100644 --- a/cves/2026/CVE-2026-4885.md +++ b/cves/2026/CVE-2026-4885.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/xShadow-Here/CVE-2026-4885 +- https://github.com/Jenderal92/CVE-2026-4885 diff --git a/cves/2026/CVE-2026-48907.md b/cves/2026/CVE-2026-48907.md index 227311de278..8c3aba365cf 100644 --- a/cves/2026/CVE-2026-48907.md +++ b/cves/2026/CVE-2026-48907.md @@ -28,6 +28,8 @@ No PoCs from references. - https://github.com/ksotaria1337/-CVE-2026-48907- - https://github.com/CerberusMrXi/JCEzploit-CVE-2026-48907 - https://github.com/itsismarcos/COM_JCE_VANDA +- https://github.com/ChiefYoru/CVE-2026-48907_PoC +- https://github.com/xitexploiter96-dot/CVE-2026-48907- #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48907.yaml diff --git a/cves/2026/CVE-2026-48908.md b/cves/2026/CVE-2026-48908.md index 7240f34bac0..969eaed0021 100644 --- a/cves/2026/CVE-2026-48908.md +++ b/cves/2026/CVE-2026-48908.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla - https://github.com/Jenderal92/CVE-2026-48908 - https://github.com/cazzysoci/cve-2026-48908 +- https://github.com/ayiezola/CVE-2026-48908 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48908.yaml diff --git a/cves/2026/CVE-2026-48909.md b/cves/2026/CVE-2026-48909.md index d24ba1b66aa..4349c25c9e9 100644 --- a/cves/2026/CVE-2026-48909.md +++ b/cves/2026/CVE-2026-48909.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/Is4yev/CVE-2026-48909 +- https://github.com/CerberusMrXi/CVE-2026-48909-Joomla-SP-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48909.yaml diff --git a/cves/2026/CVE-2026-48939.md b/cves/2026/CVE-2026-48939.md index d3c1fdd3f2f..95fc65eb7b3 100644 --- a/cves/2026/CVE-2026-48939.md +++ b/cves/2026/CVE-2026-48939.md @@ -15,6 +15,8 @@ No PoCs from references. #### Github - https://github.com/Polosss/By-Poloss..-..CVE-2026-48939 +- https://github.com/ChiefYoru/CVE-2026-48939_PoC +- https://github.com/shinthink/CVE-2026-48939 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48939.yaml diff --git a/cves/2026/CVE-2026-49468.md b/cves/2026/CVE-2026-49468.md index 402dec32caf..0723f01f298 100644 --- a/cves/2026/CVE-2026-49468.md +++ b/cves/2026/CVE-2026-49468.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/josephbrito/LiteLLM-Unauthenticated-Command-Injection +- https://github.com/BiiTts/CVE-2026-49468-LiteLLM-Auth-Bypass diff --git a/cves/2026/CVE-2026-5027.md b/cves/2026/CVE-2026-5027.md index 185ab807a44..3706d255c16 100644 --- a/cves/2026/CVE-2026-5027.md +++ b/cves/2026/CVE-2026-5027.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/min8282/CVE-2026-5027 - https://github.com/HORKimhab/CVE-2026-5027 - https://github.com/Layer-6/CVE-2026-5027-Langflow +- https://github.com/0xBlackash/CVE-2026-5027 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml diff --git a/cves/2026/CVE-2026-5118.md b/cves/2026/CVE-2026-5118.md index 6b2e15a8ea3..aa5dcb18c3b 100644 --- a/cves/2026/CVE-2026-5118.md +++ b/cves/2026/CVE-2026-5118.md @@ -14,3 +14,6 @@ No PoCs from references. #### Github - https://github.com/zycoder0day/CVE-2026-5118 +- https://github.com/1beelze/CVE-2026-5118 +- https://github.com/Jenderal92/CVE-2026-5118 +- https://github.com/Yucaerin/CVE-2026-5118 diff --git a/cves/2026/CVE-2026-53753.md b/cves/2026/CVE-2026-53753.md index fece62d6bfc..ecf692446ec 100644 --- a/cves/2026/CVE-2026-53753.md +++ b/cves/2026/CVE-2026-53753.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/0xEnc0der/CVE-2026-53753 +- https://github.com/BiiTts/CVE-2026-53753-Crawl4AI-RCE #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53753.yaml diff --git a/cves/2026/CVE-2026-54121.md b/cves/2026/CVE-2026-54121.md index 39e44fb1615..ab8d4ed83f2 100644 --- a/cves/2026/CVE-2026-54121.md +++ b/cves/2026/CVE-2026-54121.md @@ -39,3 +39,4 @@ No PoCs from references. - https://github.com/GlendonNotGlen/certighost-cve-2026-54121-slides - https://github.com/KrakenEU/CVE-2026-54121-CertiGhost - https://github.com/sam00/POC-CVE-2026-54121-Certighost +- https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit diff --git a/cves/2026/CVE-2026-56121.md b/cves/2026/CVE-2026-56121.md index a580843733d..ab885a25449 100644 --- a/cves/2026/CVE-2026-56121.md +++ b/cves/2026/CVE-2026-56121.md @@ -14,3 +14,5 @@ Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows #### Github - https://github.com/joaovicdev/EXPLOIT-CVE-2026-56121 +- https://github.com/0xdak/CVE-2026-56121_exploit +- https://github.com/BiiTts/CVE-2026-56121-Feast-Unauth-RCE diff --git a/cves/2026/CVE-2026-56290.md b/cves/2026/CVE-2026-56290.md index 0e79e4f9165..7e72a4154a4 100644 --- a/cves/2026/CVE-2026-56290.md +++ b/cves/2026/CVE-2026-56290.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit - https://github.com/MRCUKIL/com_pagebuilderck +- https://github.com/ChiefYoru/CVE-2026-56290_PoC +- https://github.com/Jenderal92/CVE-2026-56290 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56290.yaml diff --git a/cves/2026/CVE-2026-56291.md b/cves/2026/CVE-2026-56291.md index aa47651b7fb..fd808e37501 100644 --- a/cves/2026/CVE-2026-56291.md +++ b/cves/2026/CVE-2026-56291.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/shinthink/CVE-2026-56291 - https://github.com/rimbadirgantara/CVE-2026-56291.yaml +- https://github.com/0xdenis77/CVE-2026-56291 +- https://github.com/ChiefYoru/CVE-2026-56291_PoC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56291.yaml diff --git a/cves/2026/CVE-2026-56705.md b/cves/2026/CVE-2026-56705.md index 9fcd71cfd56..72f69fb87ce 100644 --- a/cves/2026/CVE-2026-56705.md +++ b/cves/2026/CVE-2026-56705.md @@ -14,3 +14,4 @@ No PoCs from references. #### Github - https://github.com/ChiefYoru/Exploit-CVE-2026-56705 +- https://github.com/Boreas37/CVE-2026-56705 diff --git a/cves/2026/CVE-2026-57850.md b/cves/2026/CVE-2026-57850.md index a1f9e574142..1cf53645684 100644 --- a/cves/2026/CVE-2026-57850.md +++ b/cves/2026/CVE-2026-57850.md @@ -13,4 +13,4 @@ RustDesk before 1.4.9 does not enforce a session's authorized connection scope o - https://github.com/sn0x-sharma/CVE-2026-57850 #### Github -No PoCs found on GitHub currently. +- https://github.com/sn0x-sharma/CVE-2026-57850 diff --git a/cves/2026/CVE-2026-58048.md b/cves/2026/CVE-2026-58048.md index 9a02ee66a30..50bcf38bc03 100644 --- a/cves/2026/CVE-2026-58048.md +++ b/cves/2026/CVE-2026-58048.md @@ -15,3 +15,4 @@ No PoCs from references. #### Github - https://github.com/imbas007/POC-CVE-2026-58048 +- https://github.com/tc4dy/CVE-2026-58048-PoC-Exploit diff --git a/cves/2026/CVE-2026-58138.md b/cves/2026/CVE-2026-58138.md index 14c513d9cf0..7dfb2d2194a 100644 --- a/cves/2026/CVE-2026-58138.md +++ b/cves/2026/CVE-2026-58138.md @@ -16,6 +16,8 @@ No PoCs from references. - https://github.com/seqra/cve-2026-58138 - https://github.com/0xgh057r3c0n/CVE-2026-58138 - https://github.com/Procjevt/CVE-2026-58138 +- https://github.com/BiiTts/CVE-2026-58138-Conductor-Unauth-RCE +- https://github.com/Ch4120N/CVE-2026-58138 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58138.yaml diff --git a/cves/2026/CVE-2026-60137.md b/cves/2026/CVE-2026-60137.md index 924fa2ee2b5..ae46fdede65 100644 --- a/cves/2026/CVE-2026-60137.md +++ b/cves/2026/CVE-2026-60137.md @@ -52,6 +52,8 @@ No PoCs from references. - https://github.com/GMJayy/wp-cve-poc - https://github.com/Ka01nq/WpScc - https://github.com/sahmsec/wp2shell +- https://github.com/Dungsocool/CVE-2026-60137_CVE-2026-63030 +- https://github.com/codeb0ssx/Ultimate-wp2shell #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb diff --git a/cves/2026/CVE-2026-60206.md b/cves/2026/CVE-2026-60206.md index 02e01469036..56626b755b0 100644 --- a/cves/2026/CVE-2026-60206.md +++ b/cves/2026/CVE-2026-60206.md @@ -17,3 +17,6 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-60206 +- https://github.com/Debajyoti0-0/CVE-2026-60206 +- https://github.com/imbas007/POC-CVE-2026-60206 +- https://github.com/tc4dy/CVE-2026-60206-PoC-Exploit diff --git a/cves/2026/CVE-2026-6111.md b/cves/2026/CVE-2026-6111.md index a7030c1b81e..026aa40220d 100644 --- a/cves/2026/CVE-2026-6111.md +++ b/cves/2026/CVE-2026-6111.md @@ -14,4 +14,4 @@ A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. Thi - https://github.com/FoundationAgents/MetaGPT/issues/1934 #### Github -No PoCs found on GitHub currently. +- https://github.com/MonsterWsr-hub/CVE-2026-6111 diff --git a/cves/2026/CVE-2026-61511.md b/cves/2026/CVE-2026-61511.md index 50d74962fa1..8c631ee24e3 100644 --- a/cves/2026/CVE-2026-61511.md +++ b/cves/2026/CVE-2026-61511.md @@ -17,6 +17,7 @@ vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vul #### Github - https://github.com/HORKimhab/CVE-2026-61511 - https://github.com/shootcannon/CVE-2026-61511 +- https://github.com/tc4dy/CVE-2026-61511-PoC-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-61511.yaml diff --git a/cves/2026/CVE-2026-63030.md b/cves/2026/CVE-2026-63030.md index eeaf4516edb..d2d9ed33e43 100644 --- a/cves/2026/CVE-2026-63030.md +++ b/cves/2026/CVE-2026-63030.md @@ -65,9 +65,17 @@ No PoCs from references. - https://github.com/GMJayy/wp-cve-poc - https://github.com/Ka01nq/WpScc - https://github.com/sahmsec/wp2shell +- https://github.com/0xh7ml/CVE-2026-63030 +- https://github.com/0xsha/wp2shell +- https://github.com/ChiefYoru/CVE-2026-63030_PoC +- https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t +- https://github.com/Senanfurkan/wordpress-cve-2026-63030 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml #### Metasploit - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_batch_desync_rce.rb + +#### Vulhub +- https://github.com/vulhub/vulhub/tree/master/wordpress/CVE-2026-63030 diff --git a/cves/2026/CVE-2026-6307.md b/cves/2026/CVE-2026-6307.md index 494d794ddbc..d41f937325c 100644 --- a/cves/2026/CVE-2026-6307.md +++ b/cves/2026/CVE-2026-6307.md @@ -14,3 +14,5 @@ No PoCs from references. #### Github - https://github.com/J4ck3LSyN-Gen2/CVE-2026-48558 +- https://github.com/0xsha/CVE-2026-6307 +- https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus diff --git a/cves/2026/CVE-2026-63077.md b/cves/2026/CVE-2026-63077.md index 5f6fa2db385..f6e9d275ceb 100644 --- a/cves/2026/CVE-2026-63077.md +++ b/cves/2026/CVE-2026-63077.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/sfewer-r7/CVE-2026-63077 - https://github.com/BoredHackerBlog/teamcity-CVE-2026-63077-pcap +- https://github.com/AnggaTechI/CVE-2026-63077 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63077.yaml diff --git a/cves/2026/CVE-2026-64531.md b/cves/2026/CVE-2026-64531.md index 53223cd8915..287a91b7d28 100644 --- a/cves/2026/CVE-2026-64531.md +++ b/cves/2026/CVE-2026-64531.md @@ -53,3 +53,4 @@ No PoCs from references. #### Github - https://github.com/0xBlackash/CVE-2026-64531 +- https://github.com/HackSpeak/CVE-2026-64531 diff --git a/cves/2026/CVE-2026-64600.md b/cves/2026/CVE-2026-64600.md index fe7406196c7..46c9e5d83d6 100644 --- a/cves/2026/CVE-2026-64600.md +++ b/cves/2026/CVE-2026-64600.md @@ -35,3 +35,5 @@ No PoCs from references. - https://github.com/bha-vin/CVE-2026-64600-Exploit - https://github.com/masrikky/CVE-2026-64600-RefluXFS - https://github.com/0xSec1/CVE-2026-64600-RefluXFS-PoC +- https://github.com/Debajyoti0-0/CVE-2026-64600 +- https://github.com/letsr00t/RefluxFS_CVE-2026-64600 diff --git a/cves/2026/CVE-2026-64638.md b/cves/2026/CVE-2026-64638.md index 04ca69275e1..66b27043650 100644 --- a/cves/2026/CVE-2026-64638.md +++ b/cves/2026/CVE-2026-64638.md @@ -42,6 +42,7 @@ No PoCs from references. - https://github.com/686f6c61/POC-WP-XSS2Shell-CVE-2026-64638 - https://github.com/g0d150ne/XSS2Shell - https://github.com/SanchitMhase/XSS2SHELL-POC +- https://github.com/tc4dy/CVE-2026-64638-PoC-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64638.yaml diff --git a/cves/2026/CVE-2026-67599.md b/cves/2026/CVE-2026-67599.md index 9ce809d3c76..7d884cdfbff 100644 --- a/cves/2026/CVE-2026-67599.md +++ b/cves/2026/CVE-2026-67599.md @@ -13,4 +13,4 @@ ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer com - https://lazytitan.ro/clearos #### Github -No PoCs found on GitHub currently. +- https://github.com/LazyTitan33/CVE-2026-67599_ClearOS_RCE diff --git a/cves/2026/CVE-2026-67620.md b/cves/2026/CVE-2026-67620.md index 9be0089870a..87945e93863 100644 --- a/cves/2026/CVE-2026-67620.md +++ b/cves/2026/CVE-2026-67620.md @@ -13,4 +13,4 @@ Flowise through 3.1.4 contains a server-side request forgery vulnerability in th - https://github.com/abdugafforov-bobur/CVE-2026-67620-poc #### Github -No PoCs found on GitHub currently. +- https://github.com/abdugafforov-bobur/CVE-2026-67620-poc diff --git a/cves/2026/CVE-2026-6875.md b/cves/2026/CVE-2026-6875.md index 4c43d319245..19fdb5f6ab6 100644 --- a/cves/2026/CVE-2026-6875.md +++ b/cves/2026/CVE-2026-6875.md @@ -27,6 +27,7 @@ No PoCs from references. #### Github - https://github.com/HORKimhab/CVE-2026-6875 +- https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6875.yaml diff --git a/cves/2026/CVE-2026-69098.md b/cves/2026/CVE-2026-69098.md index 5cda1d981a4..c913b1d4de5 100644 --- a/cves/2026/CVE-2026-69098.md +++ b/cves/2026/CVE-2026-69098.md @@ -13,4 +13,4 @@ kotaemon through 0.12.0 contains an insecure deserialization vulnerability in th - https://github.com/Cinnamon/kotaemon/issues/844 #### Github -No PoCs found on GitHub currently. +- https://github.com/0xdak/CVE-2026-69098_exploit diff --git a/cves/2026/CVE-2026-72844.md b/cves/2026/CVE-2026-72844.md index fc6b21625ba..621a97cc852 100644 --- a/cves/2026/CVE-2026-72844.md +++ b/cves/2026/CVE-2026-72844.md @@ -15,4 +15,4 @@ The Lean 4 kernel does not verify that the structure named in a projection expre - https://github.com/xrchz/CollatzLean #### Github -No PoCs found on GitHub currently. +- https://github.com/endrazine/lean-cve-poc diff --git a/cves/2026/CVE-2026-7299.md b/cves/2026/CVE-2026-7299.md index 0cd82c6eccd..bb2f62b5639 100644 --- a/cves/2026/CVE-2026-7299.md +++ b/cves/2026/CVE-2026-7299.md @@ -13,4 +13,4 @@ Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize d - https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit #### Github -No PoCs found on GitHub currently. +- https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit diff --git a/cves/2026/CVE-2026-7482.md b/cves/2026/CVE-2026-7482.md index 9066b1a38af..100471c4dd1 100644 --- a/cves/2026/CVE-2026-7482.md +++ b/cves/2026/CVE-2026-7482.md @@ -16,3 +16,4 @@ No PoCs from references. - https://github.com/0x0OZ/CVE-2026-7482-PoC - https://github.com/kaleth4/CVE-2026-7482 - https://github.com/cylockholmes/assay +- https://github.com/szybnev/CVE-2026-7482 diff --git a/cves/2026/CVE-2026-76070.md b/cves/2026/CVE-2026-76070.md index edaea2d50fb..a52aeee350c 100644 --- a/cves/2026/CVE-2026-76070.md +++ b/cves/2026/CVE-2026-76070.md @@ -14,4 +14,4 @@ Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow v - https://github.com/ozcanpng/CVE-2026-76070 #### Github -No PoCs found on GitHub currently. +- https://github.com/ozcanpng/CVE-2026-76070 diff --git a/cves/2026/CVE-2026-76071.md b/cves/2026/CVE-2026-76071.md index 77348dfe99d..6b883c95821 100644 --- a/cves/2026/CVE-2026-76071.md +++ b/cves/2026/CVE-2026-76071.md @@ -14,4 +14,4 @@ Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow v - https://github.com/ozcanpng/CVE-2026-76071 #### Github -No PoCs found on GitHub currently. +- https://github.com/ozcanpng/CVE-2026-76071 diff --git a/cves/2026/CVE-2026-76639.md b/cves/2026/CVE-2026-76639.md index 3aef299c1ac..fe644295120 100644 --- a/cves/2026/CVE-2026-76639.md +++ b/cves/2026/CVE-2026-76639.md @@ -15,4 +15,4 @@ Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code ex - https://github.com/OlivierLaflamme/UniBLEed #### Github -No PoCs found on GitHub currently. +- https://github.com/OlivierLaflamme/UniBLEed diff --git a/cves/2026/CVE-2026-7669.md b/cves/2026/CVE-2026-7669.md index 9ed3539064a..13173e65585 100644 --- a/cves/2026/CVE-2026-7669.md +++ b/cves/2026/CVE-2026-7669.md @@ -24,4 +24,4 @@ A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the - https://github.com/gouldnicholas/CVE-2026-7669-PoC #### Github -No PoCs found on GitHub currently. +- https://github.com/gouldnicholas/CVE-2026-7669-PoC diff --git a/cves/2026/CVE-2026-8181.md b/cves/2026/CVE-2026-8181.md index eaccb182321..9063bd5e0fe 100644 --- a/cves/2026/CVE-2026-8181.md +++ b/cves/2026/CVE-2026-8181.md @@ -20,6 +20,9 @@ No PoCs from references. - https://github.com/Jenderal92/CVE-2026-8181 - https://github.com/Squamity/CVE-2026-8181-PoC - https://github.com/0xTerror/CVE-2026-8181 +- https://github.com/Yucaerin/CVE-2026-8181 +- https://github.com/murrez/CVE-2026-8181 +- https://github.com/zycoder0day/CVE-2026-8181 #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8181.yaml diff --git a/cves/2026/CVE-2026-8206.md b/cves/2026/CVE-2026-8206.md index 8beadaf9f1c..cd9a539ae59 100644 --- a/cves/2026/CVE-2026-8206.md +++ b/cves/2026/CVE-2026-8206.md @@ -17,3 +17,4 @@ No PoCs from references. - https://github.com/Dungsocool/CVE-2026-8206 - https://github.com/HackfutSecRoot/multi_exploit_wp/blob/main/multi_exploit.py - https://github.com/HackfutSecRoot/multi_exploit_wp +- https://github.com/Jenderal92/CVE-2026-8206 diff --git a/cves/2026/CVE-2026-8732.md b/cves/2026/CVE-2026-8732.md index 6b9484d4a62..3d5ef073784 100644 --- a/cves/2026/CVE-2026-8732.md +++ b/cves/2026/CVE-2026-8732.md @@ -16,6 +16,8 @@ No PoCs from references. - https://github.com/zycoder0day/CVE-2026-8732 - https://github.com/HORKimhab/CVE-2026-8732 - https://github.com/Diznev/CVE-2026-8732-EXPLOIT +- https://github.com/Jenderal92/CVE-2026-8732 +- https://github.com/p3Nt3st3r-sTAr/CVE-2026-8732-POC #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8732.yaml diff --git a/cves/2026/CVE-2026-9082.md b/cves/2026/CVE-2026-9082.md index f9254d6db50..39e4559de7d 100644 --- a/cves/2026/CVE-2026-9082.md +++ b/cves/2026/CVE-2026-9082.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/11romain/CVE-2026-9082 - https://github.com/ywh-jfellus/CVE-2026-9082 - https://github.com/thinhap/CVE-2026-9082-PoC +- https://github.com/sourcecode347/CVE-2026-9082-Mass_Scanner #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9082.yaml diff --git a/cves/2026/CVE-2026-9147.md b/cves/2026/CVE-2026-9147.md index fabde0a2981..2d1af30a81d 100644 --- a/cves/2026/CVE-2026-9147.md +++ b/cves/2026/CVE-2026-9147.md @@ -13,4 +13,4 @@ uproot dynamically generates Python class source code from ROOT TStreamerInfo re - https://github.com/SaiTeja-Erukude/CVE-2026-9147-uproot-rce #### Github -No PoCs found on GitHub currently. +- https://github.com/SaiTeja-Erukude/CVE-2026-9147-uproot-rce diff --git a/cves/2026/CVE-2026-9198.md b/cves/2026/CVE-2026-9198.md index 9d904b82e56..08b54be94ec 100644 --- a/cves/2026/CVE-2026-9198.md +++ b/cves/2026/CVE-2026-9198.md @@ -21,6 +21,8 @@ No PoCs from references. - https://github.com/K3ysTr0K3R/CVE-2026-9198 - https://github.com/rmhowe425/PoC-CVE-2026-9198 - https://github.com/joaovicdev/EXPLOIT-CVE-2026-9198 +- https://github.com/0xdak/CVE-2026-9198_exploit +- https://github.com/chessalekin/cve-2026-9198_exploit #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml diff --git a/cves/2026/CVE-2026-9271.md b/cves/2026/CVE-2026-9271.md index f77725741c3..bd4c17e1aca 100644 --- a/cves/2026/CVE-2026-9271.md +++ b/cves/2026/CVE-2026-9271.md @@ -13,7 +13,7 @@ Vulnerability Title - https://wpscan.com/vulnerability/b5d549b7-17c8-417d-a86a-a7ae356a6eab/ #### Github -No PoCs found on GitHub currently. +- https://github.com/CerberusMrXi/WordPress-KeepInMind-CVE-2026-9271-Exploit #### ExploitDB - https://www.exploit-db.com/exploits/52614 diff --git a/scripts/sync_exploits.py b/scripts/sync_exploits.py index 5cf052957d6..fcf7d58ec61 100644 --- a/scripts/sync_exploits.py +++ b/scripts/sync_exploits.py @@ -1,5 +1,5 @@ #!/usr/bin/env python3 -"""Fold the two curated exploit archives into the index. +"""Fold the curated exploit archives into the index. ExploitDB and Metasploit both publish a single machine readable file mapping their entries to CVE ids. Neither is a GitHub repository, so their links are @@ -40,8 +40,12 @@ PER_CVE = 8 SOURCES = ( ("#### ExploitDB", "No ExploitDB entry."), ("#### Metasploit", "No Metasploit module."), + ("#### Vulhub", "No Vulhub environment."), ) +VULHUB_TARBALL = "https://codeload.github.com/vulhub/vulhub/tar.gz/refs/heads/master" +VULHUB_TREE = "https://github.com/vulhub/vulhub/tree/master/" + def fetch(url: str) -> bytes: request = urllib.request.Request(url, headers={"User-Agent": USER_AGENT}) @@ -106,6 +110,29 @@ def metasploit() -> dict[str, list[str]]: } +def vulhub() -> dict[str, list[str]]: + """CVE to the directory holding a runnable vulnerable environment. + + Vulhub ships a docker-compose file and reproduction steps per flaw, which + is a proof of concept anyone can stand up rather than read about. One + directory per environment, the CVE named in its path. + """ + import io + import tarfile + + rows: dict[str, set[str]] = defaultdict(set) + with tarfile.open(fileobj=io.BytesIO(fetch(VULHUB_TARBALL)), mode="r:gz") as tar: + for member in tar: + parts = Path(member.name).parts + # //; anything deeper is its contents + if len(parts) != 3 or not member.isdir(): + continue + for cve in {c.upper() for c in CVE.findall(parts[-1])}: + if plausible(cve): + rows[cve].add(VULHUB_TREE + "/".join(parts[1:])) + return {cve: sorted(found)[:PER_CVE] for cve, found in rows.items()} + + def section_bounds(text: str, header: str) -> tuple[int, int] | None: start = text.find("\n" + header) if start < 0: @@ -157,7 +184,7 @@ def main() -> int: parser.add_argument("--dry-run", action="store_true", help="report without writing") args = parser.parse_args() - for (header, _), collect in zip(SOURCES, (exploitdb, metasploit)): + for (header, _), collect in zip(SOURCES, (exploitdb, metasploit, vulhub)): found = collect() links = sum(len(urls) for urls in found.values()) tally = {"added": 0, "unchanged": 0, "absent": 0} diff --git a/scripts/sync_pocingithub.py b/scripts/sync_pocingithub.py new file mode 100644 index 00000000000..7349c711298 --- /dev/null +++ b/scripts/sync_pocingithub.py @@ -0,0 +1,194 @@ +#!/usr/bin/env python3 +"""Take candidate PoC repositories from PoC-in-GitHub and judge them here. + +GitHub discovery only sees repositories pushed in the last few days, so a PoC +published years ago for an old CVE is unreachable no matter how long the job +runs. nomi-sec/PoC-in-GitHub has been collecting them daily since 1999 and +publishes one JSON file per CVE. + +It collects without filtering, exactly as the workflow this index replaced +did, so nothing here is trusted on arrival: every candidate goes through +qualifying_repo_cves, the same gate a repository found by search must pass. +""" + +from __future__ import annotations + +import argparse +import io +import json +import os +import re +import sys +import tarfile +import urllib.request +from concurrent.futures import ThreadPoolExecutor, as_completed +from pathlib import Path + +sys.path.insert(0, str(Path(__file__).resolve().parent)) + +from update_cves import ( + GITHUB_GRAPHQL_URL, + CVES, + GitHubClient, + github_repo_from_url, + http_json, + is_blacklisted_repo, + load_blacklist, + qualifying_repo_cves, + replace_section, + section_links, +) + +TARBALL = "https://codeload.github.com/nomi-sec/PoC-in-GitHub/tar.gz/refs/heads/master" +SECTION = "#### Github" +EMPTY = "No PoCs found on GitHub currently." +CVE_NAME = re.compile(r"^CVE-\d{4}-\d{4,}$", re.IGNORECASE) +BATCH = 10 +USER_AGENT = "0xMarcio-cve-poc-in-github" + +FIELDS = """ + nameWithOwner url description isFork isArchived + repositoryTopics(first: 20) { nodes { topic { name } } } + readmeMd: object(expression: "HEAD:README.md") { ... on Blob { text } } + readmeUpper: object(expression: "HEAD:README.MD") { ... on Blob { text } } + readmeRst: object(expression: "HEAD:README.rst") { ... on Blob { text } } + readmeBare: object(expression: "HEAD:README") { ... on Blob { text } } + root: object(expression: "HEAD:") { ... on Tree { entries { name type } } } +""" + + +def candidates() -> dict[str, set[str]]: + """CVE to the repository URLs the collection lists for it.""" + request = urllib.request.Request(TARBALL, headers={"User-Agent": USER_AGENT}) + with urllib.request.urlopen(request, timeout=600) as response: + archive = response.read() + found: dict[str, set[str]] = {} + with tarfile.open(fileobj=io.BytesIO(archive), mode="r:gz") as tar: + for member in tar: + if not member.isfile() or not member.name.endswith(".json"): + continue + cve = member.name.rsplit("/", 1)[-1][:-5].upper() + if not CVE_NAME.match(cve): + continue + handle = tar.extractfile(member) + if handle is None: + continue + try: + listed = json.loads(handle.read()) + except (ValueError, UnicodeDecodeError): + continue + urls = { + str(item.get("html_url") or "").rstrip("/") + for item in listed + if item.get("html_url") + } + if urls: + found[cve] = urls + return found + + +def already_linked() -> dict[str, tuple[Path, set[str]]]: + """What each entry in this index already lists under GitHub.""" + held: dict[str, tuple[Path, set[str]]] = {} + for path in sorted(CVES.glob("[12][0-9][0-9][0-9]/CVE-*.md")): + text = path.read_text(encoding="utf-8", errors="replace") + held[path.stem.upper()] = (path, {url.rstrip("/") for url in section_links(text, SECTION)}) + return held + + +def describe(client: GitHubClient, names: list[str]) -> dict[str, dict]: + """Metadata, README and root listing for a batch, as the classifier expects.""" + aliases = " ".join( + f"r{index}: repository(owner: {json.dumps(name.split('/', 1)[0])}, " + f"name: {json.dumps(name.split('/', 1)[1])}) {{ {FIELDS} }}" + for index, name in enumerate(names) + ) + payload = http_json( + GITHUB_GRAPHQL_URL, + headers=client.headers, + data={"query": "query { " + aliases + " rateLimit { remaining } }"}, + ) + data = payload.get("data") or {} + described: dict[str, dict] = {} + for index, name in enumerate(names): + repo = data.get(f"r{index}") + if repo: + described[name] = repo + return described + + +def main() -> int: + parser = argparse.ArgumentParser(description="Judge PoC-in-GitHub candidates against this index") + parser.add_argument("--limit", type=int, default=0, help="Repositories to judge this run") + parser.add_argument("--dry-run", action="store_true", help="Report without writing files") + args = parser.parse_args() + + listed = candidates() + held = already_linked() + print(f"{len(listed):,} CVEs listed upstream | {len(held):,} entries in this index") + + # One repository can be offered for several CVEs; judge it once per pair. + blacklist = load_blacklist() + pending: dict[str, set[str]] = {} + for cve, urls in listed.items(): + entry = held.get(cve) + if entry is None: + continue + for url in urls - entry[1]: + full_name = github_repo_from_url(url) + if full_name and "/" in full_name and not is_blacklisted_repo(full_name, blacklist): + pending.setdefault(full_name, set()).add(cve) + + names = sorted(pending) + if args.limit: + names = names[: args.limit] + print(f"{sum(len(pending[n]) for n in names):,} candidate links across {len(names):,} repositories") + + token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN") or "" + client = GitHubClient(token) + accepted: dict[str, set[str]] = {} + judged = kept = 0 + + batches = [names[i : i + BATCH] for i in range(0, len(names), BATCH)] + with ThreadPoolExecutor(max_workers=4) as executor: + futures = {executor.submit(describe, client, batch): batch for batch in batches} + for future in as_completed(futures): + batch = futures[future] + try: + described = future.result() + except Exception as problem: + print(f"Skipped a batch starting at {batch[0]}: {problem}", file=sys.stderr) + described = {} + for full_name in batch: + judged += 1 + repo = described.get(full_name) + if repo is None: + continue + for cve in pending[full_name]: + year = int(cve.split("-")[1]) + if cve in qualifying_repo_cves(repo, year, blacklist): + accepted.setdefault(cve, set()).add(str(repo.get("url") or "").rstrip("/")) + kept += 1 + if judged % 2000 < BATCH: + print(f" judged {judged:,} of {len(names):,}") + + written = 0 + for cve, urls in sorted(accepted.items()): + path, existing = held[cve] + merged = section_links(path.read_text(encoding="utf-8", errors="replace"), SECTION) + merged = merged + sorted(url for url in urls if url.rstrip("/") not in existing) + with path.open("r", encoding="utf-8", newline="") as handle: + text = handle.read() + updated, changed = replace_section(text, SECTION, merged, EMPTY) + if changed and not args.dry_run: + with path.open("w", encoding="utf-8", newline="") as handle: + handle.write(updated) + written += bool(changed) + + print(f"accepted {kept:,} links for {len(accepted):,} CVEs | {written:,} entries updated") + print(f"rejected {sum(len(pending[n]) for n in names) - kept:,} candidates that did not pass the gate") + return 0 + + +if __name__ == "__main__": + raise SystemExit(main())