mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-23 16:35:19 +00:00
Expand CVE PoC coverage and metadata
This commit is contained in:
0xMarcio committed
1 parent
d006786a98
commit
81017c9871
21358 files changed
+365786
-42555
No files matched your search
@@ -1,3 +1,3 @@
|
||||
{
|
||||
"cvelist_fetch_time": "2026-09-01T07:44:30.385Z"
|
||||
"cvelist_fetch_time": "2026-09-01T15:09:33.999Z"
|
||||
}
|
||||
+125
-29
@@ -6,6 +6,7 @@ from __future__ import annotations
|
||||
import json
|
||||
import os
|
||||
import re
|
||||
import sys
|
||||
import time
|
||||
from datetime import datetime, timedelta, timezone
|
||||
from urllib import error, parse, request
|
||||
@@ -40,6 +41,10 @@ NVD_API = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId="
|
||||
NVD_LOOKUPS = 4
|
||||
USER_AGENT = "0xMarcio-cve-trending"
|
||||
ROOT = os.path.join(os.path.dirname(os.path.abspath(__file__)), os.pardir)
|
||||
sys.path.insert(0, os.path.join(ROOT, "scripts"))
|
||||
|
||||
from update_cves import load_blacklist, qualifying_repo_cves
|
||||
|
||||
README = os.path.join(ROOT, "README.md")
|
||||
TRENDING = os.path.join(ROOT, "index", "trending.json")
|
||||
KEV = os.path.join(ROOT, "index", "kev.json")
|
||||
@@ -144,24 +149,28 @@ def just_landed(token: str, seen: set[str]) -> list[dict]:
|
||||
# Only the freshest are worth two API round trips each.
|
||||
candidates = candidates[:LANDED_ROWS * 4]
|
||||
|
||||
searched = len(candidates)
|
||||
candidates, paths = qualifying_repositories(candidates, token)
|
||||
names = [str(repo["full_name"]) for repo in candidates]
|
||||
shipped = code_pushed(names, token)
|
||||
carries_code = code_paths(names, token)
|
||||
shipped = code_pushed(names, token, paths)
|
||||
|
||||
fresh, hollow = [], 0
|
||||
for repo in candidates:
|
||||
name = str(repo["full_name"])
|
||||
if not carries_code.get(name):
|
||||
# Nothing but a README and a licence: a write-up, not an exploit.
|
||||
pushed = shipped.get(name)
|
||||
if not pushed:
|
||||
hollow += 1
|
||||
continue
|
||||
pushed = shipped.get(name) or str(repo.get("pushed_at") or "")
|
||||
if pushed[:10] < since:
|
||||
continue
|
||||
repo["_shipped"] = pushed
|
||||
fresh.append(repo)
|
||||
fresh.sort(key=lambda repo: repo["_shipped"], reverse=True)
|
||||
print(f"just landed: {len(fresh)} with code, {hollow} rejected as paperwork only")
|
||||
print(
|
||||
f"just landed: {len(fresh)} qualified, "
|
||||
f"{searched - len(candidates)} rejected by artifact gate, "
|
||||
f"{hollow} without an artifact commit"
|
||||
)
|
||||
return fresh[:LANDED_ROWS]
|
||||
|
||||
|
||||
@@ -258,14 +267,73 @@ def code_paths(full_names: list[str], token: str) -> dict[str, list[str]]:
|
||||
return paths
|
||||
|
||||
|
||||
def code_pushed(full_names: list[str], token: str) -> dict[str, str]:
|
||||
def qualifying_repositories(
|
||||
repositories: list[dict], token: str
|
||||
) -> tuple[list[dict], dict[str, list[str]]]:
|
||||
"""Apply the index's PoC classifier before publishing a trending row."""
|
||||
accepted: list[dict] = []
|
||||
code: dict[str, list[str]] = {}
|
||||
blacklist = load_blacklist()
|
||||
fields = """
|
||||
readmeMd: object(expression: \"HEAD:README.md\") { ... on Blob { text } }
|
||||
readmeUpper: object(expression: \"HEAD:README.MD\") { ... on Blob { text } }
|
||||
readmeRst: object(expression: \"HEAD:README.rst\") { ... on Blob { text } }
|
||||
readmeBare: object(expression: \"HEAD:README\") { ... on Blob { text } }
|
||||
root: object(expression: \"HEAD:\") {
|
||||
... on Tree { entries { name type } }
|
||||
}
|
||||
"""
|
||||
for start in range(0, len(repositories), 20):
|
||||
batch = repositories[start : start + 20]
|
||||
query = "query { " + " ".join(
|
||||
repository_alias(i, str(repo.get("full_name") or ""), fields)
|
||||
for i, repo in enumerate(batch)
|
||||
) + " }"
|
||||
data = graphql(query, token)
|
||||
if not data:
|
||||
raise RuntimeError("GitHub returned no repository content for the PoC gate")
|
||||
for index, repo in enumerate(batch):
|
||||
content = data.get(f"r{index}")
|
||||
if content is None:
|
||||
continue
|
||||
full_name = str(repo.get("full_name") or "")
|
||||
topics = [
|
||||
{"topic": {"name": str(topic)}}
|
||||
for topic in repo.get("topics") or []
|
||||
if topic
|
||||
]
|
||||
candidate = {
|
||||
**content,
|
||||
"nameWithOwner": full_name,
|
||||
"description": repo.get("description") or "",
|
||||
"isFork": bool(repo.get("fork")),
|
||||
"repositoryTopics": {"nodes": topics},
|
||||
}
|
||||
cve = cve_of(repo)
|
||||
if not cve or cve not in qualifying_repo_cves(
|
||||
candidate, int(cve.split("-")[1]), blacklist
|
||||
):
|
||||
continue
|
||||
entries = ((content.get("root") or {}).get("entries") or [])
|
||||
code[full_name] = [
|
||||
str(entry.get("name") or "")
|
||||
for entry in entries
|
||||
if entry.get("name") and not PAPERWORK.match(str(entry["name"]))
|
||||
][:PATHS_PER_REPO]
|
||||
accepted.append(repo)
|
||||
return accepted, code
|
||||
|
||||
|
||||
def code_pushed(
|
||||
full_names: list[str], token: str, paths: dict[str, list[str]] | None = None
|
||||
) -> dict[str, str]:
|
||||
"""When each repository last committed something that is not paperwork.
|
||||
|
||||
A repository whose only recent commit edits the README has not shipped a
|
||||
new proof of concept, and saying it was updated an hour ago is a lie the
|
||||
whole front page is built on.
|
||||
"""
|
||||
paths = code_paths(full_names, token)
|
||||
paths = paths if paths is not None else code_paths(full_names, token)
|
||||
latest: dict[str, str] = {}
|
||||
batch: list[str] = []
|
||||
|
||||
@@ -335,6 +403,19 @@ def cve_of(repo: dict) -> str:
|
||||
return f"CVE-{match.group(1)}-{match.group(2)}" if match else ""
|
||||
|
||||
|
||||
def repository_summary(repo: dict, cve: str) -> str:
|
||||
"""Prefer the CVE summary when a repository only has placeholder copy."""
|
||||
summary = cell(repo.get("description"))
|
||||
remainder = CVE_ID.sub("", summary).strip(" -:|")
|
||||
placeholder = re.fullmatch(
|
||||
r"(?i)(?:draft|todo|tbd|placeholder)(?:\s+or\s+(?:draft|todo|tbd|placeholder))*",
|
||||
remainder,
|
||||
)
|
||||
if not remainder or placeholder:
|
||||
return nvd_description(cve) or summary
|
||||
return summary
|
||||
|
||||
|
||||
def shorten(text: str) -> str:
|
||||
text = cell(text)
|
||||
if len(text) <= DESC_LIMIT:
|
||||
@@ -421,11 +502,13 @@ Every file is plain JSON on the CDN. No key, no rate limit.
|
||||
```bash
|
||||
# everything the index knows about one CVE
|
||||
curl -s https://cve.codepwn.win/CVE_list.json \\
|
||||
| jq '.[] | select(.cve == "CVE-2021-44228") | {cve, poc: (.poc | length), nuclei, msf, edb}'
|
||||
| jq '.[] | select(.cve == "CVE-2021-44228") | {cve, poc: (.poc | length), nuclei, msf, edb, vulhub, collections}'
|
||||
|
||||
# how bad it is, and how likely it is to be exploited in the next 30 days
|
||||
curl -s https://cve.codepwn.win/nuclei.json | jq '."CVE-2021-44228"'
|
||||
curl -s https://cve.codepwn.win/epss.json | jq '."CVE-2021-44228"'
|
||||
# every published CVSS assessment plus vetted advisory links
|
||||
curl -s https://cve.codepwn.win/cve_metadata.json | jq '."CVE-2021-44228"'
|
||||
|
||||
# likelihood of exploitation in the next 30 days
|
||||
curl -s https://cve.codepwn.win/epss.json | jq '."CVE-2021-44228"'
|
||||
|
||||
# stars and last push for one PoC repository; repository keys are lowercased
|
||||
curl -s https://cve.codepwn.win/repo_meta.json | jq '."sfewer-r7/cve-2026-55040"'
|
||||
@@ -444,34 +527,45 @@ jq -n --slurpfile kev kev.json --slurpfile epss epss.json \\
|
||||
|
||||
| Endpoint | Holds |
|
||||
| --- | --- |
|
||||
| [`CVE_list.json`](https://cve.codepwn.win/CVE_list.json) | Every indexed CVE, its description and its `poc`, `nuclei`, `msf` and `edb` links. 48 MB, 10 MB over the wire |
|
||||
| [`CVE_list.json`](https://cve.codepwn.win/CVE_list.json) | Every CVE with a linked PoC, its description and its `poc`, `nuclei`, `msf`, `edb`, `vulhub` and `collections` links |
|
||||
| [`cve_metadata.json`](https://cve.codepwn.win/cve_metadata.json) | NVD CVSS v2.0, v3.0, v3.1 and v4.0 assessments with vectors and vetted advisory links |
|
||||
| [`epss.json`](https://cve.codepwn.win/epss.json) | Exploitation probability and percentile, for nearly every CVE indexed |
|
||||
| [`nuclei.json`](https://cve.codepwn.win/nuclei.json) | Severity, CVSS with its vector, EPSS and CWE, for the CVEs a template rates |
|
||||
| [`nuclei.json`](https://cve.codepwn.win/nuclei.json) | Template metadata for the CVEs covered by a runnable Nuclei check |
|
||||
| [`kev.json`](https://cve.codepwn.win/kev.json) | CISA known exploited, keyed by CVE id |
|
||||
| [`repo_meta.json`](https://cve.codepwn.win/repo_meta.json) | Stars and last push date per PoC repository, keys lowercased |
|
||||
| [`trending_poc.json`](https://cve.codepwn.win/trending_poc.json) | Trending repositories plus index totals |
|
||||
| [`2026/CVE-2026-68138.md`](2026/CVE-2026-68138.md) | Markdown copy of one CVE, one directory per year |
|
||||
| [`cves/2026/CVE-2026-68138.md`](cves/2026/CVE-2026-68138.md) | Markdown copy of one CVE, one directory per year |
|
||||
|
||||
CVSS rows are `[version, score, severity, vector, source, assessment type]`.
|
||||
Advisory rows are `[URL, NVD reference tags]`.
|
||||
|
||||
## Sources
|
||||
|
||||
| Source | What it contributes |
|
||||
| --- | --- |
|
||||
| GitHub | Repositories naming a CVE, checked for code before they are linked |
|
||||
| [Nuclei](https://github.com/projectdiscovery/nuclei-templates) | Runnable templates, and the severity, CVSS, EPSS and CWE ratings |
|
||||
| [PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub) | Historical repository candidates, passed through the same code and intent checks |
|
||||
| [Nuclei](https://github.com/projectdiscovery/nuclei-templates) | Runnable templates that exercise the vulnerability |
|
||||
| [ExploitDB](https://gitlab.com/exploit-database/exploitdb) | Archived exploits, mapped by their own CVE column |
|
||||
| [Metasploit](https://github.com/rapid7/metasploit-framework) | Modules, best ranked first |
|
||||
| [Vulhub](https://github.com/vulhub/vulhub) | Runnable vulnerable environments and reproduction steps |
|
||||
| [afrog](https://github.com/zan8in/afrog), [Vulnerability](https://github.com/tzwlhack/Vulnerability), [0day](https://github.com/helloexp/0day), [xray](https://github.com/chaitin/xray) | CVE-specific templates, code and reproduction guides inside multi-CVE repositories |
|
||||
| [EPSS](https://www.first.org/epss/) | Daily exploitation probability from FIRST |
|
||||
| [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) | What is being exploited in the wild |
|
||||
| NVD, MITRE | The CVE record itself |
|
||||
| [NVD](https://nvd.nist.gov/) | CVSS assessments and tagged vendor, third-party, patch and mitigation references |
|
||||
| [CVE Program](https://www.cve.org/) | The CVE record, publication state and CNA references |
|
||||
|
||||
## Build
|
||||
|
||||
| Job | Cadence | Picks up |
|
||||
| --- | --- | --- |
|
||||
| [PoC sweep](.github/workflows/hot_cves.yml) | hourly | New and updated exploit repositories |
|
||||
| [CVE sync](.github/workflows/sync_cve_pocs.yml) | daily | New CVEs and references from NVD and MITRE |
|
||||
| [Trending sweep](.github/workflows/hot_cves.yml) | hourly | Front-page repositories and prior-hour candidates added to the searchable index |
|
||||
| [CVE sync](.github/workflows/sync_cve_pocs.yml) | daily | New CVEs, CNA references and recently pushed GitHub repositories for every CVE year |
|
||||
| [Metadata sync](.github/workflows/sync_metadata.yml) | daily plus weekly full pass | CVSS, advisories, rejected records and current CISA KEV status |
|
||||
| [Nuclei sync](.github/workflows/sync_nuclei.yml) | daily | New templates and rating changes |
|
||||
| [Exploit archives](.github/workflows/sync_exploits.yml) | daily | New ExploitDB entries and Metasploit modules |
|
||||
| [Exploit archives](.github/workflows/sync_exploits.yml) | daily | ExploitDB, Metasploit and Vulhub mappings |
|
||||
| [Historical GitHub sync](.github/workflows/sync_pocingithub.yml) | weekly | Older PoC repositories missed by the recent-push window |
|
||||
| [Path collection sync](.github/workflows/sync_collections.yml) | weekly | CVE-specific artifacts inside curated multi-CVE repositories |
|
||||
| [Link audit](.github/workflows/audit_poc_links.yml) | weekly | Repositories that went dead, dropped from the index |
|
||||
|
||||
A repository counts as updated only when a commit touches something other than
|
||||
@@ -497,18 +591,20 @@ def main() -> int:
|
||||
token = github_token()
|
||||
for year in range(current_year, current_year - YEARS, -1):
|
||||
total, repositories = search_year(year, since)
|
||||
shipped = code_pushed([str(r.get("full_name") or "") for r in repositories], token)
|
||||
searched = len(repositories)
|
||||
repositories, paths = qualifying_repositories(repositories, token)
|
||||
shipped = code_pushed(
|
||||
[str(r.get("full_name") or "") for r in repositories], token, paths
|
||||
)
|
||||
for repo in repositories:
|
||||
repo["_shipped"] = (
|
||||
shipped.get(str(repo.get("full_name") or ""))
|
||||
or str(repo.get("pushed_at") or repo.get("updated_at") or "")
|
||||
)
|
||||
stale = len(repositories)
|
||||
repo["_shipped"] = shipped.get(str(repo.get("full_name") or ""), "")
|
||||
qualified = len(repositories)
|
||||
repositories = [r for r in repositories if r["_shipped"][:10] >= since]
|
||||
repositories.sort(key=lambda repo: repo["_shipped"], reverse=True)
|
||||
repositories = repositories[:PER_YEAR]
|
||||
print(f"CVE-{year}: {total} pushed since {since}, "
|
||||
f"{stale - len(repositories)} dropped as paperwork-only")
|
||||
f"{searched - qualified} rejected by artifact gate, "
|
||||
f"{qualified - len(repositories)} without a recent artifact commit")
|
||||
if not repositories:
|
||||
continue
|
||||
block = [
|
||||
@@ -527,7 +623,7 @@ def main() -> int:
|
||||
flagged += exploited
|
||||
# Same fallback the landed lane uses. These CVEs are old enough to
|
||||
# be in the index already, so it costs nothing to ask.
|
||||
summary = cell(repo.get("description")) or nvd_description(cve)
|
||||
summary = repository_summary(repo, cve)
|
||||
items.append({
|
||||
"year": year,
|
||||
"stars": int(repo.get("stargazers_count") or 0),
|
||||
@@ -570,7 +666,7 @@ def main() -> int:
|
||||
exploited = cve in kev
|
||||
# A day-old repository often ships without a description; the CVE's
|
||||
# own summary says more than an empty cell.
|
||||
summary = cell(repo.get("description")) or nvd_description(cve)
|
||||
summary = repository_summary(repo, cve)
|
||||
if not summary and cve and lookups < NVD_LOOKUPS:
|
||||
lookups += 1
|
||||
summary = cell(nvd_lookup(cve))
|
||||
|
||||
+2
-2
@@ -130,7 +130,7 @@ def hero(counts: dict) -> str:
|
||||
<text x="56" y="70" font-family="{MONO}" font-size="44" font-weight="700"
|
||||
fill="{FG}" letter-spacing="2">CVE RADAR</text>
|
||||
<text x="56" y="104" font-family="{MONO}" font-size="15" fill="{MUTED}">
|
||||
Public proof-of-concept exploits for every CVE.</text>
|
||||
Public proof-of-concept exploits, indexed by CVE.</text>
|
||||
<text x="56" y="132" font-family="{MONO}" font-size="15" fill="{ACCENT}">cve.codepwn.win</text>
|
||||
|
||||
{blocks}
|
||||
@@ -158,7 +158,7 @@ def social(counts: dict) -> str:
|
||||
<text x="96" y="215" font-family="{MONO}" font-size="76" font-weight="700"
|
||||
fill="{FG}" letter-spacing="3">CVE RADAR</text>
|
||||
<text x="96" y="272" font-family="{MONO}" font-size="24" fill="{MUTED}">
|
||||
Public proof-of-concept exploits for every CVE.</text>
|
||||
Public proof-of-concept exploits, indexed by CVE.</text>
|
||||
|
||||
<rect x="96" y="344" width="1088" height="1" fill="{BORDER}"/>
|
||||
{blocks}
|
||||
|
||||
@@ -24,6 +24,11 @@ jobs:
|
||||
with:
|
||||
python-version: '3.13'
|
||||
|
||||
- name: Ingest the previous hour's candidates
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: python3 scripts/sync_pocingithub.py --input index/trending.json
|
||||
|
||||
- name: Redraw the banner and recount the index
|
||||
run: |
|
||||
# Counts the corpus with the site build's own parser, so the banner can
|
||||
@@ -43,7 +48,18 @@ jobs:
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add -- README.md index/trending.json docs/hero.svg docs/social-card.svg docs/social-card.png docs/stats.json docs/kev.svg
|
||||
git add --all -- \
|
||||
README.md \
|
||||
index/trending.json \
|
||||
index/github.txt \
|
||||
index/cve_dates.json \
|
||||
index/cve_record_state.json \
|
||||
docs/hero.svg \
|
||||
docs/social-card.svg \
|
||||
docs/social-card.png \
|
||||
docs/stats.json \
|
||||
docs/kev.svg \
|
||||
cves/
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
exit 0
|
||||
|
||||
@@ -12,6 +12,8 @@ on:
|
||||
- Hot CVEs List
|
||||
- Audit PoC Links
|
||||
- Sync PoC-in-GitHub
|
||||
- Sync CVE Metadata
|
||||
- Sync PoC Collections
|
||||
types:
|
||||
- completed
|
||||
push:
|
||||
|
||||
@@ -0,0 +1,56 @@
|
||||
name: Sync PoC Collections
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '40 5 * * 4'
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
concurrency:
|
||||
group: repository-updates
|
||||
cancel-in-progress: false
|
||||
|
||||
jobs:
|
||||
sync:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
|
||||
- name: Set up Python
|
||||
uses: actions/setup-python@v7
|
||||
with:
|
||||
python-version: '3.13'
|
||||
|
||||
- name: Pull CVE-specific paths from curated collections
|
||||
run: python3 scripts/sync_collections.py
|
||||
|
||||
- name: Verify the generated index
|
||||
run: |
|
||||
python3 -m unittest discover -s tests
|
||||
python3 scripts/build_site.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add --all -- index/cve_dates.json index/cve_record_state.json cves/
|
||||
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
git commit -m "Sync path-level PoC collections $(date -u +'%Y-%m-%d')"
|
||||
|
||||
for attempt in 1 2 3; do
|
||||
if git push origin HEAD:main; then
|
||||
exit 0
|
||||
fi
|
||||
echo "Push rejected; replaying onto the current main (attempt $attempt)"
|
||||
git fetch --unshallow origin main 2>/dev/null || git fetch origin main
|
||||
git rebase FETCH_HEAD
|
||||
done
|
||||
exit 1
|
||||
@@ -27,7 +27,12 @@ jobs:
|
||||
- name: Discover and ingest CVE PoCs
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: python3 scripts/update_cves.py --lookback-days 3 --years 5
|
||||
run: python3 scripts/update_cves.py --lookback-days 3 --all-years
|
||||
|
||||
- name: Verify the generated index
|
||||
run: |
|
||||
python3 -m unittest discover -s tests
|
||||
python3 scripts/build_site.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
@@ -38,6 +43,7 @@ jobs:
|
||||
.github/cve_sync_state.json \
|
||||
index/github.txt \
|
||||
index/references.txt \
|
||||
index/reference_pocs.txt \
|
||||
index/cve_dates.json \
|
||||
cves/
|
||||
|
||||
|
||||
@@ -24,14 +24,19 @@ jobs:
|
||||
with:
|
||||
python-version: '3.13'
|
||||
|
||||
- name: Pull ExploitDB and Metasploit into the index
|
||||
- name: Pull ExploitDB, Metasploit and Vulhub into the index
|
||||
run: python3 scripts/sync_exploits.py
|
||||
|
||||
- name: Verify the generated index
|
||||
run: |
|
||||
python3 -m unittest discover -s tests
|
||||
python3 scripts/build_site.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add -u
|
||||
git add --all -- index/cve_dates.json index/cve_record_state.json cves/
|
||||
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
|
||||
@@ -0,0 +1,71 @@
|
||||
name: Sync CVE Metadata
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '10 3 * * 1-6'
|
||||
- cron: '10 3 * * 0'
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
full:
|
||||
description: Rebuild every metadata year from NVD
|
||||
required: false
|
||||
default: false
|
||||
type: boolean
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
concurrency:
|
||||
group: repository-updates
|
||||
cancel-in-progress: false
|
||||
|
||||
jobs:
|
||||
sync:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
|
||||
- name: Set up Python
|
||||
uses: actions/setup-python@v7
|
||||
with:
|
||||
python-version: '3.13'
|
||||
|
||||
- name: Pull CVSS and advisory metadata from NVD
|
||||
run: |
|
||||
if [ "${{ github.event.schedule }}" = "10 3 * * 0" ] || [ "${{ inputs.full }}" = "true" ]; then
|
||||
python3 scripts/sync_cve_metadata.py --full
|
||||
else
|
||||
python3 scripts/sync_cve_metadata.py
|
||||
fi
|
||||
|
||||
- name: Refresh CISA known-exploited status
|
||||
run: python3 scripts/audit_poc_links.py --kev-only
|
||||
|
||||
- name: Verify the generated index
|
||||
run: |
|
||||
python3 -m unittest discover -s tests
|
||||
python3 scripts/build_site.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add -- index/metadata/ index/kev.json
|
||||
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
git commit -m "Sync CVE metadata $(date -u +'%Y-%m-%d')"
|
||||
|
||||
for attempt in 1 2 3; do
|
||||
if git push origin HEAD:main; then
|
||||
exit 0
|
||||
fi
|
||||
echo "Push rejected; replaying onto the current main (attempt $attempt)"
|
||||
git fetch --unshallow origin main 2>/dev/null || git fetch origin main
|
||||
git rebase FETCH_HEAD
|
||||
done
|
||||
exit 1
|
||||
@@ -27,12 +27,16 @@ jobs:
|
||||
- name: Pull templates and fold them into the index
|
||||
run: python3 scripts/sync_nuclei.py
|
||||
|
||||
- name: Verify the generated index
|
||||
run: |
|
||||
python3 -m unittest discover -s tests
|
||||
python3 scripts/build_site.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add -u
|
||||
git add -- index/nuclei.json
|
||||
git add --all -- index/cve_dates.json index/cve_record_state.json index/nuclei.json cves/
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
exit 0
|
||||
|
||||
@@ -33,11 +33,16 @@ jobs:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: python3 scripts/sync_pocingithub.py
|
||||
|
||||
- name: Verify the generated index
|
||||
run: |
|
||||
python3 -m unittest discover -s tests
|
||||
python3 scripts/build_site.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add --all -- cves/
|
||||
git add --all -- index/github.txt index/cve_dates.json index/cve_record_state.json cves/
|
||||
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
|
||||
@@ -5,6 +5,7 @@ docs/kev.json
|
||||
docs/repo_meta.json
|
||||
docs/trending_poc.json
|
||||
docs/nuclei.json
|
||||
docs/cve_metadata.json
|
||||
docs/epss.json
|
||||
docs/api/v1/cve/
|
||||
__pycache__/
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
<div align="center">
|
||||
|
||||
<a href="https://cve.codepwn.win/"><img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/hero.svg?v=202609011406" alt="CVE Radar" width="100%"></a>
|
||||
<a href="https://cve.codepwn.win/"><img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/hero.svg?v=202609011654" alt="CVE Radar" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/cve/commits/main) [](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [](https://cve.codepwn.win/) [](https://cve.codepwn.win/) [](https://github.com/0xMarcio/cve/stargazers)
|
||||
[](https://github.com/0xMarcio/cve/commits/main) [](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [](https://cve.codepwn.win/) [](https://cve.codepwn.win/) [](https://github.com/0xMarcio/cve/stargazers)
|
||||
|
||||
</div>
|
||||
|
||||
@@ -14,41 +14,41 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 0⭐ | 3h ago | [CVE-2025-39401](https://github.com/katranSefa/CVE-2025-39401) | Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows… |
|
||||
| 0⭐ | 10h ago | [CVE-2026-68138](https://github.com/suominen/CVE-2026-68138) | Tracking CVE-2026-68138, the Linux kernel net/sched qdisc rate-table use-after-free |
|
||||
| 0⭐ | 16h ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… |
|
||||
| 0⭐ | 23h ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… |
|
||||
| 0⭐ | 1d ago | [CVE-2026-76569](https://github.com/toanln-cov/CVE-2026-76569) | Reflected XSS via search GET Parameter in Phoca Download |
|
||||
| 2⭐ | 1d ago | [CVE-2025-49844](https://github.com/Zain3311/CVE-2025-49844) | 🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain… |
|
||||
| 0⭐ | 6h ago | [CVE-2025-39401](https://github.com/katranSefa/CVE-2025-39401) | Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows… |
|
||||
| 0⭐ | 10h ago | [CVE-2026-82329](https://github.com/HORKimhab/CVE-2026-82329) | JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an… |
|
||||
| 0⭐ | 19h ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… |
|
||||
| 0⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… |
|
||||
| 10⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-21479-iqoo11pro](https://github.com/Type010/cve-2025-21479-iqoo11pro) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
|
||||
| 2⭐ | 1d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… |
|
||||
| 0⭐ | 1d ago | [cve-2026-42945](https://github.com/FranklinF25/cve-2026-42945) | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This… |
|
||||
| 0⭐ | 2d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… |
|
||||
| 0⭐ | 2d ago | [CVE-2026-76581](https://github.com/HORKimhab/CVE-2026-76581) | The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and… |
|
||||
| 10⭐ | 2d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. |
|
||||
|
||||
## 2026 · newest 20 of 254
|
||||
## 2026 · newest 20 of 255
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 81⭐ | 6d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
|
||||
| 157⭐ | 10d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
|
||||
| 159⭐ | 10d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
|
||||
| 53⭐ | 11d ago | [CVE-2026-64638-PoC-XSS2Shell-](https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-) | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain - PoC exploit + defensive audit tool + nuclei… |
|
||||
| 37⭐ | 11d ago | [CVE-2026-18963-Exploit](https://github.com/Snizi/CVE-2026-18963-Exploit) | Exploit for KeyCloak CVE-2026-18963 |
|
||||
| 421⭐ | 11d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
|
||||
| 427⭐ | 11d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
|
||||
| 531⭐ | 12d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool |
|
||||
| 824⭐ | 12d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC |
|
||||
| 60⭐ | 17d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452](https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452) | CVE-2026-8452 PreAuth RCE |
|
||||
| 24⭐ | 19d ago | [CVE-2026-66804-CrossDevice-Service-EoP](https://github.com/Rat5ak/CVE-2026-66804-CrossDevice-Service-EoP) | CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM |
|
||||
| 33⭐ | 19d ago | [CVE-2026-68138](https://github.com/aramosf/CVE-2026-68138) | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC |
|
||||
| 33⭐ | 20d ago | [CVE-2026-68138](https://github.com/aramosf/CVE-2026-68138) | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC |
|
||||
| 19⭐ | 25d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-63077](https://github.com/sfewer-r7/CVE-2026-63077) | Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) |
|
||||
| 58⭐ | 26d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-55040](https://github.com/sfewer-r7/CVE-2026-55040) | Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) |
|
||||
| 53⭐ | 29d ago | [CVE-2026-64560-Analysis](https://github.com/villager1314/CVE-2026-64560-Analysis) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… |
|
||||
| 17⭐ | 29d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-60004-POC](https://github.com/imbas007/CVE-2026-60004-POC) | CVE-2026-60004 Pre-Auth RCE Exploit - Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) |
|
||||
| 81⭐ | 33d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
|
||||
| 23⭐ | 33d ago | [CVE-2026-66066-POC](https://github.com/Zer0SumGam3/CVE-2026-66066-POC) | PoC for CVE-2026-66066 in Ruby on Rails |
|
||||
| 11⭐ | 34d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-16232](https://github.com/sfewer-r7/CVE-2026-16232) | A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login… |
|
||||
| 11⭐ | 35d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-16232](https://github.com/sfewer-r7/CVE-2026-16232) | A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login… |
|
||||
| 325⭐ | 35d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
|
||||
| 35⭐ | 36d ago | [CVE-2026-42533](https://github.com/imbas007/CVE-2026-42533) | nginx heap buffer overflow PoC - CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed… |
|
||||
| 26⭐ | 37d ago | [CVE-2026-43499-root-KernelSU](https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU) | 基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 |
|
||||
| 27⭐ | 37d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… |
|
||||
| 34⭐ | 39d ago | [POC-CVE-2026-60206](https://github.com/imbas007/POC-CVE-2026-60206) | cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security |
|
||||
|
||||
## 2025 · newest 16 of 24
|
||||
|
||||
@@ -57,7 +57,7 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
| 6⭐ | 5d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
|
||||
| 4⭐ | 12d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
|
||||
| 20⭐ | 21d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W |
|
||||
| 6⭐ | 25d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
|
||||
| 6⭐ | 26d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
|
||||
| 6⭐ | 30d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… |
|
||||
| 4⭐ | 41d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
|
||||
| 4⭐ | 44d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
|
||||
@@ -66,7 +66,7 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
| 4⭐ | 60d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… |
|
||||
| 3⭐ | 60d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) |
|
||||
| 4⭐ | 65d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… |
|
||||
| 5⭐ | 67d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 |
|
||||
| 5⭐ | 68d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 |
|
||||
| 14⭐ | 81d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… |
|
||||
| 14⭐ | 86d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [FreePBX-CVE-2025-57819-RCE](https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE) | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable… |
|
||||
| 7⭐ | 86d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819-poc](https://github.com/b4sh2/CVE-2025-57819-poc) | CVE-2025-57819 -> rce |
|
||||
@@ -74,14 +74,13 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
<details>
|
||||
<summary>2024, 2023, 2022</summary>
|
||||
|
||||
## 2024 · newest 7 of 10
|
||||
## 2024 · newest 6 of 10
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 16⭐ | 15d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
|
||||
| 16⭐ | 16d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. |
|
||||
| 3⭐ | 17d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F |
|
||||
| 3⭐ | 33d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… |
|
||||
| 31⭐ | 65d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2024-24919-Bulk-Scanner](https://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner) | CVE-2024-24919 [Check Point Security Gateway Information Disclosure] |
|
||||
| 3⭐ | 72d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. |
|
||||
| 7⭐ | 81d ago | [CVE-2024-27983-nodejs-http2](https://github.com/lirantal/CVE-2024-27983-nodejs-http2) | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on… |
|
||||
| 4⭐ | 87d ago | [CVE-2024-1065](https://github.com/kuzeyardabulut/CVE-2024-1065) | Page Cache Exploit for CVE-2024-1065 |
|
||||
@@ -111,11 +110,13 @@ Every file is plain JSON on the CDN. No key, no rate limit.
|
||||
```bash
|
||||
# everything the index knows about one CVE
|
||||
curl -s https://cve.codepwn.win/CVE_list.json \
|
||||
| jq '.[] | select(.cve == "CVE-2021-44228") | {cve, poc: (.poc | length), nuclei, msf, edb}'
|
||||
| jq '.[] | select(.cve == "CVE-2021-44228") | {cve, poc: (.poc | length), nuclei, msf, edb, vulhub, collections}'
|
||||
|
||||
# how bad it is, and how likely it is to be exploited in the next 30 days
|
||||
curl -s https://cve.codepwn.win/nuclei.json | jq '."CVE-2021-44228"'
|
||||
curl -s https://cve.codepwn.win/epss.json | jq '."CVE-2021-44228"'
|
||||
# every published CVSS assessment plus vetted advisory links
|
||||
curl -s https://cve.codepwn.win/cve_metadata.json | jq '."CVE-2021-44228"'
|
||||
|
||||
# likelihood of exploitation in the next 30 days
|
||||
curl -s https://cve.codepwn.win/epss.json | jq '."CVE-2021-44228"'
|
||||
|
||||
# stars and last push for one PoC repository; repository keys are lowercased
|
||||
curl -s https://cve.codepwn.win/repo_meta.json | jq '."sfewer-r7/cve-2026-55040"'
|
||||
@@ -134,34 +135,45 @@ jq -n --slurpfile kev kev.json --slurpfile epss epss.json \
|
||||
|
||||
| Endpoint | Holds |
|
||||
| --- | --- |
|
||||
| [`CVE_list.json`](https://cve.codepwn.win/CVE_list.json) | Every indexed CVE, its description and its `poc`, `nuclei`, `msf` and `edb` links. 48 MB, 10 MB over the wire |
|
||||
| [`CVE_list.json`](https://cve.codepwn.win/CVE_list.json) | Every CVE with a linked PoC, its description and its `poc`, `nuclei`, `msf`, `edb`, `vulhub` and `collections` links |
|
||||
| [`cve_metadata.json`](https://cve.codepwn.win/cve_metadata.json) | NVD CVSS v2.0, v3.0, v3.1 and v4.0 assessments with vectors and vetted advisory links |
|
||||
| [`epss.json`](https://cve.codepwn.win/epss.json) | Exploitation probability and percentile, for nearly every CVE indexed |
|
||||
| [`nuclei.json`](https://cve.codepwn.win/nuclei.json) | Severity, CVSS with its vector, EPSS and CWE, for the CVEs a template rates |
|
||||
| [`nuclei.json`](https://cve.codepwn.win/nuclei.json) | Template metadata for the CVEs covered by a runnable Nuclei check |
|
||||
| [`kev.json`](https://cve.codepwn.win/kev.json) | CISA known exploited, keyed by CVE id |
|
||||
| [`repo_meta.json`](https://cve.codepwn.win/repo_meta.json) | Stars and last push date per PoC repository, keys lowercased |
|
||||
| [`trending_poc.json`](https://cve.codepwn.win/trending_poc.json) | Trending repositories plus index totals |
|
||||
| [`2026/CVE-2026-68138.md`](2026/CVE-2026-68138.md) | Markdown copy of one CVE, one directory per year |
|
||||
| [`cves/2026/CVE-2026-68138.md`](cves/2026/CVE-2026-68138.md) | Markdown copy of one CVE, one directory per year |
|
||||
|
||||
CVSS rows are `[version, score, severity, vector, source, assessment type]`.
|
||||
Advisory rows are `[URL, NVD reference tags]`.
|
||||
|
||||
## Sources
|
||||
|
||||
| Source | What it contributes |
|
||||
| --- | --- |
|
||||
| GitHub | Repositories naming a CVE, checked for code before they are linked |
|
||||
| [Nuclei](https://github.com/projectdiscovery/nuclei-templates) | Runnable templates, and the severity, CVSS, EPSS and CWE ratings |
|
||||
| [PoC-in-GitHub](https://github.com/nomi-sec/PoC-in-GitHub) | Historical repository candidates, passed through the same code and intent checks |
|
||||
| [Nuclei](https://github.com/projectdiscovery/nuclei-templates) | Runnable templates that exercise the vulnerability |
|
||||
| [ExploitDB](https://gitlab.com/exploit-database/exploitdb) | Archived exploits, mapped by their own CVE column |
|
||||
| [Metasploit](https://github.com/rapid7/metasploit-framework) | Modules, best ranked first |
|
||||
| [Vulhub](https://github.com/vulhub/vulhub) | Runnable vulnerable environments and reproduction steps |
|
||||
| [afrog](https://github.com/zan8in/afrog), [Vulnerability](https://github.com/tzwlhack/Vulnerability), [0day](https://github.com/helloexp/0day), [xray](https://github.com/chaitin/xray) | CVE-specific templates, code and reproduction guides inside multi-CVE repositories |
|
||||
| [EPSS](https://www.first.org/epss/) | Daily exploitation probability from FIRST |
|
||||
| [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) | What is being exploited in the wild |
|
||||
| NVD, MITRE | The CVE record itself |
|
||||
| [NVD](https://nvd.nist.gov/) | CVSS assessments and tagged vendor, third-party, patch and mitigation references |
|
||||
| [CVE Program](https://www.cve.org/) | The CVE record, publication state and CNA references |
|
||||
|
||||
## Build
|
||||
|
||||
| Job | Cadence | Picks up |
|
||||
| --- | --- | --- |
|
||||
| [PoC sweep](.github/workflows/hot_cves.yml) | hourly | New and updated exploit repositories |
|
||||
| [CVE sync](.github/workflows/sync_cve_pocs.yml) | daily | New CVEs and references from NVD and MITRE |
|
||||
| [Trending sweep](.github/workflows/hot_cves.yml) | hourly | Front-page repositories and prior-hour candidates added to the searchable index |
|
||||
| [CVE sync](.github/workflows/sync_cve_pocs.yml) | daily | New CVEs, CNA references and recently pushed GitHub repositories for every CVE year |
|
||||
| [Metadata sync](.github/workflows/sync_metadata.yml) | daily plus weekly full pass | CVSS, advisories, rejected records and current CISA KEV status |
|
||||
| [Nuclei sync](.github/workflows/sync_nuclei.yml) | daily | New templates and rating changes |
|
||||
| [Exploit archives](.github/workflows/sync_exploits.yml) | daily | New ExploitDB entries and Metasploit modules |
|
||||
| [Exploit archives](.github/workflows/sync_exploits.yml) | daily | ExploitDB, Metasploit and Vulhub mappings |
|
||||
| [Historical GitHub sync](.github/workflows/sync_pocingithub.yml) | weekly | Older PoC repositories missed by the recent-push window |
|
||||
| [Path collection sync](.github/workflows/sync_collections.yml) | weekly | CVE-specific artifacts inside curated multi-CVE repositories |
|
||||
| [Link audit](.github/workflows/audit_poc_links.yml) | weekly | Repositories that went dead, dropped from the index |
|
||||
|
||||
A repository counts as updated only when a commit touches something other than
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0006](https://www.cve.org/CVERecord?id=CVE-1999-0006)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19110
|
||||
- https://www.exploit-db.com/exploits/19109
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0009](https://www.cve.org/CVERecord?id=CVE-1999-0009)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19112
|
||||
- https://www.exploit-db.com/exploits/19111
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0014](https://www.cve.org/CVERecord?id=CVE-1999-0014)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Unauthorized privileged access or denial of service via dtappgather program in CDE.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19108
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0015](https://www.cve.org/CVERecord?id=CVE-1999-0015)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Teardrop IP denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19103
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0018](https://www.cve.org/CVERecord?id=CVE-1999-0018)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in statd allows root privileges.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19104
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0021](https://www.cve.org/CVERecord?id=CVE-1999-0021)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19105
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0023](https://www.cve.org/CVERecord?id=CVE-1999-0023)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19106
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0025](https://www.cve.org/CVERecord?id=CVE-1999-0025)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
root privileges via buffer overflow in df command on SGI IRIX systems.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19274
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0026](https://www.cve.org/CVERecord?id=CVE-1999-0026)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
root privileges via buffer overflow in pset command on SGI IRIX systems.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19347
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0029](https://www.cve.org/CVERecord?id=CVE-1999-0029)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
root privileges via buffer overflow in ordist command on SGI IRIX systems.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19317
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0030](https://www.cve.org/CVERecord?id=CVE-1999-0030)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
root privileges via buffer overflow in xlock command on SGI IRIX systems.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19173
|
||||
- https://www.exploit-db.com/exploits/19172
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0032](https://www.cve.org/CVERecord?id=CVE-1999-0032)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19545
|
||||
- https://www.exploit-db.com/exploits/19544
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-1999-0034](https://www.cve.org/CVERecord?id=CVE-1999-0034)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19547
|
||||
- https://www.exploit-db.com/exploits/19546
|
||||
- https://www.exploit-db.com/exploits/320
|
||||
- https://www.exploit-db.com/exploits/200
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0036](https://www.cve.org/CVERecord?id=CVE-1999-0036)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19310
|
||||
- https://www.exploit-db.com/exploits/336
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0038](https://www.cve.org/CVERecord?id=CVE-1999-0038)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in xlock program allows local users to execute commands as root.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19173
|
||||
- https://www.exploit-db.com/exploits/19172
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0039](https://www.cve.org/CVERecord?id=CVE-1999-0039)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19299
|
||||
@@ -0,0 +1,23 @@
|
||||
### [CVE-1999-0040](https://www.cve.org/CVERecord?id=CVE-1999-0040)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19202
|
||||
- https://www.exploit-db.com/exploits/19201
|
||||
- https://www.exploit-db.com/exploits/19200
|
||||
- https://www.exploit-db.com/exploits/331
|
||||
- https://www.exploit-db.com/exploits/322
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0041](https://www.cve.org/CVERecord?id=CVE-1999-0041)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in NLS (Natural Language Service).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19552
|
||||
- https://www.exploit-db.com/exploits/19551
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0042](https://www.cve.org/CVERecord?id=CVE-1999-0042)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/340
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0044](https://www.cve.org/CVERecord?id=CVE-1999-0044)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19280
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0045](https://www.cve.org/CVERecord?id=CVE-1999-0045)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
List of arbitrary files on Web host via nph-test-cgi script.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19536
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0050](https://www.cve.org/CVERecord?id=CVE-1999-0050)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in HP-UX newgrp program.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19535
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-1999-0051](https://www.cve.org/CVERecord?id=CVE-1999-0051)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19350
|
||||
- https://www.exploit-db.com/exploits/19067
|
||||
- https://www.exploit-db.com/exploits/19066
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0060](https://www.cve.org/CVERecord?id=CVE-1999-0060)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19555
|
||||
- https://www.exploit-db.com/exploits/19554
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0063](https://www.cve.org/CVERecord?id=CVE-1999-0063)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19531
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0064](https://www.cve.org/CVERecord?id=CVE-1999-0064)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in AIX lquerylv program gives root access to local users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/335
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0066](https://www.cve.org/CVERecord?id=CVE-1999-0066)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
AnyForm CGI remote execution.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19557
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0068](https://www.cve.org/CVERecord?id=CVE-1999-0068)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
CGI PHP mylog script allows an attacker to read any file on the target server.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19553
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0069](https://www.cve.org/CVERecord?id=CVE-1999-0069)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Solaris ufsrestore buffer overflow.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19534
|
||||
- https://www.exploit-db.com/exploits/19533
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0077](https://www.cve.org/CVERecord?id=CVE-1999-0077)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Predictable TCP sequence numbers allow spoofing.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19522
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0092](https://www.cve.org/CVERecord?id=CVE-1999-0092)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19306
|
||||
@@ -11,6 +11,8 @@ The debug command in Sendmail is enabled, allowing attackers to execute commands
|
||||
|
||||
#### Reference
|
||||
- http://seclists.org/fulldisclosure/2019/Jun/16
|
||||
- http://www.openwall.com/lists/oss-security/2019/06/05/4
|
||||
- http://www.openwall.com/lists/oss-security/2019/06/06/1
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0107](https://www.cve.org/CVERecord?id=CVE-1999-0107)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20558
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0108](https://www.cve.org/CVERecord?id=CVE-1999-0108)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The printers program in IRIX has a buffer overflow that gives root access to local users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19267
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0109](https://www.cve.org/CVERecord?id=CVE-1999-0109)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in ffbconfig in Solaris 2.5.1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19159
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0112](https://www.cve.org/CVERecord?id=CVE-1999-0112)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in AIX dtterm program for the CDE.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/333
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0113](https://www.cve.org/CVERecord?id=CVE-1999-0113)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Some implementations of rlogin allow root access if given a -froot parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19348
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0115](https://www.cve.org/CVERecord?id=CVE-1999-0115)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
AIX bugfiler program allows local users to gain root access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20290
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0116](https://www.cve.org/CVERecord?id=CVE-1999-0116)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/343
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0118](https://www.cve.org/CVERecord?id=CVE-1999-0118)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
AIX infod allows local users to gain root access through an X display.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19287
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0122](https://www.cve.org/CVERecord?id=CVE-1999-0122)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in AIX lchangelv gives root access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19309
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0125](https://www.cve.org/CVERecord?id=CVE-1999-0125)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in SGI IRIX mailx program.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19312
|
||||
- https://www.exploit-db.com/exploits/19311
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0126](https://www.cve.org/CVERecord?id=CVE-1999-0126)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SGI IRIX buffer overflow in xterm and Xaw allows root access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/338
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0128](https://www.cve.org/CVERecord?id=CVE-1999-0128)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/324
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0137](https://www.cve.org/CVERecord?id=CVE-1999-0137)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19078
|
||||
- https://www.exploit-db.com/exploits/19077
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0140](https://www.cve.org/CVERecord?id=CVE-1999-0140)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Denial of service in RAS/PPTP on NT systems.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20508
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0144](https://www.cve.org/CVERecord?id=CVE-1999-0144)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20562
|
||||
- https://www.exploit-db.com/exploits/20561
|
||||
@@ -11,6 +11,8 @@ Sendmail WIZ command enabled, allowing root access.
|
||||
|
||||
#### Reference
|
||||
- http://seclists.org/fulldisclosure/2019/Jun/16
|
||||
- http://www.openwall.com/lists/oss-security/2019/06/05/4
|
||||
- http://www.openwall.com/lists/oss-security/2019/06/06/1
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0146](https://www.cve.org/CVERecord?id=CVE-1999-0146)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20423
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0147](https://www.cve.org/CVERecord?id=CVE-1999-0147)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20449
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0148](https://www.cve.org/CVERecord?id=CVE-1999-0148)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The handler CGI program in IRIX allows arbitrary command execution.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19303
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0149](https://www.cve.org/CVERecord?id=CVE-1999-0149)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19298
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-1999-0153](https://www.cve.org/CVERecord?id=CVE-1999-0153)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20440
|
||||
- https://www.exploit-db.com/exploits/20439
|
||||
- https://www.exploit-db.com/exploits/20438
|
||||
- https://www.exploit-db.com/exploits/20437
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0173](https://www.cve.org/CVERecord?id=CVE-1999-0173)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
FormMail CGI program can be used by web servers other than the host server that the program resides on.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20486
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0175](https://www.cve.org/CVERecord?id=CVE-1999-0175)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20448
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0176](https://www.cve.org/CVERecord?id=CVE-1999-0176)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Webgais program allows a remote user to execute arbitrary commands.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20463
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0178](https://www.cve.org/CVERecord?id=CVE-1999-0178)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20484
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0191](https://www.cve.org/CVERecord?id=CVE-1999-0191)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
IIS newdsn.exe CGI script allows remote users to overwrite files.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20309
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0193](https://www.cve.org/CVERecord?id=CVE-1999-0193)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20332
|
||||
- https://www.exploit-db.com/exploits/20331
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0196](https://www.cve.org/CVERecord?id=CVE-1999-0196)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20483
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0204](https://www.cve.org/CVERecord?id=CVE-1999-0204)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20599
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0207](https://www.cve.org/CVERecord?id=CVE-1999-0207)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20597
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0208](https://www.cve.org/CVERecord?id=CVE-1999-0208)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20259
|
||||
- https://www.exploit-db.com/exploits/20258
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0210](https://www.cve.org/CVERecord?id=CVE-1999-0210)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=88053459921223&w=2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19199
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0215](https://www.cve.org/CVERecord?id=CVE-1999-0215)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Routed allows attackers to append data to files.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20805
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0219](https://www.cve.org/CVERecord?id=CVE-1999-0219)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19218
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0233](https://www.cve.org/CVERecord?id=CVE-1999-0233)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20445
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0235](https://www.cve.org/CVERecord?id=CVE-1999-0235)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/21050
|
||||
- https://www.exploit-db.com/exploits/21049
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0238](https://www.cve.org/CVERecord?id=CVE-1999-0238)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
php.cgi allows attackers to read any file on the system.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20567
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0239](https://www.cve.org/CVERecord?id=CVE-1999-0239)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19363
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0262](https://www.cve.org/CVERecord?id=CVE-1999-0262)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20462
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0264](https://www.cve.org/CVERecord?id=CVE-1999-0264)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
htmlscript CGI program allows remote read access to files.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20434
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0283](https://www.cve.org/CVERecord?id=CVE-1999-0283)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Java Web Server would allow remote users to obtain the source code for CGI programs.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20375
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-1999-0284](https://www.cve.org/CVERecord?id=CVE-1999-0284)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/23146
|
||||
- https://www.exploit-db.com/exploits/23145
|
||||
- https://www.exploit-db.com/exploits/23113
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0287](https://www.cve.org/CVERecord?id=CVE-1999-0287)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Vulnerability in the Wguest CGI program.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20447
|
||||
- https://www.exploit-db.com/exploits/20446
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0288](https://www.cve.org/CVERecord?id=CVE-1999-0288)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19238
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0294](https://www.cve.org/CVERecord?id=CVE-1999-0294)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
All records in a WINS database can be deleted through SNMP for a denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20564
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0301](https://www.cve.org/CVERecord?id=CVE-1999-0301)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in SunOS/Solaris ps command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19168
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0306](https://www.cve.org/CVERecord?id=CVE-1999-0306)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
buffer overflow in HP xlock program.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19173
|
||||
- https://www.exploit-db.com/exploits/19172
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0314](https://www.cve.org/CVERecord?id=CVE-1999-0314)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19163
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0315](https://www.cve.org/CVERecord?id=CVE-1999-0315)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in Solaris fdformat command gives root access to local users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/328
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-1999-0321](https://www.cve.org/CVERecord?id=CVE-1999-0321)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19342
|
||||
- https://www.exploit-db.com/exploits/19341
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0328](https://www.cve.org/CVERecord?id=CVE-1999-0328)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SGI permissions program allows local users to gain root privileges.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19318
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0347](https://www.cve.org/CVERecord?id=CVE-1999-0347)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19156
|
||||
@@ -0,0 +1,16 @@
|
||||
### [CVE-1999-0349](https://www.cve.org/CVERecord?id=CVE-1999-0349)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0350](https://www.cve.org/CVERecord?id=CVE-1999-0350)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19429
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-1999-0360](https://www.cve.org/CVERecord?id=CVE-1999-0360)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20305
|
||||
Loaded 100 of 21358 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user