mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Index ExploitDB and Metasploit, score everything with EPSS, and stop hiding new PoCs
Four gaps, measured against the index before any of this was written. ExploitDB and Metasploit are folded in the way nuclei templates were. ExploitDB covers 25,066 CVEs and adds 30,327 links across 17,237 entries; Metasploit covers 3,178 and adds 3,520 across 2,550. Together with the templates the index goes from 101,809 CVEs carrying a PoC to 103,945. Neither archive skews recent, which is why nuclei went first, but both are the difference between an old CVE having nothing and having something that runs. Each keeps its own section and its own field, and each leads the list ahead of the repositories: a module, an entry and a template all run as they stand, without reading somebody's code. EPSS now covers the index rather than the 4,274 CVEs a template happened to rate. FIRST's daily feed scores 103,783 of 103,945, so a result can say how likely a flaw is to be exploited in the next thirty days, not only that code exists for it. It is fetched during the site build and never tracked here: a daily rescore of 366,000 rows would be nothing but churn. The trending tables also stop hiding what they exist to show. The star floor excluded 1,059 of the 1,312 2026 PoC repositories pushed this quarter, and a repository published this morning has no stars, so the newest row on the front page was six days old. A separate lane drops the floor entirely and pays for it with a ten day window, a cap of ten rows, and the same paperwork check the rest of the table uses. The newest row is now hours old.
This commit is contained in:
1 parent
ff11c84652
commit
84da5a5fc6
18276 files changed
+46612
-26
No files matched your search
@@ -29,6 +29,11 @@ PER_YEAR = 20
|
||||
POOL = 50 # fetched per year before re-sorting by last commit
|
||||
WINDOW_DAYS = 90 # a PoC nobody has touched this quarter is not "recent"
|
||||
MIN_STARS = 2
|
||||
# A PoC published today has no stars yet, so the star floor hid exactly the
|
||||
# rows worth seeing first. This lane drops the floor and pays for it with a
|
||||
# short window and a hard cap.
|
||||
LANDED_DAYS = 10
|
||||
LANDED_ROWS = 10
|
||||
USER_AGENT = "0xMarcio-cve-trending"
|
||||
ROOT = os.path.join(os.path.dirname(os.path.abspath(__file__)), os.pardir)
|
||||
README = os.path.join(ROOT, "README.md")
|
||||
@@ -44,6 +49,60 @@ HERO_URL = f"{RAW}/hero.svg"
|
||||
KEV_MARK = f'<img src="{RAW}/kev.svg" alt="KEV" title="CISA known exploited" height="14"> '
|
||||
|
||||
|
||||
def search(query: str, pool: int) -> tuple[int, list[dict]]:
|
||||
"""One repository search, most recently updated first."""
|
||||
url = SEARCH_URL + "?" + parse.urlencode(
|
||||
{"q": query, "s": "updated", "o": "desc", "per_page": pool}
|
||||
)
|
||||
headers = {"Accept": "application/vnd.github+json", "User-Agent": USER_AGENT}
|
||||
token = github_token()
|
||||
if token:
|
||||
headers["Authorization"] = f"Bearer {token}"
|
||||
for attempt in range(3):
|
||||
try:
|
||||
with request.urlopen(request.Request(url, headers=headers), timeout=30) as response:
|
||||
payload = json.load(response)
|
||||
return int(payload.get("total_count") or 0), payload.get("items") or []
|
||||
except error.HTTPError as problem:
|
||||
if problem.code not in (403, 422, 503) or attempt == 2:
|
||||
raise
|
||||
time.sleep(5 * (attempt + 1))
|
||||
return 0, []
|
||||
|
||||
|
||||
def just_landed(token: str, seen: set[str]) -> list[dict]:
|
||||
"""Fresh PoCs with no star floor at all.
|
||||
|
||||
Everything here still has to survive the paperwork check, so a repository
|
||||
that has only had its README touched does not qualify as landing.
|
||||
"""
|
||||
since = (datetime.now(timezone.utc) - timedelta(days=LANDED_DAYS)).date().isoformat()
|
||||
year = datetime.now(timezone.utc).year
|
||||
rows: list[dict] = []
|
||||
for target in (year, year - 1):
|
||||
query = " ".join(
|
||||
[f'"CVE-{target}" in:name', f"pushed:>{since}"]
|
||||
+ [f"language:{language}" for language in LANGUAGES]
|
||||
)
|
||||
_, found = search(query, POOL)
|
||||
rows.extend(found)
|
||||
names = [str(r.get("full_name") or "") for r in rows if str(r.get("full_name") or "") not in seen]
|
||||
shipped = code_pushed(names, token)
|
||||
fresh = []
|
||||
for repo in rows:
|
||||
name = str(repo.get("full_name") or "")
|
||||
if name in seen:
|
||||
continue
|
||||
pushed = shipped.get(name) or str(repo.get("pushed_at") or "")
|
||||
if pushed[:10] < since:
|
||||
continue
|
||||
repo["_shipped"] = pushed
|
||||
seen.add(name)
|
||||
fresh.append(repo)
|
||||
fresh.sort(key=lambda repo: repo["_shipped"], reverse=True)
|
||||
return fresh[:LANDED_ROWS]
|
||||
|
||||
|
||||
def search_year(year: int, since: str) -> tuple[int, list[dict]]:
|
||||
"""Return how many PoC repositories for one CVE year were pushed since a
|
||||
date, and the most recently pushed of them.
|
||||
@@ -388,6 +447,9 @@ def main() -> int:
|
||||
)
|
||||
sections.append(block)
|
||||
|
||||
landed = just_landed(token, {item["url"].split("github.com/")[-1] for item in items})
|
||||
print(f"just landed: {len(landed)} repositories with no star floor")
|
||||
|
||||
stamp = now.strftime("%Y%m%d%H%M")
|
||||
# No hyphens: they are the field separator in a shields badge path.
|
||||
synced = now.strftime("%d %b %Y %H:%M UTC")
|
||||
@@ -396,6 +458,35 @@ def main() -> int:
|
||||
f"newest first. {KEV_MARK.strip()} marks a CVE CISA lists as "
|
||||
f"exploited in the wild.")
|
||||
lines.append("")
|
||||
if landed:
|
||||
lines.append(f"## Just landed · last {LANDED_DAYS} days")
|
||||
lines.append("")
|
||||
lines.append("No star floor here, so a PoC published this morning shows up "
|
||||
"the same day rather than once it has been noticed.")
|
||||
lines.append("")
|
||||
lines.append("| Stars | Updated | Repository | Description |")
|
||||
lines.append("| --- | --- | --- | --- |")
|
||||
for repo in landed:
|
||||
cve = cve_of(repo)
|
||||
exploited = cve in kev
|
||||
items.append({
|
||||
"year": int(cve.split("-")[1]) if cve else current_year,
|
||||
"stars": int(repo.get("stargazers_count") or 0),
|
||||
"name": cell(repo.get("name")),
|
||||
"url": repo.get("html_url") or "",
|
||||
"desc": cell(repo.get("description")),
|
||||
"pushed": repo["_shipped"],
|
||||
"created": str(repo.get("created_at") or ""),
|
||||
"cve": cve,
|
||||
"kev": exploited,
|
||||
"landed": True,
|
||||
})
|
||||
lines.append(
|
||||
f"| {repo.get('stargazers_count', 0)}\u2b50 | {time_ago(repo['_shipped'])} "
|
||||
f"| {KEV_MARK if exploited else ''}[{cell(repo.get('name'))}]({repo.get('html_url')}) "
|
||||
f"| {shorten(repo.get('description'))} |"
|
||||
)
|
||||
lines.append("")
|
||||
for index, block in enumerate(sections):
|
||||
if index == FOLDED_AFTER and len(sections) > FOLDED_AFTER:
|
||||
years = ", ".join(section[0][3:7] for section in sections[FOLDED_AFTER:])
|
||||
|
||||
@@ -8,6 +8,7 @@ on:
|
||||
workflows:
|
||||
- Sync CVE PoCs
|
||||
- Sync Nuclei Templates
|
||||
- Sync Exploit Archives
|
||||
- Hot CVEs List
|
||||
- Audit PoC Links
|
||||
types:
|
||||
|
||||
@@ -0,0 +1,51 @@
|
||||
name: Sync Exploit Archives
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
schedule:
|
||||
- cron: '50 4 * * *'
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
concurrency:
|
||||
group: repository-updates
|
||||
cancel-in-progress: false
|
||||
|
||||
jobs:
|
||||
ScheduledRun:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v7
|
||||
|
||||
- name: Set up Python
|
||||
uses: actions/setup-python@v7
|
||||
with:
|
||||
python-version: '3.13'
|
||||
|
||||
- name: Pull ExploitDB and Metasploit into the index
|
||||
run: python3 scripts/sync_exploits.py
|
||||
|
||||
- name: Check for changes and commit
|
||||
run: |
|
||||
git config user.name 'CVE-BOT'
|
||||
git config user.email '[email protected]'
|
||||
git add -u
|
||||
|
||||
if git diff --cached --quiet; then
|
||||
echo "No changes to commit"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
git commit -m "Sync exploit archives $(date -u +'%Y-%m-%d') :robot:"
|
||||
|
||||
for attempt in 1 2 3; do
|
||||
if git push origin HEAD:main; then
|
||||
exit 0
|
||||
fi
|
||||
echo "Push rejected; replaying onto the current main (attempt $attempt)"
|
||||
git fetch --unshallow origin main 2>/dev/null || git fetch origin main
|
||||
git rebase FETCH_HEAD
|
||||
done
|
||||
exit 1
|
||||
@@ -5,6 +5,7 @@ docs/kev.json
|
||||
docs/repo_meta.json
|
||||
docs/trending_poc.json
|
||||
docs/nuclei.json
|
||||
docs/epss.json
|
||||
docs/api/v1/cve/
|
||||
__pycache__/
|
||||
|
||||
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19096
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19102
|
||||
- https://www.exploit-db.com/exploits/19101
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19107
|
||||
@@ -16,3 +16,9 @@ No PoCs from references.
|
||||
- https://github.com/Pommaq/CVE-1999-0016-POC
|
||||
- https://github.com/pexmee/CVE-1999-0016-Land-DOS-tool
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20814
|
||||
- https://www.exploit-db.com/exploits/20813
|
||||
- https://www.exploit-db.com/exploits/20812
|
||||
- https://www.exploit-db.com/exploits/20811
|
||||
- https://www.exploit-db.com/exploits/20810
|
||||
@@ -15,3 +15,7 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19277
|
||||
- https://www.exploit-db.com/exploits/19276
|
||||
- https://www.exploit-db.com/exploits/334
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19203
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20435
|
||||
@@ -15,3 +15,5 @@ The debug command in Sendmail is enabled, allowing attackers to execute commands
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19028
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/22251
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/chargen/chargen_probe.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19556
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20481
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/nfs/nfsmount.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20568
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20308
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19465
|
||||
- https://www.exploit-db.com/exploits/19464
|
||||
@@ -15,3 +15,10 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19040
|
||||
- https://www.exploit-db.com/exploits/16326
|
||||
- https://www.exploit-db.com/exploits/5366
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/sunrpc/ypupdated_exec.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/329
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20595
|
||||
@@ -15,3 +15,10 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/x00itachi/metasploit-exploit-search-online
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/16724
|
||||
- https://www.exploit-db.com/exploits/16706
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/warftpd_165_pass.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/warftpd_165_user.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20430
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/21050
|
||||
- https://www.exploit-db.com/exploits/21049
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19084
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/22611
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19118
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20802
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19192
|
||||
@@ -15,3 +15,5 @@ Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a sy
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19919
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19458
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/ftp_anonymous.rb
|
||||
@@ -15,3 +15,15 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/41694
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/db2/db2_auth.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/ftp_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dell_idrac.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_300_615_http_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_615h_http_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_session_cgi_http_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/http_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/joomla_bruteforce_login.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smtp/smtp_relay.rb
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/ialejandrozalles/InvestigacionAplicacionCVE-1999-0517
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/snmp/snmp_enum.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/snmp/snmp_login.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/enum_dns.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/nfs/nfsmount.rb
|
||||
@@ -15,3 +15,7 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/bongguy09/Simulating-Real-World-Network-Exploitation-and-Defenses
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rexec_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rlogin_login.rb
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rsh_login.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/21919
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19253
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19497
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20465
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19209
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19129
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19196
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19559
|
||||
@@ -15,3 +15,5 @@ Buffer overflow in CDE mailtool allows local users to gain root privileges via a
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19648
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19457
|
||||
@@ -15,3 +15,5 @@ Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious conte
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19662
|
||||
@@ -15,3 +15,12 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19248
|
||||
- https://www.exploit-db.com/exploits/19247
|
||||
- https://www.exploit-db.com/exploits/19246
|
||||
- https://www.exploit-db.com/exploits/19245
|
||||
- https://www.exploit-db.com/exploits/16468
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/ms02_018_htr.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19502
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19542
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19594
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19508
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20433
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19661
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19638
|
||||
@@ -15,3 +15,5 @@ Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Expre
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19471
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19207
|
||||
@@ -15,3 +15,9 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/siunam321/CVE-1999-1053-PoC
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/16914
|
||||
- https://www.exploit-db.com/exploits/9907
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/guestbook_ssi_exec.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19540
|
||||
@@ -15,3 +15,6 @@ The installation of Sun Source (sunsrc) tapes allows local users to gain root pr
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19043
|
||||
- https://www.exploit-db.com/exploits/19042
|
||||
@@ -15,3 +15,5 @@ Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote a
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19621
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19244
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19316
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/2242
|
||||
@@ -18,3 +18,5 @@ Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows rem
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20602
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19687
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/dogasantos/msfcve
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19689
|
||||
- https://www.exploit-db.com/exploits/19688
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19691
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19686
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19690
|
||||
@@ -15,3 +15,5 @@ MySQL allows local users to modify passwords for arbitrary MySQL users via the G
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19721
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19710
|
||||
- https://www.exploit-db.com/exploits/19709
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19730
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19738
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19823
|
||||
@@ -15,3 +15,5 @@ The default configurations for McAfee Virus Scan and Norton Anti-Virus virus che
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19733
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19742
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19743
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19740
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19750
|
||||
@@ -15,3 +15,7 @@ No PoCs from references.
|
||||
#### Github
|
||||
- https://github.com/mike182/exploit
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19779
|
||||
- https://www.exploit-db.com/exploits/19778
|
||||
- https://www.exploit-db.com/exploits/255
|
||||
@@ -15,3 +15,5 @@ Red Hat 6.0 allows local users to gain root access by booting single user and hi
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19763
|
||||
@@ -15,3 +15,6 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19839
|
||||
- https://www.exploit-db.com/exploits/19838
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19830
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19435
|
||||
@@ -15,3 +15,8 @@ Eudora 4.x allows remote attackers to bypass the user warning for executable att
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/23399
|
||||
- https://www.exploit-db.com/exploits/23398
|
||||
- https://www.exploit-db.com/exploits/22627
|
||||
- https://www.exploit-db.com/exploits/19885
|
||||
@@ -15,3 +15,8 @@ The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19882
|
||||
|
||||
#### Metasploit
|
||||
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/cisco/ios_http_percentpercent.rb
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19904
|
||||
@@ -15,3 +15,7 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19918
|
||||
- https://www.exploit-db.com/exploits/19917
|
||||
- https://www.exploit-db.com/exploits/19916
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19907
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19897
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19894
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19908
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19939
|
||||
@@ -15,3 +15,5 @@ The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/20027
|
||||
@@ -15,3 +15,5 @@ No PoCs from references.
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
#### ExploitDB
|
||||
- https://www.exploit-db.com/exploits/19975
|
||||
Loaded 100 of 18276 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user