admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
0b50bcb00a58889cb5b6f27dfdf4905aaf3d1b82
cve/docs/index.html
T
0xMarcio 0e5e8d7e8c Fix correctness, security and consistency bugs across the generated site 
The per-CVE pages read as a different site and disagreed with search about
their own contents. Both traced to the page generator having grown its own
copy of rules the browser already had.

Security:
- JSON-LD was serialised with json.dumps alone, which leaves < > and & raw. A
  description containing "</script>" ended the element and turned the rest into
  live markup. 78 descriptions in the corpus already carry that sequence; only
  the 155-character meta trim kept them out of the payload. Escape to \u00XX.

Correctness:
- The PoC count summed only the repository column, so 19,940 pages announced
  "0 public PoC exploits" directly above the ExploitDB and Metasploit entries
  they were listing, in the title and meta description too. Count every source
  the page renders, matching POC_FIELDS in logic.js.
- The severity chip took the highest score while search took the first, so
  18,434 CVEs showed one severity in the results and another on the page. Both
  now take the primary assessment, with the same Nuclei fallback search uses.
- Identical CVSS rows printed two and three times on 13,340 pages. Dedupe on
  (version, score, vector) and label each survivor with its assessor from
  row[4]; row[5] is the assessment type and left 129 pages showing two rows
  both marked "Secondary".
- repo_from_url accepted any host containing "github" and kept .git suffixes,
  so a clone URL and its plain form counted as two sources on the page and one
  in search. 273 CVEs disagreed. Match repoFromUrl in logic.js exactly.
- 41 CVEs nobody has scored were unreachable by search, including by exact ID:
  the severity filter tested membership of a list naming only the four scored
  bands, so ALL excluded them. ALL now means all.
- EPSS percentiles printed a hard-coded "th": 51th, 62th, 93th on 21,100 pages.
- Search reported "1 PoCs", and the empty-results branch returned before
  updating the live region, leaving it reading "loading index..." forever.

Deploy safety:
- A failed EPSS fetch returned {} and published it, silently erasing every
  score from 82,000 pages. It now raises, as does a feed covering under 90%
  of the index.

Presentation:
- CVE pages never loaded the webfonts the homepage loads, so all 82,468 fell
  back to system fonts. This is why they looked unlike the rest of the site.
- 404.html referenced four CSS classes that no longer existed and rendered
  unstyled, and its meta refresh threw a reader out of a search after two
  seconds. It is now generated from the same constants and header as every
  other page, and offers the search box instead.
- The homepage and the generated footer credited different sources. Both now
  come from brand.SOURCES_LINE, and the build refuses to publish a homepage
  that has drifted from it.
- Three aria-labels sat on div elements with no role, where they are ignored.

SEO:
- 61,936 pages filled "Related" with numerically adjacent CVEs, which are not
  related to anything. Keep only shared-author relations; 20,532 pages have one.
- Sitemap lastmod described the CVE record, so a CVE that gained forty PoCs
  still advertised a date from 2021. It now reflects the page, and each shard
  carries its newest page's date rather than today's.
- TechArticle is not a type Google draws a rich result from, and its dates
  claimed the CVE record's publication as the page's. Use WebPage with the
  vulnerability as mainEntity.
- Curated sources and the CVE and NVD records no longer carry nofollow; the
  crowd-sourced repository list still does.
2026-09-02 17:17:28 +02:00

140 lines
6.6 KiB
HTML
Raw Blame History

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<!-- Absolute URLs all point at the canonical host. Keep them in step with
SITE in scripts/brand.py, which drives every generated surface. -->
<title>PoC Index: Search CVE Proof-of-Concept Exploits</title>
<meta name="description" content="Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub." />
<meta name="robots" content="index, follow, max-image-preview:large" />
<link rel="icon" href="/favicon.ico" />
<link rel="canonical" href="https://pocindex.io/" />
<meta property="og:type" content="website" />
<meta property="og:site_name" content="PoC Index" />
<meta property="og:title" content="PoC Index: Search CVE Proof-of-Concept Exploits" />
<meta property="og:description" content="Public proof-of-concept exploits, indexed by CVE." />
<meta property="og:url" content="https://pocindex.io/" />
<meta property="og:image" content="https://pocindex.io/social-card.png" />
<meta property="og:image:width" content="1280" />
<meta property="og:image:height" content="640" />
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:title" content="PoC Index: Search CVE Proof-of-Concept Exploits" />
<meta name="twitter:description" content="Public proof-of-concept exploits, indexed by CVE." />
<meta name="twitter:image" content="https://pocindex.io/social-card.png" />
<!-- WebSite.name is how Google decides what to print as the site name in a
result. Without it the title, the og tags and the h1 were three different
names and it picked one on its own. SearchAction points at the ?q= route
logic.js now keeps in the URL. -->
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "WebSite",
"name": "PoC Index",
"url": "https://pocindex.io/",
"description": "Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.",
"potentialAction": {
"@type": "SearchAction",
"target": {
"@type": "EntryPoint",
"urlTemplate": "https://pocindex.io/?q={search_term_string}"
},
"query-input": "required name=search_term_string"
}
}
</script>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600&family=IBM+Plex+Mono:wght@400;500&display=swap" rel="stylesheet" />
<link rel="stylesheet" href="/style.css" />
</head>
<body>
<header class="container hero-bar">
<div class="hero">
<svg class="hero-radar" viewBox="0 0 400 400" aria-hidden="true">
<circle cx="200" cy="200" r="70" />
<circle cx="200" cy="200" r="124" />
<circle cx="200" cy="200" r="170" />
<circle cx="200" cy="200" r="200" />
<line class="hero-sweep" x1="200" y1="200" x2="200" y2="0" />
</svg>
<div class="hero-id">
<h1>PoC Index</h1>
<p>Public proof-of-concept exploits, indexed by CVE.</p>
</div>
<dl class="hero-stats">
<div><dt data-stat-total>&nbsp;</dt><dd>CVES INDEXED</dd></div>
<div><dt class="is-accent" data-stat-pocs>&nbsp;</dt><dd>WITH POCS</dd></div>
<div><dt class="is-danger" data-stat-kev>&nbsp;</dt><dd>KNOWN EXPLOITED</dd></div>
</dl>
</div>
</header>
<div class="container search-bar">
<form class="search" role="search" autocomplete="off">
<svg width="18" height="18" viewBox="0 0 18 18" fill="none" aria-hidden="true">
<circle cx="7.6" cy="7.6" r="5.1" stroke="#8b949e" stroke-width="1.7" />
<path d="M11.5 11.5 L15.6 15.6" stroke="#8b949e" stroke-width="1.7" stroke-linecap="round" />
</svg>
<input type="text" spellcheck="false" data-search
placeholder="Search CVE, vendor, product or keyword &middot; exclude with -windows"
aria-label="Search CVE, vendor, product or keyword" />
<span class="search-status" data-status aria-live="polite"></span>
</form>
<div class="filters" data-filters role="group" aria-label="CVE filters">
<span class="filter-caption">FILTER</span>
<div class="filter-menu" data-filter-menu="severity">
<button type="button" class="filter-trigger" data-filter-trigger="severity"
aria-haspopup="true" aria-expanded="false" aria-controls="severity-options" disabled>
<span>SEVERITY</span><strong data-filter-summary="severity">ALL</strong>
</button>
<div class="filter-popover" id="severity-options" data-filter-options="severity"
role="group" aria-label="Severities" hidden></div>
</div>
<button type="button" class="filter-toggle" data-filter-kev aria-pressed="false" disabled>KEV</button>
<div class="filter-menu" data-filter-menu="source">
<button type="button" class="filter-trigger" data-filter-trigger="source"
aria-haspopup="true" aria-expanded="false" aria-controls="source-options" disabled>
<span>SOURCE</span><strong data-filter-summary="source">ALL</strong>
</button>
<div class="filter-popover" id="source-options" data-filter-options="source"
role="group" aria-label="Sources" hidden></div>
</div>
<button type="button" class="filter-clear" data-clear-filters hidden>CLEAR</button>
</div>
</div>
<main class="container content">
<section class="panel results" data-results hidden></section>
<section data-trending>
<div class="trend-controls">
<div class="switch" role="group" aria-label="Ranking">
<button type="button" data-mode="TRENDING" aria-pressed="true">TRENDING</button>
<button type="button" data-mode="RECENT" aria-pressed="false">RECENT</button>
</div>
<span class="trend-note" data-trend-note></span>
</div>
<div class="panel trending">
<div class="col-head">
<span class="col-stars">STARS</span>
<span class="col-updated">UPDATED</span>
<span>NAME</span>
<span class="col-desc">DESCRIPTION</span>
</div>
<div data-trend-rows></div>
</div>
</section>
</main>
<footer class="site-footer">
<div class="container">
<span>sources: nvd &middot; cve program &middot; github &middot; github advisories &middot; cisa vulnrichment &middot; cisa kev &middot; first epss</span>
<span data-refreshed></span>
</div>
</footer>
<script src="/logic.js"></script>
</body>
</html>
Reference in new issue View Git Blame Copy Permalink