mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
4ec2802cf5
The corpus was assembled by a workflow that, in its own words, output every search result without trying to filter them. Re-checking every link whose repository does not name its CVE against the current classifier found 27,026 of 32,675 failing it: Shodan cheat sheets under Heartbleed, FTC robotics team repositories under the jQuery prototype pollution CVE, Docker images matched through their dependency manifests, and a repository called "test". 16,613 links whose repository names the CVE were never examined, a repository that could not be fetched kept all of its links, and one that calls itself a PoC and names the CVE is kept even where the classifier says otherwise — deleting a real PoC costs more than leaving a doubtful one in place. 7,223 entries lighter, and repo_meta.json drops to the 26,755 repositories still referenced.
648 B
648 B
CVE-2000-1033
Description
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.