mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
4ec2802cf5
The corpus was assembled by a workflow that, in its own words, output every search result without trying to filter them. Re-checking every link whose repository does not name its CVE against the current classifier found 27,026 of 32,675 failing it: Shodan cheat sheets under Heartbleed, FTC robotics team repositories under the jQuery prototype pollution CVE, Docker images matched through their dependency manifests, and a repository called "test". 16,613 links whose repository names the CVE were never examined, a repository that could not be fetched kept all of its links, and one that calls itself a PoC and names the CVE is kept even where the classifier says otherwise — deleting a real PoC costs more than leaving a doubtful one in place. 7,223 entries lighter, and repo_meta.json drops to the 26,755 repositories still referenced.
791 B
791 B
CVE-2007-3280
Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.