mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
4ec2802cf5
The corpus was assembled by a workflow that, in its own words, output every search result without trying to filter them. Re-checking every link whose repository does not name its CVE against the current classifier found 27,026 of 32,675 failing it: Shodan cheat sheets under Heartbleed, FTC robotics team repositories under the jQuery prototype pollution CVE, Docker images matched through their dependency manifests, and a repository called "test". 16,613 links whose repository names the CVE were never examined, a repository that could not be fetched kept all of its links, and one that calls itself a PoC and names the CVE is kept even where the classifier says otherwise — deleting a real PoC costs more than leaving a doubtful one in place. 7,223 entries lighter, and repo_meta.json drops to the 26,755 repositories still referenced.
803 B
803 B
CVE-2007-5686
Description
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.