mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
368a784fe1
Sorting a CVE's links on stars alone handed the top of Log4Shell to ThreatMapper, Viper, afrog and Awesome-OSINT-For-Everything: large tools that mention the CVE somewhere. Rank repositories named after the CVE first and only order those by stars, which puts CVE-2025-32463_chwoot above a 2.5k-star general sudo toolkit. A term no advisory text uses leaves every match tied at the weakest tier, where newest-first is meaningless; searching log4shell led with text4shell and then a CVE holding a single incidental link. Break those ties on how many of the linked PoCs carry the term instead, which is only consulted when nothing matched a description, so product searches are unchanged. Also drop two controls that could not do anything: an expander on a description already short enough to fit, and a footer offering to expand a list of one.