mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
0aa40a5f49
A README caption in maniakh/CVE-2026-31431---Copy-Fail-PoC reads "Copy Fail (CVE-2026-3143)", one digit short. That still parses as a valid identifier, and the guard meant to catch it was satisfied by the repo's generic exploit.py, so the PoC was filed against an unrelated WordPress advisory. CVE-2026-8222 (Open5GS) collected a GiveWP lab the same way. Drop an id from the same year that a longer mentioned id extends, unless the repository name deliberately carries both. Underscores are word characters, so the id regex matched neither half of a name like CVE-2022-4174_CVE-2022-41742; read the separator-normalised name too. Over 600 live candidates that recovers two real PoCs the gap was hiding, Keycloak_CVE-2026-18963_PoC and CVE-2026-42945_NginxRift.
Build pipeline
python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
python scripts/fetch_kev.py
python scripts/fetch_epss.py
python scripts/build_site.py
python scripts/build_all.py
Outputs land in docs/ and JSON under docs/api/v1/. Snapshots live in docs/api/v1/snapshots/ (last 14 days) and diffs under docs/api/v1/diffs/.