mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
2821985dd9
Discovery asks GitHub for repositories pushed in the last three days, so a proof of concept written for a 2019 CVE in 2021 is unreachable however long the job runs. nomi-sec/PoC-in-GitHub has collected them daily since 1999. It collects without filtering, which is how this index inherited its junk the first time, so nothing arrives trusted: every candidate goes through qualifying_repo_cves, the same gate a repository found by search must pass. Of 6,945 candidates the gate rejected 4,110 and accepted 2,835, adding links to 1,528 entries that had none or had fewer. Vulhub joins the curated archives beside ExploitDB and Metasploit. It is 241 entries, and each one is a docker-compose file and reproduction steps rather than a description of a flaw. Candidates are judged again every week rather than remembered as rejected: an empty shell in March is often a working exploit by June.