Update Mon Sep 15 11:55:33 UTC 2025

2004/CVE-2004-0550.md

@@ -0,0 +1,17 @@
+### [CVE-2004-0550](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0550)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2004/CVE-2004-1166.md

@@ -13,5 +13,5 @@ CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and ea
 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2004/CVE-2004-2687.md

@@ -20,6 +20,7 @@ No PoCs from references.
 - https://github.com/CVEDB/PoC-List
 - https://github.com/CVEDB/awesome-cve-repo
 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase4-Metasploitable2-distcc-
+- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2
 - https://github.com/H3xL00m/distccd_rce_CVE-2004-2687
 - https://github.com/KirthiNadesn/Penetration_Testing_Metasploitable2
 - https://github.com/Kr1tz3x3/HTB-Writeups

2005/CVE-2005-4011.md

@@ -0,0 +1,17 @@
+### [CVE-2005-4011](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4011)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
+
+### POC
+
+#### Reference
+- http://ltwcalendar.sourceforge.net/changelog.php
+
+#### Github
+No PoCs found on GitHub currently.
+

2006/CVE-2006-6228.md

@@ -0,0 +1,17 @@
+### [CVE-2006-6228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6228)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
+
+### POC
+
+#### Reference
+- http://ltwcalendar.sourceforge.net/changelog.php
+
+#### Github
+No PoCs found on GitHub currently.
+

2006/CVE-2006-6229.md

@@ -0,0 +1,17 @@
+### [CVE-2006-6229](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6229)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file.
+
+### POC
+
+#### Reference
+- http://ltwcalendar.sourceforge.net/changelog.php
+
+#### Github
+No PoCs found on GitHub currently.
+

2007/CVE-2007-1358.md

@@ -13,5 +13,5 @@ Cross-site scripting (XSS) vulnerability in certain applications using Apache To
 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2007/CVE-2007-2447.md

@@ -37,6 +37,7 @@ The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote
 - https://github.com/CVEDB/PoC-List
 - https://github.com/CVEDB/awesome-cve-repo
 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase3-Metasploitable3-samba_user_map-
+- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2
 - https://github.com/CipherLucas/Metasploitable2-PenTest-Report
 - https://github.com/Desm0ndChan/OSCP-cheatsheet
 - https://github.com/DevinLiggins14/SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

2007/CVE-2007-6709.md

@@ -13,5 +13,5 @@ The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmw
 - http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2008/CVE-2008-1254.md

@@ -13,6 +13,7 @@ Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/CERT-hr/modified_cve-search
 - https://github.com/cve-search/cve-search

2008/CVE-2008-1255.md

@@ -13,6 +13,7 @@ The ZyXEL P-660HW series router maintains authentication state by IP address, wh
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/CERT-hr/modified_cve-search
 - https://github.com/cve-search/cve-search

2008/CVE-2008-1257.md

@@ -13,6 +13,7 @@ Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-6
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/CERT-hr/modified_cve-search
 - https://github.com/cve-search/cve-search

2008/CVE-2008-1259.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1259](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1259)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1260.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1260](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1260)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware allow remote attackers to (1) make the admin web server available on the Internet (WAN) interface via the WWWAccessInterface parameter to Forms/RemMagWWW_1 or (2) change the IP whitelisting timeout via the StdioTimout parameter to Forms/rpSysAdmin_1.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1261.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1261](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1261)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1264.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1264](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1264)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1266.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1266](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1266)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1523.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1523](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1523)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1525.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1525](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1525)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-1529.md

@@ -0,0 +1,17 @@
+### [CVE-2008-1529](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1529)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2008/CVE-2008-2364.md

@@ -24,6 +24,7 @@ The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy
 - https://github.com/Live-Hack-CVE/CVE-2008-2364
 - https://github.com/NikulinMS/13-01-hw
 - https://github.com/RoliSoft/ReconScan
+- https://github.com/Veronica-Falgiani/Network-Protocol-Verification-Agent
 - https://github.com/Zhivarev/13-01-hw
 - https://github.com/issdp/test
 - https://github.com/kasem545/vulnsearch

2009/CVE-2009-1556.md

@@ -0,0 +1,17 @@
+### [CVE-2009-1556](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1556)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerability than CVE-2004-2507.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-0249.md

@@ -14,6 +14,7 @@ Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 o
 
 #### Github
 - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico
+- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico
 - https://github.com/ahmedobied/python-exploits
 - https://github.com/ankh2054/python-exploits
 - https://github.com/tanjiti/sec_profile

2010/CVE-2010-2075.md

@@ -23,6 +23,7 @@ No PoCs from references.
 - https://github.com/CVEDB/PoC-List
 - https://github.com/CVEDB/awesome-cve-repo
 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase2-Metasploitable2
+- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2
 - https://github.com/DmitriyPetrovskiy23/InfoSec-homework1
 - https://github.com/FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1
 - https://github.com/Gdec02/nmap-scan-metasploitable

2010/CVE-2010-2568.md

@@ -16,6 +16,7 @@ Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, S
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico
+- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico
 - https://github.com/Kuromesi/Py4CSKG
 - https://github.com/MN439/bingduziyuan
 - https://github.com/Ostorlab/KEV

2011/CVE-2011-0609.md

@@ -14,6 +14,7 @@ Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windo
 
 #### Github
 - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico
+- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
 

2011/CVE-2011-2523.md

@@ -52,6 +52,7 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which
 - https://github.com/CVEDB/PoC-List
 - https://github.com/CVEDB/awesome-cve-repo
 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase1-Metasploitable-
+- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2
 - https://github.com/CipherLucas/Metasploitable2-PenTest-Report
 - https://github.com/CitrineNull/Pivot-Lab
 - https://github.com/CitrineNull/Recon-101
@@ -258,6 +259,7 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which
 - https://github.com/priyadharshan-vadivel/metasploitable2-penetration-test
 - https://github.com/priyan37/metasploitable2-penetration-test
 - https://github.com/rahulkore1/-basic-vulnerability-assessment
+- https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker
 - https://github.com/rkuruba/Penetration-Testing-1
 - https://github.com/rohitkumar0976/CEH-PROJECT
 - https://github.com/roshan11420/Ethical-hacking-project

2013/CVE-2013-7030.md

@@ -14,5 +14,5 @@ The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM
 - http://www.exploit-db.com/exploits/30237/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2014/CVE-2014-0160.md

@@ -149,6 +149,7 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p
 - https://github.com/JasonZorky95/OpenVPN
 - https://github.com/Jay-Idrees/UPenn-CyberSecurity-Penetration-Testing
 - https://github.com/Jeypi04/openvpn-jookk
+- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico
 - https://github.com/Joao-Paulino/Cyber-Security
 - https://github.com/Joao-Paulino/Cyber-Security-PenTest
 - https://github.com/Joao-Paulino/CyberSecurity

2014/CVE-2014-6271.md

@@ -462,6 +462,7 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th
 - https://github.com/eric-erki/awesome-pentest
 - https://github.com/eric-gitta-moore/Safety-Project-Collection
 - https://github.com/ericlake/fabric-shellshock
+- https://github.com/esselinux/wazuh-suricata
 - https://github.com/exfilt/CheatSheet
 - https://github.com/falocab/PayloadsAllTheThings
 - https://github.com/fares-alkhalaf/BurbsuiteInArabic

2015/CVE-2015-0089.md

@@ -0,0 +1,17 @@
+### [CVE-2015-0089](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0089)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to obtain sensitive information from kernel memory, and possibly bypass the KASLR protection mechanism, via a crafted font, aka "Adobe Font Driver Information Disclosure Vulnerability," a different vulnerability than CVE-2015-0087.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-10191.md

@@ -13,6 +13,7 @@ Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0
 - https://ffmpeg.org/security.html
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/KaviDk/Heap-Over-Flow-with-CVE-2016-10191
 - https://github.com/Live-Hack-CVE/CVE-2016-1019

2016/CVE-2016-10745.md

@@ -16,5 +16,6 @@ In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/JinBean/CVE-Extension
 - https://github.com/LoricAndre/OSV_Commits_Analysis
+- https://github.com/arvion-ai/test-vulnerable-python2
 - https://github.com/seal-community/patches
 

2016/CVE-2016-3237.md

@@ -13,5 +13,6 @@ Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Win
 - https://www.exploit-db.com/exploits/40409/
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 

2016/CVE-2016-3315.md

@@ -0,0 +1,17 @@
+### [CVE-2016-3315](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3315)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability."
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-3376.md

@@ -13,5 +13,6 @@ The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 

2016/CVE-2016-4350.md

@@ -0,0 +1,17 @@
+### [CVE-2016-4350](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4350)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storage Manager (STM)) before 6.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) ScriptSchedule parameter in the ScriptServlet servlet; the (2) winEventId or (3) winEventLog parameter in the WindowsEventLogsServlet servlet; the (4) processOS parameter in the ProcessesServlet servlet; the (5) group, (6) groupName, or (7) clientName parameter in the BackupExceptionsServlet servlet; the (8) valDB or (9) valFS parameter in the BackupAssociationServlet servlet; the (10) orderBy or (11) orderDir parameter in the HostStorageServlet servlet; the (12) fileName, (13) sortField, or (14) sortDirection parameter in the DuplicateFilesServlet servlet; the (15) orderFld or (16) orderDir parameter in the QuantumMonitorServlet servlet; the (17) exitCode parameter in the NbuErrorMessageServlet servlet; the (18) udfName, (19) displayName, (20) udfDescription, (21) udfDataValue, (22) udfSectionName, or (23) udfId parameter in the UserDefinedFieldConfigServlet servlet; the (24) sortField or (25) sortDirection parameter in the XiotechMonitorServlet servlet; the (26) sortField or (27) sortDirection parameter in the BexDriveUsageSummaryServlet servlet; the (28) state parameter in the ScriptServlet servlet; the (29) assignedNames parameter in the FileActionAssignmentServlet servlet; the (30) winEventSource parameter in the WindowsEventLogsServlet servlet; or the (31) name, (32) ipOne, (33) ipTwo, or (34) ipThree parameter in the XiotechMonitorServlet servlet.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-5195.md

@@ -137,6 +137,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo
 - https://github.com/Jean-Francois-C/Boot2root-CTFs-Writeups
 - https://github.com/Jekyll-Hyde2022/PrivEsc-Linux
 - https://github.com/Jeremias215/VulnerabilityManagement
+- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico
 - https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
 - https://github.com/Josam85/Nessus-Vulnerability-Management-Lab
 - https://github.com/JoyChou93/sks
@@ -470,6 +471,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo
 - https://github.com/retr0-13/Linux-Privilege-Escalation-Basics
 - https://github.com/revanmalang/OSCP
 - https://github.com/reybango/The-Security-Handbook
+- https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker
 - https://github.com/riquebatalha/single-multithreading_android
 - https://github.com/ruobing-wang/os_hacking_lab
 - https://github.com/rvolosatovs/mooshy

2016/CVE-2016-6140.md

@@ -13,5 +13,5 @@ SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files vi
 - http://packetstormsecurity.com/files/138439/SAP-TREX-7.10-Revision-63-Arbitrary-File-Write.html
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2016/CVE-2016-7031.md

@@ -0,0 +1,17 @@
+### [CVE-2016-7031](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7031)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
+
+### POC
+
+#### Reference
+- https://github.com/ceph/ceph/pull/6057
+
+#### Github
+No PoCs found on GitHub currently.
+

2016/CVE-2016-7193.md

@@ -13,6 +13,7 @@ Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

2017/CVE-2017-10984.md

@@ -0,0 +1,17 @@
+### [CVE-2017-10984](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10984)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2017/CVE-2017-13156.md

@@ -34,6 +34,7 @@ An elevation of privilege vulnerability in the Android system (art). Product: An
 - https://github.com/giacomoferretti/janus-toolkit
 - https://github.com/jcrutchvt10/Janus
 - https://github.com/krrathod/PenetesterHelper
+- https://github.com/l1ackernishan/Janus-Vulnerability-CVE-2017-13156-Exploit
 - https://github.com/lnick2023/nicenice
 - https://github.com/nahid0x1/Janus-Vulnerability-CVE-2017-13156-Exploit
 - https://github.com/nictjh/threatDemos

2017/CVE-2017-15361.md

@@ -10,6 +10,7 @@ The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firm
 ### POC
 
 #### Reference
+- https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update
 - https://www.kb.cert.org/vuls/id/307015
 
 #### Github

2017/CVE-2017-18342.md

@@ -20,6 +20,7 @@ No PoCs from references.
 - https://github.com/PayTrace/intercom_test
 - https://github.com/Whyshealwaysbrokeme/vuln-ruyaml-0.91.0-rce
 - https://github.com/amakhu/cdp
+- https://github.com/arvion-ai/test-vulnerable-python2
 - https://github.com/danielhoherd/pre-commit-hooks
 - https://github.com/ekufta0530/Interfile-Only-Semgrep
 - https://github.com/eltyagi/poc-codeql-artifact-attestation

2017/CVE-2017-5638.md

@@ -96,6 +96,7 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be
 - https://github.com/JSchauert/Project-2-Offensive-Security-CTF
 - https://github.com/JShortSona/Jenkins-Struts2
 - https://github.com/Jhoel777ar/El-libro-absurdamente-completo-del-Hacker-Etico
+- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico
 - https://github.com/Jodagh/struts
 - https://github.com/JordanMcAlpine1/WebAppLinuxWindowsPenTest
 - https://github.com/K1ngDamien/epss-super-sorter

2017/CVE-2017-7921.md

@@ -45,6 +45,7 @@ No PoCs from references.
 - https://github.com/ROYSCANNER/ROY
 - https://github.com/SexyBeast233/SecBooks
 - https://github.com/Sidhukali/ingram
+- https://github.com/SlickxMercy/ArgusEye
 - https://github.com/SlickxMercy/BETAVDB
 - https://github.com/SlickxMercy/WeakPassword
 - https://github.com/SlickxMercy/WebCamHack

2018/CVE-2018-0969.md

@@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could
 - https://www.exploit-db.com/exploits/44459/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2018/CVE-2018-0971.md

@@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could
 - https://www.exploit-db.com/exploits/44461/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2018/CVE-2018-0972.md

@@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could
 - https://www.exploit-db.com/exploits/44462/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2018/CVE-2018-0973.md

@@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could
 - https://www.exploit-db.com/exploits/44463/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2018/CVE-2018-0974.md

@@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could
 - https://www.exploit-db.com/exploits/44464/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2018/CVE-2018-0975.md

@@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could
 - https://www.exploit-db.com/exploits/44458/
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2018/CVE-2018-1000656.md

@@ -19,6 +19,7 @@ No PoCs from references.
 - https://github.com/OpenLabSE/VulFinder
 - https://github.com/VulFinder/VulFinder
 - https://github.com/akanchhaS/pysnyk
+- https://github.com/arvion-ai/test-vulnerable-python2
 - https://github.com/crumpman/pulsecheck
 - https://github.com/eltyagi/poc-codeql-artifact-attestation
 - https://github.com/garethr/snykctl

2018/CVE-2018-15473.md

@@ -73,6 +73,7 @@ OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not dela
 - https://github.com/NestyF/SSH_Enum_CVE-2018-15473
 - https://github.com/NetworkingPassionate/Nessus-Essentials
 - https://github.com/Nullgrimoire/NullScan
+- https://github.com/OhDamnn/Noregressh
 - https://github.com/OluwatobiEAkanni/PEN-TESTING-A-SERVER
 - https://github.com/OmarV4066/SSHEnumKL
 - https://github.com/Pixiel333/Pentest-Cheat-sheet

2018/CVE-2018-18074.md

@@ -22,6 +22,7 @@ The Requests package before 2.20.0 for Python sends an HTTP Authorization header
 - https://github.com/SahanaKhushi/iplmatchpredictor2020
 - https://github.com/XXRadeonXFX/flask-vuln-app
 - https://github.com/aertyyujhgfd/JARVIS-dans-Iron-man
+- https://github.com/arvion-ai/test-vulnerable-python2
 - https://github.com/bvvard/secure-source-code-analyzer
 - https://github.com/cloudsmith-io/rego-recipes
 - https://github.com/colonelmeow/appsecctf

2018/CVE-2018-19323.md

@@ -20,5 +20,6 @@ The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRA
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
 - https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/blueisbeautiful/CVE-2018-19323
+- https://github.com/brokendreamsclub/CVE-2018-19323
 - https://github.com/xct/windows-kernel-exploits
 

2018/CVE-2018-8041.md

@@ -14,5 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon
+- https://github.com/J1w0n-H/AI-in-Security
 - https://github.com/shoucheng3/apache__camel_CVE-2018-8041_2-20-3
 

2018/CVE-2018-8176.md

@@ -0,0 +1,17 @@
+### [CVE-2018-8176](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8176)
+![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20Office&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2016%20for%20Mac%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20Code%20Execution&color=brightgreen)
+
+### Description
+
+A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2018/CVE-2018-9999.md

@@ -13,5 +13,6 @@ In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads
 No PoCs from references.
 
 #### Github
+- https://github.com/R3KT00YT/ScanCam
 - https://github.com/TingPing/flatpak-cve-checker
 

2019/CVE-2019-0708.md

@@ -392,6 +392,7 @@ A remote code execution vulnerability exists in Remote Desktop Services formerly
 - https://github.com/lp008/CVE_2019_0708_Blue_screen_poc
 - https://github.com/lp008/Hack-readme
 - https://github.com/lsc1226844309/hanker1
+- https://github.com/luckydus5/Penguin-Leanning-Linux-Mastery
 - https://github.com/lwtz/CVE-2019-0708
 - https://github.com/mai-lang-chai/System-Vulnerability
 - https://github.com/major203/cve-2019-0708-scan

2019/CVE-2019-0940.md

@@ -47,6 +47,7 @@ A remote code execution vulnerability exists in the way that Microsoft browsers
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/HackOvert/awesome-bugs
 - https://github.com/alphaSeclab/sec-daily-2019
 

2019/CVE-2019-10089.md

@@ -13,5 +13,6 @@ On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invo
 No PoCs from references.
 
 #### Github
+- https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/shoucheng3/apache__jspwiki_CVE-2019-10089_2-11-0-M4
 

2019/CVE-2019-1010083.md

@@ -13,6 +13,7 @@ The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. Th
 No PoCs from references.
 
 #### Github
+- https://github.com/arvion-ai/test-vulnerable-python2
 - https://github.com/crumpman/pulsecheck
 - https://github.com/elliotsecops/VulnGuard
 - https://github.com/eltyagi/poc-codeql-artifact-attestation

2019/CVE-2019-11358.md

@@ -195,6 +195,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/5960IronDams/Center_Stage_2
 - https://github.com/5GBurrito/FTC_Team_12167_Robot_Controller_2023-24
 - https://github.com/5GBurrito/FTC_Team_9511_Robot_Controller_2023-24
+- https://github.com/5irobotics/MechanicalDuck26
 - https://github.com/5irobotics/MechanicalDucks25-D01
 - https://github.com/6-BennyLi-9/FzxlFtc2024-2025
 - https://github.com/6165-MSET-CuttleFish/2024-FTC-offseason-project
@@ -502,6 +503,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/AtticFanatics14079/UltimateGoalFanatics
 - https://github.com/AuPiratesFIRST/FTC-2024-INTOTHEDEEP-TEAM19595
 - https://github.com/AuPiratesFIRST/FTC-2024-IntoTheDeep-MentorCameron
+- https://github.com/AuPiratesFIRST/FTC-2025-Decode-MrC-Playground
 - https://github.com/AudraJ1/7588Season2022
 - https://github.com/AuslinD/IntoTheDeep2024-2025
 - https://github.com/AuslinD/PowerPlay2022-2023
@@ -792,6 +794,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Capital-Bots/IntoTheDeep-14575
 - https://github.com/Capital-Bots/summer2025
 - https://github.com/Career-Academy-FTC-Robotics/CanineCrew
+- https://github.com/CareyK25/FTC-IntoTheDeep
 - https://github.com/Carlabzn/demo-arm
 - https://github.com/CarlosSeijasFTC/2025-2026-Robot-Controller
 - https://github.com/CarlosSeijasFTC/Decode2025-2026
@@ -948,6 +951,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Cyliis/codus-bobocus
 - https://github.com/Cypher-Geist/FTC_AndroidStudio_Code
 - https://github.com/D06-5irobotics/TT-5
+- https://github.com/D07-5irobotics/BionicSharks-2025-D07
 - https://github.com/DCAthatsit/AutonomyQUBE-2023
 - https://github.com/DCRepublic/Honey-Nut-Gearios
 - https://github.com/DCSPD-PantherRobotics/OurRobotsCode
@@ -1581,6 +1585,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/FTC9837/FTC9837_UltimateGoal
 - https://github.com/FTC9889/CC_9889_2020_2021
 - https://github.com/FTC9889/CC_9889_2023_2024
+- https://github.com/FTC9889/CC_9889_2024_2025
 - https://github.com/FTCBlackout/FtcRobotController-master
 - https://github.com/FTCCrashAndBurn/FtcRobotController-23
 - https://github.com/FTCCyclone/CycloneRobotController
@@ -2299,6 +2304,8 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Logannnnnnn/PiRates-Into-the-Deep-24
 - https://github.com/Logannnnnnn/PiRates-LOKI-2024
 - https://github.com/Logannnnnnn/PiRatesCenterStage
+- https://github.com/Logannnnnnn/PiRatesDecode
+- https://github.com/Logannnnnnn/PiRatesDecodePublic
 - https://github.com/LogiLift/PowerPlay
 - https://github.com/Loki7261/Testing-ITD
 - https://github.com/Loki7261/roadrunnertest
@@ -2406,6 +2413,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/MaxG-SCH/SCH-4914-2021-22
 - https://github.com/MaxGB10/Pancakes2025ftc
 - https://github.com/MaxKyt/FTC_Test
+- https://github.com/MaxXie86431/FTC-Decode
 - https://github.com/MaximOsip/PowerlpayFTCByEXP
 - https://github.com/McCaskey-Robotics/FTCrobot2022offseason
 - https://github.com/McCaskey-Robotics/VortechCenterStageV3
@@ -2723,6 +2731,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Osrepnay/FTCIntoTheDeep
 - https://github.com/Otis354/Robocode
 - https://github.com/OurGreatLeaderEason/MyRepo
+- https://github.com/OutcastsRobotics/31931OutcastsRoboticsCodebase
 - https://github.com/OutoftheBoxFTC/CenterStage
 - https://github.com/OutoftheBoxFTC/FreightFrenzy
 - https://github.com/OutoftheBoxFTC/UltimateGoal6.1
@@ -3174,6 +3183,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/SMERobotics/robocode
 - https://github.com/SMPhoenicx/Omen_FTC_26
 - https://github.com/SPARKTECH-24345/FTC-Decode-Sparktech
+- https://github.com/SPFRobotics/FTC-Decode-Raider-Robotics-2025-2026
 - https://github.com/STMARobotics/atomic-FtcRobotController
 - https://github.com/STMARobotics/digital-FtcRobotController
 - https://github.com/STMARobotics/ftc-alloy-decode
@@ -3222,6 +3232,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Sarah-Mathew2025/Summer-2025
 - https://github.com/Sarvesh-Somasundaram/5795UltimateGoal
 - https://github.com/Satgoy152/FreightFrenzy
+- https://github.com/Savadragos13/STIM-DC-DECODE
 - https://github.com/ScarlettRobotics/FTC-2021
 - https://github.com/ScarlettRobotics/FTC20718-2022-23
 - https://github.com/ScarlettRobotics/FTC20718-2023-24
@@ -3572,6 +3583,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/ThaddeusBardsley/W25
 - https://github.com/Thai28/28717GearheadsIntoTheDeep
 - https://github.com/Tharealzhanibek/FTC_Zertte
+- https://github.com/That-Madman/BoP-FTC-Decode
 - https://github.com/That-Madman/Chipper-s-Revenge-FTC
 - https://github.com/That-Madman/FTC-INTO-THE-DEEP
 - https://github.com/That-Madman/Lemmy
@@ -4817,6 +4829,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/ftc11112/RobotController
 - https://github.com/ftc13100/BeaversTemplate
 - https://github.com/ftc13100/CenterStage-2024
+- https://github.com/ftc13100/Decode-2026
 - https://github.com/ftc13100/FreightFrenzy-2022
 - https://github.com/ftc13100/Practice-For-Programming
 - https://github.com/ftc13100/Programming-Practice-2023
@@ -5086,6 +5099,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/iNanoToxin/FTC_Cobalt
 - https://github.com/ia74/wagner2024
 - https://github.com/iamscythe66/ftcrobotcontrol
+- https://github.com/ibm-7094a/ftc-intothedeep-rccode
 - https://github.com/iceworld009/IntoTheDeep_HarambeCartel-2025
 - https://github.com/icsrobotics/19866-FTC_2023-2024
 - https://github.com/idealsociety/Team8637-GB-2024
@@ -5222,6 +5236,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/jrasor/UGScrimmage62
 - https://github.com/jrasor/csee113S21
 - https://github.com/jreclark/KRASH_2023_CenterStage_RR05
+- https://github.com/jtalborough/ftc-roosterbots-code
 - https://github.com/jthomson04/15252_FTC_2021-2022
 - https://github.com/jthomson04/First-Tech-Challenge-2021-2022
 - https://github.com/jtk16/CrowForceFTCV2
@@ -5352,6 +5367,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/lehiller/2021-FTC-UltimateGoal-Wembley
 - https://github.com/lemon-exe/BSS-Robotics-2022---FTC-Code-Repo
 - https://github.com/leoschen/FreightFrenzy
+- https://github.com/li-valen/22279-SLAM-Robotics
 - https://github.com/li-valen/FtcRobotController-master22284-23-24
 - https://github.com/li-valen/SLAM-Robotics-States-Bot
 - https://github.com/liamml1/Nick-is-metumtam
@@ -5679,6 +5695,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/pingryrobotics/TestProject2022
 - https://github.com/pinwc4/testrobo3
 - https://github.com/pixelwastaken/ActionsEx
+- https://github.com/pkfitzVT/FTC_2024_24
 - https://github.com/plantechProgramming/decodeProjectPlantech
 - https://github.com/pleif/TempTraining
 - https://github.com/pndfourleafrovers/FTC-2025-2026
@@ -5890,6 +5907,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/roman395/kek
 - https://github.com/ronaldgabrieln/INTOTHEDEEPZorrobots2024
 - https://github.com/roobootics/DaniDrivetrain
+- https://github.com/roobootics/SolarFlare_Decode
 - https://github.com/rosanneal28/FTCRC
 - https://github.com/rowan-mcalpin/NextFTC-Testing
 - https://github.com/rowan-mcalpin/PedroPathingPlusNextFTC

2019/CVE-2019-14806.md

@@ -0,0 +1,17 @@
+### [CVE-2019-14806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14806)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/arvion-ai/test-vulnerable-python2
+

2019/CVE-2019-16905.md

@@ -16,6 +16,7 @@ OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental k
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Fastiraz/openssh-cve-resolv
+- https://github.com/OhDamnn/Noregressh
 - https://github.com/Totes5706/TotesHTB
 - https://github.com/hackingyseguridad/ssha
 - https://github.com/phx/cvescan

2020/CVE-2020-0096.md

@@ -22,6 +22,7 @@ No PoCs from references.
 - https://github.com/dayzsec/StrandHogg2
 - https://github.com/developer3000S/PoC-in-GitHub
 - https://github.com/hectorgie/PoC-in-GitHub
+- https://github.com/l1ackernishan/CVE-2020-0096-strandhogg-exploit-p0c
 - https://github.com/liuyun201990/StrandHogg2
 - https://github.com/nahid0x1/CVE-2020-0096-strandhogg-exploit-p0c
 - https://github.com/nishan0x1/CVE-2020-0096-strandhogg-exploit-p0c

2020/CVE-2020-14145.md

@@ -20,6 +20,7 @@ No PoCs from references.
 - https://github.com/J0hnKn1f3/UltraRecon
 - https://github.com/Maribel0370/Nebula-io
 - https://github.com/NeoOniX/5ATTACK
+- https://github.com/OhDamnn/Noregressh
 - https://github.com/Totes5706/TotesHTB
 - https://github.com/VladimirFogel/PRO4
 - https://github.com/adegoodyer/ubuntu

2020/CVE-2020-1957.md

@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/0day666/Vulnerability-verification
 - https://github.com/12442RF/Learn
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Challengers-win/Sec-Interview-ai
 - https://github.com/Coldplay1517/Middleware-Vulnerability-detection-master

2021/CVE-2021-23337.md

@@ -36,6 +36,7 @@ Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the tem
 - https://github.com/NidalShaterM/trivy-security-scan
 - https://github.com/Refinitiv-API-Samples/Example.EWA.TypeScript.WebApplication
 - https://github.com/SocketDev/API_Scripts
+- https://github.com/Undertone-student-org/booking-system
 - https://github.com/alexandert2105/GitHub-curso-completo
 - https://github.com/andisfar/LaunchQtCreator
 - https://github.com/andrewbearsley/lacework-sca-scan-example

2021/CVE-2021-28041.md

@@ -15,6 +15,7 @@ ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/MaulikxLakhani/SSHScout
+- https://github.com/OhDamnn/Noregressh
 - https://github.com/Totes5706/TotesHTB
 - https://github.com/accalina/crowflag
 - https://github.com/alvarigno/ChocolateFire-DockerLab

2021/CVE-2021-34624.md

@@ -15,4 +15,5 @@ No PoCs from references.
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/BharatCyberForce/wp-hunter
 

2021/CVE-2021-3493.md

@@ -84,6 +84,7 @@ The overlayfs implementation in the linux kernel did not properly validate with
 - https://github.com/Pelies91/audit-securite-wiki
 - https://github.com/Pratham-verma/TryHackMe-Roadmap
 - https://github.com/ProbiusOfficial/Awsome-Sec.CTF-Videomaker
+- https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/ReflectedThanatos/OSCP-cheatsheet
 - https://github.com/Ruhanyat-994/Ruhanyat-994
 - https://github.com/SYRTI/POC_to_review
@@ -211,4 +212,5 @@ The overlayfs implementation in the linux kernel did not properly validate with
 - https://github.com/youwizard/CVE-POC
 - https://github.com/zecool/cve
 - https://github.com/zhanpengliu-tencent/medium-cve
+- https://github.com/zulloper/cve-poc
 

2021/CVE-2021-36260.md

@@ -57,10 +57,12 @@ A command injection vulnerability in the web server of some Hikvision product. D
 - https://github.com/NyxAzrael/Goby_POC
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
+- https://github.com/R3KT00YT/ScanCam
 - https://github.com/ROYSCANNER/ROY
 - https://github.com/SYRTI/POC_to_review
 - https://github.com/ShivamB25/shodan-cam
 - https://github.com/Sidhukali/ingram
+- https://github.com/SlickxMercy/ArgusEye
 - https://github.com/SlickxMercy/WebCamHack
 - https://github.com/Stealzoz/steal
 - https://github.com/TakenoSite/RemoteUploader

2021/CVE-2021-41773.md

@@ -178,6 +178,7 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2.
 - https://github.com/Mr-Tree-S/POC_EXP
 - https://github.com/Mr-xn/Penetration_Testing_POC
 - https://github.com/MrCl0wnLab/SimplesApachePathTraversal
+- https://github.com/MuhammadHuzaifaAsif/security-lab
 - https://github.com/N0el4kLs/Vulhub_Exp
 - https://github.com/NZRXHX/NZRXNETSCANNER
 - https://github.com/NaInSec/CVE-PoC-in-GitHub

2021/CVE-2021-44228.md

@@ -666,6 +666,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
 - https://github.com/Threekiii/Awesome-Redteam
 - https://github.com/Threekiii/Vulhub-Reproduce
 - https://github.com/Timborin0/log4j-dork-scanner
+- https://github.com/TmTutui/AI-security-agent
 - https://github.com/ToastNumber/log4shell
 - https://github.com/Toolsec/log4j-scan
 - https://github.com/TotallyNotAHaxxer/f-for-java
@@ -733,6 +734,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
 - https://github.com/aajuvonen/log4stdin
 - https://github.com/aalex954/Log4PowerShell
 - https://github.com/ab0x90/CVE-2021-44228_PoC
+- https://github.com/abdotemlali/Tisalabs
 - https://github.com/abdullah89255/Purpose-of-CVSS
 - https://github.com/ably77/gehc-gateway-poc-runbook
 - https://github.com/ably77/wu-gloo-mesh-runbook
@@ -1947,6 +1949,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
 - https://github.com/techdeavour/RosettaBOM
 - https://github.com/tejas-nagchandi/CVE-2021-45046
 - https://github.com/tejas-rkd/threat-inspector
+- https://github.com/temlaliabdo/Tisalabs
 - https://github.com/teresaweber685/book_list
 - https://github.com/terribletal/go-vex
 - https://github.com/test-org-appsec/nuclei

2021/CVE-2021-45575.md

@@ -0,0 +1,17 @@
+### [CVE-2021-45575](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45575)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.
+
+### POC
+
+#### Reference
+- https://kb.netgear.com/000064097/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0083
+
+#### Github
+No PoCs found on GitHub currently.
+

2022/CVE-2022-22620.md

@@ -29,6 +29,7 @@ No PoCs from references.
 - https://github.com/kmeps4/CVE-2022-22620
 - https://github.com/kmeps4/PSFree
 - https://github.com/manas3c/CVE-POC
+- https://github.com/minaadel551/PS4Free
 - https://github.com/minaadel551/test
 - https://github.com/minaadel551/test2
 - https://github.com/nomi-sec/PoC-in-GitHub

2022/CVE-2022-30190.md

@@ -77,6 +77,7 @@ A remote code execution vulnerability exists when MSDT is called using the URL p
 - https://github.com/CyberTitus/Follina
 - https://github.com/DOV3Y/CVE-2022-30190-ASR-Senintel-Process-Pickup
 - https://github.com/DerZiad/CVE-2022-30190
+- https://github.com/DerZiad/DerZiad
 - https://github.com/EkamSinghWalia/Follina-MSDT-Vulnerability-CVE-2022-30190-
 - https://github.com/ErrorNoInternet/FollinaScanner
 - https://github.com/G-Zion/ProductionFollinaWorkaround

2022/CVE-2022-32563.md

@@ -13,6 +13,7 @@ An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin creden
 - https://forums.couchbase.com/tags/security
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Xeus-Territory/Robust_Scanner
 - https://github.com/Xeus-Territory/robust_scanner

2022/CVE-2022-35213.md

@@ -13,6 +13,7 @@ Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Leeziao/TChecker
 - https://github.com/Xeus-Territory/Robust_Scanner

2022/CVE-2022-37860.md

@@ -0,0 +1,17 @@
+### [CVE-2022-37860](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37860)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2022/CVE-2022-38637.md

@@ -13,6 +13,7 @@ Hospital Management System v1.0 was discovered to contain multiple SQL injection
 - https://www.youtube.com/watch?v=m8nW0p69UHU
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/Henry4E36/POCS

2022/CVE-2022-40309.md

@@ -0,0 +1,17 @@
+### [CVE-2022-40309](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40309)
+![](https://img.shields.io/static/v1?label=Product&message=Apache%20Archiva&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=unspecified%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Arbitrary%20directory%20deletion&color=brightgreen)
+
+### Description
+
+Users with write permissions to a repository can delete arbitrary directories.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/Veronica-Falgiani/Network-Protocol-Verification-Agent
+

2022/CVE-2022-40635.md

@@ -13,6 +13,7 @@ Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/mbadanoiu/CVE-2022-40635
 - https://github.com/nomi-sec/PoC-in-GitHub
 

2023/CVE-2023-1234.md

@@ -46,6 +46,7 @@ No PoCs from references.
 - https://github.com/Harmeek-19/Security-Infrastructure-Automation-Platform
 - https://github.com/IIxoskeletonII/osint-thesis
 - https://github.com/JoaoEnrique/watson-analise-vulnerabilidade
+- https://github.com/JoaoEnrique/watson-vuln-checker
 - https://github.com/JorySeverijnse/Malphas
 - https://github.com/KaiandhisDranzer11/Shellcode-Generator-public
 - https://github.com/KevinDevSecOps/DASHBOARD-EN-FRASK
@@ -108,6 +109,7 @@ No PoCs from references.
 - https://github.com/hybridx/scarlet-mesh
 - https://github.com/iamthamanic/WOARU-WorkaroundUltra
 - https://github.com/jason-allen-oneal/pentest-dataset-builder
+- https://github.com/jblo/Github-Advisory-Downloader
 - https://github.com/jinchengyang98/Re-ccscaner
 - https://github.com/josephjilovec/Autonomous-AI-Threat-Hunter-Vulnerability-Prioritizer
 - https://github.com/julianwagnerfh/SIMS_JulianWagner
@@ -117,6 +119,7 @@ No PoCs from references.
 - https://github.com/karlsgate/sarif-issue-bot
 - https://github.com/kenshinx/threat-analysis-agents
 - https://github.com/khizar-anjum/risky-business-mcp
+- https://github.com/l1ackernishan/cve-finder
 - https://github.com/labibhossen/Shodan
 - https://github.com/lodetomasi/zero-day-llm-ensemble
 - https://github.com/luci04-bot/RFSA-Tool

2023/CVE-2023-23999.md

@@ -10,7 +10,7 @@ Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterI
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://patchstack.com/database/vulnerability/google-analytics-for-wordpress/wordpress-google-analytics-by-monsterinsights-plugin-8-14-0-cross-site-scripting-xss-vulnerability?_s_id=cve
 
 #### Github
 - https://github.com/20142995/nuclei-templates

2023/CVE-2023-30253.md

@@ -15,6 +15,7 @@ Dolibarr before 17.0.1 allows remote code execution by an authenticated user via
 #### Github
 - https://github.com/04Shivam/CVE-2023-30253-Exploit
 - https://github.com/Esther7171/HTB-Walkthroughs
+- https://github.com/Esther7171/HTB-Write-up
 - https://github.com/Milamagof/boardlight-walkthrough
 - https://github.com/Rubikcuv5/cve-2023-30253
 - https://github.com/YuchaoZheng88/HTB-prepare

2023/CVE-2023-4130.md

@@ -15,5 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix wr
 No PoCs from references.
 
 #### Github
+- https://github.com/BitsByWill/ksmbd-n-day
+- https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/fkie-cad/nvd-json-data-feeds
 

2023/CVE-2023-4603.md

@@ -10,7 +10,7 @@ The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflect
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://drive.google.com/file/d/1cRVH7Oz6M2U2XTbNAmm43PDKBw6FzShA/view?usp=sharing
 
 #### Github
 - https://github.com/20142995/nuclei-templates

2023/CVE-2023-49109.md

@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cve-scores
 - https://github.com/Drun1baby/JavaSecurityLearning
+- https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/fkie-cad/nvd-json-data-feeds
 - https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3-2-0
 - https://github.com/tanjiti/sec_profile

2023/CVE-2023-52440.md

@@ -15,5 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix sl
 No PoCs from references.
 
 #### Github
+- https://github.com/BitsByWill/ksmbd-n-day
+- https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/fkie-cad/nvd-json-data-feeds
 

2023/CVE-2023-5678.md

@@ -35,6 +35,7 @@ No PoCs from references.
 - https://github.com/gitacme/cve_tools
 - https://github.com/gitpod-io/leeway
 - https://github.com/hsmmi/vulnerability-api
+- https://github.com/jblo/Github-Advisory-Downloader
 - https://github.com/jtgorny/cve-scanning
 - https://github.com/mikedzikowski/cs-vuln-images-report
 - https://github.com/mmbazm/secure_license_server

2023/CVE-2023-7209.md

@@ -0,0 +1,18 @@
+### [CVE-2023-7209](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7209)
+![](https://img.shields.io/static/v1?label=Product&message=Router&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-404%20Denial%20of%20Service&color=brightgreen)
+
+### Description
+
+A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/device_reset.cgi of the component Device Reset Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249758 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
+Eine kritische Schwachstelle wurde in Uniway Router bis 2.0 ausgemacht. Betroffen davon ist ein unbekannter Prozess der Datei /boaform/device_reset.cgi der Komponente Device Reset Handler. Durch die Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+### POC
+
+#### Reference
+- https://drive.google.com/file/d/1XDZA4ibiYNcxTwq60vYCr03_6M_cvJ_2/view?usp=sharing
+
+#### Github
+No PoCs found on GitHub currently.
+

2024/CVE-2024-0044.md

@@ -40,6 +40,7 @@ In createSessionInternal of PackageInstallerService.java, there is a possible ru
 - https://github.com/fboaventura/awesome-starts
 - https://github.com/gmh5225/awesome-game-security
 - https://github.com/hunter24x24/cve_2024_0044
+- https://github.com/l1ackernishan/CVE-2024-0044
 - https://github.com/nahid0x1/CVE-2024-0044
 - https://github.com/nexussecelite/EvilDroid
 - https://github.com/nishan0x1/CVE-2024-0044

2024/CVE-2024-12345.md

@@ -42,6 +42,7 @@ No PoCs from references.
 - https://github.com/kasturixbm5/Automate-this-shi
 - https://github.com/kerouacwannabe/CVE-Vuln-Evaluator
 - https://github.com/kmukoo101/security_tools
+- https://github.com/marklechner/cvewb
 - https://github.com/maxime67/ONE_sync
 - https://github.com/msumari/vulnagent
 - https://github.com/n3ptune-plan3t/pacguard

2024/CVE-2024-20931.md

@@ -51,6 +51,7 @@ No PoCs from references.
 - https://github.com/laoa1573/wy876
 - https://github.com/netlas-io/netlas-dorks
 - https://github.com/nomi-sec/PoC-in-GitHub
+- https://github.com/nullcult/CVE_2024_209321
 - https://github.com/oLy0/Vulnerability
 - https://github.com/sampsonv/github-trending
 - https://github.com/tanjiti/sec_profile

2024/CVE-2024-21413.md

@@ -41,6 +41,7 @@ Microsoft Outlook Remote Code Execution Vulnerability
 - https://github.com/GhostTroops/TOP
 - https://github.com/GuiMatosInfra/explorer2sectool
 - https://github.com/HYZ3K/CVE-2024-21413
+- https://github.com/HaroldFinchIFT/vuln-nist-mcp-server
 - https://github.com/Hunterdii/TryHackMe-Roadmap
 - https://github.com/Hunterdii/tryhackme-free-rooms
 - https://github.com/MQKGitHub/Exploitation-Basics

2024/CVE-2024-2242.md

@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/20142995/nuclei-templates
 - https://github.com/ARPSyndicate/cve-scores
+- https://github.com/BharatCyberForce/wp-hunter
 - https://github.com/Chocapikk/wpprobe
 - https://github.com/RandomRobbieBF/CVE-2024-2242
 - https://github.com/Zzl0y/bugs-and-arts