diff --git a/2004/CVE-2004-0550.md b/2004/CVE-2004-0550.md new file mode 100644 index 0000000000..9224db5c9c --- /dev/null +++ b/2004/CVE-2004-0550.md @@ -0,0 +1,17 @@ +### [CVE-2004-0550](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0550) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2004/CVE-2004-1166.md b/2004/CVE-2004-1166.md index 4ddefb34d2..c68a240018 100644 --- a/2004/CVE-2004-1166.md +++ b/2004/CVE-2004-1166.md @@ -13,5 +13,5 @@ CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and ea - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042 #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2004/CVE-2004-2687.md b/2004/CVE-2004-2687.md index c5ecff6ec5..c2a6f0c06e 100644 --- a/2004/CVE-2004-2687.md +++ b/2004/CVE-2004-2687.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/CVEDB/PoC-List - https://github.com/CVEDB/awesome-cve-repo - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase4-Metasploitable2-distcc- +- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 - https://github.com/H3xL00m/distccd_rce_CVE-2004-2687 - https://github.com/KirthiNadesn/Penetration_Testing_Metasploitable2 - https://github.com/Kr1tz3x3/HTB-Writeups diff --git a/2005/CVE-2005-4011.md b/2005/CVE-2005-4011.md new file mode 100644 index 0000000000..e4e7077fb4 --- /dev/null +++ b/2005/CVE-2005-4011.md @@ -0,0 +1,17 @@ +### [CVE-2005-4011](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4011) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. + +### POC + +#### Reference +- http://ltwcalendar.sourceforge.net/changelog.php + +#### Github +No PoCs found on GitHub currently. + diff --git a/2006/CVE-2006-6228.md b/2006/CVE-2006-6228.md new file mode 100644 index 0000000000..740498231b --- /dev/null +++ b/2006/CVE-2006-6228.md @@ -0,0 +1,17 @@ +### [CVE-2006-6228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6228) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors. + +### POC + +#### Reference +- http://ltwcalendar.sourceforge.net/changelog.php + +#### Github +No PoCs found on GitHub currently. + diff --git a/2006/CVE-2006-6229.md b/2006/CVE-2006-6229.md new file mode 100644 index 0000000000..cca164fc2f --- /dev/null +++ b/2006/CVE-2006-6229.md @@ -0,0 +1,17 @@ +### [CVE-2006-6229](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6229) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file. + +### POC + +#### Reference +- http://ltwcalendar.sourceforge.net/changelog.php + +#### Github +No PoCs found on GitHub currently. + diff --git a/2007/CVE-2007-1358.md b/2007/CVE-2007-1358.md index 8556f2deeb..29184e6e77 100644 --- a/2007/CVE-2007-1358.md +++ b/2007/CVE-2007-1358.md @@ -13,5 +13,5 @@ Cross-site scripting (XSS) vulnerability in certain applications using Apache To - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2007/CVE-2007-2447.md b/2007/CVE-2007-2447.md index 38ca6d3a7b..edc47efcd1 100644 --- a/2007/CVE-2007-2447.md +++ b/2007/CVE-2007-2447.md @@ -37,6 +37,7 @@ The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote - https://github.com/CVEDB/PoC-List - https://github.com/CVEDB/awesome-cve-repo - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase3-Metasploitable3-samba_user_map- +- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 - https://github.com/CipherLucas/Metasploitable2-PenTest-Report - https://github.com/Desm0ndChan/OSCP-cheatsheet - https://github.com/DevinLiggins14/SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 diff --git a/2007/CVE-2007-6709.md b/2007/CVE-2007-6709.md index 2c36083e5a..90edd6b6a4 100644 --- a/2007/CVE-2007-6709.md +++ b/2007/CVE-2007-6709.md @@ -13,5 +13,5 @@ The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmw - http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2008/CVE-2008-1254.md b/2008/CVE-2008-1254.md index 4e09250cc8..523e821357 100644 --- a/2008/CVE-2008-1254.md +++ b/2008/CVE-2008-1254.md @@ -13,6 +13,7 @@ Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/CERT-hr/modified_cve-search - https://github.com/cve-search/cve-search diff --git a/2008/CVE-2008-1255.md b/2008/CVE-2008-1255.md index c412546392..2c193c341a 100644 --- a/2008/CVE-2008-1255.md +++ b/2008/CVE-2008-1255.md @@ -13,6 +13,7 @@ The ZyXEL P-660HW series router maintains authentication state by IP address, wh No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/CERT-hr/modified_cve-search - https://github.com/cve-search/cve-search diff --git a/2008/CVE-2008-1257.md b/2008/CVE-2008-1257.md index 1dc3c056fa..8758f9be4d 100644 --- a/2008/CVE-2008-1257.md +++ b/2008/CVE-2008-1257.md @@ -13,6 +13,7 @@ Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-6 No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/CERT-hr/modified_cve-search - https://github.com/cve-search/cve-search diff --git a/2008/CVE-2008-1259.md b/2008/CVE-2008-1259.md new file mode 100644 index 0000000000..c79e4936cb --- /dev/null +++ b/2008/CVE-2008-1259.md @@ -0,0 +1,17 @@ +### [CVE-2008-1259](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1259) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1260.md b/2008/CVE-2008-1260.md new file mode 100644 index 0000000000..e55853ba10 --- /dev/null +++ b/2008/CVE-2008-1260.md @@ -0,0 +1,17 @@ +### [CVE-2008-1260](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1260) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware allow remote attackers to (1) make the admin web server available on the Internet (WAN) interface via the WWWAccessInterface parameter to Forms/RemMagWWW_1 or (2) change the IP whitelisting timeout via the StdioTimout parameter to Forms/rpSysAdmin_1. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1261.md b/2008/CVE-2008-1261.md new file mode 100644 index 0000000000..f8d39bc339 --- /dev/null +++ b/2008/CVE-2008-1261.md @@ -0,0 +1,17 @@ +### [CVE-2008-1261](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1261) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1264.md b/2008/CVE-2008-1264.md new file mode 100644 index 0000000000..5a7864af99 --- /dev/null +++ b/2008/CVE-2008-1264.md @@ -0,0 +1,17 @@ +### [CVE-2008-1264](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1264) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1266.md b/2008/CVE-2008-1266.md new file mode 100644 index 0000000000..8eab8e3200 --- /dev/null +++ b/2008/CVE-2008-1266.md @@ -0,0 +1,17 @@ +### [CVE-2008-1266](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1266) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1523.md b/2008/CVE-2008-1523.md new file mode 100644 index 0000000000..0d8f9b42e4 --- /dev/null +++ b/2008/CVE-2008-1523.md @@ -0,0 +1,17 @@ +### [CVE-2008-1523](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1523) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1525.md b/2008/CVE-2008-1525.md new file mode 100644 index 0000000000..2bd9f4d4a0 --- /dev/null +++ b/2008/CVE-2008-1525.md @@ -0,0 +1,17 @@ +### [CVE-2008-1525](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1525) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-1529.md b/2008/CVE-2008-1529.md new file mode 100644 index 0000000000..5c87cc9897 --- /dev/null +++ b/2008/CVE-2008-1529.md @@ -0,0 +1,17 @@ +### [CVE-2008-1529](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1529) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2008/CVE-2008-2364.md b/2008/CVE-2008-2364.md index ac7640dc27..618034dc12 100644 --- a/2008/CVE-2008-2364.md +++ b/2008/CVE-2008-2364.md @@ -24,6 +24,7 @@ The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy - https://github.com/Live-Hack-CVE/CVE-2008-2364 - https://github.com/NikulinMS/13-01-hw - https://github.com/RoliSoft/ReconScan +- https://github.com/Veronica-Falgiani/Network-Protocol-Verification-Agent - https://github.com/Zhivarev/13-01-hw - https://github.com/issdp/test - https://github.com/kasem545/vulnsearch diff --git a/2009/CVE-2009-1556.md b/2009/CVE-2009-1556.md new file mode 100644 index 0000000000..51667cce1c --- /dev/null +++ b/2009/CVE-2009-1556.md @@ -0,0 +1,17 @@ +### [CVE-2009-1556](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1556) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerability than CVE-2004-2507. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2010/CVE-2010-0249.md b/2010/CVE-2010-0249.md index 1675cc79bc..399d74fc45 100644 --- a/2010/CVE-2010-0249.md +++ b/2010/CVE-2010-0249.md @@ -14,6 +14,7 @@ Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 o #### Github - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico +- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico - https://github.com/ahmedobied/python-exploits - https://github.com/ankh2054/python-exploits - https://github.com/tanjiti/sec_profile diff --git a/2010/CVE-2010-2075.md b/2010/CVE-2010-2075.md index 8580fe7c6c..31fdec86c6 100644 --- a/2010/CVE-2010-2075.md +++ b/2010/CVE-2010-2075.md @@ -23,6 +23,7 @@ No PoCs from references. - https://github.com/CVEDB/PoC-List - https://github.com/CVEDB/awesome-cve-repo - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase2-Metasploitable2 +- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 - https://github.com/DmitriyPetrovskiy23/InfoSec-homework1 - https://github.com/FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1 - https://github.com/Gdec02/nmap-scan-metasploitable diff --git a/2010/CVE-2010-2568.md b/2010/CVE-2010-2568.md index c892ce7044..706ac57388 100644 --- a/2010/CVE-2010-2568.md +++ b/2010/CVE-2010-2568.md @@ -16,6 +16,7 @@ Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, S #### Github - https://github.com/ARPSyndicate/cvemon - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico +- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico - https://github.com/Kuromesi/Py4CSKG - https://github.com/MN439/bingduziyuan - https://github.com/Ostorlab/KEV diff --git a/2011/CVE-2011-0609.md b/2011/CVE-2011-0609.md index b479717d28..6182dff152 100644 --- a/2011/CVE-2011-0609.md +++ b/2011/CVE-2011-0609.md @@ -14,6 +14,7 @@ Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windo #### Github - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico +- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico - https://github.com/Ostorlab/KEV - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors diff --git a/2011/CVE-2011-2523.md b/2011/CVE-2011-2523.md index 3c75dd455c..167944dd00 100644 --- a/2011/CVE-2011-2523.md +++ b/2011/CVE-2011-2523.md @@ -52,6 +52,7 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which - https://github.com/CVEDB/PoC-List - https://github.com/CVEDB/awesome-cve-repo - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase1-Metasploitable- +- https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 - https://github.com/CipherLucas/Metasploitable2-PenTest-Report - https://github.com/CitrineNull/Pivot-Lab - https://github.com/CitrineNull/Recon-101 @@ -258,6 +259,7 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which - https://github.com/priyadharshan-vadivel/metasploitable2-penetration-test - https://github.com/priyan37/metasploitable2-penetration-test - https://github.com/rahulkore1/-basic-vulnerability-assessment +- https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker - https://github.com/rkuruba/Penetration-Testing-1 - https://github.com/rohitkumar0976/CEH-PROJECT - https://github.com/roshan11420/Ethical-hacking-project diff --git a/2013/CVE-2013-7030.md b/2013/CVE-2013-7030.md index 0d72b4cb69..1b901eacb5 100644 --- a/2013/CVE-2013-7030.md +++ b/2013/CVE-2013-7030.md @@ -14,5 +14,5 @@ The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM - http://www.exploit-db.com/exploits/30237/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2014/CVE-2014-0160.md b/2014/CVE-2014-0160.md index 17d0e2284c..7c156361dc 100644 --- a/2014/CVE-2014-0160.md +++ b/2014/CVE-2014-0160.md @@ -149,6 +149,7 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p - https://github.com/JasonZorky95/OpenVPN - https://github.com/Jay-Idrees/UPenn-CyberSecurity-Penetration-Testing - https://github.com/Jeypi04/openvpn-jookk +- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico - https://github.com/Joao-Paulino/Cyber-Security - https://github.com/Joao-Paulino/Cyber-Security-PenTest - https://github.com/Joao-Paulino/CyberSecurity diff --git a/2014/CVE-2014-6271.md b/2014/CVE-2014-6271.md index dc510335e0..8c7ebddd9d 100644 --- a/2014/CVE-2014-6271.md +++ b/2014/CVE-2014-6271.md @@ -462,6 +462,7 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th - https://github.com/eric-erki/awesome-pentest - https://github.com/eric-gitta-moore/Safety-Project-Collection - https://github.com/ericlake/fabric-shellshock +- https://github.com/esselinux/wazuh-suricata - https://github.com/exfilt/CheatSheet - https://github.com/falocab/PayloadsAllTheThings - https://github.com/fares-alkhalaf/BurbsuiteInArabic diff --git a/2015/CVE-2015-0089.md b/2015/CVE-2015-0089.md new file mode 100644 index 0000000000..dc78911ac0 --- /dev/null +++ b/2015/CVE-2015-0089.md @@ -0,0 +1,17 @@ +### [CVE-2015-0089](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0089) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to obtain sensitive information from kernel memory, and possibly bypass the KASLR protection mechanism, via a crafted font, aka "Adobe Font Driver Information Disclosure Vulnerability," a different vulnerability than CVE-2015-0087. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2016/CVE-2016-10191.md b/2016/CVE-2016-10191.md index 638fbdb75c..9b31fc5ef5 100644 --- a/2016/CVE-2016-10191.md +++ b/2016/CVE-2016-10191.md @@ -13,6 +13,7 @@ Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0 - https://ffmpeg.org/security.html #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/KaviDk/Heap-Over-Flow-with-CVE-2016-10191 - https://github.com/Live-Hack-CVE/CVE-2016-1019 diff --git a/2016/CVE-2016-10745.md b/2016/CVE-2016-10745.md index 90772f729d..164f1f78df 100644 --- a/2016/CVE-2016-10745.md +++ b/2016/CVE-2016-10745.md @@ -16,5 +16,6 @@ In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. - https://github.com/ARPSyndicate/cvemon - https://github.com/JinBean/CVE-Extension - https://github.com/LoricAndre/OSV_Commits_Analysis +- https://github.com/arvion-ai/test-vulnerable-python2 - https://github.com/seal-community/patches diff --git a/2016/CVE-2016-3237.md b/2016/CVE-2016-3237.md index 5c0d6f6f2f..a86593e938 100644 --- a/2016/CVE-2016-3237.md +++ b/2016/CVE-2016-3237.md @@ -13,5 +13,6 @@ Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Win - https://www.exploit-db.com/exploits/40409/ #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon diff --git a/2016/CVE-2016-3315.md b/2016/CVE-2016-3315.md new file mode 100644 index 0000000000..921f4f4a0a --- /dev/null +++ b/2016/CVE-2016-3315.md @@ -0,0 +1,17 @@ +### [CVE-2016-3315](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3315) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability." + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2016/CVE-2016-3376.md b/2016/CVE-2016-3376.md index 0479cb9184..ec1c854305 100644 --- a/2016/CVE-2016-3376.md +++ b/2016/CVE-2016-3376.md @@ -13,5 +13,6 @@ The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon diff --git a/2016/CVE-2016-4350.md b/2016/CVE-2016-4350.md new file mode 100644 index 0000000000..ae219ae64a --- /dev/null +++ b/2016/CVE-2016-4350.md @@ -0,0 +1,17 @@ +### [CVE-2016-4350](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4350) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storage Manager (STM)) before 6.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) ScriptSchedule parameter in the ScriptServlet servlet; the (2) winEventId or (3) winEventLog parameter in the WindowsEventLogsServlet servlet; the (4) processOS parameter in the ProcessesServlet servlet; the (5) group, (6) groupName, or (7) clientName parameter in the BackupExceptionsServlet servlet; the (8) valDB or (9) valFS parameter in the BackupAssociationServlet servlet; the (10) orderBy or (11) orderDir parameter in the HostStorageServlet servlet; the (12) fileName, (13) sortField, or (14) sortDirection parameter in the DuplicateFilesServlet servlet; the (15) orderFld or (16) orderDir parameter in the QuantumMonitorServlet servlet; the (17) exitCode parameter in the NbuErrorMessageServlet servlet; the (18) udfName, (19) displayName, (20) udfDescription, (21) udfDataValue, (22) udfSectionName, or (23) udfId parameter in the UserDefinedFieldConfigServlet servlet; the (24) sortField or (25) sortDirection parameter in the XiotechMonitorServlet servlet; the (26) sortField or (27) sortDirection parameter in the BexDriveUsageSummaryServlet servlet; the (28) state parameter in the ScriptServlet servlet; the (29) assignedNames parameter in the FileActionAssignmentServlet servlet; the (30) winEventSource parameter in the WindowsEventLogsServlet servlet; or the (31) name, (32) ipOne, (33) ipTwo, or (34) ipThree parameter in the XiotechMonitorServlet servlet. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2016/CVE-2016-5195.md b/2016/CVE-2016-5195.md index cdbdd8876f..324617e5dd 100644 --- a/2016/CVE-2016-5195.md +++ b/2016/CVE-2016-5195.md @@ -137,6 +137,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo - https://github.com/Jean-Francois-C/Boot2root-CTFs-Writeups - https://github.com/Jekyll-Hyde2022/PrivEsc-Linux - https://github.com/Jeremias215/VulnerabilityManagement +- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico - https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits - https://github.com/Josam85/Nessus-Vulnerability-Management-Lab - https://github.com/JoyChou93/sks @@ -470,6 +471,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo - https://github.com/retr0-13/Linux-Privilege-Escalation-Basics - https://github.com/revanmalang/OSCP - https://github.com/reybango/The-Security-Handbook +- https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker - https://github.com/riquebatalha/single-multithreading_android - https://github.com/ruobing-wang/os_hacking_lab - https://github.com/rvolosatovs/mooshy diff --git a/2016/CVE-2016-6140.md b/2016/CVE-2016-6140.md index 1249390816..f06511dfc4 100644 --- a/2016/CVE-2016-6140.md +++ b/2016/CVE-2016-6140.md @@ -13,5 +13,5 @@ SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files vi - http://packetstormsecurity.com/files/138439/SAP-TREX-7.10-Revision-63-Arbitrary-File-Write.html #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2016/CVE-2016-7031.md b/2016/CVE-2016-7031.md new file mode 100644 index 0000000000..6fea05edb4 --- /dev/null +++ b/2016/CVE-2016-7031.md @@ -0,0 +1,17 @@ +### [CVE-2016-7031](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7031) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL. + +### POC + +#### Reference +- https://github.com/ceph/ceph/pull/6057 + +#### Github +No PoCs found on GitHub currently. + diff --git a/2016/CVE-2016-7193.md b/2016/CVE-2016-7193.md index 2968f26c06..ce25e73e4a 100644 --- a/2016/CVE-2016-7193.md +++ b/2016/CVE-2016-7193.md @@ -13,6 +13,7 @@ Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/Ostorlab/KEV - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors diff --git a/2017/CVE-2017-10984.md b/2017/CVE-2017-10984.md new file mode 100644 index 0000000000..8b41014f13 --- /dev/null +++ b/2017/CVE-2017-10984.md @@ -0,0 +1,17 @@ +### [CVE-2017-10984](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10984) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2017/CVE-2017-13156.md b/2017/CVE-2017-13156.md index b9b2a9766c..a8b1cafc36 100644 --- a/2017/CVE-2017-13156.md +++ b/2017/CVE-2017-13156.md @@ -34,6 +34,7 @@ An elevation of privilege vulnerability in the Android system (art). Product: An - https://github.com/giacomoferretti/janus-toolkit - https://github.com/jcrutchvt10/Janus - https://github.com/krrathod/PenetesterHelper +- https://github.com/l1ackernishan/Janus-Vulnerability-CVE-2017-13156-Exploit - https://github.com/lnick2023/nicenice - https://github.com/nahid0x1/Janus-Vulnerability-CVE-2017-13156-Exploit - https://github.com/nictjh/threatDemos diff --git a/2017/CVE-2017-15361.md b/2017/CVE-2017-15361.md index 7c19a13f18..c7dfcc21c4 100644 --- a/2017/CVE-2017-15361.md +++ b/2017/CVE-2017-15361.md @@ -10,6 +10,7 @@ The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firm ### POC #### Reference +- https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update - https://www.kb.cert.org/vuls/id/307015 #### Github diff --git a/2017/CVE-2017-18342.md b/2017/CVE-2017-18342.md index d3ae0df497..901f9e8fa8 100644 --- a/2017/CVE-2017-18342.md +++ b/2017/CVE-2017-18342.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/PayTrace/intercom_test - https://github.com/Whyshealwaysbrokeme/vuln-ruyaml-0.91.0-rce - https://github.com/amakhu/cdp +- https://github.com/arvion-ai/test-vulnerable-python2 - https://github.com/danielhoherd/pre-commit-hooks - https://github.com/ekufta0530/Interfile-Only-Semgrep - https://github.com/eltyagi/poc-codeql-artifact-attestation diff --git a/2017/CVE-2017-5638.md b/2017/CVE-2017-5638.md index 51b946b7d7..638df5bac2 100644 --- a/2017/CVE-2017-5638.md +++ b/2017/CVE-2017-5638.md @@ -96,6 +96,7 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be - https://github.com/JSchauert/Project-2-Offensive-Security-CTF - https://github.com/JShortSona/Jenkins-Struts2 - https://github.com/Jhoel777ar/El-libro-absurdamente-completo-del-Hacker-Etico +- https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico - https://github.com/Jodagh/struts - https://github.com/JordanMcAlpine1/WebAppLinuxWindowsPenTest - https://github.com/K1ngDamien/epss-super-sorter diff --git a/2017/CVE-2017-7921.md b/2017/CVE-2017-7921.md index de8e0f6a3d..8e7471bce7 100644 --- a/2017/CVE-2017-7921.md +++ b/2017/CVE-2017-7921.md @@ -45,6 +45,7 @@ No PoCs from references. - https://github.com/ROYSCANNER/ROY - https://github.com/SexyBeast233/SecBooks - https://github.com/Sidhukali/ingram +- https://github.com/SlickxMercy/ArgusEye - https://github.com/SlickxMercy/BETAVDB - https://github.com/SlickxMercy/WeakPassword - https://github.com/SlickxMercy/WebCamHack diff --git a/2018/CVE-2018-0969.md b/2018/CVE-2018-0969.md index e6a433c4c1..55fb56f911 100644 --- a/2018/CVE-2018-0969.md +++ b/2018/CVE-2018-0969.md @@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could - https://www.exploit-db.com/exploits/44459/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2018/CVE-2018-0971.md b/2018/CVE-2018-0971.md index 494a5cfeda..3bd3ec38e9 100644 --- a/2018/CVE-2018-0971.md +++ b/2018/CVE-2018-0971.md @@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could - https://www.exploit-db.com/exploits/44461/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2018/CVE-2018-0972.md b/2018/CVE-2018-0972.md index 77cf8570ab..19f7d73238 100644 --- a/2018/CVE-2018-0972.md +++ b/2018/CVE-2018-0972.md @@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could - https://www.exploit-db.com/exploits/44462/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2018/CVE-2018-0973.md b/2018/CVE-2018-0973.md index 4ee675121e..3c0ecb6945 100644 --- a/2018/CVE-2018-0973.md +++ b/2018/CVE-2018-0973.md @@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could - https://www.exploit-db.com/exploits/44463/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2018/CVE-2018-0974.md b/2018/CVE-2018-0974.md index ec896cce83..3f957b42cd 100644 --- a/2018/CVE-2018-0974.md +++ b/2018/CVE-2018-0974.md @@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could - https://www.exploit-db.com/exploits/44464/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2018/CVE-2018-0975.md b/2018/CVE-2018-0975.md index ccbd3cf4c6..827bdcf909 100644 --- a/2018/CVE-2018-0975.md +++ b/2018/CVE-2018-0975.md @@ -45,5 +45,5 @@ An information disclosure vulnerability exists in the Windows kernel that could - https://www.exploit-db.com/exploits/44458/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2018/CVE-2018-1000656.md b/2018/CVE-2018-1000656.md index d270ae2bf9..a5d0392e51 100644 --- a/2018/CVE-2018-1000656.md +++ b/2018/CVE-2018-1000656.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/OpenLabSE/VulFinder - https://github.com/VulFinder/VulFinder - https://github.com/akanchhaS/pysnyk +- https://github.com/arvion-ai/test-vulnerable-python2 - https://github.com/crumpman/pulsecheck - https://github.com/eltyagi/poc-codeql-artifact-attestation - https://github.com/garethr/snykctl diff --git a/2018/CVE-2018-15473.md b/2018/CVE-2018-15473.md index 14fb2ea87e..4e3326081a 100644 --- a/2018/CVE-2018-15473.md +++ b/2018/CVE-2018-15473.md @@ -73,6 +73,7 @@ OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not dela - https://github.com/NestyF/SSH_Enum_CVE-2018-15473 - https://github.com/NetworkingPassionate/Nessus-Essentials - https://github.com/Nullgrimoire/NullScan +- https://github.com/OhDamnn/Noregressh - https://github.com/OluwatobiEAkanni/PEN-TESTING-A-SERVER - https://github.com/OmarV4066/SSHEnumKL - https://github.com/Pixiel333/Pentest-Cheat-sheet diff --git a/2018/CVE-2018-18074.md b/2018/CVE-2018-18074.md index f0d6cec65e..78d500179d 100644 --- a/2018/CVE-2018-18074.md +++ b/2018/CVE-2018-18074.md @@ -22,6 +22,7 @@ The Requests package before 2.20.0 for Python sends an HTTP Authorization header - https://github.com/SahanaKhushi/iplmatchpredictor2020 - https://github.com/XXRadeonXFX/flask-vuln-app - https://github.com/aertyyujhgfd/JARVIS-dans-Iron-man +- https://github.com/arvion-ai/test-vulnerable-python2 - https://github.com/bvvard/secure-source-code-analyzer - https://github.com/cloudsmith-io/rego-recipes - https://github.com/colonelmeow/appsecctf diff --git a/2018/CVE-2018-19323.md b/2018/CVE-2018-19323.md index 2e93d60514..305bdcef9e 100644 --- a/2018/CVE-2018-19323.md +++ b/2018/CVE-2018-19323.md @@ -20,5 +20,6 @@ The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRA - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/blueisbeautiful/CVE-2018-19323 +- https://github.com/brokendreamsclub/CVE-2018-19323 - https://github.com/xct/windows-kernel-exploits diff --git a/2018/CVE-2018-8041.md b/2018/CVE-2018-8041.md index 0532a6e4ae..9664cefef4 100644 --- a/2018/CVE-2018-8041.md +++ b/2018/CVE-2018-8041.md @@ -14,5 +14,6 @@ No PoCs from references. #### Github - https://github.com/ARPSyndicate/cvemon +- https://github.com/J1w0n-H/AI-in-Security - https://github.com/shoucheng3/apache__camel_CVE-2018-8041_2-20-3 diff --git a/2018/CVE-2018-8176.md b/2018/CVE-2018-8176.md new file mode 100644 index 0000000000..4d5de056b3 --- /dev/null +++ b/2018/CVE-2018-8176.md @@ -0,0 +1,17 @@ +### [CVE-2018-8176](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8176) +![](https://img.shields.io/static/v1?label=Product&message=Microsoft%20Office&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=2016%20for%20Mac%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20Code%20Execution&color=brightgreen) + +### Description + +A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2018/CVE-2018-9999.md b/2018/CVE-2018-9999.md index 284fc793e6..2f932cbbe8 100644 --- a/2018/CVE-2018-9999.md +++ b/2018/CVE-2018-9999.md @@ -13,5 +13,6 @@ In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads No PoCs from references. #### Github +- https://github.com/R3KT00YT/ScanCam - https://github.com/TingPing/flatpak-cve-checker diff --git a/2019/CVE-2019-0708.md b/2019/CVE-2019-0708.md index 08f2c51fa1..84c630fe9a 100644 --- a/2019/CVE-2019-0708.md +++ b/2019/CVE-2019-0708.md @@ -392,6 +392,7 @@ A remote code execution vulnerability exists in Remote Desktop Services formerly - https://github.com/lp008/CVE_2019_0708_Blue_screen_poc - https://github.com/lp008/Hack-readme - https://github.com/lsc1226844309/hanker1 +- https://github.com/luckydus5/Penguin-Leanning-Linux-Mastery - https://github.com/lwtz/CVE-2019-0708 - https://github.com/mai-lang-chai/System-Vulnerability - https://github.com/major203/cve-2019-0708-scan diff --git a/2019/CVE-2019-0940.md b/2019/CVE-2019-0940.md index dd67abcc3d..729ce38d4e 100644 --- a/2019/CVE-2019-0940.md +++ b/2019/CVE-2019-0940.md @@ -47,6 +47,7 @@ A remote code execution vulnerability exists in the way that Microsoft browsers No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/HackOvert/awesome-bugs - https://github.com/alphaSeclab/sec-daily-2019 diff --git a/2019/CVE-2019-10089.md b/2019/CVE-2019-10089.md index 974b1841e4..a5f1e1d821 100644 --- a/2019/CVE-2019-10089.md +++ b/2019/CVE-2019-10089.md @@ -13,5 +13,6 @@ On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invo No PoCs from references. #### Github +- https://github.com/PuddinCat/GithubRepoSpider - https://github.com/shoucheng3/apache__jspwiki_CVE-2019-10089_2-11-0-M4 diff --git a/2019/CVE-2019-1010083.md b/2019/CVE-2019-1010083.md index 60883cc80b..fd69c6b89d 100644 --- a/2019/CVE-2019-1010083.md +++ b/2019/CVE-2019-1010083.md @@ -13,6 +13,7 @@ The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. Th No PoCs from references. #### Github +- https://github.com/arvion-ai/test-vulnerable-python2 - https://github.com/crumpman/pulsecheck - https://github.com/elliotsecops/VulnGuard - https://github.com/eltyagi/poc-codeql-artifact-attestation diff --git a/2019/CVE-2019-11358.md b/2019/CVE-2019-11358.md index 087d66ef1f..e2b96d73a2 100644 --- a/2019/CVE-2019-11358.md +++ b/2019/CVE-2019-11358.md @@ -195,6 +195,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/5960IronDams/Center_Stage_2 - https://github.com/5GBurrito/FTC_Team_12167_Robot_Controller_2023-24 - https://github.com/5GBurrito/FTC_Team_9511_Robot_Controller_2023-24 +- https://github.com/5irobotics/MechanicalDuck26 - https://github.com/5irobotics/MechanicalDucks25-D01 - https://github.com/6-BennyLi-9/FzxlFtc2024-2025 - https://github.com/6165-MSET-CuttleFish/2024-FTC-offseason-project @@ -502,6 +503,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/AtticFanatics14079/UltimateGoalFanatics - https://github.com/AuPiratesFIRST/FTC-2024-INTOTHEDEEP-TEAM19595 - https://github.com/AuPiratesFIRST/FTC-2024-IntoTheDeep-MentorCameron +- https://github.com/AuPiratesFIRST/FTC-2025-Decode-MrC-Playground - https://github.com/AudraJ1/7588Season2022 - https://github.com/AuslinD/IntoTheDeep2024-2025 - https://github.com/AuslinD/PowerPlay2022-2023 @@ -792,6 +794,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/Capital-Bots/IntoTheDeep-14575 - https://github.com/Capital-Bots/summer2025 - https://github.com/Career-Academy-FTC-Robotics/CanineCrew +- https://github.com/CareyK25/FTC-IntoTheDeep - https://github.com/Carlabzn/demo-arm - https://github.com/CarlosSeijasFTC/2025-2026-Robot-Controller - https://github.com/CarlosSeijasFTC/Decode2025-2026 @@ -948,6 +951,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/Cyliis/codus-bobocus - https://github.com/Cypher-Geist/FTC_AndroidStudio_Code - https://github.com/D06-5irobotics/TT-5 +- https://github.com/D07-5irobotics/BionicSharks-2025-D07 - https://github.com/DCAthatsit/AutonomyQUBE-2023 - https://github.com/DCRepublic/Honey-Nut-Gearios - https://github.com/DCSPD-PantherRobotics/OurRobotsCode @@ -1581,6 +1585,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/FTC9837/FTC9837_UltimateGoal - https://github.com/FTC9889/CC_9889_2020_2021 - https://github.com/FTC9889/CC_9889_2023_2024 +- https://github.com/FTC9889/CC_9889_2024_2025 - https://github.com/FTCBlackout/FtcRobotController-master - https://github.com/FTCCrashAndBurn/FtcRobotController-23 - https://github.com/FTCCyclone/CycloneRobotController @@ -2299,6 +2304,8 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/Logannnnnnn/PiRates-Into-the-Deep-24 - https://github.com/Logannnnnnn/PiRates-LOKI-2024 - https://github.com/Logannnnnnn/PiRatesCenterStage +- https://github.com/Logannnnnnn/PiRatesDecode +- https://github.com/Logannnnnnn/PiRatesDecodePublic - https://github.com/LogiLift/PowerPlay - https://github.com/Loki7261/Testing-ITD - https://github.com/Loki7261/roadrunnertest @@ -2406,6 +2413,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/MaxG-SCH/SCH-4914-2021-22 - https://github.com/MaxGB10/Pancakes2025ftc - https://github.com/MaxKyt/FTC_Test +- https://github.com/MaxXie86431/FTC-Decode - https://github.com/MaximOsip/PowerlpayFTCByEXP - https://github.com/McCaskey-Robotics/FTCrobot2022offseason - https://github.com/McCaskey-Robotics/VortechCenterStageV3 @@ -2723,6 +2731,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/Osrepnay/FTCIntoTheDeep - https://github.com/Otis354/Robocode - https://github.com/OurGreatLeaderEason/MyRepo +- https://github.com/OutcastsRobotics/31931OutcastsRoboticsCodebase - https://github.com/OutoftheBoxFTC/CenterStage - https://github.com/OutoftheBoxFTC/FreightFrenzy - https://github.com/OutoftheBoxFTC/UltimateGoal6.1 @@ -3174,6 +3183,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/SMERobotics/robocode - https://github.com/SMPhoenicx/Omen_FTC_26 - https://github.com/SPARKTECH-24345/FTC-Decode-Sparktech +- https://github.com/SPFRobotics/FTC-Decode-Raider-Robotics-2025-2026 - https://github.com/STMARobotics/atomic-FtcRobotController - https://github.com/STMARobotics/digital-FtcRobotController - https://github.com/STMARobotics/ftc-alloy-decode @@ -3222,6 +3232,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/Sarah-Mathew2025/Summer-2025 - https://github.com/Sarvesh-Somasundaram/5795UltimateGoal - https://github.com/Satgoy152/FreightFrenzy +- https://github.com/Savadragos13/STIM-DC-DECODE - https://github.com/ScarlettRobotics/FTC-2021 - https://github.com/ScarlettRobotics/FTC20718-2022-23 - https://github.com/ScarlettRobotics/FTC20718-2023-24 @@ -3572,6 +3583,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/ThaddeusBardsley/W25 - https://github.com/Thai28/28717GearheadsIntoTheDeep - https://github.com/Tharealzhanibek/FTC_Zertte +- https://github.com/That-Madman/BoP-FTC-Decode - https://github.com/That-Madman/Chipper-s-Revenge-FTC - https://github.com/That-Madman/FTC-INTO-THE-DEEP - https://github.com/That-Madman/Lemmy @@ -4817,6 +4829,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/ftc11112/RobotController - https://github.com/ftc13100/BeaversTemplate - https://github.com/ftc13100/CenterStage-2024 +- https://github.com/ftc13100/Decode-2026 - https://github.com/ftc13100/FreightFrenzy-2022 - https://github.com/ftc13100/Practice-For-Programming - https://github.com/ftc13100/Programming-Practice-2023 @@ -5086,6 +5099,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/iNanoToxin/FTC_Cobalt - https://github.com/ia74/wagner2024 - https://github.com/iamscythe66/ftcrobotcontrol +- https://github.com/ibm-7094a/ftc-intothedeep-rccode - https://github.com/iceworld009/IntoTheDeep_HarambeCartel-2025 - https://github.com/icsrobotics/19866-FTC_2023-2024 - https://github.com/idealsociety/Team8637-GB-2024 @@ -5222,6 +5236,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/jrasor/UGScrimmage62 - https://github.com/jrasor/csee113S21 - https://github.com/jreclark/KRASH_2023_CenterStage_RR05 +- https://github.com/jtalborough/ftc-roosterbots-code - https://github.com/jthomson04/15252_FTC_2021-2022 - https://github.com/jthomson04/First-Tech-Challenge-2021-2022 - https://github.com/jtk16/CrowForceFTCV2 @@ -5352,6 +5367,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/lehiller/2021-FTC-UltimateGoal-Wembley - https://github.com/lemon-exe/BSS-Robotics-2022---FTC-Code-Repo - https://github.com/leoschen/FreightFrenzy +- https://github.com/li-valen/22279-SLAM-Robotics - https://github.com/li-valen/FtcRobotController-master22284-23-24 - https://github.com/li-valen/SLAM-Robotics-States-Bot - https://github.com/liamml1/Nick-is-metumtam @@ -5679,6 +5695,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/pingryrobotics/TestProject2022 - https://github.com/pinwc4/testrobo3 - https://github.com/pixelwastaken/ActionsEx +- https://github.com/pkfitzVT/FTC_2024_24 - https://github.com/plantechProgramming/decodeProjectPlantech - https://github.com/pleif/TempTraining - https://github.com/pndfourleafrovers/FTC-2025-2026 @@ -5890,6 +5907,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan - https://github.com/roman395/kek - https://github.com/ronaldgabrieln/INTOTHEDEEPZorrobots2024 - https://github.com/roobootics/DaniDrivetrain +- https://github.com/roobootics/SolarFlare_Decode - https://github.com/rosanneal28/FTCRC - https://github.com/rowan-mcalpin/NextFTC-Testing - https://github.com/rowan-mcalpin/PedroPathingPlusNextFTC diff --git a/2019/CVE-2019-14806.md b/2019/CVE-2019-14806.md new file mode 100644 index 0000000000..6d7588f5c3 --- /dev/null +++ b/2019/CVE-2019-14806.md @@ -0,0 +1,17 @@ +### [CVE-2019-14806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14806) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/arvion-ai/test-vulnerable-python2 + diff --git a/2019/CVE-2019-16905.md b/2019/CVE-2019-16905.md index 3aff254071..6cec631ac5 100644 --- a/2019/CVE-2019-16905.md +++ b/2019/CVE-2019-16905.md @@ -16,6 +16,7 @@ OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental k #### Github - https://github.com/ARPSyndicate/cvemon - https://github.com/Fastiraz/openssh-cve-resolv +- https://github.com/OhDamnn/Noregressh - https://github.com/Totes5706/TotesHTB - https://github.com/hackingyseguridad/ssha - https://github.com/phx/cvescan diff --git a/2020/CVE-2020-0096.md b/2020/CVE-2020-0096.md index ef9ab3b936..1d3f51cde0 100644 --- a/2020/CVE-2020-0096.md +++ b/2020/CVE-2020-0096.md @@ -22,6 +22,7 @@ No PoCs from references. - https://github.com/dayzsec/StrandHogg2 - https://github.com/developer3000S/PoC-in-GitHub - https://github.com/hectorgie/PoC-in-GitHub +- https://github.com/l1ackernishan/CVE-2020-0096-strandhogg-exploit-p0c - https://github.com/liuyun201990/StrandHogg2 - https://github.com/nahid0x1/CVE-2020-0096-strandhogg-exploit-p0c - https://github.com/nishan0x1/CVE-2020-0096-strandhogg-exploit-p0c diff --git a/2020/CVE-2020-14145.md b/2020/CVE-2020-14145.md index 78168ecdb8..a68f38579b 100644 --- a/2020/CVE-2020-14145.md +++ b/2020/CVE-2020-14145.md @@ -20,6 +20,7 @@ No PoCs from references. - https://github.com/J0hnKn1f3/UltraRecon - https://github.com/Maribel0370/Nebula-io - https://github.com/NeoOniX/5ATTACK +- https://github.com/OhDamnn/Noregressh - https://github.com/Totes5706/TotesHTB - https://github.com/VladimirFogel/PRO4 - https://github.com/adegoodyer/ubuntu diff --git a/2020/CVE-2020-1957.md b/2020/CVE-2020-1957.md index 3c54103ac5..8c1265bdf5 100644 --- a/2020/CVE-2020-1957.md +++ b/2020/CVE-2020-1957.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/0day666/Vulnerability-verification - https://github.com/12442RF/Learn +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/Challengers-win/Sec-Interview-ai - https://github.com/Coldplay1517/Middleware-Vulnerability-detection-master diff --git a/2021/CVE-2021-23337.md b/2021/CVE-2021-23337.md index 36792ac9f8..a520d0e5f2 100644 --- a/2021/CVE-2021-23337.md +++ b/2021/CVE-2021-23337.md @@ -36,6 +36,7 @@ Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the tem - https://github.com/NidalShaterM/trivy-security-scan - https://github.com/Refinitiv-API-Samples/Example.EWA.TypeScript.WebApplication - https://github.com/SocketDev/API_Scripts +- https://github.com/Undertone-student-org/booking-system - https://github.com/alexandert2105/GitHub-curso-completo - https://github.com/andisfar/LaunchQtCreator - https://github.com/andrewbearsley/lacework-sca-scan-example diff --git a/2021/CVE-2021-28041.md b/2021/CVE-2021-28041.md index 8f9b5d838c..8e817eb6a8 100644 --- a/2021/CVE-2021-28041.md +++ b/2021/CVE-2021-28041.md @@ -15,6 +15,7 @@ ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few #### Github - https://github.com/ARPSyndicate/cvemon - https://github.com/MaulikxLakhani/SSHScout +- https://github.com/OhDamnn/Noregressh - https://github.com/Totes5706/TotesHTB - https://github.com/accalina/crowflag - https://github.com/alvarigno/ChocolateFire-DockerLab diff --git a/2021/CVE-2021-34624.md b/2021/CVE-2021-34624.md index f80e69de60..177dbd3169 100644 --- a/2021/CVE-2021-34624.md +++ b/2021/CVE-2021-34624.md @@ -15,4 +15,5 @@ No PoCs from references. #### Github - https://github.com/20142995/nuclei-templates +- https://github.com/BharatCyberForce/wp-hunter diff --git a/2021/CVE-2021-3493.md b/2021/CVE-2021-3493.md index 2c56611c6c..1cf1f764cf 100644 --- a/2021/CVE-2021-3493.md +++ b/2021/CVE-2021-3493.md @@ -84,6 +84,7 @@ The overlayfs implementation in the linux kernel did not properly validate with - https://github.com/Pelies91/audit-securite-wiki - https://github.com/Pratham-verma/TryHackMe-Roadmap - https://github.com/ProbiusOfficial/Awsome-Sec.CTF-Videomaker +- https://github.com/PuddinCat/GithubRepoSpider - https://github.com/ReflectedThanatos/OSCP-cheatsheet - https://github.com/Ruhanyat-994/Ruhanyat-994 - https://github.com/SYRTI/POC_to_review @@ -211,4 +212,5 @@ The overlayfs implementation in the linux kernel did not properly validate with - https://github.com/youwizard/CVE-POC - https://github.com/zecool/cve - https://github.com/zhanpengliu-tencent/medium-cve +- https://github.com/zulloper/cve-poc diff --git a/2021/CVE-2021-36260.md b/2021/CVE-2021-36260.md index 4b16c38b6a..08531e9eec 100644 --- a/2021/CVE-2021-36260.md +++ b/2021/CVE-2021-36260.md @@ -57,10 +57,12 @@ A command injection vulnerability in the web server of some Hikvision product. D - https://github.com/NyxAzrael/Goby_POC - https://github.com/Ostorlab/KEV - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors +- https://github.com/R3KT00YT/ScanCam - https://github.com/ROYSCANNER/ROY - https://github.com/SYRTI/POC_to_review - https://github.com/ShivamB25/shodan-cam - https://github.com/Sidhukali/ingram +- https://github.com/SlickxMercy/ArgusEye - https://github.com/SlickxMercy/WebCamHack - https://github.com/Stealzoz/steal - https://github.com/TakenoSite/RemoteUploader diff --git a/2021/CVE-2021-41773.md b/2021/CVE-2021-41773.md index 7540911f2d..01311e9a90 100644 --- a/2021/CVE-2021-41773.md +++ b/2021/CVE-2021-41773.md @@ -178,6 +178,7 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2. - https://github.com/Mr-Tree-S/POC_EXP - https://github.com/Mr-xn/Penetration_Testing_POC - https://github.com/MrCl0wnLab/SimplesApachePathTraversal +- https://github.com/MuhammadHuzaifaAsif/security-lab - https://github.com/N0el4kLs/Vulhub_Exp - https://github.com/NZRXHX/NZRXNETSCANNER - https://github.com/NaInSec/CVE-PoC-in-GitHub diff --git a/2021/CVE-2021-44228.md b/2021/CVE-2021-44228.md index 6cbef9dbf1..eccd07e0d6 100644 --- a/2021/CVE-2021-44228.md +++ b/2021/CVE-2021-44228.md @@ -666,6 +666,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/Threekiii/Awesome-Redteam - https://github.com/Threekiii/Vulhub-Reproduce - https://github.com/Timborin0/log4j-dork-scanner +- https://github.com/TmTutui/AI-security-agent - https://github.com/ToastNumber/log4shell - https://github.com/Toolsec/log4j-scan - https://github.com/TotallyNotAHaxxer/f-for-java @@ -733,6 +734,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/aajuvonen/log4stdin - https://github.com/aalex954/Log4PowerShell - https://github.com/ab0x90/CVE-2021-44228_PoC +- https://github.com/abdotemlali/Tisalabs - https://github.com/abdullah89255/Purpose-of-CVSS - https://github.com/ably77/gehc-gateway-poc-runbook - https://github.com/ably77/wu-gloo-mesh-runbook @@ -1947,6 +1949,7 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 - https://github.com/techdeavour/RosettaBOM - https://github.com/tejas-nagchandi/CVE-2021-45046 - https://github.com/tejas-rkd/threat-inspector +- https://github.com/temlaliabdo/Tisalabs - https://github.com/teresaweber685/book_list - https://github.com/terribletal/go-vex - https://github.com/test-org-appsec/nuclei diff --git a/2021/CVE-2021-45575.md b/2021/CVE-2021-45575.md new file mode 100644 index 0000000000..93364e2506 --- /dev/null +++ b/2021/CVE-2021-45575.md @@ -0,0 +1,17 @@ +### [CVE-2021-45575](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45575) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6. + +### POC + +#### Reference +- https://kb.netgear.com/000064097/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0083 + +#### Github +No PoCs found on GitHub currently. + diff --git a/2022/CVE-2022-22620.md b/2022/CVE-2022-22620.md index 55a9a4a993..e0c54146e3 100644 --- a/2022/CVE-2022-22620.md +++ b/2022/CVE-2022-22620.md @@ -29,6 +29,7 @@ No PoCs from references. - https://github.com/kmeps4/CVE-2022-22620 - https://github.com/kmeps4/PSFree - https://github.com/manas3c/CVE-POC +- https://github.com/minaadel551/PS4Free - https://github.com/minaadel551/test - https://github.com/minaadel551/test2 - https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2022/CVE-2022-30190.md b/2022/CVE-2022-30190.md index 30ad541c53..13d137c6a1 100644 --- a/2022/CVE-2022-30190.md +++ b/2022/CVE-2022-30190.md @@ -77,6 +77,7 @@ A remote code execution vulnerability exists when MSDT is called using the URL p - https://github.com/CyberTitus/Follina - https://github.com/DOV3Y/CVE-2022-30190-ASR-Senintel-Process-Pickup - https://github.com/DerZiad/CVE-2022-30190 +- https://github.com/DerZiad/DerZiad - https://github.com/EkamSinghWalia/Follina-MSDT-Vulnerability-CVE-2022-30190- - https://github.com/ErrorNoInternet/FollinaScanner - https://github.com/G-Zion/ProductionFollinaWorkaround diff --git a/2022/CVE-2022-32563.md b/2022/CVE-2022-32563.md index 914d90dc33..d6b3e10b35 100644 --- a/2022/CVE-2022-32563.md +++ b/2022/CVE-2022-32563.md @@ -13,6 +13,7 @@ An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin creden - https://forums.couchbase.com/tags/security #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/Xeus-Territory/Robust_Scanner - https://github.com/Xeus-Territory/robust_scanner diff --git a/2022/CVE-2022-35213.md b/2022/CVE-2022-35213.md index 287fbb7ebf..d1ef393e13 100644 --- a/2022/CVE-2022-35213.md +++ b/2022/CVE-2022-35213.md @@ -13,6 +13,7 @@ Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/Leeziao/TChecker - https://github.com/Xeus-Territory/Robust_Scanner diff --git a/2022/CVE-2022-37860.md b/2022/CVE-2022-37860.md new file mode 100644 index 0000000000..d9d1eeef06 --- /dev/null +++ b/2022/CVE-2022-37860.md @@ -0,0 +1,17 @@ +### [CVE-2022-37860](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37860) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2022/CVE-2022-38637.md b/2022/CVE-2022-38637.md index e361c25d7d..849a49320b 100644 --- a/2022/CVE-2022-38637.md +++ b/2022/CVE-2022-38637.md @@ -13,6 +13,7 @@ Hospital Management System v1.0 was discovered to contain multiple SQL injection - https://www.youtube.com/watch?v=m8nW0p69UHU #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/ARPSyndicate/cvemon - https://github.com/ARPSyndicate/kenzer-templates - https://github.com/Henry4E36/POCS diff --git a/2022/CVE-2022-40309.md b/2022/CVE-2022-40309.md new file mode 100644 index 0000000000..4e417e45c1 --- /dev/null +++ b/2022/CVE-2022-40309.md @@ -0,0 +1,17 @@ +### [CVE-2022-40309](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40309) +![](https://img.shields.io/static/v1?label=Product&message=Apache%20Archiva&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=unspecified%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Arbitrary%20directory%20deletion&color=brightgreen) + +### Description + +Users with write permissions to a repository can delete arbitrary directories. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/Veronica-Falgiani/Network-Protocol-Verification-Agent + diff --git a/2022/CVE-2022-40635.md b/2022/CVE-2022-40635.md index 9783e676e1..eca450be0e 100644 --- a/2022/CVE-2022-40635.md +++ b/2022/CVE-2022-40635.md @@ -13,6 +13,7 @@ Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/mbadanoiu/CVE-2022-40635 - https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2023/CVE-2023-1234.md b/2023/CVE-2023-1234.md index eafa0273be..f7909be2c9 100644 --- a/2023/CVE-2023-1234.md +++ b/2023/CVE-2023-1234.md @@ -46,6 +46,7 @@ No PoCs from references. - https://github.com/Harmeek-19/Security-Infrastructure-Automation-Platform - https://github.com/IIxoskeletonII/osint-thesis - https://github.com/JoaoEnrique/watson-analise-vulnerabilidade +- https://github.com/JoaoEnrique/watson-vuln-checker - https://github.com/JorySeverijnse/Malphas - https://github.com/KaiandhisDranzer11/Shellcode-Generator-public - https://github.com/KevinDevSecOps/DASHBOARD-EN-FRASK @@ -108,6 +109,7 @@ No PoCs from references. - https://github.com/hybridx/scarlet-mesh - https://github.com/iamthamanic/WOARU-WorkaroundUltra - https://github.com/jason-allen-oneal/pentest-dataset-builder +- https://github.com/jblo/Github-Advisory-Downloader - https://github.com/jinchengyang98/Re-ccscaner - https://github.com/josephjilovec/Autonomous-AI-Threat-Hunter-Vulnerability-Prioritizer - https://github.com/julianwagnerfh/SIMS_JulianWagner @@ -117,6 +119,7 @@ No PoCs from references. - https://github.com/karlsgate/sarif-issue-bot - https://github.com/kenshinx/threat-analysis-agents - https://github.com/khizar-anjum/risky-business-mcp +- https://github.com/l1ackernishan/cve-finder - https://github.com/labibhossen/Shodan - https://github.com/lodetomasi/zero-day-llm-ensemble - https://github.com/luci04-bot/RFSA-Tool diff --git a/2023/CVE-2023-23999.md b/2023/CVE-2023-23999.md index f609f5013e..7393ad4b25 100644 --- a/2023/CVE-2023-23999.md +++ b/2023/CVE-2023-23999.md @@ -10,7 +10,7 @@ Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterI ### POC #### Reference -No PoCs from references. +- https://patchstack.com/database/vulnerability/google-analytics-for-wordpress/wordpress-google-analytics-by-monsterinsights-plugin-8-14-0-cross-site-scripting-xss-vulnerability?_s_id=cve #### Github - https://github.com/20142995/nuclei-templates diff --git a/2023/CVE-2023-30253.md b/2023/CVE-2023-30253.md index 133b1226c6..e3b6efad55 100644 --- a/2023/CVE-2023-30253.md +++ b/2023/CVE-2023-30253.md @@ -15,6 +15,7 @@ Dolibarr before 17.0.1 allows remote code execution by an authenticated user via #### Github - https://github.com/04Shivam/CVE-2023-30253-Exploit - https://github.com/Esther7171/HTB-Walkthroughs +- https://github.com/Esther7171/HTB-Write-up - https://github.com/Milamagof/boardlight-walkthrough - https://github.com/Rubikcuv5/cve-2023-30253 - https://github.com/YuchaoZheng88/HTB-prepare diff --git a/2023/CVE-2023-4130.md b/2023/CVE-2023-4130.md index 08b297347e..86ebca8611 100644 --- a/2023/CVE-2023-4130.md +++ b/2023/CVE-2023-4130.md @@ -15,5 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix wr No PoCs from references. #### Github +- https://github.com/BitsByWill/ksmbd-n-day +- https://github.com/PuddinCat/GithubRepoSpider - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2023/CVE-2023-4603.md b/2023/CVE-2023-4603.md index 73134051b3..cf9041e292 100644 --- a/2023/CVE-2023-4603.md +++ b/2023/CVE-2023-4603.md @@ -10,7 +10,7 @@ The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflect ### POC #### Reference -No PoCs from references. +- https://drive.google.com/file/d/1cRVH7Oz6M2U2XTbNAmm43PDKBw6FzShA/view?usp=sharing #### Github - https://github.com/20142995/nuclei-templates diff --git a/2023/CVE-2023-49109.md b/2023/CVE-2023-49109.md index 431fc9c81a..4f307af445 100644 --- a/2023/CVE-2023-49109.md +++ b/2023/CVE-2023-49109.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/ARPSyndicate/cve-scores - https://github.com/Drun1baby/JavaSecurityLearning +- https://github.com/PuddinCat/GithubRepoSpider - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3-2-0 - https://github.com/tanjiti/sec_profile diff --git a/2023/CVE-2023-52440.md b/2023/CVE-2023-52440.md index b0e8cff901..9614a91df0 100644 --- a/2023/CVE-2023-52440.md +++ b/2023/CVE-2023-52440.md @@ -15,5 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix sl No PoCs from references. #### Github +- https://github.com/BitsByWill/ksmbd-n-day +- https://github.com/PuddinCat/GithubRepoSpider - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2023/CVE-2023-5678.md b/2023/CVE-2023-5678.md index 167cc2d394..3890042a12 100644 --- a/2023/CVE-2023-5678.md +++ b/2023/CVE-2023-5678.md @@ -35,6 +35,7 @@ No PoCs from references. - https://github.com/gitacme/cve_tools - https://github.com/gitpod-io/leeway - https://github.com/hsmmi/vulnerability-api +- https://github.com/jblo/Github-Advisory-Downloader - https://github.com/jtgorny/cve-scanning - https://github.com/mikedzikowski/cs-vuln-images-report - https://github.com/mmbazm/secure_license_server diff --git a/2023/CVE-2023-7209.md b/2023/CVE-2023-7209.md new file mode 100644 index 0000000000..4872c23cc9 --- /dev/null +++ b/2023/CVE-2023-7209.md @@ -0,0 +1,18 @@ +### [CVE-2023-7209](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7209) +![](https://img.shields.io/static/v1?label=Product&message=Router&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=2.0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-404%20Denial%20of%20Service&color=brightgreen) + +### Description + +A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/device_reset.cgi of the component Device Reset Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249758 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. +Eine kritische Schwachstelle wurde in Uniway Router bis 2.0 ausgemacht. Betroffen davon ist ein unbekannter Prozess der Datei /boaform/device_reset.cgi der Komponente Device Reset Handler. Durch die Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. + +### POC + +#### Reference +- https://drive.google.com/file/d/1XDZA4ibiYNcxTwq60vYCr03_6M_cvJ_2/view?usp=sharing + +#### Github +No PoCs found on GitHub currently. + diff --git a/2024/CVE-2024-0044.md b/2024/CVE-2024-0044.md index c657960490..ead094633c 100644 --- a/2024/CVE-2024-0044.md +++ b/2024/CVE-2024-0044.md @@ -40,6 +40,7 @@ In createSessionInternal of PackageInstallerService.java, there is a possible ru - https://github.com/fboaventura/awesome-starts - https://github.com/gmh5225/awesome-game-security - https://github.com/hunter24x24/cve_2024_0044 +- https://github.com/l1ackernishan/CVE-2024-0044 - https://github.com/nahid0x1/CVE-2024-0044 - https://github.com/nexussecelite/EvilDroid - https://github.com/nishan0x1/CVE-2024-0044 diff --git a/2024/CVE-2024-12345.md b/2024/CVE-2024-12345.md index 708e2192a4..7d8371a982 100644 --- a/2024/CVE-2024-12345.md +++ b/2024/CVE-2024-12345.md @@ -42,6 +42,7 @@ No PoCs from references. - https://github.com/kasturixbm5/Automate-this-shi - https://github.com/kerouacwannabe/CVE-Vuln-Evaluator - https://github.com/kmukoo101/security_tools +- https://github.com/marklechner/cvewb - https://github.com/maxime67/ONE_sync - https://github.com/msumari/vulnagent - https://github.com/n3ptune-plan3t/pacguard diff --git a/2024/CVE-2024-20931.md b/2024/CVE-2024-20931.md index 20200ec89c..90d3382bf1 100644 --- a/2024/CVE-2024-20931.md +++ b/2024/CVE-2024-20931.md @@ -51,6 +51,7 @@ No PoCs from references. - https://github.com/laoa1573/wy876 - https://github.com/netlas-io/netlas-dorks - https://github.com/nomi-sec/PoC-in-GitHub +- https://github.com/nullcult/CVE_2024_209321 - https://github.com/oLy0/Vulnerability - https://github.com/sampsonv/github-trending - https://github.com/tanjiti/sec_profile diff --git a/2024/CVE-2024-21413.md b/2024/CVE-2024-21413.md index f59924deee..2cec9fc284 100644 --- a/2024/CVE-2024-21413.md +++ b/2024/CVE-2024-21413.md @@ -41,6 +41,7 @@ Microsoft Outlook Remote Code Execution Vulnerability - https://github.com/GhostTroops/TOP - https://github.com/GuiMatosInfra/explorer2sectool - https://github.com/HYZ3K/CVE-2024-21413 +- https://github.com/HaroldFinchIFT/vuln-nist-mcp-server - https://github.com/Hunterdii/TryHackMe-Roadmap - https://github.com/Hunterdii/tryhackme-free-rooms - https://github.com/MQKGitHub/Exploitation-Basics diff --git a/2024/CVE-2024-2242.md b/2024/CVE-2024-2242.md index 3b599701dd..203a972449 100644 --- a/2024/CVE-2024-2242.md +++ b/2024/CVE-2024-2242.md @@ -15,6 +15,7 @@ No PoCs from references. #### Github - https://github.com/20142995/nuclei-templates - https://github.com/ARPSyndicate/cve-scores +- https://github.com/BharatCyberForce/wp-hunter - https://github.com/Chocapikk/wpprobe - https://github.com/RandomRobbieBF/CVE-2024-2242 - https://github.com/Zzl0y/bugs-and-arts diff --git a/2024/CVE-2024-23334.md b/2024/CVE-2024-23334.md index ee2df0227b..237007df6e 100644 --- a/2024/CVE-2024-23334.md +++ b/2024/CVE-2024-23334.md @@ -25,6 +25,7 @@ aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. - https://github.com/Linxloop/fork_POC - https://github.com/Ostorlab/KEV - https://github.com/Pylonet/CVE-2024-23334 +- https://github.com/Seby26Dev/-HTB-Chemistry - https://github.com/SecureDoughnut/Tinkoff-CTF-2024-lohness - https://github.com/TheRedP4nther/LFI-aiohttp-CVE-2024-23334-PoC - https://github.com/Warren-Jace/poc-doc diff --git a/2024/CVE-2024-2812.md b/2024/CVE-2024-2812.md index e8dfb70caf..553a50aaa4 100644 --- a/2024/CVE-2024-2812.md +++ b/2024/CVE-2024-2812.md @@ -15,6 +15,7 @@ Es wurde eine Schwachstelle in Tenda AC15 15.03.05.18/15.03.20_multi ausgemacht. - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V1.0%20V15.03.20_multi/formWriteFacMac.md #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/LaPhilosophie/IoT-vulnerable - https://github.com/NaInSec/CVE-LIST - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2024/CVE-2024-28739.md b/2024/CVE-2024-28739.md index 78b5f440ca..3d6273ae18 100644 --- a/2024/CVE-2024-28739.md +++ b/2024/CVE-2024-28739.md @@ -14,5 +14,5 @@ An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitr - https://febin0x4e4a.wordpress.com/2024/03/07/xss-to-one-click-rce-in-koha-ils/ #### Github -No PoCs found on GitHub currently. +- https://github.com/ARPSyndicate/cve-scores diff --git a/2024/CVE-2024-3094.md b/2024/CVE-2024-3094.md index b7814117e9..23d0ac6704 100644 --- a/2024/CVE-2024-3094.md +++ b/2024/CVE-2024-3094.md @@ -152,6 +152,7 @@ Malicious code was discovered in the upstream tarballs of xz, starting with vers - https://github.com/lypd0/CVE-2024-3094-Vulnerabity-Checker - https://github.com/marcelofmatos/ssh-xz-backdoor - https://github.com/marcoramilli/marcoramilli +- https://github.com/marklechner/cvewb - https://github.com/mauvehed/starred - https://github.com/mesutgungor/xz-backdoor-vulnerability - https://github.com/mightysai1997/CVE-2024-3094 diff --git a/2024/CVE-2024-34444.md b/2024/CVE-2024-34444.md new file mode 100644 index 0000000000..d42ec86cd8 --- /dev/null +++ b/2024/CVE-2024-34444.md @@ -0,0 +1,17 @@ +### [CVE-2024-34444](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34444) +![](https://img.shields.io/static/v1?label=Product&message=Slider%20Revolution&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen) + +### Description + +Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/BharatCyberForce/wp-hunter + diff --git a/2024/CVE-2024-37437.md b/2024/CVE-2024-37437.md index 87b69929c0..bb542cd8eb 100644 --- a/2024/CVE-2024-37437.md +++ b/2024/CVE-2024-37437.md @@ -14,5 +14,6 @@ No PoCs from references. #### Github - https://github.com/20142995/nuclei-templates +- https://github.com/BharatCyberForce/wp-hunter - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2024/CVE-2024-40570.md b/2024/CVE-2024-40570.md new file mode 100644 index 0000000000..626fa2b500 --- /dev/null +++ b/2024/CVE-2024-40570.md @@ -0,0 +1,17 @@ +### [CVE-2024-40570](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40570) +![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) + +### Description + +SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component. + +### POC + +#### Reference +- https://github.com/seacms-net/CMS/issues/20 + +#### Github +No PoCs found on GitHub currently. + diff --git a/2024/CVE-2024-4701.md b/2024/CVE-2024-4701.md index 7909d990e3..69939c7c96 100644 --- a/2024/CVE-2024-4701.md +++ b/2024/CVE-2024-4701.md @@ -17,4 +17,5 @@ No PoCs from references. - https://github.com/JoeBeeton/CVE-2024-4701-POC - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/nomi-sec/PoC-in-GitHub +- https://github.com/zulloper/cve-poc diff --git a/2024/CVE-2024-4704.md b/2024/CVE-2024-4704.md index 4b532cc590..c0c5017d1b 100644 --- a/2024/CVE-2024-4704.md +++ b/2024/CVE-2024-4704.md @@ -14,6 +14,7 @@ The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allow #### Github - https://github.com/20142995/nuclei-templates +- https://github.com/BharatCyberForce/wp-hunter - https://github.com/Chocapikk/wpprobe - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2024/CVE-2024-5416.md b/2024/CVE-2024-5416.md index 96643c8b63..e9e97285ed 100644 --- a/2024/CVE-2024-5416.md +++ b/2024/CVE-2024-5416.md @@ -14,6 +14,7 @@ No PoCs from references. #### Github - https://github.com/20142995/nuclei-templates +- https://github.com/BharatCyberForce/wp-hunter - https://github.com/cyb3r-w0lf/nuclei-template-collection - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2024/CVE-2024-6387.md b/2024/CVE-2024-6387.md index 5f15568eab..020c86852c 100644 --- a/2024/CVE-2024-6387.md +++ b/2024/CVE-2024-6387.md @@ -76,6 +76,7 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). - https://github.com/Mufti22/CVE-2024-6387-checkher - https://github.com/MuhammadMuazen/thagarat - https://github.com/NathanielChit/my-awesome-stars +- https://github.com/OhDamnn/Noregressh - https://github.com/Ostorlab/KEV - https://github.com/P4x1s/CVE-2024-6387 - https://github.com/Passyed/regreSSHion-Fix diff --git a/2024/CVE-2024-8107.md b/2024/CVE-2024-8107.md index a193bc5e32..94bd138d8f 100644 --- a/2024/CVE-2024-8107.md +++ b/2024/CVE-2024-8107.md @@ -14,5 +14,6 @@ No PoCs from references. #### Github - https://github.com/20142995/nuclei-templates +- https://github.com/BharatCyberForce/wp-hunter - https://github.com/cyb3r-w0lf/nuclei-template-collection diff --git a/2024/CVE-2024-9264.md b/2024/CVE-2024-9264.md index 6e1c668229..89ecb34a9a 100644 --- a/2024/CVE-2024-9264.md +++ b/2024/CVE-2024-9264.md @@ -41,6 +41,7 @@ No PoCs from references. - https://github.com/cyb3r-w0lf/nuclei-template-collection - https://github.com/defHawk-tech/CVEs - https://github.com/eeeeeeeeee-code/POC +- https://github.com/fcoomans/HTB-machines - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/greenberglinken/2023hvv_1 - https://github.com/hacieda/planning.htb diff --git a/2025/CVE-2025-10148.md b/2025/CVE-2025-10148.md index e90ea7cbae..5530c92632 100644 --- a/2025/CVE-2025-10148.md +++ b/2025/CVE-2025-10148.md @@ -21,4 +21,5 @@ No PoCs from references. #### Github - https://github.com/8-cm/kube-dump +- https://github.com/ARPSyndicate/cve-scores diff --git a/2025/CVE-2025-10372.md b/2025/CVE-2025-10372.md index 43f91b035a..172c785017 100644 --- a/2025/CVE-2025-10372.md +++ b/2025/CVE-2025-10372.md @@ -25,5 +25,7 @@ Eine Schwachstelle wurde in Portabilis i-Educar bis 2.10 gefunden. Hierbei geht No PoCs from references. #### Github +- https://github.com/KarinaGante/KG-Sec +- https://github.com/KarinaGante/KarinaGante - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2025/CVE-2025-10373.md b/2025/CVE-2025-10373.md index b96b6aed9e..46b4ecd292 100644 --- a/2025/CVE-2025-10373.md +++ b/2025/CVE-2025-10373.md @@ -25,5 +25,7 @@ Es wurde eine Schwachstelle in Portabilis i-Educar bis 2.10 entdeckt. Betroffen No PoCs from references. #### Github +- https://github.com/KarinaGante/KG-Sec +- https://github.com/KarinaGante/KarinaGante - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2025/CVE-2025-10400.md b/2025/CVE-2025-10400.md new file mode 100644 index 0000000000..33c616e667 --- /dev/null +++ b/2025/CVE-2025-10400.md @@ -0,0 +1,19 @@ +### [CVE-2025-10400](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10400) +![](https://img.shields.io/static/v1?label=Product&message=Food%20Ordering%20Management%20System&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen) + +### Description + +A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticket_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. +In SourceCodester Food Ordering Management System 1.0 ist eine Schwachstelle entdeckt worden. Betroffen ist eine unbekannte Funktion der Datei /routers/ticket-message.php. Dank Manipulation des Arguments ticket_id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Ein Angriff ist aus der Distanz möglich. Der Exploit steht zur öffentlichen Verfügung. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/fkie-cad/nvd-json-data-feeds + diff --git a/2025/CVE-2025-10403.md b/2025/CVE-2025-10403.md new file mode 100644 index 0000000000..be4958161b --- /dev/null +++ b/2025/CVE-2025-10403.md @@ -0,0 +1,19 @@ +### [CVE-2025-10403](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10403) +![](https://img.shields.io/static/v1?label=Product&message=Beauty%20Parlour%20Management%20System&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=1.1%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen) + +### Description + +A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. +In PHPGurukul Beauty Parlour Management System 1.1 wurde eine Schwachstelle gefunden. Es betrifft eine unbekannte Funktion der Datei /admin/view-enquiry.php. Durch Manipulation des Arguments viewid mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann remote ausgeführt werden. Der Exploit ist öffentlich verfügbar und könnte genutzt werden. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/fkie-cad/nvd-json-data-feeds + diff --git a/2025/CVE-2025-10404.md b/2025/CVE-2025-10404.md new file mode 100644 index 0000000000..1bb02f6c0f --- /dev/null +++ b/2025/CVE-2025-10404.md @@ -0,0 +1,19 @@ +### [CVE-2025-10404](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10404) +![](https://img.shields.io/static/v1?label=Product&message=Baptism%20Information%20Management%20System&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen) + +### Description + +A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. +In itsourcecode Baptism Information Management System 1.0 ist eine Schwachstelle entdeckt worden. Das betrifft eine unbekannte Funktionalität der Datei /rptbaptismal.php. Mittels dem Manipulieren des Arguments ID mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Die Ausnutzung wurde veröffentlicht und kann verwendet werden. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/fkie-cad/nvd-json-data-feeds + diff --git a/2025/CVE-2025-10405.md b/2025/CVE-2025-10405.md new file mode 100644 index 0000000000..390d2043ea --- /dev/null +++ b/2025/CVE-2025-10405.md @@ -0,0 +1,19 @@ +### [CVE-2025-10405](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10405) +![](https://img.shields.io/static/v1?label=Product&message=Baptism%20Information%20Management%20System&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen) + +### Description + +A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. +Eine Schwachstelle wurde in itsourcecode Baptism Information Management System 1.0 gefunden. Dies betrifft einen unbekannten Teil der Datei /listbaptism.php. Mittels Manipulieren des Arguments bapt_id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/fkie-cad/nvd-json-data-feeds + diff --git a/2025/CVE-2025-1477.md b/2025/CVE-2025-1477.md new file mode 100644 index 0000000000..d9a0d0c5f2 --- /dev/null +++ b/2025/CVE-2025-1477.md @@ -0,0 +1,19 @@ +### [CVE-2025-1477](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1477) +![](https://img.shields.io/static/v1?label=Product&message=GitLab&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=18.1%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=18.2%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=8.14%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-770%3A%20Allocation%20of%20Resources%20Without%20Limits%20or%20Throttling&color=brightgreen) + +### Description + +An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated user to create a denial of service condition by sending specially crafted payloads to specific integration API endpoints. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-21692.md b/2025/CVE-2025-21692.md index abdffe22b5..da1588fdf0 100644 --- a/2025/CVE-2025-21692.md +++ b/2025/CVE-2025-21692.md @@ -21,5 +21,8 @@ In the Linux kernel, the following vulnerability has been resolved:net: sched: f - https://git.kernel.org/stable/c/f6b0f05fbfa4044f890e8a348288c0d9a20bd1d0 #### Github +- https://github.com/PuddinCat/GithubRepoSpider +- https://github.com/nomi-sec/PoC-in-GitHub +- https://github.com/volticks/CVE-2025-21692-poc - https://github.com/w4zu/Debian_security diff --git a/2025/CVE-2025-21756.md b/2025/CVE-2025-21756.md index 67f5e1233b..bf60863f72 100644 --- a/2025/CVE-2025-21756.md +++ b/2025/CVE-2025-21756.md @@ -26,6 +26,7 @@ No PoCs from references. - https://github.com/nomi-sec/PoC-in-GitHub - https://github.com/plzheheplztrying/cve_monitor - https://github.com/tanjiti/sec_profile +- https://github.com/volticks/CVE-2025-21692-poc - https://github.com/w4zu/Debian_security - https://github.com/xairy/linux-kernel-exploitation diff --git a/2025/CVE-2025-2498.md b/2025/CVE-2025-2498.md new file mode 100644 index 0000000000..77907834e5 --- /dev/null +++ b/2025/CVE-2025-2498.md @@ -0,0 +1,19 @@ +### [CVE-2025-2498](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2498) +![](https://img.shields.io/static/v1?label=Product&message=GitLab&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=12.0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=18.1%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Version&message=18.2%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-1220%3A%20Insufficient%20Granularity%20of%20Access%20Control&color=brightgreen) + +### Description + +An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-29927.md b/2025/CVE-2025-29927.md index 2c508123a5..fae2830d8b 100644 --- a/2025/CVE-2025-29927.md +++ b/2025/CVE-2025-29927.md @@ -467,6 +467,8 @@ No PoCs from references. - https://github.com/miguelhuayhua/ecommerce - https://github.com/miknivin/cliq - https://github.com/miknivin/qoncept-crm +- https://github.com/milagresjr/alfaenu_front +- https://github.com/ming-kwee/labamap-fe - https://github.com/miteshpr97/stock-count - https://github.com/moften/CVE-2025-29927 - https://github.com/mohammedtanvir93/finance-client @@ -519,6 +521,7 @@ No PoCs from references. - https://github.com/q-allen/Lending-AI - https://github.com/quanghv20/my-cms-fe - https://github.com/quanghv20/nextjs-admin-dashboard +- https://github.com/quinnnaira/admin_dashboard - https://github.com/rahulchangra/dashboard - https://github.com/rai-rose/LORA-LendingAI - https://github.com/rai-rose/Lending-AI diff --git a/2025/CVE-2025-3208.md b/2025/CVE-2025-3208.md new file mode 100644 index 0000000000..f4eeecf16b --- /dev/null +++ b/2025/CVE-2025-3208.md @@ -0,0 +1,19 @@ +### [CVE-2025-3208](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3208) +![](https://img.shields.io/static/v1?label=Product&message=Patient%20Record%20Management%20System&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=1.0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=Injection&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=SQL%20Injection&color=brightgreen) + +### Description + +A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xray_print.php. The manipulation of the argument itr_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. +Es wurde eine kritische Schwachstelle in code-projects Patient Record Management System 1.0 ausgemacht. Es geht dabei um eine nicht klar definierte Funktion der Datei /xray_print.php. Mit der Manipulation des Arguments itr_no mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. + +### POC + +#### Reference +- https://github.com/ZOKEYE/CVE/blob/main/cve2.md + +#### Github +No PoCs found on GitHub currently. + diff --git a/2025/CVE-2025-32451.md b/2025/CVE-2025-32451.md index 2f9f31fb66..cffe45f31f 100644 --- a/2025/CVE-2025-32451.md +++ b/2025/CVE-2025-32451.md @@ -13,5 +13,6 @@ A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to t - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2202 #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2025/CVE-2025-3248.md b/2025/CVE-2025-3248.md index b40b7acf99..26e7aba5a8 100644 --- a/2025/CVE-2025-3248.md +++ b/2025/CVE-2025-3248.md @@ -34,6 +34,7 @@ Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v - https://github.com/Praison001/CVE-2025-3248 - https://github.com/PuddinCat/CVE-2025-3248-POC - https://github.com/PuddinCat/GithubRepoSpider +- https://github.com/Rahu7p/MyLangflow - https://github.com/Threekiii/Awesome-POC - https://github.com/Threekiii/CVE - https://github.com/Vip3rLi0n/CVE-2025-3248 diff --git a/2025/CVE-2025-3515.md b/2025/CVE-2025-3515.md index 745417a48c..ccece2317c 100644 --- a/2025/CVE-2025-3515.md +++ b/2025/CVE-2025-3515.md @@ -19,6 +19,7 @@ No PoCs from references. - https://github.com/Professor6T9/CVE-2025-3515 - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/blueisbeautiful/CVE-2025-3515 +- https://github.com/brokendreamsclub/CVE-2025-3515 - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/nomi-sec/PoC-in-GitHub - https://github.com/plzheheplztrying/cve_monitor diff --git a/2025/CVE-2025-40762.md b/2025/CVE-2025-40762.md new file mode 100644 index 0000000000..37472cc178 --- /dev/null +++ b/2025/CVE-2025-40762.md @@ -0,0 +1,18 @@ +### [CVE-2025-40762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40762) +![](https://img.shields.io/static/v1?label=Product&message=Simcenter%20Femap%20V2406&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Simcenter%20Femap%20V2412&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-787%3A%20Out-of-bounds%20Write&color=brightgreen) + +### Description + +A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted STP file. This could allow an attacker to execute code in the context of the current process.(ZDI-CAN-26692) + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-40764.md b/2025/CVE-2025-40764.md new file mode 100644 index 0000000000..2e91c0e091 --- /dev/null +++ b/2025/CVE-2025-40764.md @@ -0,0 +1,18 @@ +### [CVE-2025-40764](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40764) +![](https://img.shields.io/static/v1?label=Product&message=Simcenter%20Femap%20V2406&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Simcenter%20Femap%20V2412&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-125%3A%20Out-of-bounds%20Read&color=brightgreen) + +### Description + +A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-40795.md b/2025/CVE-2025-40795.md new file mode 100644 index 0000000000..df23e0aa1d --- /dev/null +++ b/2025/CVE-2025-40795.md @@ -0,0 +1,19 @@ +### [CVE-2025-40795](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40795) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V4.1&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V5.0&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=User%20Management%20Component%20(UMC)&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-121%3A%20Stack-based%20Buffer%20Overflow&color=brightgreen) + +### Description + +A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-40796.md b/2025/CVE-2025-40796.md new file mode 100644 index 0000000000..4f2d3c4dee --- /dev/null +++ b/2025/CVE-2025-40796.md @@ -0,0 +1,19 @@ +### [CVE-2025-40796](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40796) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V4.1&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V5.0&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=User%20Management%20Component%20(UMC)&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-125%3A%20Out-of-bounds%20Read&color=brightgreen) + +### Description + +A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-40797.md b/2025/CVE-2025-40797.md new file mode 100644 index 0000000000..e26b7e5132 --- /dev/null +++ b/2025/CVE-2025-40797.md @@ -0,0 +1,19 @@ +### [CVE-2025-40797](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40797) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V4.1&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V5.0&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=User%20Management%20Component%20(UMC)&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-125%3A%20Out-of-bounds%20Read&color=brightgreen) + +### Description + +A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-40798.md b/2025/CVE-2025-40798.md new file mode 100644 index 0000000000..b23cd75f50 --- /dev/null +++ b/2025/CVE-2025-40798.md @@ -0,0 +1,19 @@ +### [CVE-2025-40798](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40798) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V4.1&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PCS%20neo%20V5.0&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=User%20Management%20Component%20(UMC)&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-125%3A%20Out-of-bounds%20Read&color=brightgreen) + +### Description + +A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-45582.md b/2025/CVE-2025-45582.md index 767e387beb..5e84bbd532 100644 --- a/2025/CVE-2025-45582.md +++ b/2025/CVE-2025-45582.md @@ -13,6 +13,7 @@ GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TA - https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/LinuxUser255/hardn_debian_docker_image - https://github.com/OpenSource-For-Freedom/hardn_debian_docker_image - https://github.com/Security-International-Group/HARDN_DOCKER diff --git a/2025/CVE-2025-47783.md b/2025/CVE-2025-47783.md index e22d3c4d97..7230e663bf 100644 --- a/2025/CVE-2025-47783.md +++ b/2025/CVE-2025-47783.md @@ -13,5 +13,5 @@ Label Studio is a multi-type data labeling and annotation tool. A vulnerability - https://github.com/HumanSignal/label-studio/security/advisories/GHSA-8jhr-wpcm-hh4h #### Github -No PoCs found on GitHub currently. +- https://github.com/Medok228/Medok228 diff --git a/2025/CVE-2025-48543.md b/2025/CVE-2025-48543.md index b57f8cab35..6abcbe1746 100644 --- a/2025/CVE-2025-48543.md +++ b/2025/CVE-2025-48543.md @@ -19,5 +19,8 @@ No PoCs from references. - https://github.com/ARPSyndicate/cve-scores - https://github.com/CryptoGenNepal/CVE-KEV-RSS - https://github.com/DevGreick/devgreick +- https://github.com/PuddinCat/GithubRepoSpider - https://github.com/fkie-cad/nvd-json-data-feeds +- https://github.com/gamesarchive/CVE-2025-48543 +- https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2025/CVE-2025-48924.md b/2025/CVE-2025-48924.md index 23685e44aa..8e9c2c6a35 100644 --- a/2025/CVE-2025-48924.md +++ b/2025/CVE-2025-48924.md @@ -16,6 +16,8 @@ No PoCs from references. #### Github - https://github.com/ARPSyndicate/cve-scores - https://github.com/Codegass/AAA-Issue-Refactor +- https://github.com/LocalPiperITMO/information-security +- https://github.com/awakelife93/kotlin-clean-architecture-multimodule - https://github.com/epimorphics/lib - https://github.com/marcieldeg/access2excel - https://github.com/mathieu1987-droid/reu-alt-demo diff --git a/2025/CVE-2025-5369.md b/2025/CVE-2025-5369.md index de7efe4038..f28a9830d6 100644 --- a/2025/CVE-2025-5369.md +++ b/2025/CVE-2025-5369.md @@ -16,4 +16,5 @@ Es wurde eine kritische Schwachstelle in SourceCodester PHP Display Username Aft #### Github - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +- https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 diff --git a/2025/CVE-2025-53691.md b/2025/CVE-2025-53691.md index f67ddea7c6..e1d036a3c1 100644 --- a/2025/CVE-2025-53691.md +++ b/2025/CVE-2025-53691.md @@ -18,6 +18,8 @@ Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager ( - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/blueisbeautiful/CVE-2025-53691 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +- https://github.com/brokendreamsclub/CVE-2025-53691 +- https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2025/CVE-2025-53693.md b/2025/CVE-2025-53693.md index a193d55ff2..c04106b313 100644 --- a/2025/CVE-2025-53693.md +++ b/2025/CVE-2025-53693.md @@ -18,6 +18,8 @@ Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/blueisbeautiful/CVE-2025-53693 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +- https://github.com/brokendreamsclub/CVE-2025-53693 +- https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2025/CVE-2025-53694.md b/2025/CVE-2025-53694.md index 2c6a121bb8..2b88ed6bb0 100644 --- a/2025/CVE-2025-53694.md +++ b/2025/CVE-2025-53694.md @@ -17,6 +17,8 @@ Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Site - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/blueisbeautiful/CVE-2025-53694 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +- https://github.com/brokendreamsclub/CVE-2025-53694 +- https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2025/CVE-2025-53838.md b/2025/CVE-2025-53838.md index b2f1bca99d..164867080d 100644 --- a/2025/CVE-2025-53838.md +++ b/2025/CVE-2025-53838.md @@ -13,5 +13,5 @@ LinkAce is a self-hosted archive to collect website links. A stored cross-site s - https://github.com/Kovah/LinkAce/security/advisories/GHSA-vwmx-v9qf-q656 #### Github -No PoCs found on GitHub currently. +- https://github.com/Medok228/Medok228 diff --git a/2025/CVE-2025-54236.md b/2025/CVE-2025-54236.md index faaafbfefc..f0c5b73197 100644 --- a/2025/CVE-2025-54236.md +++ b/2025/CVE-2025-54236.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/amalpvatayam67/day01-sessionreaper-lab - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/nomi-sec/PoC-in-GitHub +- https://github.com/thexnumb/thexwriteup diff --git a/2025/CVE-2025-54309.md b/2025/CVE-2025-54309.md index 9ef2e92d71..ea9e5586a5 100644 --- a/2025/CVE-2025-54309.md +++ b/2025/CVE-2025-54309.md @@ -18,6 +18,7 @@ No PoCs from references. - https://github.com/DevGreick/devgreick - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/blueisbeautiful/CVE-2025-54309 +- https://github.com/brokendreamsclub/CVE-2025-54309 - https://github.com/foregenix/CVE-2025-54309 - https://github.com/issamjr/CVE-2025-54309-EXPLOIT - https://github.com/nomi-sec/PoC-in-GitHub diff --git a/2025/CVE-2025-54500.md b/2025/CVE-2025-54500.md index af268240eb..71d89a280b 100644 --- a/2025/CVE-2025-54500.md +++ b/2025/CVE-2025-54500.md @@ -25,4 +25,5 @@ No PoCs from references. #### Github - https://github.com/fkie-cad/nvd-json-data-feeds +- https://github.com/pinoyvendetta/pv-nodejs-layer-7 diff --git a/2025/CVE-2025-54988.md b/2025/CVE-2025-54988.md index b8b56fe99a..3f49ddc011 100644 --- a/2025/CVE-2025-54988.md +++ b/2025/CVE-2025-54988.md @@ -16,4 +16,5 @@ No PoCs from references. - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/mgthuramoemyint/POC-CVE-2025-54988 - https://github.com/nomi-sec/PoC-in-GitHub +- https://github.com/righettod/toolbox-pentest-web diff --git a/2025/CVE-2025-55319.md b/2025/CVE-2025-55319.md index e7017bde5b..a676eff112 100644 --- a/2025/CVE-2025-55319.md +++ b/2025/CVE-2025-55319.md @@ -13,6 +13,7 @@ Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/tanjiti/sec_profile diff --git a/2025/CVE-2025-55748.md b/2025/CVE-2025-55748.md index 6b20097e0d..6741a5a819 100644 --- a/2025/CVE-2025-55748.md +++ b/2025/CVE-2025-55748.md @@ -13,5 +13,6 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/tanjiti/sec_profile diff --git a/2025/CVE-2025-56413.md b/2025/CVE-2025-56413.md index a08ee84bf3..1ce34ba750 100644 --- a/2025/CVE-2025-56413.md +++ b/2025/CVE-2025-56413.md @@ -13,5 +13,6 @@ OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowi No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2025/CVE-2025-57760.md b/2025/CVE-2025-57760.md index c8569eaa43..2b545ddaaf 100644 --- a/2025/CVE-2025-57760.md +++ b/2025/CVE-2025-57760.md @@ -16,6 +16,7 @@ Langflow is a tool for building and deploying AI-powered agents and workflows. A - https://github.com/ARPSyndicate/cve-scores - https://github.com/AngelPalominoF/Martina-IA - https://github.com/Pawan22104168/Langflow_UI +- https://github.com/Rahu7p/MyLangflow - https://github.com/arsharma2005/adding-button - https://github.com/aryan-spanda/langflow-main - https://github.com/langflow-ai/langflow diff --git a/2025/CVE-2025-57819.md b/2025/CVE-2025-57819.md index 2748575e8e..bd28017bfc 100644 --- a/2025/CVE-2025-57819.md +++ b/2025/CVE-2025-57819.md @@ -25,6 +25,7 @@ No PoCs from references. - https://github.com/PuddinCat/GithubRepoSpider - https://github.com/Sucuri-Labs/CVE-2025-57819-ioc-check - https://github.com/blueisbeautiful/CVE-2025-57819 +- https://github.com/brokendreamsclub/CVE-2025-57819 - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/net-hex/CVE-2025-57819 - https://github.com/nomi-sec/PoC-in-GitHub @@ -32,4 +33,5 @@ No PoCs from references. - https://github.com/rxerium/stars - https://github.com/ums91/CISA_BOT - https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819 +- https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC diff --git a/2025/CVE-2025-58754.md b/2025/CVE-2025-58754.md index 13bf6854e1..8b4afec5c9 100644 --- a/2025/CVE-2025-58754.md +++ b/2025/CVE-2025-58754.md @@ -13,5 +13,6 @@ Axios is a promise based HTTP client for the browser and Node.js. When Axios pri No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2025/CVE-2025-59041.md b/2025/CVE-2025-59041.md new file mode 100644 index 0000000000..99f65d6c77 --- /dev/null +++ b/2025/CVE-2025-59041.md @@ -0,0 +1,17 @@ +### [CVE-2025-59041](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59041) +![](https://img.shields.io/static/v1?label=Product&message=claude-code&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=%3C%201.0.105%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%3A%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')&color=brightgreen) + +### Description + +Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/ARPSyndicate/cve-scores + diff --git a/2025/CVE-2025-59052.md b/2025/CVE-2025-59052.md index 3dce7931bf..f405b6c177 100644 --- a/2025/CVE-2025-59052.md +++ b/2025/CVE-2025-59052.md @@ -21,5 +21,6 @@ Angular is a development platform for building mobile and desktop web applicatio No PoCs from references. #### Github +- https://github.com/ARPSyndicate/cve-scores - https://github.com/rix4uni/medium-writeups diff --git a/2025/CVE-2025-7775.md b/2025/CVE-2025-7775.md index 99b5e89b3d..28bae7325f 100644 --- a/2025/CVE-2025-7775.md +++ b/2025/CVE-2025-7775.md @@ -22,6 +22,7 @@ No PoCs from references. - https://github.com/CryptoGenNepal/CVE-KEV-RSS - https://github.com/DevGreick/devgreick - https://github.com/PuddinCat/GithubRepoSpider +- https://github.com/alukashenkov/VM-Agent - https://github.com/fkie-cad/nvd-json-data-feeds - https://github.com/fox-it/citrix-netscaler-triage - https://github.com/hacker-r3volv3r/CVE-2025-7775-PoC diff --git a/2025/CVE-2025-8088.md b/2025/CVE-2025-8088.md index e5a9b91923..4afe7b436d 100644 --- a/2025/CVE-2025-8088.md +++ b/2025/CVE-2025-8088.md @@ -46,6 +46,7 @@ A path traversal vulnerability affecting the Windows version of WinRAR allows th - https://github.com/tanjiti/sec_profile - https://github.com/tartalu/CVE-2025-8088 - https://github.com/tasox/rarADSExtractor +- https://github.com/techcorp/CVE-2025-8088-Exploit - https://github.com/thexnumb/thexwriteup - https://github.com/travisbgreen/cve-2025-8088 - https://github.com/ums91/CISA_BOT diff --git a/2025/CVE-2025-9086.md b/2025/CVE-2025-9086.md index 24681070cc..f8bfd8bc1f 100644 --- a/2025/CVE-2025-9086.md +++ b/2025/CVE-2025-9086.md @@ -120,5 +120,6 @@ No PoCs from references. #### Github - https://github.com/8-cm/kube-dump +- https://github.com/ARPSyndicate/cve-scores - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/2025/CVE-2025-9217.md b/2025/CVE-2025-9217.md new file mode 100644 index 0000000000..7f016c7e78 --- /dev/null +++ b/2025/CVE-2025-9217.md @@ -0,0 +1,17 @@ +### [CVE-2025-9217](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9217) +![](https://img.shields.io/static/v1?label=Product&message=Slider%20Revolution&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=*%20&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')&color=brightgreen) + +### Description + +The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36 via the 'used_svg' and 'used_images' parameters. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/BharatCyberForce/wp-hunter + diff --git a/github.txt b/github.txt index 0e00b7d614..a4749a01ab 100644 --- a/github.txt +++ b/github.txt @@ -1753,6 +1753,7 @@ CVE-2004-0526 - https://github.com/GuiMatosInfra/explorer2sectool CVE-2004-0526 - https://github.com/xaitax/SploitScan CVE-2004-0535 - https://github.com/ARPSyndicate/cve-scores CVE-2004-0542 - https://github.com/ARPSyndicate/cve-scores +CVE-2004-0550 - https://github.com/ARPSyndicate/cve-scores CVE-2004-0557 - https://github.com/mudongliang/LinuxFlaw CVE-2004-0557 - https://github.com/oneoy/cve- CVE-2004-0558 - https://github.com/ARPSyndicate/cvemon @@ -1828,6 +1829,7 @@ CVE-2004-1151 - https://github.com/lulugelian/CVE_2004_1151 CVE-2004-1151 - https://github.com/lulugelian/CVE_TEST CVE-2004-1152 - https://github.com/0xCyberY/CVE-T4PDF CVE-2004-1152 - https://github.com/ARPSyndicate/cvemon +CVE-2004-1166 - https://github.com/ARPSyndicate/cve-scores CVE-2004-1235 - https://github.com/0xTo/linux-kernel-exploits CVE-2004-1235 - https://github.com/ARPSyndicate/cvemon CVE-2004-1235 - https://github.com/Al1ex/LinuxEelvation @@ -2070,6 +2072,7 @@ CVE-2004-2687 - https://github.com/ARPSyndicate/cvemon CVE-2004-2687 - https://github.com/CVEDB/PoC-List CVE-2004-2687 - https://github.com/CVEDB/awesome-cve-repo CVE-2004-2687 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase4-Metasploitable2-distcc- +CVE-2004-2687 - https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 CVE-2004-2687 - https://github.com/H3xL00m/distccd_rce_CVE-2004-2687 CVE-2004-2687 - https://github.com/KirthiNadesn/Penetration_Testing_Metasploitable2 CVE-2004-2687 - https://github.com/Kr1tz3x3/HTB-Writeups @@ -3221,6 +3224,7 @@ CVE-2007-1252 - https://github.com/ARPSyndicate/cve-scores CVE-2007-1260 - https://github.com/thecybermind/w48crash CVE-2007-1286 - https://github.com/mudongliang/LinuxFlaw CVE-2007-1286 - https://github.com/oneoy/cve- +CVE-2007-1358 - https://github.com/ARPSyndicate/cve-scores CVE-2007-1371 - https://github.com/mudongliang/LinuxFlaw CVE-2007-1371 - https://github.com/oneoy/cve- CVE-2007-1383 - https://github.com/mudongliang/LinuxFlaw @@ -3383,6 +3387,7 @@ CVE-2007-2447 - https://github.com/C4ort26/CyberSecurity-portfolio- CVE-2007-2447 - https://github.com/CVEDB/PoC-List CVE-2007-2447 - https://github.com/CVEDB/awesome-cve-repo CVE-2007-2447 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase3-Metasploitable3-samba_user_map- +CVE-2007-2447 - https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 CVE-2007-2447 - https://github.com/CipherLucas/Metasploitable2-PenTest-Report CVE-2007-2447 - https://github.com/Desm0ndChan/OSCP-cheatsheet CVE-2007-2447 - https://github.com/DevinLiggins14/SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 @@ -3986,6 +3991,7 @@ CVE-2007-6697 - https://github.com/ARPSyndicate/cve-scores CVE-2007-6697 - https://github.com/mudongliang/LinuxFlaw CVE-2007-6697 - https://github.com/oneoy/cve- CVE-2007-6707 - https://github.com/ARPSyndicate/cve-scores +CVE-2007-6709 - https://github.com/ARPSyndicate/cve-scores CVE-2007-6725 - https://github.com/0xCyberY/CVE-T4PDF CVE-2007-6725 - https://github.com/ARPSyndicate/cvemon CVE-2007-6731 - https://github.com/mudongliang/LinuxFlaw @@ -4423,6 +4429,7 @@ CVE-2008-1197 - https://github.com/HectorTa1989/802.11-Wireless-Fuzzer CVE-2008-1197 - https://github.com/PleXone2019/wifuzzit CVE-2008-1197 - https://github.com/flowerhack/wifuzzit CVE-2008-1197 - https://github.com/sececter/wifuzzit +CVE-2008-1254 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1254 - https://github.com/ARPSyndicate/cvemon CVE-2008-1254 - https://github.com/CERT-hr/modified_cve-search CVE-2008-1254 - https://github.com/cve-search/cve-search @@ -4436,6 +4443,7 @@ CVE-2008-1254 - https://github.com/r3p3r/cve-search CVE-2008-1254 - https://github.com/strobes-test/st-cve-search CVE-2008-1254 - https://github.com/swastik99/cve-search CVE-2008-1254 - https://github.com/zwei2008/cve +CVE-2008-1255 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1255 - https://github.com/ARPSyndicate/cvemon CVE-2008-1255 - https://github.com/CERT-hr/modified_cve-search CVE-2008-1255 - https://github.com/cve-search/cve-search @@ -4462,6 +4470,7 @@ CVE-2008-1256 - https://github.com/r3p3r/cve-search CVE-2008-1256 - https://github.com/strobes-test/st-cve-search CVE-2008-1256 - https://github.com/swastik99/cve-search CVE-2008-1256 - https://github.com/zwei2008/cve +CVE-2008-1257 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1257 - https://github.com/ARPSyndicate/cvemon CVE-2008-1257 - https://github.com/CERT-hr/modified_cve-search CVE-2008-1257 - https://github.com/cve-search/cve-search @@ -4476,7 +4485,12 @@ CVE-2008-1257 - https://github.com/strobes-test/st-cve-search CVE-2008-1257 - https://github.com/swastik99/cve-search CVE-2008-1257 - https://github.com/zwei2008/cve CVE-2008-1258 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1259 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1260 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1261 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1264 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1265 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1266 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1304 - https://github.com/20142995/nuclei-templates CVE-2008-1334 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1372 - https://github.com/Hwangtaewon/radamsa @@ -4521,10 +4535,13 @@ CVE-2008-1490 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1499 - https://github.com/krlabs/cpanel-vulnerabilities CVE-2008-1521 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1522 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1523 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1524 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1525 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1526 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1527 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1528 - https://github.com/ARPSyndicate/cve-scores +CVE-2008-1529 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1530 - https://github.com/f-secure-foundry/advisories CVE-2008-1547 - https://github.com/ARPSyndicate/cve-scores CVE-2008-1547 - https://github.com/POORVAJA-195/Nuclei-Analysis-main @@ -4675,6 +4692,7 @@ CVE-2008-2364 - https://github.com/Iknowmyname/Nmap-Scans-M2 CVE-2008-2364 - https://github.com/Live-Hack-CVE/CVE-2008-2364 CVE-2008-2364 - https://github.com/NikulinMS/13-01-hw CVE-2008-2364 - https://github.com/RoliSoft/ReconScan +CVE-2008-2364 - https://github.com/Veronica-Falgiani/Network-Protocol-Verification-Agent CVE-2008-2364 - https://github.com/Zhivarev/13-01-hw CVE-2008-2364 - https://github.com/issdp/test CVE-2008-2364 - https://github.com/kasem545/vulnsearch @@ -5941,6 +5959,7 @@ CVE-2009-1535 - https://github.com/ycdxsb/WindowsPrivilegeEscalation CVE-2009-1544 - https://github.com/ARPSyndicate/cve-scores CVE-2009-1547 - https://github.com/ARPSyndicate/cve-scores CVE-2009-1555 - https://github.com/ARPSyndicate/cve-scores +CVE-2009-1556 - https://github.com/ARPSyndicate/cve-scores CVE-2009-1558 - https://github.com/20142995/nuclei-templates CVE-2009-1558 - https://github.com/ARPSyndicate/kenzer-templates CVE-2009-1605 - https://github.com/0xCyberY/CVE-T4PDF @@ -7091,6 +7110,7 @@ CVE-2010-0233 - https://github.com/Cruxer8Mech/Idk CVE-2010-0233 - https://github.com/lyshark/Windows-exploits CVE-2010-0233 - https://github.com/ycdxsb/WindowsPrivilegeEscalation CVE-2010-0249 - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico +CVE-2010-0249 - https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico CVE-2010-0249 - https://github.com/ahmedobied/python-exploits CVE-2010-0249 - https://github.com/ankh2054/python-exploits CVE-2010-0249 - https://github.com/tanjiti/sec_profile @@ -7943,6 +7963,7 @@ CVE-2010-2075 - https://github.com/AndreevAleksandr/VandAttonInfoSys CVE-2010-2075 - https://github.com/CVEDB/PoC-List CVE-2010-2075 - https://github.com/CVEDB/awesome-cve-repo CVE-2010-2075 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase2-Metasploitable2 +CVE-2010-2075 - https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 CVE-2010-2075 - https://github.com/DmitriyPetrovskiy23/InfoSec-homework1 CVE-2010-2075 - https://github.com/FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1 CVE-2010-2075 - https://github.com/Gdec02/nmap-scan-metasploitable @@ -8344,6 +8365,7 @@ CVE-2010-2554 - https://github.com/ycdxsb/WindowsPrivilegeEscalation CVE-2010-2567 - https://github.com/ARPSyndicate/cve-scores CVE-2010-2568 - https://github.com/ARPSyndicate/cvemon CVE-2010-2568 - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico +CVE-2010-2568 - https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico CVE-2010-2568 - https://github.com/Kuromesi/Py4CSKG CVE-2010-2568 - https://github.com/MN439/bingduziyuan CVE-2010-2568 - https://github.com/Ostorlab/KEV @@ -10004,6 +10026,7 @@ CVE-2011-0599 - https://github.com/ARPSyndicate/cvemon CVE-2011-0602 - https://github.com/0xCyberY/CVE-T4PDF CVE-2011-0602 - https://github.com/ARPSyndicate/cvemon CVE-2011-0609 - https://github.com/AlexielArdilla/Hard-Hatter-Hacking-Etico +CVE-2011-0609 - https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico CVE-2011-0609 - https://github.com/Ostorlab/KEV CVE-2011-0609 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors CVE-2011-0611 - https://github.com/Ostorlab/KEV @@ -10505,6 +10528,7 @@ CVE-2011-2523 - https://github.com/C4ort26/CyberSecurity-portfolio- CVE-2011-2523 - https://github.com/CVEDB/PoC-List CVE-2011-2523 - https://github.com/CVEDB/awesome-cve-repo CVE-2011-2523 - https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase1-Metasploitable- +CVE-2011-2523 - https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2 CVE-2011-2523 - https://github.com/CipherLucas/Metasploitable2-PenTest-Report CVE-2011-2523 - https://github.com/CitrineNull/Pivot-Lab CVE-2011-2523 - https://github.com/CitrineNull/Recon-101 @@ -10711,6 +10735,7 @@ CVE-2011-2523 - https://github.com/pp0101-ppu/training CVE-2011-2523 - https://github.com/priyadharshan-vadivel/metasploitable2-penetration-test CVE-2011-2523 - https://github.com/priyan37/metasploitable2-penetration-test CVE-2011-2523 - https://github.com/rahulkore1/-basic-vulnerability-assessment +CVE-2011-2523 - https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker CVE-2011-2523 - https://github.com/rkuruba/Penetration-Testing-1 CVE-2011-2523 - https://github.com/rohitkumar0976/CEH-PROJECT CVE-2011-2523 - https://github.com/roshan11420/Ethical-hacking-project @@ -16428,6 +16453,7 @@ CVE-2013-6987 - https://github.com/stoicboomer/CVE-2013-6987 CVE-2013-6991 - https://github.com/20142995/nuclei-templates CVE-2013-6992 - https://github.com/20142995/nuclei-templates CVE-2013-6993 - https://github.com/20142995/nuclei-templates +CVE-2013-7030 - https://github.com/ARPSyndicate/cve-scores CVE-2013-7035 - https://github.com/JCDMeira/release-notes-react CVE-2013-7040 - https://github.com/menkhus/falco CVE-2013-7091 - https://github.com/20142995/nuclei-templates @@ -17031,6 +17057,7 @@ CVE-2014-0160 - https://github.com/JasonZorky005/OPENVPN CVE-2014-0160 - https://github.com/JasonZorky95/OpenVPN CVE-2014-0160 - https://github.com/Jay-Idrees/UPenn-CyberSecurity-Penetration-Testing CVE-2014-0160 - https://github.com/Jeypi04/openvpn-jookk +CVE-2014-0160 - https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico CVE-2014-0160 - https://github.com/Joao-Paulino/Cyber-Security CVE-2014-0160 - https://github.com/Joao-Paulino/Cyber-Security-PenTest CVE-2014-0160 - https://github.com/Joao-Paulino/CyberSecurity @@ -20718,6 +20745,7 @@ CVE-2014-6271 - https://github.com/eric-erki/Penetration-Testing CVE-2014-6271 - https://github.com/eric-erki/awesome-pentest CVE-2014-6271 - https://github.com/eric-gitta-moore/Safety-Project-Collection CVE-2014-6271 - https://github.com/ericlake/fabric-shellshock +CVE-2014-6271 - https://github.com/esselinux/wazuh-suricata CVE-2014-6271 - https://github.com/exfilt/CheatSheet CVE-2014-6271 - https://github.com/falocab/PayloadsAllTheThings CVE-2014-6271 - https://github.com/fares-alkhalaf/BurbsuiteInArabic @@ -22325,6 +22353,7 @@ CVE-2015-0072 - https://github.com/xbl3/awesome-cve-poc_qazbnm456 CVE-2015-0079 - https://github.com/ARPSyndicate/cve-scores CVE-2015-0085 - https://github.com/ARPSyndicate/cvemon CVE-2015-0085 - https://github.com/abhisek/abhisek +CVE-2015-0089 - https://github.com/ARPSyndicate/cve-scores CVE-2015-0096 - https://github.com/ARPSyndicate/cvemon CVE-2015-0097 - https://github.com/ARPSyndicate/cvemon CVE-2015-0097 - https://github.com/Al1ex/WindowsElevation @@ -30631,6 +30660,7 @@ CVE-2016-10190 - https://github.com/ARPSyndicate/cvemon CVE-2016-10190 - https://github.com/floatingHKX/Binary-Exploit-Visualization CVE-2016-10190 - https://github.com/muzalam/FFMPEG-exploit CVE-2016-10190 - https://github.com/sereok3/buffer-overflow-writeups +CVE-2016-10191 - https://github.com/ARPSyndicate/cve-scores CVE-2016-10191 - https://github.com/ARPSyndicate/cvemon CVE-2016-10191 - https://github.com/KaviDk/Heap-Over-Flow-with-CVE-2016-10191 CVE-2016-10191 - https://github.com/Live-Hack-CVE/CVE-2016-1019 @@ -31041,6 +31071,7 @@ CVE-2016-10744 - https://github.com/ARPSyndicate/cvemon CVE-2016-10745 - https://github.com/ARPSyndicate/cvemon CVE-2016-10745 - https://github.com/JinBean/CVE-Extension CVE-2016-10745 - https://github.com/LoricAndre/OSV_Commits_Analysis +CVE-2016-10745 - https://github.com/arvion-ai/test-vulnerable-python2 CVE-2016-10745 - https://github.com/seal-community/patches CVE-2016-10749 - https://github.com/ARPSyndicate/cvemon CVE-2016-10750 - https://github.com/ARPSyndicate/cvemon @@ -33256,6 +33287,7 @@ CVE-2016-3236 - https://github.com/chenghungpan/test_data CVE-2016-3236 - https://github.com/lawbyte/Windows-and-Active-Directory CVE-2016-3236 - https://github.com/suljov/Windows-and-Active-Directory CVE-2016-3236 - https://github.com/suljov/Windwos-and-Active-Directory +CVE-2016-3237 - https://github.com/ARPSyndicate/cve-scores CVE-2016-3237 - https://github.com/ARPSyndicate/cvemon CVE-2016-3238 - https://github.com/ARPSyndicate/cvemon CVE-2016-3238 - https://github.com/RPP-IM-2021/IM113-2016-Cvetkov-Katarina @@ -33370,6 +33402,7 @@ CVE-2016-3311 - https://github.com/qazbnm456/awesome-cve-poc CVE-2016-3311 - https://github.com/xbl3/awesome-cve-poc_qazbnm456 CVE-2016-3311 - https://github.com/ycdxsb/WindowsPrivilegeEscalation CVE-2016-3313 - https://github.com/ARPSyndicate/cvemon +CVE-2016-3315 - https://github.com/ARPSyndicate/cve-scores CVE-2016-3319 - https://github.com/0xCyberY/CVE-T4PDF CVE-2016-3319 - https://github.com/ARPSyndicate/cvemon CVE-2016-3320 - https://github.com/ARPSyndicate/cvemon @@ -33421,6 +33454,7 @@ CVE-2016-3371 - https://github.com/xiaoZ-hc/redtool CVE-2016-3371 - https://github.com/ycdxsb/WindowsPrivilegeEscalation CVE-2016-3371 - https://github.com/yut0u/RedTeam-BlackBox CVE-2016-3375 - https://github.com/ARPSyndicate/cvemon +CVE-2016-3376 - https://github.com/ARPSyndicate/cve-scores CVE-2016-3376 - https://github.com/ARPSyndicate/cvemon CVE-2016-3378 - https://github.com/ARPSyndicate/cvemon CVE-2016-3380 - https://github.com/p0w3rsh3ll/MSRC-data @@ -35017,6 +35051,7 @@ CVE-2016-4338 - https://github.com/xbl3/awesome-cve-poc_qazbnm456 CVE-2016-4340 - https://github.com/ARPSyndicate/cvemon CVE-2016-4342 - https://github.com/ARPSyndicate/cvemon CVE-2016-4343 - https://github.com/ARPSyndicate/cve-scores +CVE-2016-4350 - https://github.com/ARPSyndicate/cve-scores CVE-2016-4353 - https://github.com/ARPSyndicate/cve-scores CVE-2016-4354 - https://github.com/ARPSyndicate/cve-scores CVE-2016-4355 - https://github.com/ARPSyndicate/cve-scores @@ -35801,6 +35836,7 @@ CVE-2016-5195 - https://github.com/JERRY123S/all-poc CVE-2016-5195 - https://github.com/Jean-Francois-C/Boot2root-CTFs-Writeups CVE-2016-5195 - https://github.com/Jekyll-Hyde2022/PrivEsc-Linux CVE-2016-5195 - https://github.com/Jeremias215/VulnerabilityManagement +CVE-2016-5195 - https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico CVE-2016-5195 - https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits CVE-2016-5195 - https://github.com/Josam85/Nessus-Vulnerability-Management-Lab CVE-2016-5195 - https://github.com/JoyChou93/sks @@ -36134,6 +36170,7 @@ CVE-2016-5195 - https://github.com/reni2study/Cloud-Native-Security2 CVE-2016-5195 - https://github.com/retr0-13/Linux-Privilege-Escalation-Basics CVE-2016-5195 - https://github.com/revanmalang/OSCP CVE-2016-5195 - https://github.com/reybango/The-Security-Handbook +CVE-2016-5195 - https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker CVE-2016-5195 - https://github.com/riquebatalha/single-multithreading_android CVE-2016-5195 - https://github.com/ruobing-wang/os_hacking_lab CVE-2016-5195 - https://github.com/rvolosatovs/mooshy @@ -36790,6 +36827,7 @@ CVE-2016-6079 - https://github.com/sunzu94/AWS-CVEs CVE-2016-6131 - https://github.com/ARPSyndicate/cvemon CVE-2016-6131 - https://github.com/mrash/afl-cve CVE-2016-6131 - https://github.com/zachnobody/aptshield +CVE-2016-6140 - https://github.com/ARPSyndicate/cve-scores CVE-2016-6144 - https://github.com/lmkalg/my_cves CVE-2016-6151 - https://github.com/webtest1/ncc CVE-2016-6152 - https://github.com/webtest1/ncc @@ -37802,6 +37840,7 @@ CVE-2016-7190 - https://github.com/qazbnm456/awesome-cve-poc CVE-2016-7190 - https://github.com/tunz/js-vuln-db CVE-2016-7190 - https://github.com/xbl3/awesome-cve-poc_qazbnm456 CVE-2016-7191 - https://github.com/ARPSyndicate/cvemon +CVE-2016-7193 - https://github.com/ARPSyndicate/cve-scores CVE-2016-7193 - https://github.com/ARPSyndicate/cvemon CVE-2016-7193 - https://github.com/Ostorlab/KEV CVE-2016-7193 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors @@ -42645,6 +42684,7 @@ CVE-2017-10974 - https://github.com/20142995/nuclei-templates CVE-2017-10974 - https://github.com/ARPSyndicate/cvemon CVE-2017-10974 - https://github.com/ARPSyndicate/kenzer-templates CVE-2017-10976 - https://github.com/andir/nixos-issue-db-example +CVE-2017-10984 - https://github.com/ARPSyndicate/cve-scores CVE-2017-10988 - https://github.com/ARPSyndicate/cve-scores CVE-2017-10989 - https://github.com/ARPSyndicate/cve-scores CVE-2017-10989 - https://github.com/ARPSyndicate/cvemon @@ -44820,6 +44860,7 @@ CVE-2017-13156 - https://github.com/giacomoferretti/giacomoferretti CVE-2017-13156 - https://github.com/giacomoferretti/janus-toolkit CVE-2017-13156 - https://github.com/jcrutchvt10/Janus CVE-2017-13156 - https://github.com/krrathod/PenetesterHelper +CVE-2017-13156 - https://github.com/l1ackernishan/Janus-Vulnerability-CVE-2017-13156-Exploit CVE-2017-13156 - https://github.com/lnick2023/nicenice CVE-2017-13156 - https://github.com/nahid0x1/Janus-Vulnerability-CVE-2017-13156-Exploit CVE-2017-13156 - https://github.com/nictjh/threatDemos @@ -47501,6 +47542,7 @@ CVE-2017-18342 - https://github.com/GoranP/dvpwa CVE-2017-18342 - https://github.com/PayTrace/intercom_test CVE-2017-18342 - https://github.com/Whyshealwaysbrokeme/vuln-ruyaml-0.91.0-rce CVE-2017-18342 - https://github.com/amakhu/cdp +CVE-2017-18342 - https://github.com/arvion-ai/test-vulnerable-python2 CVE-2017-18342 - https://github.com/danielhoherd/pre-commit-hooks CVE-2017-18342 - https://github.com/ekufta0530/Interfile-Only-Semgrep CVE-2017-18342 - https://github.com/eltyagi/poc-codeql-artifact-attestation @@ -49928,6 +49970,7 @@ CVE-2017-5638 - https://github.com/JSchauert/Penetration-Testing-2 CVE-2017-5638 - https://github.com/JSchauert/Project-2-Offensive-Security-CTF CVE-2017-5638 - https://github.com/JShortSona/Jenkins-Struts2 CVE-2017-5638 - https://github.com/Jhoel777ar/El-libro-absurdamente-completo-del-Hacker-Etico +CVE-2017-5638 - https://github.com/Jhoel777ar/Hard-Hatter-Hacking-Etico CVE-2017-5638 - https://github.com/Jodagh/struts CVE-2017-5638 - https://github.com/JordanMcAlpine1/WebAppLinuxWindowsPenTest CVE-2017-5638 - https://github.com/K1ngDamien/epss-super-sorter @@ -53061,6 +53104,7 @@ CVE-2017-7921 - https://github.com/Mr-xn/Penetration_Testing_POC CVE-2017-7921 - https://github.com/ROYSCANNER/ROY CVE-2017-7921 - https://github.com/SexyBeast233/SecBooks CVE-2017-7921 - https://github.com/Sidhukali/ingram +CVE-2017-7921 - https://github.com/SlickxMercy/ArgusEye CVE-2017-7921 - https://github.com/SlickxMercy/BETAVDB CVE-2017-7921 - https://github.com/SlickxMercy/WeakPassword CVE-2017-7921 - https://github.com/SlickxMercy/WebCamHack @@ -56624,6 +56668,12 @@ CVE-2018-0958 - https://github.com/koorchik/dissert CVE-2018-0958 - https://github.com/koorchik/llm-analysis-of-text-data CVE-2018-0959 - https://github.com/pwndorei/CVE-2018-0959 CVE-2018-0966 - https://github.com/punishell/WindowsLegacyCVE +CVE-2018-0969 - https://github.com/ARPSyndicate/cve-scores +CVE-2018-0971 - https://github.com/ARPSyndicate/cve-scores +CVE-2018-0972 - https://github.com/ARPSyndicate/cve-scores +CVE-2018-0973 - https://github.com/ARPSyndicate/cve-scores +CVE-2018-0974 - https://github.com/ARPSyndicate/cve-scores +CVE-2018-0975 - https://github.com/ARPSyndicate/cve-scores CVE-2018-0979 - https://github.com/ARPSyndicate/cve-scores CVE-2018-0979 - https://github.com/ARPSyndicate/cvemon CVE-2018-0979 - https://github.com/lnick2023/nicenice @@ -57042,6 +57092,7 @@ CVE-2018-1000656 - https://github.com/ARPSyndicate/cvemon CVE-2018-1000656 - https://github.com/OpenLabSE/VulFinder CVE-2018-1000656 - https://github.com/VulFinder/VulFinder CVE-2018-1000656 - https://github.com/akanchhaS/pysnyk +CVE-2018-1000656 - https://github.com/arvion-ai/test-vulnerable-python2 CVE-2018-1000656 - https://github.com/crumpman/pulsecheck CVE-2018-1000656 - https://github.com/eltyagi/poc-codeql-artifact-attestation CVE-2018-1000656 - https://github.com/garethr/snykctl @@ -61599,6 +61650,7 @@ CVE-2018-15473 - https://github.com/NeoOniX/5ATTACK CVE-2018-15473 - https://github.com/NestyF/SSH_Enum_CVE-2018-15473 CVE-2018-15473 - https://github.com/NetworkingPassionate/Nessus-Essentials CVE-2018-15473 - https://github.com/Nullgrimoire/NullScan +CVE-2018-15473 - https://github.com/OhDamnn/Noregressh CVE-2018-15473 - https://github.com/OluwatobiEAkanni/PEN-TESTING-A-SERVER CVE-2018-15473 - https://github.com/OmarV4066/SSHEnumKL CVE-2018-15473 - https://github.com/Pixiel333/Pentest-Cheat-sheet @@ -63473,6 +63525,7 @@ CVE-2018-18074 - https://github.com/Prudent777/KnowledgeLink-Pro CVE-2018-18074 - https://github.com/SahanaKhushi/iplmatchpredictor2020 CVE-2018-18074 - https://github.com/XXRadeonXFX/flask-vuln-app CVE-2018-18074 - https://github.com/aertyyujhgfd/JARVIS-dans-Iron-man +CVE-2018-18074 - https://github.com/arvion-ai/test-vulnerable-python2 CVE-2018-18074 - https://github.com/bvvard/secure-source-code-analyzer CVE-2018-18074 - https://github.com/cloudsmith-io/rego-recipes CVE-2018-18074 - https://github.com/colonelmeow/appsecctf @@ -64043,6 +64096,7 @@ CVE-2018-19323 - https://github.com/Ostorlab/KEV CVE-2018-19323 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors CVE-2018-19323 - https://github.com/PuddinCat/GithubRepoSpider CVE-2018-19323 - https://github.com/blueisbeautiful/CVE-2018-19323 +CVE-2018-19323 - https://github.com/brokendreamsclub/CVE-2018-19323 CVE-2018-19323 - https://github.com/xct/windows-kernel-exploits CVE-2018-19326 - https://github.com/20142995/nuclei-templates CVE-2018-19326 - https://github.com/ARPSyndicate/cve-scores @@ -70383,6 +70437,7 @@ CVE-2018-8039 - https://github.com/n0-traces/cve_monitor CVE-2018-8039 - https://github.com/tafamace/CVE-2018-8039 CVE-2018-8040 - https://github.com/ARPSyndicate/cve-scores CVE-2018-8041 - https://github.com/ARPSyndicate/cvemon +CVE-2018-8041 - https://github.com/J1w0n-H/AI-in-Security CVE-2018-8041 - https://github.com/shoucheng3/apache__camel_CVE-2018-8041_2-20-3 CVE-2018-8044 - https://github.com/ARPSyndicate/cvemon CVE-2018-8044 - https://github.com/REVRTools/CVEs @@ -70773,6 +70828,7 @@ CVE-2018-8174 - https://github.com/wrlu/Vulnerabilities CVE-2018-8174 - https://github.com/xbl3/awesome-cve-poc_qazbnm456 CVE-2018-8174 - https://github.com/xiaoZ-hc/redtool CVE-2018-8174 - https://github.com/yut0u/RedTeam-BlackBox +CVE-2018-8176 - https://github.com/ARPSyndicate/cve-scores CVE-2018-8200 - https://github.com/ARPSyndicate/cvemon CVE-2018-8200 - https://github.com/mattifestation/mattifestation CVE-2018-8201 - https://github.com/ARPSyndicate/cvemon @@ -72265,6 +72321,7 @@ CVE-2018-9996 - https://github.com/testing-felickz/docker-scout-demo CVE-2018-9996 - https://github.com/tzf-key/MemLock_Benchmark CVE-2018-9996 - https://github.com/tzf-omkey/MemLock_Benchmark CVE-2018-9996 - https://github.com/wcventure/MemLock_Benchmark +CVE-2018-9999 - https://github.com/R3KT00YT/ScanCam CVE-2018-9999 - https://github.com/TingPing/flatpak-cve-checker CVE-2019-00000 - https://github.com/shaliniKushwah-crest/readme CVE-2019-0001 - https://github.com/epicosy/nvdutils @@ -73489,6 +73546,7 @@ CVE-2019-0708 - https://github.com/lnick2023/nicenice CVE-2019-0708 - https://github.com/lp008/CVE_2019_0708_Blue_screen_poc CVE-2019-0708 - https://github.com/lp008/Hack-readme CVE-2019-0708 - https://github.com/lsc1226844309/hanker1 +CVE-2019-0708 - https://github.com/luckydus5/Penguin-Leanning-Linux-Mastery CVE-2019-0708 - https://github.com/lwtz/CVE-2019-0708 CVE-2019-0708 - https://github.com/mai-lang-chai/System-Vulnerability CVE-2019-0708 - https://github.com/major203/cve-2019-0708-scan @@ -74133,6 +74191,7 @@ CVE-2019-0930 - https://github.com/addicjanov/js-vuln-db CVE-2019-0930 - https://github.com/otravidaahora2t/js-vuln-db CVE-2019-0930 - https://github.com/tunz/js-vuln-db CVE-2019-0938 - https://github.com/alphaSeclab/sec-daily-2019 +CVE-2019-0940 - https://github.com/ARPSyndicate/cve-scores CVE-2019-0940 - https://github.com/HackOvert/awesome-bugs CVE-2019-0940 - https://github.com/alphaSeclab/sec-daily-2019 CVE-2019-0948 - https://github.com/Aniket-Kolte-273/P-6 @@ -74472,6 +74531,7 @@ CVE-2019-10086 - https://github.com/hinat0y/Dataset9 CVE-2019-10086 - https://github.com/microservices-devsecops-organization/movie-catalog-service-dev CVE-2019-10086 - https://github.com/mvteam-java/DependGuard CVE-2019-10086 - https://github.com/pctF/vulnerable-app +CVE-2019-10089 - https://github.com/PuddinCat/GithubRepoSpider CVE-2019-10089 - https://github.com/shoucheng3/apache__jspwiki_CVE-2019-10089_2-11-0-M4 CVE-2019-10090 - https://github.com/ossf-cve-benchmark/CVE-2019-10090 CVE-2019-10092 - https://github.com/0xT11/CVE-POC @@ -74607,6 +74667,7 @@ CVE-2019-1010054 - https://github.com/chaizeg/CSRF-breach CVE-2019-1010054 - https://github.com/developer3000S/PoC-in-GitHub CVE-2019-1010054 - https://github.com/hectorgie/PoC-in-GitHub CVE-2019-1010060 - https://github.com/ANG13T/aerospace-cve-list +CVE-2019-1010083 - https://github.com/arvion-ai/test-vulnerable-python2 CVE-2019-1010083 - https://github.com/crumpman/pulsecheck CVE-2019-1010083 - https://github.com/elliotsecops/VulnGuard CVE-2019-1010083 - https://github.com/eltyagi/poc-codeql-artifact-attestation @@ -76189,6 +76250,7 @@ CVE-2019-11358 - https://github.com/5960IronDams/Center_Stage CVE-2019-11358 - https://github.com/5960IronDams/Center_Stage_2 CVE-2019-11358 - https://github.com/5GBurrito/FTC_Team_12167_Robot_Controller_2023-24 CVE-2019-11358 - https://github.com/5GBurrito/FTC_Team_9511_Robot_Controller_2023-24 +CVE-2019-11358 - https://github.com/5irobotics/MechanicalDuck26 CVE-2019-11358 - https://github.com/5irobotics/MechanicalDucks25-D01 CVE-2019-11358 - https://github.com/6-BennyLi-9/FzxlFtc2024-2025 CVE-2019-11358 - https://github.com/6165-MSET-CuttleFish/2024-FTC-offseason-project @@ -76496,6 +76558,7 @@ CVE-2019-11358 - https://github.com/AtticFanatics14079/UltimateGoal CVE-2019-11358 - https://github.com/AtticFanatics14079/UltimateGoalFanatics CVE-2019-11358 - https://github.com/AuPiratesFIRST/FTC-2024-INTOTHEDEEP-TEAM19595 CVE-2019-11358 - https://github.com/AuPiratesFIRST/FTC-2024-IntoTheDeep-MentorCameron +CVE-2019-11358 - https://github.com/AuPiratesFIRST/FTC-2025-Decode-MrC-Playground CVE-2019-11358 - https://github.com/AudraJ1/7588Season2022 CVE-2019-11358 - https://github.com/AuslinD/IntoTheDeep2024-2025 CVE-2019-11358 - https://github.com/AuslinD/PowerPlay2022-2023 @@ -76786,6 +76849,7 @@ CVE-2019-11358 - https://github.com/Capital-Bots/Centerstage14575-v3 CVE-2019-11358 - https://github.com/Capital-Bots/IntoTheDeep-14575 CVE-2019-11358 - https://github.com/Capital-Bots/summer2025 CVE-2019-11358 - https://github.com/Career-Academy-FTC-Robotics/CanineCrew +CVE-2019-11358 - https://github.com/CareyK25/FTC-IntoTheDeep CVE-2019-11358 - https://github.com/Carlabzn/demo-arm CVE-2019-11358 - https://github.com/CarlosSeijasFTC/2025-2026-Robot-Controller CVE-2019-11358 - https://github.com/CarlosSeijasFTC/Decode2025-2026 @@ -76942,6 +77006,7 @@ CVE-2019-11358 - https://github.com/Cyliis/RC-Car CVE-2019-11358 - https://github.com/Cyliis/codus-bobocus CVE-2019-11358 - https://github.com/Cypher-Geist/FTC_AndroidStudio_Code CVE-2019-11358 - https://github.com/D06-5irobotics/TT-5 +CVE-2019-11358 - https://github.com/D07-5irobotics/BionicSharks-2025-D07 CVE-2019-11358 - https://github.com/DCAthatsit/AutonomyQUBE-2023 CVE-2019-11358 - https://github.com/DCRepublic/Honey-Nut-Gearios CVE-2019-11358 - https://github.com/DCSPD-PantherRobotics/OurRobotsCode @@ -77575,6 +77640,7 @@ CVE-2019-11358 - https://github.com/FTC9182/FTC9182-2021-2022 CVE-2019-11358 - https://github.com/FTC9837/FTC9837_UltimateGoal CVE-2019-11358 - https://github.com/FTC9889/CC_9889_2020_2021 CVE-2019-11358 - https://github.com/FTC9889/CC_9889_2023_2024 +CVE-2019-11358 - https://github.com/FTC9889/CC_9889_2024_2025 CVE-2019-11358 - https://github.com/FTCBlackout/FtcRobotController-master CVE-2019-11358 - https://github.com/FTCCrashAndBurn/FtcRobotController-23 CVE-2019-11358 - https://github.com/FTCCyclone/CycloneRobotController @@ -78293,6 +78359,8 @@ CVE-2019-11358 - https://github.com/Logannnnnnn/FTC23-24-Season CVE-2019-11358 - https://github.com/Logannnnnnn/PiRates-Into-the-Deep-24 CVE-2019-11358 - https://github.com/Logannnnnnn/PiRates-LOKI-2024 CVE-2019-11358 - https://github.com/Logannnnnnn/PiRatesCenterStage +CVE-2019-11358 - https://github.com/Logannnnnnn/PiRatesDecode +CVE-2019-11358 - https://github.com/Logannnnnnn/PiRatesDecodePublic CVE-2019-11358 - https://github.com/LogiLift/PowerPlay CVE-2019-11358 - https://github.com/Loki7261/Testing-ITD CVE-2019-11358 - https://github.com/Loki7261/roadrunnertest @@ -78400,6 +78468,7 @@ CVE-2019-11358 - https://github.com/MaxFTC/SCH-4914-2021-22 CVE-2019-11358 - https://github.com/MaxG-SCH/SCH-4914-2021-22 CVE-2019-11358 - https://github.com/MaxGB10/Pancakes2025ftc CVE-2019-11358 - https://github.com/MaxKyt/FTC_Test +CVE-2019-11358 - https://github.com/MaxXie86431/FTC-Decode CVE-2019-11358 - https://github.com/MaximOsip/PowerlpayFTCByEXP CVE-2019-11358 - https://github.com/McCaskey-Robotics/FTCrobot2022offseason CVE-2019-11358 - https://github.com/McCaskey-Robotics/VortechCenterStageV3 @@ -78717,6 +78786,7 @@ CVE-2019-11358 - https://github.com/Osrepnay/FTCCenterStage CVE-2019-11358 - https://github.com/Osrepnay/FTCIntoTheDeep CVE-2019-11358 - https://github.com/Otis354/Robocode CVE-2019-11358 - https://github.com/OurGreatLeaderEason/MyRepo +CVE-2019-11358 - https://github.com/OutcastsRobotics/31931OutcastsRoboticsCodebase CVE-2019-11358 - https://github.com/OutoftheBoxFTC/CenterStage CVE-2019-11358 - https://github.com/OutoftheBoxFTC/FreightFrenzy CVE-2019-11358 - https://github.com/OutoftheBoxFTC/UltimateGoal6.1 @@ -79168,6 +79238,7 @@ CVE-2019-11358 - https://github.com/SLHS-Robotics/SLHS-Robotics-2025 CVE-2019-11358 - https://github.com/SMERobotics/robocode CVE-2019-11358 - https://github.com/SMPhoenicx/Omen_FTC_26 CVE-2019-11358 - https://github.com/SPARKTECH-24345/FTC-Decode-Sparktech +CVE-2019-11358 - https://github.com/SPFRobotics/FTC-Decode-Raider-Robotics-2025-2026 CVE-2019-11358 - https://github.com/STMARobotics/atomic-FtcRobotController CVE-2019-11358 - https://github.com/STMARobotics/digital-FtcRobotController CVE-2019-11358 - https://github.com/STMARobotics/ftc-alloy-decode @@ -79216,6 +79287,7 @@ CVE-2019-11358 - https://github.com/SantiQ0905/FTC-23619 CVE-2019-11358 - https://github.com/Sarah-Mathew2025/Summer-2025 CVE-2019-11358 - https://github.com/Sarvesh-Somasundaram/5795UltimateGoal CVE-2019-11358 - https://github.com/Satgoy152/FreightFrenzy +CVE-2019-11358 - https://github.com/Savadragos13/STIM-DC-DECODE CVE-2019-11358 - https://github.com/ScarlettRobotics/FTC-2021 CVE-2019-11358 - https://github.com/ScarlettRobotics/FTC20718-2022-23 CVE-2019-11358 - https://github.com/ScarlettRobotics/FTC20718-2023-24 @@ -79566,6 +79638,7 @@ CVE-2019-11358 - https://github.com/Tevillo/FtcRobotController CVE-2019-11358 - https://github.com/ThaddeusBardsley/W25 CVE-2019-11358 - https://github.com/Thai28/28717GearheadsIntoTheDeep CVE-2019-11358 - https://github.com/Tharealzhanibek/FTC_Zertte +CVE-2019-11358 - https://github.com/That-Madman/BoP-FTC-Decode CVE-2019-11358 - https://github.com/That-Madman/Chipper-s-Revenge-FTC CVE-2019-11358 - https://github.com/That-Madman/FTC-INTO-THE-DEEP CVE-2019-11358 - https://github.com/That-Madman/Lemmy @@ -80811,6 +80884,7 @@ CVE-2019-11358 - https://github.com/ftc11109/FtcRobotControllerUltimateGoal CVE-2019-11358 - https://github.com/ftc11112/RobotController CVE-2019-11358 - https://github.com/ftc13100/BeaversTemplate CVE-2019-11358 - https://github.com/ftc13100/CenterStage-2024 +CVE-2019-11358 - https://github.com/ftc13100/Decode-2026 CVE-2019-11358 - https://github.com/ftc13100/FreightFrenzy-2022 CVE-2019-11358 - https://github.com/ftc13100/Practice-For-Programming CVE-2019-11358 - https://github.com/ftc13100/Programming-Practice-2023 @@ -81080,6 +81154,7 @@ CVE-2019-11358 - https://github.com/iCoux/PowerPlay-master CVE-2019-11358 - https://github.com/iNanoToxin/FTC_Cobalt CVE-2019-11358 - https://github.com/ia74/wagner2024 CVE-2019-11358 - https://github.com/iamscythe66/ftcrobotcontrol +CVE-2019-11358 - https://github.com/ibm-7094a/ftc-intothedeep-rccode CVE-2019-11358 - https://github.com/iceworld009/IntoTheDeep_HarambeCartel-2025 CVE-2019-11358 - https://github.com/icsrobotics/19866-FTC_2023-2024 CVE-2019-11358 - https://github.com/idealsociety/Team8637-GB-2024 @@ -81216,6 +81291,7 @@ CVE-2019-11358 - https://github.com/jrasor/UGQT2 CVE-2019-11358 - https://github.com/jrasor/UGScrimmage62 CVE-2019-11358 - https://github.com/jrasor/csee113S21 CVE-2019-11358 - https://github.com/jreclark/KRASH_2023_CenterStage_RR05 +CVE-2019-11358 - https://github.com/jtalborough/ftc-roosterbots-code CVE-2019-11358 - https://github.com/jthomson04/15252_FTC_2021-2022 CVE-2019-11358 - https://github.com/jthomson04/First-Tech-Challenge-2021-2022 CVE-2019-11358 - https://github.com/jtk16/CrowForceFTCV2 @@ -81346,6 +81422,7 @@ CVE-2019-11358 - https://github.com/learn-programing1223/Christmas_Conundrum CVE-2019-11358 - https://github.com/lehiller/2021-FTC-UltimateGoal-Wembley CVE-2019-11358 - https://github.com/lemon-exe/BSS-Robotics-2022---FTC-Code-Repo CVE-2019-11358 - https://github.com/leoschen/FreightFrenzy +CVE-2019-11358 - https://github.com/li-valen/22279-SLAM-Robotics CVE-2019-11358 - https://github.com/li-valen/FtcRobotController-master22284-23-24 CVE-2019-11358 - https://github.com/li-valen/SLAM-Robotics-States-Bot CVE-2019-11358 - https://github.com/liamml1/Nick-is-metumtam @@ -81673,6 +81750,7 @@ CVE-2019-11358 - https://github.com/pingryrobotics/FTC-6069-2021-2022 CVE-2019-11358 - https://github.com/pingryrobotics/TestProject2022 CVE-2019-11358 - https://github.com/pinwc4/testrobo3 CVE-2019-11358 - https://github.com/pixelwastaken/ActionsEx +CVE-2019-11358 - https://github.com/pkfitzVT/FTC_2024_24 CVE-2019-11358 - https://github.com/plantechProgramming/decodeProjectPlantech CVE-2019-11358 - https://github.com/pleif/TempTraining CVE-2019-11358 - https://github.com/pndfourleafrovers/FTC-2025-2026 @@ -81884,6 +81962,7 @@ CVE-2019-11358 - https://github.com/roman395/Repository CVE-2019-11358 - https://github.com/roman395/kek CVE-2019-11358 - https://github.com/ronaldgabrieln/INTOTHEDEEPZorrobots2024 CVE-2019-11358 - https://github.com/roobootics/DaniDrivetrain +CVE-2019-11358 - https://github.com/roobootics/SolarFlare_Decode CVE-2019-11358 - https://github.com/rosanneal28/FTCRC CVE-2019-11358 - https://github.com/rowan-mcalpin/NextFTC-Testing CVE-2019-11358 - https://github.com/rowan-mcalpin/PedroPathingPlusNextFTC @@ -86191,6 +86270,7 @@ CVE-2019-14799 - https://github.com/20142995/nuclei-templates CVE-2019-14799 - https://github.com/ARPSyndicate/cvemon CVE-2019-14800 - https://github.com/20142995/nuclei-templates CVE-2019-14801 - https://github.com/20142995/nuclei-templates +CVE-2019-14806 - https://github.com/arvion-ai/test-vulnerable-python2 CVE-2019-1481 - https://github.com/ARPSyndicate/cve-scores CVE-2019-1481 - https://github.com/barrracud4/image-upload-exploits CVE-2019-14811 - https://github.com/PuddinCat/GithubRepoSpider @@ -88309,6 +88389,7 @@ CVE-2019-16903 - https://github.com/ARPSyndicate/cvemon CVE-2019-16903 - https://github.com/pokerfacett/MY_CVE_CREDIT CVE-2019-16905 - https://github.com/ARPSyndicate/cvemon CVE-2019-16905 - https://github.com/Fastiraz/openssh-cve-resolv +CVE-2019-16905 - https://github.com/OhDamnn/Noregressh CVE-2019-16905 - https://github.com/Totes5706/TotesHTB CVE-2019-16905 - https://github.com/hackingyseguridad/ssha CVE-2019-16905 - https://github.com/phx/cvescan @@ -97508,6 +97589,7 @@ CVE-2020-0096 - https://github.com/balazsgerlei/AndroidSecurityEvolution CVE-2020-0096 - https://github.com/dayzsec/StrandHogg2 CVE-2020-0096 - https://github.com/developer3000S/PoC-in-GitHub CVE-2020-0096 - https://github.com/hectorgie/PoC-in-GitHub +CVE-2020-0096 - https://github.com/l1ackernishan/CVE-2020-0096-strandhogg-exploit-p0c CVE-2020-0096 - https://github.com/liuyun201990/StrandHogg2 CVE-2020-0096 - https://github.com/nahid0x1/CVE-2020-0096-strandhogg-exploit-p0c CVE-2020-0096 - https://github.com/nishan0x1/CVE-2020-0096-strandhogg-exploit-p0c @@ -105186,6 +105268,7 @@ CVE-2020-14145 - https://github.com/Hughes-Actual/Recon-Assignment-Hughes CVE-2020-14145 - https://github.com/J0hnKn1f3/UltraRecon CVE-2020-14145 - https://github.com/Maribel0370/Nebula-io CVE-2020-14145 - https://github.com/NeoOniX/5ATTACK +CVE-2020-14145 - https://github.com/OhDamnn/Noregressh CVE-2020-14145 - https://github.com/Totes5706/TotesHTB CVE-2020-14145 - https://github.com/VladimirFogel/PRO4 CVE-2020-14145 - https://github.com/adegoodyer/ubuntu @@ -110196,6 +110279,7 @@ CVE-2020-1956 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2020-1956 - https://github.com/soosmile/POC CVE-2020-1957 - https://github.com/0day666/Vulnerability-verification CVE-2020-1957 - https://github.com/12442RF/Learn +CVE-2020-1957 - https://github.com/ARPSyndicate/cve-scores CVE-2020-1957 - https://github.com/ARPSyndicate/cvemon CVE-2020-1957 - https://github.com/Challengers-win/Sec-Interview-ai CVE-2020-1957 - https://github.com/Coldplay1517/Middleware-Vulnerability-detection-master @@ -124393,6 +124477,7 @@ CVE-2021-12345 - https://github.com/elvinmirzazada/nist_cve_project CVE-2021-12345 - https://github.com/ethanlacerenza/NIST-CVE-YML CVE-2021-12345 - https://github.com/geffy22/ZeroTrace CVE-2021-12345 - https://github.com/iabdullah215/NetEye +CVE-2021-12345 - https://github.com/jay7848/vuln-scanner-pipeline CVE-2021-12345 - https://github.com/kdairatchi/port-scanner-exploitdb CVE-2021-12345 - https://github.com/mammadlilqar/Python_CVE_ID_Report_Project CVE-2021-12345 - https://github.com/openkruise/kruise-tools @@ -129336,6 +129421,7 @@ CVE-2021-23337 - https://github.com/NaorEven/dependabot-demo CVE-2021-23337 - https://github.com/NidalShaterM/trivy-security-scan CVE-2021-23337 - https://github.com/Refinitiv-API-Samples/Example.EWA.TypeScript.WebApplication CVE-2021-23337 - https://github.com/SocketDev/API_Scripts +CVE-2021-23337 - https://github.com/Undertone-student-org/booking-system CVE-2021-23337 - https://github.com/alexandert2105/GitHub-curso-completo CVE-2021-23337 - https://github.com/andisfar/LaunchQtCreator CVE-2021-23337 - https://github.com/andrewbearsley/lacework-sca-scan-example @@ -134738,6 +134824,7 @@ CVE-2021-28025 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2021-28040 - https://github.com/FUAZA/ECE9069_Presentation_2 CVE-2021-28041 - https://github.com/ARPSyndicate/cvemon CVE-2021-28041 - https://github.com/MaulikxLakhani/SSHScout +CVE-2021-28041 - https://github.com/OhDamnn/Noregressh CVE-2021-28041 - https://github.com/Totes5706/TotesHTB CVE-2021-28041 - https://github.com/accalina/crowflag CVE-2021-28041 - https://github.com/alvarigno/ChocolateFire-DockerLab @@ -140955,6 +141042,7 @@ CVE-2021-34621 - https://github.com/nmmcon/Exploits CVE-2021-34622 - https://github.com/20142995/nuclei-templates CVE-2021-34623 - https://github.com/20142995/nuclei-templates CVE-2021-34624 - https://github.com/20142995/nuclei-templates +CVE-2021-34624 - https://github.com/BharatCyberForce/wp-hunter CVE-2021-34625 - https://github.com/20142995/nuclei-templates CVE-2021-34626 - https://github.com/20142995/nuclei-templates CVE-2021-34627 - https://github.com/20142995/nuclei-templates @@ -141259,6 +141347,7 @@ CVE-2021-3493 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detec CVE-2021-3493 - https://github.com/Pelies91/audit-securite-wiki CVE-2021-3493 - https://github.com/Pratham-verma/TryHackMe-Roadmap CVE-2021-3493 - https://github.com/ProbiusOfficial/Awsome-Sec.CTF-Videomaker +CVE-2021-3493 - https://github.com/PuddinCat/GithubRepoSpider CVE-2021-3493 - https://github.com/ReflectedThanatos/OSCP-cheatsheet CVE-2021-3493 - https://github.com/Ruhanyat-994/Ruhanyat-994 CVE-2021-3493 - https://github.com/SYRTI/POC_to_review @@ -141386,6 +141475,7 @@ CVE-2021-3493 - https://github.com/xuetusummer/Penetration_Testing_POC CVE-2021-3493 - https://github.com/youwizard/CVE-POC CVE-2021-3493 - https://github.com/zecool/cve CVE-2021-3493 - https://github.com/zhanpengliu-tencent/medium-cve +CVE-2021-3493 - https://github.com/zulloper/cve-poc CVE-2021-3497 - https://github.com/ARPSyndicate/cvemon CVE-2021-34973 - https://github.com/dlehgus1023/CVE CVE-2021-34973 - https://github.com/dlehgus1023/dlehgus1023 @@ -142341,10 +142431,12 @@ CVE-2021-36260 - https://github.com/Nxychx/TVT-NVR CVE-2021-36260 - https://github.com/NyxAzrael/Goby_POC CVE-2021-36260 - https://github.com/Ostorlab/KEV CVE-2021-36260 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors +CVE-2021-36260 - https://github.com/R3KT00YT/ScanCam CVE-2021-36260 - https://github.com/ROYSCANNER/ROY CVE-2021-36260 - https://github.com/SYRTI/POC_to_review CVE-2021-36260 - https://github.com/ShivamB25/shodan-cam CVE-2021-36260 - https://github.com/Sidhukali/ingram +CVE-2021-36260 - https://github.com/SlickxMercy/ArgusEye CVE-2021-36260 - https://github.com/SlickxMercy/WebCamHack CVE-2021-36260 - https://github.com/Stealzoz/steal CVE-2021-36260 - https://github.com/TakenoSite/RemoteUploader @@ -147712,6 +147804,7 @@ CVE-2021-41773 - https://github.com/Mohammed-Hafeez-99/THM-checklist CVE-2021-41773 - https://github.com/Mr-Tree-S/POC_EXP CVE-2021-41773 - https://github.com/Mr-xn/Penetration_Testing_POC CVE-2021-41773 - https://github.com/MrCl0wnLab/SimplesApachePathTraversal +CVE-2021-41773 - https://github.com/MuhammadHuzaifaAsif/security-lab CVE-2021-41773 - https://github.com/N0el4kLs/Vulhub_Exp CVE-2021-41773 - https://github.com/NZRXHX/NZRXNETSCANNER CVE-2021-41773 - https://github.com/NaInSec/CVE-PoC-in-GitHub @@ -151608,6 +151701,7 @@ CVE-2021-44228 - https://github.com/Threekiii/Awesome-POC CVE-2021-44228 - https://github.com/Threekiii/Awesome-Redteam CVE-2021-44228 - https://github.com/Threekiii/Vulhub-Reproduce CVE-2021-44228 - https://github.com/Timborin0/log4j-dork-scanner +CVE-2021-44228 - https://github.com/TmTutui/AI-security-agent CVE-2021-44228 - https://github.com/ToastNumber/log4shell CVE-2021-44228 - https://github.com/Toolsec/log4j-scan CVE-2021-44228 - https://github.com/TotallyNotAHaxxer/f-for-java @@ -151675,6 +151769,7 @@ CVE-2021-44228 - https://github.com/aajuvonen/log4j-hackrf-waveforms CVE-2021-44228 - https://github.com/aajuvonen/log4stdin CVE-2021-44228 - https://github.com/aalex954/Log4PowerShell CVE-2021-44228 - https://github.com/ab0x90/CVE-2021-44228_PoC +CVE-2021-44228 - https://github.com/abdotemlali/Tisalabs CVE-2021-44228 - https://github.com/abdullah89255/Purpose-of-CVSS CVE-2021-44228 - https://github.com/ably77/gehc-gateway-poc-runbook CVE-2021-44228 - https://github.com/ably77/wu-gloo-mesh-runbook @@ -152889,6 +152984,7 @@ CVE-2021-44228 - https://github.com/tdotfish/zap_scripts CVE-2021-44228 - https://github.com/techdeavour/RosettaBOM CVE-2021-44228 - https://github.com/tejas-nagchandi/CVE-2021-45046 CVE-2021-44228 - https://github.com/tejas-rkd/threat-inspector +CVE-2021-44228 - https://github.com/temlaliabdo/Tisalabs CVE-2021-44228 - https://github.com/teresaweber685/book_list CVE-2021-44228 - https://github.com/terribletal/go-vex CVE-2021-44228 - https://github.com/test-org-appsec/nuclei @@ -162077,6 +162173,7 @@ CVE-2022-22620 - https://github.com/k0mi-tg/CVE-POC CVE-2022-22620 - https://github.com/kmeps4/CVE-2022-22620 CVE-2022-22620 - https://github.com/kmeps4/PSFree CVE-2022-22620 - https://github.com/manas3c/CVE-POC +CVE-2022-22620 - https://github.com/minaadel551/PS4Free CVE-2022-22620 - https://github.com/minaadel551/test CVE-2022-22620 - https://github.com/minaadel551/test2 CVE-2022-22620 - https://github.com/nomi-sec/PoC-in-GitHub @@ -172898,6 +172995,7 @@ CVE-2022-30190 - https://github.com/Cosmo121/Follina-Remediation CVE-2022-30190 - https://github.com/CyberTitus/Follina CVE-2022-30190 - https://github.com/DOV3Y/CVE-2022-30190-ASR-Senintel-Process-Pickup CVE-2022-30190 - https://github.com/DerZiad/CVE-2022-30190 +CVE-2022-30190 - https://github.com/DerZiad/DerZiad CVE-2022-30190 - https://github.com/EkamSinghWalia/Follina-MSDT-Vulnerability-CVE-2022-30190- CVE-2022-30190 - https://github.com/ErrorNoInternet/FollinaScanner CVE-2022-30190 - https://github.com/G-Zion/ProductionFollinaWorkaround @@ -175416,6 +175514,7 @@ CVE-2022-32549 - https://github.com/ARPSyndicate/cvemon CVE-2022-32550 - https://github.com/HamzaMhirsi/CVE_details_NVD CVE-2022-32550 - https://github.com/theulis/NIST-1Password-Public CVE-2022-3256 - https://github.com/ARPSyndicate/cvemon +CVE-2022-32563 - https://github.com/ARPSyndicate/cve-scores CVE-2022-32563 - https://github.com/ARPSyndicate/cvemon CVE-2022-32563 - https://github.com/Xeus-Territory/Robust_Scanner CVE-2022-32563 - https://github.com/Xeus-Territory/robust_scanner @@ -177012,6 +177111,7 @@ CVE-2022-35200 - https://github.com/tomerpeled92/CVE CVE-2022-35212 - https://github.com/ARPSyndicate/cvemon CVE-2022-35212 - https://github.com/Leeziao/TChecker CVE-2022-35212 - https://github.com/cuhk-seclab/TChecker +CVE-2022-35213 - https://github.com/ARPSyndicate/cve-scores CVE-2022-35213 - https://github.com/ARPSyndicate/cvemon CVE-2022-35213 - https://github.com/Leeziao/TChecker CVE-2022-35213 - https://github.com/Xeus-Territory/Robust_Scanner @@ -178865,6 +178965,7 @@ CVE-2022-3786 - https://github.com/vulnersCom/vulners-sbom-parser CVE-2022-3786 - https://github.com/weeka10/-hktalent-TOP CVE-2022-3786 - https://github.com/whoforget/CVE-POC CVE-2022-3786 - https://github.com/youwizard/CVE-POC +CVE-2022-37860 - https://github.com/ARPSyndicate/cve-scores CVE-2022-37861 - https://github.com/ARPSyndicate/cvemon CVE-2022-37861 - https://github.com/ox01024/ox01024 CVE-2022-37913 - https://github.com/karimhabush/cyberowl @@ -179268,6 +179369,7 @@ CVE-2022-38627 - https://github.com/fardeen-ahmed/Bug-bounty-Writeups CVE-2022-38627 - https://github.com/insecrez/Bug-bounty-Writeups CVE-2022-38628 - https://github.com/ARPSyndicate/cvemon CVE-2022-38628 - https://github.com/JoshMorrison99/my-nuceli-templates +CVE-2022-38637 - https://github.com/ARPSyndicate/cve-scores CVE-2022-38637 - https://github.com/ARPSyndicate/cvemon CVE-2022-38637 - https://github.com/ARPSyndicate/kenzer-templates CVE-2022-38637 - https://github.com/Henry4E36/POCS @@ -180255,6 +180357,7 @@ CVE-2022-40305 - https://github.com/20142995/nuclei-templates CVE-2022-40305 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2022-40307 - https://github.com/ARPSyndicate/cvemon CVE-2022-40307 - https://github.com/SettRaziel/bsi_cert_bot +CVE-2022-40309 - https://github.com/Veronica-Falgiani/Network-Protocol-Verification-Agent CVE-2022-4031 - https://github.com/20142995/nuclei-templates CVE-2022-40310 - https://github.com/20142995/nuclei-templates CVE-2022-40311 - https://github.com/20142995/nuclei-templates @@ -180435,6 +180538,7 @@ CVE-2022-4063 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2022-40632 - https://github.com/20142995/nuclei-templates CVE-2022-40634 - https://github.com/mbadanoiu/CVE-2022-40634 CVE-2022-40634 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2022-40635 - https://github.com/ARPSyndicate/cve-scores CVE-2022-40635 - https://github.com/mbadanoiu/CVE-2022-40635 CVE-2022-40635 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2022-40648 - https://github.com/ARPSyndicate/cvemon @@ -185457,6 +185561,7 @@ CVE-2022-5678 - https://github.com/grayf0x05/msf_exploit_finder_tool CVE-2022-5678 - https://github.com/jfrog/jfrog-client-go CVE-2022-5678 - https://github.com/k2xploit/vuln-finder CVE-2022-5678 - https://github.com/khulnasoft-lab/vulnmap-ls +CVE-2022-5678 - https://github.com/l1ackernishan/cve-finder CVE-2022-5678 - https://github.com/nahid0x1/cve-finder CVE-2022-5678 - https://github.com/nishan0x1/cve-finder CVE-2022-5678 - https://github.com/radheybildikar/network_scanner @@ -185489,6 +185594,7 @@ CVE-2022-98765 - https://github.com/SOLIHACK/MK CVE-2022-999989 - https://github.com/productaize/bogrod CVE-2022-99999 - https://github.com/PazDak/LoonSecurity CVE-2022-99999 - https://github.com/double16/shadycompass +CVE-2022-99999 - https://github.com/jay7848/vuln-scanner-pipeline CVE-2022-99999 - https://github.com/scagogogo/cve CVE-2022-999999 - https://github.com/productaize/bogrod CVE-2023-0001 - https://github.com/ACash5/programmatic-vulnerability-remediations @@ -186872,6 +186978,7 @@ CVE-2023-1234 - https://github.com/Guardefi/Guardefi-Production CVE-2023-1234 - https://github.com/Harmeek-19/Security-Infrastructure-Automation-Platform CVE-2023-1234 - https://github.com/IIxoskeletonII/osint-thesis CVE-2023-1234 - https://github.com/JoaoEnrique/watson-analise-vulnerabilidade +CVE-2023-1234 - https://github.com/JoaoEnrique/watson-vuln-checker CVE-2023-1234 - https://github.com/JorySeverijnse/Malphas CVE-2023-1234 - https://github.com/KaiandhisDranzer11/Shellcode-Generator-public CVE-2023-1234 - https://github.com/KevinDevSecOps/DASHBOARD-EN-FRASK @@ -186934,6 +187041,7 @@ CVE-2023-1234 - https://github.com/hsmmi/vulnerability-api CVE-2023-1234 - https://github.com/hybridx/scarlet-mesh CVE-2023-1234 - https://github.com/iamthamanic/WOARU-WorkaroundUltra CVE-2023-1234 - https://github.com/jason-allen-oneal/pentest-dataset-builder +CVE-2023-1234 - https://github.com/jblo/Github-Advisory-Downloader CVE-2023-1234 - https://github.com/jinchengyang98/Re-ccscaner CVE-2023-1234 - https://github.com/josephjilovec/Autonomous-AI-Threat-Hunter-Vulnerability-Prioritizer CVE-2023-1234 - https://github.com/julianwagnerfh/SIMS_JulianWagner @@ -186943,6 +187051,7 @@ CVE-2023-1234 - https://github.com/kandoul-pentest/Cyber-Kill-Chain- CVE-2023-1234 - https://github.com/karlsgate/sarif-issue-bot CVE-2023-1234 - https://github.com/kenshinx/threat-analysis-agents CVE-2023-1234 - https://github.com/khizar-anjum/risky-business-mcp +CVE-2023-1234 - https://github.com/l1ackernishan/cve-finder CVE-2023-1234 - https://github.com/labibhossen/Shodan CVE-2023-1234 - https://github.com/lodetomasi/zero-day-llm-ensemble CVE-2023-1234 - https://github.com/luci04-bot/RFSA-Tool @@ -194967,6 +195076,7 @@ CVE-2023-3024 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-3025 - https://github.com/20142995/nuclei-templates CVE-2023-30253 - https://github.com/04Shivam/CVE-2023-30253-Exploit CVE-2023-30253 - https://github.com/Esther7171/HTB-Walkthroughs +CVE-2023-30253 - https://github.com/Esther7171/HTB-Write-up CVE-2023-30253 - https://github.com/Milamagof/boardlight-walkthrough CVE-2023-30253 - https://github.com/Rubikcuv5/cve-2023-30253 CVE-2023-30253 - https://github.com/YuchaoZheng88/HTB-prepare @@ -202019,6 +202129,8 @@ CVE-2023-4128 - https://github.com/nidhi7598/linux-4.19.72_CVE-2023-4128 CVE-2023-4128 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2023-41290 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-41291 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2023-4130 - https://github.com/BitsByWill/ksmbd-n-day +CVE-2023-4130 - https://github.com/PuddinCat/GithubRepoSpider CVE-2023-4130 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-41313 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-41316 - https://github.com/mbiesiad/security-hall-of-fame-mb @@ -207185,6 +207297,7 @@ CVE-2023-49105 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2023-49105 - https://github.com/theguly/stars CVE-2023-49109 - https://github.com/ARPSyndicate/cve-scores CVE-2023-49109 - https://github.com/Drun1baby/JavaSecurityLearning +CVE-2023-49109 - https://github.com/PuddinCat/GithubRepoSpider CVE-2023-49109 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-49109 - https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3-2-0 CVE-2023-49109 - https://github.com/tanjiti/sec_profile @@ -209529,6 +209642,8 @@ CVE-2023-52437 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-52438 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-52439 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-5244 - https://github.com/ARPSyndicate/cve-scores +CVE-2023-52440 - https://github.com/BitsByWill/ksmbd-n-day +CVE-2023-52440 - https://github.com/PuddinCat/GithubRepoSpider CVE-2023-52440 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-52441 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2023-52443 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -210048,6 +210163,7 @@ CVE-2023-5678 - https://github.com/fokypoky/places-list CVE-2023-5678 - https://github.com/gitacme/cve_tools CVE-2023-5678 - https://github.com/gitpod-io/leeway CVE-2023-5678 - https://github.com/hsmmi/vulnerability-api +CVE-2023-5678 - https://github.com/jblo/Github-Advisory-Downloader CVE-2023-5678 - https://github.com/jtgorny/cve-scanning CVE-2023-5678 - https://github.com/mikedzikowski/cs-vuln-images-report CVE-2023-5678 - https://github.com/mmbazm/secure_license_server @@ -216486,6 +216602,7 @@ CVE-2024-0044 - https://github.com/canyie/canyie CVE-2024-0044 - https://github.com/fboaventura/awesome-starts CVE-2024-0044 - https://github.com/gmh5225/awesome-game-security CVE-2024-0044 - https://github.com/hunter24x24/cve_2024_0044 +CVE-2024-0044 - https://github.com/l1ackernishan/CVE-2024-0044 CVE-2024-0044 - https://github.com/nahid0x1/CVE-2024-0044 CVE-2024-0044 - https://github.com/nexussecelite/EvilDroid CVE-2024-0044 - https://github.com/nishan0x1/CVE-2024-0044 @@ -219919,6 +220036,7 @@ CVE-2024-12345 - https://github.com/jfeddern/VulnRelay CVE-2024-12345 - https://github.com/kasturixbm5/Automate-this-shi CVE-2024-12345 - https://github.com/kerouacwannabe/CVE-Vuln-Evaluator CVE-2024-12345 - https://github.com/kmukoo101/security_tools +CVE-2024-12345 - https://github.com/marklechner/cvewb CVE-2024-12345 - https://github.com/maxime67/ONE_sync CVE-2024-12345 - https://github.com/msumari/vulnagent CVE-2024-12345 - https://github.com/n3ptune-plan3t/pacguard @@ -223359,6 +223477,7 @@ CVE-2024-20931 - https://github.com/labesterOct/CVE-2024-20931 CVE-2024-20931 - https://github.com/laoa1573/wy876 CVE-2024-20931 - https://github.com/netlas-io/netlas-dorks CVE-2024-20931 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2024-20931 - https://github.com/nullcult/CVE_2024_209321 CVE-2024-20931 - https://github.com/oLy0/Vulnerability CVE-2024-20931 - https://github.com/sampsonv/github-trending CVE-2024-20931 - https://github.com/tanjiti/sec_profile @@ -223367,6 +223486,8 @@ CVE-2024-20931 - https://github.com/wooluo/POC00 CVE-2024-20931 - https://github.com/wy876/POC CVE-2024-20931 - https://github.com/wy876/wiki CVE-2024-20931 - https://github.com/zhaoxiaoha/github-trending +CVE-2024-209321 - https://github.com/PuddinCat/GithubRepoSpider +CVE-2024-209321 - https://github.com/nullcult/CVE_2024_209321 CVE-2024-20933 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-20935 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-20937 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -223759,6 +223880,7 @@ CVE-2024-21413 - https://github.com/FirikiIntelligence/Courses CVE-2024-21413 - https://github.com/GhostTroops/TOP CVE-2024-21413 - https://github.com/GuiMatosInfra/explorer2sectool CVE-2024-21413 - https://github.com/HYZ3K/CVE-2024-21413 +CVE-2024-21413 - https://github.com/HaroldFinchIFT/vuln-nist-mcp-server CVE-2024-21413 - https://github.com/Hunterdii/TryHackMe-Roadmap CVE-2024-21413 - https://github.com/Hunterdii/tryhackme-free-rooms CVE-2024-21413 - https://github.com/MQKGitHub/Exploitation-Basics @@ -225238,6 +225360,7 @@ CVE-2024-22416 - https://github.com/mindstorm38/ensimag-secu3a-cve-2024-22416 CVE-2024-22416 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2024-2242 - https://github.com/20142995/nuclei-templates CVE-2024-2242 - https://github.com/ARPSyndicate/cve-scores +CVE-2024-2242 - https://github.com/BharatCyberForce/wp-hunter CVE-2024-2242 - https://github.com/Chocapikk/wpprobe CVE-2024-2242 - https://github.com/RandomRobbieBF/CVE-2024-2242 CVE-2024-2242 - https://github.com/Zzl0y/bugs-and-arts @@ -225845,6 +225968,7 @@ CVE-2024-23334 - https://github.com/Lern0n/Lernon-POC CVE-2024-23334 - https://github.com/Linxloop/fork_POC CVE-2024-23334 - https://github.com/Ostorlab/KEV CVE-2024-23334 - https://github.com/Pylonet/CVE-2024-23334 +CVE-2024-23334 - https://github.com/Seby26Dev/-HTB-Chemistry CVE-2024-23334 - https://github.com/SecureDoughnut/Tinkoff-CTF-2024-lohness CVE-2024-23334 - https://github.com/TheRedP4nther/LFI-aiohttp-CVE-2024-23334-PoC CVE-2024-23334 - https://github.com/Warren-Jace/poc-doc @@ -230359,6 +230483,7 @@ CVE-2024-28116 - https://github.com/tanjiti/sec_profile CVE-2024-28117 - https://github.com/NaInSec/CVE-LIST CVE-2024-28118 - https://github.com/NaInSec/CVE-LIST CVE-2024-28119 - https://github.com/NaInSec/CVE-LIST +CVE-2024-2812 - https://github.com/ARPSyndicate/cve-scores CVE-2024-2812 - https://github.com/LaPhilosophie/IoT-vulnerable CVE-2024-2812 - https://github.com/NaInSec/CVE-LIST CVE-2024-2812 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -230860,6 +230985,7 @@ CVE-2024-28734 - https://github.com/NaInSec/CVE-LIST CVE-2024-28734 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-28735 - https://github.com/NaInSec/CVE-LIST CVE-2024-28735 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2024-28739 - https://github.com/ARPSyndicate/cve-scores CVE-2024-28740 - https://github.com/20142995/nuclei-templates CVE-2024-28740 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2024-28741 - https://github.com/ARPSyndicate/cve-scores @@ -233220,6 +233346,7 @@ CVE-2024-3094 - https://github.com/lu-zero/autotools-rs CVE-2024-3094 - https://github.com/lypd0/CVE-2024-3094-Vulnerabity-Checker CVE-2024-3094 - https://github.com/marcelofmatos/ssh-xz-backdoor CVE-2024-3094 - https://github.com/marcoramilli/marcoramilli +CVE-2024-3094 - https://github.com/marklechner/cvewb CVE-2024-3094 - https://github.com/mauvehed/starred CVE-2024-3094 - https://github.com/mesutgungor/xz-backdoor-vulnerability CVE-2024-3094 - https://github.com/mightysai1997/CVE-2024-3094 @@ -236036,6 +236163,7 @@ CVE-2024-3443 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-34432 - https://github.com/20142995/nuclei-templates CVE-2024-3444 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-3444 - https://github.com/h0e4a0r1t/h0e4a0r1t +CVE-2024-34444 - https://github.com/BharatCyberForce/wp-hunter CVE-2024-34445 - https://github.com/20142995/nuclei-templates CVE-2024-34446 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-34447 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -237687,6 +237815,7 @@ CVE-2024-37434 - https://github.com/20142995/nuclei-templates CVE-2024-37435 - https://github.com/20142995/nuclei-templates CVE-2024-37436 - https://github.com/20142995/nuclei-templates CVE-2024-37437 - https://github.com/20142995/nuclei-templates +CVE-2024-37437 - https://github.com/BharatCyberForce/wp-hunter CVE-2024-37437 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-37438 - https://github.com/20142995/nuclei-templates CVE-2024-37438 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -244150,6 +244279,7 @@ CVE-2024-4701 - https://github.com/JinhyukKo/CVE-2024-4701-POC CVE-2024-4701 - https://github.com/JoeBeeton/CVE-2024-4701-POC CVE-2024-4701 - https://github.com/PuddinCat/GithubRepoSpider CVE-2024-4701 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2024-4701 - https://github.com/zulloper/cve-poc CVE-2024-47010 - https://github.com/ARPSyndicate/cve-scores CVE-2024-47010 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-47011 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -244164,6 +244294,7 @@ CVE-2024-47033 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-47034 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-47035 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-4704 - https://github.com/20142995/nuclei-templates +CVE-2024-4704 - https://github.com/BharatCyberForce/wp-hunter CVE-2024-4704 - https://github.com/Chocapikk/wpprobe CVE-2024-4704 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-47041 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -248533,6 +248664,7 @@ CVE-2024-54150 - https://github.com/bavamont/jwt-security-analyzer CVE-2024-54150 - https://github.com/tylzars/awesome-vrre-writeups CVE-2024-54152 - https://github.com/math-x-io/CVE-2024-54152-poc CVE-2024-5416 - https://github.com/20142995/nuclei-templates +CVE-2024-5416 - https://github.com/BharatCyberForce/wp-hunter CVE-2024-5416 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2024-5416 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-54160 - https://github.com/Jflye/CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS @@ -251815,6 +251947,7 @@ CVE-2024-6387 - https://github.com/MrR0b0t19/CVE-6387-SSH-v2 CVE-2024-6387 - https://github.com/Mufti22/CVE-2024-6387-checkher CVE-2024-6387 - https://github.com/MuhammadMuazen/thagarat CVE-2024-6387 - https://github.com/NathanielChit/my-awesome-stars +CVE-2024-6387 - https://github.com/OhDamnn/Noregressh CVE-2024-6387 - https://github.com/Ostorlab/KEV CVE-2024-6387 - https://github.com/P4x1s/CVE-2024-6387 CVE-2024-6387 - https://github.com/Passyed/regreSSHion-Fix @@ -253953,6 +254086,7 @@ CVE-2024-8104 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2024-8106 - https://github.com/20142995/nuclei-templates CVE-2024-8106 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2024-8107 - https://github.com/20142995/nuclei-templates +CVE-2024-8107 - https://github.com/BharatCyberForce/wp-hunter CVE-2024-8107 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2024-8108 - https://github.com/20142995/nuclei-templates CVE-2024-8108 - https://github.com/cyb3r-w0lf/nuclei-template-collection @@ -255521,6 +255655,7 @@ CVE-2024-9264 - https://github.com/byt3loss/Nuclei-Blues CVE-2024-9264 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2024-9264 - https://github.com/defHawk-tech/CVEs CVE-2024-9264 - https://github.com/eeeeeeeeee-code/POC +CVE-2024-9264 - https://github.com/fcoomans/HTB-machines CVE-2024-9264 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2024-9264 - https://github.com/greenberglinken/2023hvv_1 CVE-2024-9264 - https://github.com/hacieda/planning.htb @@ -257187,6 +257322,7 @@ CVE-2025-10142 - https://github.com/MooseLoveti/PagSeguro-Connect-Para-WooCommer CVE-2025-10142 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-10142 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-10148 - https://github.com/8-cm/kube-dump +CVE-2025-10148 - https://github.com/ARPSyndicate/cve-scores CVE-2025-1015 - https://github.com/0xMarcio/cve CVE-2025-1015 - https://github.com/ARPSyndicate/cve-scores CVE-2025-1015 - https://github.com/GhostTroops/TOP @@ -257231,12 +257367,20 @@ CVE-2025-10365 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-10366 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-10367 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-10371 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-10372 - https://github.com/KarinaGante/KG-Sec +CVE-2025-10372 - https://github.com/KarinaGante/KarinaGante CVE-2025-10372 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-10373 - https://github.com/KarinaGante/KG-Sec +CVE-2025-10373 - https://github.com/KarinaGante/KarinaGante CVE-2025-10373 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-10374 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-10377 - https://github.com/NagisaYumaa/Cross-Site-Request-Forgery-CSRF-in-Plugin-System-Dashboard-Funtion-sd_toggle_logs CVE-2025-1039 - https://github.com/20142995/nuclei-templates CVE-2025-1039 - https://github.com/cyb3r-w0lf/nuclei-template-collection +CVE-2025-10400 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-10403 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-10404 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-10405 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-1042 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-1043 - https://github.com/20142995/nuclei-templates CVE-2025-1043 - https://github.com/cyb3r-w0lf/nuclei-template-collection @@ -257550,6 +257694,7 @@ CVE-2025-1464 - https://github.com/Mr-xn/Penetration_Testing_POC CVE-2025-1468 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-1470 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-1471 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-1477 - https://github.com/ARPSyndicate/cve-scores CVE-2025-1483 - https://github.com/20142995/nuclei-templates CVE-2025-1483 - https://github.com/cyb3r-w0lf/nuclei-template-collection CVE-2025-1484 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -258449,6 +258594,9 @@ CVE-2025-21687 - https://github.com/w4zu/Debian_security CVE-2025-21688 - https://github.com/w4zu/Debian_security CVE-2025-21689 - https://github.com/w4zu/Debian_security CVE-2025-21690 - https://github.com/w4zu/Debian_security +CVE-2025-21692 - https://github.com/PuddinCat/GithubRepoSpider +CVE-2025-21692 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2025-21692 - https://github.com/volticks/CVE-2025-21692-poc CVE-2025-21692 - https://github.com/w4zu/Debian_security CVE-2025-21694 - https://github.com/w4zu/Debian_security CVE-2025-21697 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -258530,6 +258678,7 @@ CVE-2025-21756 - https://github.com/khoatran107/cve-2025-21756 CVE-2025-21756 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-21756 - https://github.com/plzheheplztrying/cve_monitor CVE-2025-21756 - https://github.com/tanjiti/sec_profile +CVE-2025-21756 - https://github.com/volticks/CVE-2025-21692-poc CVE-2025-21756 - https://github.com/w4zu/Debian_security CVE-2025-21756 - https://github.com/xairy/linux-kernel-exploitation CVE-2025-21758 - https://github.com/w4zu/Debian_security @@ -261352,6 +261501,7 @@ CVE-2025-24971 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-24971 - https://github.com/plzheheplztrying/cve_monitor CVE-2025-24975 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-24975 - https://github.com/w4zu/Debian_security +CVE-2025-2498 - https://github.com/ARPSyndicate/cve-scores CVE-2025-24982 - https://github.com/20142995/nuclei-templates CVE-2025-24983 - https://github.com/AfanPan/CVE-2025-29824-Exploit CVE-2025-24983 - https://github.com/ghostbyt3/patch-tuesday @@ -262293,6 +262443,7 @@ CVE-2025-27013 - https://github.com/20142995/nuclei-templates CVE-2025-27016 - https://github.com/20142995/nuclei-templates CVE-2025-2702 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-2703 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-27034 - https://github.com/ARPSyndicate/cve-scores CVE-2025-27038 - https://github.com/ARPSyndicate/cve-scores CVE-2025-27038 - https://github.com/packetinside/CISA_BOT CVE-2025-27038 - https://github.com/ums91/CISA_BOT @@ -263549,6 +263700,8 @@ CVE-2025-29927 - https://github.com/mickhacking/Thank-u-Next CVE-2025-29927 - https://github.com/miguelhuayhua/ecommerce CVE-2025-29927 - https://github.com/miknivin/cliq CVE-2025-29927 - https://github.com/miknivin/qoncept-crm +CVE-2025-29927 - https://github.com/milagresjr/alfaenu_front +CVE-2025-29927 - https://github.com/ming-kwee/labamap-fe CVE-2025-29927 - https://github.com/miteshpr97/stock-count CVE-2025-29927 - https://github.com/moften/CVE-2025-29927 CVE-2025-29927 - https://github.com/mohammedtanvir93/finance-client @@ -263601,6 +263754,7 @@ CVE-2025-29927 - https://github.com/projectmanagerpeopletech/Dashbord_Nextjs CVE-2025-29927 - https://github.com/q-allen/Lending-AI CVE-2025-29927 - https://github.com/quanghv20/my-cms-fe CVE-2025-29927 - https://github.com/quanghv20/nextjs-admin-dashboard +CVE-2025-29927 - https://github.com/quinnnaira/admin_dashboard CVE-2025-29927 - https://github.com/rahulchangra/dashboard CVE-2025-29927 - https://github.com/rai-rose/LORA-LendingAI CVE-2025-29927 - https://github.com/rai-rose/Lending-AI @@ -264771,6 +264925,7 @@ CVE-2025-3244 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-32442 - https://github.com/ARPSyndicate/cve-scores CVE-2025-32445 - https://github.com/ARPSyndicate/cve-scores CVE-2025-3245 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-32451 - https://github.com/ARPSyndicate/cve-scores CVE-2025-32451 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-3246 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-32462 - https://github.com/ARPSyndicate/cve-scores @@ -264913,6 +265068,7 @@ CVE-2025-3248 - https://github.com/Pawan22104168/Langflow_UI CVE-2025-3248 - https://github.com/Praison001/CVE-2025-3248 CVE-2025-3248 - https://github.com/PuddinCat/CVE-2025-3248-POC CVE-2025-3248 - https://github.com/PuddinCat/GithubRepoSpider +CVE-2025-3248 - https://github.com/Rahu7p/MyLangflow CVE-2025-3248 - https://github.com/Threekiii/Awesome-POC CVE-2025-3248 - https://github.com/Threekiii/CVE CVE-2025-3248 - https://github.com/Vip3rLi0n/CVE-2025-3248 @@ -265412,6 +265568,7 @@ CVE-2025-3515 - https://github.com/MrSoules/lab-cve-2025-3515 CVE-2025-3515 - https://github.com/Professor6T9/CVE-2025-3515 CVE-2025-3515 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-3515 - https://github.com/blueisbeautiful/CVE-2025-3515 +CVE-2025-3515 - https://github.com/brokendreamsclub/CVE-2025-3515 CVE-2025-3515 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-3515 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-3515 - https://github.com/plzheheplztrying/cve_monitor @@ -266304,6 +266461,8 @@ CVE-2025-40723 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-4075 - https://github.com/cnetsec/south-america-cve-hall CVE-2025-40757 - https://github.com/TrebledJ/TrebledJ CVE-2025-40758 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-40762 - https://github.com/ARPSyndicate/cve-scores +CVE-2025-40764 - https://github.com/ARPSyndicate/cve-scores CVE-2025-40766 - https://github.com/FurkanKAYAPINAR/ecs_checker CVE-2025-40766 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-40767 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -266313,6 +266472,10 @@ CVE-2025-40775 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-40775 - https://github.com/runwhen-contrib/helm-charts CVE-2025-40777 - https://github.com/8-cm/kube-dump CVE-2025-4079 - https://github.com/cnetsec/south-america-cve-hall +CVE-2025-40795 - https://github.com/ARPSyndicate/cve-scores +CVE-2025-40796 - https://github.com/ARPSyndicate/cve-scores +CVE-2025-40797 - https://github.com/ARPSyndicate/cve-scores +CVE-2025-40798 - https://github.com/ARPSyndicate/cve-scores CVE-2025-4081 - https://github.com/Karmaz95/Credits CVE-2025-4081 - https://github.com/afine-com/research CVE-2025-4083 - https://github.com/ARPSyndicate/cve-scores @@ -267086,6 +267249,7 @@ CVE-2025-45512 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-45512 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-45525 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-45542 - https://github.com/ARPSyndicate/cve-scores +CVE-2025-45582 - https://github.com/ARPSyndicate/cve-scores CVE-2025-45582 - https://github.com/LinuxUser255/hardn_debian_docker_image CVE-2025-45582 - https://github.com/OpenSource-For-Freedom/hardn_debian_docker_image CVE-2025-45582 - https://github.com/Security-International-Group/HARDN_DOCKER @@ -267262,6 +267426,10 @@ CVE-2025-46394 - https://github.com/kaisensan/desafio-girus-pick CVE-2025-46397 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-46398 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-46405 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-46408 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2025-46408 - https://github.com/shinyColumn/CVE-2025-46408 +CVE-2025-46408 - https://github.com/shinyColumn/CVE-2025-50110 +CVE-2025-46408 - https://github.com/shinyColumn/CVE-2025-50944 CVE-2025-46412 - https://github.com/ARPSyndicate/cve-scores CVE-2025-46414 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-46420 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -267601,6 +267769,7 @@ CVE-2025-47730 - https://github.com/ARPSyndicate/cve-scores CVE-2025-4774 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-47779 - https://github.com/w4zu/Debian_security CVE-2025-47780 - https://github.com/w4zu/Debian_security +CVE-2025-47783 - https://github.com/Medok228/Medok228 CVE-2025-47792 - https://github.com/ARPSyndicate/cve-scores CVE-2025-47806 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-47809 - https://github.com/ARPSyndicate/cve-scores @@ -267845,7 +268014,10 @@ CVE-2025-48542 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-48543 - https://github.com/ARPSyndicate/cve-scores CVE-2025-48543 - https://github.com/CryptoGenNepal/CVE-KEV-RSS CVE-2025-48543 - https://github.com/DevGreick/devgreick +CVE-2025-48543 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-48543 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-48543 - https://github.com/gamesarchive/CVE-2025-48543 +CVE-2025-48543 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-48544 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-48545 - https://github.com/canyie/canyie CVE-2025-48545 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -267960,6 +268132,8 @@ CVE-2025-48912 - https://github.com/ARPSyndicate/cve-scores CVE-2025-48913 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-48924 - https://github.com/ARPSyndicate/cve-scores CVE-2025-48924 - https://github.com/Codegass/AAA-Issue-Refactor +CVE-2025-48924 - https://github.com/LocalPiperITMO/information-security +CVE-2025-48924 - https://github.com/awakelife93/kotlin-clean-architecture-multimodule CVE-2025-48924 - https://github.com/epimorphics/lib CVE-2025-48924 - https://github.com/marcieldeg/access2excel CVE-2025-48924 - https://github.com/mathieu1987-droid/reu-alt-demo @@ -268377,6 +268551,10 @@ CVE-2025-5010 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-50100 - https://github.com/ARPSyndicate/cve-scores CVE-2025-50106 - https://github.com/w4zu/Debian_security CVE-2025-5011 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-50110 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2025-50110 - https://github.com/shinyColumn/CVE-2025-46408 +CVE-2025-50110 - https://github.com/shinyColumn/CVE-2025-50110 +CVE-2025-50110 - https://github.com/shinyColumn/CVE-2025-50944 CVE-2025-50126 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-50128 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-50154 - https://github.com/ARPSyndicate/cve-scores @@ -268631,6 +268809,10 @@ CVE-2025-50901 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-50904 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-50927 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-50928 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-50944 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2025-50944 - https://github.com/shinyColumn/CVE-2025-46408 +CVE-2025-50944 - https://github.com/shinyColumn/CVE-2025-50110 +CVE-2025-50944 - https://github.com/shinyColumn/CVE-2025-50944 CVE-2025-50946 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-5095 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-5095 - https://github.com/TeteuXD2/CVE-2025-5095-POC @@ -269266,6 +269448,7 @@ CVE-2025-53652 - https://github.com/yembors64632/cve_monitor_Public CVE-2025-5366 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53689 - https://github.com/Threekiii/CVE CVE-2025-5369 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +CVE-2025-5369 - https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 CVE-2025-53690 - https://github.com/B1ack4sh/Blackash-CVE-2025-53690 CVE-2025-53690 - https://github.com/CryptoGenNepal/CVE-KEV-RSS CVE-2025-53690 - https://github.com/DevGreick/devgreick @@ -269279,16 +269462,22 @@ CVE-2025-53690 - https://github.com/zzyss-marker/actions CVE-2025-53691 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-53691 - https://github.com/blueisbeautiful/CVE-2025-53691 CVE-2025-53691 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +CVE-2025-53691 - https://github.com/brokendreamsclub/CVE-2025-53691 +CVE-2025-53691 - https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 CVE-2025-53691 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53691 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-53693 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-53693 - https://github.com/blueisbeautiful/CVE-2025-53693 CVE-2025-53693 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +CVE-2025-53693 - https://github.com/brokendreamsclub/CVE-2025-53693 +CVE-2025-53693 - https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 CVE-2025-53693 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53693 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-53694 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-53694 - https://github.com/blueisbeautiful/CVE-2025-53694 CVE-2025-53694 - https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691 +CVE-2025-53694 - https://github.com/brokendreamsclub/CVE-2025-53694 +CVE-2025-53694 - https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691 CVE-2025-53694 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53694 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-53711 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -269473,6 +269662,7 @@ CVE-2025-53833 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-53833 - https://github.com/tanjiti/sec_profile CVE-2025-53835 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53836 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-53838 - https://github.com/Medok228/Medok228 CVE-2025-53853 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53857 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-53859 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -269585,6 +269775,7 @@ CVE-2025-54234 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-54236 - https://github.com/amalpvatayam67/day01-sessionreaper-lab CVE-2025-54236 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-54236 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2025-54236 - https://github.com/thexnumb/thexwriteup CVE-2025-54242 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-54243 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-54244 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -269609,6 +269800,7 @@ CVE-2025-54309 - https://github.com/ARPSyndicate/cve-scores CVE-2025-54309 - https://github.com/DevGreick/devgreick CVE-2025-54309 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-54309 - https://github.com/blueisbeautiful/CVE-2025-54309 +CVE-2025-54309 - https://github.com/brokendreamsclub/CVE-2025-54309 CVE-2025-54309 - https://github.com/foregenix/CVE-2025-54309 CVE-2025-54309 - https://github.com/issamjr/CVE-2025-54309-EXPLOIT CVE-2025-54309 - https://github.com/nomi-sec/PoC-in-GitHub @@ -269727,6 +269919,7 @@ CVE-2025-54490 - https://github.com/ARPSyndicate/cve-scores CVE-2025-54491 - https://github.com/ARPSyndicate/cve-scores CVE-2025-54493 - https://github.com/ARPSyndicate/cve-scores CVE-2025-54500 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-54500 - https://github.com/pinoyvendetta/pv-nodejs-layer-7 CVE-2025-54525 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-54530 - https://github.com/crisprss/CVEs CVE-2025-54531 - https://github.com/user0x1337/user0x1337 @@ -269892,6 +270085,7 @@ CVE-2025-54987 - https://github.com/allinsthon/CVE-2025-54948 CVE-2025-54988 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-54988 - https://github.com/mgthuramoemyint/POC-CVE-2025-54988 CVE-2025-54988 - https://github.com/nomi-sec/PoC-in-GitHub +CVE-2025-54988 - https://github.com/righettod/toolbox-pentest-web CVE-2025-54989 - https://github.com/ARPSyndicate/cve-scores CVE-2025-54989 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-54989 - https://github.com/w4zu/Debian_security @@ -270018,6 +270212,7 @@ CVE-2025-55305 - https://github.com/ARPSyndicate/cve-scores CVE-2025-55306 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-55316 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-55317 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-55319 - https://github.com/ARPSyndicate/cve-scores CVE-2025-55319 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-55319 - https://github.com/tanjiti/sec_profile CVE-2025-55349 - https://github.com/GoldenTicketLabs/CVE-2025-55349 @@ -270132,6 +270327,7 @@ CVE-2025-55746 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-55746 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-55746 - https://github.com/r4bbit-r4/directus-preso CVE-2025-55747 - https://github.com/tanjiti/sec_profile +CVE-2025-55748 - https://github.com/ARPSyndicate/cve-scores CVE-2025-55748 - https://github.com/tanjiti/sec_profile CVE-2025-55763 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-55763 - https://github.com/krispybyte/CVE-2025-55763 @@ -270209,6 +270405,7 @@ CVE-2025-56404 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-56405 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-56406 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-56407 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-56413 - https://github.com/ARPSyndicate/cve-scores CVE-2025-56413 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-56432 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-56435 - https://github.com/Jingyi-u/-CVE-2025-56435 @@ -270328,6 +270525,7 @@ CVE-2025-57759 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-57760 - https://github.com/ARPSyndicate/cve-scores CVE-2025-57760 - https://github.com/AngelPalominoF/Martina-IA CVE-2025-57760 - https://github.com/Pawan22104168/Langflow_UI +CVE-2025-57760 - https://github.com/Rahu7p/MyLangflow CVE-2025-57760 - https://github.com/arsharma2005/adding-button CVE-2025-57760 - https://github.com/aryan-spanda/langflow-main CVE-2025-57760 - https://github.com/langflow-ai/langflow @@ -270417,6 +270615,7 @@ CVE-2025-57819 - https://github.com/MuhammadWaseem29/SQL-Injection-and-RCE_CVE-2 CVE-2025-57819 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-57819 - https://github.com/Sucuri-Labs/CVE-2025-57819-ioc-check CVE-2025-57819 - https://github.com/blueisbeautiful/CVE-2025-57819 +CVE-2025-57819 - https://github.com/brokendreamsclub/CVE-2025-57819 CVE-2025-57819 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-57819 - https://github.com/net-hex/CVE-2025-57819 CVE-2025-57819 - https://github.com/nomi-sec/PoC-in-GitHub @@ -270424,6 +270623,7 @@ CVE-2025-57819 - https://github.com/rxerium/CVE-2025-57819 CVE-2025-57819 - https://github.com/rxerium/stars CVE-2025-57819 - https://github.com/ums91/CISA_BOT CVE-2025-57819 - https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819 +CVE-2025-57819 - https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC CVE-2025-57821 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-57822 - https://github.com/tanjiti/sec_profile CVE-2025-57833 - https://github.com/EyalSec/EyalSec_CVE @@ -270546,6 +270746,7 @@ CVE-2025-58746 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-5875 - https://github.com/Lunax0/CVE_List CVE-2025-58751 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-58752 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-58754 - https://github.com/ARPSyndicate/cve-scores CVE-2025-58754 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-58757 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-58761 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -270595,10 +270796,12 @@ CVE-2025-59017 - https://github.com/ARPSyndicate/cve-scores CVE-2025-59033 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-59037 - https://github.com/ARPSyndicate/cve-scores CVE-2025-59037 - https://github.com/mjbommar/check-npm-debug-chalk +CVE-2025-59041 - https://github.com/ARPSyndicate/cve-scores CVE-2025-59046 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-59046 - https://github.com/thexnumb/thexwriteup CVE-2025-59047 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-59049 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-59052 - https://github.com/ARPSyndicate/cve-scores CVE-2025-59052 - https://github.com/rix4uni/medium-writeups CVE-2025-59053 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-59055 - https://github.com/fkie-cad/nvd-json-data-feeds @@ -271192,6 +271395,7 @@ CVE-2025-7775 - https://github.com/Aaqilyousuf/CVE-2025-7775-vulnerable-lab CVE-2025-7775 - https://github.com/CryptoGenNepal/CVE-KEV-RSS CVE-2025-7775 - https://github.com/DevGreick/devgreick CVE-2025-7775 - https://github.com/PuddinCat/GithubRepoSpider +CVE-2025-7775 - https://github.com/alukashenkov/VM-Agent CVE-2025-7775 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-7775 - https://github.com/fox-it/citrix-netscaler-triage CVE-2025-7775 - https://github.com/hacker-r3volv3r/CVE-2025-7775-PoC @@ -271386,6 +271590,7 @@ CVE-2025-8088 - https://github.com/sxyrxyy/CVE-2025-8088-WinRAR-Proof-of-Concept CVE-2025-8088 - https://github.com/tanjiti/sec_profile CVE-2025-8088 - https://github.com/tartalu/CVE-2025-8088 CVE-2025-8088 - https://github.com/tasox/rarADSExtractor +CVE-2025-8088 - https://github.com/techcorp/CVE-2025-8088-Exploit CVE-2025-8088 - https://github.com/thexnumb/thexwriteup CVE-2025-8088 - https://github.com/travisbgreen/cve-2025-8088 CVE-2025-8088 - https://github.com/ums91/CISA_BOT @@ -272082,6 +272287,7 @@ CVE-2025-9074 - https://github.com/nomi-sec/PoC-in-GitHub CVE-2025-9074 - https://github.com/semantic-honu/today-i-learned CVE-2025-9074 - https://github.com/zenzue/CVE-2025-9074 CVE-2025-9086 - https://github.com/8-cm/kube-dump +CVE-2025-9086 - https://github.com/ARPSyndicate/cve-scores CVE-2025-9086 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-9090 - https://github.com/PuddinCat/GithubRepoSpider CVE-2025-9090 - https://github.com/byteReaper77/CVE-2025-9090 @@ -272188,6 +272394,7 @@ CVE-2025-9195 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-9201 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-9202 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-9214 - https://github.com/fkie-cad/nvd-json-data-feeds +CVE-2025-9217 - https://github.com/BharatCyberForce/wp-hunter CVE-2025-9219 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-9225 - https://github.com/fkie-cad/nvd-json-data-feeds CVE-2025-9228 - https://github.com/fkie-cad/nvd-json-data-feeds diff --git a/references.txt b/references.txt index 040250f7b4..88b6f24f02 100644 --- a/references.txt +++ b/references.txt @@ -2800,6 +2800,7 @@ CVE-2005-3983 - https://oval.cisecurity.org/repository/search/definition/oval%3A CVE-2005-3991 - http://securityreason.com/securityalert/221 CVE-2005-3992 - http://securityreason.com/securityalert/226 CVE-2005-4005 - http://securityreason.com/securityalert/31 +CVE-2005-4011 - http://ltwcalendar.sourceforge.net/changelog.php CVE-2005-4015 - http://securityreason.com/securityalert/214 CVE-2005-4058 - http://evuln.com/vulns/40/summary.html CVE-2005-4065 - http://securityreason.com/securityalert/222 @@ -5995,6 +5996,8 @@ CVE-2006-6222 - http://securityreason.com/securityalert/2033 CVE-2006-6225 - https://www.exploit-db.com/exploits/1963 CVE-2006-6226 - http://aluigi.altervista.org/adv/neoenginex-adv.txt CVE-2006-6227 - http://aluigi.altervista.org/adv/neoenginex-adv.txt +CVE-2006-6228 - http://ltwcalendar.sourceforge.net/changelog.php +CVE-2006-6229 - http://ltwcalendar.sourceforge.net/changelog.php CVE-2006-6235 - http://www.redhat.com/support/errata/RHSA-2006-0754.html CVE-2006-6236 - https://www.exploit-db.com/exploits/3040 CVE-2006-6237 - https://www.exploit-db.com/exploits/2841 @@ -45287,6 +45290,7 @@ CVE-2016-6915 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561 CVE-2016-6916 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561 CVE-2016-6917 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561 CVE-2016-6920 - http://packetstormsecurity.com/files/138618/ffmpeg-3.1.2-Heap-Overflow.html +CVE-2016-7031 - https://github.com/ceph/ceph/pull/6057 CVE-2016-7032 - https://usn.ubuntu.com/3968-3/ CVE-2016-7035 - https://github.com/ClusterLabs/pacemaker/commit/5d71e65049 CVE-2016-7039 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html @@ -48729,6 +48733,7 @@ CVE-2017-15357 - https://www.exploit-db.com/exploits/43218/ CVE-2017-15358 - https://www.exploit-db.com/exploits/45107/ CVE-2017-15359 - https://www.exploit-db.com/exploits/42991/ CVE-2017-15360 - https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b +CVE-2017-15361 - https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update CVE-2017-15361 - https://www.kb.cert.org/vuls/id/307015 CVE-2017-15363 - https://extensions.typo3.org/extension/download/restler/1.7.1/zip/ CVE-2017-15365 - https://www.percona.com/blog/2017/10/30/percona-xtradb-cluster-5-6-37-26-21-3-is-now-available/ @@ -89100,6 +89105,7 @@ CVE-2021-45567 - https://kb.netgear.com/000064089/Security-Advisory-for-Post-Aut CVE-2021-45568 - https://kb.netgear.com/000064090/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0076 CVE-2021-45570 - https://kb.netgear.com/000064092/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0078 CVE-2021-45574 - https://kb.netgear.com/000064096/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0082 +CVE-2021-45575 - https://kb.netgear.com/000064097/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0083 CVE-2021-45576 - https://kb.netgear.com/000064098/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0084 CVE-2021-45577 - https://kb.netgear.com/000064099/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0085 CVE-2021-45578 - https://kb.netgear.com/000064100/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0086 @@ -101710,6 +101716,7 @@ CVE-2023-2396 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/16 CVE-2023-2398 - https://wpscan.com/vulnerability/16d47d20-58aa-4d04-9275-fd91ce926ff3 CVE-2023-2399 - https://wpscan.com/vulnerability/deca3cd3-f7cf-469f-9f7e-3612f7ae514d CVE-2023-2399 - https://wpscan.com/vulnerability/deca3cd3-f7cf-469f-9f7e-3612f7ae514d/ +CVE-2023-23999 - https://patchstack.com/database/vulnerability/google-analytics-for-wordpress/wordpress-google-analytics-by-monsterinsights-plugin-8-14-0-cross-site-scripting-xss-vulnerability?_s_id=cve CVE-2023-2400 - https://devolutions.net/security/advisories/DEVO-2023-0014 CVE-2023-2401 - https://wpscan.com/vulnerability/0746ea56-dd88-4fc3-86a3-54408eef1f94 CVE-2023-24010 - https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d @@ -106929,6 +106936,7 @@ CVE-2023-46023 - https://github.com/ersinerenler/Code-Projects-Simple-Task-List- CVE-2023-46024 - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46024-phpgurukul-Teacher-Subject-Allocation-Management-System-1.0-SQL-Injection-Vulnerability.md CVE-2023-46025 - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46025-phpgurukul-Teacher-Subject-Allocation-Management-System-1.0-SQL-Injection-Vulnerability.md CVE-2023-46026 - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46026-PHPGurukul-Teacher-Subject-Allocation-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md +CVE-2023-4603 - https://drive.google.com/file/d/1cRVH7Oz6M2U2XTbNAmm43PDKBw6FzShA/view?usp=sharing CVE-2023-46047 - https://gitlab.com/sane-project/backends/-/issues/708 CVE-2023-46048 - https://tug.org/pipermail/tex-live/2023-August/049400.html CVE-2023-46052 - https://gitlab.com/sane-project/backends/-/issues/709 @@ -108979,6 +108987,7 @@ CVE-2023-7202 - https://wpscan.com/vulnerability/d923ba5b-1c20-40ee-ac69-cd0bb65 CVE-2023-7203 - https://wpscan.com/vulnerability/b514b631-c3e3-4793-ab5d-35ed0c38b011/ CVE-2023-7204 - https://wpscan.com/vulnerability/65a8cf83-d6cc-4d4c-a482-288a83a69879/ CVE-2023-7208 - https://github.com/unpWn4bL3/iot-security/blob/main/13.md +CVE-2023-7209 - https://drive.google.com/file/d/1XDZA4ibiYNcxTwq60vYCr03_6M_cvJ_2/view?usp=sharing CVE-2023-7210 - https://vuldb.com/?id.249765 CVE-2023-7211 - https://drive.google.com/file/d/11thSuALGcn0C_9tbmYu8_QzTXtBnCoNS/view?usp=sharing CVE-2023-7211 - https://vuldb.com/?id.249766 @@ -114566,6 +114575,7 @@ CVE-2024-40553 - https://gitee.com/project_team/Tmall_demo/issues/IAANVC CVE-2024-40554 - https://gitee.com/project_team/Tmall_demo/issues/IAANYB CVE-2024-40560 - https://gitee.com/project_team/Tmall_demo/issues/IAAOT1 CVE-2024-4057 - https://wpscan.com/vulnerability/da4d4d87-07b3-4f7d-bcbd-d29968a30b4f/ +CVE-2024-40570 - https://github.com/seacms-net/CMS/issues/20 CVE-2024-40576 - https://github.com/jubilianite/CVEs/blob/main/CVE-2024-40576.md CVE-2024-40576 - https://github.com/jubilianite/CVEs/security/advisories/GHSA-674x-j9wj-qvpp CVE-2024-40582 - https://medium.com/@vishnuchttrj/exploiting-vms-vulnerabilities-to-access-confidential-data-cve-2024-40582-cve-2024-40583-60d957933b78 @@ -120807,6 +120817,7 @@ CVE-2025-3204 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/21 CVE-2025-3205 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/20 CVE-2025-3206 - https://github.com/Lanxiy7th/lx_CVE_report-/issues/19 CVE-2025-3207 - https://github.com/2364490073/cve1/blob/main/README.md +CVE-2025-3208 - https://github.com/ZOKEYE/CVE/blob/main/cve2.md CVE-2025-3209 - https://github.com/yjlhk/cve/blob/main/README.md CVE-2025-32093 - https://mattermost.com/security-updates CVE-2025-3210 - https://github.com/yujiyuji159/cve/blob/main/README.md