Update Thu Sep 11 11:30:42 UTC 2025

2002/CVE-2002-0013.md

@@ -13,6 +13,7 @@ Vulnerabilities in the SNMPv1 request handling of a large number of SNMP impleme
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/KeerthiYasasvi/Honeypot-Data-Analysis-using-T-pot
 - https://github.com/Linathimqalo/cloud-honeypot-analysis
 - https://github.com/alanshlam/HoneyNet

2002/CVE-2002-0053.md

@@ -0,0 +1,17 @@
+### [CVE-2002-0053](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0053)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.  NOTE: this candidate may be split or merged with other candidates.  This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2002/CVE-2002-0386.md

@@ -0,0 +1,17 @@
+### [CVE-2002-0386](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0386)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2002/CVE-2002-1054.md

@@ -0,0 +1,17 @@
+### [CVE-2002-1054](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1054)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2002/CVE-2002-1874.md

@@ -10,7 +10,7 @@ astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execut
 ### POC
 
 #### Reference
-No PoCs from references.
+- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
 
 #### Github
 - https://github.com/SamanShafigh/vulBERT

2004/CVE-2004-0216.md

@@ -13,5 +13,5 @@ Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01,
 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2004/CVE-2004-0844.md

@@ -14,5 +14,5 @@ Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote at
 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8127
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2006/CVE-2006-5065.md

@@ -10,6 +10,7 @@ PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0
 ### POC
 
 #### Reference
+- http://zoomstats.cvs.sourceforge.net/zoomstats/zoomstats/libs/dbmax/mysql.php?view=markup
 - https://www.exploit-db.com/exploits/2420
 
 #### Github

2006/CVE-2006-5552.md

@@ -13,5 +13,5 @@ Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier all
 - https://www.exploit-db.com/exploits/2650
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2007/CVE-2007-1426.md

@@ -0,0 +1,17 @@
+### [CVE-2007-1426](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1426)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue."
+
+### POC
+
+#### Reference
+- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
+
+#### Github
+No PoCs found on GitHub currently.
+

2007/CVE-2007-2447.md

@@ -62,6 +62,7 @@ The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote
 - https://github.com/MrRoma577/exploit_cve-2007-2447_again
 - https://github.com/N3rdyN3xus/CVE-2007-2447
 - https://github.com/Neoju5t/expo-att
+- https://github.com/Nkemjika-123/Cybersecurity-Governance-Framework
 - https://github.com/Nosferatuvjr/Samba-Usermap-exploit
 - https://github.com/NyxByt3/CVE-2007-2447
 - https://github.com/Patrick122333/4240project

2007/CVE-2007-3261.md

@@ -0,0 +1,17 @@
+### [CVE-2007-3261](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3261)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).
+
+### POC
+
+#### Reference
+- http://sourceforge.net/project/shownotes.php?release_id=516770&group_id=185847
+
+#### Github
+No PoCs found on GitHub currently.
+

2008/CVE-2008-2075.md

@@ -0,0 +1,17 @@
+### [CVE-2008-2075](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2075)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
+
+### POC
+
+#### Reference
+- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
+
+#### Github
+No PoCs found on GitHub currently.
+

2008/CVE-2008-2540.md

@@ -16,5 +16,5 @@ Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user
 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5782
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2009/CVE-2009-1185.md

@@ -53,6 +53,7 @@ udev before 1.4.1 does not verify whether a NETLINK message originates from kern
 - https://github.com/hussien-almalki/Hack_lame
 - https://github.com/ismailvc1111/Linux_Privilege
 - https://github.com/kumardineshwar/linux-kernel-exploits
+- https://github.com/kyuna0312/Linux_menthor
 - https://github.com/kyuna312/Linux_menthor
 - https://github.com/m0mkris/linux-kernel-exploits
 - https://github.com/maririn312/Linux_menthor

2009/CVE-2009-4663.md

@@ -0,0 +1,17 @@
+### [CVE-2009-4663](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4663)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-3904.md

@@ -101,6 +101,7 @@ The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Socke
 - https://github.com/k0mi-tg/OSCP
 - https://github.com/k0mi-tg/OSCP-note
 - https://github.com/kumardineshwar/linux-kernel-exploits
+- https://github.com/kyuna0312/Linux_menthor
 - https://github.com/kyuna312/Linux_menthor
 - https://github.com/m0mkris/linux-kernel-exploits
 - https://github.com/make0day/pentest

2010/CVE-2010-4557.md

@@ -0,0 +1,17 @@
+### [CVE-2010-4557](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4557)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-4588.md

@@ -13,5 +13,5 @@ The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrati
 - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2010/CVE-2010-4709.md

@@ -13,5 +13,5 @@ Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server b
 - http://www.exploit-db.com/exploits/16040
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2011/CVE-2011-1823.md

@@ -13,6 +13,7 @@ The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messag
 - http://forum.xda-developers.com/showthread.php?t=1044765
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
 - https://github.com/c-skills/CVEs

2011/CVE-2011-2523.md

@@ -115,6 +115,7 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which
 - https://github.com/Neoju5t/expo-att
 - https://github.com/Nikhil7787/VAPT
 - https://github.com/NikolayAntipov/DB_13-01
+- https://github.com/Nkemjika-123/Cybersecurity-Governance-Framework
 - https://github.com/NnickSecurity/vsftpd_backdoor_exploit
 - https://github.com/Nohit594/CEH_Project
 - https://github.com/NoisyPlatypus/cybersecurity-portfolio

2012/CVE-2012-0001.md

@@ -0,0 +1,17 @@
+### [CVE-2012-0001](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0001)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2012/CVE-2012-0009.md

@@ -0,0 +1,17 @@
+### [CVE-2012-0009](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0009)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2012/CVE-2012-0056.md

@@ -117,6 +117,7 @@ No PoCs from references.
 - https://github.com/kicku6/Opensource88888
 - https://github.com/knd06/linux-kernel-exploitation
 - https://github.com/kumardineshwar/linux-kernel-exploits
+- https://github.com/kyuna0312/Linux_menthor
 - https://github.com/kyuna312/Linux_menthor
 - https://github.com/m0mkris/linux-kernel-exploits
 - https://github.com/make0day/pentest

2012/CVE-2012-2122.md

@@ -24,6 +24,7 @@ No PoCs from references.
 - https://github.com/Janalytics94/anomaly-detection-software
 - https://github.com/JosephJMRG/apache-docker-project
 - https://github.com/LBartolini/DVI
+- https://github.com/Nkemjika-123/Cybersecurity-Governance-Framework
 - https://github.com/NyxAzrael/Goby_POC
 - https://github.com/SanjuCyb3r/Metasploitable-2
 - https://github.com/Shadowven/Vulnerability_Reproduction

2013/CVE-2013-2094.md

@@ -81,6 +81,7 @@ The perf_swevent_init function in kernel/events/core.c in the Linux kernel befor
 - https://github.com/khnhdz/linux-kernel-exploitation
 - https://github.com/knd06/linux-kernel-exploitation
 - https://github.com/kumardineshwar/linux-kernel-exploits
+- https://github.com/kyuna0312/Linux_menthor
 - https://github.com/kyuna312/Linux_menthor
 - https://github.com/lushtree-cn-honeyzhao/awesome-c
 - https://github.com/m0mkris/linux-kernel-exploits

2014/CVE-2014-3816.md

@@ -14,4 +14,5 @@ No PoCs from references.
 
 #### Github
 - https://github.com/W8SOJIB/W8RootWifiHKV2
+- https://github.com/itsrakibroni/CreativeWiFiHack
 

2015/CVE-2015-0540.md

@@ -0,0 +1,17 @@
+### [CVE-2015-0540](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0540)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2015/CVE-2015-0541.md

@@ -0,0 +1,17 @@
+### [CVE-2015-0541](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0541)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2015/CVE-2015-0542.md

@@ -0,0 +1,17 @@
+### [CVE-2015-0542](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0542)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2015/CVE-2015-0545.md

@@ -0,0 +1,17 @@
+### [CVE-2015-0545](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0545)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2015/CVE-2015-4537.md

@@ -0,0 +1,17 @@
+### [CVE-2015-4537](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4537)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote authenticated users to decrypt admin tickets by locating this passphrase in a decompiled D2 JAR archive.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2015/CVE-2015-5698.md

@@ -13,5 +13,5 @@ Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIM
 - http://packetstormsecurity.com/files/172315/Siemens-SIMATIC-S7-1200-Cross-Site-Request-Forgery.html
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2015/CVE-2015-6569.md

@@ -11,6 +11,7 @@ Race condition in the LoadBalancer module in the Atlassian Floodlight Controller
 
 #### Reference
 - https://floodlight.atlassian.net/wiki/spaces/floodlightcontroller/pages/24805419/Floodlight+v1.2
+- https://github.com/floodlight/floodlight/pull/563
 
 #### Github
 No PoCs found on GitHub currently.

2015/CVE-2015-6847.md

@@ -13,5 +13,5 @@ The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cle
 - http://packetstormsecurity.com/files/134420/EMC-VPLEX-Sensitive-Information-Exposure.html
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2015/CVE-2015-7501.md

@@ -110,6 +110,7 @@ Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG)
 - https://github.com/sobinge/PayloadsAllThesobinge
 - https://github.com/sourcery-ai-bot/Deep-Security-Reports
 - https://github.com/testermas/tryhackme
+- https://github.com/thexnumb/thexwriteup
 - https://github.com/uttambodara/Awesome-Hacking-Learning-Path
 - https://github.com/winterwolf32/PayloadsAllTheThings
 - https://github.com/xbl3/awesome-cve-poc_qazbnm456

2016/CVE-2016-0099.md

@@ -35,6 +35,7 @@ The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008
 - https://github.com/rayhan0x01/reverse-shell-able-exploit-pocs
 - https://github.com/readloud/Awesome-Stars
 - https://github.com/taielab/awesome-hacking-lists
+- https://github.com/thesystemon/Windows-Privilege-Pscalation
 - https://github.com/xbl2022/awesome-hacking-lists
 - https://github.com/ycdxsb/WindowsPrivilegeEscalation
 - https://github.com/zcgonvh/MS16-032

2016/CVE-2016-0888.md

@@ -0,0 +1,17 @@
+### [CVE-2016-0888](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0888)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-0903.md

@@ -0,0 +1,17 @@
+### [CVE-2016-0903](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0903)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-0910.md

@@ -0,0 +1,17 @@
+### [CVE-2016-0910](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0910)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-0917.md

@@ -0,0 +1,17 @@
+### [CVE-2016-0917](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0917)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638), VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra (all supported versions) does not prevent duplicate NTLM challenge-response nonces, which makes it easier for remote attackers to execute arbitrary code, or read or write to files, via a series of authentication requests, a related issue to CVE-2010-0231.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2016/CVE-2016-15042.md

@@ -17,6 +17,7 @@ The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (version
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/Aditya43621/lab-cve-2016-15042
 - https://github.com/ImBIOS/lab-cve-2016-15042
 - https://github.com/PuddinCat/GithubRepoSpider

2016/CVE-2016-5195.md

@@ -173,6 +173,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo
 - https://github.com/Pavlos86/kernel-exploit-dirtycow-project-public
 - https://github.com/PellaPella/PTD-Cheatsheet
 - https://github.com/PsychoH4x0r/Unknown1337-Auto-Root-
+- https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/QChiLan/linux-exp
 - https://github.com/R0B1NL1N/Linux-Kernal-Exploits-m-
 - https://github.com/R0B1NL1N/Linux-Kernel-Exploites
@@ -376,6 +377,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo
 - https://github.com/knd06/linux-kernel-exploitation
 - https://github.com/kumardineshwar/linux-kernel-exploits
 - https://github.com/kwxk/Rutgers_Cyber_Range
+- https://github.com/kyuna0312/Linux_menthor
 - https://github.com/kyuna312/Linux_menthor
 - https://github.com/kzwkt/lkrt
 - https://github.com/l2dy/stars
@@ -442,6 +444,7 @@ Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allo
 - https://github.com/osogi/NTO_2022
 - https://github.com/ozkanbilge/Linux-Kernel-Exploits
 - https://github.com/p00h00/linux-exploits
+- https://github.com/pardhu045/linux-privilege-escalation
 - https://github.com/parth45/cheatsheet
 - https://github.com/passionchenjianyegmail8/scumjrs
 - https://github.com/password520/RedTeamer

2016/CVE-2016-5743.md

@@ -13,5 +13,6 @@ Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATC
 No PoCs from references.
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 

2016/CVE-2016-9752.md

@@ -0,0 +1,17 @@
+### [CVE-2016-9752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9752)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code.
+
+### POC
+
+#### Reference
+- https://blog.s9y.org/archives/271-Serendipity-2.0.5-and-2.1-beta3-released.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-0143.md

@@ -74,6 +74,7 @@ The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
 - https://github.com/PWN-Kingdom/Eternal-Scan
 - https://github.com/PWN-Kingdom/Test_Tasks
+- https://github.com/PauloPrino/CrewAI-Hacking
 - https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/R-Vision/ms17-010
 - https://github.com/R0B1NL1N/AD-Attack-Defense

2017/CVE-2017-1000112.md

@@ -81,6 +81,7 @@ Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. W
 - https://github.com/kkamagui/linux-kernel-exploits
 - https://github.com/knd06/linux-kernel-exploitation
 - https://github.com/kumardineshwar/linux-kernel-exploits
+- https://github.com/kyuna0312/Linux_menthor
 - https://github.com/kyuna312/Linux_menthor
 - https://github.com/lnick2023/nicenice
 - https://github.com/m0mkris/linux-kernel-exploits

2017/CVE-2017-12865.md

@@ -13,5 +13,6 @@ Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows r
 - https://www.nri-secure.com/blog/new-iot-vulnerability-connmando
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ManaswiJaiswal/Reproducing-ConnMan-1.34
+- https://github.com/PuddinCat/GithubRepoSpider
 

2017/CVE-2017-15944.md

@@ -22,6 +22,7 @@ Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.1
 - https://github.com/CKevens/PaloAlto_EXP
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
+- https://github.com/P4x1s/PaloAlto_EXP
 - https://github.com/lnick2023/nicenice
 - https://github.com/qazbnm456/awesome-cve-poc
 - https://github.com/surajraghuvanshi/PaloAltoRceDetectionAndExploit

2017/CVE-2017-17485.md

@@ -41,6 +41,7 @@ FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthe
 - https://github.com/XiaomingX/awesome-poc-for-red-team
 - https://github.com/bakery312/Vulhub-Reproduce
 - https://github.com/bkhablenko/CVE-2017-8046
+- https://github.com/boonyashka/scala
 - https://github.com/conikeec/helloshiftleftplay
 - https://github.com/do0dl3/myhktools
 - https://github.com/hdgittest/HelloShiftLeft-Scala

2017/CVE-2017-2312.md

@@ -0,0 +1,24 @@
+### [CVE-2017-2312](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2312)
+![](https://img.shields.io/static/v1?label=Product&message=Junos%20OS%20with%20LDP%20enabled&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=13.3%20prior%20to%2013.3R10%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=14.1%20prior%20to%2014.1R8%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=14.2%20prior%20to%2014.2R7-S6%20or%2014.2R8%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=15.1%20prior%20to%2015.1F2-S14%2C%2015.1F6-S4%2C%2015.1F7%2C%2015.1R4-S7%2C%2015.1R5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=15.1X49%20before%2015.1X49-D70%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=15.1X53%20before%2015.1X53-D230%2C%2015.1X53-D63%2C%2015.1X53-D70%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=16.1%20before%2016.1R2%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=16.2R1%20and%20all%20subsequent%20releases%20have%20a%20resolution%20for%20this%20vulnerability%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=denial%20of%20service%20vulnerability%20due%20to%20memory%20leak&color=brightgreen)
+
+### Description
+
+On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE (Routing Engine) will consume a small amount of the memory allocated for the rpd (routing protocol daemon) process. Over time, repeatedly receiving this type of LDP packet(s) will cause the memory to exhaust and the rpd process to crash and restart. It is not possible to free up the memory that has been consumed without restarting the rpd process. This issue affects Junos OS based devices with either IPv4 or IPv6 LDP enabled via the [protocols ldp] configuration (the native IPv6 support for LDP is available in Junos OS 16.1 and higher). The interface on which the packet arrives needs to have LDP enabled. The affected Junos versions are: 13.3 prior to 13.3R10; 14.1 prior to 14.1R8; 14.2 prior to 14.2R7-S6 or 14.2R8; 15.1 prior to 15.1F2-S14, 15.1F6-S4, 15.1F7, 15.1R4-S7, 15.1R5; 15.1X49 before 15.1X49-D70; 15.1X53 before 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 before 16.1R2. 16.2R1 and all subsequent releases have a resolution for this vulnerability.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/PauloPrino/CrewAI-Hacking
+

2017/CVE-2017-4999.md

@@ -0,0 +1,17 @@
+### [CVE-2017-4999](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4999)
+![](https://img.shields.io/static/v1?label=Product&message=RSA%20Archer%20version%205.4.1.3%2C%205.5.3.1%2C%205.5.2.3%2C%205.5.2%2C%205.5.1.3.1%2C%205.5.1.1&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=RSA%20Archer%20version%205.4.1.3%2C%205.5.3.1%2C%205.5.2.3%2C%205.5.2%2C%205.5.1.3.1%2C%205.5.1.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Authorization%20Bypass%20Through%20User-Controlled%20Key%20Vulnerability&color=brightgreen)
+
+### Description
+
+EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other users' discussion forum messages.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2017/CVE-2017-5002.md

@@ -0,0 +1,17 @@
+### [CVE-2017-5002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5002)
+![](https://img.shields.io/static/v1?label=Product&message=RSA%20Archer%20version%205.4.1.3%2C%205.5.3.1%2C%205.5.2.3%2C%205.5.2%2C%205.5.1.3.1%2C%205.5.1.1&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=RSA%20Archer%20version%205.4.1.3%2C%205.5.3.1%2C%205.5.2.3%2C%205.5.2%2C%205.5.1.3.1%2C%205.5.1.1%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Open%20Redirect%20Vulnerability&color=brightgreen)
+
+### Description
+
+EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2017/CVE-2017-5618.md

@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/AbdoFarid1/R00tKeep3r
+- https://github.com/Mag1cByt3s/MagicLinPwn
 - https://github.com/Mr-Tree-S/POC_EXP
 - https://github.com/R0B1NL1N/E-x-p-l-o-i-t-s
 - https://github.com/WilliamQ28/Worst-autoLinPrivesc

2017/CVE-2017-5638.md

@@ -42,6 +42,7 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be
 - https://github.com/3llio0T/Active-
 - https://github.com/3vikram/Application-Vulnerabilities-Payloads
 - https://github.com/84KaliPleXon3/Payloads_All_The_Things
+- https://github.com/AMH-glitch/CHWA-LB-IDSDATASET
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/Aasron/Struts2-045-Exp

2017/CVE-2017-7525.md

@@ -54,6 +54,7 @@ A deserialization flaw was discovered in the jackson-databind, versions before 2
 - https://github.com/XiaomingX/awesome-poc-for-red-team
 - https://github.com/atul-joshi-aera/jackson-2017-7525
 - https://github.com/bakery312/Vulhub-Reproduce
+- https://github.com/boonyashka/scala
 - https://github.com/brunsu/woodswiki
 - https://github.com/cedelasen/htb-time
 - https://github.com/clj-holmes/clj-watson

2017/CVE-2017-8464.md

@@ -34,6 +34,7 @@ Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi
 - https://github.com/FuzzySecurity/PowerShell-Suite
 - https://github.com/Itachl/windows_kenel_exploit
 - https://github.com/Jkrasher/WindowsThreatResearch_JKrasher
+- https://github.com/JuliadeEyes/NMBU
 - https://github.com/Loveforkeeps/Lemon-Duck
 - https://github.com/Micr067/Pentest_Note
 - https://github.com/Micr067/windows-kernel-exploits

2017/CVE-2017-9558.md

@@ -10,6 +10,7 @@ The wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not v
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9559.md

@@ -10,6 +10,7 @@ The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.50
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9560.md

@@ -10,6 +10,7 @@ The cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.5
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9561.md

@@ -10,6 +10,7 @@ The Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9562.md

@@ -10,6 +10,7 @@ The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9563.md

@@ -10,6 +10,7 @@ The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not ve
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9564.md

@@ -10,6 +10,7 @@ The community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify X.509 ce
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9565.md

@@ -10,6 +10,7 @@ The first-security-bank-sleepy-eye-mobile/id870531890 app 3.0.0 for iOS does not
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9566.md

@@ -10,6 +10,7 @@ The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9567.md

@@ -10,6 +10,7 @@ The avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not verify X.509
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9568.md

@@ -10,6 +10,7 @@ The financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does not verify
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9569.md

@@ -10,6 +10,7 @@ The Citizens Bank (TX) cbtx-on-the-go/id892396102 app 3.0.0 for iOS does not ver
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9570.md

@@ -10,6 +10,7 @@ The mount-vernon-bank-trust-mobile-banking/id542706679 app 3.0.0 for iOS does no
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9571.md

@@ -10,6 +10,7 @@ The Citizens Community Bank (TN) ccb-mobile-banking/id610030469 app 3.0.1 for iO
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9572.md

@@ -10,6 +10,7 @@ The athens-state-bank-mobile-banking/id719748589 app 3.0.0 for iOS does not veri
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9573.md

@@ -10,6 +10,7 @@ The North Adams State Bank (Ursa) nasb-mobile-banking/id980573797 app 3.0.1 for
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9574.md

@@ -10,6 +10,7 @@ The "KC Area Credit Union Mobile Banking" by K C Area Credit Union app 3.0.1 --
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9575.md

@@ -10,6 +10,7 @@ The "FVB Mobile Banking" by First Volunteer Bank of Tennessee app 3.1.1 -- aka f
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9576.md

@@ -10,6 +10,7 @@ The "Middleton Community Bank Mobile Banking" by Middleton Community Bank app 3.
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9577.md

@@ -10,6 +10,7 @@ The "First Citizens Bank-Mobile Banking" by First Citizens Bank (AL) app 3.0.0 -
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9578.md

@@ -10,6 +10,7 @@ The "RVCB Mobile" by RVCB Mobile Banking app 3.0.0 -- aka rvcb-mobile/id75792889
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9579.md

@@ -10,6 +10,7 @@ The "JMCU Mobile Banking" by Joplin Metro Credit Union app 3.0.0 -- aka jmcu-mob
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9580.md

@@ -10,6 +10,7 @@ The "Pioneer Bank & Trust Mobile Banking" by PIONEER BANK AND TRUST app 3.0.0 --
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9581.md

@@ -10,6 +10,7 @@ The "Algonquin State Bank Mobile Banking" by Algonquin State Bank app 3.0.0 -- a
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9582.md

@@ -10,6 +10,7 @@ The "BNB Mobile Banking" by Brady National Bank app 3.0.0 -- aka bnb-mobile-bank
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9583.md

@@ -10,6 +10,7 @@ The "Charlevoix State Bank" by Charlevoix State Bank app 3.0.1 -- aka charlevoix
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9584.md

@@ -10,6 +10,7 @@ The "HBO Mobile Banking" by Heritage Bank of Ozarks app 3.0.0 -- aka hbo-mobile-
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9585.md

@@ -10,6 +10,7 @@ The "Community State Bank - Lamar Mobile Banking" by Community State Bank - Lama
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9586.md

@@ -10,6 +10,7 @@ The "FSBY Mobile Banking" by First State Bank of Yoakum TX app 3.0.0 -- aka fsby
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9587.md

@@ -10,6 +10,7 @@ The "PCSB BANK Mobile" by PCSB Bank app 3.0.4 -- aka pcsb-bank-mobile/id10674720
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9588.md

@@ -10,6 +10,7 @@ The "Oritani Mobile Banking" by Oritani Bank app 3.0.0 -- aka oritani-mobile-ban
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9589.md

@@ -10,6 +10,7 @@ The "SCSB Shelbyville IL Mobile Banking" by Shelby County State Bank app 3.0.0 -
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9590.md

@@ -10,6 +10,7 @@ The "State Bank of Waterloo Mobile Banking" by State Bank of Waterloo app 3.0.2
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9591.md

@@ -10,6 +10,7 @@ The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 f
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9592.md

@@ -10,6 +10,7 @@ The "Your Legacy Federal Credit Union Mobile Banking" by Your Legacy Federal Cre
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9593.md

@@ -10,6 +10,7 @@ The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-ban
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9594.md

@@ -10,6 +10,7 @@ The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9595.md

@@ -10,6 +10,7 @@ The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9596.md

@@ -10,6 +10,7 @@ The "CFB Mobile Banking" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-m
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9597.md

@@ -10,6 +10,7 @@ The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9598.md

@@ -10,6 +10,7 @@ The "Morton Credit Union Mobile Banking" by Morton Credit Union app 3.0.1 -- aka
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github

2017/CVE-2017-9599.md

@@ -10,6 +10,7 @@ The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -
 ### POC
 
 #### Reference
+- https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 - https://medium.com/@chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
 
 #### Github