Update Tue Oct 14 11:37:04 UTC 2025

2002/CVE-2002-2066.md

@@ -0,0 +1,17 @@
+### [CVE-2002-2066](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2066)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
+
+### POC
+
+#### Reference
+- http://www.seifried.org/security/advisories/kssa-003.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2002/CVE-2002-2067.md

@@ -0,0 +1,17 @@
+### [CVE-2002-2067](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2067)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
+
+### POC
+
+#### Reference
+- http://www.seifried.org/security/advisories/kssa-003.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2002/CVE-2002-2068.md

@@ -0,0 +1,17 @@
+### [CVE-2002-2068](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2068)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
+
+### POC
+
+#### Reference
+- http://www.seifried.org/security/advisories/kssa-003.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2002/CVE-2002-2069.md

@@ -0,0 +1,17 @@
+### [CVE-2002-2069](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2069)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
+
+### POC
+
+#### Reference
+- http://www.seifried.org/security/advisories/kssa-003.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2002/CVE-2002-2070.md

@@ -0,0 +1,17 @@
+### [CVE-2002-2070](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2070)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.
+
+### POC
+
+#### Reference
+- http://www.seifried.org/security/advisories/kssa-003.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2004/CVE-2004-0173.md

@@ -0,0 +1,17 @@
+### [CVE-2004-0173](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0173)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2005/CVE-2005-2127.md

@@ -15,4 +15,5 @@ Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a
 
 #### Github
 - https://github.com/FloRRenn/Network-Attack-Analyze-via-WireShark
+- https://github.com/tim-barc/ctf_writeups
 

2008/CVE-2008-0226.md

@@ -21,6 +21,7 @@ Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possi
 - https://github.com/NikulinMS/13-01-hw
 - https://github.com/Zhivarev/13-01-hw
 - https://github.com/mrt2h/DZ
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/scmanjarrez/CVEScannerV2
 - https://github.com/scmanjarrez/test
 - https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems

2008/CVE-2008-0882.md

@@ -13,5 +13,5 @@ Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allo
 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/ARPSyndicate/cve-scores
 

2008/CVE-2008-3639.md

@@ -0,0 +1,17 @@
+### [CVE-2008-3639](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3639)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2009/CVE-2009-2446.md

@@ -21,6 +21,7 @@ No PoCs from references.
 - https://github.com/NikulinMS/13-01-hw
 - https://github.com/Zhivarev/13-01-hw
 - https://github.com/mrt2h/DZ
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/scmanjarrez/CVEScannerV2
 - https://github.com/scmanjarrez/test
 - https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems

2009/CVE-2009-2937.md

@@ -0,0 +1,17 @@
+### [CVE-2009-2937](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2937)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/adewale/rogue_planet
+

2009/CVE-2009-4299.md

@@ -0,0 +1,17 @@
+### [CVE-2009-4299](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4299)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.
+
+### POC
+
+#### Reference
+- http://moodle.org/mod/forum/discuss.php?d=139103
+
+#### Github
+No PoCs found on GitHub currently.
+

2009/CVE-2009-4484.md

@@ -18,6 +18,7 @@ Multiple stack-based buffer overflows in the CertDecoder::GetName function in sr
 - https://github.com/CoolerVoid/Vision
 - https://github.com/CoolerVoid/Vision2
 - https://github.com/hack-parthsharma/Vision
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/ptester36-zz/netology_ib_networks_lesson_9
 - https://github.com/ptester36/netology_ib_networks_lesson_9
 - https://github.com/scmanjarrez/CVEScannerV2

2010/CVE-2010-0393.md

@@ -0,0 +1,17 @@
+### [CVE-2010-0393](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0393)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-0540.md

@@ -0,0 +1,17 @@
+### [CVE-2010-0540](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-2431.md

@@ -0,0 +1,17 @@
+### [CVE-2010-2431](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2431)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-2432.md

@@ -0,0 +1,17 @@
+### [CVE-2010-2432](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2432)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2010/CVE-2010-4478.md

@@ -42,6 +42,7 @@ OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the
 - https://github.com/khramulka/13-01.md
 - https://github.com/lekctut/sdb-hw-13-01
 - https://github.com/mrt2h/DZ
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/ovchdmitriy01/13-1
 - https://github.com/pedr0alencar/vlab-metasploitable2
 - https://github.com/scmanjarrez/CVEScannerV2

2013/CVE-2013-3900.md

@@ -123,6 +123,7 @@ No PoCs from references.
 - https://github.com/ptrstr/MsiAuthenticodeInject
 - https://github.com/pwsh/gpo_disable_windows_ssl_tls
 - https://github.com/quichochodd/vulnerability-management-program
+- https://github.com/russellcayless/russellcayless
 - https://github.com/russellcayless/vulnerability-management-program
 - https://github.com/russoee/vulnerability-management-program
 - https://github.com/sebastiensimon1/Vulnerability-Management-Program-Implementation

2013/CVE-2013-6891.md

@@ -0,0 +1,17 @@
+### [CVE-2013-6891](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6891)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/ARPSyndicate/cve-scores
+

2014/CVE-2014-0160.md

@@ -417,6 +417,7 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p
 - https://github.com/git-bom/bomsh
 - https://github.com/giterlizzi/secdb-feeds
 - https://github.com/gkaptch1/cs558heartbleed
+- https://github.com/godfreybrew/SecurityAura
 - https://github.com/gold1029/sslscan
 - https://github.com/gpoojareddy/Security
 - https://github.com/greenmindlabs/docker-for-pentest

2014/CVE-2014-1692.md

@@ -16,6 +16,7 @@ No PoCs from references.
 - https://github.com/averyth3archivist/nmap-network-reconnaissance
 - https://github.com/kaio6fellipe/ssh-enum
 - https://github.com/lekctut/sdb-hw-13-01
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/pedr0alencar/vlab-metasploitable2
 - https://github.com/scmanjarrez/CVEScannerV2
 - https://github.com/scmanjarrez/test

2014/CVE-2014-6271.md

@@ -490,6 +490,7 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th
 - https://github.com/giterlizzi/secdb-feeds
 - https://github.com/gitter-badger/scripts-3
 - https://github.com/gkhays/bash
+- https://github.com/godfreybrew/SecurityAura
 - https://github.com/googleinurl/Xpl-SHELLSHOCK-Ch3ck
 - https://github.com/gpoojareddy/Security
 - https://github.com/greenmindlabs/docker-for-pentest

2015/CVE-2015-6420.md

@@ -44,6 +44,7 @@ Serialized-object interfaces in certain Cisco Collaboration and Social Media; En
 - https://github.com/hinat0y/Dataset8
 - https://github.com/hinat0y/Dataset9
 - https://github.com/jensdietrich/xshady-release
+- https://github.com/jtb75/serverless-examples
 - https://github.com/klausware/Java-Deserialization-Cheat-Sheet
 - https://github.com/lotuxsoo/FISA3-Trivy-Analysis
 - https://github.com/metaobjectsdev/metaobjects-core

2015/CVE-2015-7501.md

@@ -87,6 +87,7 @@ Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG)
 - https://github.com/hungslab/awd-tools
 - https://github.com/ianxtianxt/CVE-2015-7501
 - https://github.com/jensdietrich/xshady-release
+- https://github.com/jtb75/serverless-examples
 - https://github.com/just0rg/Security-Interview
 - https://github.com/klausware/Java-Deserialization-Cheat-Sheet
 - https://github.com/koutto/jok3r-pocs

2016/CVE-2016-1908.md

@@ -18,6 +18,7 @@ The client in OpenSSH before 7.2 mishandles failed cookie generation for untrust
 - https://github.com/Maribel0370/Nebula-io
 - https://github.com/RedHatSatellite/satellite-host-cve
 - https://github.com/lekctut/sdb-hw-13-01
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/pedr0alencar/vlab-metasploitable2
 - https://github.com/phx/cvescan
 - https://github.com/retr0-13/cveScannerV2

2016/CVE-2016-6210.md

@@ -39,6 +39,7 @@ sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password has
 - https://github.com/krlabs/openssh-vulnerabilities
 - https://github.com/lekctut/sdb-hw-13-01
 - https://github.com/lnick2023/nicenice
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2
 - https://github.com/pedr0alencar/vlab-metasploitable2
 - https://github.com/phx/cvescan

2016/CVE-2016-6515.md

@@ -38,6 +38,7 @@ The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does n
 - https://github.com/jptr218/openssh_dos
 - https://github.com/lekctut/sdb-hw-13-01
 - https://github.com/n0-traces/cve_monitor
+- https://github.com/namaste42/Cyber-Security
 - https://github.com/opsxcq/exploit-CVE-2016-6515
 - https://github.com/pedr0alencar/vlab-metasploitable2
 - https://github.com/phx/cvescan

2017/CVE-2017-0199.md

@@ -249,6 +249,7 @@ Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1,
 - https://github.com/xhref/OSCP
 - https://github.com/xiaoZ-hc/redtool
 - https://github.com/xiaoy-sec/Pentest_Note
+- https://github.com/yatharth29/cygraph-extract-cti-knowledge-graph
 - https://github.com/yut0u/RedTeam-BlackBox
 - https://github.com/zhang040723/web
 

2017/CVE-2017-12542.md

@@ -27,6 +27,7 @@ A authentication bypass and execution of code vulnerability in HPE Integrated Li
 - https://github.com/Shirshakhtml/Useful-Dorks
 - https://github.com/SnowflAI/ShodanOSINT
 - https://github.com/SoumyaJas2324/-jakejarvis-awesome-shodan-queries-
+- https://github.com/VijayShankar22/CVE-2017-12542
 - https://github.com/Z0fhack/Goby_POC
 - https://github.com/afkfr0mkeyb0ard/CustomKaliSetup
 - https://github.com/aprendeDELOShackers/Dorking

2017/CVE-2017-12616.md

@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/0day666/Vulnerability-verification
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/CrackerCat/myhktools
 - https://github.com/GhostTroops/myhktools

2017/CVE-2017-12636.md

@@ -18,6 +18,7 @@ CouchDB administrative users can configure the database server via HTTP(S). Some
 - https://github.com/0ps/pocassistdb
 - https://github.com/422926799/haq5201314
 - https://github.com/6point6/vulnerable-docker-launcher
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Accenture/vulnerable-docker-launcher
 - https://github.com/Guillaumeclavel/Etude_Faille_CVE_12636

2017/CVE-2017-12637.md

@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/20142995/nuclei-templates
 - https://github.com/20142995/sectool
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/Elsfa7-110/kenzer-templates

2017/CVE-2017-5638.md

@@ -106,6 +106,7 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be
 - https://github.com/K1ngDamien/epss-super-sorter
 - https://github.com/Kaizhe/attacker
 - https://github.com/KarzsGHR/S2-046_S2-045_POC
+- https://github.com/KirillBryzgalovA/Cyber-ed-Profession-a-White-Hacker
 - https://github.com/LUCASRENAA/vulncheck-sca-workflow
 - https://github.com/Lawrence-Dean/awesome-stars
 - https://github.com/Maarckz/PayloadParaTudo

2017/CVE-2017-8464.md

@@ -18,6 +18,7 @@ Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi
 - https://github.com/15866095848/15866095848
 - https://github.com/1o24er/RedTeam
 - https://github.com/3gstudent/CVE-2017-8464-EXP
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ASR511-OO7/windows-kernel-exploits
 - https://github.com/Al1ex/Red-Team

2017/CVE-2017-8540.md

@@ -13,6 +13,7 @@ The Microsoft Malware Protection Engine running on Microsoft Forefront and Micro
 - https://www.exploit-db.com/exploits/42088/
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

2017/CVE-2017-8570.md

@@ -22,6 +22,7 @@ Microsoft Office allows a remote code execution vulnerability due to the way tha
 - https://github.com/3m1za4/100-Best-Free-Red-Team-Tools-
 - https://github.com/5l1v3r1/rtfkit
 - https://github.com/6R1M-5H3PH3RD/Red_Teaming_Tool_Kit
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Adastra-thw/KrakenRdi
 - https://github.com/Al1ex/APT-GUID

2017/CVE-2017-8645.md

@@ -13,6 +13,7 @@ Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an
 - https://www.exploit-db.com/exploits/42469/
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/addicjanov/js-vuln-db
 - https://github.com/homjxi0e/CVE-2017-8641_chakra_Js_GlobalObject

2017/CVE-2017-8656.md

@@ -13,6 +13,7 @@ Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allow
 - https://www.exploit-db.com/exploits/42464/
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/addicjanov/js-vuln-db
 - https://github.com/homjxi0e/CVE-2017-8641_chakra_Js_GlobalObject

2018/CVE-2018-13379.md

@@ -82,6 +82,7 @@ An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"
 - https://github.com/merlinepedra/nuclei-templates
 - https://github.com/merlinepedra25/nuclei-templates
 - https://github.com/milo2012/CVE-2018-13379
+- https://github.com/mizuna-honeypot/Fortinet_Honeypot
 - https://github.com/murchie85/twitterCyberMonitor
 - https://github.com/n0-traces/cve_monitor
 - https://github.com/nescam123/forti

2018/CVE-2018-16836.md

@@ -14,5 +14,6 @@ Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme c
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/kenzer-templates
 

2018/CVE-2018-17431.md

@@ -16,6 +16,7 @@ Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execu
 #### Github
 - https://github.com/0xT11/CVE-POC
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/Elsfa7-110/kenzer-templates

2018/CVE-2018-17463.md

@@ -14,6 +14,7 @@ Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 al
 
 #### Github
 - https://github.com/0x726574736F706D69/exploits
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

2018/CVE-2018-17552.md

@@ -13,6 +13,7 @@ SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers
 - https://www.exploit-db.com/exploits/45561/
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/MidwintersTomb/CVE-2018-17553
 - https://github.com/anhquan99/DetectSQLInjectionPyshark
 - https://github.com/kimstars/CVE-2018-17552

2018/CVE-2018-18074.md

@@ -32,6 +32,7 @@ The Requests package before 2.20.0 for Python sends an HTTP Authorization header
 - https://github.com/eltyagi/poc-codeql-artifact-attestation
 - https://github.com/ifunky/demo-site
 - https://github.com/jrak1204/overstock_test
+- https://github.com/jtb75/serverless-examples
 - https://github.com/manindia2314/AI-malware
 - https://github.com/sbmthakur/packj
 - https://github.com/seal-community/patches

2018/CVE-2018-18264.md

@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/Elsfa7-110/kenzer-templates
 - https://github.com/atwilsecurity/k8s-Security

2018/CVE-2018-18323.md

@@ -16,5 +16,6 @@ CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusio
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/kenzer-templates
 

2018/CVE-2018-18778.md

@@ -16,6 +16,7 @@ No PoCs from references.
 - https://github.com/0day404/vulnerability-poc
 - https://github.com/0xT11/CVE-POC
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/ArrestX/--POC

2018/CVE-2018-18925.md

@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/ARPSyndicate/kenzer-templates
 - https://github.com/DarkFunct/CVE_Exploits

2018/CVE-2018-19127.md

@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/0xT11/CVE-POC
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/CVEDB/PoC-List
 - https://github.com/CVEDB/awesome-cve-repo

2018/CVE-2018-19207.md

@@ -16,6 +16,7 @@ The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for
 #### Github
 - https://github.com/0xT11/CVE-POC
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/PuddinCat/GithubRepoSpider
 - https://github.com/Pwdnx1337/CVE-2018-19207
 - https://github.com/aeroot/WP-GDPR-Compliance-Plugin-Exploit

2018/CVE-2018-19365.md

@@ -14,5 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/20142995/nuclei-templates
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/kenzer-templates
 

2018/CVE-2018-19410.md

@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/A1vinSmith/CVE-2018-9276
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/Ostorlab/KEV
 - https://github.com/himash/CVE-2018-19410-POC
 - https://github.com/packetinside/CISA_BOT

2018/CVE-2018-19518.md

@@ -19,6 +19,7 @@ University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in P
 
 #### Github
 - https://github.com/0xT11/CVE-POC
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/C-starm/PoC-and-Exp-of-Vulnerabilities
 - https://github.com/HacTF/poc--exp

2019/CVE-2019-10795.md

@@ -13,5 +13,6 @@ undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function co
 - https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940
 
 #### Github
+- https://github.com/KPrithviRaj11/SAST-repo
 - https://github.com/cycodehq/cycode-cli
 

2019/CVE-2019-11358.md

@@ -292,6 +292,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/ASB-Pangaea-Robotics/FTC-CENTERSTAGE
 - https://github.com/ASB-Pangaea-Robotics/FTC-INTO_THE_DEEP
 - https://github.com/ASB-Pangaea-Robotics/POWERPLAY-OffSeason-AndroidStudioBuild
+- https://github.com/ASTRO-Vikings/FTC25-26ASTRO-Vikings
 - https://github.com/ASethi04/Camera-Project
 - https://github.com/ASethi04/FTC6931-2021
 - https://github.com/ASnailman/FTC14469-FreightFrenzy2021
@@ -1110,6 +1111,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Destemidos/Destemidos-Centerstage
 - https://github.com/DestemidosFTC/IntoTheDeep
 - https://github.com/Deus-Ex-Machina-38433/DEM-RC-Master
+- https://github.com/Dev407101/NB5387Decode
 - https://github.com/DevMello/MelloLib
 - https://github.com/DevashishDas3/3737FtcRobotController-master-2023
 - https://github.com/DevashishDas3/FTC-3737-HANKS-TANKS
@@ -1501,6 +1503,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/FTC-23511/SolversFTC-2022-23
 - https://github.com/FTC-23849/CRI-2025
 - https://github.com/FTC-23849/FTC-23849-DECODE
+- https://github.com/FTC-23849/FTC-23849-DECODE-V1
 - https://github.com/FTC-23849/FTCDroidForceDevRepo
 - https://github.com/FTC-23849/ITD-offseason
 - https://github.com/FTC-23849/pedro-implementation
@@ -3081,6 +3084,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/PinkNoah/FTC-Starter-Bot
 - https://github.com/PioNerdsFTC/2025-26DECODE_Black
 - https://github.com/PionThePurpleTurtle/FreightFrenzy_KingsAndQueens
+- https://github.com/Pioneer-10262/CommandBasedProject
 - https://github.com/Pioneer-Robotics/ExceptionalCode2024-2025
 - https://github.com/Pioneer-Robotics/PerfectCode2023-2024
 - https://github.com/Planity3/FTC-19528
@@ -3406,6 +3410,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/SARossi1/SkyStone-master
 - https://github.com/SBZ-DevSecOps/Angular10-InsecureApp
 - https://github.com/SBowling4/2026-23785
+- https://github.com/SBowling4/2026-23785-Robot-Code
 - https://github.com/SBowling4/Update-RC
 - https://github.com/SCAM-Robotics-24378/SCAMState
 - https://github.com/SCHS-Robotics/Crow-Force-2020-2021-SCHS
@@ -3476,6 +3481,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/SamuelK08/FtcRobotController-9.0.1
 - https://github.com/San68bot/pid-ex
 - https://github.com/Sandwvic/247-Freight-Frenzy
+- https://github.com/Sangsterj/7418-Decode
 - https://github.com/SanjaStorm18613/M-04
 - https://github.com/Sanjay191110/sanjaycenterstage
 - https://github.com/SantiQ0905/FTC-23619
@@ -3926,6 +3932,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/TheGreatOneNamedZach/8417-FreightFrenzy
 - https://github.com/TheGreatOneNamedZach/8417-Globetrotter
 - https://github.com/TheGreatOneNamedZach/KY-Centerstage
+- https://github.com/TheGrover295/Quickstart-MahoganySquad
 - https://github.com/TheHarmonicRealm/NJS-FTC-2022
 - https://github.com/TheLegion2353/FTC-UltimateGoal2020-Chester
 - https://github.com/TheLoneWolf99/St.JagoRobotics_2022-2023-main
@@ -4153,6 +4160,7 @@ jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishan
 - https://github.com/Viverino1/DevelopmentCode
 - https://github.com/Viverino1/TestFork
 - https://github.com/Vivexplorer/Dinobytes2024-2025IntoTheDeep
+- https://github.com/Vivexplorer/Dinobytes2025
 - https://github.com/Vlad20405/Cod_Robotica_2021-22
 - https://github.com/VladimirKaznacheiev/2020-FTC-UltimateGoal-6.0
 - https://github.com/Vncero/FTC-Cobalt-Code

2019/CVE-2019-16253.md

@@ -21,6 +21,7 @@ The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.0
 - https://github.com/bikesandspokes-cmd/BBS
 - https://github.com/cosminnionutt/awesome-shizuku
 - https://github.com/emtee40/SMTShell
+- https://github.com/judybridges300698/awesome-shizuku
 - https://github.com/k0mraid3/K0mraid3s-System-Shell-PREBUILT
 - https://github.com/timschneeb/awesome-shizuku
 - https://github.com/uzvarUA/awesome-shizuku

2019/CVE-2019-7609.md

@@ -48,6 +48,7 @@ Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw
 - https://github.com/Ostorlab/KEV
 - https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
 - https://github.com/Oxc4ndl3/Web-Pentest
+- https://github.com/Penterep/ptkibana
 - https://github.com/PwnFunction/Next.js-Flat-Prototype-Pollution
 - https://github.com/SexyBeast233/SecBooks
 - https://github.com/Threekiii/Awesome-POC

2020/CVE-2020-1472.md

@@ -138,6 +138,7 @@ An elevation of privilege vulnerability exists when an attacker establishes a vu
 - https://github.com/Kecatoca/Zerologon_Poc
 - https://github.com/Kecatoca/Zerologon_test
 - https://github.com/Ken-Abruzzi/cve-2020-1472
+- https://github.com/KirillBryzgalovA/Cyber-ed-Profession-a-White-Hacker
 - https://github.com/KyleEvers/SharpCollection
 - https://github.com/LostZX/DomainControllerLearn
 - https://github.com/LuemmelSec/Pentest-Tools-Collection

2020/CVE-2020-16898.md

@@ -80,6 +80,7 @@ No PoCs from references.
 - https://github.com/mmguero-dev/Malcolm-PCAP
 - https://github.com/momika233/CVE-2020-16898-exp
 - https://github.com/nandkishoresoni/McAfee-2025-07-27-054848
+- https://github.com/nandkishoresoni/McAfee-2025-10-13-054111
 - https://github.com/nitishbadole/PENTESTING-BIBLE
 - https://github.com/nomi-sec/PoC-in-GitHub
 - https://github.com/ovchinic/CS-478

2020/CVE-2020-20214.md

@@ -15,4 +15,5 @@ Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vuln
 
 #### Github
 - https://github.com/ElonMusk2002/Cyber-ed-solutions
+- https://github.com/KirillBryzgalovA/Cyber-ed-Profession-a-White-Hacker
 

2020/CVE-2020-28168.md

@@ -18,6 +18,7 @@ No PoCs from references.
 - https://github.com/GRPC-OK/testuser02
 - https://github.com/Live-Hack-CVE/CVE-2020-28168
 - https://github.com/NUS-ISS-SECURE-TEAM-5/mall-admin-frontend
+- https://github.com/jtb75/serverless-examples
 - https://github.com/markusweldon/snyk-sca-githubactions
 - https://github.com/renovate-tests/renovate-8297
 - https://github.com/zvigrinberg/exhort-service-readiness-experiment

2020/CVE-2020-36708.md

@@ -25,7 +25,7 @@ The following themes for WordPress are vulnerable to Function Injections in vers
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/
 
 #### Github
 - https://github.com/20142995/nuclei-templates

2020/CVE-2020-36721.md

@@ -12,7 +12,7 @@ The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/
 
 #### Github
 - https://github.com/20142995/nuclei-templates

2020/CVE-2020-8203.md

@@ -32,6 +32,7 @@ Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
 - https://github.com/dcambronero/shiftleft
 - https://github.com/duckstroms/Web-CTF-Cheatsheet
 - https://github.com/ifunky/demo-site
+- https://github.com/jtb75/serverless-examples
 - https://github.com/logpress-io/sbom-quickcheck
 - https://github.com/logpress-io/sbom-quickcheck-examples
 - https://github.com/markusweldon/claude-snyk-security-expert

2020/CVE-2020-8840.md

@@ -30,6 +30,7 @@ FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JN
 - https://github.com/EchoGin404/-
 - https://github.com/EchoGin404/gongkaishouji
 - https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
+- https://github.com/Ing-de-Sofware/seminario2
 - https://github.com/LibHunter/LibHunter
 - https://github.com/Luhaozhhhe/360_Practice_and_Training
 - https://github.com/Mr-xn/Penetration_Testing_POC

2020/CVE-2020-9283.md

@@ -25,6 +25,7 @@ golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a pa
 - https://github.com/developer3000S/PoC-in-GitHub
 - https://github.com/dhushyanth-h-m/AWS_Playground
 - https://github.com/hectorgie/PoC-in-GitHub
+- https://github.com/jtb75/serverless-examples
 - https://github.com/nomi-sec/PoC-in-GitHub
 - https://github.com/soosmile/POC
 

2021/CVE-2021-20086.md

@@ -13,6 +13,7 @@ Improperly Controlled Modification of Object Prototype Attributes ('Prototype Po
 - https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-bbq.md
 
 #### Github
+- https://github.com/ARPSyndicate/cve-scores
 - https://github.com/B1gN0Se/prototype-pollution
 - https://github.com/BlackFan/client-side-prototype-pollution
 - https://github.com/PecentZero/prototype_pollution

2021/CVE-2021-25287.md

@@ -14,4 +14,5 @@ An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read i
 
 #### Github
 - https://github.com/aryanxsh/example-vulnerable-repo
+- https://github.com/jtb75/serverless-examples
 

2021/CVE-2021-25288.md

@@ -13,5 +13,5 @@ An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read i
 - https://github.com/python-pillow/Pillow/pull/5377#issuecomment-833821470
 
 #### Github
-No PoCs found on GitHub currently.
+- https://github.com/jtb75/serverless-examples
 

2021/CVE-2021-25331.md

@@ -10,6 +10,7 @@ Improper access control in Samsung Pay mini application prior to v4.0.14 allows
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25332.md

@@ -10,6 +10,7 @@ Improper access control in Samsung Pay mini application prior to v4.0.14 allows
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25333.md

@@ -10,6 +10,7 @@ Improper access control in Samsung Pay mini application prior to v4.0.14 allows
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25334.md

@@ -10,6 +10,7 @@ Improper input check in wallpaper service in Samsung mobile devices prior to SMR
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25335.md

@@ -10,6 +10,7 @@ Improper lockscreen status check in cocktailbar service in Samsung mobile device
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25336.md

@@ -10,6 +10,7 @@ Improper access control in NotificationManagerService in Samsung mobile devices
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25337.md

@@ -10,6 +10,7 @@ Improper access control in clipboard service in Samsung mobile devices prior to
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25338.md

@@ -10,6 +10,7 @@ Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25339.md

@@ -10,6 +10,7 @@ Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25340.md

@@ -10,6 +10,7 @@ Improper access control vulnerability in Samsung keyboard version prior to SMR F
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25341.md

@@ -10,6 +10,7 @@ Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allow
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25342.md

@@ -10,6 +10,7 @@ Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauth
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25343.md

@@ -11,6 +11,7 @@ Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25344.md

@@ -10,6 +10,7 @@ Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25345.md

@@ -10,6 +10,7 @@ Graphic format mismatch while converting video format in hwcomposer prior to SMR
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25346.md

@@ -10,6 +10,7 @@ A possible arbitrary memory overwrite vulnerabilities in quram library version p
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25347.md

@@ -10,6 +10,7 @@ Hijacking vulnerability in Samsung Email application version prior to SMR Feb-20
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25348.md

@@ -10,6 +10,7 @@ Improper permission grant check in Samsung Internet prior to version 13.0.1.60 a
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25349.md

@@ -10,6 +10,7 @@ Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allow
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25350.md

@@ -10,6 +10,7 @@ Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25351.md

@@ -11,6 +11,7 @@ Improper Access Control in EmailValidationView in Samsung Account prior to versi
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25352.md

@@ -10,6 +10,7 @@ Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25353.md

@@ -10,6 +10,7 @@ Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows l
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25354.md

@@ -10,6 +10,7 @@ Improper input check in Samsung Internet prior to version 13.2.1.46 allows attac
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25355.md

@@ -10,6 +10,7 @@ Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows lo
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/serviceWeb.smsb
 
 #### Github

2021/CVE-2021-25356.md

@@ -11,6 +11,7 @@ An improper caller check vulnerability in Managed Provisioning prior to SMR APR-
 
 #### Reference
 - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25357.md

@@ -10,6 +10,7 @@ A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Re
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25358.md

@@ -10,6 +10,7 @@ A vulnerability that stores IMSI values in an improper path prior to SMR APR-202
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github

2021/CVE-2021-25359.md

@@ -10,6 +10,7 @@ An improper SELinux policy prior to SMR APR-2021 Release 1 allows local attacker
 ### POC
 
 #### Reference
+- https://security.samsungmobile.com/
 - https://security.samsungmobile.com/securityUpdate.smsb
 
 #### Github