TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Almost every publicly available CVE PoC

118 点作者 scanr超过 3 年前

7 条评论

ovi256超过 3 年前
I am highly interested in finding Django CVE PoCs which would be useful to justify internally (and externally) upgrading services running old unsupported versions of Django (or backporting the patches from the supported versions, if applicable). This repository contains the string &quot;Django&quot; 35 times. There are false positives, like this one, where the string &quot;POC&quot; was found in the CVE description but it&#x27;s actually saying &quot;No POC found&quot;<p><a href="https:&#x2F;&#x2F;github.com&#x2F;trickest&#x2F;cve&#x2F;blob&#x2F;967839a1f3dd2e43c3ca7af98749ae1712e69a04&#x2F;2019&#x2F;CVE-2019-19118.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;trickest&#x2F;cve&#x2F;blob&#x2F;967839a1f3dd2e43c3ca7af...</a><p>The string &quot;No POC found&quot; appears 34,948 times in this repository. This is concerning, given this repo has ~1000 CVEs per year, and 24 years!<p>The GitHub links for each CVE are very low value, unfortunately, the modal link seems to be to a &quot;awesome CVE&quot; or &quot;CVE POC list&quot; repository of no value whatsoever.<p>I&#x27;d really like a CVE database where you can search by software and version and see which CVEs apply to your version, their severity, and which have PoCs. Anybody else feeling this would be valuable ?
评论 #30358152 未加载
评论 #30358031 未加载
评论 #30358059 未加载
daehee超过 3 年前
For a curated collection of CVE PoCs that is continuously updated by the bug bounty community, check out the projectdiscovery nuclei repo: <a href="https:&#x2F;&#x2F;github.com&#x2F;projectdiscovery&#x2F;nuclei-templates&#x2F;tree&#x2F;master&#x2F;cves" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;projectdiscovery&#x2F;nuclei-templates&#x2F;tree&#x2F;ma...</a>
cracauer超过 3 年前
I would like to have a resource like this, but instead of the PoC I want to see the diff that fixed the flaw in the software.<p>Anything like that around? I know it isn&#x27;t trivial.
评论 #30383971 未加载
评论 #30360463 未加载
Sebb767超过 3 年前
This is great! The title made me think of someone mocking badly described PoCs, but it&#x27;s really a collection.
stonepresto超过 3 年前
Seems a little spotty on finding popular PoCs for recent CVEs, but I think this is great for archiving purposes.
rendall超过 3 年前
What is a CVE PoC?
评论 #30364114 未加载
评论 #30359244 未加载
评论 #30361887 未加载
parandroid超过 3 年前
Awesome work!