This repository contains my advisories, proof of concept files and exploits that I have made public and it is located at https://github.com/pedrib/PoC. It also contains a CSV file where I keep track of all the vulnerabilities I have discovered (including CVE and other identifiers) as well as all the Metasploit modules I have publicly released.
All information, code and binary data in this repository is released to the public under the GNU General Public License, version 3 (GPLv3).For information, code or binary data obtained from other sources that has a license which is incompatible with GPLv3, the original license prevails.
For more information check https://www.gnu.org/licenses/gpl-3.0.en.html and / or the LICENSE file in the root of this repository.
Please note that Agile Information Security relies on the information provided by the vendor when listing fixed versions or products. Agile Information Security does not verify this information, except when specifically mentioned in this advisory or when requested or contracted by the vendor to do so.
Unconfirmed vendor fixes might be ineffective or incomplete, and it is the vendor's responsibility to ensure the vulnerablities found by Agile Information Security are resolved properly.
Agile Information Security Limited does not accept any responsiblity, financial or otherwise, from any material losses, loss of life or reputational loss as a result of misuse of the information or code contained or mentioned in this repository. It is the vendor's responsibility to ensure their products' security before, during and after release to market.
Feel free to send me questions / comments / criticism.
Pedro Ribeiro (pedrib_at_gmail_dot_com)
Founder & Director of Research at Agile Information Security