Update Sun May 5 01:58:39 UTC 2024

trickest · May 5, 2024 · 31a70dd · 31a70dd
1 parent 5a4a852
commit 31a70dd
Show file tree

Hide file tree

Showing 70 changed files with 404 additions and 5 deletions.
diff --git a/2005/CVE-2005-2541.md b/2005/CVE-2005-2541.md
@@ -16,6 +16,7 @@ No PoCs from references.
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Dalifo/wik-dvs-tp02
 - https://github.com/GoogleCloudPlatform/aactl
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/amartingarcia/kubernetes-cks-training
 - https://github.com/cdupuis/image-api

diff --git a/2006/CVE-2006-4304.md b/2006/CVE-2006-4304.md
@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Naughtyangel103/PS4
+- https://github.com/Sammylol69/Sammylol69
 - https://github.com/Skwalker416/pppwn-850
 - https://github.com/TheOfficialFloW/PPPwn
 - https://github.com/aulauniversal/Ps4-pppwn-Windows

diff --git a/2007/CVE-2007-5686.md b/2007/CVE-2007-5686.md
@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Dalifo/wik-dvs-tp02
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/flyrev/security-scan-ci-presentation

diff --git a/2007/CVE-2007-6755.md b/2007/CVE-2007-6755.md
@@ -15,6 +15,7 @@ The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic R
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/Live-Hack-CVE/CVE-2007-6755
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api

diff --git a/2010/CVE-2010-0928.md b/2010/CVE-2010-0928.md
@@ -15,6 +15,7 @@ OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPG
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/chnzzh/OpenSSL-CVE-lib

diff --git a/2010/CVE-2010-2008.md b/2010/CVE-2010-2008.md
@@ -0,0 +1,17 @@
+### [CVE-2010-2008](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2008)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3677.md b/2010/CVE-2010-3677.md
@@ -10,6 +10,7 @@ Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated
 ### POC
 
 #### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
 - https://bugzilla.redhat.com/show_bug.cgi?id=628040
 
 #### Github

diff --git a/2010/CVE-2010-3678.md b/2010/CVE-2010-3678.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3678](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3678)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3679.md b/2010/CVE-2010-3679.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3679](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3679)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3680.md b/2010/CVE-2010-3680.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3680](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3680)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3681.md b/2010/CVE-2010-3681.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3681](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3681)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3682.md b/2010/CVE-2010-3682.md
@@ -10,6 +10,7 @@ Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated
 ### POC
 
 #### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
 - https://bugzilla.redhat.com/show_bug.cgi?id=628328
 
 #### Github

diff --git a/2010/CVE-2010-3683.md b/2010/CVE-2010-3683.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3683](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3683)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3833.md b/2010/CVE-2010-3833.md
@@ -10,7 +10,7 @@ MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not proper
 ### POC
 
 #### Reference
-No PoCs from references.
+- http://www.ubuntu.com/usn/USN-1017-1
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

diff --git a/2010/CVE-2010-3834.md b/2010/CVE-2010-3834.md
@@ -10,7 +10,7 @@ Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5
 ### POC
 
 #### Reference
-No PoCs from references.
+- http://www.ubuntu.com/usn/USN-1017-1
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

diff --git a/2010/CVE-2010-3835.md b/2010/CVE-2010-3835.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3835](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3835)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3836.md b/2010/CVE-2010-3836.md
@@ -10,7 +10,7 @@ MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote a
 ### POC
 
 #### Reference
-No PoCs from references.
+- http://www.ubuntu.com/usn/USN-1017-1
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

diff --git a/2010/CVE-2010-3837.md b/2010/CVE-2010-3837.md
@@ -10,7 +10,7 @@ MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote a
 ### POC
 
 #### Reference
-No PoCs from references.
+- http://www.ubuntu.com/usn/USN-1017-1
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

diff --git a/2010/CVE-2010-3838.md b/2010/CVE-2010-3838.md
@@ -10,7 +10,7 @@ MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote a
 ### POC
 
 #### Reference
-No PoCs from references.
+- http://www.ubuntu.com/usn/USN-1017-1
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

diff --git a/2010/CVE-2010-3839.md b/2010/CVE-2010-3839.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3839](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3839)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-3840.md b/2010/CVE-2010-3840.md
@@ -0,0 +1,17 @@
+### [CVE-2010-3840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3840)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
+
+### POC
+
+#### Reference
+- http://www.ubuntu.com/usn/USN-1017-1
+
+#### Github
+No PoCs found on GitHub currently.
+
diff --git a/2010/CVE-2010-4756.md b/2010/CVE-2010-4756.md
@@ -16,6 +16,7 @@ The glob implementation in the GNU C Library (aka glibc or libc6) allows remote
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/flyrev/security-scan-ci-presentation

diff --git a/2011/CVE-2011-3374.md b/2011/CVE-2011-3374.md
@@ -16,6 +16,7 @@ No PoCs from references.
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Azure/container-scan
 - https://github.com/Dalifo/wik-dvs-tp02
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/KorayAgaya/TrivyWeb
 - https://github.com/Mohzeela/external-secret
 - https://github.com/PajakAlexandre/wik-dps-tp02

diff --git a/2011/CVE-2011-3389.md b/2011/CVE-2011-3389.md
@@ -28,6 +28,7 @@ The SSL protocol, as used in certain configurations in Microsoft Windows and Mic
 - https://github.com/CVEDB/PoC-List
 - https://github.com/CVEDB/awesome-cve-repo
 - https://github.com/Dalifo/wik-dvs-tp02
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/Justic-D/Dev_net_home_1
 - https://github.com/Kapotov/3.9.1
 - https://github.com/Live-Hack-CVE/CVE-2011-3389

diff --git a/2011/CVE-2011-4116.md b/2011/CVE-2011-4116.md
@@ -16,6 +16,7 @@ No PoCs from references.
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Dalifo/wik-dvs-tp02
 - https://github.com/GEANT/nagios_check_gitlab_vulnerability_report
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/briandfoy/cpan-audit
 - https://github.com/cdupuis/image-api

diff --git a/2013/CVE-2013-4392.md b/2013/CVE-2013-4392.md
@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/flyrev/security-scan-ci-presentation

diff --git a/2015/CVE-2015-1528.md b/2015/CVE-2015-1528.md
@@ -18,6 +18,7 @@ No PoCs from references.
 - https://github.com/CVEDB/awesome-cve-repo
 - https://github.com/CVEDB/top
 - https://github.com/GhostTroops/TOP
+- https://github.com/HexHive/scudo-exploitation
 - https://github.com/I-Prashanth-S/CybersecurityTIFAC
 - https://github.com/JERRY123S/all-poc
 - https://github.com/Qamar4P/awesome-android-cpp

diff --git a/2016/CVE-2016-2781.md b/2016/CVE-2016-2781.md
@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Frannc0/test2
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/NeXTLinux/griffon
 - https://github.com/NeXTLinux/vunnel
 - https://github.com/PajakAlexandre/wik-dps-tp02

diff --git a/2017/CVE-2017-18018.md b/2017/CVE-2017-18018.md
@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Dalifo/wik-dvs-tp02
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/Thaeimos/aws-eks-image
 - https://github.com/actions-marketplace-validations/phonito_phonito-scanner-action

diff --git a/2018/CVE-2018-20796.md b/2018/CVE-2018-20796.md
@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/flyrev/security-scan-ci-presentation

diff --git a/2018/CVE-2018-5709.md b/2018/CVE-2018-5709.md
@@ -14,6 +14,7 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/brandoncamenisch/release-the-code-litecoin
 - https://github.com/cdupuis/image-api
 - https://github.com/dispera/giant-squid

diff --git a/2018/CVE-2018-6829.md b/2018/CVE-2018-6829.md
@@ -17,6 +17,7 @@ cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages direc
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Dalifo/wik-dvs-tp02
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/flyrev/security-scan-ci-presentation

diff --git a/2019/CVE-2019-1010022.md b/2019/CVE-2019-1010022.md
@@ -16,6 +16,7 @@
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/fokypoky/places-list

diff --git a/2019/CVE-2019-1010023.md b/2019/CVE-2019-1010023.md
@@ -15,6 +15,7 @@
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/fokypoky/places-list

diff --git a/2019/CVE-2019-1010024.md b/2019/CVE-2019-1010024.md
@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/fokypoky/places-list

diff --git a/2019/CVE-2019-1010025.md b/2019/CVE-2019-1010025.md
@@ -15,6 +15,7 @@
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/fokypoky/places-list

diff --git a/2019/CVE-2019-19882.md b/2019/CVE-2019-19882.md
@@ -15,6 +15,7 @@ No PoCs from references.
 #### Github
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/Dalifo/wik-dvs-tp02
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/cdupuis/image-api
 - https://github.com/fokypoky/places-list

diff --git a/2019/CVE-2019-9192.md b/2019/CVE-2019-9192.md
@@ -16,6 +16,7 @@ No PoCs from references.
 - https://github.com/ARPSyndicate/cvemon
 - https://github.com/CKL2022/meta-timesys
 - https://github.com/DanMolz/wiz-scripts
+- https://github.com/GrigGM/05-virt-04-docker-hw
 - https://github.com/PajakAlexandre/wik-dps-tp02
 - https://github.com/TimesysGit/meta-timesys
 - https://github.com/cdupuis/image-api