Update Tue Nov 12 22:28:38 UTC 2024

Author: trickest-workflows

2006/CVE-2006-6365.md

@@ -0,0 +1,17 @@
+### [CVE-2006-6365](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6365)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the iType parameter.  NOTE: the iState parameter is already covered by CVE-2005-3976 and the iPro parameter is already covered by CVE-2005-2047.
+
+### POC
+
+#### Reference
+- http://securityreason.com/securityalert/1987
+
+#### Github
+No PoCs found on GitHub currently.
+

2011/CVE-2011-2598.md

@@ -10,6 +10,7 @@ The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtai
 ### POC
 
 #### Reference
+- http://www.contextis.com/resources/blog/webgl2/
 - http://www.theregister.co.uk/2011/06/16/webgl_security_threats_redux/
 
 #### Github

2011/CVE-2011-2602.md

@@ -0,0 +1,17 @@
+### [CVE-2011-2602](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2602)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.
+
+### POC
+
+#### Reference
+- http://www.contextis.com/resources/blog/webgl2/
+
+#### Github
+No PoCs found on GitHub currently.
+

2011/CVE-2011-2603.md

@@ -0,0 +1,17 @@
+### [CVE-2011-2603](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2603)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.
+
+### POC
+
+#### Reference
+- http://www.contextis.com/resources/blog/webgl2/
+
+#### Github
+No PoCs found on GitHub currently.
+

2011/CVE-2011-2604.md

@@ -0,0 +1,17 @@
+### [CVE-2011-2604](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2604)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
+
+### Description
+
+The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.
+
+### POC
+
+#### Reference
+- http://www.contextis.com/resources/blog/webgl2/
+
+#### Github
+No PoCs found on GitHub currently.
+

2012/CVE-2012-2671.md

@@ -11,6 +11,7 @@ The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive
 
 #### Reference
 - https://github.com/rtomayko/rack-cache/blob/master/CHANGES
+- https://github.com/rtomayko/rack-cache/commit/2e3a64d07daac4c757cc57620f2288e865a09b90
 
 #### Github
 No PoCs found on GitHub currently.

2017/CVE-2017-17856.md

@@ -11,6 +11,7 @@ kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to c
 
 #### Reference
 - http://www.openwall.com/lists/oss-security/2017/12/21/2
+- https://github.com/torvalds/linux/commit/a5ec6ae161d72f01411169a938fa5f8baea16e8f
 
 #### Github
 No PoCs found on GitHub currently.

2017/CVE-2017-7235.md

@@ -10,7 +10,7 @@ An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious we
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://github.com/Anorov/cloudflare-scrape/issues/97
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2017/CVE-2017-7279.md

@@ -10,7 +10,7 @@ An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2017/CVE-2017-7280.md

@@ -10,7 +10,7 @@ An issue was discovered in api/includes/systems.php in Unitrends Enterprise Back
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon