CVE-2014-10069

Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a backup configuration file, as demonstrated by a password hash in the um_auth_account_password field.

• https://github.com/aimoda/hitron-cfg-decrypter

CVE-2014-9390

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

• https://github.com/hakatashi/CVE-2014-9390

CVE-2014-9322

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

• https://github.com/RKX1209/CVE-2014-9322

CVE-2014-9301

Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

• https://github.com/ottimo/burp-alfresco-referer-proxy-cve-2014-9301

CVE-2014-9295

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.

• https://github.com/MacMiniVault/NTPUpdateSnowLeopard

CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.

• https://github.com/BenChaliah/MIPS-CVE-2014-9222

• https://github.com/donfanning/MIPS-CVE-2014-9222

CVE-2014-9137

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.

• https://github.com/jamaal001/CVE-2014-91371-Wordpress-

CVE-2014-9034

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016.

• https://github.com/c0r3dump3d/wp_drupal_timing_attack

CVE-2014-9016

The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.

• https://github.com/c0r3dump3d/wp_drupal_timing_attack

• https://github.com/Primus27/WordPress-Long-Password-Denial-of-Service

CVE-2014-8757

LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to bypass authorization via a crafted request.

• https://github.com/irsl/lgosp-poc

CVE-2014-8731

PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.

• https://github.com/sbani/CVE-2014-8731-PoC

CVE-2014-8729

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

• https://github.com/inso-/TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878

CVE-2014-8682

Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to (1) api/v1/repos/search, which is not properly handled in models/repo.go, or (2) api/v1/users/search, which is not properly handled in models/user.go.

• https://github.com/nihal1306/gogs

CVE-2014-8609

The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android before 5.0.0 does not properly create a PendingIntent, which allows attackers to use the SYSTEM uid for broadcasting an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application, aka Bug 17356824.

• https://github.com/MazX0p/CVE-2014-8609-POC

• https://github.com/ratiros01/CVE-2014-8609-exploit

• https://github.com/locisvv/Vulnerable-CVE-2014-8609

CVE-2014-8275

OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.

• https://github.com/uthrasri/Openssl_G2.5_CVE-2014-8275

• https://github.com/uthrasri/CVE-2014-8275_openssl_g2.5

CVE-2014-8244

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.

• https://github.com/JollyJumbuckk/LinksysLeaks

CVE-2014-8142

Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.

• https://github.com/3xp10it/php_cve-2014-8142_cve-2015-0231

CVE-2014-8110

Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• https://github.com/tafamace/CVE-2014-8110

CVE-2014-7921

mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920.

• https://github.com/laginimaineb/cve-2014-7920-7921

CVE-2014-7920

mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921.

• https://github.com/laginimaineb/cve-2014-7920-7921

• https://github.com/Vinc3nt4H/cve-2014-7920-7921_update

CVE-2014-7911

luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows attackers to execute arbitrary code via a crafted finalize method for a serialized object in an ArrayMap Parcel within an intent sent to system_service, as demonstrated by the finalize method of android.os.BinderProxy, aka Bug 15874291.

• https://github.com/retme7/CVE-2014-7911_poc

• https://github.com/retme7/CVE-2014-4322_poc

• https://github.com/GeneBlue/cve-2014-7911-exp

• https://github.com/heeeeen/CVE-2014-7911poc

• https://github.com/ele7enxxh/CVE-2014-7911

• https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322_get_root_privilege

• https://github.com/mabin004/cve-2014-7911

• https://github.com/koozxcv/CVE-2014-7911

CVE-2014-7236

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.

• https://github.com/m0nad/CVE-2014-7236_Exploit

CVE-2014-7205

Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.

• https://github.com/maximilianmarx/bassmaster-rce

• https://github.com/AndrewTrube/CVE-2014-7205

CVE-2014-7169

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.

• https://github.com/chef-boneyard/bash-shellshock

• https://github.com/Gobinath-B/SHELL-SCHOCK

• https://github.com/gina-alaska/bash-cve-2014-7169-cookbook

• https://github.com/renanvicente/puppet-shellshock

• https://github.com/ajansha/shellshock

CVE-2014-6721

The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• https://github.com/sagisar1/CVE-2014-6721-exploit-Shellshock

CVE-2014-6598

Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Signaling - DPI.

• https://github.com/KPN-CISO/DRA_writeup

CVE-2014-6577

Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the original researcher's claim that this is an XML external entity (XXE) vulnerability in the XML parser, which allows attackers to conduct internal port scanning, perform SSRF attacks, or cause a denial of service via a crafted (1) http: or (2) ftp: URI.

• https://github.com/SecurityArtWork/oracle-xxe-sqli

CVE-2014-6332

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka "Windows OLE Automation Array Remote Code Execution Vulnerability."

• https://github.com/MarkoArmitage/metasploit-framework

• https://github.com/mourr/CVE-2014-6332

• https://github.com/tjjh89017/cve-2014-6332

CVE-2014-6287

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.

• https://github.com/VICXOR/HFSZap

• https://github.com/randallbanner/Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

• https://github.com/0xTabun/CVE-2014-6287

• https://github.com/hadrian3689/rejetto_hfs_rce

• https://github.com/mrintern/thm_steelmountain_CVE-2014-6287

• https://github.com/Nicoslo/Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

• https://github.com/roughiz/cve-2014-6287.py

• https://github.com/zhsh9/CVE-2014-6287

• https://github.com/francescobrina/hfs-cve-2014-6287-exploit

• https://github.com/wizardy0ga/THM-Steel_Mountain-CVE-2014-6287

CVE-2014-6271

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

• https://github.com/opsxcq/exploit-CVE-2014-6271

• https://github.com/capture0x/XSHOCK

• https://github.com/scottjpack/shellshock_scanner

• https://github.com/hmlio/vaas-cve-2014-6271

• https://github.com/cj1324/CGIShell

• https://github.com/b4keSn4ke/CVE-2014-6271

• https://github.com/francisck/shellshock-cgi

• https://github.com/indiandragon/Shellshock-Vulnerability-Scan

• https://github.com/npm/ansible-bashpocalypse

• https://github.com/P0cL4bs/ShellShock-CGI-Scan

• https://github.com/zalalov/CVE-2014-6271

• https://github.com/ksang/shellshock

• https://github.com/securusglobal/BadBash

• https://github.com/akr3ch/CVE-2014-6271

• https://github.com/0x00-0x00/CVE-2014-6271

• https://github.com/akiraaisha/shellshocker-python

• https://github.com/RainMak3r/Rainstorm

• https://github.com/sch3m4/RIS

• https://github.com/ramnes/pyshellshock

• https://github.com/Anklebiter87/Cgi-bin_bash_Reverse

• https://github.com/proclnas/ShellShock-CGI-Scan

• https://github.com/0xN7y/CVE-2014-6271

• https://github.com/Any3ite/CVE-2014-6271

• https://github.com/ryeyao/CVE-2014-6271_Test

• https://github.com/K3ysTr0K3R/CVE-2014-6271-EXPLOIT

• https://github.com/r4z0r5/SwissArmyShellshocker

• https://github.com/mochizuki875/CVE-2014-6271-Apache-Debian

• https://github.com/APSL/salt-shellshock

• https://github.com/gabemarshall/shocknaww

• https://github.com/Gurguii/cgi-bin-shellshock

• https://github.com/TheRealCiscoo/Shellshock-Exploit

• https://github.com/themson/shellshock

• https://github.com/sunnyjiang/shellshocker-android

• https://github.com/somhm-solutions/Shell-Shock

• https://github.com/MuirlandOracle/CVE-2014-6271-IPFire

• https://github.com/352926/shellshock_crawler

• https://github.com/wenyu1999/bash-shellshock

• https://github.com/cved-sources/cve-2014-6271

• https://github.com/hadrian3689/shellshock

• https://github.com/villadora/CVE-2014-6271

• https://github.com/AlissonFaoli/Shellshock

• https://github.com/hackintoanetwork/shellshock

• https://github.com/Sindadziy/cve-2014-6271

• https://github.com/0xConstant/CVE-2014-6271

• https://github.com/mritunjay-k/CVE-2014-6271

• https://github.com/Brandaoo/CVE-2014-6271

• https://github.com/Aruthw/CVE-2014-6271

• https://github.com/kowshik-sundararajan/CVE-2014-6271

• https://github.com/mattclegg/CVE-2014-6271

• https://github.com/Dilith006/CVE-2014-6271

• https://github.com/woltage/CVE-2014-6271

• https://github.com/0xTabun/CVE-2014-6271

• https://github.com/Jsmoreira02/CVE-2014-6271

• https://github.com/RadYio/CVE-2014-6271

• https://github.com/rashmikadileeshara/CVE-2014-6271-Shellshock-

• https://github.com/shawntns/exploit-CVE-2014-6271

• https://github.com/hanmin0512/CVE-2014-6271_pwnable

• https://github.com/Pilou-Pilou/docker_CVE-2014-6271.

• https://github.com/dlitz/bash-cve-2014-6271-fixes

• https://github.com/cyberharsh/Shellbash-CVE-2014-6271

• https://github.com/rrreeeyyy/cve-2014-6271-spec

• https://github.com/kelleykong/cve-2014-6271-mengjia-kong

• https://github.com/ilismal/Nessus_CVE-2014-6271_check

• https://github.com/w4fz5uck5/ShockZaum-CVE-2014-6271

• https://github.com/jblaine/cookbook-bash-CVE-2014-6271

• https://github.com/huanlu/cve-2014-6271-huan-lu

• https://github.com/ryancnelson/patched-bash-4.3

• https://github.com/Sindayifu/CVE-2019-14287-CVE-2014-6271

• https://github.com/TheRealCiscoo/Shellshock

• https://github.com/anujbhan/shellshock-victim-host

• https://github.com/renanvicente/puppet-shellshock

• https://github.com/u20024804/bash-4.2-fixed-CVE-2014-6271

• https://github.com/u20024804/bash-4.3-fixed-CVE-2014-6271

• https://github.com/FilipStudeny/-CVE-2014-6271-Shellshock-Remote-Command-Injection-

• https://github.com/u20024804/bash-3.2-fixed-CVE-2014-6271

• https://github.com/teedeedubya/bash-fix-exploit

• https://github.com/ariarijp/vagrant-shellshock

• https://github.com/justzx2011/bash-up

• https://github.com/internero/debian-lenny-bash_3.2.52-cve-2014-6271

• https://github.com/heikipikker/shellshock-shell

• https://github.com/ajansha/shellshock

• https://github.com/JohnRyk/ICMPShock3

CVE-2014-5460

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated users to execute arbitrary code by uploading a PHP file, then accessing it via a direct request to the file in wp-content/uploads/slideshow-gallery/.

• https://github.com/brookeses69/CVE-2014-5460

CVE-2014-5329

GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests (CVE-2011-3192), which may lead to a denial-of-service (DoS) condition.

• https://github.com/warmilk/http-Dos-Attack-Detection

CVE-2014-5301

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.

• https://github.com/AndyCyberSec/OSCP

CVE-2014-5284

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creating the temporary files before automatic IP blocking is performed.

• https://github.com/mbadanoiu/CVE-2014-5284

CVE-2014-5139

The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.

• https://github.com/uthrasri/CVE-2014-5139

• https://github.com/uthrasri/G2.5_openssl_CVE-2014-5139

CVE-2014-4943

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

• https://github.com/redes-2015/l2tp-socket-bug

CVE-2014-4936

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.

• https://github.com/0x3a/CVE-2014-4936

CVE-2014-4699

The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.

• https://github.com/vnik5287/cve-2014-4699-ptrace

CVE-2014-4688

pfSense before 2.1.4 allows remote authenticated users to execute arbitrary commands via (1) the hostname value to diag_dns.php in a Create Alias action, (2) the smartmonemail value to diag_smart.php, or (3) the database value to status_rrd_graph_img.php.

• https://github.com/andyfeili/CVE-2014-4688

CVE-2014-4671

Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.

• https://github.com/cph/rabl-old

CVE-2014-4511

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a (1) blame, (2) file, or (3) stats page, as demonstrated by requests to blame/master/, master/, and stats/master/.

• https://github.com/michaelsss1/gitlist-RCE

CVE-2014-4481

Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

• https://github.com/feliam/CVE-2014-4481

CVE-2014-4378

CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document.

• https://github.com/feliam/CVE-2014-4378

CVE-2014-4377

Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

• https://github.com/feliam/CVE-2014-4377

• https://github.com/davidmurray/CVE-2014-4377

CVE-2014-4323

The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows attackers to gain privileges via a crafted application.

• https://github.com/marcograss/cve-2014-4323

CVE-2014-4322

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.

• https://github.com/retme7/CVE-2014-4322_poc

• https://github.com/laginimaineb/cve-2014-4322

• https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322_get_root_privilege

• https://github.com/askk/CVE-2014-4322_adaptation

• https://github.com/koozxcv/CVE-2014-4322

CVE-2014-4321

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

• https://github.com/android-rooting-tools/libmsm_vfe_read_exploit

CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services.

• https://github.com/0xn0ne/weblogicScanner

• https://github.com/NoneNotNull/SSRFX

• https://github.com/NHPT/WebLogic-SSRF_CVE-2014-4210

• https://github.com/unmanarc/CVE-2014-4210-SSRF-PORTSCANNER-POC

CVE-2014-4140

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

• https://github.com/day6reak/CVE-2014-4140

CVE-2014-4114

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a "Sandworm" attack in June through October 2014, aka "Windows OLE Remote Code Execution Vulnerability."

• https://github.com/chefphenix25/vuln-rabilit-windows7

CVE-2014-4113

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."

• https://github.com/sam-b/CVE-2014-4113

• https://github.com/nsxz/Exploit-CVE-2014-4113

• https://github.com/johnjohnsp1/CVE-2014-4113

• https://github.com/wikiZ/cve-2014-4113

CVE-2014-4109

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4110, and CVE-2014-4111.

• https://github.com/day6reak/CVE-2014-4109

CVE-2014-4076

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."

• https://github.com/fungoshacks/CVE-2014-4076

CVE-2014-4014

The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.

• https://github.com/vnik5287/cve-2014-4014-privesc

CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

• https://github.com/happynote3966/CVE-2014-3704

• https://github.com/AleDiBen/Drupalgeddon

CVE-2014-3625

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.

• https://github.com/ilmila/springcss-cve-2014-3625

• https://github.com/gforresu/SpringPathTraversal

CVE-2014-3570

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

• https://github.com/uthrasri/CVE-2014-3570

• https://github.com/uthrasri/openssl_G2.5_CVE-2014-3570

• https://github.com/uthrasri/Openssl_G2.5_CVE-2014-3570_01

• https://github.com/uthrasri/CVE-2014-3570_G2.5_openssl_no_patch

CVE-2014-3566

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

• https://github.com/mpgn/poodle-PoC

• https://github.com/stdevel/poodle_protector

• https://github.com/anthophilee/A2SV--SSL-VUL-Scan

• https://github.com/mikesplain/CVE-2014-3566-poodle-cookbook

• https://github.com/uthrasri/openssl_g2.5_CVE-2014-3566

• https://github.com/cloudpassage/mangy-beast

CVE-2014-3551

Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.

• https://github.com/JavaGarcia/CVE-2014-3551

CVE-2014-3544

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.

• https://github.com/aforesaid/MoodleHack

CVE-2014-3507

Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.

• https://github.com/Satheesh575555/openSSL_1.0.1g_CVE-2014-3507

CVE-2014-3466

Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.

• https://github.com/azet/CVE-2014-3466_PoC

CVE-2014-3341

The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.

• https://github.com/ehabhussein/snmpvlan

CVE-2014-3153

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

• https://github.com/timwr/CVE-2014-3153

• https://github.com/geekben/towelroot

• https://github.com/android-rooting-tools/libfutex_exploit

• https://github.com/lieanu/CVE-2014-3153

• https://github.com/dangtunguyen/TowelRoot

• https://github.com/elongl/CVE-2014-3153

• https://github.com/zerodavinci/CVE-2014-3153-exploit

• https://github.com/sin4ts/CVE2014-3153

• https://github.com/c3c/CVE-2014-3153

• https://github.com/c4mx/Linux-kernel-code-injection_CVE-2014-3153

CVE-2014-3120

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.

• https://github.com/echohtp/ElasticSearch-CVE-2014-3120

• https://github.com/jeffgeiger/es_inject

• https://github.com/xpgdgit/CVE-2014-3120

CVE-2014-2815

Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."

• https://github.com/Edubr2020/CABTrap_OneNote2007

CVE-2014-2734

** DISPUTED ** The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations. NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher.

• https://github.com/adrienthebo/cve-2014-2734

• https://github.com/gdisneyleugers/CVE-2014-2734

CVE-2014-2630

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.

• https://github.com/redtimmy/perf-exploiter

CVE-2014-2383

dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=convert.base64-encode/resource in the input_file parameter.

• https://github.com/Relativ3Pa1n/CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2324

Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.

• https://github.com/sp4c30x1/uc_httpd_exploit

CVE-2014-2323

SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname.

• https://github.com/cirocosta/lighty-sqlinj-demo

CVE-2014-2321

web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials.

• https://github.com/injectionmethod/ZTE-Vuln-4-Skids

• https://github.com/injectionmethod/Windows-ZTE-Loader

CVE-2014-2064

The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.

• https://github.com/Naramsim/Offensive

CVE-2014-2023

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_topic.php in mobiquo/functions/.

• https://github.com/tintinweb/pub

CVE-2014-2022

SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the conceptid argument in an xmlrpc API request.

• https://github.com/tintinweb/pub

CVE-2014-2021

Cross-site scripting (XSS) vulnerability in admincp/apilog.php in vBulletin 4.2.2 and earlier, and 5.0.x through 5.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted XMLRPC API request, as demonstrated using the client name.

• https://github.com/tintinweb/pub

CVE-2014-1904

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

• https://github.com/Naramsim/Offensive

CVE-2014-1812

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka "Group Policy Preferences Password Elevation of Privilege Vulnerability."

• https://github.com/mauricelambert/gpp-encrypt

CVE-2014-1773

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.

• https://github.com/day6reak/CVE-2014-1773

CVE-2014-1767

Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."

• https://github.com/ExploitCN/CVE-2014-1767-EXP-PAPER

CVE-2014-1677

Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.

• https://github.com/tihmstar/freePW_tc7200Eploit

CVE-2014-1447

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.

• https://github.com/tagatac/libvirt-CVE-2014-1447

CVE-2014-1322

The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object.

• https://github.com/raymondpittman/IPC-Memory-Mac-OSX-Exploit

CVE-2014-1303

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.

• https://github.com/RKX1209/CVE-2014-1303

CVE-2014-1266

The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.

• https://github.com/gabrielg/CVE-2014-1266-poc

• https://github.com/landonf/Testability-CVE-2014-1266

• https://github.com/linusyang/SSLPatch

• https://github.com/meetlight942/PentesterLab-Intercept-CVE-2014-1266

CVE-2014-0994

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the BITMAPINFOHEADER.biClrUsed field in a BMP file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0993.

• https://github.com/helpsystems/Embarcadero-Workaround

CVE-2014-0993

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file.

• https://github.com/helpsystems/Embarcadero-Workaround

CVE-2014-0816

Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors.

• https://github.com/tandasat/CVE-2014-0816

CVE-2014-0521

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not properly implement JavaScript APIs, which allows remote attackers to obtain sensitive information via a crafted PDF document.

• https://github.com/molnarg/cve-2014-0521

CVE-2014-0472

The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."

• https://github.com/christasa/CVE-2014-0472

CVE-2014-0291

** RE

• https://github.com/niccoX/patch-openssl-CVE-2014-0291_CVE-2015-0204

CVE-2014-0282

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.

• https://github.com/Charmve/PyStegosploit

CVE-2014-0226

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.

• https://github.com/shreesh1/CVE-2014-0226-poc

CVE-2014-0224

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.

• https://github.com/Tripwire/OpenSSL-CCS-Inject-Test

• https://github.com/ssllabs/openssl-ccs-cve-2014-0224

• https://github.com/secretnonempty/CVE-2014-0224

• https://github.com/anthophilee/A2SV--SSL-VUL-Scan

• https://github.com/droptables/ccs-eval

• https://github.com/iph0n3/CVE-2014-0224

CVE-2014-0196

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

• https://github.com/tempbottle/CVE-2014-0196

• https://github.com/SunRain/CVE-2014-0196

CVE-2014-0195

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

• https://github.com/ricedu/CVE-2014-0195

• https://github.com/PezwariNaan/CVE-2014-0195

CVE-2014-0166

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

• https://github.com/Ettack/POC-CVE-2014-0166

CVE-2014-0160

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

• https://github.com/FiloSottile/Heartbleed

• https://github.com/musalbas/heartbleed-masstest

• https://github.com/titanous/heartbleeder

• https://github.com/Lekensteyn/pacemaker

• https://github.com/sensepost/heartbleed-poc

• https://github.com/einaros/heartbleed-tools

• https://github.com/mpgn/heartbleed-PoC

• https://github.com/isgroup/openmagic

• https://github.com/jdauphant/patch-openssl-CVE-2014-0160

• https://github.com/DisK0nn3cT/MaltegoHeartbleed

• https://github.com/OffensivePython/HeartLeak

• https://github.com/hmlio/vaas-cve-2014-0160

• https://github.com/hybridus/heartbleedscanner

• https://github.com/DominikTo/bleed

• https://github.com/0x90/CVE-2014-0160

• https://github.com/wwwiretap/bleeding_onions

• https://github.com/hreese/heartbleed-dtls

• https://github.com/yryz/heartbleed.js

• https://github.com/undacmic/heartbleed-proof-of-concept

• https://github.com/mozilla-services/Heartbleed

• https://github.com/ingochris/heartpatch.us

• https://github.com/anthophilee/A2SV--SSL-VUL-Scan

• https://github.com/zouguangxian/heartbleed

• https://github.com/cyphar/heartthreader

• https://github.com/pblittle/aws-suture

• https://github.com/GuillermoEscobero/heartbleed

• https://github.com/amerine/coronary

• https://github.com/GardeniaWhite/fuzzing

• https://github.com/belmind/heartbleed

• https://github.com/cheese-hub/heartbleed

• https://github.com/Saymeis/HeartBleed

• https://github.com/vortextube/ssl_scanner

• https://github.com/Xyl2k/CVE-2014-0160-Chrome-Plugin

• https://github.com/sammyfung/openssl-heartbleed-fix

• https://github.com/proactiveRISK/heartbleed-extention

• https://github.com/xlucas/heartbleed

• https://github.com/waqasjamal-zz/HeartBleed-Vulnerability-Checker

• https://github.com/PinkP4nther/Heartbleed_PoC

• https://github.com/caiqiqi/OpenSSL-HeartBleed-CVE-2014-0160-PoC

• https://github.com/GeeksXtreme/ssl-heartbleed.nse

• https://github.com/cved-sources/cve-2014-0160

• https://github.com/a0726h77/heartbleed-test

• https://github.com/fb1h2s/CVE-2014-0160

• https://github.com/ice-security88/CVE-2014-0160

• https://github.com/cbk914/heartbleed-checker

• https://github.com/obayesshelton/CVE-2014-0160-Scanner

• https://github.com/timsonner/cve-2014-0160-heartbleed

• https://github.com/n3rdh4x0r/CVE-2014-0160_Heartbleed

• https://github.com/MrE-Fog/CVE-2014-0160-Chrome-Plugin

• https://github.com/Yash-Thakkar77/CVE-2014-0160-HeartBleed

• https://github.com/marstornado/cve-2014-0160-Yunfeng-Jiang

• https://github.com/siddolo/knockbleed

• https://github.com/iwaffles/heartbleed-test.crx

• https://github.com/froyo75/Heartbleed_Dockerfile_with_Nginx

• https://github.com/artofscripting-zz/cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS

• https://github.com/indiw0rm/-Heartbleed-

• https://github.com/takeshixx/ssl-heartbleed.nse

• https://github.com/WildfootW/CVE-2014-0160_OpenSSL_1.0.1f_Heartbleed

• https://github.com/rouze-d/heartbleed

• https://github.com/roganartu/heartbleedchecker-chrome

• https://github.com/iSCInc/heartbleed

• https://github.com/idkqh7/heatbleeding

• https://github.com/cldme/heartbleed-bug

• https://github.com/ThanHuuTuan/Heartexploit

• https://github.com/pierceoneill/bleeding-heart

• https://github.com/xanas/heartbleed.py

CVE-2014-0130

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

• https://github.com/omarkurt/cve-2014-0130

CVE-2014-0114

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.

• https://github.com/rgielen/struts1filter

• https://github.com/aenlr/strutt-cve-2014-0114

• https://github.com/ricedu/struts1-patch

CVE-2014-0094

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

• https://github.com/y0d3n/CVE-2014-0094

• https://github.com/HasegawaTadamitsu/CVE-2014-0094-test-program-for-struts1

CVE-2014-0050

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

• https://github.com/jrrdev/cve-2014-0050

CVE-2014-0043

In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use.

• https://github.com/JJK96/JavaClasspathEnum

CVE-2014-0038

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

• https://github.com/saelo/cve-2014-0038

• https://github.com/kiruthikan99/IT19115276