Skip to content
This repository was archived by the owner on Oct 16, 2024. It is now read-only.

Commit cfd9210

Browse files
racheljiang310racheljiang310
committed
fixed vulnerability
1 parent 26a3774 commit cfd9210

File tree

21 files changed

+87
-96
lines changed

21 files changed

+87
-96
lines changed

‎archetypes/default.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,4 @@
11
+++
22
title = '{{ replace .File.ContentBaseName "-" " " | title }}'
33
date = {{ .Date }}
4-
draft = true
54
+++

‎content/CVEX/CVEX-2017-1000499.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,6 @@ title: CVEX-2017-1000499
33
description: phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.
44
layout: single
55
date: 2024-05-27T15:34:00-07:00
6-
draft: true
76
weight: 50
87
url: /CVEX-2017-1000499/
98
---

‎content/CVEX/CVEX-2023-0286.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,6 @@
22
title: CVEX-2023-0286
33
description: Clones openssl version 3.0.7, containing a vulnerability that attributes the wrong variable type (ASN1_TYPE rather than ASN1_STRING) to a x509 address, allowing elevation of privilege.
44
layout: single
5-
draft: true
65
weight: 50
76
url: /CVEX-2023-0286/
87
---

‎content/CVEX/CVEX-2023-28155.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,6 @@ title: CVEX-2023-28155
33
description: The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). This vulnerability only affects products that are no longer supported by the maintainer.
44
layout: single
55
date: 2024-05-27T15:34:00-07:00
6-
draft: true
76
weight: 50
87
url: /CVEX-2023-28155/
98
---

‎content/CVEX/CVEX-2023-31419.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,6 @@ title: CVEX-2023-31419
33
description: A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
44
layout: single
55
date: 2024-05-27T15:34:00-07:00
6-
draft: true
76
weight: 50
87
url: /CVEX-2023-31419/
98
---

‎content/CVEX/CVEX-2023-42282.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,6 @@ title: CVEX-2023-42282
33
description: The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.
44
layout: single
55
date: 2024-05-27T15:34:00-07:00
6-
draft: true
76
weight: 50
87
url: /CVEX-2023-42282/
98
---

‎content/CVEX/CVEX-2024-21508.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,6 @@ title: CVEX-2024-21508
33
description: CVE-2024-21508 is a vulnerability found in versions of the mysql2 <= 3.9.4. This vulnerability allows for Remote Code Execution (RCE) through the readCodeFor function, due to improper validation of the supportBigNumbers and bigNumberStrings values. It does not require any specific privileges or user interaction and can be exploited over a network. The potential impact includes high integrity and confidentiality impact, as well as high availability impact.
44
layout: single
55
date: 2024-05-27T15:34:00-07:00
6-
draft: true
76
weight: 50
87
url: /CVEX-2024-21508/
98
---

‎content/CVEX/CVEX-XPLOR.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,6 @@ title: CVEX-XPLOR
33
description: A Proof of Concept Demonstration of our CVEX model/framework
44
layout: single
55
date: 2024-05-27T15:34:00-07:00
6-
draft: true
76
weight: 50
87
url: /CVEX-XPLOR/
98
---

‎content/_index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Common Vulnerability and Exposure Executables (CVEX)
33
description:
44
layout: single
5-
draft: true
5+
url: /
66
---
77
### A Collection of our Completed CVEXes
88
This static HUGO website serves as a database of completed CVEXes. These CVEXes were created by the Team of Professors Kruegel & Vigna, with 4 undergraduate researchers affiliated with UCSB's Early Research Scholars Program 2023-2024 cohort.

‎content/research.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,6 @@
22
title: About Xplor CVEX
33
description:
44
layout: single
5-
draft: true
65
url: /research/
76
---
87

‎hugo.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
baseURL = '/'
1+
baseURL = 'http://xplor-cvex.seclab.cs.ucsb.edu/'
22
languageCode = 'en-us'
33
relativeURLs = true
44
title = 'Common Vulneravilities and Exposures with Exploits'

‎public/404.html

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,12 +7,12 @@
77
<meta name="description" content="" />
88
<meta name="keywords" content="" />
99
<meta name="robots" content="noodp" />
10-
<link rel="canonical" href="//localhost:1313/404.html" />
10+
<link rel="canonical" href="http://localhost:1313/404.html" />
1111
<meta property="og:locale" content="en" />
1212
<meta property="og:title" content="404 Page not found :: Common Vulneravilities and Exposures with Exploits" />
1313
<meta property="og:description" content="" />
1414
<meta property="og:type" content="website" />
15-
<meta property="og:url" content="//localhost:1313/404.html" />
15+
<meta property="og:url" content="http://localhost:1313/404.html" />
1616
<meta property="og:site_name" content="Common Vulneravilities and Exposures with Exploits" />
1717
<meta property="og:image" content="" />
1818
<meta property="og:image:width" content="2048" />
@@ -28,7 +28,7 @@
2828
rel="stylesheet"
2929
/>
3030
<link href="./404.html" rel="alternate" type="application/rss+xml" title="Common Vulneravilities and Exposures with Exploits" />
31-
<link rel="stylesheet" href="//localhost:1313/styles.css" />
31+
<link rel="stylesheet" href="http://localhost:1313/styles.css" />
3232
</head>
3333

3434
<body>
@@ -38,7 +38,7 @@
3838
<nav class="navbar">
3939
<div class="navbar__first">
4040
<ul class="navbar__list borders">
41-
<li><a href="//localhost:1313/">Home</a></li>
41+
<li><a href="http://localhost:1313/">Home</a></li>
4242
<li><a href="./research/">Statement</a></li>
4343
<li><a href="./directoryv1/">CVEX 1.0 Directory</a></li>
4444
<li><a href="./directoryv2/">CVEX 2.0 Directory</a></li>
@@ -64,20 +64,20 @@
6464
<h1 class="post-title">404 — Page not found...</h1>
6565
</header>
6666
<p>
67-
<a href="//localhost:1313/">Back to home page&nbsp;→</a>
67+
<a href="http://localhost:1313/">Back to home page&nbsp;→</a>
6868
</p>
6969
</article>
7070
</main>
7171
<footer class="site-footer">
7272
<p class="buildinfo">
73-
<time datetime="2024-06-02 16:35:08 PDT">Site built on: 2024-06-02 16:35:08 PDT</time>
73+
<time datetime="2024-06-02 16:42:18 PDT">Site built on: 2024-06-02 16:42:18 PDT</time>
7474
</p>
7575
<div class="copyright">
7676
<p></p>
7777
<nav class="navbar">
7878
<ul class="navbar__list">
79-
<li><a href="//localhost:1313/posts/index.xml">RSS</a></li>
80-
<li><a href="//localhost:1313/sitemap.xml">Sitemap</a></li>
79+
<li><a href="http://localhost:1313/posts/index.xml">RSS</a></li>
80+
<li><a href="http://localhost:1313/sitemap.xml">Sitemap</a></li>
8181
</ul>
8282
</nav>
8383
</div>

‎public/CVEX-2017-1000499/index.html

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,15 @@
77
<meta name="description" content="phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc." />
88
<meta name="keywords" content="" />
99
<meta name="robots" content="noodp" />
10-
<link rel="canonical" href="//localhost:1313/CVEX-2017-1000499/" />
10+
<link rel="canonical" href="http://localhost:1313/CVEX-2017-1000499/" />
1111
<meta property="og:locale" content="en" />
1212
<meta property="og:title" content="CVEX-2017-1000499 :: Common Vulneravilities and Exposures with Exploits" />
1313
<meta property="og:description" content="phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc." />
1414
<meta property="og:type" content="article" />
1515
<meta property="article:published_time" content="2024-05-27 15:34:00 -0700 PDT" />
1616
<meta property="article:modified_time" content="2024-05-27 15:34:00 PDT" />
1717
<meta property="article:author" content="Common Vulneravilities and Exposures with Exploits" />
18-
<meta property="og:url" content="//localhost:1313/CVEX-2017-1000499/" />
18+
<meta property="og:url" content="http://localhost:1313/CVEX-2017-1000499/" />
1919
<meta property="og:site_name" content="Common Vulneravilities and Exposures with Exploits" />
2020
<meta property="og:image" content="" />
2121
<meta property="og:image:width" content="2048" />
@@ -31,7 +31,7 @@
3131
rel="stylesheet"
3232
/>
3333
<link href="../CVEX-2017-1000499/" rel="alternate" type="application/rss+xml" title="Common Vulneravilities and Exposures with Exploits" />
34-
<link rel="stylesheet" href="//localhost:1313/styles.css" />
34+
<link rel="stylesheet" href="http://localhost:1313/styles.css" />
3535
</head>
3636

3737
<body>
@@ -41,7 +41,7 @@
4141
<nav class="navbar">
4242
<div class="navbar__first">
4343
<ul class="navbar__list borders">
44-
<li><a href="//localhost:1313/">Home</a></li>
44+
<li><a href="http://localhost:1313/">Home</a></li>
4545
<li><a href="../research/">Statement</a></li>
4646
<li><a href="../directoryv1/">CVEX 1.0 Directory</a></li>
4747
<li><a href="../directoryv2/">CVEX 2.0 Directory</a></li>
@@ -63,7 +63,7 @@
6363
</header>
6464
<main class="site-main"><article class="post">
6565
<header class="post-header">
66-
<h1 class="post-title"><a href="//localhost:1313/CVEX-2017-1000499/">CVEX-2017-1000499</a></h1>
66+
<h1 class="post-title"><a href="http://localhost:1313/CVEX-2017-1000499/">CVEX-2017-1000499</a></h1>
6767
<div class="post-meta">
6868
<time pubdate datetime="2024-05-27 15:34:00 PDT">
6969
Published on
@@ -86,14 +86,14 @@ <h1 class="post-title"><a href="//localhost:1313/CVEX-2017-1000499/">CVEX-2017-1
8686
</main>
8787
<footer class="site-footer">
8888
<p class="buildinfo">
89-
<time datetime="2024-06-02 16:35:08 PDT">Site built on: 2024-06-02 16:35:08 PDT</time>
89+
<time datetime="2024-06-02 16:42:18 PDT">Site built on: 2024-06-02 16:42:18 PDT</time>
9090
</p>
9191
<div class="copyright">
9292
<p></p>
9393
<nav class="navbar">
9494
<ul class="navbar__list">
95-
<li><a href="//localhost:1313/posts/index.xml">RSS</a></li>
96-
<li><a href="//localhost:1313/sitemap.xml">Sitemap</a></li>
95+
<li><a href="http://localhost:1313/posts/index.xml">RSS</a></li>
96+
<li><a href="http://localhost:1313/sitemap.xml">Sitemap</a></li>
9797
</ul>
9898
</nav>
9999
</div>

‎public/CVEX-2023-28155/index.html

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,15 @@
77
<meta name="description" content="The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). This vulnerability only affects products that are no longer supported by the maintainer." />
88
<meta name="keywords" content="" />
99
<meta name="robots" content="noodp" />
10-
<link rel="canonical" href="//localhost:1313/CVEX-2023-28155/" />
10+
<link rel="canonical" href="http://localhost:1313/CVEX-2023-28155/" />
1111
<meta property="og:locale" content="en" />
1212
<meta property="og:title" content="CVEX-2023-28155 :: Common Vulneravilities and Exposures with Exploits" />
1313
<meta property="og:description" content="The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). This vulnerability only affects products that are no longer supported by the maintainer." />
1414
<meta property="og:type" content="article" />
1515
<meta property="article:published_time" content="2024-05-27 15:34:00 -0700 PDT" />
1616
<meta property="article:modified_time" content="2024-05-27 15:34:00 PDT" />
1717
<meta property="article:author" content="Common Vulneravilities and Exposures with Exploits" />
18-
<meta property="og:url" content="//localhost:1313/CVEX-2023-28155/" />
18+
<meta property="og:url" content="http://localhost:1313/CVEX-2023-28155/" />
1919
<meta property="og:site_name" content="Common Vulneravilities and Exposures with Exploits" />
2020
<meta property="og:image" content="" />
2121
<meta property="og:image:width" content="2048" />
@@ -31,7 +31,7 @@
3131
rel="stylesheet"
3232
/>
3333
<link href="../CVEX-2023-28155/" rel="alternate" type="application/rss+xml" title="Common Vulneravilities and Exposures with Exploits" />
34-
<link rel="stylesheet" href="//localhost:1313/styles.css" />
34+
<link rel="stylesheet" href="http://localhost:1313/styles.css" />
3535
</head>
3636

3737
<body>
@@ -41,7 +41,7 @@
4141
<nav class="navbar">
4242
<div class="navbar__first">
4343
<ul class="navbar__list borders">
44-
<li><a href="//localhost:1313/">Home</a></li>
44+
<li><a href="http://localhost:1313/">Home</a></li>
4545
<li><a href="../research/">Statement</a></li>
4646
<li><a href="../directoryv1/">CVEX 1.0 Directory</a></li>
4747
<li><a href="../directoryv2/">CVEX 2.0 Directory</a></li>
@@ -63,7 +63,7 @@
6363
</header>
6464
<main class="site-main"><article class="post">
6565
<header class="post-header">
66-
<h1 class="post-title"><a href="//localhost:1313/CVEX-2023-28155/">CVEX-2023-28155</a></h1>
66+
<h1 class="post-title"><a href="http://localhost:1313/CVEX-2023-28155/">CVEX-2023-28155</a></h1>
6767
<div class="post-meta">
6868
<time pubdate datetime="2024-05-27 15:34:00 PDT">
6969
Published on
@@ -86,14 +86,14 @@ <h1 class="post-title"><a href="//localhost:1313/CVEX-2023-28155/">CVEX-2023-281
8686
</main>
8787
<footer class="site-footer">
8888
<p class="buildinfo">
89-
<time datetime="2024-06-02 16:35:08 PDT">Site built on: 2024-06-02 16:35:08 PDT</time>
89+
<time datetime="2024-06-02 16:42:18 PDT">Site built on: 2024-06-02 16:42:18 PDT</time>
9090
</p>
9191
<div class="copyright">
9292
<p></p>
9393
<nav class="navbar">
9494
<ul class="navbar__list">
95-
<li><a href="//localhost:1313/posts/index.xml">RSS</a></li>
96-
<li><a href="//localhost:1313/sitemap.xml">Sitemap</a></li>
95+
<li><a href="http://localhost:1313/posts/index.xml">RSS</a></li>
96+
<li><a href="http://localhost:1313/sitemap.xml">Sitemap</a></li>
9797
</ul>
9898
</nav>
9999
</div>

‎public/CVEX-2023-31419/index.html

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,15 @@
77
<meta name="description" content="A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service." />
88
<meta name="keywords" content="" />
99
<meta name="robots" content="noodp" />
10-
<link rel="canonical" href="//localhost:1313/CVEX-2023-31419/" />
10+
<link rel="canonical" href="http://localhost:1313/CVEX-2023-31419/" />
1111
<meta property="og:locale" content="en" />
1212
<meta property="og:title" content="CVEX-2023-31419 :: Common Vulneravilities and Exposures with Exploits" />
1313
<meta property="og:description" content="A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service." />
1414
<meta property="og:type" content="article" />
1515
<meta property="article:published_time" content="2024-05-27 15:34:00 -0700 PDT" />
1616
<meta property="article:modified_time" content="2024-05-27 15:34:00 PDT" />
1717
<meta property="article:author" content="Common Vulneravilities and Exposures with Exploits" />
18-
<meta property="og:url" content="//localhost:1313/CVEX-2023-31419/" />
18+
<meta property="og:url" content="http://localhost:1313/CVEX-2023-31419/" />
1919
<meta property="og:site_name" content="Common Vulneravilities and Exposures with Exploits" />
2020
<meta property="og:image" content="" />
2121
<meta property="og:image:width" content="2048" />
@@ -31,7 +31,7 @@
3131
rel="stylesheet"
3232
/>
3333
<link href="../CVEX-2023-31419/" rel="alternate" type="application/rss+xml" title="Common Vulneravilities and Exposures with Exploits" />
34-
<link rel="stylesheet" href="//localhost:1313/styles.css" />
34+
<link rel="stylesheet" href="http://localhost:1313/styles.css" />
3535
</head>
3636

3737
<body>
@@ -41,7 +41,7 @@
4141
<nav class="navbar">
4242
<div class="navbar__first">
4343
<ul class="navbar__list borders">
44-
<li><a href="//localhost:1313/">Home</a></li>
44+
<li><a href="http://localhost:1313/">Home</a></li>
4545
<li><a href="../research/">Statement</a></li>
4646
<li><a href="../directoryv1/">CVEX 1.0 Directory</a></li>
4747
<li><a href="../directoryv2/">CVEX 2.0 Directory</a></li>
@@ -63,7 +63,7 @@
6363
</header>
6464
<main class="site-main"><article class="post">
6565
<header class="post-header">
66-
<h1 class="post-title"><a href="//localhost:1313/CVEX-2023-31419/">CVEX-2023-31419</a></h1>
66+
<h1 class="post-title"><a href="http://localhost:1313/CVEX-2023-31419/">CVEX-2023-31419</a></h1>
6767
<div class="post-meta">
6868
<time pubdate datetime="2024-05-27 15:34:00 PDT">
6969
Published on
@@ -86,14 +86,14 @@ <h1 class="post-title"><a href="//localhost:1313/CVEX-2023-31419/">CVEX-2023-314
8686
</main>
8787
<footer class="site-footer">
8888
<p class="buildinfo">
89-
<time datetime="2024-06-02 16:35:08 PDT">Site built on: 2024-06-02 16:35:08 PDT</time>
89+
<time datetime="2024-06-02 16:42:18 PDT">Site built on: 2024-06-02 16:42:18 PDT</time>
9090
</p>
9191
<div class="copyright">
9292
<p></p>
9393
<nav class="navbar">
9494
<ul class="navbar__list">
95-
<li><a href="//localhost:1313/posts/index.xml">RSS</a></li>
96-
<li><a href="//localhost:1313/sitemap.xml">Sitemap</a></li>
95+
<li><a href="http://localhost:1313/posts/index.xml">RSS</a></li>
96+
<li><a href="http://localhost:1313/sitemap.xml">Sitemap</a></li>
9797
</ul>
9898
</nav>
9999
</div>

‎public/categories/index.html

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -7,12 +7,12 @@
77
<meta name="description" content="" />
88
<meta name="keywords" content="" />
99
<meta name="robots" content="noodp" />
10-
<link rel="canonical" href="//localhost:1313/categories/" />
10+
<link rel="canonical" href="http://localhost:1313/categories/" />
1111
<meta property="og:locale" content="en" />
1212
<meta property="og:title" content="Categories :: Common Vulneravilities and Exposures with Exploits" />
1313
<meta property="og:description" content="" />
1414
<meta property="og:type" content="website" />
15-
<meta property="og:url" content="//localhost:1313/categories/" />
15+
<meta property="og:url" content="http://localhost:1313/categories/" />
1616
<meta property="og:site_name" content="Common Vulneravilities and Exposures with Exploits" />
1717
<meta property="og:image" content="" />
1818
<meta property="og:image:width" content="2048" />
@@ -28,7 +28,7 @@
2828
rel="stylesheet"
2929
/>
3030
<link href="../categories/" rel="alternate" type="application/rss+xml" title="Common Vulneravilities and Exposures with Exploits" />
31-
<link rel="stylesheet" href="//localhost:1313/styles.css" />
31+
<link rel="stylesheet" href="http://localhost:1313/styles.css" />
3232
</head>
3333

3434
<body>
@@ -38,7 +38,7 @@
3838
<nav class="navbar">
3939
<div class="navbar__first">
4040
<ul class="navbar__list borders">
41-
<li><a href="//localhost:1313/">Home</a></li>
41+
<li><a href="http://localhost:1313/">Home</a></li>
4242
<li><a href="../research/">Statement</a></li>
4343
<li><a href="../directoryv1/">CVEX 1.0 Directory</a></li>
4444
<li><a href="../directoryv2/">CVEX 2.0 Directory</a></li>
@@ -71,14 +71,14 @@ <h1 class="post-title">
7171
</main>
7272
<footer class="site-footer">
7373
<p class="buildinfo">
74-
<time datetime="2024-06-02 16:35:08 PDT">Site built on: 2024-06-02 16:35:08 PDT</time>
74+
<time datetime="2024-06-02 16:42:18 PDT">Site built on: 2024-06-02 16:42:18 PDT</time>
7575
</p>
7676
<div class="copyright">
7777
<p></p>
7878
<nav class="navbar">
7979
<ul class="navbar__list">
80-
<li><a href="//localhost:1313/posts/index.xml">RSS</a></li>
81-
<li><a href="//localhost:1313/sitemap.xml">Sitemap</a></li>
80+
<li><a href="http://localhost:1313/posts/index.xml">RSS</a></li>
81+
<li><a href="http://localhost:1313/sitemap.xml">Sitemap</a></li>
8282
</ul>
8383
</nav>
8484
</div>

0 commit comments

Comments
 (0)