https://github.com/trickest/cve/blob/967839a1f3dd2e43c3ca7af...
The string "No POC found" appears 34,948 times in this repository. This is concerning, given this repo has ~1000 CVEs per year, and 24 years!
The GitHub links for each CVE are very low value, unfortunately, the modal link seems to be to a "awesome CVE" or "CVE POC list" repository of no value whatsoever.
I'd really like a CVE database where you can search by software and version and see which CVEs apply to your version, their severity, and which have PoCs. Anybody else feeling this would be valuable ?
I posted it because it made it onto GitHub trending and thought it shows the potential of what could be done by aggregating cve / POC data.
I had much the same thought as you, it would be great to have this in a curated database. I feel like someone might reply that such a thing already exists :)
Snyk is pretty good for your use case (I think). It often has PoCs or links to PoCs if they’re available for vulnerabilities associated with library / framework versions. Here’s the link to the vulnerabilities for Django:
You work on such a database? Please link it for the rest of us!
So this is mapping both those things.
Anything like that around? I know it isn't trivial.
