From cfd9210a76c53436cd511a9541fea7a29896491a Mon Sep 17 00:00:00 2001 From: Rachel Date: Sun, 2 Jun 2024 16:38:45 -0700 Subject: [PATCH] fixed vulnerability --- archetypes/default.md | 1 - content/CVEX/CVEX-2017-1000499.md | 1 - content/CVEX/CVEX-2023-0286.md | 1 - content/CVEX/CVEX-2023-28155.md | 1 - content/CVEX/CVEX-2023-31419.md | 1 - content/CVEX/CVEX-2023-42282.md | 1 - content/CVEX/CVEX-2024-21508.md | 1 - content/CVEX/CVEX-XPLOR.md | 1 - content/_index.md | 2 +- content/research.md | 1 - hugo.toml | 2 +- public/404.html | 16 ++++++++-------- public/CVEX-2017-1000499/index.html | 16 ++++++++-------- public/CVEX-2023-28155/index.html | 16 ++++++++-------- public/CVEX-2023-31419/index.html | 16 ++++++++-------- public/categories/index.html | 14 +++++++------- public/cvex/index.html | 28 ++++++++++++++-------------- public/cvex/page/1/index.html | 6 +++--- public/index.html | 16 ++++++++-------- public/sitemap.xml | 28 ++++++++++++++-------------- public/tags/index.html | 14 +++++++------- 21 files changed, 87 insertions(+), 96 deletions(-) diff --git a/archetypes/default.md b/archetypes/default.md index c6f3fce..4e42334 100755 --- a/archetypes/default.md +++ b/archetypes/default.md @@ -1,5 +1,4 @@ +++ title = '{{ replace .File.ContentBaseName "-" " " | title }}' date = {{ .Date }} -draft = true +++ diff --git a/content/CVEX/CVEX-2017-1000499.md b/content/CVEX/CVEX-2017-1000499.md index 417612e..3414fec 100755 --- a/content/CVEX/CVEX-2017-1000499.md +++ b/content/CVEX/CVEX-2017-1000499.md @@ -3,7 +3,6 @@ title: CVEX-2017-1000499 description: phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc. layout: single date: 2024-05-27T15:34:00-07:00 -draft: true weight: 50 url: /CVEX-2017-1000499/ --- diff --git a/content/CVEX/CVEX-2023-0286.md b/content/CVEX/CVEX-2023-0286.md index 5fd9ae7..fbb6089 100755 --- a/content/CVEX/CVEX-2023-0286.md +++ b/content/CVEX/CVEX-2023-0286.md @@ -2,7 +2,6 @@ title: CVEX-2023-0286 description: Clones openssl version 3.0.7, containing a vulnerability that attributes the wrong variable type (ASN1_TYPE rather than ASN1_STRING) to a x509 address, allowing elevation of privilege. layout: single -draft: true weight: 50 url: /CVEX-2023-0286/ --- diff --git a/content/CVEX/CVEX-2023-28155.md b/content/CVEX/CVEX-2023-28155.md index e8484d0..ee1fe51 100755 --- a/content/CVEX/CVEX-2023-28155.md +++ b/content/CVEX/CVEX-2023-28155.md @@ -3,7 +3,6 @@ title: CVEX-2023-28155 description: The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). This vulnerability only affects products that are no longer supported by the maintainer. layout: single date: 2024-05-27T15:34:00-07:00 -draft: true weight: 50 url: /CVEX-2023-28155/ --- diff --git a/content/CVEX/CVEX-2023-31419.md b/content/CVEX/CVEX-2023-31419.md index 1a08d00..c623407 100755 --- a/content/CVEX/CVEX-2023-31419.md +++ b/content/CVEX/CVEX-2023-31419.md @@ -3,7 +3,6 @@ title: CVEX-2023-31419 description: A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. layout: single date: 2024-05-27T15:34:00-07:00 -draft: true weight: 50 url: /CVEX-2023-31419/ --- diff --git a/content/CVEX/CVEX-2023-42282.md b/content/CVEX/CVEX-2023-42282.md index f9be46a..b022570 100755 --- a/content/CVEX/CVEX-2023-42282.md +++ b/content/CVEX/CVEX-2023-42282.md @@ -3,7 +3,6 @@ title: CVEX-2023-42282 description: The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic. layout: single date: 2024-05-27T15:34:00-07:00 -draft: true weight: 50 url: /CVEX-2023-42282/ --- diff --git a/content/CVEX/CVEX-2024-21508.md b/content/CVEX/CVEX-2024-21508.md index 7d05a46..bc6b491 100755 --- a/content/CVEX/CVEX-2024-21508.md +++ b/content/CVEX/CVEX-2024-21508.md @@ -3,7 +3,6 @@ title: CVEX-2024-21508 description: CVE-2024-21508 is a vulnerability found in versions of the mysql2 <= 3.9.4. This vulnerability allows for Remote Code Execution (RCE) through the readCodeFor function, due to improper validation of the supportBigNumbers and bigNumberStrings values. It does not require any specific privileges or user interaction and can be exploited over a network. The potential impact includes high integrity and confidentiality impact, as well as high availability impact. layout: single date: 2024-05-27T15:34:00-07:00 -draft: true weight: 50 url: /CVEX-2024-21508/ --- diff --git a/content/CVEX/CVEX-XPLOR.md b/content/CVEX/CVEX-XPLOR.md index acb21c1..eada2af 100755 --- a/content/CVEX/CVEX-XPLOR.md +++ b/content/CVEX/CVEX-XPLOR.md @@ -3,7 +3,6 @@ title: CVEX-XPLOR description: A Proof of Concept Demonstration of our CVEX model/framework layout: single date: 2024-05-27T15:34:00-07:00 -draft: true weight: 50 url: /CVEX-XPLOR/ --- diff --git a/content/_index.md b/content/_index.md index d5abc01..91b5736 100755 --- a/content/_index.md +++ b/content/_index.md @@ -2,7 +2,7 @@ title: Common Vulnerability and Exposure Executables (CVEX) description: layout: single -draft: true +url: / --- ### A Collection of our Completed CVEXes This static HUGO website serves as a database of completed CVEXes. These CVEXes were created by the Team of Professors Kruegel & Vigna, with 4 undergraduate researchers affiliated with UCSB's Early Research Scholars Program 2023-2024 cohort. diff --git a/content/research.md b/content/research.md index 8048fca..b5175b8 100755 --- a/content/research.md +++ b/content/research.md @@ -2,7 +2,6 @@ title: About Xplor CVEX description: layout: single -draft: true url: /research/ --- diff --git a/hugo.toml b/hugo.toml index f667fcf..66aa84e 100755 --- a/hugo.toml +++ b/hugo.toml @@ -1,4 +1,4 @@ -baseURL = '/' +baseURL = 'http://xplor-cvex.seclab.cs.ucsb.edu/' languageCode = 'en-us' relativeURLs = true title = 'Common Vulneravilities and Exposures with Exploits' diff --git a/public/404.html b/public/404.html index 45fe895..6729566 100755 --- a/public/404.html +++ b/public/404.html @@ -7,12 +7,12 @@ - + - + @@ -28,7 +28,7 @@ rel="stylesheet" /> - + @@ -38,7 +38,7 @@