beatzaplenty/autorecon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add CVE triage and disposition artifacts for scan hits

Browse Source
This commit is contained in:
beatz174-bit
2026-04-13 10:38:15 +10:00
parent 7817122265
commit 60c1719b6d
18 changed files with 818 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
results/shifts.lan.ddnsgeek.com/scans/_cve_triage.md
+8
View File
@@ -0,0 +1,8 @@
# CVE triage sheet - shifts.lan.ddnsgeek.com
Generated (UTC): 2026-04-07T03:49:38.723646+00:00
| CVE | Affected host | Endpoint | Product/version evidence | Exploit precondition | Reproducibility | Disposition |
|---|---|---|---|---|---|---|
| CVE-2011-3192 | shifts.lan.ddnsgeek.com | `443/tcp` | ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | Target must run Apache HTTPD with byte-range handling vulnerable to the Apache Range header DoS condition. | not-reproduced | **needs-manual-test** |
| | | | | | | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |