|
1 | 1 | --- |
2 | 2 | title: CVE |
3 | | -aliases: ["/cve.html"] |
| 3 | +aliases: |
| 4 | + - /gcve |
| 5 | + - /cve.html |
| 6 | + - /gcve.html |
4 | 7 | --- |
5 | 8 |
|
6 | 9 | # AHA! is a Research CNA! |
@@ -97,12 +100,66 @@ For issues involving other parties, please see additional requirements, below. N |
97 | 100 | When we publish CVEs, we will tend to use this [template], adjusted to taste. |
98 | 101 |
|
99 | 102 | <style> |
100 | | -.nowrap-cve-cell-table td:first-child { white-space: nowrap; } |
| 103 | +.nowrap-cve td:first-child { |
| 104 | + white-space: nowrap; |
| 105 | +} |
| 106 | +</style> |
| 107 | + |
| 108 | +<style> |
| 109 | + |
| 110 | +.nowrap-gcve table { |
| 111 | + width: 125%; |
| 112 | + table-layout: fixed; |
| 113 | +} |
| 114 | + |
| 115 | +/* CVE */ |
| 116 | +.nowrap-gcve th:nth-child(1),td:nth-child(1) { |
| 117 | + width: 30%; |
| 118 | + white-space: nowrap; |
| 119 | +} |
| 120 | + |
| 121 | +/* Meeting */ |
| 122 | +.nowrap-gcve th:nth-child(2),td:nth-child(2) { |
| 123 | + width: 20%; |
| 124 | +} |
| 125 | + |
| 126 | +/* Issue Name */ |
| 127 | +.nowrap-gcve th:nth-child(3),td:nth-child(3) { |
| 128 | + width: 50%; |
| 129 | + white-space: normal; |
| 130 | + overflow-wrap: break-word; |
| 131 | +} |
| 132 | + |
| 133 | +/* GCVE - man this was a stupid prank. It overflows on purpose. */ |
| 134 | +.nowrap-gcve th:nth-child(4),td:nth-child(4) { |
| 135 | + width: 25%; |
| 136 | + white-space: nowrap; |
| 137 | +} |
| 138 | + |
| 139 | +/* Reserved Table */ |
| 140 | + |
| 141 | +.nowrap-gcve-reserved table { |
| 142 | + width: 100%; |
| 143 | + table-layout: fixed; |
| 144 | +} |
| 145 | + |
| 146 | +/* Meeting ID */ |
| 147 | +.nowrap-gcve-reserved th:first-child,td:first-child { |
| 148 | + width: 25%; |
| 149 | + white-space: nowrap; |
| 150 | +} |
| 151 | + |
| 152 | +/* GCVE ID */ |
| 153 | +.nowrap-gcve-reserved th:last-child,td:last-child { |
| 154 | + width: 75%; |
| 155 | + white-space: nowrap; |
| 156 | +} |
| 157 | + |
101 | 158 | </style> |
102 | 159 |
|
103 | 160 | ### 2023 Disclosures |
104 | 161 |
|
105 | | -<div class="nowrap-cve-cell-table"> |
| 162 | +<div class="nowrap-cve"> |
106 | 163 |
|
107 | 164 | | CVE | Meeting | Issue | |
108 | 165 | | ---------------- | --------- | ------------------------------------------ | |
@@ -146,11 +203,31 @@ When we publish CVEs, we will tend to use this [template], adjusted to taste. |
146 | 203 | | [CVE-2025-35010] | 0x00df | **Microhard Bullet-LTE/IPn4Gii AT+MNPINGTM ArgInj** | |
147 | 204 |
|
148 | 205 | </div> |
| 206 | +<div class="nowrap-gcve"> |
| 207 | + |
| 208 | +### 2025 Disclosures, Now With GCVE Identifiers |
149 | 209 |
|
150 | | -## Reserved CVEs |
| 210 | +| CVE | Meeting | Issue | GCVE | |
| 211 | +| ---------------- | --------- | ------------------------------------------ | ---- | |
| 212 | +| [CVE-2025-8452] | 0x00e2 | **Brother Printer Serial Number Disclosure** | [GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001] | |
| 213 | + |
| 214 | +</div> |
| 215 | + |
| 216 | +## Reserved GCVEs |
151 | 217 |
|
152 | 218 | We've reserved some number of CVEs, but it's all quite secretive and sneaky to avoid the dreaded [RBP Goblins](https://cve.mitre.org/cve/cna/RBP_Policy_v1-0.pdf). We'll publish when we publish. |
153 | 219 |
|
| 220 | +That said, starting in August of 2025, we've started to reserve [GCVEs](https://gcve.eu/about) for upcoming disclosures. Apparently, there are no goblins in Luxembourg! |
| 221 | + |
| 222 | +<div class="nowrap-gcve-reserved"> |
| 223 | + |
| 224 | +| Meeting | GCVE (Reserved) | |
| 225 | +|---------|-----------------| |
| 226 | +| 0xXXXX | None yet! | GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001 | |
| 227 | + |
| 228 | +</div> |
| 229 | + |
| 230 | + |
154 | 231 | ### Contact |
155 | 232 |
|
156 | 233 | Any questions about the AHA! CVE program should be directed to [[email protected]](mailto:[email protected]). |
@@ -193,3 +270,5 @@ Vulnerabilities involving other parties must be either (1) presented at a regula |
193 | 270 | [CVE-2025-35008]: {{< baseurl >}}cves/cve-2025-35008/ |
194 | 271 | [CVE-2025-35009]: {{< baseurl >}}cves/cve-2025-35009/ |
195 | 272 | [CVE-2025-35010]: {{< baseurl >}}cves/cve-2025-35010/ |
| 273 | +[CVE-2025-8452]: {{< baseurl >}}cves/cve-2025-8452/ |
| 274 | +[GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001]: {{< baseurl >}}gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001 |
0 commit comments