Skip to content

Commit 5fe0601

Browse files
authored
Publish CVE-2025-8452 for Brother, and implement GCVE IDs for the website (#217)
* Add rob's thing, and fix up cves to display GCVEs. Signed-off-by: Tod Beardsley <[email protected]> * Fix up tables to show GCVEs correctly-ish. Signed-off-by: Tod Beardsley <[email protected]> * Clear test data, fix reserved table Signed-off-by: Tod Beardsley <[email protected]> * Fix GCVE typo Signed-off-by: Tod Beardsley <[email protected]> * Dangitall Signed-off-by: Tod Beardsley <[email protected]> * Harmonize the title Signed-off-by: Tod Beardsley <[email protected]> --------- Signed-off-by: Tod Beardsley <[email protected]>
1 parent 0450728 commit 5fe0601

File tree

2 files changed

+839
-4
lines changed

2 files changed

+839
-4
lines changed

content/cve.md

Lines changed: 83 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,9 @@
11
---
22
title: CVE
3-
aliases: ["/cve.html"]
3+
aliases:
4+
- /gcve
5+
- /cve.html
6+
- /gcve.html
47
---
58

69
# AHA! is a Research CNA!
@@ -97,12 +100,66 @@ For issues involving other parties, please see additional requirements, below. N
97100
When we publish CVEs, we will tend to use this [template], adjusted to taste.
98101

99102
<style>
100-
.nowrap-cve-cell-table td:first-child { white-space: nowrap; }
103+
.nowrap-cve td:first-child {
104+
white-space: nowrap;
105+
}
106+
</style>
107+
108+
<style>
109+
110+
.nowrap-gcve table {
111+
width: 125%;
112+
table-layout: fixed;
113+
}
114+
115+
/* CVE */
116+
.nowrap-gcve th:nth-child(1),td:nth-child(1) {
117+
width: 30%;
118+
white-space: nowrap;
119+
}
120+
121+
/* Meeting */
122+
.nowrap-gcve th:nth-child(2),td:nth-child(2) {
123+
width: 20%;
124+
}
125+
126+
/* Issue Name */
127+
.nowrap-gcve th:nth-child(3),td:nth-child(3) {
128+
width: 50%;
129+
white-space: normal;
130+
overflow-wrap: break-word;
131+
}
132+
133+
/* GCVE - man this was a stupid prank. It overflows on purpose. */
134+
.nowrap-gcve th:nth-child(4),td:nth-child(4) {
135+
width: 25%;
136+
white-space: nowrap;
137+
}
138+
139+
/* Reserved Table */
140+
141+
.nowrap-gcve-reserved table {
142+
width: 100%;
143+
table-layout: fixed;
144+
}
145+
146+
/* Meeting ID */
147+
.nowrap-gcve-reserved th:first-child,td:first-child {
148+
width: 25%;
149+
white-space: nowrap;
150+
}
151+
152+
/* GCVE ID */
153+
.nowrap-gcve-reserved th:last-child,td:last-child {
154+
width: 75%;
155+
white-space: nowrap;
156+
}
157+
101158
</style>
102159

103160
### 2023 Disclosures
104161

105-
<div class="nowrap-cve-cell-table">
162+
<div class="nowrap-cve">
106163

107164
| CVE | Meeting | Issue |
108165
| ---------------- | --------- | ------------------------------------------ |
@@ -146,11 +203,31 @@ When we publish CVEs, we will tend to use this [template], adjusted to taste.
146203
| [CVE-2025-35010] | 0x00df | **Microhard Bullet-LTE/IPn4Gii AT+MNPINGTM ArgInj** |
147204

148205
</div>
206+
<div class="nowrap-gcve">
207+
208+
### 2025 Disclosures, Now With GCVE Identifiers
149209

150-
## Reserved CVEs
210+
| CVE | Meeting | Issue | GCVE |
211+
| ---------------- | --------- | ------------------------------------------ | ---- |
212+
| [CVE-2025-8452] | 0x00e2 | **Brother Printer Serial Number Disclosure** | [GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001] |
213+
214+
</div>
215+
216+
## Reserved GCVEs
151217

152218
We've reserved some number of CVEs, but it's all quite secretive and sneaky to avoid the dreaded [RBP Goblins](https://cve.mitre.org/cve/cna/RBP_Policy_v1-0.pdf). We'll publish when we publish.
153219

220+
That said, starting in August of 2025, we've started to reserve [GCVEs](https://gcve.eu/about) for upcoming disclosures. Apparently, there are no goblins in Luxembourg!
221+
222+
<div class="nowrap-gcve-reserved">
223+
224+
| Meeting | GCVE (Reserved) |
225+
|---------|-----------------|
226+
| 0xXXXX | None yet! | GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001 |
227+
228+
</div>
229+
230+
154231
### Contact
155232

156233
Any questions about the AHA! CVE program should be directed to [[email protected]](mailto:[email protected]).
@@ -193,3 +270,5 @@ Vulnerabilities involving other parties must be either (1) presented at a regula
193270
[CVE-2025-35008]: {{< baseurl >}}cves/cve-2025-35008/
194271
[CVE-2025-35009]: {{< baseurl >}}cves/cve-2025-35009/
195272
[CVE-2025-35010]: {{< baseurl >}}cves/cve-2025-35010/
273+
[CVE-2025-8452]: {{< baseurl >}}cves/cve-2025-8452/
274+
[GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001]: {{< baseurl >}}gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001

0 commit comments

Comments
 (0)