Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
87 changes: 83 additions & 4 deletions content/cve.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,9 @@
---
title: CVE
aliases: ["/cve.html"]
aliases:
- /gcve
- /cve.html
- /gcve.html
---

# AHA! is a Research CNA!
Expand Down Expand Up @@ -97,12 +100,66 @@ For issues involving other parties, please see additional requirements, below. N
When we publish CVEs, we will tend to use this [template], adjusted to taste.

<style>
.nowrap-cve-cell-table td:first-child { white-space: nowrap; }
.nowrap-cve td:first-child {
white-space: nowrap;
}
</style>

<style>

.nowrap-gcve table {
width: 125%;
table-layout: fixed;
}

/* CVE */
.nowrap-gcve th:nth-child(1),td:nth-child(1) {
width: 30%;
white-space: nowrap;
}

/* Meeting */
.nowrap-gcve th:nth-child(2),td:nth-child(2) {
width: 20%;
}

/* Issue Name */
.nowrap-gcve th:nth-child(3),td:nth-child(3) {
width: 50%;
white-space: normal;
overflow-wrap: break-word;
}

/* GCVE - man this was a stupid prank. It overflows on purpose. */
.nowrap-gcve th:nth-child(4),td:nth-child(4) {
width: 25%;
white-space: nowrap;
}

/* Reserved Table */

.nowrap-gcve-reserved table {
width: 100%;
table-layout: fixed;
}

/* Meeting ID */
.nowrap-gcve-reserved th:first-child,td:first-child {
width: 25%;
white-space: nowrap;
}

/* GCVE ID */
.nowrap-gcve-reserved th:last-child,td:last-child {
width: 75%;
white-space: nowrap;
}

</style>

### 2023 Disclosures

<div class="nowrap-cve-cell-table">
<div class="nowrap-cve">

| CVE | Meeting | Issue |
| ---------------- | --------- | ------------------------------------------ |
Expand Down Expand Up @@ -146,11 +203,31 @@ When we publish CVEs, we will tend to use this [template], adjusted to taste.
| [CVE-2025-35010] | 0x00df | **Microhard Bullet-LTE/IPn4Gii AT+MNPINGTM ArgInj** |

</div>
<div class="nowrap-gcve">

### 2025 Disclosures, Now With GCVE Identifiers

## Reserved CVEs
| CVE | Meeting | Issue | GCVE |
| ---------------- | --------- | ------------------------------------------ | ---- |
| [CVE-2025-8452] | 0x00e2 | **Brother Printer Serial Number Disclosure** | [GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001] |

</div>

## Reserved GCVEs

We've reserved some number of CVEs, but it's all quite secretive and sneaky to avoid the dreaded [RBP Goblins](https://cve.mitre.org/cve/cna/RBP_Policy_v1-0.pdf). We'll publish when we publish.

That said, starting in August of 2025, we've started to reserve [GCVEs](https://gcve.eu/about) for upcoming disclosures. Apparently, there are no goblins in Luxembourg!

<div class="nowrap-gcve-reserved">

| Meeting | GCVE (Reserved) |
|---------|-----------------|
| 0xXXXX | None yet! | GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001 |

</div>


### Contact

Any questions about the AHA! CVE program should be directed to [[email protected]](mailto:[email protected]).
Expand Down Expand Up @@ -193,3 +270,5 @@ Vulnerabilities involving other parties must be either (1) presented at a regula
[CVE-2025-35008]: {{< baseurl >}}cves/cve-2025-35008/
[CVE-2025-35009]: {{< baseurl >}}cves/cve-2025-35009/
[CVE-2025-35010]: {{< baseurl >}}cves/cve-2025-35010/
[CVE-2025-8452]: {{< baseurl >}}cves/cve-2025-8452/
[GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001]: {{< baseurl >}}gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001
Loading