Exploit Discovery

Why do we need Exploit Discovery nodes?

Vulnerabilities are much less serious if there are no easy ways to exploit them. Easy-to-use exploits that are publicly available increase the risk of a vulnerability accordingly. Knowing about them can therefore be of great value, e.g. to prioritize a vulnerability.

What properties does an Exploit Discovery node have?

Property

Data type

Comment

summary

string

A short summary of the document.

disclosed_date

datetime string (ISO 8601 standard)

The date given in the source document when the exploit was disclosed.

The data type is a standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

product_vendor

string

The name of the product vendor whose products are concerned with the exploit.

references

List of URLs

The URLs which are mentioned in the original source.

publishing_company

string

The name of the organisation which has published this exploit discovery.

classification

string

In this case it is always “Exploit Discovery”

title

string

The title of the source document.

exploit_creator

string

The name of the creator of the exploit which was mentioned in the source document.

url

URL

The URL of the source document.

cves

list of strings

All mentioned CVE IDs from the source document.

solution

text

The solution given in the source document to prevent the vulnerability to be exploited.

scraped_date

datetime string (ISO 8601 standard)

The date when the source document was scraped.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

vulnerable_products

list of strings

The names of the products which were mentioned as vulnerable in the source document. E.g. ["xhibiter NFT marketplace 1.10.2"]

last_updated_date

datetime string (ISO 8601 standard)

The date when the source document was last updated.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

published_date

datetime string (ISO 8601 standard)

The date when the source document was published.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

Which nodes could an Exploit Discovery be related to?

Exploit discovery nodes can have relations to:

Published with Nuclino