Join Nostr
2026-08-23 19:07:00 UTC
in reply to

Dio9sys on Nostr: nyan CVE references, in my experience, go bad way way faster than Wikipedia links. A ...



CVE references, in my experience, go bad way way faster than Wikipedia links. A lot of the time it's a proof of concept script that gets put up somewhere just long enough to get added as a reference before taken down (either willingly or unwillingly), but I have also seen vendor advisories that are dead links due to never setting up redirects when they update their links, or the company gets acquired and deletes all their old KB articles, or the company decides that advisories should be behind a customer portal. Things like that. As da_667 said, especially for iot vulns you can see a proof of concept script put on GitHub or notion at 9 am in a Monday, bookmark it, and then the link is dead by Wednesday.

On top of that, you sometimes see reference links that get lost in translation somehow. I saw an exploit on exploitdb the other day for titools printmonitor. The script accurately showed the titools . eu url for the vendor. The nuclei template somehow turned it into ti-tools . com and then print . com for some reason.

Documentation doesn't directly make money for vendors, so it doesn't get the same level of care as other things. That makes some sense until your CTI platform is highly reliant on now-dead links.