CVE-2022-41082 SCAM repositories

[fooinha]

Most, if not all repositories listed in CVE-2022-41082.json don't have real PoC, but instead, are trying to sell it for 0.5 bitcoin.

PoC-in-GitHub/2022/CVE-2022-41082.json

[oldkingcone]

yea, this bot does a good job finding PoC's but not a good job at linting out the satoshi disk scams.

[ruppde]

still happening:
https://github.com/FreakyM0ndy/CVE-2024-21410-poc

[ra1nb0rn]

Hi @motikan2010 , thanks for your work on this tool and database. We found it to be very helpful.

As others have mentioned before, some references seem to be scams and not real exploits. A recent example would be https://github.com/nomi-sec/PoC-in-GitHub/blob/master/2025/CVE-2025-55315.json#L79 . The referred to exploit, https://github.com/RootAid/CVE-2025-55315, does not contain any exploit code. Instead, it's a README with a tinyurl that resolves to a Bitcoin payment platform.

Would it be possible to catch these fake exploits and not include them into PoC-in-GitHub? Alternatively, if they should remain in the database, would it be possible to tag them somehow? I see that some data, like stargazers_count, is already included into the PoC-in-GitHub data. So adding another attribute, like payment_required, may be possible.

We'd really appreciate your help and thoughts on this issue.