lint - fix

Create rtl-tcp-server-detection.yaml

.new-additions

@@ -1,26 +1,54 @@
-CVE-2024-28623.yaml
 code/cves/2024/CVE-2024-47575.yaml
+code/misconfiguration/dns-axfr-enabled.yaml
 http/cves/2018/CVE-2018-6882.yaml
 http/cves/2019/CVE-2019-11507.yaml
+http/cves/2021/CVE-2021-41419.yaml
 http/cves/2021/CVE-2021-45467.yaml
 http/cves/2022/CVE-2022-26143.yaml
 http/cves/2023/CVE-2023-2437.yaml
 http/cves/2023/CVE-2023-34048.yaml
+http/cves/2024/CVE-2024-0799.yaml
+http/cves/2024/CVE-2024-0801.yaml
 http/cves/2024/CVE-2024-10146.yaml
 http/cves/2024/CVE-2024-11238.yaml
 http/cves/2024/CVE-2024-27443.yaml
+http/cves/2024/CVE-2024-28623.yaml
 http/cves/2024/CVE-2024-4180.yaml
 http/cves/2024/CVE-2024-6690.yaml
+http/cves/2025/CVE-2025-1023.yaml
+http/cves/2025/CVE-2025-1302.yaml
 http/cves/2025/CVE-2025-24354.yaml
+http/cves/2025/CVE-2025-32429.yaml
 http/cves/2025/CVE-2025-41243.yaml
+http/cves/2025/CVE-2025-51482.yaml
+http/cves/2025/CVE-2025-52472.yaml
+http/cves/2025/CVE-2025-52665.yaml
 http/cves/2025/CVE-2025-54236.yaml
 http/cves/2025/CVE-2025-54253.yaml
+http/cves/2025/CVE-2025-55190.yaml
 http/cves/2025/CVE-2025-5605.yaml
+http/cves/2025/CVE-2025-58443.yaml
 http/cves/2025/CVE-2025-59287.yaml
 http/cves/2025/CVE-2025-6174.yaml
 http/cves/2025/CVE-2025-61884.yaml
+http/cves/2025/CVE-2025-6403.yaml
+http/cves/2025/CVE-2025-64095.yaml
+http/cves/2025/CVE-2025-9985.yaml
+http/default-logins/churchcrm/churchcrm-default-login.yaml
+http/exposed-panels/churchcrm-panel.yaml
+http/exposures/backups/generic-php-files.yaml
 http/misconfiguration/aem/aem-dispatcher-bypass.yaml
 http/misconfiguration/aem/aem-querybuilder-bypass.yaml
+http/misconfiguration/installer/churchcrm-installer.yaml
+http/misconfiguration/tomcat-snoop-servlet-exposed.yaml
+http/takeovers/mailgun-takeover.yaml
+http/vulnerabilities/generic/xss-uri-reflected.yaml
+http/vulnerabilities/unifi/unifi-create-user.yaml
+http/vulnerabilities/unifi/unifi-nfc-credentials.yaml
+javascript/cves/2019/CVE-2019-6443.yaml
+javascript/detection/ntp-version-detect.yaml
 javascript/misconfiguration/mqtt-uauth-broker.yaml
 javascript/udp/misconfiguration/ntp-enum-variables-enabled.yaml
+network/cves/2020/CVE-2020-14644.yaml
 network/cves/2024/CVE-2024-23108.yaml
+network/detection/rtl-tcp-server-detect.yaml

code/cves/2014/CVE-2014-0160.yaml

@@ -11,7 +11,7 @@ info:
   metadata:
     verified: true
   classification:
-    epss-score: 0.94482
+    epss-score: 0.94477
     epss-percentile: 0.99998
   tags: cve,cve2014,openssl,heartbleed,code,kev,vkev,vuln
 
@@ -138,4 +138,4 @@ code:
       - type: dsl
         dsl:
           - "contains(response,'server is vulnerable')"
-# digest: 4a0a00473045022100869158bef50a465b37da0a4a9938b474b78d4494eb412bd5962b937d498be69102206683aa92f5ee33e197cb690c2ebb643014c78b55b68d7d6ec5ebb0e4b166e4aa:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220253c760b6f21558040bda6901fd015197a1b07bcd3071335dbc0a5fc5c97ef3b022100fd75f119e678cf94e08677f89145a463de9844d09a8c06970e23b00c321dab73:922c64590222798bb761d5b6d8e72950

code/cves/2016/CVE-2016-8735.yaml

@@ -13,8 +13,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2016-8735
-    epss-score: 0.93817
-    epss-percentile: 0.99854
+    epss-score: 0.93875
+    epss-percentile: 0.99862
     cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
   metadata:
     shodan-query: product:"tomcat"

code/cves/2019/CVE-2019-0604.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2019-0604
     cwe-id: CWE-20
     epss-score: 0.94414
-    epss-percentile: 0.99977
+    epss-percentile: 0.99976
   metadata:
     verified: true
     vendor: microsoft
@@ -154,4 +154,4 @@ code:
           - 'contains(interactsh_protocol, "dns")'
           - 'contains(interactsh_request, hex_encode(marker))'
         condition: and
-# digest: 4a0a00473045022100b5aa52708ffbb2d9f89134de40b403a3c73ff25c65b22234c2670242b173d0e8022005d624bb447165e84abef3c774bb55936da982c0305539fe4b824cc62f588db8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210082461cf3c1e6dd2447ebe24351e8beb9729daeaa31c70ffcee8b29094d53e51b022100e6f972c3ab3ec97a3380691d598c83e68e66ecb8f2eb69db912e5d3f66231e1d:922c64590222798bb761d5b6d8e72950

code/cves/2019/CVE-2019-14287.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2019-14287
     cwe-id: CWE-755
     epss-score: 0.86126
-    epss-percentile: 0.99365
+    epss-percentile: 0.99351
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -47,4 +47,4 @@ code:
           - '!contains(code_1_response, "root")'
           - 'contains(code_2_response, "root")'
         condition: and
-# digest: 4b0a00483046022100e5c2f380c478f32d10a2739ed8d7dbf1c18b63ec19e3e4fd973d2a67911203ef022100a8a3620c75626c55a4510266c9defefdca0e3477a6be1c80f30d187da41f1d0c:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220142b1e84a588dc114782c86821e49717d24b8ba55118a4080f47606c1aca3d7c02204503a2b4bcb76f99ad7088beeeb4a5af71dda20062a84b1667142ba11ea5490a:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-0646.yaml

@@ -15,8 +15,8 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2020-0646
     cwe-id: CWE-91
-    epss-score: 0.93081
-    epss-percentile: 0.99775
+    epss-score: 0.93368
+    epss-percentile: 0.99801
     cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
   metadata:
     verified: true
@@ -102,4 +102,4 @@ code:
           - 'contains(content_type, "text/xml")'
           - 'status_code == 200'
         condition: and
-# digest: 4a0a00473045022100d9da65c70c4ca8f260836e5b774edd12d41561d03f9f142e9d6c546e26ded31d0220345109b405df5bd0aced26c9d9814a4b4d76ff1eab24a6a68cf57d030df04cbc:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009d9bdc3780607102c88f8e2c24b7c11abaa1db7626959bea30844b3becad4398022100f8b42cfb37bdec09e2e983826a04f66fa50937cebe0b05d8b98cea1b558a21a9:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-13935.yaml

@@ -10,8 +10,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
     cvss-score: 7.5
     cve-id: CVE-2020-13935
-    epss-score: 0.9169
-    epss-percentile: 0.9967
+    epss-score: 0.92155
+    epss-percentile: 0.99695
   reference:
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html

code/cves/2021/CVE-2021-3156.yaml

@@ -17,8 +17,8 @@ info:
     cvss-score: 7.8
     cve-id: CVE-2021-3156
     cwe-id: CWE-193
-    epss-score: 0.92019
-    epss-percentile: 0.99691
+    epss-score: 0.92188
+    epss-percentile: 0.99697
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -40,4 +40,4 @@ code:
           - "malloc(): memory corruption"
           - "Aborted (core dumped)"
         condition: and
-# digest: 490a0046304402206a26df5d59703d43d60c65f819fec8a18f01c6f9601fc631dbb0d4dd5fac11ab022053e81d13af27aa8eb25d64d7a341eb753032c560e24c38e38dd6c17ac8136f77:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f71982b68a0941b58c28d66c71e85126c4c968ced5ce8646155128b001dda849022100e1dfe8f43d26c8c72bbdedf39a5ca890a46771c1b941308525a570abd452244c:922c64590222798bb761d5b6d8e72950

code/cves/2022/CVE-2022-42475.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2022-42475
     cwe-id: CWE-197,CWE-787
     epss-score: 0.9394
-    epss-percentile: 0.99874
+    epss-percentile: 0.99872
     cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -197,4 +197,4 @@ code:
       - type: word
         words:
           - "Target appears to be VULNERABLE"
-# digest: 490a00463044022015db877d3ba82455b9b6c4790a21a0a1fbf15298a5d058b0e1f2dd55ba2e294002200b6cddf0aa7864e01c29b8d6e4b0ebc0ec1701baa343fbc66f73a3b94bdb1b22:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e913085eb3784826410469b3e2477d893db8b66741034bd3bf2b96c432ae5fa402207e41770b1a18ba058d8288ed36abea4b314f410b9b7a540c6db34418cddda5e7:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2640.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-2640
     cwe-id: CWE-863
     epss-score: 0.92037
-    epss-percentile: 0.99694
+    epss-percentile: 0.99684
     cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ code:
           - '!contains(code_1_response, "(root)")'
           - 'contains(code_2_response, "(root)")'
         condition: and
-# digest: 4b0a00483046022100bcc9575b543f193888153580cc4a3c78e38b847310061fe6a8a0047f498fa06f022100a7f8a67bb888081e9ef7ccfe95153b86a02baa95e2a1f024a02dd5bec98f82e7:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220042744883085da6be3360bc592800813b59a32ca3cca5b357679359e6253ba240220221969866987b2d8a715ea12875a3378b4d34a00642ee1940414fb062dbb7ccc:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-2986
     epss-score: 0.9117
-    epss-percentile: 0.99639
+    epss-percentile: 0.99625
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -626,4 +626,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4b0a00483046022100f3b4f1acb6f511b36bad03fee5f72730151dfecb5fa4998a3c79a8760624d49f022100e87284a26b9fb2e8164a6be1824cdb5e1e62e862e06d41d5e35ad20856daf16b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e6eab6f55170064a588506282efa987cb311cb8e2f791c1066d1d0d643b71b76022068fc331e222d13fd82f83dea7d76fa1aeb431eea1a0f9f415a3eb6917ef1e6a9:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-49105.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2023-49105
     cwe-id: CWE-287
     epss-score: 0.86244
-    epss-percentile: 0.99369
+    epss-percentile: 0.99356
     cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -90,4 +90,4 @@ http:
       - type: dsl
         dsl:
           - '"Username => "+ username'
-# digest: 4a0a0047304502201308cb0bd5dafab9c7d3a5912da33ed59f853d78b31a513e9c516cb017d552b3022100fbdbd05b062321a694f01a44d1d647b38aab9626c0784ebda210bf84c1b963b6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cf2286e2b9e4ad6a4e7a1300d561d89e3de6c89744d3b4d2e1fb5fb3a21e657602201a70a5fb1b750c545c39bb3c3cdb175a2d69af7540d635a926f13d4e1fbab54b:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -17,8 +17,8 @@ info:
     cvss-score: 7.8
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
-    epss-score: 0.78361
-    epss-percentile: 0.98987
+    epss-score: 0.78409
+    epss-percentile: 0.98978
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -39,4 +39,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 490a0046304402203fa2dc626ae41841960a2f35bda69ffec62f7fb357ef82165ad78955c39d6c0c022009c0ee1587f1d287fa07440f3e5052b5fe286e7572d0e53fa4fcd46d886e4e86:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009b5dc3be045aba05dec88023cb7dddc24188b00eec844cfa3909377e9d6317eb022100e0078981f9b353e41cf8e5e46fe4c1e421ddbbb0038b65ead953e45bb4b81381:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
     epss-score: 0.25078
-    epss-percentile: 0.95965
+    epss-percentile: 0.95931
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -39,4 +39,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 490a0046304402201039bbf1fa7cb2a2b2ce6c2582948ae7e8c238b5239a25149b526559b6ec9424022068927783003349aa159613a99bad7c0a7c2c161817f7ba2f069c26866ac5fabb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220707af88658762f3e5a34c0b6adc5c8761db5b3a68d793de3ce1583c5e2334dbc022100aa3e773dd28b5a80f46c9e117e3cff530f72279898a97cf61d0f542ddad6451d:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -14,7 +14,7 @@ info:
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
     epss-score: 0.69676
-    epss-percentile: 0.986
+    epss-percentile: 0.98585
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
     verified: true
@@ -54,4 +54,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 4a0a0047304502200f329cc1b4f84d497a47fdd2af1ee34464eb4b4d6b8ff8131bce0735ef231560022100f6a3f1447ecf66ac35bc0f88bd1f1c6d2ac1e0c3162a63fef2922037c6708c28:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008b5ac203a17c5ac2495444e747470435d1f73ab86119dbac864498facc0299ba0220706f90afe3ebad35664001b827141b2c9308fbf3c09d879a0fe9232a2602ff14:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-12356.yaml

@@ -14,7 +14,7 @@ info:
     cve-id: CVE-2024-12356
     cwe-id: CWE-77
     epss-score: 0.93687
-    epss-percentile: 0.99836
+    epss-percentile: 0.99833
     cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
   metadata:
     vendor: beyondtrust
@@ -37,4 +37,4 @@ code:
         words:
           - "0 success"
           - "1 try again later"
-# digest: 4a0a00473045022100eb9365a6aeb991949bd26b0af2d1a98476595c7e5f1c0f4964efe751edf63b3502200474f65c9c1963fb4d288bf407f8bfae3e8c7e5f86b4631e111e5d31a174db6c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bcb70958bd42473e557963672c2efd5866879d3fd84e491b51e19b39e53ac0b6022100cec4f199e93652df8d28806d7fa5ebf4e7eee2e68522774ed5ad2fda01bf9d05:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-22120.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 9.1
     cve-id: CVE-2024-22120
     cwe-id: CWE-20
-    epss-score: 0.93506
-    epss-percentile: 0.99817
+    epss-score: 0.93259
+    epss-percentile: 0.99793
   metadata:
     max-request: 1
     vendor: zabbix
@@ -71,4 +71,4 @@ code:
       - type: word
         words:
           - "Vulnerable to CVE-2024-22120"
-# digest: 4b0a004830460221009847f62dd1b32d34c8a63be1a33cee98f01ba64729b22a34daecb7ee27d1db51022100f026f82d40364e4ab2390b461051a6967279f313598e1de74413f7173e4e6627:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c29b03d6ec221f62966546d687c9c8c86e41f5d46f37e8896f3473a10d8b08b3022100867de1666d89e4ae22d98a7a0fd65b75a1716a312aaec979b2fabcd6b2ae1cf9:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-3094.yaml

@@ -17,8 +17,8 @@ info:
     cvss-score: 10
     cve-id: CVE-2024-3094
     cwe-id: CWE-506
-    epss-score: 0.86006
-    epss-percentile: 0.99359
+    epss-score: 0.85778
+    epss-percentile: 0.99331
     cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022100b923b9dee06216de4336f4c64bbcc32b77233702859804b102c5130b0c8214ce0220294a8d797b81883111e1bd9de2ab5423668cec7d06a6a679fa2e0047ef760fff:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210092d5ac481a41f2bce742d30e9a53e6cfcce47b99b02f4291b382802664d6f8c80220616412b2e3eab8e90f86485850f7ca389e9ac0b0f1a890e827325eb9677048d9:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-4340.yaml

@@ -10,8 +10,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
     cvss-score: 7.5
     cve-id: CVE-2024-4340
-    epss-score: 0.14988
-    epss-percentile: 0.94304
+    epss-score: 0.16207
+    epss-percentile: 0.94529
   reference:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
   tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -29,4 +29,4 @@ code:
         part: stderr
         words:
           - "RecursionError: maximum recursion depth exceeded"
-# digest: 4a0a0047304502200d35eeb33d4692bc8493954555160a2c5b0f2487b94306a65f19bb55122056b8022100e2e5255c01b8d7abb8a10850368a3566390505eb786b49211f0322520e092279:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220549dc564dc5471bdf1dc63334bf0ff6ef0f2c050664a3b06189b22683d31875f02204d49ed2a7bd8a9158503467d45b113fb0e8b20c98a09747235c176e23a8ef696:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
-    epss-score: 0.39537
-    epss-percentile: 0.97143
+    epss-score: 0.39163
+    epss-percentile: 0.97099
   metadata:
     verified: true
     shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a0047304502210090ae551f28f4bab3fb780276921411eb772cd0325416fefe2741531ddb27ec4c022063ffaf911ab320457d40ed1e116bd6aa0a701fc6c7d29518afac54ccf5d99d25:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205e030f7d186f18e2ddf5cd9281a48cb0af2d6ac63498b37cb4a9ce899f84a59e022005a03e6ea351d60b08436740f6db2daf9e303d0323c278f564ab1230e9a678f2:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-47575.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-47575
     cwe-id: CWE-306
     epss-score: 0.93874
-    epss-percentile: 0.99864
+    epss-percentile: 0.99861
     cpe: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*
   tags: cve,cve2024,fortinet,fortimanager,kev,rce,vkev
 
@@ -145,4 +145,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022053c9492152b5a242f33bdd2baa60c17e38d244f3e15b248dfebe103d3537da4e022100ec074c3bb81adc25c2b490f98b04f93accb4c64b8d3d669e43a9619acda027b2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ec14e45bc6bc3f9a31bebf7c7e91cff5df5cb9159169aa0226e3d067fc01f1e2022100c71d9207b4a6d950032c7216f57a8e2347823a4f8aad944aa50de2e9b4fd6978:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -17,8 +17,8 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
-    epss-score: 0.7976
-    epss-percentile: 0.99055
+    epss-score: 0.84379
+    epss-percentile: 0.99271
   metadata:
     verified: true
     max-request: 2
@@ -193,4 +193,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 490a00463044022052e5b775578a7fca6cb990ade7233643fd8f7e44495eaf56f7f62661d3a861be02207bfbf384f7a79e0e5e5e7f192577929a0213e8ccca02d072bbd5e29ebc673ef5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c33a7e4170efd830fed04dc81dff116c0d6de6a7a04013690afafee5aa4dd7eb022016a273dda70ccb4e18af5f17d14d297c9dbcfbe9981b3789e6ea9b4eafeab7a9:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-56331.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-56331
     cwe-id: CWE-22
     epss-score: 0.41406
-    epss-percentile: 0.9726
+    epss-percentile: 0.97235
   metadata:
     verified: true
     shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
       - type: word
         words:
           - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 490a00463044022006b8b326484a5c81f8da2d54c73235eb9ed0dd8be1c1359ad68656c8481c96e902200357b0465882db9a1a82adf437bddf8529ce4e44ee98cf6b6ee94caec37db85f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204c5b24fda7a91e193ed794e32f38673f924ed17e393ebcb8e6e0e9351a6cde85022100860aa6411a18b6baec11fa99823a8fb2c3ed558adab797c067b1fe8ff009577e:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -11,7 +11,7 @@ info:
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
     epss-score: 0.36115
-    epss-percentile: 0.96929
+    epss-percentile: 0.96904
   metadata:
     verified: true
     shodan-query: title:"GitHub Enterprise"
@@ -188,4 +188,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 4b0a00483046022100f582435da247d372a892f0cadd60d50b85839655f298e9055a456e808cd3a0a8022100944402534e1ccefe8d2074a1d23814f9e71e5342a703273805c71d0cd9b0916c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207d41ce6b6af9c3b0133e15c33183fdce00ba09f874633dbea4f3cb29234c64d8022004ad19707190bb70f9ff118286b04f22a704b252594a598f0b96850afa09a55d:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-22457.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-22457
     cwe-id: CWE-121,CWE-787
     epss-score: 0.76863
-    epss-percentile: 0.98911
+    epss-percentile: 0.98898
     cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
   metadata:
     vendor: ivanti
@@ -128,4 +128,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 4a0a00473045022100e877d67bb07b4213ccda0e1423a15e427d1ec40e182ef220c977d4e2d9b6118d022006d4fbdc5d89498ed8a4b871af115c9f8589610510a89759be2ac81c325f0828:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203f75dbfaad4ad6b004f89a6abe6b8ff05ec8c740385c91234058adab770eb6ea022100d31419b68e13b98dbfdede575d41d57e7b949ade2001446d470aa73c3a7f4bb4:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 9.3
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
-    epss-score: 0.17932
-    epss-percentile: 0.94912
+    epss-score: 0.17247
+    epss-percentile: 0.94744
   metadata:
     verified: true
     vendor: gitlab
@@ -78,4 +78,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 490a0046304402202649fbc90d6d9d23a36674a3480a47f79af9343f4f33a3cf741342b9221df49702203e1c004761febb037410a5829551d53cd1986424e3a363349803b78e171fca4c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202d4a3417e1248c02987e65aaa3859a0691580be5c5e6841ef09e1546d4f6ce770220709dc70e279c9f4aa652e8391870e72f9f0ed9badcc811469e6425b2882cd484:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32433.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 10
     cve-id: CVE-2025-32433
     cwe-id: CWE-306
-    epss-score: 0.64931
-    epss-percentile: 0.98398
+    epss-score: 0.53778
+    epss-percentile: 0.97866
   metadata:
     verified: true
     max-request: 1
@@ -172,4 +172,4 @@ code:
         dsl:
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 4b0a00483046022100d6f79e25ffb9d10c2cc4ca51de5e52e2979aece6deba0f62caa897ef235390f9022100c243d88faee4e2311890c46f013beb7b1f62cd37f568ca84fd94941711b92095:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a836215ff57c937a4e67f2d0356c07465020153450ad01d5d8fb3ee70ea58c7d022074f5c22f26df10c73b3c23b69fccd923b643dd8de88c214cfed73f65fc67f2a5:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-54309.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-54309
     epss-score: 0.56973
-    epss-percentile: 0.98026
+    epss-percentile: 0.98016
     cwe-id: CWE-287,CWE-362
     cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*
   metadata:
@@ -200,4 +200,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 490a0046304402205addfd2fcc9bddf251a3606b8baf2b77dfe21e359a260aff0770350ff7804b1302204356334dc2910339645859d33ae0d55886992447645a3d727ecc2162aeab7caf:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009e096641682d45560e5ef9e35a24ef1d999c1237e1c7300af90e97c940eda5a1022100af9eb03cc7d7732a901c609bef6ca34d6632f0827751b77c4338a9f26eee5e2c:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -16,7 +16,7 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
     epss-score: 0.28615
-    epss-percentile: 0.96336
+    epss-percentile: 0.96307
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 4a0a00473045022100959bb469c6cbcecc35328cc23186e426485767b243807b50454ab6139c6f7de702204ad4389476662d2a781b929111d39bfd640cbc5221ec2a24100063531de9da90:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204e15f75d847313a94159ce612853e8d43c07acd7907aaa6116166434ed694ca6022100b51bf8064525483171bb588675b324c60cbe3f8a3987f86db575d2baeaa20225:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-9242.yaml

@@ -18,8 +18,8 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-9242
     cwe-id: CWE-787,CWE-362
-    epss-score: 0.04058
-    epss-percentile: 0.88082
+    epss-score: 0.055
+    epss-percentile: 0.89772
     cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -552,4 +552,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022100c6ba53b550a6681830a09cdd2c39fcee1f49f9ff848666fc142ee5d8d7af19b702205d68ad85902625ec80dcabb54b10cc31582d4586986b2d213c4aa5d31900662e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dcff8d2117d05c7f29608fb37b2e2c96880d295642afaa19a7b9fd87fbbe7189022015423b37441c71e3f9b33c8cd1635fd58e97b63018684175eecad56ee9676538:922c64590222798bb761d5b6d8e72950

code/misconfiguration/dns-axfr-enabled.yaml

@@ -0,0 +1,34 @@
+id: dns-axfr-enabled
+
+info:
+  name: DNS Zone Transfer Check (AXFR)
+  author: matejsmycka
+  severity: medium
+  description: |
+    Checks if particular domain can be queried via DNS Zone Transfer (AXFR). An open zone transfer can disclose all DNS records for a zone, leading to information leakage.
+  reference:
+    - https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html
+  metadata:
+    verified: true
+    shodan-query: port:53
+  tags: dns,tcp,axfr,code
+
+code:
+  - engine:
+      - bash
+    source: |
+      domain=$Host
+      dig axfr $domain @$(dig $domain ns +short | head -n1)
+
+    matchers:
+      - type: regex
+        regex:
+          - 'XFR size: [1-9][0-9]* records?'
+        condition: and
+
+    extractors:
+      - type: regex
+        regex:
+          - 'SOA\s+([^\s]+)'
+        group: 1
+# digest: 4a0a004730450220035a0e8c35c138a76af730a8b2beba052efc136bfedf13160598e9d360c3853c0221008a598f55b7c84f2ac2dbc10e1831976297c3b5cfec55eaa95ddfde27e0fd62cc:922c64590222798bb761d5b6d8e72950

cves.json

@@ -1615,6 +1615,7 @@
 {"ID":"CVE-2021-41293","Info":{"Name":"ECOA Building Automation System - Arbitrary File Retrieval","Severity":"high","Description":"The ECOA BAS controller suffers from an arbitrary file disclosure vulnerability. Using the 'fname' POST parameter in viewlog.jsp, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-41293.yaml"}
 {"ID":"CVE-2021-41349","Info":{"Name":"Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting","Severity":"medium","Description":"Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305.","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2021/CVE-2021-41349.yaml"}
 {"ID":"CVE-2021-41381","Info":{"Name":"Payara Micro Community 5.2021.6 Directory Traversal","Severity":"high","Description":"Payara Micro Community 5.2021.6 and below contains a directory traversal vulnerability.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-41381.yaml"}
+{"ID":"CVE-2021-41419","Info":{"Name":"QVIS NVR/DVR - Remote Code Execution","Severity":"critical","Description":"QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-41419.yaml"}
 {"ID":"CVE-2021-41432","Info":{"Name":"FlatPress 1.2.1 - Stored Cross-Site Scripting","Severity":"medium","Description":"FlatPress 1.2.1 contains a stored cross-site scripting vulnerability that allows for arbitrary execution of JavaScript commands through blog content. An attacker can possibly steal cookie-based authentication credentials and launch other attacks.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2021/CVE-2021-41432.yaml"}
 {"ID":"CVE-2021-41460","Info":{"Name":"ECShop 4.1.0 - SQL Injection","Severity":"high","Description":"ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-41460.yaml"}
 {"ID":"CVE-2021-41467","Info":{"Name":"JustWriting - Cross-Site Scripting","Severity":"medium","Description":"A cross-site scripting vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-41467.yaml"}
@@ -2759,6 +2760,8 @@
 {"ID":"CVE-2024-0593","Info":{"Name":"WordPress Simple Job Board - Unauthorized Data Access","Severity":"medium","Description":"The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetch_quick_job() function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2024/CVE-2024-0593.yaml"}
 {"ID":"CVE-2024-0692","Info":{"Name":"SolarWinds Security Event Manager - Unauthenticated RCE","Severity":"high","Description":"The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-0692.yaml"}
 {"ID":"CVE-2024-0713","Info":{"Name":"Monitorr Services Configuration - Arbitrary File Upload","Severity":"high","Description":"A vulnerability was found in Monitorr 1.7.6m. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assets/php/upload.php of the component Services Configuration. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251539. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-0713.yaml"}
+{"ID":"CVE-2024-0799","Info":{"Name":"Arcserve Unified Data Protection - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-0799.yaml"}
+{"ID":"CVE-2024-0801","Info":{"Name":"Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll","Severity":"high","Description":"A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-0801.yaml"}
 {"ID":"CVE-2024-0881","Info":{"Name":"Combo Blocks \u003c 2.2.76 - Improper Access Control","Severity":"medium","Description":"The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-0881.yaml"}
 {"ID":"CVE-2024-0939","Info":{"Name":"Smart S210 Management Platform - Arbitary File Upload","Severity":"critical","Description":"A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-0939.yaml"}
 {"ID":"CVE-2024-0986","Info":{"Name":"Issabel Authenticated - Remote Code Execution","Severity":"medium","Description":"A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252251. NOTE- The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2024/CVE-2024-0986.yaml"}
@@ -2883,6 +2886,7 @@
 {"ID":"CVE-2024-28000","Info":{"Name":"WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin","Severity":"critical","Description":"Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-28000.yaml"}
 {"ID":"CVE-2024-28255","Info":{"Name":"OpenMetadata - Authentication Bypass","Severity":"critical","Description":"OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `JwtFilter` handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request's path is checked against this list. When the request's path contains any of the excluded endpoints the filter returns without validating the JWT. Unfortunately, an attacker may use Path Parameters to make any path contain any arbitrary strings. For example, a request to `GET /api/v1;v1%2fusers%2flogin/events/subscriptions/validation/condition/111` will match the excluded endpoint condition and therefore will be processed with no JWT validation allowing an attacker to bypass the authentication mechanism and reach any arbitrary endpoint, including the ones listed above that lead to arbitrary SpEL expression injection. This bypass will not work when the endpoint uses the `SecurityContext.getUserPrincipal()` since it will return `null` and will throw an NPE. This issue may lead to authentication bypass and has been addressed in version 1.2.4. Users are advised to upgrade. There are no known workarounds for this vulnerability. This issue is also tracked as `GHSL-2023-237`.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-28255.yaml"}
 {"ID":"CVE-2024-28397","Info":{"Name":"pyload-ng js2py - Remote Code Execution","Severity":"medium","Description":"An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2024/CVE-2024-28397.yaml"}
+{"ID":"CVE-2024-28623","Info":{"Name":"RiteCMS 3.0.0 - Cross-site Scripting","Severity":"medium","Description":"RiteCMS v3.0.0 contains a reflected XSS caused by unsanitized input in the main_menu/edit_section component, letting attackers execute arbitrary scripts in the context of the victim's browser.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-28623.yaml"}
 {"ID":"CVE-2024-28734","Info":{"Name":"Coda v.2024Q1 - Cross-Site Scripting","Severity":"medium","Description":"Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker to escalate privileges via a crafted script to the cols parameter.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-28734.yaml"}
 {"ID":"CVE-2024-2876","Info":{"Name":"Wordpress Email Subscribers by Icegram Express - SQL Injection","Severity":"critical","Description":"The Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress \u0026 WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-2876.yaml"}
 {"ID":"CVE-2024-2879","Info":{"Name":"WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection","Severity":"high","Description":"The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-2879.yaml"}
@@ -3233,12 +3237,14 @@
 {"ID":"CVE-2025-0674","Info":{"Name":"Elber ESE DVB-S/S2 - Authentication Bypass","Severity":"critical","Description":"Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-0674.yaml"}
 {"ID":"CVE-2025-0868","Info":{"Name":"DocsGPT - Unauthenticated Remote Code Execution","Severity":"critical","Description":"A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.This issue affects DocsGPT- from 0.8.1 through 0.12.0.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-0868.yaml"}
 {"ID":"CVE-2025-10035","Info":{"Name":"GoAnywhere - Authentication Bypass","Severity":"critical","Description":"Fortra GoAnywhere MFT contains an insecure deserialization vulnerability in the License Servlet caused by deserializing attacker-controlled objects with a valid forged license response signature, letting attackers perform command injection, exploit requires valid forged license signature.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-10035.yaml"}
+{"ID":"CVE-2025-1023","Info":{"Name":"ChurchCRM - SQL Injection","Severity":"critical","Description":"A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1023.yaml"}
 {"ID":"CVE-2025-1025","Info":{"Name":"Cockpit \u003c 2.4.1 - Arbitrary File Upload","Severity":"high","Description":"Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extensions to bypass the upload filter.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1025.yaml"}
 {"ID":"CVE-2025-1035","Info":{"Name":"KLog Server - Path Traversal","Severity":"medium","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls.This issue affects KLog Server: before 3.1.1.\n","Classification":{"CVSSScore":"5.7"}},"file_path":"http/cves/2025/CVE-2025-1035.yaml"}
 {"ID":"CVE-2025-1097","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1097.yaml"}
 {"ID":"CVE-2025-1098","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1098.yaml"}
 {"ID":"CVE-2025-11371","Info":{"Name":"Gladinet CentreStack \u0026 TrioFox - Local File Inclusion","Severity":"medium","Description":"In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560\n","Classification":{"CVSSScore":"6.2"}},"file_path":"http/cves/2025/CVE-2025-11371.yaml"}
 {"ID":"CVE-2025-11750","Info":{"Name":"Dify - User Enumeration via \"Account not found\" Message","Severity":"medium","Description":"A user enumeration vulnerability exists in langgenius/dify, where the login API leaks information about whether a user account exists or not. When an invalid/non-existent email is used during login, the API returns a distinct error message such as \"account_not_found\" or \"Account not found.\", allowing attackers to identify valid accounts.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-11750.yaml"}
+{"ID":"CVE-2025-1302","Info":{"Name":"JSONPath Plus \u003c 10.3.0 - Remote Code Execution","Severity":"critical","Description":"Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for [CVE-2024-21534]\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1302.yaml"}
 {"ID":"CVE-2025-1323","Info":{"Name":"WP-Recall – Plugin \u003c= 16.26.10 - Unauthenticated SQL Injection","Severity":"high","Description":"The WP-Recall – Registration, Profile, Commerce \u0026 More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1323.yaml"}
 {"ID":"CVE-2025-1562","Info":{"Name":"Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control","Severity":"critical","Description":"The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1562.yaml"}
 {"ID":"CVE-2025-1595","Info":{"Name":"EasyCVR \u003c=2.1.2 - Information Disclosure","Severity":"medium","Description":"A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1595.yaml"}
@@ -3315,6 +3321,7 @@
 {"ID":"CVE-2025-31324","Info":{"Name":"SAP NetWeaver Visual Composer Metadata Uploader - Deserialization","Severity":"critical","Description":"SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-31324.yaml"}
 {"ID":"CVE-2025-31489","Info":{"Name":"MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads","Severity":"high","Description":"MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on the bucket. Prior knowledge of access-key, and bucket name this user might have access\nto - and an access-key with a WRITE permissions is necessary. However with relevant information in place, uploading random objects to buckets is trivial and easy via curl.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-31489.yaml"}
 {"ID":"CVE-2025-32101","Info":{"Name":"UNA CMS \u003c= 14.0.0-RC4 - PHP Object Injection","Severity":"critical","Description":"The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode() method. When calling this method, user input passed through the \"profile_id\" POST parameter is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to inject arbitrary PHP objects into the application scope, allowing them to perform a variety of attacks, such as writing and executing arbitrary PHP code.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-32101.yaml"}
+{"ID":"CVE-2025-32429","Info":{"Name":"XWiki Platform - SQL Injection","Severity":"critical","Description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-32429.yaml"}
 {"ID":"CVE-2025-32430","Info":{"Name":"XWiki Platform - Cross-Site Scripting","Severity":"medium","Description":"XWiki Platform versions \u003e= 4.2-milestone-3 and \u003c 16.4.8, \u003e= 16.5.0-rc-1 and \u003c 16.10.6, and \u003e= 17.0.0-rc-1 and \u003c 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-32430.yaml"}
 {"ID":"CVE-2025-32432","Info":{"Name":"CraftCMS - Remote Code Execution","Severity":"critical","Description":"Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-32432.yaml"}
 {"ID":"CVE-2025-3248","Info":{"Name":"Langflow AI - Unauthenticated Remote Code Execution","Severity":"critical","Description":"Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-3248.yaml"}
@@ -3383,10 +3390,13 @@
 {"ID":"CVE-2025-49596","Info":{"Name":"MCP Inspector \u003c 0.14.0 UnauthenticatedRemote Code Execution","Severity":"critical","Description":"The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-49596.yaml"}
 {"ID":"CVE-2025-49825","Info":{"Name":"Teleport - Authentication Bypass","Severity":"critical","Description":"Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-49825.yaml"}
 {"ID":"CVE-2025-5086","Info":{"Name":"Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization","Severity":"critical","Description":"A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.\n","Classification":{"CVSSScore":"9"}},"file_path":"http/cves/2025/CVE-2025-5086.yaml"}
+{"ID":"CVE-2025-51482","Info":{"Name":"Letta Letta 0.7.12 - Remote Code Execution","Severity":"high","Description":"Letta 0.7.12 is vulnerable to remote code execution via POST /v1/tools/run in letta.server.rest_api.routers.v1.tools.run_tool_from_source, allowing attackers to execute arbitrary Python and OS commands via crafted tool source code.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-51482.yaml"}
 {"ID":"CVE-2025-51501","Info":{"Name":"Microweber CMS2.0 - Cross-Site Scripting","Severity":"medium","Description":"Reflected Cross-Site Scripting (XSS) in the `id` parameter of the `live_edit.module_settings` API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-51501.yaml"}
 {"ID":"CVE-2025-51502","Info":{"Name":"Microweber CMS 2.0 - Reflected XSS in Admin Page Creation","Severity":"medium","Description":"Reflected Cross-Site Scripting (XSS) exists in Microweber CMS 2.0 through the layout parameter on the /admin/page/create page. It allows arbitrary JavaScript to execute in the context of authenticated admin users.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-51502.yaml"}
 {"ID":"CVE-2025-52207","Info":{"Name":"MikoPBX - Unrestricted File Upload","Severity":"critical","Description":"MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-52207.yaml"}
+{"ID":"CVE-2025-52472","Info":{"Name":"XWiki - HQL Injection","Severity":"high","Description":"XWiki is vulnerable to Hibernate Query Language (HQL) injection in the wiki and space search REST API starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0. The vulnerability allows attackers to inject malicious HQL queries through the orderField parameter, potentially leading to data extraction, authentication bypass, or remote code execution depending on database backend and configuration.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-52472.yaml"}
 {"ID":"CVE-2025-52488","Info":{"Name":"DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure","Severity":"high","Description":"DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-52488.yaml"}
+{"ID":"CVE-2025-52665","Info":{"Name":"UniFi Access - Broken Access Control","Severity":"critical","Description":"UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-52665.yaml"}
 {"ID":"CVE-2025-5287","Info":{"Name":"Likes and Dislikes Plugin \u003c= 1.0.0 - Unauthenticated SQL Injection","Severity":"high","Description":"The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-5287.yaml"}
 {"ID":"CVE-2025-53118","Info":{"Name":"Securden Unified PAM - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-53118.yaml"}
 {"ID":"CVE-2025-53364","Info":{"Name":"Parse Server - GraphQL Schema Information Disclosure","Severity":"medium","Description":"The Parse Server GraphQL API previously allowed public access to the GraphQL schema without requiring a session token or the master key. While schema introspection reveals only metadata and not actual data, this metadata can still expand the potential attack surface.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-53364.yaml"}
@@ -3406,6 +3416,7 @@
 {"ID":"CVE-2025-54782","Info":{"Name":"NestJS DevTools Integration - Remote Code Execution","Severity":"critical","Description":"Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API endpoint that uses an unsafe JavaScript sandbox (safe-eval-like implementation). Due to improper sandboxing and missing cross-origin protections, any malicious website visited by a developer can execute arbitrary code on their local machine. The package adds HTTP endpoints to a locally running NestJS development server. One of these endpoints, /inspector/graph/interact, accepts JSON input containing a code field and executes the provided code in a Node.js vm.runInNewContext sandbox.\n","Classification":{"CVSSScore":"9.4"}},"file_path":"http/cves/2025/CVE-2025-54782.yaml"}
 {"ID":"CVE-2025-55161","Info":{"Name":"Stirling-PDF SSRF via Markdown","Severity":"high","Description":"Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization which can be bypassed and result in SSRF.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-55161.yaml"}
 {"ID":"CVE-2025-55169","Info":{"Name":"WeGIA - Directory Traversal","Severity":"critical","Description":"WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/download_remessa.php endpoint. This vulnerability could allow an attacker to gain unauthorized access to local files in the server and sensitive information stored in config.php. config.php contains information that could allow direct access to the database. This issue has been patched in version 3.4.8.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-55169.yaml"}
+{"ID":"CVE-2025-55190","Info":{"Name":"ArgoCD Project API Token Repository Credentials Exposure","Severity":"critical","Description":"Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials\n(usernames, passwords) through the project details API endpoint, even when the token only has standard\napplication management permissions and no explicit access to secrets. This vulnerability affects versions\nv2.2.0-rc1 and later, including 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12,\nand 3.1.0-rc1 through 3.1.1. Any token with project get permissions is vulnerable, including global permissions.\nNote: This template requires valid ArgoCD credentials (username/password) to test the vulnerability.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-55190.yaml"}
 {"ID":"CVE-2025-5569","Info":{"Name":"IdeaCMS \u003c= 1.7 - SQL Injection","Severity":"critical","Description":"IdeaCMS up to 1.7 is vulnerable to SQL injection via the field parameter in article and product query interfaces. This template uses a time-based payload to safely detect the vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-5569.yaml"}
 {"ID":"CVE-2025-55747","Info":{"Name":"XWiki Platform - Information Disclosure","Severity":"high","Description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-55747.yaml"}
 {"ID":"CVE-2025-55748","Info":{"Name":"XWiki Platform - Path Traversal","Severity":"high","Description":"XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-55748.yaml"}
@@ -3419,6 +3430,7 @@
 {"ID":"CVE-2025-57822","Info":{"Name":"Next.js Middleware - Server-Side Request Forgery","Severity":"medium","Description":"In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next(), an attacker could exploit this behavior to perform Server-Side Request Forgery (SSRF) attacks.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-57822.yaml"}
 {"ID":"CVE-2025-58179","Info":{"Name":"Astro Cloudflare Adapter - Server Side Request Forgery","Severity":"high","Description":"Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2025/CVE-2025-58179.yaml"}
 {"ID":"CVE-2025-58434","Info":{"Name":"Flowise \u003c= 3.0.5 - Account Takeover","Severity":"critical","Description":"Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-58434.yaml"}
+{"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c= 1.5.10.1673 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
 {"ID":"CVE-2025-58751","Info":{"Name":"Vite Dev Server - Path Traversal","Severity":"low","Description":"Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-58751.yaml"}
 {"ID":"CVE-2025-59049","Info":{"Name":"Mockoon \u003c 9.2.0 - Path Traversal","Severity":"high","Description":"Mockoon before 9.2.0 contains a path traversal and local file inclusion caused by unsafe templating of server filenames from user input, letting attackers read arbitrary files on the mock server filesystem, exploit requires crafted request.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-59049.yaml"}
 {"ID":"CVE-2025-59287","Info":{"Name":"Windows Server Update Service - Insecure Deserialization","Severity":"critical","Description":"Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-59287.yaml"}
@@ -3432,6 +3444,8 @@
 {"ID":"CVE-2025-6197","Info":{"Name":"Open Redirect via Organization Switching","Severity":"medium","Description":"An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6197.yaml"}
 {"ID":"CVE-2025-6204","Info":{"Name":"DELMIA Apriso - Command Injection","Severity":"critical","Description":"An Improper Control of Generation of Code (code injection / file upload → RCE) vulnerability affecting DELMIA Apriso (Release 2020 → Release 2025). When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place executable artifacts into web-served locations (via path traversal or insufficient normalization) and achieve remote code execution under the webserver context.\n","Classification":{"CVSSScore":"9.0"}},"file_path":"http/cves/2025/CVE-2025-6204.yaml"}
 {"ID":"CVE-2025-6205","Info":{"Name":"DELMIA Apriso - Broken Access Control","Severity":"high","Description":"DELMIA Apriso Release 2020 through Release 2025 contains a broken access control vulnerability caused by missing authorization, letting attackers gain privileged access to the application, exploit requires no special conditions.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-6205.yaml"}
+{"ID":"CVE-2025-6403","Info":{"Name":"Code-Projects School Fees Payment System 1.0 - SQL Injection","Severity":"critical","Description":"A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6403.yaml"}
+{"ID":"CVE-2025-64095","Info":{"Name":"DNN - Unrestricted Arbitrary File Upload","Severity":"critical","Description":"DNN (formerly DotNetNuke) \\u003C 10.1.1 contains an unrestricted file upload vulnerability caused by the default HTML editor provider allowing unauthenticated file uploads and overwriting existing files, letting unauthenticated attackers deface websites and inject XSS payloads, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-64095.yaml"}
 {"ID":"CVE-2025-6851","Info":{"Name":"WordPress Broken Link Notifier \u003c 1.3.1 - Unauthenticated SSRF","Severity":"high","Description":"The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-6851.yaml"}
 {"ID":"CVE-2025-6934","Info":{"Name":"The Opal Estate Pro – Property Management \u003c= 1.7.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Opal Estate Pro plugin (≤ 1.7.5) is vulnerable to privilege escalation. Due to missing role restrictions in the on_register_user function, users can register with any role. This allows unauthenticated attackers to create administrator accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6934.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
@@ -3440,6 +3454,7 @@
 {"ID":"CVE-2025-8868","Info":{"Name":"Chef Automate \u003c 4.13.295 — SQL Injection","Severity":"critical","Description":"In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8868.yaml"}
 {"ID":"CVE-2025-9196","Info":{"Name":"Trinity Audio \u003c= 5.21.0 - Information Exposure","Severity":"medium","Description":"The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to extract sensitive data including configuration data.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-9196.yaml"}
 {"ID":"CVE-2025-9744","Info":{"Name":"Loan Management System 1.0 - SQL Injection","Severity":"critical","Description":"Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-9744.yaml"}
+{"ID":"CVE-2025-9985","Info":{"Name":"Featured Image from URL (FIFU) \u003c= 5.2.7 - Unauthenticated Information Exposure via Log File","Severity":"medium","Description":"The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9985.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
 {"ID":"CVE-2004-0437","Info":{"Name":"Titan FTP Server 3.01 - DoS via LIST Command Disconnection","Severity":"medium","Description":"Titan FTP Server version 3.01 build 163 (and possibly other older versions) contains a vulnerability where disconnecting during a LIST -L command may crash the daemon. Remote attackers can cause denial of service by initiating a LIST -L command and then abruptly disconnecting, leading to server instability.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0437.yaml"}
 {"ID":"CVE-2004-0656","Info":{"Name":"Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion","Severity":"medium","Description":"Pure-FTPd versions ≤ 1.0.18 are vulnerable to denial of service through connection limit exhaustion. The vulnerability occurs in the accept_client function when the maximum number of connections is exceeded, potentially causing the server to become unresponsive or crash.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0656.yaml"}
@@ -3473,6 +3488,7 @@
 {"ID":"CVE-2019-5544","Info":{"Name":"VMware ESXi SLP - Heap Overflow DoS","Severity":"critical","Description":"OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2019/CVE-2019-5544.yaml"}
 {"ID":"CVE-2020-0796","Info":{"Name":"Microsoft SMBv3 - Remote Code Execution","Severity":"critical","Description":"A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.\n","Classification":{"CVSSScore":"10"}},"file_path":"network/cves/2020/CVE-2020-0796.yaml"}
 {"ID":"CVE-2020-11981","Info":{"Name":"Apache Airflow \u003c=1.10.10 - Command Injection","Severity":"critical","Description":"An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-11981.yaml"}
+{"ID":"CVE-2020-14644","Info":{"Name":"Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)","Severity":"critical","Description":"Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 contain a remote code execution caused by unauthenticated network access via IIOP and T3, letting attackers take over the server, exploit requires network access.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-14644.yaml"}
 {"ID":"CVE-2020-1938","Info":{"Name":"Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability","Severity":"critical","Description":"When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-1938.yaml"}
 {"ID":"CVE-2020-35359","Info":{"Name":"Pure-FTPd 1.0.48 - Denial of Service","Severity":"high","Description":"Pure-FTPd 1.0.48 is vulnerable to Denial of Service via exhaustion of connections due to lack of proper connection limits.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2020/CVE-2020-35359.yaml"}
 {"ID":"CVE-2020-9274","Info":{"Name":"Pure-FTPd ≤ 1.0.49 - DoS via Uninitialized Pointer","Severity":"high","Description":"Pure-FTPd versions ≤ 1.0.49 (\u003e= ~0.96) contain a vulnerability in the init_aliases() function within diraliases.c when processing aliases. This leads to access of an uninitialized pointer, which can cause a denial of service (DoS) condition.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2020/CVE-2020-9274.yaml"}
@@ -3500,6 +3516,7 @@
 {"ID":"CVE-2012-2122","Info":{"Name":"MySQL - Authentication Bypass","Severity":"medium","Description":"sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.\n","Classification":{"CVSSScore":"5.1"}},"file_path":"javascript/cves/2012/CVE-2012-2122.yaml"}
 {"ID":"CVE-2016-8706","Info":{"Name":"Memcached Server SASL Authentication - Remote Code Execution","Severity":"high","Description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"javascript/cves/2016/CVE-2016-8706.yaml"}
 {"ID":"CVE-2018-0171","Info":{"Name":"Cisco Smart Install - Configuration Download","Severity":"critical","Description":"A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"javascript/cves/2018/CVE-2018-0171.yaml"}
+{"ID":"CVE-2019-6443","Info":{"Name":"NTPsec \u003e 1.1.3 - 'ctl_getitem' Out-of-Bounds Read","Severity":"critical","Description":"NTPsec before 1.1.3 contains a stack-based buffer over-read caused by a bug in ctl_getitem in read_sysvars in ntp_control.c in ntpd, letting local or remote attackers read sensitive memory, exploit requires sending crafted control requests.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"javascript/cves/2019/CVE-2019-6443.yaml"}
 {"ID":"CVE-2019-9193","Info":{"Name":"PostgreSQL 9.3-12.3 Authenticated Remote Code Execution","Severity":"high","Description":"In PostgreSQL 9.3 through 11.2, the \"COPY TO/FROM PROGRAM\" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"javascript/cves/2019/CVE-2019-9193.yaml"}
 {"ID":"CVE-2020-2883","Info":{"Name":"Oracle WebLogic Server - Remote Code Execution","Severity":"critical","Description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"javascript/cves/2020/CVE-2020-2883.yaml"}
 {"ID":"CVE-2020-4429","Info":{"Name":"IBM Data Risk Manager - Hardcoded Credentials","Severity":"critical","Description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID- 180534.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"javascript/cves/2020/CVE-2020-4429.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-6422b30708fe76b024738e852eb7431f
+04825279d81a90757969be8bbeccd5b4

dast/cves/2018/CVE-2018-19518.yaml

@@ -17,7 +17,7 @@ info:
     cve-id: CVE-2018-19518
     cwe-id: CWE-88
     epss-score: 0.93956
-    epss-percentile: 0.99877
+    epss-percentile: 0.99875
   metadata:
     max-request: 1
     confidence: tenative
@@ -49,4 +49,4 @@ http:
         part: interactsh_request
         words:
           - "User-Agent: curl"
-# digest: 490a00463044022030ef7844c72c1df2eb23f6b98cb54cefbd5a59aa5d36519ebfe6aade99aeeb5e02203758d3a5fa252ad6a593dd5ff012ab0d3a5077b8794d9cb3e8f63d2bdf648e2d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022003d7f90673973a982e5558470f07a7f4ad8f8cc685710dc21348cb4bc670b4d9022100b5549b5ebdfda9e3d3841380d1a9818136dc794c3e03b05c487cb841c88f78b5:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-45046.yaml

@@ -17,7 +17,7 @@ info:
     cve-id: CVE-2021-45046
     cwe-id: CWE-502
     epss-score: 0.9434
-    epss-percentile: 0.99951
+    epss-percentile: 0.99949
   metadata:
     max-request: 1
     confidence: tenative
@@ -62,4 +62,4 @@ http:
         group: 1
         regex:
           - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4a0a00473045022100e7cac3137df9d2ff796133b37fd4454476e42a2a20c4f7e3aa4cb9c5ee92e7fc02206e726a24ee1e449291203bdffd6e84de4269148f4fa0a481b40683c3b5a13fba:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009196c1d6ef2d3d8e4b25ff18bfa83c04a308b9765b740c9162c14bbc6731d5dd022100d96615e2b640d1a1570bb2c83be10885b97f859a08cdf30f244d62072624fd42:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-22965.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2022-22965
     cwe-id: CWE-94
     epss-score: 0.94441
-    epss-percentile: 0.9999
+    epss-percentile: 0.99989
     cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -55,4 +55,4 @@ http:
         words:
           - "User-Agent: Java"
         case-insensitive: true
-# digest: 4a0a00473045022057c004296c7cc298bfc13db724a4f01b8908fd7154a6a1724d39ff1fe49f3733022100e892c847584be7db4f81a395eeb10cd4c84c6b07c439e38ba57c7c02cc83ac15:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cbb1a7ae18dc796cbd8d01a2416573459737a0f5c5bef589a865dba4e022096602206ff2e01b0d20ab6cefb4ab847190e4ea41429ad947a64493881626897d7b9006:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-34265.yaml

@@ -17,7 +17,7 @@ info:
     cve-id: CVE-2022-34265
     cwe-id: CWE-89
     epss-score: 0.92734
-    epss-percentile: 0.99748
+    epss-percentile: 0.99742
   tags: sqli,dast,vulhub,cve,cve2022,django,vuln
 
 variables:
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a00473045022068c2cfd3684b066c04542155588692e18073d4d1d297921f24da43ea4ec25050022100f1f9f928ec47b7041f25d5a3223bdb590a39373bb9f9730dc1ed274d0ffba0f4:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220313f97ef1ed9ca9259404dcc6b2a3d20024e5d93c5e240fc3691a60445b3521b02202dc02c16af44d82d9a1c893c9c85690e677e801a7bd2759dad7b66a31591b236:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-42889.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2022-42889
     cwe-id: CWE-94
     epss-score: 0.94161
-    epss-percentile: 0.9991
+    epss-percentile: 0.99907
   metadata:
     max-request: 1
     confidence: tenative
@@ -68,4 +68,4 @@ http:
         group: 1
         regex:
           - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 490a0046304402203c97c7adfcde085577438811e428c7c4b1e25dccf7be131cf568b351b695ab6d0220546426ab49191229ddc97bcddfa899a8a3f7f8c8e13818804297bdfe819272bf:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022007239687d8e5b0b562ae071607fcc17bf9e0a75003422cc11d019e4c973a71ed022100e39d76c5c714ec810722b624baa6687e4178262aba54c4973139c572bed95be5:922c64590222798bb761d5b6d8e72950

dast/cves/2024/CVE-2024-2961.yaml

@@ -18,8 +18,8 @@ info:
     cvss-score: 7.3
     cve-id: CVE-2024-2961
     cwe-id: CWE-787
-    epss-score: 0.92472
-    epss-percentile: 0.99723
+    epss-score: 0.9261
+    epss-percentile: 0.9973
   tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln
 
 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
       - type: regex
         regex:
           - "root:x:0:0"
-# digest: 4a0a00473045022100b9f31b9c0e85408532325528b029a5f2b87befb42a74df2a7710876ae770b7be02203275cc64a0a110cad4f2f1e9ce6ffe92777fca4f3471bc64fec3739ee2f9ce7b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100aa92d96d35809e43ff9944ae82a2d175820a83937e0f8e01f7e7f4bcf976deb9022100db0273ebd16109f8dcc5b9bc3f0cba9388e844a71558447228205f8f635d7b06:922c64590222798bb761d5b6d8e72950

file/logs/aspnet-framework-exceptions.yaml

@@ -22,4 +22,4 @@ file:
           - 'InvalidOperationException'
           - 'UnauthorizedAccessException'
           - 'NotFound'
-# digest: 4a0a0047304502204c06946211ed44cd2ce7e1c370fa59ed67d4bde27b30a02c486c365d36e6f3eb022100826554217ed0f582d155d6c899c76d7891b6afd3fba4cb96f329d682c456be79:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022001a28cfdfeefcf2533646ec4e84101d825e19d420db7d5d7909b43b437bc547e022060002c6ac0078d9aeed09ea81c2e819a74549e623eec8134a59bfecf0e6055dd:922c64590222798bb761d5b6d8e72950

file/logs/nodejs-framework-exceptions.yaml

@@ -30,4 +30,4 @@ file:
           - 'BadRequestError'
           - 'MongoError'
           - 'SequelizeDatabaseError'
-# digest: 4a0a00473045022057f76fbd45cd3bad910a0acf5fd2619dad772286a326260855950a1951fbd33c022100a7ae8b5fd07e9f6ab9e8091c711059ce2d1cd1c82aeadbc0bf88e088a36ae7b4:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ba8e6c12e8ec5e4ae3e0801b7390b711631dfb574d037999d5c90c8eced666fc022100e66a617a1ec1e10cec9119814077b2b790c3dba13e2a9264c4cf9500d2db53f8:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
-    epss-score: 0.83032
-    epss-percentile: 0.99217
+    epss-score: 0.82992
+    epss-percentile: 0.99204
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -54,4 +54,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a00473045022049066491c47881f10f9bb7f5603f800d8e7b230be3aee3a9168ec7512d85681d022100d8ab0c597c50cccaecd7f55fd01d2c660d24301609af90e79e61deae3c0da80d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210092addecbe0999e8ac7566a8b688cfbd6a662f6480b8b8aab4c4dc0b19656a67e022100d627e696252fbcffe4f777cb7bcb58f4a7b501b34222468a4025204389672d21:922c64590222798bb761d5b6d8e72950

headless/cves/2022/CVE-2022-29455-headless.yaml

@@ -21,8 +21,8 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2022-29455
     cwe-id: CWE-79
-    epss-score: 0.73995
-    epss-percentile: 0.98772
+    epss-score: 0.69544
+    epss-percentile: 0.98579
     cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -52,4 +52,4 @@ headless:
         words:
           - "elementor"
         case-insensitive: true
-# digest: 4b0a00483046022100fa5e2db4c3f3952f85361fc6d49939bf2273c68edc34ea09cf55ad1210c6846d022100d5a8e4a5ebe1dd7eb22f3b9fb90e9d5628bb7c880171fb1af5868fbf2ea2d8d2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022034041612068bb6cc23a19b360e6acbd244a6a4058cf1d36cd8222f5a2f1b503f02210080b9f278c949817375c1590c7732a2e556d93e25ea1090cd9a519b1c90a90a62:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -15,7 +15,7 @@ info:
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
     epss-score: 0.02716
-    epss-percentile: 0.85451
+    epss-percentile: 0.85401
   metadata:
     verified: true
     max-request: 1
@@ -46,4 +46,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 490a00463044022058b32c9ae34061ebab359182e96023d86682145cb57428a1ace0ae53256305e5022062ba25d7ea9c8976f88d6565877f824c2b05145f2132dbd9c2a18e2cdf4c9912:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220558a089dc181f6ec5760dd0ce307114bfa92ee5a5c1016d5bee66631a891b03402203e32c3102bf24d9b61500ae2f19afe47da572f008de06db6a8a6a53e462a9703:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -20,8 +20,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
     cvss-score: 7.2
     cve-id: CVE-2024-38526
-    epss-score: 0.83976
-    epss-percentile: 0.99268
+    epss-score: 0.79167
+    epss-percentile: 0.99018
   tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
   - steps:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 4b0a00483046022100f5c7a7c44d33b8a4e7b118671060be89e0c20d2dcd1b339ad5d3576d02372314022100efbfd77fe347b06c80cb98c885ce2f4a24d23635a1fa53a92edfb98e22510a1d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b931374196adc17b46064f13d99af21f0b4d196d6d98ef8a0f6399a13814b18a02200e531edd5973acf6e0487bf3875e44a0680ca471226aed577a872ea97374088f:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -11,8 +11,8 @@ info:
     - https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
   classification:
-    epss-score: 0.01886
-    epss-percentile: 0.82647
+    epss-score: 0.03198
+    epss-percentile: 0.86487
   metadata:
     verified: true
     max-request: 1
@@ -42,4 +42,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4b0a00483046022100f709bfed9bd55e86017df25649fc03ea0e440908e3a489746511268cec277065022100ed5ea9184451ca5131e60f15e82d665f0a41a820d290bd45340edc504ced9a49:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220620f3dc941df3e688c304ad234066a1d8a87fc2b1fa1a04ef9850f24e613510e022100b00c68736b6f7bac99a0677c564247d90e688024cc08909d957a4fc6c55309c1:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -17,7 +17,7 @@ info:
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
     epss-score: 0.34064
-    epss-percentile: 0.96792
+    epss-percentile: 0.96767
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
     max-request: 7
@@ -186,4 +186,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 4b0a004830460221009674fa793d8d3c3a4c49e1f9e72d7264810dd9a568ecda882629d1c7d96a8a9c0221008eb2d65b54ef765296f0764dfc3b058cc9ba77f656fcb0e169201396264b04fe:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a17efb62fee55c45342f1aca08abe8984f346f12eae5f7bf59b14f8a31240df0022006f396de2e67edbc06c2fcbbd24ba3de7ad0df3e39ea1e26656466e8717c348d:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-29927-HEADLESS.yaml

@@ -15,8 +15,8 @@ info:
     cvss-score: 9.1
     cve-id: CVE-2025-29927
     cwe-id: CWE-285
-    epss-score: 0.91603
-    epss-percentile: 0.99665
+    epss-score: 0.9253
+    epss-percentile: 0.99722
   metadata:
     vendor: vercel
     product: Next.js
@@ -55,4 +55,4 @@ headless:
           - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
           - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
         condition: or
-# digest: 4a0a00473045022100e5205918c514ac5a389a09a992b1ad4e6ece6e5b0e8e3a5f2486dcd7f707636f0220681120db58d849b9dcea807bff26efda556412671d0e0d9f4d1ca3420a8210da:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100af9785bc77b70ef5e8fe304f65b6827a469b6897d09860a8cbafe4ef5b4098ab02204b88dc3575deadacfc2e3f730e88fc5cd6f6286be4be01bdaedeafafa4d21b23:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -14,8 +14,8 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2025-8191
     cwe-id: CWE-79
-    epss-score: 0.01591
-    epss-percentile: 0.81124
+    epss-score: 0.0123
+    epss-percentile: 0.78509
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -65,4 +65,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a00473045022100993393140392424e91b9fb45d55a520fcb18da705fb6712d1972c71a3f4d00b6022023346bb49086e3422fc1c87c097d5aa0350f0b2132503ee1c2f9d103e2f8eb9d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bf467b92bb54a513c07a7dd2aa60c60f41c1addbed2fc05dca493900e01bcaed02202a8a76331e4af40e5f08916dbd0bb736cade93edc26639886155adeb880bf8b9:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0114.yaml

@@ -15,8 +15,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
     cvss-score: 5.3
     cve-id: CVE-2000-0114
-    epss-score: 0.04728
-    epss-percentile: 0.88952
+    epss-score: 0.05458
+    epss-percentile: 0.8973
     cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -59,4 +59,4 @@ http:
         group: 1
         regex:
           - 'version:([0-9.]+)'
-# digest: 490a0046304402202fca682465a978b196e1b805f2a1fa804bc63acf07d27f253ab51b93453c04b5022068e855f38262c3f4bd824ff09d01b9f66d7fe1f861128402d44c854cb5de21aa:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205332a03942b696ffdaf4514030f433335731ac7445fcfa0a9131c17cb83b687202207e6fc2c1d794e984243e5f602ea871821d372de93b4374a49b3b3a80ae77428b:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -1,29 +1,46 @@
 id: CVE-2000-0760
 
 info:
-  name: Jakarta Tomcat 3.1 and 3.0 - Exposure
-  author: Thabisocn
-  severity: low
+  name: Jakarta Tomcat 3.1 and 3.0 - Information Disclosure
+  author: Thabisocn,0x_Akoko
+  severity: medium
   description: |
-    The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
+    Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access.
+  impact: |
+    Attackers can retrieve sensitive system information, potentially aiding further attacks or information disclosure.
+  remediation: |
+    Update to the latest version of Jakarta Tomcat or apply security patches that fix the Snoop servlet issue.
   reference:
-    - https://vulners.com/nessus/TOMCAT_SNOOP.NASL
+    - https://www.exploit-db.com/exploits/20132
     - https://nvd.nist.gov/vuln/detail/CVE-2000-0760
   classification:
-    epss-score: 0.68493
-    epss-percentile: 0.98547
+    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N
+    cvss-score: 6.4
+    cve-id: CVE-2000-0760
+    epss-score: 0.65623
+    epss-percentile: 0.98413
+    cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
   metadata:
-    max-request: 1
     verified: true
-    google-query: site:*/examples/jsp/snp/snoop.jsp
+    max-request: 1
     vendor: apache
     product: tomcat
-  tags: cve,cve2000,jakarta,tomcat,exposure,info-leak,vuln
+    shodan-query:
+      - cpe:"cpe:2.3:a:apache:tomcat"
+      - http.component:"apache tomcat"
+      - product:"tomcat"
+    fofa-query:
+      - body="apache tomcat"
+      - body="jk status manager"
+    google-query:
+      - site:*/examples/jsp/snp/snoop.jsp
+      - intitle:"apache tomcat"
+  tags: cve,cve2000,jakarta,tomcat,exposure
 
 http:
   - method: GET
     path:
-      - "{{BaseURL}}/examples/jsp/snp/snoop.jsp"
+      - "{{BaseURL}}/examples/jsp/snp/anything.snp"
 
     matchers-condition: and
     matchers:
@@ -38,4 +55,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210090b625a54f81b8544c2c5d860c296bb8011f223b667acd53d25b8a12029f975c0221008f4c5f4d505de5b93068341faa907c76ca5b04d773a096b3eb7e1666715b57d9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205ce0b599e4c517935b356826b8b065ac225bdde1d74ff84196e6f529739a4292022100aa157c5a6531f56de77d8a205e3fce64dd0c3e50bc42f6b93daee89acab80545:922c64590222798bb761d5b6d8e72950

http/cves/2001/CVE-2001-0537.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2001-0537
     cwe-id: CWE-287
     epss-score: 0.93696
-    epss-percentile: 0.99837
+    epss-percentile: 0.99833
     cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -53,4 +53,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402202056e7ed0c90326fd4acd7e26e247262ad16182178fd604ef84b41bb5362173b0220082886349ab1a891a4f7da42b9b9c73c6110eef00c8f8302d881ccc094408b42:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204cb765e57d2253f0d95e309e3caf15a5463c5124f5c2ab2d4aacc694575b8ca6022100e20e658418ff17b3f354b65fc2a03db3f81d7a3cd9be8f582cc7e896e5853e31:922c64590222798bb761d5b6d8e72950

http/cves/2002/CVE-2002-1131.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2002-1131
     cwe-id: CWE-80
     epss-score: 0.03877
-    epss-percentile: 0.87794
+    epss-percentile: 0.87736
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 5
@@ -60,4 +60,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502200ec075d4e13546a7918ffb7a384fa56cc32a0496e73f13b62de4fe96f9f96561022100fd27c71cf50b00bdf1006e02af98e5896e25d99b9bfb50eee568aa4ba841cf0a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009dafa7d7a8dffea049773b86bb1bbab11544ca0004bcb9b849683c76c8e2485a02200b0f46c61ce9c0cb51b9c95b6df330fc5ce87295ad1df784bc9f4235474320ac:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
-    epss-score: 0.00186
-    epss-percentile: 0.40815
+    epss-score: 0.00124
+    epss-percentile: 0.32339
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402206b40a89a0711dc8b38f98a5e5f18bce826cbf791c321c80305b55f60d8a268e5022078640705adc1ea1007c4a9d4456df5dd36c4ca1e51ef2feb1154585a06af8eed:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220482f005db704fd496f0e04fdc5d6a657b64028a787c62478aab7bd17dda4d0ec022100a9f5e846faf7569e3b54f6039cf126a36df1bb35625535b66ec3afb5617340c5:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-1965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2004-1965
     cwe-id: NVD-CWE-Other
     epss-score: 0.00265
-    epss-percentile: 0.50028
+    epss-percentile: 0.49806
     cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a0047304502201ecc3343e9f8e6017e61c59f51549aa7e66e1f5e3925a10ccdb3b931991aa27a022100c04481c0de9a8af52ccf1c45138b79d5918ff39c402446209b1d974ce7ccd01d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206c46055e57092ee031148672031d0e22b49272e5a0857ad53ad2e466153ad9950220799ce49158105f62ff4e3014ebde77ffd93d2e6f867c026fc1374b547807da6a:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 5
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
-    epss-score: 0.07654
-    epss-percentile: 0.91514
+    epss-score: 0.06321
+    epss-percentile: 0.90538
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450221008e25827d7c9c6c5b6145cc2277b9dba631c7cf914df78657892bea60cf60c18002207ed8133adc274bb95eedabf6ce29ba1c57b52ae8a2822ad5f8245b7f1b7e02ee:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e27b5564c1ce0432367fef28996116fdfed26910e63a54119ca94bc05da9d5820221008de003eec4ec0a8dd72263eaf0baba52b74b655528d8970c724fad9ac84af23b:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3128.yaml

@@ -13,7 +13,7 @@ info:
     cvss-score: 5.4
     cve-id: CVE-2005-3128
     epss-score: 0.01733
-    epss-percentile: 0.81904
+    epss-percentile: 0.81832
     cwe-id: CWE-80
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         words:
           - "text/html"
-# digest: 490a0046304402203953ffd9f7b8481bbdbe517f10ee2f9a004f21ff5935a20615529e637bc42e0a02207e18eb70c967d0aab3e7a04606b601d3a87b140680920fb8aa98748596726543:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205afe95746bc2a44a6192867c14a26fa883d19454a3323a564477a56ecd6e309f022100c6dad1a5f54df0f542edae68dd1a3d64a4075360fb0ba50c49078aa5a931ae66:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
     epss-score: 0.1015
-    epss-percentile: 0.92813
+    epss-percentile: 0.92777
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221008132548ffefed278b11471d1768cee4a3162213cae0f0bdea2dcb4812c1a438f022100edfc43aa5292ac0c752be143a4d552705faac9db2c756427d41e661ee75ae339:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022069103c3ec6f0b5a4782b752580b541c494e6b687ccd290707d59cf3fd8506466022100953d7f3ec676dfcbb248c252e23aeb7ba6a4e0cee7f7b364ecde1719f69e7d51:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
     epss-score: 0.01653
-    epss-percentile: 0.8149
+    epss-percentile: 0.81406
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a0046304402205853c15c368fef4431531c1a0fa120d32ebca7591c1fb05c1f1261bcc4c3f47b022028de85169533d4e8e160d2c1759ba7a709f38d016f26d99b7871d77e1a000d6b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207726228cd9e49dd00ff836be3fa993d42520855df4c6f681ea14de91dae929fd02207519f13c615ae1b06c303012ad6a9870ac907371e261fd0c50d088a9830f76f2:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
     epss-score: 0.00373
-    epss-percentile: 0.58461
+    epss-percentile: 0.58266
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220047ee98cf5682815a95ccdc6ca1cbd530b3f7acaea57e035ef4df386a15e15f002210089ca7c90b86b1a5e4c15f7b5c5a83fdd36d95f63130e4a14ec5f16c2bfd8dc3c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f86f9b46831b1c7f323168fda14e3907af8e723ea601697be19dd06af30a740902200104575dbb4b8138f97e00a0228ffd9a3b66efaccdba58c87a89256d55bafcd9:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-1681.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2006-1681
     cwe-id: NVD-CWE-Other
     epss-score: 0.00299
-    epss-percentile: 0.52991
+    epss-percentile: 0.52759
     cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100aa2eb4dccadd12dbbcf1f49aaf27cdbc00ce25f1f5e553c5b5808ab1eacf4c9602205a861ccf6f90eb391d40b1753a678e697132df0230ebad7f1aca9ef876a19366:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220062e8d719f08e84a250949357d925976fe5b07e77eacf1573945d251933effe90221008b1630fc674b9060b4fcf210f55349c253d1df35de9a83a31c3247257bcf21ca:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2006-2842
     cwe-id: CWE-22
     epss-score: 0.0094
-    epss-percentile: 0.75614
+    epss-percentile: 0.7546
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100dd7526104c04faf97c24f638f21770f4bf51d4d462361bc2665a39066f9c2bf8022100b3b16c2d151b82cd20ebdc81a78f964ec2b9830fc8fab190fe7fe430ef90fdb3:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c2256d78915d25d4df1e0d25e028d15520fe12f70247fa5b1d4e9042b77f43c0022100a96fd7c141b6a40abaeb7a77962424e653b9c4c1e3760d3adabed6209e3b04af:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-0885.yaml

@@ -17,7 +17,7 @@ info:
     cve-id: CVE-2007-0885
     cwe-id: NVD-CWE-Other
     epss-score: 0.02133
-    epss-percentile: 0.83656
+    epss-percentile: 0.83599
     cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100fae7a94b89a7e821c79ecb6d79ab885cff2b777c1c2c11d3e720c474588a92a302202d28cd1ef38a2ed3ed02d07498895c56faac2b7cada2d99d18510530d7969d3d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100eda14ccf8eeaaaf8029c97bf324dca7df1aa289f71825ee667a5e4508f98e3af0220546cbe42bab6ab502d562e0fb84906334df35aca519cfb9e0da612e58f684709:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -14,7 +14,7 @@ info:
     cvss-score: 7.2
     cwe-id: CWE-79
     epss-score: 0.82646
-    epss-percentile: 0.99195
+    epss-percentile: 0.99186
   metadata:
     max-request: 1
     verified: true
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203d4c0657c5583890081b975880877c383d4cf1add5d906e696890afdc77dac5a022100ea30b8eece046b5fc05cbaa39a761b71c024d0015ea7719193bcdd9b3a06e014:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d49e6b4103625a0f23f4aa0615bc422dc87fdcb9f3b6c09b6c2b38d7a00b3461022100bc4a6c1947a3935fc76fd745e7d1ed1f1cc1a4f27c7dc12159b9dcc336a65a7e:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-3010.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-3010
     cwe-id: CWE-20
     epss-score: 0.93855
-    epss-percentile: 0.99861
+    epss-percentile: 0.99859
     cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100c5d59be90da48b16bf7e8417620db274db67a0998d207acf6ef9480db2873d39022100a35332f167da84370bd98b3e357b7daa0be4020b701a8e7064b630af226f2c46:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201e1b3c65272c35ee8bef72b7534cf3cceadbbfdd68b6b173ffeff916c10a5ac7022061b637a3d59a8dfabbae9daa892b6dd7c0542b778b1a11f69bd720f23d2badea:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 5
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
-    epss-score: 0.00063
-    epss-percentile: 0.19809
+    epss-score: 0.0006
+    epss-percentile: 0.18655
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022042f4734a0a69ab33f89021713db8649dd66d898bd9c9d00b91df666d557ac92e022060f39e0582dde17e07bdbaedfabf7bb739f0e88b148bc70dd6a9bae080d7c8c9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a632fbd89ee7d7168b84c7a8351cb260c3be99daa440dca4d93607d2e2e92682022010d8370dadd0bedd78f49f13c84874587afe8e1191cecfe5d3952b173de2df09:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4556.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-4556
     cwe-id: NVD-CWE-Other
     epss-score: 0.02359
-    epss-percentile: 0.84428
+    epss-percentile: 0.84375
     cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402207774974264fdc723236eeae14b4c4d59874dc28b20bf86c70f901074d7a0167202201f15e0424d1b2d6a0c7898531f57ee72a67ae2ab3924b6d562218457e870d292:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220681e3e030dae241ae87fc985bcbbc0bda37e25945ee039dce2932c0279e9ae6902210093d3e554bbe06521fabf8cc5cefb9e8bb6644fc79769a5cb835fad89a8348e15:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
-    epss-score: 0.00301
-    epss-percentile: 0.53137
+    epss-score: 0.00488
+    epss-percentile: 0.64598
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b66bb8e7a427fb444db62388cbf46ab38e4aaf31c2cb48ecad7d1d0201f2b0e3022100c1ce6949f7522d84a11e80dc34d70905d65b71ddb116e3a8b21a47e5b574452d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100be9d734739e44ad53d0b091b97e512e640fda1e67c535820f98f8723a21e6f6302206bd8b0cdd90a0807cd8e869f2192e57a6d6a70d126f59ca474a1c0e7b0c00eed:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1059.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1059
     cwe-id: CWE-94
     epss-score: 0.00265
-    epss-percentile: 0.50051
+    epss-percentile: 0.49829
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022015c81372859cba541a44cc461548bdcae94ed01c557f1a9723f80c6578507afa0221009e0906244ea232a24e0f5916a7fd4041d6a8d3f47b52bc2d4b7a595803f20117:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d0caca73172cb00699df02ab0255d6bb20bb48cf44e51006f86ff2440523f783022100dbfe50ad7ad767fcf4ec516ba133fbe911f95a4e6f568389c3ed2499a3734ea7:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1061.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1061
     cwe-id: CWE-79
     epss-score: 0.00155
-    epss-percentile: 0.37011
+    epss-percentile: 0.36788
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100c8466413e954000e3240bf2aac2f3e5f5e9e4223e4f5ff2f57599820c64f8e92022100c0782e3a6c04be31c1271a63fca5921eb33227164163ad36bec349467bea9d50:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202d74bbb178b65b8d4d1c670fdb6ccb0368f61303f47995ecc3317e2cad75316b022100eb29d9070b1a7e33dd63756ff0a3fc4f88d7cd434da57289b9b9860b3af1a748:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1547.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1547
     cwe-id: CWE-601
     epss-score: 0.65006
-    epss-percentile: 0.98399
+    epss-percentile: 0.98381
     cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -51,4 +51,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402201760e780673fefdd767861d73c454f1af870896a0b75faedced70356472d03d602205f243887cc480e3f4614a2b749032f77790dba17e08d8436600e32b5ef38344c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205f796732a5355990b3abba6f7d86afd5da7b38c87e122344e56f3df1ea81d3ff022100d06446bd84b9a9875c9a043e5b9bdb7d7f18e936eb082127fe58209450dd621f:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -18,8 +18,8 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
-    epss-score: 0.00845
-    epss-percentile: 0.74215
+    epss-score: 0.00437
+    epss-percentile: 0.62251
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402201bcf2174eea7e5f908fef9ba9677268fd73e7ac644081ca04f47b0b1c30bb4b3022068d5548561d4e550843a561703b7de4275f71435256995ed5cbd77856485d5cd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dbb4edac2211a6f44c91611514b36fd0c8a5cd62275248b63ac032f941586a0e022100ecad4b52469a21900bb07fd05e241016c9a309b50000c842e50380ad4bebc920:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
     epss-score: 0.01643
-    epss-percentile: 0.81427
+    epss-percentile: 0.81341
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221009792762f9c7474abdd6550c6f1eb7ad7fb29420a538a514b12b7974d8f03d6a1022100b3a78bb48a29bd8e1c9a0cd3f54d5b64ebc03628686bb9bf3a37f47316ca2c46:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cec0e71f86555acb50c217e41def09899827c0f6864abac2fcfb1dcd6f1c84e9022100f91a1a004065ef2b4309bc9fd8ae4b6ceae074c508e1f352ea0de141deab0c25:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 9
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
-    epss-score: 0.00276
-    epss-percentile: 0.509
+    epss-score: 0.00268
+    epss-percentile: 0.50093
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022056e0aa4f873190879b13f57a848cea1ede8d17819637194871c8defb562424ca022100c975fda228e77121f793b44c02c2acf231b5ddb85dd9d4aa124955b17630c2dd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100eadba1af98a8c502efd2b328b97649670174156ebdb235ea47da9439f75e2ca2022100e2ab130c92dd67485449eabf269398cd9e8560c4fdd31cbf252aebc8fdbeef63:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4764.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2008-4764
     cwe-id: CWE-22
     epss-score: 0.01921
-    epss-percentile: 0.82818
+    epss-percentile: 0.82759
     cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100fe8a82a0179bc94fb2b24c777a0e88fa41ca49f624ffbe0c152f22e3e5df0ff802204af00129515ae6fb77cd4cd0681440c43d99cb0c99c905cbb6a39efacc02783f:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022021a79bd295e6fd6b0fede95d696b48cbcce7a2e5e9b02d688c7d4d69a4147d72022025de58100c84a3578d39444afcc4f40a5b1a5a2c5614c723be801cc6278ee2c4:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-5587.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-5587
     cwe-id: CWE-22
     epss-score: 0.01986
-    epss-percentile: 0.83057
+    epss-percentile: 0.83
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -49,4 +49,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220688191a0dfbb73fd5ff3664da3e42746eb7f73bbb2694b5f7dba45f6642d0e300220540c2ff417043a8a952c33110f39270fb0a34ae8471c3ecc0f27987aacc170b4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f9a7dc14da2d0497c06b87f8d20553cdbb032bd812ef52cfa4bb6266fad045c70220054cdfd3aced4268ac1b90ad4f6c4b6909e1138a5e91e35e702d5a4cb31f0005:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
     epss-score: 0.063
-    epss-percentile: 0.90565
+    epss-percentile: 0.90524
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203b3d284648fb5357474b584556b1655f0b8280877e8801cea3d83b3048de3d6e022100f23ac52db67e46de412a475a5c995eb424d9b20d94a064206fc9d945a3fc69e2:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205ffc8f2f0d134563344a20994f84be19bc8d3ab9f2e187602e54cb420ebe6044022031c2b187dfd17883a1c9bc6fad0c4b74b632d063a2ab4fc9d40d08947b41d3b0:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6172.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6172
     cwe-id: CWE-22
     epss-score: 0.07294
-    epss-percentile: 0.91276
+    epss-percentile: 0.91242
     cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502207cf27b87a6efcfe51776b791103bb5a8c11ebf96aa842af27f8f7bf547c2e5cf0221009ea124e1093d74e868ed068312aa4dd80bb86306a22e34d40df9c4f2ed1d55d1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d0f3de31f714d4fae5dc9bc4a27f0859c1e87e2ed1907a88e450963d713d29e10221009b22df03a24b19daf97a19f3e0de2817402656fbe1f99887001fb9eddd55db98:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -19,8 +19,8 @@ info:
     cvss-score: 5
     cve-id: CVE-2008-6222
     cwe-id: CWE-22
-    epss-score: 0.01954
-    epss-percentile: 0.82939
+    epss-score: 0.01649
+    epss-percentile: 0.81383
     cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220122c23321474ca49173f7ba6116a2c0f170db4a5c081e46ded5def3176f04e51022100b9bdf76f348cc321e35127098235c5ba6b7c06a9c9fc10c82648c1063cf289ec:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200a229a693b9dbe066bb2ed32a1ab6b9e57f73a79dd9bc75ea031ebdcff68fd6d02210092e285fb42e8ad23105647ae3f4fe013a42107a1c8b8e25e8f34c91caa568c3e:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -21,8 +21,8 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
-    epss-score: 0.00946
-    epss-percentile: 0.75707
+    epss-score: 0.01157
+    epss-percentile: 0.77881
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d7ae676d9861f7c31b29b81af064c01ef5fa56630b3273e56a56136d533469ce022052378a27aca42a9fdfceab86e1455182b7c8a750febf7cb5ac9c1a48b6b485bf:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ed4c2fcbcd3d631b0d91ef04752e2d73305a6542080b775f8476468db672b7e80221009c80fa6bb7f1126bac87d3c52e1e2d5c5cec31eae8092d102bde74ca946c77be:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-6668
     cwe-id: CWE-22
     epss-score: 0.01077
-    epss-percentile: 0.77225
+    epss-percentile: 0.77107
     cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -45,4 +45,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100e497d0a5b7e2a2e7b094b614ee4b5293e59ac33a19238dba05f489d4b48a7d87022100861eac5a4dd4447fcb54ec982c332488f8197a6bce8529197cacff891b3b91ad:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fad404533668ec9446f59658b59a65e3a0e382786d50ebc1ad33086351f458610220079f45cba82719e58f0ffe6a60df506a2231b25d10c88cd795bfb3b8ac2e8ebf:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6982.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6982
     cwe-id: CWE-79
     epss-score: 0.08587
-    epss-percentile: 0.92046
+    epss-percentile: 0.92017
     cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4b0a00483046022100bec51a7ab47d69aa9c4ff3cd43c9c541a16efcc1d891320835c1fdf1d65cdf4b022100fa51895feff5bc6113ba8eeb56f9f9b29b66d2c4b7d4224221b99c0eac1cb158:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210095abf9858d1995714056c15b0f767110876f0cce8312a63775da93c4201d49310220358c793e386f9f7db123af2a23322c71cb81cf8dca011b10b3289ca9ceeb85de:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-7269.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2008-7269
     cwe-id: CWE-20
     epss-score: 0.00653
-    epss-percentile: 0.70266
+    epss-percentile: 0.70083
     cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
   metadata:
     verified: "true"
@@ -41,4 +41,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402201ff97ca033a2cc185f6fec8b80251bdf7685518452321ee058888753411a23b50220786831d2be459e177d48146f9bb32db6a76610bf91a6a69cf5c81b95ff0d8b35:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008f4efaf8be4e2884ef06a78fc6d21bd0b9234647d377c0b33deb0086d4e46d660220151a81309f2e4007b3b05fd1c0ecab5eee0e875830ddcd9c87bcc631cfb2511d:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
     epss-score: 0.03639
-    epss-percentile: 0.87388
+    epss-percentile: 0.87334
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402205503d198c9541b545c6e8dfc57f5a2daf504ba880bd65e814e0931b4f2ecab0502205fe15444b84ed0bb2401404a6dd7dc75bade26adcb53ac971107ad47a9a65068:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205f9b463cd06f54364d3a10e8694205ac9a67530a30fb21404a8afce42555ea7e022100cf8c3e7c768d201fce4be03382f832e58a939d013002ed9e1fa92ff9fc4512b3:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0545.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-0545
     cwe-id: CWE-20
     epss-score: 0.93944
-    epss-percentile: 0.99875
+    epss-percentile: 0.99872
     cpe: cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
         part: body
         regex:
           - "root:.*:0:0:"
-# digest: 4b0a00483046022100c5587173ae873f64fcf5a80302194ec6c78ce1b74df87109680732922333005e022100dbb21925869bbc8c6da8722340268c74e866cd7e273b7698e8a4b3f033d0af9b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022032d15ebb09eb2277244558773a05a18c71577dde1accacf18d5dc9fee647b2d6022100ce20c8c61c1aca0bcefa310004f930d6005ebff4e81659af47dac184bdfe5103:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2009-0932
     cwe-id: CWE-22
-    epss-score: 0.02929
-    epss-percentile: 0.85957
+    epss-score: 0.05612
+    epss-percentile: 0.89887
     cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022075633e1ee506c7aa3a7c5d29ffd1927de02dad3684806e33d05b9bfb93cd4ce602200ac2465127b194866eb2591f850e600a7c67801c2e3d0f4d9aab0c92e99dc8c4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202b600e7fed55d00d3dc6100bd2cd018bd9d39e271f15fc31591142836ddd1be6022100acd6a90d265d34f568cbde3bd37e4ee8dd8d898b462329b0110516ee74611380:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1151.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1151
     cwe-id: CWE-94
     epss-score: 0.93032
-    epss-percentile: 0.9977
+    epss-percentile: 0.99767
     cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -58,4 +58,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220075102250e6c47cdc63f1f9081ff045f4636917b712b9bfbdb2fac4b2c02035a0221008223218e37d71798aa1e476ec1ee9c1227d190bdde0dc2555683202e045500af:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206ec863f730507abfd2517eb6f80d98c2d756ec7579b04ec58ee00c1c38362acf02210087f219b47c9c0a444e14770597ac8926a115dc28317c48fe195aba0716eab07f:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1496.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-1496
     cwe-id: CWE-22
     epss-score: 0.01473
-    epss-percentile: 0.80381
+    epss-percentile: 0.80292
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402206bc94a15a09963312aef0f53c79252c0018426c277c10144db90e8a00f5d1a00022061f5e17aca2fcd37133103fcd31d0206ee0fe0e45ca79be845a1c33fab31429d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022028681f3404a5b4cddf4ae759ff84ca8ce20c689d06706fb0ef1ce309a27f900b022066e25e37ba9412fe25f388b44d0af60122f8845b2ca2864078d8f2158932f075:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1558.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1558
     cwe-id: CWE-22
     epss-score: 0.10881
-    epss-percentile: 0.93106
+    epss-percentile: 0.93052
     cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100aa71cf21b8bfa16631b8c9719b007a297c6b6a6c6e9fa86f3b3ab7f4747f575c0221009b8e5e9a7a942618d0660e0c4b6aeb871b74528815198e5bd34166aa9a0ecaf4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022039aa2e307abbd59b5282da0f7e095a3881e294e837f60d1ac55a786e3d2f92ad022100934a57a6650ab2d22f620ddad1135f9700f90429870b4ce2ecf0a26012205b5b:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
     epss-score: 0.08673
-    epss-percentile: 0.92094
+    epss-percentile: 0.92064
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d0fa3efc652db35584f28d68a2475554d7259065b2d8f7425c02c3792d753a7402203f45a36fa91690a7d05d8e43eafb019606600a600e2ccca0cbf8b37ced00a273:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206310f97fdec0e38822775e99e75927613be27210db9e0a29e4db60636c6ae51a022100ceba849b73e885e56dd6b8ebffd6afdb7c9c7c3c88100cf5f090093e470d80ce:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2015.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-2015
     cwe-id: CWE-22
     epss-score: 0.01674
-    epss-percentile: 0.816
+    epss-percentile: 0.81517
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221009eb5c49c6243fc3ce4a685de2e7a7d6243be1c930eed0b27e4ee98cd10c7b028022100a67065dc347efb33cf04f867ced4faeb33b24ff8df9e2c56d2dbaa22e759506b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207c2576c55f314a48dd3e141751664fa70c1dd2f91f615f50a68c21ea1dc8a21202201e289e4351bb115f7d51baf4374874e46fc0c6451ebe3b6dc2839e175e485ada:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2100.yaml

@@ -18,8 +18,8 @@ info:
     cvss-score: 5
     cve-id: CVE-2009-2100
     cwe-id: CWE-22
-    epss-score: 0.0171
-    epss-percentile: 0.81778
+    epss-score: 0.01877
+    epss-percentile: 0.82534
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210087645b74157dc99978bdd0b660ebaf8c3e614708e20a11c015971d8b6074e4ee022100eba6a92b544be8d2d898ba7583c787a15a6c40c1ee2a81ec695bcf7b019ad2c0:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220578e17d86e638bfe9bc788e50763238f031f8f2966929fdcbb17c5479b08709502204bfe69b32b2d1e29f7614cdb053472c1f427d0bea7b2d405778017803f9613c6:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3053.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2009-3053
     cwe-id: CWE-22
-    epss-score: 0.01432
-    epss-percentile: 0.80118
+    epss-score: 0.01573
+    epss-percentile: 0.80918
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f2a1623fca06a754a93544c84c5550cd3d6cdbdda772d32d02307bc1d9cbf3d002200ddbf80daf1c80d4b2b776683279d0061d6c93bcb8c8e44a4e5421745fc3e427:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210094f40da7a223a4590ae0e05498a0e5149f3d3d80d915c5cdfeea8772fbdfc6d8022010d91bd7f4121b9df88f7e0a6e3fdf20fdde1a78bafe0579d47c2bc81e4cddf1:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3318.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-3318
     cwe-id: CWE-22
     epss-score: 0.01442
-    epss-percentile: 0.80176
+    epss-percentile: 0.80083
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ebabffd58c8048bb1ee23d5b596746523c18fe9024799087b846efb5a69bde900220262b5056c500d55262dae95734be81685d4259aef3e6d44df3cb69d6824deb5f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202cc31533f35d81509f646b20fd986db62a965efc8d4a75e7c3b74366671595df022100d55b8c636142221f1a51aef5e7b2e15157fea40f1cb3dafb2efca13656c8b446:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4202.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4202
     cwe-id: CWE-22
     epss-score: 0.02099
-    epss-percentile: 0.83543
+    epss-percentile: 0.83488
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022037c48b7a924e5dfc2aa3f7e0abb43972720117864d6353774eeb5d68c5e55e38022100c618f13308f6f9cb461938465b98b77378fd5c18099a269bb9f427a49f7e4b2b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203d870eb30ec9ca3a56ca069e3a20ee24cdaebf5d3976cc4182d2020743b0d48202206733a946217a67a1f21cafd3e31db02e9ccf4888aa2150df644bbd21a872ae72:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4223.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4223
     cwe-id: CWE-94
     epss-score: 0.04159
-    epss-percentile: 0.88223
+    epss-percentile: 0.88161
     cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ee16f06c161b764d8cc4d94f08de3102e9e7b1ee76aa297b53497f1eda27b364022040fa45d5d7fd8b13d411ece44d1dd89dcbd590bb2d8cdc160693d9d1de802853:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e062d5b488122414fb0c50f4d5c123e0adeb1e46f11acb5d89e9466e300d9c93022075a429d90bd1cb7f0d4794d8acea63c94675c6f3b78b3d914a1dfaacdaa692b0:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4679.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4679
     cwe-id: CWE-22
     epss-score: 0.23302
-    epss-percentile: 0.95747
+    epss-percentile: 0.95712
     cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100c78a76ddb5e8e44b66160f2f3f9871c1b8220eb1bc9317431b9f988c46ff79dc02210089018218f1aca265a37cb4c5e7c875ae6c9ea03e6b058ff86e7394118623722a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ea856041ddbbbcd430231fe38d4b8480746e6e710e0a9771fbabe31d5fe2fee2022077a2f7df454585f2936ef232ef0c66cdbd26238e34a4e62d536565360921f0cb:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5020.yaml

@@ -17,8 +17,8 @@ info:
     cvss-score: 5.8
     cve-id: CVE-2009-5020
     cwe-id: CWE-20
-    epss-score: 0.00826
-    epss-percentile: 0.73895
+    epss-score: 0.01389
+    epss-percentile: 0.79711
     cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -39,4 +39,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4a0a0047304502205b95db1b06874442ded4de04a3c011a19f3ba4cbe3c3f6d8709dc37dbe71b66b022100b77a9ad53c862518717b2f171d8c8a600ac5018d6e2dc6e51dc2264cb3b11d07:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022065bffed319745b0b2fd2fe00c266833e382453ca49552295029c858bb0f38b1b022059afda8815dd4db0234fc7c18fb056701bb91211e3ba5c04d429884a77c519c6:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5114.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-5114
     cwe-id: CWE-22
     epss-score: 0.26552
-    epss-percentile: 0.96135
+    epss-percentile: 0.96104
     cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220641bc4d65d393b57922555476e8b6869e93ec9e5f6401e76e5416d0f01d7a0ce02201640369204c11428fb64516c8025e0f030db0c8b0850f46b08c495c28a95a791:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a0211c034f35f080126370744c31ac161cece4c07ce2930639029763f7a35d42022100c3b2128829fb5f8592c16aef2c91c6e113752b3eebea277435527ae1d4895bf8:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0157.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2010-0157
     cwe-id: CWE-22
     epss-score: 0.07582
-    epss-percentile: 0.91447
+    epss-percentile: 0.91416
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022039d5110d768426d3bbdfe0a4e66b6392c00b5a4cfc8f85cbcbd72f265c1cafe60220535caf24a57c4371f24e3c5d93bee351a61b2bedf0c7430ee60e54e23105b1ba:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e272bcf0a1ec2611112888a8d1a42d62c6e4178c0e39fe964135fe6ad5c2581b0221009c1ff5d821edb176622da40bb34611656cfb17bcabc91bebaac56a5ba3a0b904:922c64590222798bb761d5b6d8e72950