Updated haproxy

chore: update KEV and vKEV tags and metadata 🤖
chore: update EPSS scores 🤖
2026-11-07 08:36:19 -10:00 · 2026-07-09 12:52:25 +04:00 · 2026-07-09 04:22:04 +00:00 · 2026-07-09 03:01:09 +00:00 · 2026-07-09 00:05:25 +00:00 · 2026-07-09 00:02:42 +00:00
3936 changed files with 13850 additions and 12411 deletions
@@ -16,7 +16,7 @@ jobs:
      contents: write

    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0

@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: projectdiscovery/actions/setup/go@v1
        with:
          go-version: 'stable'
@@ -12,7 +12,7 @@ jobs:
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
      - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7

      - name: Setup Python
        uses: actions/setup-python@v6
@@ -12,7 +12,7 @@ jobs:
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
      - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7

      - name: Setup Python
        uses: actions/setup-python@v6
@@ -18,7 +18,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Generate new addition list
@@ -13,7 +13,7 @@ jobs:
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
      - run: sudo apt-get install tree -y
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: actions/setup-python@v6
        with:
          python-version: "3.8"
@@ -31,7 +31,7 @@ jobs:
        github.event.workflow_run.conclusion == 'success'
      )
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: projectdiscovery/actions/generate/checksum@v1
        with:
          templates-directory: '${{ github.workspace }}'
@@ -14,7 +14,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: projectdiscovery/nuclei-action@v3
        with:
          install-only: true
@@ -38,7 +38,7 @@ jobs:
    runs-on: windows-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7

      - uses: projectdiscovery/nuclei-action@v3
        with:
@@ -8,7 +8,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: projectdiscovery/actions/setup/templateman@v1
        with:
          token: '${{ secrets.PDTEAMX_CLASSIC_PAT }}'
@@ -11,7 +11,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
        with: 
          fetch-depth: 0
      - uses: projectdiscovery/actions/templates/stats@v1
@@ -11,7 +11,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: karancode/[email protected]
        with:
          yamllint_config_filepath: .yamllint
@@ -23,7 +23,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: projectdiscovery/nuclei-action@v3
        with:
          install-only: true
@@ -40,7 +40,7 @@ jobs:
    env:
      HONEYPOT_URL: 'http://honey.scanme.sh'
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
      - uses: dorny/paths-filter@v4
        id: filter
        with:
@@ -10,7 +10,7 @@ jobs:
    if: github.repository == 'projectdiscovery/nuclei-templates'
    steps:
      - name: Check out repository code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7

      - name: Install Python3
        uses: actions/setup-python@v6
@@ -1,18 +1,35 @@
+dns/dns-internal-ip-disclosure.yaml
+http/cves/2026/CVE-2026-10823.yaml
+http/cves/2026/CVE-2026-13731.yaml
+http/cves/2026/CVE-2026-1890.yaml
+http/cves/2026/CVE-2026-22778.yaml
 http/cves/2026/CVE-2026-28496.yaml
+http/cves/2026/CVE-2026-30958.yaml
 http/cves/2026/CVE-2026-34413.yaml
+http/cves/2026/CVE-2026-48282.yaml
+http/cves/2026/CVE-2026-48313.yaml
+http/cves/2026/CVE-2026-48611.yaml
 http/cves/2026/CVE-2026-52815.yaml
+http/cves/2026/CVE-2026-56782.yaml
+http/cves/2026/CVE-2026-8037.yaml
+http/cves/2026/CVE-2026-8383.yaml
+http/cves/2026/cve-2026-44381.yaml
+http/default-logins/dahua/dahua-icc-default-login.yaml
 http/exposed-panels/array-networks-ssl-vpn-panel.yaml
 http/exposed-panels/aruba-via-vpn-panel.yaml
 http/exposed-panels/cradlepoint-gateway-panel.yaml
+http/exposed-panels/ctrlpanel-panel.yaml
 http/exposed-panels/cyberoam-firewall-panel.yaml
 http/exposed-panels/ddwrt-panel.yaml
 http/exposed-panels/ecessa-panel.yaml
 http/exposed-panels/elfiq-panel.yaml
 http/exposed-panels/endian-firewall-panel.yaml
+http/exposed-panels/featherpanel-panel.yaml
 http/exposed-panels/firemon-asset-manager-panel.yaml
 http/exposed-panels/fortinet-fortianalyzer-panel.yaml
 http/exposed-panels/headscale-panel.yaml
 http/exposed-panels/hillstone-ssl-vpn-panel.yaml
+http/exposed-panels/jotty-page-login-panel.yaml
 http/exposed-panels/netgate-pfsenseplus-panel.yaml
 http/exposed-panels/netsweeper-webadmin-panel.yaml
 http/exposed-panels/nuage-networks-vsp-panel.yaml
@@ -21,6 +38,7 @@ http/exposed-panels/peplink-incontrol-panel.yaml
 http/exposed-panels/sangfor-iam-panel.yaml
 http/exposed-panels/sangfor-ngaf-panel.yaml
 http/exposed-panels/silver-peak-edgeconnect-panel.yaml
+http/exposed-panels/sma-opcon-panel.yaml
 http/exposed-panels/smoothwall-firewall-panel.yaml
 http/exposed-panels/sonicwall-analytics-panel.yaml
 http/exposed-panels/sophos-utm-panel.yaml
@@ -31,4 +49,14 @@ http/exposed-panels/ubiquiti-edgerouter-panel.yaml
 http/exposed-panels/unifi-securitygateway-panel.yaml
 http/exposed-panels/wg-easy-panel.yaml
 http/exposed-panels/zywall-usg-panel.yaml
+http/iot/openremote-detect.yaml
+http/misconfiguration/installer/ctrlpanel-installer.yaml
+http/misconfiguration/marimo-auth-bypass.yaml
+http/takeovers/godaddy-parked-domain.yaml
+http/technologies/google-iap-detect.yaml
+http/technologies/tibco-businessworks-detect.yaml
+http/vulnerabilities/weaver/ecology/ecology-execforstr-rce.yaml
+http/vulnerabilities/weaver/weaver-ecology9-doc-list-sqli.yaml
+http/vulnerabilities/weaver/weaver-getemdslist-disclosure.yaml
+javascript/cves/2025/CVE-2025-29635.yaml
 network/misconfig/open-socks-proxy.yaml
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2016-8735
    epss-score: 0.90338
-    epss-percentile: 0.99783
+    epss-percentile: 0.99785
    cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
  metadata:
    shodan-query: product:"tomcat"
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2019-14287
    cwe-id: CWE-755
    epss-score: 0.63917
-    epss-percentile: 0.99116
+    epss-percentile: 0.99123
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -51,4 +51,4 @@ code:
          - '!contains(code_1_response, "root")'
          - 'contains(code_2_response, "root")'
        condition: and
-# digest: 4a0a004730450221008b7652759e3a0b446d9e5f27e8880a4d6efa672dacd7eca98656acb17e23d7ef02207cd48c96bf95624514eb4ec65f96e79a6faafa2818424c777fe389238677d95a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009f95a64653539c27c17d96b8dec42d6a4c345813e34945aec95c8303977ab697022027b0914a15a733ce01ccdace0c37a6e651b2c686144d929736ad3d2254f8e04d:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2020-0646
    cwe-id: CWE-91
    epss-score: 0.99193
-    epss-percentile: 0.99928
+    epss-percentile: 0.99929
    cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
  metadata:
    verified: true
@@ -106,4 +106,4 @@ code:
          - 'contains(content_type, "text/xml")'
          - 'status_code == 200'
        condition: and
-# digest: 4a0a00473045022100eccad2a4c6ba33214a2fd61af3419a0202206939988f5a9a463bc51109ed6c30022028f8883849768324cc702e391fff58786c28efdcac37e13a7df8d438b9f785ec:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207162f761e3d8ddc260f7d3f67120120f8b615d0a94070bd2fad50ba2d30da7c9022100bac50b9c69fbd7c5dad760e65dd37125ee8d8586bdca7fa75f1b0bafd1912d38:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2020-13935
    epss-score: 0.87553
-    epss-percentile: 0.99733
+    epss-percentile: 0.99736
  reference:
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -21,8 +21,8 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2021-3156
    cwe-id: CWE-193
-    epss-score: 0.99305
-    epss-percentile: 0.99932
+    epss-score: 0.99295
+    epss-percentile: 0.99933
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -44,4 +44,4 @@ code:
          - "malloc(): memory corruption"
          - "Aborted (core dumped)"
        condition: and
-# digest: 4a0a00473045022100ee4e55ec161ffc129a270143f04a42df08c773ad1dee1f17e695898c2dec4d2602204850eb20f8c6bb40413d58787b9fd0a6d535b2123b3184d1eb7eb7d51d37a6a1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ab0a7ac942d47cd091d970fb33bf7349e9209b77c786e722f790a2d218f2ca41022100b7848035d28482d955ed57ef2669ef1dfa2b1702be8df9421af1fd6fd469fe2f:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-2640
    cwe-id: CWE-863
    epss-score: 0.15783
-    epss-percentile: 0.96447
+    epss-percentile: 0.96475
    cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ code:
          - '!contains(code_1_response, "(root)")'
          - 'contains(code_2_response, "(root)")'
        condition: and
-# digest: 490a00463044022017961dd7ec4c96dcd04d9678ca14941180f118a7dc05a99fc77782bc2d1814b602203b10b95b9af68a2fb6c0bc6832a478736ea24bb1d854aa197e6eb60186b2144c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206db6fef55e0ea3720c171e24875022bc0c0b28fa1e8929bdb072f45c0ad3e787022100dedf028ad02b954b6ff47a920377b8a14bf24d77342839802e179f408530a0a0:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2023-2986
-    epss-score: 0.42814
-    epss-percentile: 0.98543
+    epss-score: 0.41077
+    epss-percentile: 0.98492
    cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -630,4 +630,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 4b0a004830460221009898146bb177a18905d5c161537dd4a4732ee112f25e6245661293eecea9eade02210087488253133868d9ff6f812f1d8c4c82cc89edc9b16b2474f0f24a793bffdd5f:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204d23bc6ccef12b3347fdbd3ddff22740de748e8fe21616207c13d46631915f94022044d6027dd10783cec3bfa982a825a050cb7c0f93c2bed2d5eb4e8af1e3a432ba:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-49105
    cwe-id: CWE-287
    epss-score: 0.11074
-    epss-percentile: 0.95353
+    epss-percentile: 0.95394
    cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -94,4 +94,4 @@ http:
      - type: dsl
        dsl:
          - '"Username => "+ username'
-# digest: 490a00463044022047524ad9bb5493d188bdf789d5d5ebac77cd8d40ea11f43772ae4b8c5979611202202ef9b6d545871769763a0a6a79bcb7cdf034df212e030e58fc82697902f258f4:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022042a5d3d6ba444a5d13ebc2b14e726017a1a1628d159defe06f1fd784754adf4002207eaaf24acd794eef00b23fc181eed45312960ea935f5c00f5783b5675079f80e:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2023-4911
    cwe-id: CWE-787,CWE-122
-    epss-score: 0.78607
-    epss-percentile: 0.99532
+    epss-score: 0.81422
+    epss-percentile: 0.99594
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ code:
      - type: word
        words:
          - "139"     # Segmentation Fault Exit Code
-# digest: 4a0a00473045022100e8a7b194b80550d6545df0ddd06e20152b823146ccf227cef8b2742048e059c3022015aff149f9b6a347c7dd0be5d0fc05e25b36534e7cb93bd1a2c0e645f3336402:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100eebfe3b3bef10d31b6567c5d98fe4ff8a29196ae0bb28b40997cb38a0ac6750202202102070abe91d318e863d75b536aeb56a24ce2adfa23f0e2170cb9a4fad316e4:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-6246
    cwe-id: CWE-787,CWE-122
    epss-score: 0.04794
-    epss-percentile: 0.90792
+    epss-percentile: 0.9087
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ code:
      - type: word
        words:
          - "127"     # Segmentation Fault Exit Code
-# digest: 490a004630440220625a996673777798cbd94f1b0ed27962514b066349ec886cc7038676c7468cf702204e847e4945bbcea56a9db36a284e9aa22bb974ea96a13ac9eb13ca12f54661cc:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220159eaaa8ffa7ab7226c8015d7e96ddb3267c41b3e684a1ee2d99321f3182fbf9022100e0597ce6c9a0432c3168a1210aefa6b239b053a6b3e6a764e11e7ed807026e7d:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-10443
    cwe-id: CWE-77
    epss-score: 0.2838
-    epss-percentile: 0.97875
+    epss-percentile: 0.97889
    cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
  metadata:
    verified: true
@@ -58,4 +58,4 @@ code:
        part: interactsh_protocol # Confirms the HTTP Interaction
        words:
          - "dns"
-# digest: 490a00463044022057e9456d787ed158a7b54b8cbac5636104dd4ce7c728bd38f99b07d96ab72280022026e76bf9008afc4609f62ff76806034050dd5e1fccbbc316bfced387f826be51:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207859036fd3efae7fa01fa07b35bf51d43362e12a6a70c185927e3b4751f9375e022100e79b6014d8afb56f5d2a7270963654a1992cfdc281dba772364157f3fd93b60c:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-12356
    cwe-id: CWE-77
    epss-score: 0.87991
-    epss-percentile: 0.99744
+    epss-percentile: 0.99746
    cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
  metadata:
    vendor: beyondtrust
@@ -41,4 +41,4 @@ code:
        words:
          - "0 success"
          - "1 try again later"
-# digest: 4b0a00483046022100dad53e71d898efe278cb96c7a8f916c7df5127bd1624470107bc47d2f4076931022100e15e551bcc537c2db9e5e06c00b5ed6a5507fb11fdacb7b37bbf32440e82a8a5:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210083c79d1d50a22879901fd6304689af4b01f5e9189138c99116c68b6810bb64ee022100b7f44a0aa7ad267068a405202a4842632130902be81b54fb4517952b052035ec:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-22120
    cwe-id: CWE-20
    epss-score: 0.76618
-    epss-percentile: 0.9948
+    epss-percentile: 0.99487
  metadata:
    max-request: 1
    vendor: zabbix
@@ -73,4 +73,4 @@ code:
      - type: word
        words:
          - "Vulnerable to CVE-2024-22120"
-# digest: 4a0a0047304502204375b4c1cb0c772e044ccd6c8ad2ca266141628c16f72ccedb943f1bb6186a73022100aec4e509e58c61a481482aa3a13d391b7871c2a79f13116ce220662974176cee:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c902d7f86bee439e59b7b2480e16fbbf6240b8134c9edd1880769ffd79e23e43022100c956593926cefeeaeecb478bb0b1428fbc47c4b2d6ac5e036a9e34db5f029dcc:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-3094
    cwe-id: CWE-506
    epss-score: 0.85974
-    epss-percentile: 0.99701
+    epss-percentile: 0.99702
    cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -63,4 +63,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 490a004630440220409843f3c4227eb2874f480d91239fcc4fb4e2356826b0a808b3ef487492b31502204cfb75238d2071641a23d14fe39d11b0ec92a16c896d064f8d44a591befba1b9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ffc100ac65c04f91487e3a92e982153a428d575f636e7847511d7c569e2d5d0a022001e1eaa3c0b5a529a7d2c6987c22c324b74c07e410a64fffc0a85f5150dd0a3b:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2024-4340
    epss-score: 0.0321
-    epss-percentile: 0.8653
+    epss-percentile: 0.86643
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
  tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
        part: stderr
        words:
          - "RecursionError: maximum recursion depth exceeded"
-# digest: 4b0a00483046022100c8d5a08432fc5221fc48fe4a5c6c0ddce85b80a9cebb38e6890bb6393c09921402210080f03dedbc51a449d031e23d27a7b540c392517ab50089b4b334e4bcd60bfa90:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d25e4a13b66e18a70793db50686b8963280b7dc7e988a3480bea6d5700ed191e022032a5a86d1d784015c036d4cc9c56755d26cfdbd5ba7223124c81d91aa37f3d30:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2024-45409
    cwe-id: CWE-347
    epss-score: 0.10684
-    epss-percentile: 0.95239
+    epss-percentile: 0.95276
  metadata:
    verified: true
    shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 4a0a00473045022100d0e34c75fd1cd486b28d19004e21d6e0e86cc9443171cdf56e0b680f032b2139022039fde3650a65a9d28b6de7b88e83afca2d28a8f44803985965bce73585972b2c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206fa8f842163f2c409cca1ad291289aca760f9c937aa5f71b1bef63d521082192022100e5a05953d273f8d6e701f1334125461737f1656477e849d32109115c11f4c577:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2024-47575
    cwe-id: CWE-306
    epss-score: 0.94761
-    epss-percentile: 0.99847
+    epss-percentile: 0.99848
    cpe: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
  tags: cve,cve2024,fortinet,fortimanager,kev,rce,vkev

@@ -147,4 +147,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a004730450221009ff2eb818d3514fd57559f613b9953e97133176a57d99af1f70cdbecad565723022076dd110700ff379fc550b04abe862e1ba6e301b9aa75c5f66b76f6ea9758fb4a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bed3e3eac534344fdb763ef3650cf423ad0ba9827c6bc423e77126ae52bd5816022078f4486cd95a931d57112679778f82328cc62dd2598ac4a2af264495347691a4:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2024-55556
    cwe-id: CWE-502
    epss-score: 0.4356
-    epss-percentile: 0.98567
+    epss-percentile: 0.98582
  metadata:
    verified: true
    max-request: 2
@@ -195,4 +195,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a0047304502201682167b1d1ff3836a5ced144c478e4170cad5e0a42c5c8bf4a9af1aa1f1c08e022100872d2a7d4549f026cc5d2d6c21a26f7c200a065400ecb79e17cf05a5e3388cb0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207a771388c0c447bd8a872e34fdcb4c20f7a2e794dd7e3f21eee486acb68449e7022100c62bfe32aedec00d572eaf40222eea80573c4718a6b72b3c944e29de1d0449f3:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-56331
    cwe-id: CWE-22
    epss-score: 0.01793
-    epss-percentile: 0.75574
+    epss-percentile: 0.75773
  metadata:
    verified: true
    shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
      - type: word
        words:
          - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4b0a00483046022100bb9d78275a20ce73363e579946bbb8a233b8bab5b5d97a1b433dbb3200412fe00221009e56c233f03433112237803d6c5f035858b996431cdf64e4b86d8d68d4a0674d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022058dd549617610fd70c3bef78c51b60e727f9ba8a96482936f4d5eb44d3ad3ce2022072257ae6937461320bf62848f0e8885bc06e2add58fb576e39cfabda45b5fad5:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    - https://github.com/advisories/GHSA-g83h-4727-5rpv
  classification:
    epss-score: 0.22443
-    epss-percentile: 0.97391
+    epss-percentile: 0.97411
  metadata:
    verified: true
    shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
      - type: kval
        kval:
          - user_session
-# digest: 4a0a00473045022100935d6accf76e496c1a45bfebb14c276a95dccdc57506400db85b57a1acc258c00220702414d1ca7c7656c30cbfb6a8de3692d791590c6790ccb4b66d54b23e8aa456:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202e72afd0230955ea7101f82008388d9b886b3c2fb3dc41ec592f3e3f14d0a83a02210096e9bd166ef3522b5cc8c16b9820ddb639cf66363c22c7811aaccb30687e75eb:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    - https://towerofhanoi.it/writeups/cve-2025-1550/
  classification:
    epss-score: 0.02803
-    epss-percentile: 0.84642
+    epss-percentile: 0.84774
  metadata:
    max-request: 1
  tags: cve,cve2025,code,keras,rce,ml
@@ -77,4 +77,4 @@ code:
        part: response
        regex:
          - "root:.*:0:0:"
-# digest: 4b0a00483046022100e95dcb40df1aa99dcb6f3e482549be6b3cbe00f4ab9ae83a7a49a9a228d31b14022100bc7629bd6fe3649ba37f8435e5827aaedbe4bfc0d7584437b7e14a26038f8055:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220397b16b7852b80eff0d9833cb912c5f17137b1ca151ef9e330a544b5df96bfab0220474718d09cac82ed59bb2e36d23e7d638f5f87813fe2e52bd44c5e0c2526472c:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 9.0
    cve-id: CVE-2025-22457
    cwe-id: CWE-121,CWE-787
-    epss-score: 0.99973
-    epss-percentile: 0.99978
+    epss-score: 0.99979
+    epss-percentile: 0.9998
    cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
  metadata:
    vendor: ivanti
@@ -164,4 +164,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 490a0046304402207cc93451889af0b6c41b0540c7bf1f5814d9962b04b3834885913368c3492a150220096155140f4dd04ee27eac8742bff5f1ee5f87be35dafc94c2b4ca1e9d357fbd:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f71fdb80c77ca24cef2f96ac08cf4cad6896dd9385dcaa60e668b360c8997c4e022040a004ffc2b7df64105151be54efe6b70cb5dba83fea11da5aa9b5edc1738f0e:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2025-25291
    cwe-id: CWE-347
    epss-score: 0.19506
-    epss-percentile: 0.97022
+    epss-percentile: 0.97043
  metadata:
    verified: true
    vendor: gitlab
@@ -80,4 +80,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 4b0a00483046022100b87e591b1d3c66d483f395ed216c3c74e9572eb74057f244c0efe53ac3a3be8b022100e7c499641bea1345896de68dbbcd757a859e6ccbde46703265123e7f26dc1608:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e2c601dd7e8539fb1cd1a8d57d50bf4220717095b09e8f5129be02d8af437b69022045bb134b59416d6d526a7d108e5741aae74c2b9a5259c6dbf3b550a003fa84ee:922c64590222798bb761d5b6d8e72950
@@ -22,8 +22,8 @@ info:
    cvss-score: 10
    cve-id: CVE-2025-32433
    cwe-id: CWE-306
-    epss-score: 0.97673
-    epss-percentile: 0.99896
+    epss-score: 0.97859
+    epss-percentile: 0.999
  metadata:
    verified: true
    max-request: 1
@@ -174,4 +174,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 490a0046304402204d0bd20e92f8a759f723de3653d04ebbff4d8f462e0f90cda49437f31374b61e022060d26fb848572bd62eb97dca505e3b84e5d8d7ca79d73a8835775736397a6c80:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022021be3e9059264c8820581780565b16fca2ac96911af9f2c90cfe41d5efa21d01022046d1be1a59699ebe8ad15c0ead0bbd72fbc528d106d41a32e27412a85972985d:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
  classification:
    cve-id: CVE-2025-32463
    epss-score: 0.47467
-    epss-percentile: 0.98689
+    epss-percentile: 0.98699
    cvss-score: 9.3
    cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    cwe-id: CWE-426
@@ -64,4 +64,4 @@ code:
          - "!contains(tolower(response), 'password')"
          - "!contains(tolower(response), 'a password is required')"
          - "!contains(tolower(response), 'is not in the sudoers file')"
-# digest: 4b0a00483046022100d14a0cd54cbf6349991088574355589a2a5de28e6b1a43cca20dce2bb712ff8e022100c5eb5d44f5a63cdb2d853e2a797889b9015d8c9258158f1c8c79bae59784c678:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220136e0b750d94d77ac44ebd9c17cc4b63caefb98466cd8cfaf60285a02339b91c0220283634be0c9a783f5ed4b917983d4e860fc588e568f3b876e4cc5832c75e337c:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-54309
    epss-score: 0.92034
-    epss-percentile: 0.99806
+    epss-percentile: 0.99807
    cwe-id: CWE-287,CWE-362
    cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*
  metadata:
@@ -200,4 +200,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4a0a00473045022055352c05dec3789f7e9727f546be71effdb0184ea6990516e5b58c0b3c71bda8022100944ffff07ce80db77c7052a1dd4539cf8894bd142d83fe779ef647c72de5be30:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e8682f6eb18cc49cd7ed9946e1e0df3225844789666f622234e0b55ce31f1ded022100fc067931b6b02b90f0d072f19a5e3a400dfb0a842bdedb8cd71da31370ce3cc1:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
  classification:
    epss-score: 0.29434
-    epss-percentile: 0.97939
+    epss-percentile: 0.97955
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
      - type: dsl  # type of the extractor
        dsl:
          - '"Reset URL: " + code_response'
-# digest: 490a0046304402206ee9c64213301732fc870244153dc11b35cddebfb5890ecde4819375cf1f43f00220343f686209554c149ac5f335873f1cb37e75e21d36d1a7d47918dd495eb6defe:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009563513650966d7597d5c8a5a46d49fcc84fef8e698e57b330209c7771a59eb2022100d88d01c549b914a0710335ce592d29c7af52323cd856699f6780c90afc140b37:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-68926
    epss-score: 0.2903
-    epss-percentile: 0.97912
+    epss-percentile: 0.9793
    cwe-id: CWE-798
  metadata:
    verified: true
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2025-6984
    epss-score: 0.01531
-    epss-percentile: 0.71513
+    epss-percentile: 0.71736
    cwe-id: CWE-200
  metadata:
    verified: true
@@ -64,4 +64,4 @@ code:
          - "bin:"
          - "daemon:"
        condition: or
-# digest: 4a0a0047304502200a7fd06e872b0dfdaa3ade38f9e5680100c00262c79b0d18506d4fba1b212f3a022100fda4d3900532617a4ba9b7c29952bb0e7ce20753d05462aa38e7b603ff05156f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b09735eee11bf2f17bfa345f0063b39ae6aa19e66bf2bc5fb1daefffced2bcd3022100a9c2a04c4d2d7a5beee4a942bcf043c172b2c2f2a5b4fb55dc326a0ee36dcd98:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2025-9242
    cwe-id: CWE-787,CWE-362
    epss-score: 0.8637
-    epss-percentile: 0.99707
+    epss-percentile: 0.99709
    cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -552,4 +552,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a00473045022100bf6ad6e198e756da72a135da864596725fcc8cce2d2e04610758ff49c9c568ad02200cb080eb94b9b8f80e0760ca1828208c732fe54f3afd65143bc8096890f48cec:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207c5ec28507f297a730ae76ad5a6b684be07faadc08f975366ca089b08c207a630221008561c1d8f9122d261eb8d36e7a7343f7a89fb8881769d1027bb4ea62bc10cea7:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 8.1
    cve-id: CVE-2026-10795
-    epss-score: 0.0298
-    epss-percentile: 0.8553
+    epss-score: 0.03578
+    epss-percentile: 0.88
    cwe-id: CWE-347
  metadata:
    max-request: 2
@@ -85,4 +85,4 @@ http:
          - 'status_code == 200'
          - 'contains(body, "\"udrpc_message\":\"")'
        condition: and
-# digest: 4a0a004730450220410794e74d46a7285de664f493809c5e5cc2a7490d6afab8562a3aa0d906cce6022100ee04cf5546ce63d7d0ad15a7b5aac2f17ad1922cedc7ade3558a0a65b45bc084:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a881b582fed632f80412c76035e841db6494221b4f102f999bad2faddc3da3fb02204c4daa0834d7e0f354be0bab3c44eceafe0a2bd76d77e86fa6fcdd94188ae214:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 10.0
    cve-id: CVE-2026-20182
    epss-score: 0.87693
-    epss-percentile: 0.99736
+    epss-percentile: 0.99738
    cwe-id: CWE-287
    cpe: cpe:2.3:a:cisco:catalyst_sd-wan_controller:*:*:*:*:*:*:*:*
  metadata:
@@ -272,4 +272,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4a0a00473045022072e0e456e85bc66d4efe98edbcfb9eeb7c4ff96c9a6856d61fa98a88205f6b73022100b1f4e286fe3115a4556345bb3b76ab88db473680f981f04b622a0d38fa92f39a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220127e8b7b1bd730a8383479424cc229fed8fac958ae28c20c10d456bf9d083e38022100c4851e5ca05359bac2cd2824c20fb649a60295365f456fb3b4bbd7025a24d7b4:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 7.8
    cve-id: CVE-2026-31431
-    epss-score: 0.96775
-    epss-percentile: 0.99879
+    epss-score: 0.96267
+    epss-percentile: 0.9987
    cwe-id: CWE-787
    cpe: cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  metadata:
@@ -139,4 +139,4 @@ code:
        part: response
        regex:
          - 'VULNERABLE:.*'
-# digest: 490a0046304402204f0f2b7df2712ee4109d81227b92aaef6f783ebb4a2fe2b5a675a75935bc3dea022040a7f5f092659d38165a4cc61c74c60c207bee29e9b2791120423e6d9dd385b0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e058f2d5f55fad7a3fb789ff8f71e2fd5aa4ca8c22c1322f282bf8b2e00f6bf202204f95658677e444614a29df15e5f9a0d0d33bd6a0be8bcdc67189762700ed4455:922c64590222798bb761d5b6d8e72950
@@ -155,7 +155,7 @@
 {"ID":"CVE-2010-3426","Info":{"Name":"Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion","Severity":"high","Description":"A directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-3426.yaml"}
 {"ID":"CVE-2010-4231","Info":{"Name":"Camtron CMNC-200 IP Camera - Directory Traversal","Severity":"high","Description":"The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system.","Classification":{"CVSSScore":"7.8"}},"file_path":"http/cves/2010/CVE-2010-4231.yaml"}
 {"ID":"CVE-2010-4239","Info":{"Name":"Tiki Wiki CMS Groupware 5.2 - Local File Inclusion","Severity":"critical","Description":"Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2010/CVE-2010-4239.yaml"}
-{"ID":"CVE-2010-4282","Info":{"Name":"phpShowtime 2.0 - Directory Traversal","Severity":"high","Description":"Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-4282.yaml"}
+{"ID":"CVE-2010-4282","Info":{"Name":"Pandora Fms \u003c 3.1.1 - Directory Traversal","Severity":"high","Description":"Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-4282.yaml"}
 {"ID":"CVE-2010-4617","Info":{"Name":"Joomla! Component JotLoader 2.2.1 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.","Classification":{"CVSSScore":"6.8"}},"file_path":"http/cves/2010/CVE-2010-4617.yaml"}
 {"ID":"CVE-2010-4719","Info":{"Name":"Joomla! Component JRadio - Local File Inclusion","Severity":"high","Description":"A directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-4719.yaml"}
 {"ID":"CVE-2010-4769","Info":{"Name":"Joomla! Component Jimtawl 1.0.2 - Local File Inclusion","Severity":"high","Description":"A directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly unspecified other impacts via a .. (dot dot) in the task parameter to index.php.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-4769.yaml"}
@@ -3163,7 +3163,7 @@
 {"ID":"CVE-2024-31982","Info":{"Name":"XWiki \u003c 4.10.20 - Remote code execution","Severity":"critical","Description":"XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-31982.yaml"}
 {"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
 {"ID":"CVE-2024-32114","Info":{"Name":"Apache ActiveMQ 6.x \u003c 6.1.2 - Broken Access Control","Severity":"high","Description":"Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-32114.yaml"}
-{"ID":"CVE-2024-32128","Info":{"Name":"WordPress Realtyna Organic IDX Plugin \u003c= 4.14.4 - Unauthenticated SQL Injection","Severity":"critical","Description":"The Realtyna Organic IDX plugin plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.14.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32128.yaml"}
+{"ID":"CVE-2024-32128","Info":{"Name":"WordPress Realtyna Organic IDX Plugin \u003c= 4.14.4 - SQL Injection","Severity":"critical","Description":"The Realtyna Organic IDX plugin plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.14.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32128.yaml"}
 {"ID":"CVE-2024-32231","Info":{"Name":"Stash \u003c 0.26.0 - SQL Injection","Severity":"critical","Description":"Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32231.yaml"}
 {"ID":"CVE-2024-32238","Info":{"Name":"H3C ER8300G2-X - Password Disclosure","Severity":"critical","Description":"H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32238.yaml"}
 {"ID":"CVE-2024-3231","Info":{"Name":"Popup4Phone \u003c= 1.3.2 - Unauthenticated Stored Cross-Site Scripting","Severity":"medium","Description":"Popup4Phone WordPress plugin through 1.3.2 contains a reflected cross-site scripting caused by unsanitized parameters, letting unauthenticated users execute scripts in admin browsers, exploit requires sending crafted requests.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-3231.yaml"}
@@ -3746,6 +3746,7 @@
 {"ID":"CVE-2025-46554","Info":{"Name":"XWiki REST API - Attachments Disclosure","Severity":"high","Description":"A vulnerability in XWiki's REST API allows unauthenticated users to access attachments list and metadata through the attachments endpoint. This could lead to disclosure of sensitive information stored in attachments metadata.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-46554.yaml"}
 {"ID":"CVE-2025-46565","Info":{"Name":"Vite Dev Server - Information Exposure","Severity":"medium","Description":"Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. Only files that are under project root and are denied by a file matching pattern can be bypassed. `server.fs.deny` can contain patterns matching against files (by default it includes .env, .env.*, *.{crt,pem} as such patterns). These patterns were able to bypass for files under `root` by using a combination of slash and dot (/.). This issue has been patched in versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-46565.yaml"}
 {"ID":"CVE-2025-46822","Info":{"Name":"Java-springboot-codebase 1.1 - Arbitrary File Read","Severity":"high","Description":"OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-46822.yaml"}
+{"ID":"CVE-2025-47188","Info":{"Name":"Mitel 6000 - OS Command Injection","Severity":"critical","Description":"A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. This template should be run on port 49249/tcp.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-47188.yaml"}
 {"ID":"CVE-2025-47204","Info":{"Name":"Bootstrap Multiselect \u003c= 1.1.2 - Cross-Site Scripting","Severity":"medium","Description":"A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF).\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-47204.yaml"}
 {"ID":"CVE-2025-47423","Info":{"Name":"Personal Weather Station Dashboard 12 - Directory Traversal","Severity":"high","Description":"Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.\n","Classification":{"CVSSScore":"5.8"}},"file_path":"http/cves/2025/CVE-2025-47423.yaml"}
 {"ID":"CVE-2025-47445","Info":{"Name":"WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download","Severity":"high","Description":"Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-47445.yaml"}
@@ -3919,6 +3920,7 @@
 {"ID":"CVE-2026-0926","Info":{"Name":"Prodigy Commerce \u003c= 3.3.0 - Local File Inclusion","Severity":"critical","Description":"Prodigy Commerce WordPress plugin \u003c= 3.2.9 contains a local file inclusion caused by improper sanitization of 'parameters[template_name]' parameter, letting unauthenticated attackers include and execute arbitrary files remotely.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-0926.yaml"}
 {"ID":"CVE-2026-10520","Info":{"Name":"Ivanti Sentry - OS Command Injection","Severity":"critical","Description":"An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-10520.yaml"}
 {"ID":"CVE-2026-10580","Info":{"Name":"Hippoo Mobile App for WooCommerce \u003c= 1.9.4 - Authentication Bypass to Admin Account Takeover","Severity":"critical","Description":"Hippoo Mobile App for WooCommerce WordPress plugin \u003c= 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-10580.yaml"}
+{"ID":"CVE-2026-10823","Info":{"Name":"YMC Filter WordPress - Unauthenticated Post Disclosure","Severity":"high","Description":"YMC Filter WordPress plugin \u003c 3.11.3 contains a broken access control vulnerability caused by improper authorization and lack of validation in a REST API endpoint, letting unauthenticated attackers retrieve private and non-public post content, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-10823.yaml"}
 {"ID":"CVE-2026-1207","Info":{"Name":"Django RasterField - SQL Injection","Severity":"high","Description":"Django \u003c 6.0.2, \u003c 5.2.11, and \u003c 4.2.28 contains a SQL injection caused by improper sanitization of the band index parameter in RasterField on PostGIS, letting remote attackers inject SQL, exploit requires crafted input.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-1207.yaml"}
 {"ID":"CVE-2026-1277","Info":{"Name":"URL Shortify \u003c= 1.12.1 - Open Redirect","Severity":"medium","Description":"The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites via a crafted link.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2026/CVE-2026-1277.yaml"}
 {"ID":"CVE-2026-1296","Info":{"Name":"Frontend Post Submission Manager Lite \u003c= 1.2.7 - Open Redirect","Severity":"medium","Description":"The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, and including, 1.2.7 due to insufficient validation on the 'requested_page' POST parameter in the verify_username_password function. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action such as clicking on a link.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-1296.yaml"}
@@ -3931,6 +3933,7 @@
 {"ID":"CVE-2026-1557","Info":{"Name":"WP Responsive Images \u003c= 1.0 - Arbitrary File Read","Severity":"high","Description":"WP Responsive Images plugin for WordPress \u003c= 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-1557.yaml"}
 {"ID":"CVE-2026-1581","Info":{"Name":"wpForo Forum \u003c= 2.4.14 - SQL Injection","Severity":"critical","Description":"wpForo Forum WordPress plugin \u003c= 2.4.14 contains a time-based SQL injection caused by insufficient escaping of the 'wpfob' parameter, letting unauthenticated attackers extract sensitive database information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-1581.yaml"}
 {"ID":"CVE-2026-1603","Info":{"Name":"Ivanti Endpoint Manager - Authentication Bypass","Severity":"high","Description":"Ivanti Endpoint Manager \u003c 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-1603.yaml"}
+{"ID":"CVE-2026-1890","Info":{"Name":"LeadConnector \u003c 3.0.22 - Unauthenticated Arbitrary Data Write","Severity":"medium","Description":"LeadConnector WordPress plugin \u003c 3.0.22 contains a broken access control caused by missing authorization in a REST route, letting unauthenticated attackers overwrite existing data remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-1890.yaml"}
 {"ID":"CVE-2026-20079","Info":{"Name":"Cisco Secure Firewall Management Center - Authentication Bypass","Severity":"critical","Description":"Cisco Secure Firewall Management Center Software contains an authentication bypass caused by improper system process creation at boot, letting unauthenticated remote attackers execute scripts and gain root access, exploit requires crafted HTTP requests.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-20079.yaml"}
 {"ID":"CVE-2026-2025","Info":{"Name":"Mail Mint \u003c 1.19.5 - Unauthenticated Email Disclosure","Severity":"high","Description":"Mail Mint WordPress plugin \u003c 1.19.5 contains an information disclosure vulnerability caused by lack of authorization in a REST API endpoint, letting unauthenticated users retrieve email addresses of blog users, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-2025.yaml"}
 {"ID":"CVE-2026-20253","Info":{"Name":"Splunk Enterprise \u0026 Cloud Platform - Unrestricted File Upload","Severity":"critical","Description":"In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.3 and 10.2.2510.14, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.\u003cbr\u003e\u003cbr\u003eThe vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-20253.yaml"}
@@ -3945,6 +3948,7 @@
 {"ID":"CVE-2026-22557","Info":{"Name":"UniFi Network Application - Path Traversal","Severity":"critical","Description":"UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-22557.yaml"}
 {"ID":"CVE-2026-2262","Info":{"Name":"Easy Appointments \u003c= 3.12.21 - Information Disclosure","Severity":"high","Description":"Easy Appointments WordPress plugin \u003c= 3.12.21 contains a sensitive information exposure caused by an unauthenticated REST API endpoint /wp-json/wp/v2/eablocks/ea_appointments/ registered with permission_callback allowing unrestricted access, letting unauthenticated attackers extract sensitive customer appointment data.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-2262.yaml"}
 {"ID":"CVE-2026-22739","Info":{"Name":"Spring Cloud Config Server - Path Traversal","Severity":"high","Description":"Spring Cloud 3.1.x \u003c 3.1.13, 4.1.x \u003c 4.1.9, 4.2.x \u003c 4.2.3, 4.3.x \u003c 4.3.2, and 5.0.x \u003c 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-22739.yaml"}
+{"ID":"CVE-2026-22778","Info":{"Name":"vLLM 0.8.3 - 0.14.0 - Information Disclosure","Severity":"critical","Description":"vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-22778.yaml"}
 {"ID":"CVE-2026-22812","Info":{"Name":"OpenCode \u003c 1.0.216 - Unauthenticated Remote Code Execution","Severity":"high","Description":"OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying server.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-22812.yaml"}
 {"ID":"CVE-2026-23482","Info":{"Name":"Blinko \u003c 1.8.4 - Path Traversal","Severity":"high","Description":"Blinko \u003c 1.8.4 contains a path traversal vulnerability caused by lack of permission checks and filtering on the temp/ path in the file server endpoint, letting unauthorized attackers read arbitrary files including backup files with user notes and tokens, exploit requires no special privileges.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-23482.yaml"}
 {"ID":"CVE-2026-23483","Info":{"Name":"Blinko \u003c= 1.8.3 - Path Traversal via /plugins","Severity":"medium","Description":"Blinko \u003c= 1.8.3 contains a path traversal caused by improper path concatenation without verification in the plugin file server endpoint, letting remote attackers access arbitrary files, exploit requires network access.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-23483.yaml"}
@@ -3991,6 +3995,7 @@
 {"ID":"CVE-2026-3055","Info":{"Name":"Citrix NetScaler SAML IDP - Memory Overread","Severity":"critical","Description":"NetScaler ADC and NetScaler Gateway contain an insufficient input validation vulnerability when configured as a SAML IDP, leading to memory overread, letting attackers potentially access sensitive memory, exploit requires configuration as SAML IDP\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-3055.yaml"}
 {"ID":"CVE-2026-30824","Info":{"Name":"Flowise - NVIDIA NIM Endpoints Missing Authentication","Severity":"high","Description":"Flowise is a drag \u0026 drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router (/api/v1/nvidia-nim/*) is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generation endpoints.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-30824.yaml"}
 {"ID":"CVE-2026-30928","Info":{"Name":"Glances - Information Disclosure","Severity":"high","Description":"Glances \u003c 4.5.1 contains an information disclosure vulnerability caused by unfiltered exposure of sensitive configuration data via the /api/4/config REST API endpoint, letting remote attackers access credentials, exploit requires API access.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-30928.yaml"}
+{"ID":"CVE-2026-30958","Info":{"Name":"OneUptime \u003c 10.0.21 - Path Traversal","Severity":"high","Description":"OneUptime \u003c 10.0.21 contains a path traversal caused by unsanitized componentName parameter in /workflow/docs/:componentName endpoint, letting unauthenticated attackers read arbitrary files from the server filesystem.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2026/CVE-2026-30958.yaml"}
 {"ID":"CVE-2026-31807","Info":{"Name":"SiYuan \u003c= v3.5.9 - SVG Animate Element XSS","Severity":"medium","Description":"SiYuan \u003c= v3.5.9 contains a reflected XSS caused by insufficient SVG sanitization allowing SVG animation elements to inject executable JavaScript in /api/icon/getDynamicIcon endpoint, letting unauthenticated attackers execute scripts.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-31807.yaml"}
 {"ID":"CVE-2026-31809","Info":{"Name":"SiYuan \u003c= v3.5.9 - Cross Site Scripting","Severity":"medium","Description":"SiYuan v3.5.10 contains a reflected XSS caused by improper sanitization of javascript: href attributes allowing ASCII control characters to bypass prefix checks in SVG sanitizer, letting unauthenticated attackers execute JavaScript via /api/icon/getDynamicIcon.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-31809.yaml"}
 {"ID":"CVE-2026-31816","Info":{"Name":"Budibase - Authentication Bypass","Severity":"critical","Description":"Budibase \u003c= 3.31.4 contains an authentication bypass caused by unanchored regex in authorized() middleware matching webhook path patterns in query strings, letting unauthenticated remote attackers access any server-side API endpoint, exploit requires crafted request with webhook pattern in URL.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2026/CVE-2026-31816.yaml"}
@@ -4066,6 +4071,9 @@
 {"ID":"CVE-2026-47670","Info":{"Name":"DbGate - Remote Code Execution via Dynamic Import Bypass","Severity":"critical","Description":"DbGate versions \u003c= 7.1.8 are vulnerable to authenticated remote code execution via the POST /runners/load-reader endpoint. The functionName parameter is directly interpolated into a JavaScript code template without sanitization. The require=null mitigation is bypassed via dynamic import().\n","Classification":{"CVSSScore":"9.4"}},"file_path":"http/cves/2026/CVE-2026-47670.yaml"}
 {"ID":"CVE-2026-47717","Info":{"Name":"FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure","Severity":"high","Description":"FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates\na valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device configs, HMI views, and alarm definitions.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-47717.yaml"}
 {"ID":"CVE-2026-4810","Info":{"Name":"Google ADK-Python - Unauthenticated Builder Endpoint","Severity":"critical","Description":"Google Agent Development Kit (ADK) 1.7.0 through 1.28.1 and 2.0.0a1 through 2.0.0a2 on Python (OSS), Cloud Run, and GKE contains a code injection and missing authentication vulnerability, letting unauthenticated remote attackers execute arbitrary code on the server, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-4810.yaml"}
+{"ID":"CVE-2026-48282","Info":{"Name":"Adobe ColdFusion - RDS Arbitrary File Write","Severity":"critical","Description":"ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated attackers to write arbitrary files when RDS is enabled with authentication disabled. Exploitation of this issue does not require user interaction. Scope is changed.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-48282.yaml"}
+{"ID":"CVE-2026-48313","Info":{"Name":"ColdFusion - Path Traversal","Severity":"high","Description":"ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read and limited write access. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-48313.yaml"}
+{"ID":"CVE-2026-48611","Info":{"Name":"phpBB \u003c 3.3.17 - Authentication Bypass","Severity":"critical","Description":"phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the auth_provider query parameter to \"apache\", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts the Basic authentication header username without password verification, as it assumes Apache handles authentication upstream.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-48611.yaml"}
 {"ID":"CVE-2026-48710","Info":{"Name":"Starlette - Improper Validation of Unsafe Equivalence in Input","Severity":"critical","Description":"A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on request.url for validation could be bypassed, potentially allowing unauthorized access or actions.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-48710.yaml"}
 {"ID":"CVE-2026-48907","Info":{"Name":"Joomla! JCE extension \u003c 2.9.99.5 unauthenticated RCE","Severity":"critical","Description":"Joomla JCE editor extension contains an unrestricted file upload vulnerability caused by allowing unauthenticated users to create new editor profiles, letting attackers upload and execute PHP code remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-48907.yaml"}
 {"ID":"CVE-2026-49777","Info":{"Name":"WordPress Product Slider Pro for WooCommerce \u003c 3.5.4 - Supply Chain Backdoor RCE","Severity":"critical","Description":"Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-49777.yaml"}
@@ -4081,18 +4089,22 @@
 {"ID":"CVE-2026-54236","Info":{"Name":"vLLM \u003c= 0.23.0 - Anthropic Router Heap Address Information Leak","Severity":"medium","Description":"vLLM \u003c= 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitize_message to the OpenAI router but the Anthropic-compatible router (/v1/messages) echoes str(exc) directly.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-54236.yaml"}
 {"ID":"CVE-2026-55592","Info":{"Name":"Dashy \u003c= 4.3.6 - Reflected XSS via Workspace","Severity":"medium","Description":"Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the context of the Dashy origin.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-55592.yaml"}
 {"ID":"CVE-2026-5615","Info":{"Name":"VvvebJs \u003c= 2.0.5 - Cross-Site Scripting","Severity":"medium","Description":"Givanz Vvvebjs \u003c= 2.0.5 contains a stored XSS caused by manipulation of the \"uploadAllowExtensions\" argument in upload.php File Upload Endpoint, letting remote attackers execute scripts, exploit requires crafted input.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-5615.yaml"}
+{"ID":"CVE-2026-56782","Info":{"Name":"Gorse \u003c 0.5.10 - Unauthenticated Database Dump","Severity":"critical","Description":"Gorse \u003c 0.5.10 contains an authentication bypass caused by empty admin_api_key in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty admin_api_key configuration.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-56782.yaml"}
 {"ID":"CVE-2026-5718","Info":{"Name":"Drag and Drop Multiple File Upload - CF7 \u003c= 1.3.9.6 - Remote Code Execution","Severity":"critical","Description":"Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin \u003c= 1.3.9.6 contains an unrestricted file upload caused by insufficient file type validation and bypass of filename sanitization with non-ASCII characters, letting unauthenticated attackers upload arbitrary files and achieve remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-5718.yaml"}
 {"ID":"CVE-2026-6118","Info":{"Name":"AstrBot \u003c= 4.22.1 - Command Injection","Severity":"high","Description":"AstrBot versions up to and including 4.22.1 contain a command injection vulnerability in the MCP server configuration endpoint. The /api/tools/mcp/add endpoint accepts arbitrary command and args fields that are passed directly to subprocess execution during the connection test, without any validation or allowlist enforcement. An attacker with dashboard access can execute arbitrary system commands with AstrBot process privileges.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-6118.yaml"}
 {"ID":"CVE-2026-6203","Info":{"Name":"User Registration \u0026 Membership WordPress plugin - Open Redirect","Severity":"medium","Description":"User Registration \u0026 Membership WordPress plugin \u003c= 5.1.4 contains an open redirect caused by insufficient validation of 'redirect_to_on_logout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-6203.yaml"}
 {"ID":"CVE-2026-6433","Info":{"Name":"FlipperCode Custom CSS, JS \u0026 PHP \u003c= 2.0.7 - Remote Code Execution","Severity":"critical","Description":"Custom css-js-php WordPress plugin through 2.0.7 contains a command injection caused by unsanitized user input used in SQL query and passed to eval(), letting unauthenticated attackers execute arbitrary PHP code on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-6433.yaml"}
 {"ID":"CVE-2026-7798","Info":{"Name":"WordPress FluentCRM \u003c= 2.9.87 - Unauthenticated Blind SSRF","Severity":"medium","Description":"FluentCRM WordPress plugin \u003c= 2.9.87 contains a blind server-side request forgery caused by improper validation of the 'SubscribeURL' parameter, letting unauthenticated attackers make arbitrary web requests, exploit requires unconfigured SES bounce handling key.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2026/CVE-2026-7798.yaml"}
+{"ID":"CVE-2026-8037","Info":{"Name":"Progress ADC LoadMaster - Command Injection","Severity":"critical","Description":"OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-8037.yaml"}
 {"ID":"CVE-2026-8054","Info":{"Name":"dotCMS Core Publish Audit API - Unauthenticated SQL Injection","Severity":"critical","Description":"dotCMS Core 25.11.04-1 through 26.04.28-02 contains an SQL injection caused by unsanitized input in Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll), letting remote unauthenticated attackers read, modify, or destroy arbitrary database content, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-8054.yaml"}
 {"ID":"CVE-2026-8181","Info":{"Name":"WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass","Severity":"critical","Description":"Burst Statistics – Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in is_mainwp_authenticated() function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrator username.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-8181.yaml"}
+{"ID":"CVE-2026-8383","Info":{"Name":"LearnPress \u003c 4.3.7 - Information Disclosure","Severity":"medium","Description":"LearnPress WordPress plugin \u003c 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8383.yaml"}
 {"ID":"CVE-2026-8679","Info":{"Name":"WordPress AudioIgniter \u003c= 2.0.2 - Unauthenticated IDOR","Severity":"high","Description":"The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. The handle_playlist_endpoint() function accepted a user-controlled playlist ID and returned track data without authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-8679.yaml"}
 {"ID":"CVE-2026-8839","Info":{"Name":"WordPress MapPress Maps \u003c= 2.96.6 - Unauthenticated IDOR","Severity":"medium","Description":"MapPress Maps for WordPress \u003c= 2.96.6 contains an authorization bypass caused by missing ownership verification in REST API routes, letting unauthenticated attackers read any map data and authenticated contributors modify any map, exploit requires crafted API requests\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8839.yaml"}
 {"ID":"CVE-2026-9082","Info":{"Name":"Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query","Severity":"critical","Description":"Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9082.yaml"}
 {"ID":"CVE-2026-9290","Info":{"Name":"WP User Manager – User Profile Builder \u0026 Membership - Local File Inclusion","Severity":"high","Description":"WP User Manager – User Profile Builder \u0026 Membership plugin for WordPress \u003c= 2.9.17 contains a local file inclusion caused by improper handling in the profile template scope function, letting unauthenticated attackers execute arbitrary PHP code, exploit requires ability to upload or control PHP files.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-9290.yaml"}
 {"ID":"CVE-2026-44338","Info":{"Name":"PraisonAI - Authentication Bypass","Severity":"high","Description":"PraisonAI 2.5.6 to \u003c 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2026/cve-2026-44338.yaml"}
+{"ID":"CVE-2026-44381","Info":{"Name":"MISP \u003c 2.5.37 - SQL Injection","Severity":"medium","Description":"MISP before 2.5.37 is vulnerable to SQL injection via the order parameter in EventsController. The POST body order value is passed directly into ORDER BY clauses without validation.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/cve-2026-44381.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
 {"ID":"CVE-2004-0437","Info":{"Name":"Titan FTP Server 3.01 - DoS via LIST Command Disconnection","Severity":"medium","Description":"Titan FTP Server version 3.01 build 163 (and possibly other older versions) contains a vulnerability where disconnecting during a LIST -L command may crash the daemon. Remote attackers can cause denial of service by initiating a LIST -L command and then abruptly disconnecting, leading to server instability.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0437.yaml"}
 {"ID":"CVE-2004-0656","Info":{"Name":"Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion","Severity":"medium","Description":"Pure-FTPd versions ≤ 1.0.18 are vulnerable to denial of service through connection limit exhaustion. The vulnerability occurs in the accept_client function when the maximum number of connections is exceeded, potentially causing the server to become unresponsive or crash.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0656.yaml"}
@@ -4147,7 +4159,6 @@
 {"ID":"CVE-2024-48208","Info":{"Name":"Pure-FTPd \u003c 1.0.52 - Buffer Overflow","Severity":"high","Description":"Pure-FTPd versions prior to 1.0.52 contain a buffer overflow vulnerability due to an out-of-bounds read in the domlsd() function within the ls.c file. This vulnerability could allow attackers to execute arbitrary code on affected systems.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"network/cves/2024/CVE-2024-48208.yaml"}
 {"ID":"CVE-2024-48651","Info":{"Name":"ProFTPD ≤ 1.3.8b - Privilege Escalation via mod_sql","Severity":"high","Description":"ProFTPD versions through 1.3.8b (before commit cec01cc) contain a vulnerability in the mod_sql module due to improper handling of supplemental groups. This flaw allows authenticated users without explicitly assigned supplemental groups to inherit root group privileges (GID 0), potentially granting unauthorized access to sensitive system resources.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2024/CVE-2024-48651.yaml"}
 {"ID":"CVE-2025-25256","Info":{"Name":"Fortinet FortiSIEM - OS Command Injection","Severity":"critical","Description":"Fortinet FortiSIEM 6.7.9 \u003c version \u003c= 7.3.1 contains an OS command injection caused by improper neutralization of special elements in CLI requests, letting unauthenticated attackers execute unauthorized commands remotely.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2025/CVE-2025-25256.yaml"}
-{"ID":"CVE-2025-47188","Info":{"Name":"Mitel 6000 - OS Command Injection","Severity":"critical","Description":"A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. This template should be run on port 49249/tcp.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"network/cves/2025/CVE-2025-47188.yaml"}
 {"ID":"CVE-2025-8286","Info":{"Name":"Güralp Systems FMUS Series - Unauthenticated Access","Severity":"critical","Description":"Güralp Systems FMUS Series Seismic Monitoring Devices expose an unauthenticated Telnet-based command line interface that allows attackers to modify hardware configurations, manipulate data, or factory reset the device.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2025/CVE-2025-8286.yaml"}
 {"ID":"CVE-2026-23829","Info":{"Name":"Mailpit \u003c 1.28.2 - SMTP CRLF Injection","Severity":"medium","Description":"Mailpit \u003c 1.28 contains a header injection caused by insufficient regex validation of `RCPT TO` and `MAIL FROM` addresses in the SMTP server, letting attackers inject arbitrary SMTP headers, exploit requires crafted email addresses\n","Classification":{"CVSSScore":"5.3"}},"file_path":"network/cves/2026/CVE-2026-23829.yaml"}
 {"ID":"CVE-2026-42167","Info":{"Name":"ProFTPD mod_sql - Preauth User Backdoor","Severity":"high","Description":"ProFTPD mod_sql before 1.3.10rc1 contains a remote code execution caused by unsafe username handling with SQL backend commands in USER request logging expansions, letting remote attackers execute arbitrary code, exploit requires SQL backend allowing commands.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2026/CVE-2026-42167.yaml"}
@@ -4175,6 +4186,7 @@
 {"ID":"CVE-2024-47176","Info":{"Name":"CUPS - Remote Code Execution","Severity":"high","Description":"CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDR_ANY-631, causing it to trust any packet from any source, and can cause the Get-Printer-Attributes IPP request to an attacker controlled URL.\nDue to the service binding to *-631 ( INADDR_ANY ), multiple bugs in cups-browsed can be exploited in sequence to introduce a malicious printer to the system. This chain of exploits ultimately enables an attacker to execute arbitrary commands remotely on the target machine without authentication when a print job is started. This poses a significant security risk over the network. Notably, this vulnerability is particularly concerning as it can be exploited from the public internet, potentially exposing a vast number of systems to remote attacks if their CUPS services are enabled.\n","Classification":{"CVSSScore":"8.3"}},"file_path":"javascript/cves/2024/CVE-2024-47176.yaml"}
 {"ID":"CVE-2025-12101","Info":{"Name":"Citrix NetScaler ADC \u0026 Gateway - Reflected XSS / Open Redirect","Severity":"medium","Description":"Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"javascript/cves/2025/CVE-2025-12101.yaml"}
 {"ID":"CVE-2025-14847","Info":{"Name":"MongoDB Server - Information Disclosure (MongoBleed)","Severity":"high","Description":"MongoDB Server contained a flaw in the zlib decompression logic where\nmismatched length fields in compressed protocol headers allowed a read\nof uninitialized heap memory by an unauthenticated client.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"javascript/cves/2025/CVE-2025-14847.yaml"}
+{"ID":"CVE-2025-29635","Info":{"Name":"D-Link DIR-823X set_prohibiting - Command Injection","Severity":"high","Description":"D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POST request to /goform/set_prohibiting, letting an authorized attacker execute arbitrary commands remotely, exploit requires attacker to be authorized.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"javascript/cves/2025/CVE-2025-29635.yaml"}
 {"ID":"CVE-2025-46817","Info":{"Name":"Redis \u003c 8.2.1 lua script - Integer Overflow","Severity":"critical","Description":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"javascript/cves/2025/CVE-2025-46817.yaml"}
 {"ID":"CVE-2025-46818","Info":{"Name":"Redis Lua Sandbox \u003c 8.2.2 - Cross-User Escape","Severity":"high","Description":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"javascript/cves/2025/CVE-2025-46818.yaml"}
 {"ID":"CVE-2025-46819","Info":{"Name":"Redis  \u003c 8.2.1 Lua Long-String Delimiter - Out-of-Bounds Read","Severity":"high","Description":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"javascript/cves/2025/CVE-2025-46819.yaml"}
@@ -1 +1 @@
-3c2859206231d7e7a81d8fc5d422c6ca
+f41fb6aca06836485c29dcab0865f337
@@ -53,4 +53,4 @@ http:
        part: interactsh_request
        words:
          - "User-Agent: curl"
-# digest: 4b0a00483046022100d78e2cdd15ad813e7f814f389dced1df350070a7ed9009abc0dd18e321619fe4022100948237e2bd07fbe0aa8294f530189a6b41f69e39ea5d365f93b609db70cc3cf0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d86e59a5a04ceb71e390ab7ecf4c585e967313ce0f42e028b272c05bf0fc74520220735e80e46260f014f03d7a0799e7dc4a7a11d60f5f2ca4f1235e1dfa8b9d455f:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2020-9402
    cwe-id: CWE-89
    epss-score: 0.22513
-    epss-percentile: 0.97404
+    epss-percentile: 0.97426
    cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
  metadata:
    vendor: djangoproject
@@ -54,4 +54,4 @@ http:
          - "ORA-06512:"
          - "Request Method:"
        condition: and
-# digest: 4a0a004730450220087c3fcb64c934850dc34b5f7b6dc390041e3f602cdbb90e590e37ab6e4d16c302210088b2ac11364f70f704d6142fa54152f449715810bd38d5906431b22d3de66031:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100caef44b2bae34bcce37ebeb77449f1b27ed74c5eacd107b4b28ac8ed5881bb700221009c4fd705cc2013bbce0ed193812e36132de56f6f0f58334fcec15e90686b66db:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2021-35042
    cwe-id: CWE-89
    epss-score: 0.44369
-    epss-percentile: 0.98594
+    epss-percentile: 0.98609
  metadata:
    verified: true
    fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -66,4 +66,4 @@ http:
          - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
          - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
          - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 4a0a00473045022100e1f6c106f83b8d223eeba3d0ac7201356d40a624f7b18560d8ec96c67980186a022046797fee0d88eecffc5a760cdeffb77332ac277c05d321da5bd7fdba4b815419:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204705d74ad6dcf0f5a9bb1ebf85e259abc97cfc30f3736c4e2799799501b510dd022076e17848bfaadabb2fa7e887138324f19c90a713231b5fc9ee5b6060b394abdf:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2022-34265
    cwe-id: CWE-89
    epss-score: 0.73274
-    epss-percentile: 0.99387
+    epss-percentile: 0.99392
  tags: sqli,dast,vulhub,cve,cve2022,django,vuln

 variables:
@@ -50,4 +50,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a00473045022100bf3f55ec102e95602f16383c52c8148ea9343c435c3f08e56829913b91f5fde7022053b473705d511b737192bed63b10bae3b7f0a7942e49aa49875df87052e670d4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022001b30a141ee254aaa0acb94b35d33ee77adf4ee135a209ce5975b7aafff87e9a022100f1eac2430af11fc8d61bbd426155540f71ff9f49037d6b881ee7989301fa2ea3:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2022-42889
    cwe-id: CWE-94
    epss-score: 0.99931
-    epss-percentile: 0.99967
+    epss-percentile: 0.99968
  metadata:
    max-request: 1
    confidence: tenative
@@ -70,4 +70,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4b0a004830460221008f007f71653244cc319e1eb50630fefa36fef25ea093706a68a4d98f9e886aaa0221009a2b22b0f0ec55128e11a3e8d8174322438a9404d08baf7c3309c74b537b9d50:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220608e0f72009f09b999c75f034bbe885b3694a0c68ba6e0eaead510bf493a9ad3022100daec500dedf90c03341c5b110bbe2c48240c19db066eed1eca976d4bd13b0b47:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2024-2961
    cwe-id: CWE-787
    epss-score: 0.8833
-    epss-percentile: 0.99748
+    epss-percentile: 0.99752
  tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln

 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
      - type: regex
        regex:
          - "root:x:0:0"
-# digest: 4a0a0047304502204a35f1de6b0b902844b557a86904de08c6eef79e7e62ea2c4155507fd10e2b8802210090da87de8fd9606a9714c70bee1119197c6ebba21262d5874365f490bcb53902:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008529646911e2aa9a9839746fad41ccbb4d173feb699adac86508097e50175ac302202fba7504078148bd0b1f297bafbfcd156a23065edbf63dd892560c4c986a43e1:922c64590222798bb761d5b6d8e72950
@@ -17,15 +17,17 @@ dns:
  - name: "{{FQDN}}"
    type: CAA
    matchers:
-      - type: regex
-        regex:
-          - "IN\\s+CAA\\s+(.+)"
+      - type: word
+        words:
+          - "CAA"
+        part: answer

    extractors:
      - type: regex
+        part: answer
        group: 1
        regex:
          - 'issue "(.*)"'
          - 'issuewild "(.*)"'
          - 'iodef "(.*)"'
-# digest: 4b0a00483046022100e4c82da722d350948af95c040abdc7c52addee398cf921ec654fd1cf5c1c758a0221008ac947ce44a10cb1238843cde9c77329e19a6803b384c6265c95fddc75e94b27:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b457768e899a74ac8b817b13b2fb78fa3fa4e76546df342d6696f333e283723b022100bb3a8002d61cd3840e8f4e6c1df97429cc92aa5f4a6295efa2481c5d0d8a2f5f:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,43 @@
+id: dns-internal-ip-disclosure
+
+info:
+  name: Public DNS Resolving to Private IP Addresses
+  author: infosec-asish,DevamShah
+  severity: info
+  description: |
+    Detected when a public domain's DNS A records resolved to private or reserved IP addresses, potentially revealing internal network topology to external parties.
+  reference:
+    - https://tools.ietf.org/html/rfc1918
+    - https://tools.ietf.org/html/rfc6598
+    - https://cwe.mitre.org/data/definitions/200.html
+  classification:
+    cwe-id: CWE-200
+  metadata:
+    max-request: 1
+  tags: dns,exposure,misconfig,recon
+
+dns:
+  - name: "{{FQDN}}"
+    type: A
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        name: a-record-present
+        part: answer
+        regex:
+          - "IN\tA\t(.+)$"
+
+      - type: regex
+        name: rfc1918-or-loopback
+        part: answer
+        regex:
+          - "IN\tA\t(10|127|192\\.168|172\\.(1[6-9]|2[0-9]|3[01]))\\.[0-9]{1,3}\\.[0-9]{1,3}"
+
+    extractors:
+      - type: regex
+        group: 1
+        part: answer
+        regex:
+          - "IN\tA\t((?:10|127|192\\.168|172\\.(?:1[6-9]|2[0-9]|3[01]))\\.[0-9.]+)"
+# digest: 490a00463044022056f0442a5058beaa3436c221d2c3ce122ce78dcf5a164d3e0ed57063e69a91e5022018f59b4e0d6da5020e65151623fd67b9d4270166174bc820cf0be567750e4a4b:922c64590222798bb761d5b6d8e72950
@@ -22,4 +22,4 @@ file:
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
-# digest: 4a0a0047304502201269b47be60292502954630e48434bfab3c665328d9ea3590d2e36788d9f7c84022100b75647b94a0ac44a7c3de77c39e7f68f128bc1ff72c1835ec9c615ada48049b4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204246f5415831b1c65915c9af21d79c1c857b72dc92a22dcd1374f7147341752e0221008959999f9458e23030f8b960dee4b4fe442711df974c0012750fd499f0859e01:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ file:
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
-# digest: 4a0a00473045022009d916b85abc0153b6bdfdca69d122eb391bc0ad490b9d881258dd49333c7f61022100cb9d27f209b19b0a4822d8815e61cb3c92b7112a43a21f1d75d9780e91f37730:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e58d82d3a2a7d4f15d580a1051f898a436347b8d5943a4e2220cfa34adaf525a0221008d6339c36adc7dee3d69b48227bb10bbb85071f4dd0538557d2745518944919f:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2018-25031
    cwe-id: CWE-20
    epss-score: 0.42326
-    epss-percentile: 0.98522
+    epss-percentile: 0.98531
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -56,4 +56,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a0047304502200fa7442e9f9ab4bbfd754037b19470937f21bd30f367a50d16a7a166c83a8d2b022100f38a94773bcb172651da4ba045e786e7a8811845cdeb9372ce945f411bb97d17:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210094b32ed7df72877ae337883d352f07b1d97b6e472246fdee73b51d3dad2a77fd022100f5ffa3da6a71b8233b6d2b18fcbe8cdf5a13c021f075b1d280932e88157066d9:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2022-29455
    cwe-id: CWE-79
    epss-score: 0.2318
-    epss-percentile: 0.97475
+    epss-percentile: 0.97494
    cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -52,4 +52,4 @@ headless:
        words:
          - "elementor"
        case-insensitive: true
-# digest: 4a0a00473045022100c26ee63d038b9d1ee3931e3c456f3f974932d7ec08ae5e65f15e2b5393ff582f02201ac9e710946467806c8c39fccf1fb19d0bb35eb53de656ec73244274d3da5aa2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ef1d84d54435992ba893c6cf6ef53d49b20b410599e6ef1587a26d20db15c32e02204baa2f559c05238fa3cc39adfec07d29c5b0000342c3f2371b2dfb669122f517:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2024-29882
    cwe-id: CWE-79
    epss-score: 0.01086
-    epss-percentile: 0.60965
+    epss-percentile: 0.61251
  metadata:
    verified: true
    max-request: 1
@@ -50,4 +50,4 @@ headless:
          - "ConnectSRS</a>"
        condition: or
        case-insensitive: true
-# digest: 4a0a0047304502210082713de9c28149de5af9986cda9f73b721f04083e222c4b0dc9289b5f797cff1022045f7ca68eb31a5004257a123f7e2ea81d38d74dfe5d0b9e03572c7d158beb326:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b7f15d97b25aec5c8c228d2256e65eb5bb43b40f62069dae1330e78355883edd02204620cc8899a1c2c003ad265460f4daf6d6a52a3ba1ac83a42cb2a475f55bc0b1:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-38526
    epss-score: 0.03832
-    epss-percentile: 0.8873
+    epss-percentile: 0.88834
  tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
  - steps:
@@ -60,4 +60,4 @@ headless:
          - "union.macoms.la"
          - "newcrbpc.com"
        part: urls
-# digest: 4a0a00473045022100c5c0c3430cafaf3f50b49fd656c4fd8da504581bdd4d3ce5a5802a0288ab58b3022015c5f8801ec9d4821d376d9f426764b612655e88a2e36f6a9da211abf8513f35:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200ba3aa5180fecb970b1cdee0a358dc0a8dfb5d596a1f2a5ca7c45b8366a130e7022100f5fe9fc79bda2d1c60e748fde0154c1214246adfa67575edbde1ed065920d151:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    - https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
    - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
  classification:
-    epss-score: 0.01157
-    epss-percentile: 0.62973
+    epss-score: 0.01183
+    epss-percentile: 0.64012
  metadata:
    verified: true
    max-request: 1
@@ -46,4 +46,4 @@ headless:
        words:
          - "{{random_int}}"
        case-insensitive: true
-# digest: 4b0a00483046022100bffd0dbdf17fe843ccd57975e37fae4e0d84647bb0c29e6c2a87e99213706988022100a4243aeef9c73dcd7d4ba6ba861e0620a0d81c27ac666a460727df463f0c29fe:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100eabc6bf2008ea46999428fac0408f3342d02c0c05bc2db50859e058b6bc3d46002201154058b890b5c8e91d84da8ff9a2e6cd5fd618354973d8f03bf73bcc1c5276a:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 4.4
    cve-id: CVE-2025-25062
    cwe-id: CWE-79
-    epss-score: 0.0164
-    epss-percentile: 0.73321
+    epss-score: 0.01659
+    epss-percentile: 0.73818
    cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
  metadata:
    max-request: 7
@@ -190,4 +190,4 @@ headless:
        dsl:
          - reflected_text_xss_type
          - reflected_text_xss_message
-# digest: 4b0a004830460221008069ca60e4c46003b660a413dcb9d23b2ad12304fda9bbc7c900f2ade61f0103022100b098a203a077999a5b63ec77003358ea6b4b4d199e7700c068f31e14d0f55fb9:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022077cbe8e6069bb6b3d88e802b33dd0d2808a26b4437e3764fc1af3f9f23536e0202200e2b1f4c8af23c731841b155e72499b937c0003c6534a460e0098e06bb6b45c7:922c64590222798bb761d5b6d8e72950
@@ -59,4 +59,4 @@ headless:
          - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
          - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
        condition: or
-# digest: 4a0a00473045022009bd9235f1b38650341765362eef16d88c843d6e38b38a8d9d89efd48e2fae47022100e724d2fc48e2db4fdcb8cf7edc2d715680929bf351843b2f7177888009c37376:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201d9f64ea6fe54975c8136ae2281e8a2d123b84a99d58c8926e4ac2ad8ceb12b7022100e4bed2873689aa7157e2595a30e541a7517173b57dfbd503479802c0b13aa9c2:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2025-8191
    cwe-id: CWE-79
-    epss-score: 0.01551
-    epss-percentile: 0.71902
+    epss-score: 0.01646
+    epss-percentile: 0.73623
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -69,4 +69,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4b0a00483046022100acfd8249c800dae9b13e5b6375246daa543aa95484a527023cf3e43bf08d3c45022100c6e717fbac248f64b4c5ad96c5c6634d31ccf436acf7f48ade79f8a407425b95:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022014e16d27f81c960d8980a50cddf168d71f59e36fe2efbbe844ba0d1ae201c56f0220370dac0ec4c85dec80fae08f727bbe4f69200dfde8d5f629ca3c9e674158225b:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5.3
    cve-id: CVE-2000-0114
    epss-score: 0.47595
-    epss-percentile: 0.98692
+    epss-percentile: 0.98701
    cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
        group: 1
        regex:
          - 'version:([0-9.]+)'
-# digest: 4a0a004730450220433a1fa899f47ef926054830419cbc06c65351aa3848f057acc6ba2a1864ca4702210099ae871fdfe28946128db9f4288943b3b80c46b20af29e8ee77faee097bee037:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c110c8b0ac821b798a2c4328b1870d54b7f36b7d4c5e80785dff9abe02064ec7022100e22d0023b29dd937c29aac191672c42dbb8ab7a0d4ab1bba6b33746f72bd66f3:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 6.4
    cve-id: CVE-2000-0760
    epss-score: 0.62496
-    epss-percentile: 0.99075
+    epss-percentile: 0.99084
    cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e2cf1ac48423c4896efc8f6929c469feb42688e38c84c5e83ff3dc5658a76a6202205a67fc9d00b77d48edb7873a30ba615187ad404823edf06437bc9d5230331915:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210095b1c0370925cd7dfe3ef71b41cd77061ce29b6c318ea36739fd99dedcb56d6c02210090a6ef73695850017875ec251f12b95e7662095f9ce439e60fab575c7d89103a:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2001-0537
    cwe-id: CWE-287
    epss-score: 0.6845
-    epss-percentile: 0.99243
+    epss-percentile: 0.99248
    cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -53,4 +53,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022025c99d0c83ba4ebf53b940d3eba96eb1e0913528785b232e19ef763a6b71bbaa0220341601496922ea3493a356fb40bce7db42e8e727d68b4e35d262a2a54f0d05af:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4451668c945e5baec77fd51a3e8e26b9a44e26abd0858ff94bf7b55b21ee22502202e8bd604e5d2988ccde51c0370c76d7bd3134eaa085b4b7b81833841148c07d6:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2002-1131
    cwe-id: CWE-80
    epss-score: 0.25754
-    epss-percentile: 0.97699
+    epss-percentile: 0.97717
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 5
@@ -52,4 +52,4 @@ http:
          - 'contains(content_type, "text/html")'
          - 'status_code == 200'
        condition: and
-# digest: 4a0a00473045022100882f4975ced1aa107305fb30a2708ae41f4fd8bff0e58929b88b9058a473cbe102202d92d514967436aaaeec4f7679eaf7a7aa39d99ad747f8200b0e047df65a021a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201ea89a357407c145fecedd4088eff53dc2c7a23a5ade23d0223d56475a5434e8022100caa3bbeef7e056dc4d956252058f33ea7ced1bd62013ad2e145b7996b32a5992:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2004-0519
    cwe-id: NVD-CWE-Other
    epss-score: 0.22528
-    epss-percentile: 0.97406
+    epss-percentile: 0.97428
    cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100fd0aa14b99f084fd9211b1af9bb41438cd572ccfcd5ac9f88ced222122a1d5e1022100a33036d501cd1fc062ea971cf23693503f92752c11515149d62e9d351d22c445:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207e185c445c27a808bcd72fdc391210daa529554836659e4a6616ddb368ec464602201be4c0406b8e721b37373d9ee3ec56747904fa3151ccf3e4cb59b2248ba337d6:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2004-1965
    cwe-id: NVD-CWE-Other
    epss-score: 0.08442
-    epss-percentile: 0.94303
+    epss-percentile: 0.94347
    cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a00473045022100965067071460727888392fe99b4cc92095a21789c70a341d5c18a82b476282450220366a67898768629a71a8f1be9bdac5037613a2f753f51e891944b02d32738fa1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b4b1a34ee71af6c08a24d8e5a65a084e3b8e684eec7d84790d8f2156d7a672b9022100cf051834825b58d9f9301420975d7e1d2449fff400f2b1cd65c9550291dc0a68:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-2428
    cwe-id: CWE-200
    epss-score: 0.73635
-    epss-percentile: 0.99401
+    epss-percentile: 0.99406
    cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a004830460221008032e1eef29918ecfe54fd1b9ad5ca0d6c6ef837c69f957ab1e501c6c18dd09a022100908783641a7f115b477f11b208a5ac67e0f71baf8f924ed51895964d127ab24f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bff880d9882873e8644c6cf551a189786fec54a9beb32a48275ac173c468d0c1022100b012d3eca88ee43ba31114c591e6e1aa9c12f4df7fb552f5ad817a7beafe2fef:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 5.4
    cve-id: CVE-2005-3128
    epss-score: 0.03436
-    epss-percentile: 0.87428
+    epss-percentile: 0.87535
    cwe-id: CWE-80
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
        part: header
        words:
          - "text/html"
-# digest: 4a0a00473045022100ce5a5fb99fcb9a3745a49e6d854348ef20c88b7cb1b2b65c3e9a3b67b767aec30220767716c1448dd5f3681643876ef172f81697c50f0022de469ac6e3a4cbdd5d19:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009876c0538d53645c3d393a02cafaa5433b350ca5b71cefcf714f525b3de3172e0220086f3babe1f7a7948fedd879d718f2d233767618a1fa8f7e7394d0baa1b63135:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2005-3344
    cwe-id: NVD-CWE-Other
    epss-score: 0.07986
-    epss-percentile: 0.94011
+    epss-percentile: 0.94063
    cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450221008f340bd0efd9d665be323bfdace864006c97e145591cc14e1b8767a08f737d65022039521af5a4621182806ee0869dea8e7564bdd91a433ae0c622b77a3e2b79819a:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220058cbe13832302235134f541bf4487a935ca5ebbf2ce35c3d43053e980afb326022066d8fa94fff9a6016440a3aa6ab6bdd8fdc82ef39570de09230b4736c4a2397a:922c64590222798bb761d5b6d8e72950
@@ -22,8 +22,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2005-3634
    cwe-id: NVD-CWE-Other
-    epss-score: 0.18223
-    epss-percentile: 0.96842
+    epss-score: 0.19378
+    epss-percentile: 0.97021
    cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -45,4 +45,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a00473045022014358dac3de9eabefc4e5d8e23cf3e777e1a74e7816168a224358705d77c59a3022100ced4fe437b4219ffa365fdc819ea11212886d24810c453a1d564d4eeba980521:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207931f4ab674f1cc09b0122997338e948965390feee8b1daedaf0cf7995800c35022100a223815e4f83255dda13692ad6983e504b17a56022814fa5ba6eb289c1b8a454:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-4385
    cwe-id: NVD-CWE-Other
    epss-score: 0.08011
-    epss-percentile: 0.94022
+    epss-percentile: 0.94075
    cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022011573a66483d43ed0f0fb620dc844f4b688bae44ad286bad0ba0d01078611214022100b2d74b8970252ddabee1641f41e7cf83bbcae9a214da49ab6018b8f3bccdd1e4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cafdedc4e77201ff3323569fd452f714d198780075e67e30ebecca10257be50b0220640afbc1ed8cfcba22a8d4ff6023e0d43841be13a3cd2a756a29781e73786075:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2006-1681
    cwe-id: NVD-CWE-Other
    epss-score: 0.06643
-    epss-percentile: 0.93012
+    epss-percentile: 0.93072
    cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402205c99a35da94fd4113fb0286801ff9dd7c040a3dacc7f650067911892996423ec0220785d04a13f1ffbd3241c5207fb6e8258c3d169238e978dee5ad41920f78dd3f1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e063b9666e14016b6eb25342242ba76dc08f6644ea5f4f8d6b61145a57d0099002210087f6240284f0e8dc4595ffb34c061435ec9b37331796427ab9b04202188c0a0e:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2006-2842
    cwe-id: CWE-22
-    epss-score: 0.46565
-    epss-percentile: 0.98665
+    epss-score: 0.47196
+    epss-percentile: 0.98694
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022075757b3c3a0cb145e5cfb24145263f19dc606028d957797a700d1e86f277fad60220536c8951a2b292a533e44fb932b49b67dbe4549d9230946700e6d42ac01c0f0c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100da46606ee7d35b8d037c542a29876ed168a76827d59c5e46f766b5365b375e52022100fe79670b5235cddf59f0dda789cf8a8fdeef539b011bbc5683cd42d6b066e1b0:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
    cvss-score: 5.0
    cve-id: CVE-2006-3392
-    epss-score: 0.77805
-    epss-percentile: 0.9951
+    epss-score: 0.77953
+    epss-percentile: 0.99519
    cwe-id: CWE-22
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022069427bb20f426d00374ae3128145fac7945e7bdd95dc6f74eacb93bbdbbaa972022100a2818de9f68780e64c881c70c754b1ef346beae27a43a2b4332a25e1be210021:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202a92454082b1d73ceceddd239fbba4d845b25ee330109085ebca235f469f35ea022014061aff80353e588eb178e0f1838bc0c66f624e9e68135a0f82e1cbf6fee4f6:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2007-0885
    cwe-id: NVD-CWE-Other
    epss-score: 0.05472
-    epss-percentile: 0.91731
+    epss-percentile: 0.918
    cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100b0a6331b3a56a852f0ac0ef6e1435e440a9ea8a08b94d16ac5856dec4b5ae0310220768f1114ea038739242463739762f03a2cca43f822e75afe80a20db3854cf3a0:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d9652153ee066d3fd38871099bec6ac1d01a0a6bf8a65fedb3bebe28d4c7b648022100a542f0b035a91699f84e5904afa798b581071f83ba943e57d73aba138c760e21:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 7.2
    cwe-id: CWE-79
    epss-score: 0.77376
-    epss-percentile: 0.99497
+    epss-percentile: 0.99502
  metadata:
    max-request: 1
    verified: true
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402205c6542d7200ebcc316737d63f1e09a9d96618c85ab63e119d6fc61c0dfbe35ea022004a564e1ebceaf80e231d8a5d3bf6588e13a0421035066916e52018012d47304:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200b39d49af128f6f7af7dbd821655f1ca498afefbdcdca41afc9bd6b0b7af6dcb02210093322aa2c9d81aa5384f027597edf746baa4c768f425181d5c99cb2a90993f3a:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 10
    cve-id: CVE-2007-3010
    cwe-id: CWE-20
-    epss-score: 0.97407
-    epss-percentile: 0.99889
+    epss-score: 0.97759
+    epss-percentile: 0.99897
    cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022061e216e04cc870a640ed6deb97409b54eaf5afc38fa315756375278ae4c0ebb4022100ff55a9b944cf6e016c2cd14c3fbeaaa8b36a2ae586d7e78b7f86652f7c27a102:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202b73c6f18e7bafe6216e1131560956b950915438a3ce6c05b8119293d2309d68022100ecf632cd907ebab7367f5f0bc2f18e99b7c04883f6e2d4abcd1655a36536aac2:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2007-4504
    cwe-id: CWE-22
    epss-score: 0.09491
-    epss-percentile: 0.94808
+    epss-percentile: 0.9485
    cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100f68eb141c98c51f201c6a77fb1e0d06115967b22c361891f8180d8b241033158022006671e645737b27aabb01a43d963fcb592b03ad12f4c55cad78def7996b4e633:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c3cb6d76296c860c46b1e0241b03faf1c3d13890492684682d453a4f91b08d9902210087313ee91dfad05d6d30ab105c819ea000e2e4ba9981234d9f5d8d4cfd1012ae:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-4556
    cwe-id: NVD-CWE-Other
    epss-score: 0.25749
-    epss-percentile: 0.97699
+    epss-percentile: 0.97716
    cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100bf4f913691a10153fe4b7b1b50a84156404f9425ee211e44dcf59c789a4630d2022100af20d319868afb0e110f2dde136b17d4e7d5a204c0c9b0cc40fd331885535084:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100866de5d5c845abc8d44cffe80cc62c3ca07f7e0930126b48dfb01daf5030139a0220290adef89f500fd716a88a8750affe57b1fa8a031a2c7f63d5edfb12e753792b:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2007-5728
    cwe-id: CWE-79
    epss-score: 0.14639
-    epss-percentile: 0.96218
+    epss-percentile: 0.96247
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -57,4 +57,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201033a682d39e188e47c67c7f3f62ea7ff256ef02e23a4ecbe20070f1b3412252022100ec9ac2cf9364aca59573d0037a7ee73689989945c07a657886288f9880e9f748:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022002d51759e3238bb1e0b99ce69e79898539b301ac8f77fb37edc5b3d7b098f095022100b1d997d3155aabdd89cba104f15ffa45fdc95f6aa0e8fed77cf628602e4bb6a3:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1059
    cwe-id: CWE-94
    epss-score: 0.48329
-    epss-percentile: 0.98709
+    epss-percentile: 0.98719
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220505f9d1edde6a4dc430b4f634a00146f1947fd93fb46c92e5ed74a904fc9f7c802202c59fb29f36f8e5fedf62eebfbfbd269aea8a57ebf570a5debbb89ad1a05f48e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210097799edba5fe48dd9308290ce8ba90289b18eca9795ade4c556758e5cfbcc09d022061ba6e57c6031c23d097d7e9cddd757fd80ae8af7e24a10b0e5a168161ad89bd:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1061
    cwe-id: CWE-79
    epss-score: 0.074
-    epss-percentile: 0.93636
+    epss-percentile: 0.93693
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022026e64ec5b1ddeebc886e3922b735487ff305ed8bc06fc0284fca73e6d330d49f022100c6398845d0ea1ad0ed42b76480c4784d7dfe14ee4c2277361f563d634467a478:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202a85d360df9d2bc2469a203bf864d62906731974da7da42fd47d9375f44a477a02202c88afdc9e364b85b7833d0d759cce240d343781c340e3fd78de629da64fa139:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1547
    cwe-id: CWE-601
    epss-score: 0.45927
-    epss-percentile: 0.98645
+    epss-percentile: 0.98658
    cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -51,4 +51,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a00463044022072d5a5eb9d8d31fc25273728c2aaa6f3f2acf9a426130b6a36306b883f088e76022048855fd5022f5562830f4ac1290523a812ebaab9c101d6cc623a56a4fadb464a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dc1fd2617ac8c505cac9a401af69f19ab929ae4d947f857d210457cad4cf053c022100cc09d742c2bd85c7dff5df7457eb5eb0a9f7c3475ba103433f095a027cf90945:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2008-2052
    epss-score: 0.01568
-    epss-percentile: 0.72155
+    epss-percentile: 0.72378
    cwe-id: CWE-601
  metadata:
    max-request: 14
@@ -63,4 +63,4 @@ http:
        status:
          - 302
          - 301
-# digest: 4a0a004730450221009d0c652ac599c29814582a52325a6af90e4ab9eb3f26d66480bbc8659e6c783102202163edb1734a98f9d87880f242d5948c20954a65dcf8546dbd87b3edfd73d449:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e46885fe135081ce2d7c765c7a1b536de683c91e406b4addef7583bf54f9bda2022100afd9efcb999fe7e2f20285b26e290f914a368ff6d6450deef45e5efc1b6dd306:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2008-2398
    cwe-id: CWE-79
    epss-score: 0.06232
-    epss-percentile: 0.92629
+    epss-percentile: 0.92695
    cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a004830460221009e34642259ddd10c0d78561fa8a571aa2a92fb9bb8f97404f9bdfa9d026dfc6a0221009d4542634ffbc3196d3adb84c5bee2274adcea5965117e65a7462c30c856e65c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205e11e3095ca0eb9fef9ddfdbfef763f64ed67109a5996a6560d2d62b41489a3f02204d87789fb78d21978bdb4420d831adc45cbe6b4ded37998de195f9ff3e783a08:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-2650
    cwe-id: CWE-22
    epss-score: 0.18809
-    epss-percentile: 0.96917
+    epss-percentile: 0.96941
    cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402204e6ee27c13f314921f28101f1e98ebb2479e2a19d8871c73206918e40e2f46b0022066692c090e1c535be41eae72ed7f8dd92cce2767670460e0820ca21b476aa596:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204239b3860793714e2cb3809a3aab1b145511a307277270aa3aeff6b69018cb33022100e4197132731f783f94aacf5c5a73cb577c2fe1466d4fa82b15304af856bb2ce8:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-4668
    cwe-id: CWE-22
    epss-score: 0.21476
-    epss-percentile: 0.97294
+    epss-percentile: 0.97313
    cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100b6635eb1562f4388909e4e019e678799da3493f9264c042cf4671c2c9579b5bf02202ca324cb96c4694b534fe27c8ef33347c46c0c52c563661a166696240c0ae3f7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202f526d35d8edca058b959c7ac959f0d8620ee64cb036253bd2d7b42390c0cc3f02210090759897297e18ff6f0824f43764920bc09712b47c9da52650ee7d70d5ee5e7a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-4764
    cwe-id: CWE-22
    epss-score: 0.16505
-    epss-percentile: 0.96585
+    epss-percentile: 0.9661
    cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100c7cec13a9dc1ea143baac315b9f84a33b20f24b14007a519ef9d6308b26229a00221008d21f749e3bff161b81f2725ff4989805b4482c1f1d3738ab73b4315813b57da:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fcacda47d935e92dcdd29372e11ab88f53b80cfd3cedd1cd241d20b044c00aa3022100f700d0b93fb8eb40c2d080cba7ee14bd90b895cc867a2cc52c7a5699c97882d0:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-5587
    cwe-id: CWE-22
    epss-score: 0.12865
-    epss-percentile: 0.95792
+    epss-percentile: 0.9583
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -49,4 +49,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220791e0a33a18f56ac313dc55a5583eea5ea5d0619a3d7990ca2f94bb0e5fce8e80220229d3832f116a9ca2da1a2aef9a5db926948105e0fba28c6367a63eabe0772a8:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203c58a9c60a0f256da9abb2e0e0c0b58b20e7ae34b860c8d9d13b618b1abd0c7c02201be1eeb44a2a19e23c41aa5b4c2de275a87485795da1da2f79c0337f015e7eb8:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6080
    cwe-id: CWE-22
    epss-score: 0.10637
-    epss-percentile: 0.95218
+    epss-percentile: 0.95255
    cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502200fc1b378d7d840a5dadbb4c13f55f19371fcde500549c734952c91189d1ed391022100913d88239bfd906e54c44b505aeb16aa63e3efb227d931c2e5dd23715655e27b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c403d09501585395ab2b662e7593cf1e0c1be76dc008b444f256c83eb258ca240221009373221390c6c16d054e7650c6d84dce2b5c9b02997d039762bd3a9478c23210:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6172
    cwe-id: CWE-22
    epss-score: 0.12284
-    epss-percentile: 0.95665
+    epss-percentile: 0.95702
    cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402205a7cc49b20a8cc0ca1adce122975d0297c20bbfa26478297019a4141db533ead02204a0bebfaf0951c51cb6f55b65b78033ccd0d2d3daae7737beb44a1dda27e9113:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008b00fbc266e34d74c3f9df226a644cd0079413396a93bcd0636bc30b1b88c627022100f1cac6b20187af005e2c1b6d6c26ab6b0d3ebeaad6ee010ca4f64d8aa2399ae7:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6222
    cwe-id: CWE-22
    epss-score: 0.11497
-    epss-percentile: 0.95464
+    epss-percentile: 0.95502
    cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220475f3209d2cb48e25be1cc8f71192c641a11206d1f8065210a802418d191d3aa022100f93c4ba832b73b504ae12d2ad7945d6e65880cb02ac2f02978f61563880f9bc6:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206a46ac86bb9e82b04fe11aeeb007bd647de6e70a83fcb11410c07ec2a51cc812022027c8546e93d4c9fccb79b45d04669f15ac3c6b3f6fba2db1ad1944c8ee68c784:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-6465
    cwe-id: CWE-79
    epss-score: 0.05114
-    epss-percentile: 0.91286
+    epss-percentile: 0.91365
    cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
  metadata:
    verified: true
@@ -63,4 +63,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022046f092796798498e97d3b012b0116ece7b31ad022ef599f829d497409a1606c3022100e0f76cd38bb1a4bfc2a6192b7e93c0c320d079571ec7a6312505306cefaac0c7:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220294e7e09ffeccd60c978d830a0a44593e12b1de6c4d5da934503900bb0e884a3022028ccd91a107124eb6c1495a18e6a3d95f9054568f1be60a924d594155e150dac:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-6668
    cwe-id: CWE-22
    epss-score: 0.15346
-    epss-percentile: 0.96353
+    epss-percentile: 0.96384
    cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -45,4 +45,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100db12adb0456dfb5b42c63a49c220550391eeaf5cd6d5b842a8cf65364fbe89be022060413e8c5804e7962bc9c93784db0256536609f7e099d422306052b14f259527:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202edac95b4cd4349eb5f4db0e0cb2accb695409c016590c195ad8f7f994ac8d3f022100e26ae5d467ba0ba36472af6f8aa64d69aaf3459f049afb19a782cd98d83b78ab:922c64590222798bb761d5b6d8e72950