mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-11-07 08:36:19 -10:00
Compare commits
4
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
09c6752bdb | ||
|
|
2c311f6fed | ||
|
|
9735bf3e2f | ||
|
|
a5619f0c67 |
No files matched your search
+7
-2
@@ -14,7 +14,6 @@ http/cves/2025/CVE-2025-2711.yaml
|
||||
http/cves/2025/CVE-2025-2712.yaml
|
||||
http/cves/2025/CVE-2025-34077.yaml
|
||||
http/cves/2025/CVE-2025-34141.yaml
|
||||
http/cves/2025/CVE-2025-34143.yaml
|
||||
http/cves/2025/CVE-2025-34300.yaml
|
||||
http/cves/2025/CVE-2025-40630.yaml
|
||||
http/cves/2025/CVE-2025-49029.yaml
|
||||
@@ -29,11 +28,17 @@ http/exposed-panels/c2/bofamet-stealer-panel.yaml
|
||||
http/exposed-panels/c2/cyber-stealer-panel.yaml
|
||||
http/exposed-panels/c2/oxf-phaas-panel.yaml
|
||||
http/exposed-panels/saltbo-zpan-panel.yaml
|
||||
http/exposed-panels/ysoft/safeq-panel.yaml
|
||||
http/misconfiguration/installer/ibarn-installer.yaml
|
||||
http/misconfiguration/installer/saltbo-zpan-installer.yaml
|
||||
http/misconfiguration/installer/strongshop-installer.yaml
|
||||
http/osint/user-enumeration/luma.yaml
|
||||
http/technologies/wordpress/plugins/blocksy-companion.yaml
|
||||
http/technologies/wordpress/plugins/gosmtp.yaml
|
||||
http/technologies/wordpress/plugins/honeypot.yaml
|
||||
http/technologies/wordpress/plugins/pagelayer.yaml
|
||||
http/technologies/wordpress/plugins/pojo-accessibility.yaml
|
||||
http/technologies/wordpress/plugins/siteseo.yaml
|
||||
http/technologies/wordpress/plugins/unlimited-elements-for-elementor.yaml
|
||||
http/vulnerabilities/backdoor/sharepoint-toolshell-backdoor.yaml
|
||||
http/vulnerabilities/wordpress/wp-ninja-tables-lfi.yaml
|
||||
network/cves/2019/CVE-2019-5544.yaml
|
||||
|
||||
@@ -42,18 +42,18 @@ An overview of the nuclei template project, including statistics on unique tags,
|
||||
|
||||
| TAG | COUNT | AUTHOR | COUNT | DIRECTORY | COUNT | SEVERITY | COUNT | TYPE | COUNT |
|
||||
|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
|
||||
| cve | 3275 | dhiyaneshdk | 1877 | http | 8913 | info | 4154 | file | 435 |
|
||||
| panel | 1338 | daffainfo | 868 | cloud | 657 | high | 2439 | dns | 26 |
|
||||
| xss | 1255 | princechaddha | 826 | file | 435 | medium | 2374 | | |
|
||||
| wordpress | 1180 | dwisiswant0 | 806 | dast | 255 | critical | 1418 | | |
|
||||
| exposure | 1105 | ritikchaddha | 648 | workflows | 202 | low | 318 | | |
|
||||
| wp-plugin | 1031 | pussycat0x | 529 | code | 198 | unknown | 56 | | |
|
||||
| osint | 813 | pikpikcu | 352 | network | 145 | | | | |
|
||||
| cve | 3248 | dhiyaneshdk | 1872 | http | 8877 | info | 4144 | file | 435 |
|
||||
| panel | 1332 | daffainfo | 868 | cloud | 657 | high | 2430 | dns | 26 |
|
||||
| xss | 1247 | princechaddha | 826 | file | 435 | medium | 2364 | | |
|
||||
| wordpress | 1172 | dwisiswant0 | 806 | dast | 255 | critical | 1405 | | |
|
||||
| exposure | 1102 | ritikchaddha | 634 | workflows | 202 | low | 319 | | |
|
||||
| wp-plugin | 1025 | pussycat0x | 520 | code | 196 | unknown | 56 | | |
|
||||
| osint | 812 | pikpikcu | 352 | network | 142 | | | | |
|
||||
| tech | 800 | pdteam | 310 | javascript | 71 | | | | |
|
||||
| rce | 783 | pdresearch | 267 | ssl | 38 | | | | |
|
||||
| lfi | 775 | iamnoooob | 256 | dns | 23 | | | | |
|
||||
| rce | 777 | pdresearch | 261 | ssl | 38 | | | | |
|
||||
| lfi | 774 | iamnoooob | 250 | dns | 23 | | | | |
|
||||
|
||||
**847 directories, 11287 files**.
|
||||
**845 directories, 11246 files**.
|
||||
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"tags":[{"name":"cve","count":3275},{"name":"panel","count":1338},{"name":"xss","count":1255},{"name":"wordpress","count":1180},{"name":"exposure","count":1105},{"name":"wp-plugin","count":1031},{"name":"osint","count":813},{"name":"tech","count":800},{"name":"rce","count":783},{"name":"lfi","count":775},{"name":"misconfig","count":754},{"name":"devops","count":740},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":578},{"name":"packetstorm","count":552},{"name":"wpscan","count":536},{"name":"cve2021","count":513},{"name":"cve2022","count":513},{"name":"detect","count":492},{"name":"cve2023","count":489},{"name":"sqli","count":487},{"name":"cve2024","count":472},{"name":"login","count":456},{"name":"unauth","count":436},{"name":"kev","count":436},{"name":"authenticated","count":425},{"name":"intrusive","count":405},{"name":"file","count":377},{"name":"oast","count":284},{"name":"cve2020","count":277},{"name":"default-login","count":276},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":240},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":219},{"name":"malware","count":213},{"name":"osint-social","count":212},{"name":"token","count":211},{"name":"azure","count":210},{"name":"","count":205},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"auth-bypass","count":190},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"cve2019","count":183},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":157},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"ssrf","count":148},{"name":"aws-cloud-config","count":147},{"name":"tcp","count":142},{"name":"security","count":137},{"name":"router","count":132},{"name":"cve2025","count":127},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":120},{"name":"phishing","count":118},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":85},{"name":"local","count":81},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"js","count":76},{"name":"windows","count":76},{"name":"cisco","count":75},{"name":"enum","count":73},{"name":"k8s","count":71},{"name":"file-upload","count":66},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"c2","count":61},{"name":"cve2015","count":61},{"name":"alibaba","count":61},{"name":"cve2016","count":60},{"name":"atlassian","count":59},{"name":"google","count":59},{"name":"detection","count":59},{"name":"vmware","count":58},{"name":"deserialization","count":56},{"name":"audit","count":55},{"name":"php","count":52},{"name":"dast","count":51},{"name":"logs","count":50},{"name":"cve2014","count":50},{"name":"tenable","count":48},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"ssti","count":48},{"name":"generic","count":47},{"name":"ssh","count":47},{"name":"debug","count":47},{"name":"misc","count":46},{"name":"vulhub","count":46},{"name":"cnvd","count":46},{"name":"aem","count":46},{"name":"osint-gaming","count":45},{"name":"injection","count":45},{"name":"plugin","count":45},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"oa","count":43},{"name":"ssl","count":43},{"name":"springboot","count":43},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"tls","count":41},{"name":"firewall","count":41},{"name":"listing","count":40},{"name":"info-leak","count":40},{"name":"miscellaneous","count":39},{"name":"postgresql","count":39},{"name":"dlink","count":39},{"name":"cti","count":38},{"name":"sap","count":38},{"name":"api","count":38},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"wp-theme","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"networking","count":34},{"name":"devsecops","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"yonyou","count":32},{"name":"printer","count":31},{"name":"vpc","count":31},{"name":"graphql","count":31},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"ec2","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"osint-coding","count":30},{"name":"prestashop","count":29},{"name":"gke","count":29},{"name":"ftp","count":29},{"naLine truncated
|
||||
{"tags":[{"name":"cve","count":3248},{"name":"panel","count":1332},{"name":"xss","count":1247},{"name":"wordpress","count":1172},{"name":"exposure","count":1102},{"name":"wp-plugin","count":1025},{"name":"osint","count":812},{"name":"tech","count":800},{"name":"rce","count":777},{"name":"lfi","count":774},{"name":"misconfig","count":751},{"name":"devops","count":740},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":575},{"name":"packetstorm","count":552},{"name":"wpscan","count":533},{"name":"cve2022","count":513},{"name":"cve2021","count":513},{"name":"cve2023","count":489},{"name":"detect","count":488},{"name":"sqli","count":486},{"name":"cve2024","count":464},{"name":"login","count":450},{"name":"unauth","count":434},{"name":"kev","count":424},{"name":"authenticated","count":423},{"name":"intrusive","count":401},{"name":"file","count":377},{"name":"oast","count":279},{"name":"default-login","count":276},{"name":"cve2020","count":276},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":217},{"name":"malware","count":213},{"name":"token","count":211},{"name":"osint-social","count":211},{"name":"azure","count":210},{"name":"csp-bypass","count":204},{"name":"","count":204},{"name":"aws","count":192},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"auth-bypass","count":187},{"name":"iot","count":184},{"name":"cve2018","count":184},{"name":"cve2019","count":182},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":156},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":140},{"name":"security","count":137},{"name":"router","count":131},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"cve2025","count":111},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":84},{"name":"takeover","count":81},{"name":"local","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"windows","count":76},{"name":"cisco","count":75},{"name":"js","count":75},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"file-upload","count":63},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"cve2016","count":60},{"name":"google","count":59},{"name":"detection","count":59},{"name":"atlassian","count":59},{"name":"c2","count":57},{"name":"vmware","count":57},{"name":"audit","count":55},{"name":"deserialization","count":55},{"name":"dast","count":51},{"name":"php","count":51},{"name":"logs","count":50},{"name":"cve2014","count":50},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"ssh","count":47},{"name":"cnvd","count":46},{"name":"vulhub","count":46},{"name":"ssti","count":46},{"name":"aem","count":46},{"name":"misc","count":46},{"name":"osint-gaming","count":45},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"plugin","count":44},{"name":"jndi","count":44},{"name":"springboot","count":43},{"name":"ssl","count":43},{"name":"oa","count":43},{"name":"osint-hobby","count":42},{"name":"fortinet","count":42},{"name":"osint-porn","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"info-leak","count":40},{"name":"dlink","count":39},{"name":"postgresql","count":39},{"name":"miscellaneous","count":39},{"name":"api","count":38},{"name":"sap","count":38},{"name":"cti","count":37},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"lfr","count":34},{"name":"gitlab","count":34},{"name":"networking","count":34},{"name":"xxe","count":34},{"name":"devsecops","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"osint-tech","count":31},{"name":"nginx","count":31},{"name":"graphql","count":31},{"name":"vpc","count":31},{"name":"printer","count":31},{"name":"ec2","count":30},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"prestashop","count":29},{"name":"admin","count":29},{"name":"gke","count":29},{"name":"ftp","count":29},{"namLine truncated
|
||||
+6802
-6841
File diff suppressed because it is too large.
Load diff
@@ -1,12 +1,12 @@
|
||||
| TAG | COUNT | AUTHOR | COUNT | DIRECTORY | COUNT | SEVERITY | COUNT | TYPE | COUNT |
|
||||
|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
|
||||
| cve | 3275 | dhiyaneshdk | 1877 | http | 8913 | info | 4154 | file | 435 |
|
||||
| panel | 1338 | daffainfo | 868 | cloud | 657 | high | 2439 | dns | 26 |
|
||||
| xss | 1255 | princechaddha | 826 | file | 435 | medium | 2374 | | |
|
||||
| wordpress | 1180 | dwisiswant0 | 806 | dast | 255 | critical | 1418 | | |
|
||||
| exposure | 1105 | ritikchaddha | 648 | workflows | 202 | low | 318 | | |
|
||||
| wp-plugin | 1031 | pussycat0x | 529 | code | 198 | unknown | 56 | | |
|
||||
| osint | 813 | pikpikcu | 352 | network | 145 | | | | |
|
||||
| cve | 3248 | dhiyaneshdk | 1872 | http | 8877 | info | 4144 | file | 435 |
|
||||
| panel | 1332 | daffainfo | 868 | cloud | 657 | high | 2430 | dns | 26 |
|
||||
| xss | 1247 | princechaddha | 826 | file | 435 | medium | 2364 | | |
|
||||
| wordpress | 1172 | dwisiswant0 | 806 | dast | 255 | critical | 1405 | | |
|
||||
| exposure | 1102 | ritikchaddha | 634 | workflows | 202 | low | 319 | | |
|
||||
| wp-plugin | 1025 | pussycat0x | 520 | code | 196 | unknown | 56 | | |
|
||||
| osint | 812 | pikpikcu | 352 | network | 142 | | | | |
|
||||
| tech | 800 | pdteam | 310 | javascript | 71 | | | | |
|
||||
| rce | 783 | pdresearch | 267 | ssl | 38 | | | | |
|
||||
| lfi | 775 | iamnoooob | 256 | dns | 23 | | | | |
|
||||
| rce | 777 | pdresearch | 261 | ssl | 38 | | | | |
|
||||
| lfi | 774 | iamnoooob | 250 | dns | 23 | | | | |
|
||||
@@ -10,8 +10,6 @@ info:
|
||||
- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160
|
||||
metadata:
|
||||
verified: true
|
||||
classification:
|
||||
epss-score: 0.94462
|
||||
tags: cve,cve2014,openssl,heartbleed,code,kev
|
||||
|
||||
variables:
|
||||
@@ -137,4 +135,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "contains(response,'server is vulnerable')"
|
||||
# digest: 4a0a00473045022072146a555c1e39921511dd324015ad2f19b58bef855a158d53f18bad4a3068f70221008aea99f59b94f83393eb50e906fb55a005e15f80d20d8502d4a6bbdeea861d8a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ed75e4d98947fd01fbc7873eeb6436b559a749bb88a5a85f71fef8c2f83f9e48022100cb170dc3f8592781394acbba1560953c29e7b0b1d36c191aee134aa6d178aa74:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2019-0604
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.94436
|
||||
epss-score: 0.94411
|
||||
epss-percentile: 0.99974
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -154,4 +154,4 @@ code:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
- 'contains(interactsh_request, hex_encode(marker))'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022100b4400e86f6a613a3fec15c78d78b5eaa02c765fc3cd2a0fedae2a3caf6a640f602206838f019d39312a9e53fa6c5595b7ed095cef565d8599f8a9e20273c38886bbe:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022022019f9c11593b4c5a1f55755d532f6a64858d80153beb783f2c2d61684e0439022100fd41aa3e2ae1ad5d411c2c569383a2498ebf4a48cb1a9cf01f89748879c446c7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,7 +15,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2020-0646
|
||||
cwe-id: CWE-91
|
||||
epss-score: 0.93121
|
||||
epss-score: 0.92775
|
||||
epss-percentile: 0.99755
|
||||
cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -102,4 +102,4 @@ code:
|
||||
- 'contains(content_type, "text/xml")'
|
||||
- 'status_code == 200'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022100cb487f0bd652d387ee37c93aeff51bc10e1ee1685ed827748844380e2a1d224802202681a6f09065aa05fe76062fb4b71a801d269cccb60e095d1a1b782981fdff69:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a9c7370f5d64f484afc46075695941e15917d5a0687dd077ae6699501475bc1c02207a3961cc5b43a81ff13243b2dbb044a37081cf76fead5b7be2c772e481685c5c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -10,7 +10,7 @@ info:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2020-13935
|
||||
epss-score: 0.92195
|
||||
epss-score: 0.91885
|
||||
epss-percentile: 0.99681
|
||||
reference:
|
||||
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
|
||||
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2021-3156
|
||||
cwe-id: CWE-193
|
||||
epss-score: 0.92263
|
||||
epss-score: 0.92019
|
||||
epss-percentile: 0.99693
|
||||
cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -40,4 +40,4 @@ code:
|
||||
- "malloc(): memory corruption"
|
||||
- "Aborted (core dumped)"
|
||||
condition: and
|
||||
# digest: 4a0a004730450220156c4b47288c1bd2c345a71670734fd19e48ad7b8e807cf94a55943b470236ae022100b0a5f9dbc02cd24f1b8c73147526a7ad7d50553730b0ecb9325cca9c7b327c6d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203288bc289d0cc0f4e06e605006f21fa1933c3a8a43067f2e9217000a34b340ae022100eb4c9a1fad050dd80783cfcff25e73bc958d1ad84a2f6f09fcbf1c0deebe680c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,6 @@ info:
|
||||
- https://labs.watchtowr.com/fortinet-no-more-funny-titles-cve-2022-42475/
|
||||
- https://bishopfox.com/blog/exploit-cve-2022-42475
|
||||
classification:
|
||||
epss-score: 0.94003
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-42475
|
||||
@@ -174,4 +173,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "Target appears to be VULNERABLE"
|
||||
# digest: 490a004630440220200109caa2f7e95a45434593458382a6ca875167ade0946689005f9fc29664df0220764ae12713d8cb30e3105165bd261c4564a51b50ee294d63d57ca53aa338374d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100df2185bba8207644d6ccf7a16a4f4fd737eeee1f8bd6f4622ac7049188f5040b022100ef25386cc59ebe43e9f9d3796c23e7edee1e2f34a0d1a88c7318c3180af1f587:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2023-2986
|
||||
epss-score: 0.90996
|
||||
epss-score: 0.91200
|
||||
epss-percentile: 0.99636
|
||||
cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
@@ -626,4 +626,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 302
|
||||
# digest: 490a0046304402207360b6e655f665c3206296d537b3fb08f38c3e75292145fdd0ce7ff3d2ebc4950220555ab766a2fc4290ba5e70aebf3972ec448bbaa7f7ec17857a4d36eb1ce85d0d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221009fa711a5846a3c93bac4bc69d04eac250dfdf6df030b766ed7e272e1c41e6afd0220383dd08bfdfe5d8ab5f2dc3f9f0c2881b2ab73ec4502c81f92cdf28db1651b82:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2023-49105
|
||||
cwe-id: CWE-287
|
||||
epss-score: 0.86688
|
||||
epss-score: 0.86872
|
||||
epss-percentile: 0.99395
|
||||
cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -90,4 +90,4 @@ http:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- '"Username => "+ username'
|
||||
# digest: 4b0a00483046022100d1361a88791cd15ca47fa69ee04109e863d4b64e0ff51fd402aee326f02b3afb022100956866982e3aa3ff3694a645f6b77b7a705056f078771cc8881db8f55acaff45:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402204b1fb18af3e1a3a93ddf533a7112f566b1c32c20d54fce52634df059c876cd060220684fd961920c7f143e93d510a7e4219626c8ef2291c908ffecbb8a92171f9185:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2023-4911
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.78156
|
||||
epss-score: 0.66736
|
||||
epss-percentile: 0.98452
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -39,4 +39,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "139" # Segmentation Fault Exit Code
|
||||
# digest: 4a0a0047304502200467c526f6043a379948d8ced51cc69e62cda1e931a681fe275eb9860d715f37022100f445b6a72ea04c499b20fe826724ee120544d715795d1445709b8145a9895277:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207a6e5753b4c34b6c6a6b114a627b1024aea6e7ffaf398b1a92eb895c3a0449b9022100e7d7bde1dcc8c8248fa38491377b58370af797f1769f84f3be87a1fa8e672445:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2023-6246
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.26478
|
||||
epss-score: 0.22699
|
||||
epss-percentile: 0.95613
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -39,4 +39,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "127" # Segmentation Fault Exit Code
|
||||
# digest: 490a0046304402202186423140cba034149105b6c5f8fae507a03844c26e4329d1f4437abb29e41202201f13cba920b16ae34421b775498e1bca85f7cc6659582da1e8cfbad540281d7c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220435fc0f1f42662dd77393d370309115320794f7957843c0ff1ef4c0e68d5566402200e729fedbc5915a5e9a5c33cd70ccff6646981ea2ae405bb1341c83e0b228b08:922c64590222798bb761d5b6d8e72950
|
||||
@@ -13,7 +13,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-10443
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.67637
|
||||
epss-score: 0.69629
|
||||
epss-percentile: 0.98573
|
||||
cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
|
||||
metadata:
|
||||
@@ -54,4 +54,4 @@ code:
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- "dns"
|
||||
# digest: 4a0a00473045022100bc3a13e648e7ec51ac1836066641533bfcdbb2cedab653a2e02b0fd70616fb4602204417a29e0f2a5863f30dfa9119cccd591a4435fcdd7a5ff36a762cbc92812c8b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220238322406ea7b36d09adcd8d11555a98663066124719295b82627c0c6aa649c602210097fd42ed176237bd31b1b6fe4b675eb74f378636c66888f6578c5f20d49e8af4:922c64590222798bb761d5b6d8e72950
|
||||
@@ -13,7 +13,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-12356
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.93687
|
||||
epss-score: 0.93590
|
||||
epss-percentile: 0.99831
|
||||
cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -37,4 +37,4 @@ code:
|
||||
words:
|
||||
- "0 success"
|
||||
- "1 try again later"
|
||||
# digest: 4b0a004830460221008fdc45694288c9092a928bc2ba325f5b16bf96f4c94065e7afc046dffccdc7f6022100b3c8af22d05813a12e0a1cc490999e848f91a3bbeb4d9e87bc1e3c1dd6a45c0b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100be13ba221189875a5c3c181eb1e6c5d7c4806c31798dc6f540657279fac5b029022031676609cf3da0030625ce6aac0a33787770a4d084ec52ac9f58d0faa903025f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2024-3094
|
||||
cwe-id: CWE-506
|
||||
epss-score: 0.84169
|
||||
epss-score: 0.84011
|
||||
epss-percentile: 0.99254
|
||||
cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -59,4 +59,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- response
|
||||
# digest: 4a0a00473045022058d32a2e8218872afa1f30ea214365196b87480a320425dd7b5082c3a11a01c00221009fb13dcff0743b605d213aee84fdc614cddbb7aa034a6bdfdfb5d6e6af71a8c6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f7234c73aae801d78da251277aec0c21a4952b8b344944b3892eee84ec5891ae0221008d992982b582811cdd8173176149ef196cc6f7b672fcf16d10c05aab8badd9db:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-45409
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.14907
|
||||
epss-score: 0.16139
|
||||
epss-percentile: 0.94531
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -123,4 +123,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 490a0046304402207fcad984b97d6cf3e7d103a97d8ac0b804375bc62fa335801c66337b72c68cb2022028a34cecc66c0b0b0afdc46859c2675df13bcf803911b3c5b00359239183b814:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402201e63c308fefaaa4d4ba99b5a7c2ea3d7dcdf5544dc8d4a1ae1a0fbd532d7241702207232eaea82be593da580ba735e84de2153ee1708552ae08603c4c7237f2e1112:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-55556
|
||||
cwe-id: CWE-502
|
||||
epss-score: 0.7976
|
||||
epss-score: 0.80857
|
||||
epss-percentile: 0.99096
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -193,4 +193,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 4a0a00473045022100bedda7807b6e8b1de9d06c3de6965d20f099c71510556bb6cd624a2fad2be0db02207a9e0962a7814c6422cdc32195f4b474081785e386a7578b5a1705d5add154cc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e75d786df30fc6d158bb38bc2b13a5af3c2e27174c1617fe01b419f3a5d69b57022100840b6aaccec646d85c578e77492eda810bfb731287ba8520e5d657e92f883297:922c64590222798bb761d5b6d8e72950
|
||||
@@ -10,7 +10,7 @@ info:
|
||||
- https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass
|
||||
- https://github.com/advisories/GHSA-g83h-4727-5rpv
|
||||
classification:
|
||||
epss-score: 0.3891
|
||||
epss-score: 0.38910
|
||||
epss-percentile: 0.97110
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -188,4 +188,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- user_session
|
||||
# digest: 4a0a00473045022011426fc5ebeb8774da55b3e13ea70980635eae1dfcdc9265862c83ccee5dd32c022100a3811bfcc159dbc91424ddb31e76806b5b1a64acd73aa014e5f2306f058cb32f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100d4499f701d4dbaa3fee40a00ced7f7790a94891bc9007aed06b4741a76fd543c0220713f41ccb6c2e702ac3513a926d5308c1077bf3cf7f01d4b049c347bd3dfd7e7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 9.3
|
||||
cve-id: CVE-2025-25291
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.02296
|
||||
epss-score: 0.01703
|
||||
epss-percentile: 0.81527
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -78,4 +78,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 4a0a004730450220235b1de01210fb06562b784c31b9774a385c46ff77e11ce19f1df321822bc3e8022100d6bad0364c99e6c8086521ab2accbb9575b74af87cc682d0d57ef38099fbe991:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022100be3b0643c89a1ddcd15aa06afc686f3efb80fa245984ce21ca1b4275c74d42a2021f4b0e28ee37a26ab75834991f37b275727fac03c60f0170a2e59e232ae078d8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2025-32433
|
||||
cwe-id: CWE-306
|
||||
epss-score: 0.57377
|
||||
epss-score: 0.55376
|
||||
epss-percentile: 0.97930
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -172,4 +172,4 @@ code:
|
||||
dsl:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022100e36084dcd9b8fa5347cf8bf47d18d1e3d76a0744981414bbcbc23fd7e702706102204ef22a6591bcc3ee21aee8ed14e150571204b0fda60f783ec25790c083b54e0b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207edfd6f617b697c540c8375a5278b5c1016c928b22d041e1dc19ddfdad65d43b022100a4785eb798107b1413fd119e65a851be94361018e5eb785f393d26feed858cc1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,7 +15,6 @@ info:
|
||||
- https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2025-6216
|
||||
classification:
|
||||
epss-score: 0.11118
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2025-6216
|
||||
@@ -114,4 +113,4 @@ code:
|
||||
- type: dsl # type of the extractor
|
||||
dsl:
|
||||
- '"Reset URL: " + code_response'
|
||||
# digest: 4a0a00473045022100f8903b48a3426223b074cf3692b1d6a29234635491568677b23e79a7e63b8d3c0220607199839279491185e602067f73ce3373035197e4345c24ed28e64259923e79:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e16640c86c7d6f0d855aad545c1028cd614abdc1388b9a33da23d66b1d3beddf022010383e6897d82a9fabb755115271a0635ca5ee8a36633e8f1485f601840f5caa:922c64590222798bb761d5b6d8e72950
|
||||
@@ -2745,7 +2745,7 @@
|
||||
{"ID":"CVE-2024-31850","Info":{"Name":"CData Arc \u003c 23.4.8839 - Path Traversal","Severity":"high","Description":"A path traversal vulnerability exists in the Java version of CData Arc \u003c 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-31850.yaml"}
|
||||
{"ID":"CVE-2024-31851","Info":{"Name":"CData Sync \u003c 23.4.8843 - Path Traversal","Severity":"high","Description":"A path traversal vulnerability exists in the Java version of CData Sync \u003c 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-31851.yaml"}
|
||||
{"ID":"CVE-2024-31982","Info":{"Name":"XWiki \u003c 4.10.20 - Remote code execution","Severity":"critical","Description":"XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-31982.yaml"}
|
||||
{"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
|
||||
{"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
|
||||
{"ID":"CVE-2024-32231","Info":{"Name":"Stash \u003c 0.26.0 - SQL Injection","Severity":"critical","Description":"Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32231.yaml"}
|
||||
{"ID":"CVE-2024-32238","Info":{"Name":"H3C ER8300G2-X - Password Disclosure","Severity":"critical","Description":"H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32238.yaml"}
|
||||
{"ID":"CVE-2024-3234","Info":{"Name":"Chuanhu Chat - Directory Traversal","Severity":"critical","Description":"The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-3234.yaml"}
|
||||
@@ -3112,7 +3112,6 @@
|
||||
{"ID":"CVE-2025-34077","Info":{"Name":"WordPress Pie Register \u003c= 3.7.1.4 - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators.Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34077.yaml"}
|
||||
{"ID":"CVE-2025-34085","Info":{"Name":"WordPress Simple File List \u003c=4.2.2 - Remote Code Execution","Severity":"critical","Description":"An unrestricted file upload vulnerability in the WordPress Simple File List plugin before version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34085.yaml"}
|
||||
{"ID":"CVE-2025-34141","Info":{"Name":"ETQ Reliance - Reflected XSS via SQLConverterServlet","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-34141.yaml"}
|
||||
{"ID":"CVE-2025-34143","Info":{"Name":"ETQ Reliance - Authentication Bypass via Trailing Space","Severity":"critical","Description":"An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login page to obtain elevated access. Once authenticated, an attacker could achieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing stricter validation logic to exclude internal accounts from public authentication workflows in version MP-4583.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34143.yaml"}
|
||||
{"ID":"CVE-2025-3415","Info":{"Name":"Grafana - Exposes DingDing API Keys","Severity":"medium","Description":"An incident occurred where the DingDing alerting integration URL was inadvertently exposed to viewers due to a setting oversight in versions below or equals to 12.0.1.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-3415.yaml"}
|
||||
{"ID":"CVE-2025-34300","Info":{"Name":"SawtoothSoftware Lighthouse Studio \u003c 9.16.14 - Pre-Auth Remote Code Execution","Severity":"critical","Description":"A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the `eval` function within the Perl CGI component `ciwweb.pl`, where attacker-supplied input inside `hid_Random_ACARAT` is directly passed to `eval`. This allows remote unauthenticated attackers to execute arbitrary Perl code on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34300.yaml"}
|
||||
{"ID":"CVE-2025-4008","Info":{"Name":"MeteoBridge \u003c= 6.1 - Remote Code Execution","Severity":"high","Description":"The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-4008.yaml"}
|
||||
@@ -3123,7 +3122,7 @@
|
||||
{"ID":"CVE-2025-41646","Info":{"Name":"RevPi Webstatus \u003c= v2.4.5 - Authentication Bypass","Severity":"critical","Description":"An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-41646.yaml"}
|
||||
{"ID":"CVE-2025-4322","Info":{"Name":"Motors \u003c= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover","Severity":"critical","Description":"The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4322.yaml"}
|
||||
{"ID":"CVE-2025-4380","Info":{"Name":"Ads Pro Plugin \u003c= 4.89 - Local File Inclusion","Severity":"critical","Description":"The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases .php files can can be uploaded and included, or already exist on the site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4380.yaml"}
|
||||
{"ID":"CVE-2025-4388","Info":{"Name":"Liferay Portal - Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-4388.yaml"}
|
||||
{"ID":"CVE-2025-4388","Info":{"Name":"Liferay Portal 'marketplace-app-manager-web' - Reflected XSS","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-4388.yaml"}
|
||||
{"ID":"CVE-2025-4396","Info":{"Name":"Relevanssi \u003c= 4.24.4 (Free) - Unauthenticated SQL Injection","Severity":"high","Description":"The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and \u003c= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-4396.yaml"}
|
||||
{"ID":"CVE-2025-44148","Info":{"Name":"MailEnable Mail Service \u003c v10 - Cross-Site Scripting","Severity":"medium","Description":"Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2025/CVE-2025-44148.yaml"}
|
||||
{"ID":"CVE-2025-4427","Info":{"Name":"Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution","Severity":"critical","Description":"An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials. This leads to unauthenticated Remote Code Execution via unsafe userinput in one of the bean validators which is sink for Server-Side Template Injection.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-4427.yaml"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
36720f4a934a33f8bf9d4674983657df
|
||||
7a87fca0a901556d67f5ab48bab66d19
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 9
|
||||
cve-id: CVE-2021-45046
|
||||
cwe-id: CWE-502
|
||||
epss-score: 0.9434
|
||||
epss-score: 0.94340
|
||||
epss-percentile: 0.99946
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
group: 1
|
||||
regex:
|
||||
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
|
||||
# digest: 4b0a00483046022100b2d82bb000abf87ac9bee230b6e1bd3f97c674c9650a7048299640e9eb976321022100added7594d87013b651893248c5b84c38b1755e5a5d199346eebb9799483a762:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100a8939bb9bc6ccb1b77d9f06e06ca0db8116d5c0b73361a660d9f9a7b3e104f20022100df3e7994cdfd47bb085887aab47b53e80f0fc32a8589e337462d83aa015db1c9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2022-22965
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.9446
|
||||
epss-score: 0.94460
|
||||
epss-percentile: 0.99992
|
||||
cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -55,4 +55,4 @@ http:
|
||||
words:
|
||||
- "User-Agent: Java"
|
||||
case-insensitive: true
|
||||
# digest: 4b0a004830460221009aa5803189d9de1bc1973013f1cc5da110b2e46b1c62ea16cf1a491d31f3e3930221009486794f409eb77b8e87d8be71b79f23bf2d7c2dd6378e79c7707acd3cd75b9e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100915d17fb5a8d51b02db38fbe465d2de61ea80000397a7e86ebc49a4a9889412b022100820d081fc544c8aa867d04cfa1d0878008729d0459f08a166c459d7d16234099:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2022-34265
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.92734
|
||||
epss-score: 0.92493
|
||||
epss-percentile: 0.99731
|
||||
tags: sqli,dast,vulhub,cve,cve2022,django
|
||||
|
||||
@@ -46,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 4b0a0048304602210098d78757d6c41dc230c2e3d9355ac08365b4359ce54975ea46fb15f1232e9d7e022100bab0052a218ffc6a25ab06e85cb78c0bd25291ee57bc9c3027d550638335ccb6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220765d0b95605f033abc16dd45dbd789eab737ca6bd0c261eb914b8fcf1fc7f9e902202d55d0d730a667ad2683e84023cdea5e2896a20b863a8cf0a2865d081aaf575b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 7.3
|
||||
cve-id: CVE-2024-2961
|
||||
cwe-id: CWE-787
|
||||
epss-score: 0.91923
|
||||
epss-score: 0.91735
|
||||
epss-percentile: 0.99668
|
||||
tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast
|
||||
|
||||
@@ -57,4 +57,4 @@ http:
|
||||
- type: regex
|
||||
regex:
|
||||
- "root:x:0:0"
|
||||
# digest: 4b0a00483046022100982f2b65afa11c4113a1c937d0e0c157b236d7414622bd1e26e903d042e50949022100ce852c63c7c449a66c53722a65379f5fdedee549a38679abfe6dc2f6e5fd0a91:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f5fcacc5989901a485f707e1e046c0bb430448747aa9d1753933a28c4d863e75022100bf1a25c7f01875384e8ce50fdb752faf2f3d5336ede7c0491f8f74852d678a7d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,4 +23,4 @@ dns:
|
||||
- type: regex
|
||||
regex:
|
||||
- "v=BIMI1(.+)"
|
||||
# digest: 4b0a00483046022100dc35ed500e23f74daf18f8919bdf31b084d4ee2bfa644d70b99075a9ce785f31022100d0d7cbea4c65093f5ac5a868c169ee14126ced4738352dbc4de004bb6ac1fb5f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200fe01a5c826372c4c474961cd9b60e14995e68146274efce51e1bfb98f88357d02202d93208ad29783b0da3f6d871b70322582ad4cc6a716131858b6ceb7fcfe353d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -35,4 +35,4 @@ dns:
|
||||
group: 1
|
||||
regex:
|
||||
- "IN\\tNS\\t(.+)"
|
||||
# digest: 4a0a0047304502206071b4c24ecbd7c17ab7d7c4d1eb88cd522ca3029a10a90fb9db3d98f40409fa022100b3ded44bb800fbf3761fc12d4e59bcb4099b25c5e4665634d97e7da70f0bab64:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203e0e1ffafe16d73163325e32a7a04da98be487fa00bdaef8f4f003bdba49f00002204d883ccbbe96f46a3431dd9062cfe1c366478bc2dcbfdd7dc265e9f327dca690:922c64590222798bb761d5b6d8e72950
|
||||
+1
-1
@@ -81,4 +81,4 @@ dns:
|
||||
name: "edge-cast"
|
||||
words:
|
||||
- "edgecastdns.net"
|
||||
# digest: 490a0046304402204a5c9d5de65cd9cbfb0c20eb0bd294214f519370eaedc7a0b4111889d0b96ba0022005242389d6b616acaf7531ee02c6edae5b513bca03268a63f84e46baf5294341:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100dd92ea103a6f1b572f6103f4ff933eefe5c492f2c253caaf426a565e20c9ef85022100fcd4d733862bff8d4896e2c539df05719ce276b7c12c2870854eb8044de20cc5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,4 +23,4 @@ dns:
|
||||
- type: regex
|
||||
regex:
|
||||
- "v=spf1(.+)"
|
||||
# digest: 4a0a0047304502210098e9bc7b5f5a6efe734c4539d74e4ca13946e10dee4e7311a5a6bd8861d3dd5a0220688fc5590b366da492b021acd146b34b267e318066337d6d105d2bfa721419f2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100de19f8abe369bd24782662b43e369f7836bafa4c16d99a9c52e68baf78835a1e022100d3db136a58fd3abc20c8be76ad2a27b714688afc0408efa4ac6151e53794a4dd:922c64590222798bb761d5b6d8e72950
|
||||
@@ -218,4 +218,4 @@ dns:
|
||||
name: "whimsical"
|
||||
words:
|
||||
- "whimsical"
|
||||
# digest: 4b0a00483046022100af19696fbbb87b2705719b9d39f5e75a9cea3c6313a87de9159b1ed60a6976eb022100afa92875dce6073888b98989b99599246c294970228d3700b8d821fd36392ed1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022018ed39d1161316778a3806e51f4bf714824be603db9bfd19ba0bf6fcf2872d32022100fb9045b8ab82a9c156a8eb0ccae9f6de4c47261799ea37109dd79bbe1d23d38b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,4 +22,4 @@ file:
|
||||
- 'InvalidOperationException'
|
||||
- 'UnauthorizedAccessException'
|
||||
- 'NotFound'
|
||||
# digest: 4a0a0047304502207d10d43f676ac03f90d5de0a4757e757d1a8bc4d7e69bb99e446f101d15b18d8022100aa8765f47cd5205b9af5c78bbbd350763c285b93f5d9b4f87ce99fc960c0465c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022055e217736e72f927aa32291855637a4d4a62d88481d51e8b14c08e7b2d1eb242022100c6ff9a9064d0c8843594a70a8a66aa9c9e24a50b739f0959849e2fe4484d8b65:922c64590222798bb761d5b6d8e72950
|
||||
@@ -30,4 +30,4 @@ file:
|
||||
- 'BadRequestError'
|
||||
- 'MongoError'
|
||||
- 'SequelizeDatabaseError'
|
||||
# digest: 4a0a00473045022100956e2d2e6072cf0341a6eb76f0f173767cc32eb30c76c6270eec10ae9036045b0220503923f94dda6d097d173c8f84722fb129f78862b3a9bdc70f3ec27a5bfdd479:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206b453ac694a2c05c8663102d13e9b938aeed5225d070ab99eed518ab28a4a7be02201146d5408400ad112604c8985d03be4fcfd01227b8e7120154f6c2c6176a2d54:922c64590222798bb761d5b6d8e72950
|
||||
@@ -31,4 +31,4 @@ headless:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502202def9f0939b9c009495d59fcc45a4e53f5c21c4e43cbe35509913d90262cc094022100cdab9799b8d56937fda56365dd32240bc9f97e901a4b59e00bbfd70a86b0da30:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203490f9d3cc3e02c27a39e9ca9140e65c55adf9e36701ba4b0778f5ea2ed9ef290221008d2ca11b5bd968a270adf6d15371db627dcffb442e306aacf6820bf0b76f5588:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2018-25031
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.82878
|
||||
epss-score: 0.81869
|
||||
epss-percentile: 0.99147
|
||||
cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -54,4 +54,4 @@ headless:
|
||||
words:
|
||||
- "swagger"
|
||||
case-insensitive: true
|
||||
# digest: 4b0a004830460221009aeabef438a58bf3836d81dfd29b471e543e948f670793238652ebdad6be4a75022100e4eefab1496063a33f82cb64d5d7721ada3a18f5cee561ec49c9943629968c94:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a2f7e5ac70597ad87663ef0c9ad4bee161a599d2e03938161ace1128046c9b20022046775d61a5e4cae1d9c124ef010c9e100dcf6f7b6b078485fc0fe735de5c59d6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -14,7 +14,7 @@ info:
|
||||
cvss-score: 7.2
|
||||
cve-id: CVE-2024-29882
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.01812
|
||||
epss-score: 0.02012
|
||||
epss-percentile: 0.82957
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -46,4 +46,4 @@ headless:
|
||||
- "ConnectSRS</a>"
|
||||
condition: or
|
||||
case-insensitive: true
|
||||
# digest: 4b0a00483046022100cb7c065d3d1f46a4311cdb471f6afe0f117d06bd60e805b0bc9f9cc974e10e9b022100d35eebc647e75db583d63d38016762baa3cc84652e810fee9ffad89a73529094:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206cddf49edf926f4a2fc79e6bc3d44c28d92452607fab4a78c546667823eea63e022078814f733d0906b711afdbd5826bb664f3171ae8c38e5d175d567d52c877d89c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
|
||||
cvss-score: 7.2
|
||||
cve-id: CVE-2024-38526
|
||||
epss-score: 0.56332
|
||||
epss-score: 0.66721
|
||||
epss-percentile: 0.98451
|
||||
tags: cve,cve2024,supply-chain,polyfill
|
||||
headless:
|
||||
@@ -60,4 +60,4 @@ headless:
|
||||
- "union.macoms.la"
|
||||
- "newcrbpc.com"
|
||||
part: urls
|
||||
# digest: 4a0a0047304502201096d64f0fcf071cac45f34f69eccfd1fd4d2c8fcdd0f798a63445b2895b468f022100c0494cc5abb2e052bb11f4437b5cc9919bfb400794a8cc6a3c62e5d35129fcca:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100db8ee4bad1a3f649738173744c0b13228813c8f6149eed8ce1b9428955372d7a0221009d6fdcfee495e43dc703fb4ae3f9b8928359673160b77f0da6b553db315ad3d0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -10,8 +10,6 @@ info:
|
||||
- https://www.tenable.com/plugins/was/114609
|
||||
- https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
|
||||
- https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
|
||||
classification:
|
||||
epss-score: 0.03071
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -41,4 +39,4 @@ headless:
|
||||
words:
|
||||
- "{{random_int}}"
|
||||
case-insensitive: true
|
||||
# digest: 4a0a00473045022036e53f3f929e789da67d5b1394060a391c996d197d5b92b89b1a29ba6c4a0551022100c6a0eb7e423745b36411a672f943bb1c1f83c7d6009b0d78cabf6b06038533cd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022000b042f51608cca47a2a1f7bb177f443e5aab2d7922d69d7f2b66d68888cb7fc0221009e736ccd5e74d05842fa56a943949cc17d330fb501505a2beec0c400eca3adf0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 4.4
|
||||
cve-id: CVE-2025-25062
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.25298
|
||||
epss-score: 0.38601
|
||||
epss-percentile: 0.97094
|
||||
cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -186,4 +186,4 @@ headless:
|
||||
dsl:
|
||||
- reflected_text_xss_type
|
||||
- reflected_text_xss_message
|
||||
# digest: 4a0a00473045022100b90b74395a05943022b84862855923ed3f0d4ebd88dae181f555ee333429af2d022016c375dd01704289bd1812300bd3573d66977fdad60d7e984566111ed7b7ffa6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a5afa1435b236d15615599536490803e61d1c57bd159c9b2a6d7c074e3204e3302207728ec9bdeffa792d62a6f7de273d13f778a88f935ffbeefb406321f35b0d011:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2000-0114
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.02967
|
||||
epss-score: 0.02800
|
||||
epss-percentile: 0.85545
|
||||
cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402205f1e2e9658b4b5031f4e0de671b50bb742ac3a33a72373771a436a06aa34dd7b02204f75b2cdd3eaac2623232db2cfab38cc344644a6f56dc7dc76869e055b0d93cc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f3a5e5052ec9628797b4a0195dc7dfdc41d8d4add40fcf444f5dd76289e248f60220663ea447f80771112856ef24f2e881f00c892440d3dbd1f627336ac9f72dd5b3:922c64590222798bb761d5b6d8e72950
|
||||
@@ -9,8 +9,6 @@ info:
|
||||
reference:
|
||||
- https://vulners.com/nessus/TOMCAT_SNOOP.NASL
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2000-0760
|
||||
classification:
|
||||
epss-score: 0.37735
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
@@ -37,4 +35,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502210099c180c67ea3f15d6ee54ffceb98560b1a0fae475e859ad38e9baa02759da412022037f4661740b4315fb66b4a69c8831c7f22838f9fbaab9288aaeefb9d7e5a06ef:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100c38ec76668a3b46cd038ee246cfd6ca32bfba0d9a85eb247b0d1003e0970dd5202206e604cbc55d2f11ae55b78a3b13f582c932fb0b9bee09abdfe6e0f549d576b25:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2004-0519
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00124
|
||||
epss-score: 0.00186
|
||||
epss-percentile: 0.40980
|
||||
cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402204ae398fa41f69cd70d689e0d4c8e2ba89ffc9c7ba705ba252856fc4b6a599861022013184dcf58f3c3800a5b0fc4d91c163f196088b015906ca3156b9a4a430851c8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a0048304602210088c29bd8341924dee96550f25c070c64b3ffbcdd4263658f6bedb37286c495e0022100bbaa969fc39a95abbf72a528b6fa73666362ac3af1d7ed94a39f972065c2edd7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2005-2428
|
||||
cwe-id: CWE-200
|
||||
epss-score: 0.07065
|
||||
epss-score: 0.07654
|
||||
epss-percentile: 0.91483
|
||||
cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100c1265840b66bbc938087fbd3f02bcf43b1f2eef0511818f481d30e2bdb483e1e02203292624c4ae219fe3cc801c8240411f1aa002d829c6f03cd7e33e7435c3724b5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100886ef721c95f20e2e899cabd7a5d1f28af25ad28f3e5b127ac105501debc964802200fb26d3c4ca946bcba55ad4cad10fa0b537a7c4a6bef1414002696a4dd71e120:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2005-3344
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.1015
|
||||
epss-score: 0.10150
|
||||
epss-percentile: 0.92789
|
||||
cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220245a2dd8d4bc65c9fdbcce5d9fd6e4d929ed1104273b31c0167e08a24aedb1f1022074746b0fd493ee75446bbb3c390fcd761d35280da8d20ddae168a3369d088883:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100eba37eb777f79438aa34370ec751417489fbdc27c9875b321dde0806ee141c3c022100e4b5f28d965fe4a0ab5489be0f19ba8552ee0a0c57405cea8348b327540bafdb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2005-3634
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.0214
|
||||
epss-score: 0.02140
|
||||
epss-percentile: 0.83500
|
||||
cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 4b0a004830460221008f6a5d863c2ee33f47572eb814fdea7b2197e5f03bbca14347e76a0a7ff35735022100ea64b95fdf0f03922e9d91bee058f1c318afbf4f22d340cdf0eb9c46fd6f03ff:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200a71076886733b957fe5ec2af43ca20c0bfcc4ef985474b7ac410b79ca19484c02206e7e5345f20a65009ae13dfddbf68937b6ff4503819bf72dc92b83bd25ddf504:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2005-4385
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00231
|
||||
epss-score: 0.00220
|
||||
epss-percentile: 0.44836
|
||||
cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100c08cf9bf71df90890d63d5cba93fa26b47158a3a05ca2fb4aa27abffc35bf935022031c230d7ebbde2adb2ce67f1e66b4dd8e2c2bff3a34e23e4929b7ac0e2dc0304:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022024de6f73185416c516398c724d12c4d7c3a27a26eafeda6c7c0a6e8f9db7709b02200bc9af502bb74e5ea36d4be547983c9714da9047b734277bee72b8d8d48fc2e0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2006-2842
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0094
|
||||
epss-score: 0.00909
|
||||
epss-percentile: 0.74870
|
||||
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221008fe0dc506204ac3a7809306e4a70b6f2cb9cfb9099edc296c1133b3df2a0b491022100fad1e5b5ae35a53390e055290f744c5a4a383f9c37d07e68856b88dd69989fcb:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220356f2985899529b7495f141c558373414b15e565771f883f2309fdde8f57ffde022039f993cdd57a00c0e67428bd815efc6c6169f6ee204dc62b533d1fe285e4bc5b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -13,7 +13,7 @@ info:
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
|
||||
cvss-score: 7.2
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.83233
|
||||
epss-score: 0.89189
|
||||
epss-percentile: 0.99515
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100d9e4e47cb2e2031ba7c2e73907100bf7d8f3cdc6074879c85c351c2e30e19766022100923791610ea61a181ae7522232e999d5c6a3d3da4770d972689b1a393305fe50:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221009b7ce2019233a1a4dab78f26dfa982683e34e9343e5149b17c4c7aeecb0e3c20022022448fad5fe11b5054733f026bf42e3ddcfcda5a781695de364556a9e2e4cb29:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2007-3010
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.94007
|
||||
epss-score: 0.94065
|
||||
epss-percentile: 0.99890
|
||||
cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -59,4 +59,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100b4ea32828db6e93a4397c2861ea59dad773d7ef36f16ac0b082f329c2065f63c02204e2db78bedbb914ef75bc5ad4e1b2511db66fcfc3fb27666b5d9c96cb0c11d00:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e049d9b1ddd06ff9d586414191f3665d44e3b3f29a4913cd653bbb0ba421867102203a976db1a2bc56b625c5d3b935986718a09b7b5f8daa714df1930eca654e96d7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2007-4504
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0006
|
||||
epss-score: 0.00063
|
||||
epss-percentile: 0.19921
|
||||
cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100fe15d8208006e113d99ecf5f7b5e38ec42c58622d3f67cad06dad850aaf94333022100bddfd712a6e6ac6fc735a508f8c159d322770d70aa4ba6699b2b142574caed8f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e3cb5319977a6a9d76783a9fd6f4dceaedd3048dcd4fbc4df1b05d074ba63609022100d7df5632a9677a5221468b759e0e976b30942f574994ce636e97bf3d7a3b76f7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2007-5728
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00457
|
||||
epss-score: 0.00282
|
||||
epss-percentile: 0.51310
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -57,4 +57,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022024cf56006b807e276377fd36fb437d63b17939be0ec9b7a75116c66f0d0a822b02206451ddcf2caef2947d0854ac7540b364ccfeab891f42452c78b6097b63ba073e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022029b04d7527b85b77f305198f89b79b67231232e1f15d63e0123b7670955a8b04022100b05129b789e371c3992e80ecd582b120ab1bce2e0b682ee885907f0837fef3c0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-2398
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00764
|
||||
epss-score: 0.00831
|
||||
epss-percentile: 0.73651
|
||||
cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221008ec3e522097f06d84c09b35e60dbe266ccd7e68cb5325bafe5bed8ff4727157e022100f0ae8e0997a42c36fab50820607de58b11e6b5957e7cbdb196a7db30d8b254b7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022036afde93383e45ddae2d39d1c8493aa45346c0fc49397ec75e0fca7016051fbe022071edecdf81f559646264142636cfbb6d67e1848306dd44d211a1efb08db7d39f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2008-2650
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0352
|
||||
epss-score: 0.03520
|
||||
epss-percentile: 0.87196
|
||||
cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502206cf309613104f4063640621cdc6ac76a8b1ebf4aa6e2398e29f16dc10576ec7f022100bda95259a430056547282e1978bf98df463fe215395f1f6a055fb69e275f9fca:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203ee4722b9bc3f86d13f492fe8f28c7e9240cff0e9254d3c44bc584772ebfe3a6022100c4a3dbd47dcb2edd116be32239f4f0846e7aa1e6ed546863ee6d1112d1d1498b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 9
|
||||
cve-id: CVE-2008-4668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.00268
|
||||
epss-score: 0.00276
|
||||
epss-percentile: 0.50824
|
||||
cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100cfc9e1d33955d2db814e69e5e756850a27e89ffac1da93d06eadf29d1985062e02200d6d472180b55ad8eeee0852af45275e3ffeba650fd839902c5c753d1c77b671:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220552fc4231924e143d1c6017e328fe5867c9cf8cd112849abc81079797a27df51022100f5572d7e467882078a33cb8324fc369c5f08f8af804b5b468726c544c1729967:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2008-6080
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.063
|
||||
epss-score: 0.06300
|
||||
epss-percentile: 0.90534
|
||||
cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100c3dcae9a53e7bd42a5d48f1b8c47dae32d5a06d6936d91fdd162b104ecf8c95e02202d687acf24034fcc228576a9a591f518f303c0f386b1796a5daf99511bc23334:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207cab7f188986068ae71ebe05bdd580aa7607d10c89d214bde7f41f92805b1466022100f913822c3f037833c41d0114859f633f2cfeb08440ab0d1494035a7f691ee048:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2008-6222
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01649
|
||||
epss-score: 0.01954
|
||||
epss-percentile: 0.82681
|
||||
cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022004ea26a7a9c9ae2ab3e838faf7ec3b5b86f50d4ab9848a816bd53a142bec9749022100b6269eb1fc86eff26400bb3e5f7700e320f269e599ca407a3d16d81c04d7918b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203d956ac5c3c7b38c803d4b254b97f948f0aca8881d9455716bfb24cd79d459ec022056546cffa9dca77d3c60a3e68d3a5288d07c9b1ce756435aa99eff2ef55089b8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-6465
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.01157
|
||||
epss-score: 0.00946
|
||||
epss-percentile: 0.75387
|
||||
cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -63,4 +63,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022041b9257b5bd5628030be58e1edcbdfcda9dcc70d538f4acdb683cde345153490022004e92280a5ba33c7edc8ef0a11ed86943759bceb47d4277e6c37730b483217e0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100a8ddacfdb460740bcabd58529a78bc158aeabeff9c8ef5fd2db0d66963578e14022100993afa3340dd4699cdbfc50fcfa058be309cdd1ad10e82e82b4667b14bd21d63:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 5.8
|
||||
cve-id: CVE-2009-0347
|
||||
cwe-id: CWE-59
|
||||
epss-score: 0.03639
|
||||
epss-score: 0.00975
|
||||
epss-percentile: 0.75768
|
||||
cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4a0a00473045022037fae629b878386bf90b0e8ee68ac88724fda2580b3aafbf75177ed8cad2122b022100f245301564969ae7a8a98753cfc70ecd9fd0da26015febca1e753dcbd50e2ed2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100c9794f93c6e8255cbc05e717a1174209e8568781c4f10dc5ce4892990b266e87022100e536d16ecf17c1a53b9040ecf633c6eaa299073dae46959386f0968c47e3862d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 6.4
|
||||
cve-id: CVE-2009-0932
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05612
|
||||
epss-score: 0.02929
|
||||
epss-percentile: 0.85882
|
||||
cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100be6e47c26b931add067f2e02c8d58dc5369135f3e54a5ecea0badcef7713210b022064d3dda047863eea37beedb95097f2815b35c9b29f2113109d9ac18069f904b7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100fa7a7599a9aed841b58a95abd16a3b6dd2d5c9afde444fb5362f3fe7b817d51a022061bf65ba2c58981cc2ba509e4435e0c1f9761b24409d28a327fcca15b9b0f5f0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2009-1151
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.93032
|
||||
epss-score: 0.93004
|
||||
epss-percentile: 0.99772
|
||||
cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -58,4 +58,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022074e409e038eee68bf2772c873664ba63ee34838d9b7a28e5b7125235b508a1a50220598f0a3dfbec59524ecda264e472a8bb8d00e4d81e2a588111c8398b7dd2485a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100ce354e3493b88815fc5798af69afadbd03ebe17ea03f55aa5e0b865c70faab2d02204e8bbe8d251434eb095b60ce48cdc76f7e8fae7fa1997a8f9b8d750a3658a1d2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2009-1872
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.12
|
||||
epss-score: 0.15300
|
||||
epss-percentile: 0.94335
|
||||
cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -59,4 +59,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450220678eab7565aa815d42c2f81dc82d936021df5a12a013a6e72ae996571fad811002210082ea5d9bbe37fec811c18f37eff655cb05bf215fb49ac6de3157c0ca42c51eda:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022079339845518bcf9f965afee9485fb46d0823069a1de468b8284416dc610189de022100b5daa6e74fecb0dd3b4e932724402d1059dac68062b5c053b5eb6b4fdd3b300d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2009-2100
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01877
|
||||
epss-score: 0.01710
|
||||
epss-percentile: 0.81559
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022043361ea5d6f300ad2658ab18271d61adcb266367b4934f7ae4bc23e8050d0602022057a14a756c96238b7ebb66e9d855af9dfcd3b3b06b6fbddf2bb5c37741be4297:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e2e0e06f33d9ba2643fce9a45e4bf6e8ffc08fe3bc6704d74624117aedca6bc902202d10ce90cc5426c9f11ac78bb54882d5d48dfbe04f9a0cd7d4057dbbd434f81a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2009-3053
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01573
|
||||
epss-score: 0.06037
|
||||
epss-percentile: 0.90330
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502200b972654c86f3133ebe021c742eacb65da63c5a7e1e6a40d5c698626f3d2015c022100e8fa4b132f6aede71beb3c454cd2128a9cf4f4a621083b843dba3526b8ff72c1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100d81fa7d737e9e7ae1de4ec69de1920d04c6336b05c36bf18ad688e71b6ac3446022100f37702933431e2a05b2b5f3b4e33bcbba1daedfcbe1049482b21af5029ba4a68:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2009-4223
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.04334
|
||||
epss-score: 0.04140
|
||||
epss-percentile: 0.88207
|
||||
cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502207258ab162b78d6d8cd49a89364d3ad162289a9597733a7f600bad997382ddf46022100d84e8640ebba0baaa38e95782fe4fe936e5ad963c19e6041a189c8c49bc38a94:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e561dc69cb17c55e1d32c1361da502a4ed24c8150b429857df188970a3a705b3022100bdbfe1c6e2d4fcbef5aff74e2c66bd80bfeba4020c7c6886a3782e0e45382e04:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 5.8
|
||||
cve-id: CVE-2009-5020
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.01389
|
||||
epss-score: 0.00826
|
||||
epss-percentile: 0.73572
|
||||
cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
|
||||
# digest: 4a0a0047304502202aef040328e64e7c7e13821a3c190a00ca83e0e7f6b161f7c28fa686cdd643090221008b896962392338d05cb6a4bda781f59aab16b9acea00db67b44808428e2003e0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100effbbb567e9b2d3402f1fe2f47be6a8b1d810c7d549ced4c2499ef55ee401964022014333065014916917c4332171f6e7681b3813e1c454dc586b899a19e6619087b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-0157
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06147
|
||||
epss-score: 0.04639
|
||||
epss-percentile: 0.88873
|
||||
cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -46,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402207373acc933249d64b48cede672fd4ecfe9cf284f764ab0cb429158363217ca1c02204dcdd5d0e9e0f2d03d6459c63d30aa1be621f455afeab203b69a57edbfe602b8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ca7fdb7c8b24b7db2d7e793bfa70b0fcb8d7553830c841bf3612ef3b7171e2b0022100b3f0a12c66963f7c3a9808a92e784c76626634c018c339324d7286d00441dfe8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2010-0219
|
||||
cwe-id: CWE-255
|
||||
epss-score: 0.93449
|
||||
epss-score: 0.92029
|
||||
epss-percentile: 0.99693
|
||||
cpe: cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -64,4 +64,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100f23e03229161d9c04f7fca2684a769eff592fbeeebdb7a2c76871e87e6f4f366022100b6fe6db904d1eb12438316c79099b660dbd5221e4169afde6db8c36efbd3f63d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502205e382206023c07203ee95377a6bcb381fd5e54af9d7a590431713a97652deb80022100870b4775cc779ad3ae8c8aeb9a2a7ad2567459ce8d765fd9763c8ece4691ea12:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-0759
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.04993
|
||||
epss-score: 0.03967
|
||||
epss-percentile: 0.87943
|
||||
cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022008e9444b28413d51b642feed5ab51cc5cea9c9878e0c8159197907213d91468002202ad1b4590b1903866556f09cc4c278803d89010a0a10cbb9f150dc0756a9eaf0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022033934f74766824677667e328806b8dd59585d0cacf06246f1cf6f325cf96bb9d022100fd7e7805dfb56c4bd09a965d14d9ad41353eda383bca418960490e1029298adf:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2010-1217
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.04908
|
||||
epss-score: 0.02108
|
||||
epss-percentile: 0.83380
|
||||
cpe: cpe:2.3:a:je_form_creator:je_form_creator:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502210099bc12f8bc5588f264e422f244ee8d4afef14761a1d1427d7d59d363264da05702200fcb781fe2c9d8daecc2e96320aa3af7efb6ef7c4b2797fe8341bd02da50be65:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022053d8a753cabc02c5fdfee1cf14e8a29755bbe554d650340a743785fc1855cceb02210091c3a09dd6c30a816e38eee274c41736a309ecdcce8108a72bffbcbd91e895d4:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1307
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0609
|
||||
epss-score: 0.08046
|
||||
epss-percentile: 0.91731
|
||||
cpe: cpe:2.3:a:software.realtyna:com_joomlaupdater:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402202dcd5b51d41bb2cbfe79704f15ee96fb4fb590ca6f6bc73f8bd7abd1105928070220481df2b0a9df1b7abbd3ea0990c6b97c246a7796b96261a87e99410baa9b032c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100df69829cb1cab3bbdd702c7122d9d590f83462b72db5b6315b1a2fd7b04cd5a302207b0f34368d2a35f2ac283625f1bc222749c43ee020e434b57bf959de99a89c95:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1308
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06232
|
||||
epss-score: 0.08228
|
||||
epss-percentile: 0.91834
|
||||
cpe: cpe:2.3:a:la-souris-verte:com_svmap:1.1.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100aea747f7e81bcf6c45ef1524ecb14760c2e294af59898249a8b1e67d5a6c0f0b02200dda23571d060aed7cfb3602fce2ed0d1f0591d0a3bff48c341718fed9f53512:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100d80f649973e7d843a82620997b9d07526015e1eb66afe4b1b535bcc1f25a59b802200adf21919dbe1364e77f5e5b473d8ab2cc2e2e6e77cc0a555dae20e2c33774f1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1429
|
||||
cwe-id: CWE-264
|
||||
epss-score: 0.21185
|
||||
epss-score: 0.19593
|
||||
epss-percentile: 0.95161
|
||||
cpe: cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:cp08:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -54,4 +54,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502202b22c9a6ef50abf9c22ae6387b0d40271973b72228e9131d4ec608d114ea4de402210091ae115392c0d72820ca4dcf93b0c1b3327e99a72dde84ae0043c461da64f4dd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100c30199cc1bdd0e1492db951f79b58ec41fa3a74bda905b5e930827f104eb38e90220185b9e9f2b986c533a78c88a196cb3060723a9b3fbf65973382d216f1c08dbec:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-1470
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07329
|
||||
epss-score: 0.09630
|
||||
epss-percentile: 0.92550
|
||||
cpe: cpe:2.3:a:dev.pucit.edu.pk:com_webtv:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502201b511a43a9b82cd15c6b8f3132f1cf4ad0faa372df679ec7b8beadb5c145615902210094a6befb71ab94af40c92331a098acfea5b3b834f56873e7d1b815c1de7cef53:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100d6960c148b6579853a17a630cd4d00fea1140de1adc191598ae6d178dbb34303022100852ca810bc96d7e8038832589db5c813418e739aed5f8a31734b6fd1e568899a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-1471
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0932
|
||||
epss-score: 0.09320
|
||||
epss-percentile: 0.92414
|
||||
cpe: cpe:2.3:a:b-elektro:com_addressbook:1.5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402206ed3eb043072cb6906745ba0385bf6365e71a64a6ea94beca6868d6ce296065c02207366a6676924ffcb0baf4620b1169aacad17ea05e8207d7829a4d238dc368d07:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200176f591d50b402654469e4ab3decdf85d3fc79ce71c069d8439a655a4e411c9022013e85c870cfc728162c4cc031b56bd2a04dfb1f3f3d3de0f3f23d8fd99c6d50d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-1472
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07018
|
||||
epss-score: 0.09234
|
||||
epss-percentile: 0.92374
|
||||
cpe: cpe:2.3:a:kazulah:com_horoscope:1.5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100bc71544db0c8d32d8d7a8711c494cc91cfa48620cc60a7fe1baa2b6a1399e07a02207b0657006b96de674bfc83a1fbb0a1e8b2fc53fc9470ae391ca09ddc10e777a3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f837a72aecd53f947a32775cd7ce2c919de79ba863eec98f72a6ff6ce3655396022100ad44a06a4706849f786c5bb3dc86c000bdff67ffcd430cab61032385e70c4a2c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2010-1474
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01602
|
||||
epss-score: 0.01514
|
||||
epss-percentile: 0.80419
|
||||
cpe: cpe:2.3:a:supachai_teasakul:com_sweetykeeper:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502201a22c4331e8f58e9ab01c7c38f4ba1641a31fa25cfaaf5fce6d07a45f98057d0022100d3247d54c6db2645a1f166ca6fd6c6914ae3958a4ca72fdfaf4c66934d2f8c09:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502200bfa7ac9551f1b5f5d7f78e0d99525a27e14acc814ab020096fb16698f2fe9f0022100de0ae346f5fefb5ecc6bed34adf4731b364b9555fc17248709ced6827d6796e8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2010-1475
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0244
|
||||
epss-score: 0.02440
|
||||
epss-percentile: 0.84545
|
||||
cpe: cpe:2.3:a:ternaria:com_preventive:1.0.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c0954cb4b311e43468846c72d58342bcd486172b71a97db79dbedd844bb574a70221008b568d3afd6e87e0f0f143ba15cce9e37c2268efecc7c4bcc6dc1ad8b6c178c5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100baa4ba3bfaa834142f4df99d7209d8cd9009a280519bf98f91c997f1e3a2560a022100c3e604e686356b206ebe13532296590133c899de5bf173be99e6a4b8ecf488d1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1534
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0317
|
||||
epss-score: 0.03170
|
||||
epss-percentile: 0.86445
|
||||
cpe: cpe:2.3:a:joomla.batjo:com_shoutbox:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502210093d60c4ac628318313811656653731287b36153b6d18e4a508da156db7b0c6f202204d8ce7e3d2f2ac6ba25adba532e0329106173946782d427c52eb1ba116ee9966:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100b359b61f481360c497f026ea9c2e8cd3a6c6eebdd8255e864bf051fff90005d3022100902f1727b733eb91ebac94182bf867b4e89ebd863c08ef5a652587711f1363fb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2010-1586
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.00657
|
||||
epss-score: 0.00663
|
||||
epss-percentile: 0.70327
|
||||
cpe: cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -38,4 +38,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4a0a00473045022100f42e66b5c32d971dcc7128e85ef1b9057319b8cde8c81611a75e83491c3188a3022075cf41c06037ee8f629a4acb2acc558412b33d9d38fc4215f2812a1e4cffd3c6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220049220cfd791ebd32f1264edf5f6a20a748d5ba95f70c88023082184da88b95f022100e3eea5a59102f46041f3910979e6ccb89a542cf13a161f0e91345116df5cd133:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1714
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06091
|
||||
epss-score: 0.10542
|
||||
epss-percentile: 0.92942
|
||||
cpe: cpe:2.3:a:dev.pucit.edu.pk:com_arcadegames:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100b52cdfd57a2694c6d6b07aaa97ac7c3a5e377d1a2096560402801bd6a699ecf50221008316db939be46e723c785aa868e789d629e95c584cea0f7e487a35484c1cdc54:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022053b37ef1cd84f3c403d53286809ca71bb4d3ee45529e51a35c6bf76ed2daae2002203d9620b6f2942fb93d1eff96cb5b55d0ad7fc3a55f92d500c8b2d9212ed851a8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2010-1718
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02192
|
||||
epss-score: 0.02406
|
||||
epss-percentile: 0.84442
|
||||
cpe: cpe:2.3:a:lispeltuut:com_archeryscores:1.0.6:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022078fd3ede818c0c8fa89f22594ec55da236bddff89b2526b640e88c69c529a97f0220609c64220f964d7cf19ac9cfa51cc1cd89ce1f6507737449965ad122c162517c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502201f41829486e6f0f6b9d447655df67ae7be472584a3392a9e1a880c832b6dd7c9022100c249bd8d9bd166c30af42e3a1d6f21ee1cde14383815df6ae548f1e36f93c931:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2010-1722
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01602
|
||||
epss-score: 0.01514
|
||||
epss-percentile: 0.80419
|
||||
cpe: cpe:2.3:a:dev.pucit.edu.pk:com_market:2.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c431cd158c3b87723aece30761dfb0411f110defe5826d0ab08303007b1d358a022100e29204f8818be4933f08182f9d32b1bd065f8257a7605b75a797a28d147ed961:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402202eb1b4cf2dbaf98da7a68dc5d129c9756c82e4f629597bbd933050914254320402207e0da442095e6278595b463eee006f089d2a3e16c15060a925165c73f7ddd3a2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2010-1723
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0469
|
||||
epss-score: 0.06235
|
||||
epss-percentile: 0.90482
|
||||
cpe: cpe:2.3:a:joomlacomponent.inetlanka:com_drawroot:1.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022029fe17878a502530479234eb83ea279be4019df3ad6ba2e9d0506ab8c503449602210083bca5e759cce9b83ddd995cbc6c18d318a50acde758db05d8437d97ee8f8f76:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202bdd11eb81584c4779521127c2ab2b4d07d03014e5c31acb319c85a371b39fff022100c499e14840e5e25ea53c535de6940f7f23d4c97b4572eddc397dcb12674bb47d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1870
|
||||
cwe-id: CWE-917
|
||||
epss-score: 0.93509
|
||||
epss-score: 0.93315
|
||||
epss-percentile: 0.99802
|
||||
cpe: cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
- 'LISTSERV Maestro\s+[5678]'
|
||||
- 'Administration Hub 9\.0-[123456780]'
|
||||
- 'Administration Hub [5678]'
|
||||
# digest: 490a00463044022033e45e4bdd649fa5cc6cf30d3fa39165500aba5b12a4f368dd4b6767a5d30103022051b4c8852d6401d8897d64bd4c8866331c561557088c4737ba0193cbf046856f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100d52cc7db77e7952a42ffacc9ae19b4beb63b0489fd1545896c11fd54ed540d6c022100a93394e353c9b2d89107519af8f29c0854bdb0bdde0a9d613c22494938a8ea2f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-1954
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0858
|
||||
epss-score: 0.08580
|
||||
epss-percentile: 0.92000
|
||||
cpe: cpe:2.3:a:joomlacomponent.inetlanka:com_multiroot:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100823bc82fdc95d2b3ced3c5f960b0c514a971d313b21d5e6a2eed79b2d31e6e81022100d8fad40f4b0703971b20a2bdb52aa49f72950ad57992e2db79eca3ed20a1f0a2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220432886d9cbec939bad2379e52ef7b6594ba797c8025871b822d16159f2d6f3db022100f1310fc31145c039d926adc1027240895253fa05834101544cb88df6ae601e64:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-1982
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.04499
|
||||
epss-score: 0.02057
|
||||
epss-percentile: 0.83134
|
||||
cpe: cpe:2.3:a:joomlart:com_javoice:2.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402206c92d6f2e7b67142fda15699b97d25f6494dddbbf3d48412e083a3562659775f02205675db91e408d64ae2e9f12798c30a50cc7c8dd381af933e28295f6f79c6d489:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206936d5ae0ef414c9808a78a26493ebd232c307b62c0102bc0ef0bb2f497c1b17022010b6fa012075fc2fa59920d293467be620eb1b748d1833763d237e053794f830:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-1983
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02013
|
||||
epss-score: 0.01018
|
||||
epss-percentile: 0.76283
|
||||
cpe: cpe:2.3:a:redcomponent:com_redtwitter:1.0b8:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022056e07c8143799489592cc73a14f0036f1ec611bc924226cae6b92e8bf8fb85ed02204b921318def8b7c6e7cf5bd949e7ff35959cb421591b0394244debae98fa2960:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200daad5dd12e59aeffc7d28149dacf7c9b1aa216f904bc50b9849db3d35d1ec80022042c0fbc92a32c5988488260b05628d1f16584eebed8704586cca920b9a761ec1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-2259
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.00893
|
||||
epss-score: 0.00840
|
||||
epss-percentile: 0.73789
|
||||
cpe: cpe:2.3:a:tamlyncreative:com_bfsurvey_profree:1.2.6:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100ab2a2f35004b9a469e462d635ce5b11b19b53124e385dc6614d291a0d79019ff02200a2ff0fbd2681852272a8754dd851b949fb2243d6bf2acf9cb4d2910d47ee3a7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100bd2b7b58953d40fb1a12a5df8bd39963b5037edda840c87bffef05aa1bb8586b02205496733fc2451ad4d36a773309dd212cf8a1be47acb239a2f830f0efb0429802:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-2307
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.04386
|
||||
epss-score: 0.05839
|
||||
epss-percentile: 0.90153
|
||||
cpe: cpe:2.3:h:motorola:surfboard_sbv6120e:sbv6x2x-1.0.0.5-scm-02-shpc:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221008562c27d2ddeb8e7f76be377bcc13329570a32fe857ccfa394f94c55a47b55eb022100dbe180592166307348fa75ef4e84a06cd121015f37fae493cfdcb54086a4abdd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e6209452c3cee206201f336ee8eadf4f335b2702ef7f387910f083cacb64a0cc02205d5cc4bd2a020a26ac7e2ce8e93a9ddf2642aac353aed54f22a5fb9488adcd9e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2010-2507
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0193
|
||||
epss-score: 0.01930
|
||||
epss-percentile: 0.82598
|
||||
cpe: cpe:2.3:a:masselink:com_picasa2gallery:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402202ae034710e310289f65db3f123e4d8477de690886f1604797ab6dd430b01832702207c616dd9f2499c25e2414f1e1e491df8075b65cee6e24ecbc40b07f366fa9d52:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502204379f3e6d7cf0b9ded74d37d05fc0d214e21824aa8bdc86f9ae83793a4ccae6b022100dc888cf8850e2a0d612125f76db4d62c8808bf4dcbf54c64a13907d8b97b2d6b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-2861
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.94334
|
||||
epss-score: 0.94299
|
||||
epss-percentile: 0.99935
|
||||
cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -54,4 +54,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220387af9752bc7cf71156c6bfec3f23d817e87da52b8163414e9619045324709ac02205f8cae98f5a49cc73babd7df41883d9ea98dccd59d80baff4962762eb6b38056:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100c87f054847ae2fa87f15d01d6bae3cf4a95ffa00e34a3389f0f7a7a14cac6e31022100f8f57edd28ea81110678f20181e4007908d25184c59dba3967a5f662ce2f3190:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2010-3203
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0228
|
||||
epss-score: 0.02280
|
||||
epss-percentile: 0.84015
|
||||
cpe: cpe:2.3:a:xmlswf:com_picsell:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100d2eaef0ac0a8f22b09118f408bc433acef57e5bb03ce5d551d8fc083f3395553022100e11ec1858f9d71f9fc04eb12011da67e6e3c623e0ae864ba3ccb6593381db5ae:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402205ea9c4080b09f6313aeea49791c513c840332cecdbdf4c1ac4117a9c4d46b0f802204934d5898695d357a56de64696d4469ebf8db495882a8d2849f384e99b80c11c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-4769
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02614
|
||||
epss-score: 0.08231
|
||||
epss-percentile: 0.91836
|
||||
cpe: cpe:2.3:a:janguo:com_jimtawl:1.0.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100b4af0344ae8a527c779451470e24a53b6ad63aa2445a5b3a5977efbc8813c9210220338a2d46426bbdca37d11932f13e3c5896b62029ead1b5aa46b12022f5f70497:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a004830460221009732e1ffbfedb248d8e0ec33567bbcc5b6a6ef652f086a143b7386324ca5635c022100ada19cb4d68a53f59516e329d587eb7b3a137695ef11e1604d6e0c2a2bf6593a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-4977
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.05215
|
||||
epss-score: 0.09105
|
||||
epss-percentile: 0.92312
|
||||
cpe: cpe:2.3:a:miniwork:com_canteen:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502207108180502e322f94bffb2aecf662f8ae33642b3885af4daa24f0074c9b3228d0221009f97fd8e835ead12ea4626d2f955ae66cb5476b4cb901149ca5c27d388e316d6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008d605ef5881c1831a2dc167225e5e127294f1a1970ecdaa75dc43009102b922202201d8178571be0f7846c53bd8253397d555f68f0eae85b2436ef3f11fca269025c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2010-5028
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.10291
|
||||
epss-score: 0.17118
|
||||
epss-percentile: 0.94721
|
||||
cpe: cpe:2.3:a:harmistechnology:com_jejob:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022012433756465ff881eabbd72705bdc447da2846344d4a8d67b0908b6e50e7dff50220290e75fce3e71360eb538aedc27b78879cbefe0cd5efbda5590a1c033ff4f93c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100db83a18948a12f19b4678a8c615ade6a33603691e76a4bf7e9b730d0c6460b8d022100866d805c4c9498ea0c28d7c3b91cd944f152097539b8cd0333930dab6dfecc1d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2010-5278
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.25059
|
||||
epss-score: 0.23359
|
||||
epss-percentile: 0.95712
|
||||
cpe: cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022003792c79a1581834af6f02dd96b8482bd5499d5958a3f920647a7d4a2c5c4ad4022032a762456334e45ba02a988cea7582a5274cf51b6c9fb7d73080aa07c4684299:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022064bfae8a8dae503af36740b8589f48e8c3d554ec6777a31430f06c9a8bb7510c022100c265595ca7673b05b62aa09cd5fea8d5fd27a2a125d30ac0b05fff5a73a5e187:922c64590222798bb761d5b6d8e72950
|
||||
Loaded 100 of 1961 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user