chore: generate templates checksum 🤖

CVE-2019-19492 - FreeSWITCH Event Socket - Default Credentials (ClueCon)

.github/workflows/readme-update.yml

@@ -7,14 +7,33 @@ on:
       - completed
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest
-    if: github.repository == 'projectdiscovery/nuclei-templates'
+    # A workflow_run start is accepted only from a successful Templates Stats
+    # run (tag push or manual) or KEV run (scheduled or manual on main) of this
+    # repository.
+    if: >-
+      github.repository == 'projectdiscovery/nuclei-templates' && (
+        github.event_name != 'workflow_run' || (
+          github.event.workflow_run.conclusion == 'success' &&
+          github.event.workflow_run.head_repository.full_name == github.repository && (
+            (github.event.workflow_run.path == '.github/workflows/templates-stats.yml' &&
+              (github.event.workflow_run.event == 'push' || github.event.workflow_run.event == 'workflow_dispatch')) ||
+            (github.event.workflow_run.path == '.github/workflows/kev-update.yml' &&
+              github.event.workflow_run.head_branch == 'main' &&
+              (github.event.workflow_run.event == 'schedule' || github.event.workflow_run.event == 'workflow_dispatch'))
+          )
+        )
+      )
+    permissions:
+      contents: write
     steps:
       - run: sudo apt-get install tree -y
-      - uses: actions/checkout@v7
-      - uses: actions/setup-python@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: "3.8"
       - run: python .github/scripts/update-readme.py
@@ -23,4 +42,4 @@ jobs:
         with:
           files: 'README.md README_*.md'
           message: 'docs: update README 🤖'
-      - run: git push origin $GITHUB_REF
+      - run: git push origin "$GITHUB_REF"

.github/workflows/template-checksum.yml

@@ -18,31 +18,56 @@ on:
       - 'templates-checksum.txt'
   workflow_dispatch:
 
+permissions: {}
+
 env:
   CHECKSUM_FILE: 'templates-checksum.txt'
+  NUCLEI_VERSION: '3.11.1'
 
 jobs:
   checksum:
     runs-on: ubuntu-latest
-    if: >
+    # A workflow_run start is accepted only from a successful Template Sign run
+    # on main of this repository.
+    if: >-
       github.repository == 'projectdiscovery/nuclei-templates' && (
         github.event_name == 'workflow_dispatch' ||
-        github.event_name == 'push' ||
-        github.event.workflow_run.conclusion == 'success'
+        github.event_name == 'push' || (
+          github.event.workflow_run.conclusion == 'success' &&
+          github.event.workflow_run.head_repository.full_name == github.repository &&
+          github.event.workflow_run.head_branch == 'main' &&
+          github.event.workflow_run.path == '.github/workflows/template-sign.yml' &&
+          (github.event.workflow_run.event == 'push' || github.event.workflow_run.event == 'workflow_run' || github.event.workflow_run.event == 'workflow_dispatch')
+        )
       )
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v7
-      - uses: projectdiscovery/actions/generate/checksum@v1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          templates-directory: '${{ github.workspace }}'
-          checksum-file: '${{ env.CHECKSUM_FILE }}'
+          persist-credentials: false
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
+        with:
+          go-version: 'stable'
+          cache: false
+      - name: Generate checksum
+        run: |
+          set -euo pipefail
+          go install "github.com/projectdiscovery/nuclei/v3/cmd/generate-checksum@v${NUCLEI_VERSION}"
+          "$(go env GOPATH)/bin/generate-checksum" "$GITHUB_WORKSPACE" "$CHECKSUM_FILE"
       - run: git status
-      - uses: projectdiscovery/actions/setup/git@v1
-      - uses: projectdiscovery/actions/commit@v1
+      - uses: projectdiscovery/actions/setup/git@4ff2f2094e67bb1819a069aa130a49463ecaa3f3 # v1
+      - uses: projectdiscovery/actions/commit@4ff2f2094e67bb1819a069aa130a49463ecaa3f3 # v1
         with:
           files: '${{ env.CHECKSUM_FILE }}'
           message: 'chore: generate templates checksum 🤖'
+      # The token is given to git only after the checksum is written.
       - name: Push changes
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
-          git pull origin $GITHUB_REF --rebase
-          git push origin $GITHUB_REF
+          set -euo pipefail
+          auth=$(printf 'x-access-token:%s' "$GH_TOKEN" | base64 -w0)
+          git config --local http.https://github.com/.extraheader "AUTHORIZATION: basic ${auth}"
+          git pull origin "$GITHUB_REF" --rebase
+          git push origin "$GITHUB_REF"

.github/workflows/template-sign.yml

@@ -16,66 +16,129 @@ on:
       - "📋 KEV & vKEV Tag Update"
     types:
       - completed
+    branches:
+      - main
   workflow_dispatch:
 
+permissions: {}
+
+# nuclei release that signs the templates. It is installed from the official
+# release and checked against the SHA-256 below before it runs. To update it,
+# set the new version and copy the hashes of the two zip files from
+# nuclei_<version>_checksums.txt of that release.
+env:
+  NUCLEI_VERSION: 3.11.1
+  NUCLEI_LINUX_AMD64_SHA256: ea63d4ae232808cd7c6bc00d0142428e231fab59dae01042246097d195835ab6
+  NUCLEI_WINDOWS_AMD64_SHA256: bb6cb9ff8939b753f6fcab06fd30a15f5bc61d8382a597871334c007a85ff9d2
+
 jobs:
   linux-sign:
     name: Sign All Templates (Linux)
     runs-on: ubuntu-latest
-    if: github.repository == 'projectdiscovery/nuclei-templates'
+    # A workflow_run start is accepted only from a successful scheduled or
+    # manual EPSS/KEV run on main of this repository.
+    if: >-
+      github.repository == 'projectdiscovery/nuclei-templates' && (
+        github.event_name != 'workflow_run' || (
+          github.event.workflow_run.conclusion == 'success' &&
+          github.event.workflow_run.head_repository.full_name == github.repository &&
+          github.event.workflow_run.head_branch == 'main' &&
+          (github.event.workflow_run.event == 'schedule' || github.event.workflow_run.event == 'workflow_dispatch') &&
+          (github.event.workflow_run.path == '.github/workflows/epss-update.yml' || github.event.workflow_run.path == '.github/workflows/kev-update.yml')
+        )
+      )
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v7
-      - uses: projectdiscovery/nuclei-action@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          install-only: true
-      - run: nuclei -lfa -duc -sign -ud $GITHUB_WORKSPACE -t .
+          persist-credentials: false
+
+      - name: Install nuclei
+        run: |
+          set -euo pipefail
+          dir="$RUNNER_TEMP/nuclei-bin"
+          zip="$RUNNER_TEMP/nuclei.zip"
+          mkdir -p "$dir"
+          curl -sSfL --retry 3 -o "$zip" "https://github.com/projectdiscovery/nuclei/releases/download/v${NUCLEI_VERSION}/nuclei_${NUCLEI_VERSION}_linux_amd64.zip"
+          echo "${NUCLEI_LINUX_AMD64_SHA256}  ${zip}" | sha256sum -c
+          unzip -o -q "$zip" nuclei -d "$dir"
+
+      # Only this step gets the signing key.
+      - name: Sign templates
+        run: '"$RUNNER_TEMP/nuclei-bin/nuclei" -lfa -duc -sign -ud "$GITHUB_WORKSPACE" -t .'
         env:
           NUCLEI_USER_CERTIFICATE: ${{ secrets.NUCLEI_USER_CERTIFICATE }}
           NUCLEI_USER_PRIVATE_KEY: ${{ secrets.NUCLEI_USER_PRIVATE_KEY }}
-      - uses: projectdiscovery/actions/setup/git@v1
-      - uses: projectdiscovery/actions/commit@v1
+
+      - uses: projectdiscovery/actions/setup/git@4ff2f2094e67bb1819a069aa130a49463ecaa3f3 # v1
+      - uses: projectdiscovery/actions/commit@4ff2f2094e67bb1819a069aa130a49463ecaa3f3 # v1
         with:
           files: '.'
           message: 'chore: sign templates 🤖'
+
+      # The token is given to git only after signing.
       - name: Push changes
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
-          git pull origin $GITHUB_REF --rebase
-          git push origin $GITHUB_REF
+          set -euo pipefail
+          auth=$(printf 'x-access-token:%s' "$GH_TOKEN" | base64 -w0)
+          git config --local http.https://github.com/.extraheader "AUTHORIZATION: basic ${auth}"
+          git pull origin "$GITHUB_REF" --rebase
+          git push origin "$GITHUB_REF"
 
   windows-sign:
     name: Sign Windows Templates
     needs: linux-sign
     runs-on: windows-latest
     if: github.repository == 'projectdiscovery/nuclei-templates'
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v7
-
-      - uses: projectdiscovery/nuclei-action@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          install-only: true
-          
+          persist-credentials: false
+
+      - name: Install nuclei
+        shell: bash
+        run: |
+          set -euo pipefail
+          dir="$RUNNER_TEMP/nuclei-bin"
+          zip="$RUNNER_TEMP/nuclei.zip"
+          mkdir -p "$dir"
+          curl -sSfL --retry 3 -o "$zip" "https://github.com/projectdiscovery/nuclei/releases/download/v${NUCLEI_VERSION}/nuclei_${NUCLEI_VERSION}_windows_amd64.zip"
+          echo "${NUCLEI_WINDOWS_AMD64_SHA256}  ${zip}" | sha256sum -c
+          unzip -o -q "$zip" nuclei.exe -d "$dir"
+
+      # Only this step gets the signing key.
       - name: Sign Windows Templates
-        run: nuclei -lfa -duc -sign -ud "${{ github.workspace }}" -t "code/windows/audit"
+        run: '"$RUNNER_TEMP/nuclei-bin/nuclei.exe" -lfa -duc -sign -ud "$GITHUB_WORKSPACE" -t "code/windows/audit"'
         shell: bash
         env:
           NUCLEI_USER_CERTIFICATE: ${{ secrets.NUCLEI_USER_CERTIFICATE }}
           NUCLEI_USER_PRIVATE_KEY: ${{ secrets.NUCLEI_USER_PRIVATE_KEY }}
-          
+
       - name: Configure Git
         run: |
           git config --global user.name "Ghost"
           git config --global user.email "[email protected]"
         shell: bash
-          
+
       - name: Commit Changes
         run: |
           git add code/windows/audit
           git commit -m "chore: re-sign windows templates 🤖" || echo "No changes to commit"
         shell: bash
-          
+
+      # The token is given to git only after signing.
       - name: Push Changes
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
+          auth=$(printf 'x-access-token:%s' "$GH_TOKEN" | base64 -w0)
+          git config --local http.https://github.com/.extraheader "AUTHORIZATION: basic ${auth}"
           git remote update
-          git pull origin ${{ github.ref }} --rebase || exit 1
-          git push origin ${{ github.ref }} || (git remote update && git pull origin ${{ github.ref }} --rebase && git push origin ${{ github.ref }})
-        shell: bash
+          git pull origin "$GITHUB_REF" --rebase || exit 1
+          git push origin "$GITHUB_REF" || (git remote update && git pull origin "$GITHUB_REF" --rebase && git push origin "$GITHUB_REF")
+        shell: bash

.new-additions

@@ -0,0 +1,20 @@
+http/cves/2017/CVE-2017-5963.yaml
+http/cves/2021/CVE-2021-44868.yaml
+http/cves/2022/CVE-2022-30047.yaml
+http/cves/2023/CVE-2023-49606.yaml
+http/cves/2024/CVE-2026-65600.yaml
+http/cves/2025/CVE-2025-4283.yaml
+http/cves/2025/CVE-2025-60021.yaml
+http/cves/2025/CVE-2025-69985.yaml
+http/cves/2026/CVE-2026-110355.yaml
+http/cves/2026/CVE-2026-116000.yaml
+http/cves/2026/CVE-2026-119302.yaml
+http/cves/2026/CVE-2026-27175.yaml
+http/cves/2026/CVE-2026-28318.yaml
+http/cves/2026/CVE-2026-28517.yaml
+http/cves/2026/CVE-2026-39813.yaml
+http/cves/2026/CVE-2026-64858.yaml
+http/cves/2026/CVE-2026-81648.yaml
+http/cves/2026/CVE-2026-96654.yaml
+http/cves/2026/CVE-2026-96656.yaml
+network/cves/2019/CVE-2019-19492.yaml

code/cves/2016/CVE-2016-8735.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2016-8735
     epss-score: 0.90338
-    epss-percentile: 0.99801
+    epss-percentile: 0.99802
     cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
   metadata:
     shodan-query: product:"tomcat"
@@ -83,4 +83,4 @@ code:
           - 'contains(response,"43726564656e7469616c732073686f756c6420626520537472696e675b5d20696e7374656164206f66206a6176612e7574696c2e486173684d61707572")'
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 4a0a004730450220032d704324622841a3d5ee367eb2b4fe881f5e409e9442e98cffd5554795e269022100aa10b6ce07ebc8ba89372db27b8fab569ecd2d28a8b98cc44d01c37149898989:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210095a5d16a1ba404f144ee71a2d5c83412607b4c490618aeb8365831ca1de73ff90221009064163fef8e5aef9d33ec0c1dc09f26abe9eb3528de8da4b1bff800de96e684:922c64590222798bb761d5b6d8e72950

code/cves/2016/CVE-2016-9299.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2016-9299
     cwe-id: CWE-90
     epss-score: 0.96943
-    epss-percentile: 0.99888
+    epss-percentile: 0.9989
     cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
   metadata:
     max-request: 1
@@ -126,4 +126,4 @@ code:
           - "contains(response,'hudson.remoting.UserRequest')"
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 490a004630440220121ede394661642f08d284cffc6110695207502d120cc3ae452aeb611948a0bb0220240708e264c43a29b967444d33bade1534c0a07db12d4db979afca0aa56f28e6:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205321ec5395913281cf1bdc3c48090ac290fecbdc32f9faa3f4bb00b45d5abe200220641282136837f2ae2eb718c8c433ec2502e07698e4f5eac60d0e059a2207fb17:922c64590222798bb761d5b6d8e72950

code/cves/2019/CVE-2019-14287.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2019-14287
     cwe-id: CWE-755
     epss-score: 0.63764
-    epss-percentile: 0.99226
+    epss-percentile: 0.99232
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ code:
           - '!contains(code_1_response, "root")'
           - 'contains(code_2_response, "root")'
         condition: and
-# digest: 4a0a00473045022100e1c706dcb3294b34ee977683990f03e50aff9a491a44092127de07c098c344be022047a643cf994007b33760722195f43d177f8af559613e6c9e0e6795d1d40a7053:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206fa93520ff0ae6c1595c672dad3a61c81472b0ad81ff8f05a6d21d962eb4de49022100bdc22a57e002e825809f90dea26ce7fb4da6b400f277a888db0313697dbf9e85:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-13935.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2020-13935
     epss-score: 0.86608
-    epss-percentile: 0.99743
+    epss-percentile: 0.99745
   reference:
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -281,4 +281,4 @@ code:
       - type: dsl
         dsl:
           - "contains_all(stderr, 'read tcp', 'i/o timeout') && !contains(stderr, 'websocket: close 1002 (protocol error): An invalid WebSocket frame was received - the most significant bit of a 64-bit payload was illegally set')"
-# digest: 4a0a00473045022100ff2b28b0149643ab92d0c18a6324d3e3fc859d12fb603b1b8f04681713587159022062db6ab32d26fd58f502abca5e366c8f5b6e566ed778c15625bc1dc4cf10ad0a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220260f53207d6ee48679114644debf89c03fe671aa4808b2fcb5f783768cad1a1c022100bdc0c4da7798022a198873d992d7fe068034d0795f6d276bf43361e7c48c629e:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2640.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-2640
     cwe-id: CWE-863
     epss-score: 0.15199
-    epss-percentile: 0.96779
+    epss-percentile: 0.96799
     cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ code:
           - '!contains(code_1_response, "(root)")'
           - 'contains(code_2_response, "(root)")'
         condition: and
-# digest: 4b0a00483046022100da9dcecf33273265bff589ec09eb6d89c1395440aebac3cec14308bb9914daa70221009b2790e8236250407311ea464d3bff722f96e66009a4d3eb061c380fb00910b8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022039eb7f64a9a0b19ef14ad9897456caf0db89b0c8df1656dbe7ff60928409d0c0022100d5758c9ead115b2d00634662b44929305da3ab8b9071f5a61022df1567381bb7:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-2986
     epss-score: 0.42544
-    epss-percentile: 0.98719
+    epss-percentile: 0.98727
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -630,4 +630,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4a0a00473045022100db56d9f1f98bc0eda2d879c1036c14e37cb75055156eae225602cdb685f45e0202204bce9e400522b67086d8922610185d6e20937616f437c1cdc58ac1c58de8ac2b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220077ad0665d15ccdea84ac0affe82c4e12be604bbaf4537b084e8829dbe2836c0022100f4650598afb582f1563641e03761ed122d29ae3dbcdfe67675bb35f41887a6d2:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-49105.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-49105
     cwe-id: CWE-287
     epss-score: 0.4319
-    epss-percentile: 0.98735
+    epss-percentile: 0.98742
     cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -94,4 +94,4 @@ http:
       - type: dsl
         dsl:
           - '"Username => "+ username'
-# digest: 4a0a00473045022100858ec345be8ecf1de59ba69fd9e0272853d638d3bc3ed5a60a9f23061111388202201b3442b6172fc5e3a0514d885072a18ff7273428289d8982a55a123e8e74bc96:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210080f98e8d65fdae32bda122a692be5403dcca9cf66e8e4b900fe3413e80e163ad02201425fb3815ab4259ba01cb4fdc85ad79445b568ad0e28230222cd4bb783378fc:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
     epss-score: 0.63769
-    epss-percentile: 0.99226
+    epss-percentile: 0.99233
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 4a0a00473045022012bd189b9a1cf2a2b95a2676d46835a342410a149ac661650e9a7b5a501e9582022100d7b21e9e39546c78fda0fe46ea0868dc8040ee3c9058be05a03b4dafc41ea068:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220133f534bd67e2fc8202e1a956fdeb11bad7eec1f741dc574ad1ed8b94346a16c02206c732952ec86902b8228c4566fa50fc3ad6597870e3a4469b6ec7520c47cb761:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
     epss-score: 0.04794
-    epss-percentile: 0.92013
+    epss-percentile: 0.92063
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 4a0a00473045022100964a3d115e9bf31671d6b208014b188279743df2960f3880ab84262160b71109022059c6616c7d8500149770ea33dc6787c1146ea37cfb88109e6322462c9b6d3894:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fed8981fa1e21cb50c46791da614ae078b018c375cb3c864e5690df6c6e97330022033df8607aa26156befe02766a486ea50ced41f3d519687c0616c2a99a71b7e1b:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
     epss-score: 0.28525
-    epss-percentile: 0.98147
+    epss-percentile: 0.98158
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
     verified: true
@@ -58,4 +58,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 490a004630440220132c56c671a8fbd78460939eae45a32cfa61f3a5d29b22a781feb5ec9822b06c022025e1b787ceb1d73fbd2352b65521ddeb9b514dcbe7945505225d1ce35fdf160d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203238407d7e167321c977057a2e49d3440967694321f42c561abbc09638f65f2702206735542ac389049426eb9a5a6cf080d27de193056323721f77934e40ae04b886:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-12356.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-12356
     cwe-id: CWE-77
     epss-score: 0.87432
-    epss-percentile: 0.99758
+    epss-percentile: 0.9976
     cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
   metadata:
     vendor: beyondtrust
@@ -41,4 +41,4 @@ code:
         words:
           - "0 success"
           - "1 try again later"
-# digest: 4a0a00473045022012aad26b17b7d701519b30081ed555fc8f768cecc2c4eccca9964a9c02a4e205022100e7da17fa8eefe48cdf6d1ecfca3e393ba6d63983624eaf32e24ac80553f67c82:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022061367bba18c7c7b0ecefd242be84a9430d8cfe6f71b6351371bdd971e7667e36022062622e8416a81212bc04171cec98998b3f0d536ef72198f06e5acb98e0d9f0db:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-22120.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-22120
     cwe-id: CWE-20
     epss-score: 0.76618
-    epss-percentile: 0.99546
+    epss-percentile: 0.9955
   metadata:
     max-request: 1
     vendor: zabbix
@@ -73,4 +73,4 @@ code:
       - type: word
         words:
           - "Vulnerable to CVE-2024-22120"
-# digest: 4b0a00483046022100974267b7102d5d734c8d82fbce57b5c0c9a0643159a57608245b2ca8695a6a96022100ebfbac6bf943675bce99c9f46da934487cddf6bac5dc2cad50405990e417656c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008087850cdd347007b67d47a11a2c1260b429c1e23c4c55cdde0d7981ad4be384022100892f836858c38285cb28442a05106e55bf38c86951c9e93a5a1005054b746a6d:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-4340.yaml

@@ -14,8 +14,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
     cvss-score: 7.5
     cve-id: CVE-2024-4340
-    epss-score: 0.03237
-    epss-percentile: 0.88387
+    epss-score: 0.0321
+    epss-percentile: 0.88354
   reference:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
   tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
         part: stderr
         words:
           - "RecursionError: maximum recursion depth exceeded"
-# digest: 490a00463044022073d8aa56dc20c9530f3a333f9cc1923289c3930272b8fa52fc20c27ba13f01ec0220528508082694c24ce90f19bf8e69ae801331531fb824129ebd67444b339f2f67:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207e19f947e6f0131d4027edd1d71643cecd17c7cd11f65a22f47266d914fa7ad8022004de9d89959477bd8c5e69e675d041a366f0c1872c9942e3f7b8c976b61fe1eb:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
     epss-score: 0.12454
-    epss-percentile: 0.96249
+    epss-percentile: 0.96273
   metadata:
     verified: true
     shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4b0a00483046022100900970e4b9a7805042ef9de07c92d9e4e34ce6eda0d8b9d7fbbbe004f5f0a58a022100e636c97dc4cad568a1d5859d4431ae392ca8feec64101c4d3a07557c78d4e32b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203c238f1066001e7bbacf12b2b432ae084fb925b9ddfac41cb3d723d326a059f5022100fc74d5ac1c1c6f59c98d10004d30321b6b10e71d1f31b35c78cb14f16ccb6bee:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-47575.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-47575
     cwe-id: CWE-306
     epss-score: 0.94766
-    epss-percentile: 0.99858
+    epss-percentile: 0.9986
     cpe: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
   tags: cve,cve2024,fortinet,fortimanager,kev,rce,vkev,vuln
 
@@ -147,4 +147,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022018449b2bb4d73699afb706451d74784f6a22ce145681e197b4bd582731ee2e9e022100923e5e1d911ffca36315a9293b356fa5e30e869eb945bdf4f7f81b11badbcfc6:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220555925f2c110ecd9bfe8494450ec34fd591c42a35f864d1b9f7689be0e49b17f02202045b2584873526b73c730539e671651672a2a288570b1842a19f1d2d01d1ef2:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
     epss-score: 0.43906
-    epss-percentile: 0.9876
+    epss-percentile: 0.98768
   metadata:
     verified: true
     max-request: 2
@@ -195,4 +195,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a0047304502204193c00f2b2c9272cfd592767b04fb7885ede40dcf1ceca8d16eb2efcc65c34e0221008f331b66628e6029aa755b68b955ad308ea57a9b8e14254730c444b14978f3d0:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220253204190101aeb84d9004b3972375d6881f086efc275fe6ae48f4209edaa31c0220410c68cc3a47a7eb30c2810fa634ad1e79355bef72388880ba5aac4184187967:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-56331.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-56331
     cwe-id: CWE-22
     epss-score: 0.01845
-    epss-percentile: 0.79222
+    epss-percentile: 0.79352
   metadata:
     verified: true
     shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
       - type: word
         words:
           - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4b0a00483046022100e60558f8f91abf96f9e3a419c6de0f208f631b4ac3f0aebd867eb2992595d871022100c35afddb4e2388f17b63e5b1322a54e91accd32fbd25df6ce6c09220b140c7ee:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207c80123c34e180671fc3b91413e8e43bd711da6912ed1568b49b3b70ae446fec0220143bf6e7ee5ac00e5edaa668af5612794c931fcca16a6506369ba3012abe4a28:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -15,7 +15,7 @@ info:
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
     epss-score: 0.25607
-    epss-percentile: 0.97975
+    epss-percentile: 0.97987
   metadata:
     verified: true
     shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 4a0a00473045022008da2ad1c5bb8d00b794699aaaa584ee9d881ead7bd66769f615db6e08d39e2a02210099deba1099402f2dde2a1b0bb61cd2c5f545ae3df6b410cbcf3bc39b9e05146e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dd2398b4c8a74af0a59260f756e78d6bf019aefff053dd7e4db2d1300209b325022100e49b4b86f949e5305cbf65f3a4b7b65c3fb241ff38613517ea66de4a7af1954b:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-1550.yaml

@@ -16,7 +16,7 @@ info:
     - https://towerofhanoi.it/writeups/cve-2025-1550/
   classification:
     epss-score: 0.02604
-    epss-percentile: 0.85505
+    epss-percentile: 0.85594
   metadata:
     max-request: 1
   tags: cve,cve2025,code,keras,rce,ml,vuln
@@ -77,4 +77,4 @@ code:
         part: response
         regex:
           - "root:.*:0:0:"
-# digest: 4a0a00473045022100b230368ff1d29c56cc5deb9b5c3702c036fc7ba767ef34daeaa99cfc919e698702204939b0eeb588d81c1c2453d3d309b46cea64202f82e6d6c1a746e02759bd1ac1:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022029f78690413717fd3d24dd95f012c356bcbef5c946519e7fae11a1cc333a0a7a0220760c9147413bd824d699e0095392ef3c428c13f8068d96dfba83c64abb831556:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
     epss-score: 0.20965
-    epss-percentile: 0.97582
+    epss-percentile: 0.97597
   metadata:
     verified: true
     vendor: gitlab
@@ -80,4 +80,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a00473045022100d81864f4088410775d3d5a53a5fcbf219a5d77de79f0c49b326883032401422102200fc53d85debafa919df001c0667b56ce3700200efbe89385d3a13844400fde48:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009b3a9378477664df098731a4b3a99a416c33882c5e71815f34ffe94ac64eaeca0221008981f949009a34eaee929c3c429eb5003cc706622b9878769926ed1101533e29:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32463.yaml

@@ -19,7 +19,7 @@ info:
   classification:
     cve-id: CVE-2025-32463
     epss-score: 0.563
-    epss-percentile: 0.99058
+    epss-percentile: 0.99065
     cvss-score: 9.3
     cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cwe-id: CWE-426
@@ -65,4 +65,4 @@ code:
           - "!contains(tolower(response), 'password')"
           - "!contains(tolower(response), 'a password is required')"
           - "!contains(tolower(response), 'is not in the sudoers file')"
-# digest: 4b0a00483046022100d7bef972cb1c6a7d62fca9c83bec8338a2181e3251cccaf1734370c65176e77e022100d69ef8d5bf50bef2e81849485cc58a6c57e5bdd0cc106664b7d6be8bc792b2a0:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022015277cb2684c2e8ac777a9e4a4225cd64179e0816012301437c22fea80c7bd48022023bc32c70b1d1ab03d6e7e9b39427c80335e033b50a0189beb75b13473500daf:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -16,7 +16,7 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
     epss-score: 0.47775
-    epss-percentile: 0.98861
+    epss-percentile: 0.98869
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 4b0a00483046022100edb477f66b255c30a3bd03d5640c74977cfcade3ad0edf3e6a5a1af7a840253e022100f387d7f97a1dcf0fbcd7b6152a56040c94c4b59723aa058a883ccf9e103152fc:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022000ef2ebd5bc0a7bc0b8de17aa368af2d85bb2f901b6101d1dae429acf3542be40220182552986011b57629575d77365db8b65616682a90648ae52ca82738596cc4cf:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-68926.yaml

@@ -17,8 +17,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-68926
-    epss-score: 0.3185
-    epss-percentile: 0.98315
+    epss-score: 0.32078
+    epss-percentile: 0.98336
     cwe-id: CWE-798
   metadata:
     verified: true
@@ -87,4 +87,4 @@ code:
         name: version
         regex:
           - "(\\d+\\.\\d+\\.\\d+-alpha\\.\\d+|grpc-auth-bypass)"
-# digest: 4b0a00483046022100a809da047290ad2cb28e34eefc8aba924609e817f8445330dae380bce6dc788a022100f4bde9e9683d5ce2173a8c0d6ec7a1d2550409d32912e347f8c2b001b2af2b6a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f7a763ee800430f938332ef57843152ce0b1ad395d81eedf31ee5b17fcd59d99022100d525fe9f8497d1be651715e6921b034b4332cc53ba9da877a88bac6a48da7392:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6984.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2025-6984
     epss-score: 0.01647
-    epss-percentile: 0.76674
+    epss-percentile: 0.7682
     cwe-id: CWE-200
   metadata:
     verified: true
@@ -64,4 +64,4 @@ code:
           - "bin:"
           - "daemon:"
         condition: or
-# digest: 490a0046304402203facf6849c6decccae2c4399645739df25fdbf13e6cc320e73eb5aa47eefccce02207ea20e1d6975ad5e4e11c8bba7e781474f00ddf7107bcdc8dd8f0906ae626310:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203f7273a961324e8285274266c8c9378bfbcd0d5fc9535782bc85952753a4ae220221008a6795366bfbaab28f560a884f6a88fe16d075960949170254fabbfe4deb41e6:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-9242.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-9242
     cwe-id: CWE-787,CWE-362
     epss-score: 0.92219
-    epss-percentile: 0.99823
+    epss-percentile: 0.99825
     cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -552,4 +552,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a0047304502201a421092e3a959ead141b13dbbbfebdb346052d8cc3f390a6549d6a47805e40f0221009d2fc0f2262af3f9dc925122f2ba67cc7775748a2535b646c1d5eb9c10d157e9:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200c3df6f5d6a72b3f782ddf5b6b6828b0baf5c2edcd39c4400a139bad67ba58150220466c6e8fc1e8ec718b6fbf3ab1982d2793bf28614512f81e28ee100c1b029c42:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-10795.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 8.1
     cve-id: CVE-2026-10795
     epss-score: 0.04308
-    epss-percentile: 0.91232
+    epss-percentile: 0.91286
     cwe-id: CWE-347
   metadata:
     max-request: 2
@@ -85,4 +85,4 @@ http:
           - 'status_code == 200'
           - 'contains(body, "\"udrpc_message\":\"")'
         condition: and
-# digest: 490a0046304402203cdec9f4f78aaf55d5cfec7866d22cadb0a6fb85fb78143927bc7f596522fcf402201582d8ed6cec9336fdfe622e8c8dc8ea3ae3e32bb0d05ca6ca907843003a374c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210095307dfebcac9fd10d3f456cf134c8363d29c5991054afcbd43e1464c933ffb0022100926886a1f1d833ee394de0ebd0890c562cad7ed7cb61a5012c814b2cdd497dbb:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-20182.yaml

@@ -19,8 +19,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cvss-score: 10.0
     cve-id: CVE-2026-20182
-    epss-score: 0.91817
-    epss-percentile: 0.99818
+    epss-score: 0.91091
+    epss-percentile: 0.99812
     cwe-id: CWE-287
     cpe: cpe:2.3:a:cisco:catalyst_sd-wan_controller:*:*:*:*:*:*:*:*
   metadata:
@@ -272,4 +272,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 4a0a0047304502202769ef4f4a72099c60032ba4951b7b9cf55213c2fa0990e59c8b0cd2971283dc022100fcf7fb0e6b9fd4a28089ed032944b5f75c15a207f478bed70fce307847c52a1c:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220082d05da13004c38163487fe3a3728b203fa5e2aafdae9e2040766e1b73ebd9102207e19ba6f994a68c6ad79d69d99d24a32b9e2c5a8a1947177805e6ddee79d28ec:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-24061.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2026-24061
     cwe-id: CWE-88
     epss-score: 0.98984
-    epss-percentile: 0.99929
+    epss-percentile: 0.99931
   metadata:
     verified: true
     max-request: 1
@@ -49,4 +49,4 @@ code:
           - "Last login"
           - "Debian"
         condition: and
-# digest: 4a0a00473045022065a94097ca7c40bb8bef866c1a6e607a8da23a564d3a75cdadfc656450c05cf10221008d8e4289091ce101df13ad402a376da2a88393b478c7857c13fe194ae343e537:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203dec83fd58bbc07deff0c5436c564c538c4a22ae476e5d28f81420e529b6d27d02210084a67bb80275df906d8b0843a22576e060cf2d32b27997e35e42417c3e989d55:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-8467.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2026-8467
     epss-score: 0.02111
-    epss-percentile: 0.81951
+    epss-percentile: 0.82067
     cwe-id: CWE-94
   metadata:
     verified: true
@@ -276,4 +276,4 @@ code:
         group: 1
         regex:
           - "Output: (.*)"
-# digest: 490a0046304402202e28445074f167243b29fbc7d128ff3f0dafabd7c02ecb945a04feff788916c602204f9c0a9a82f52dbd206b62400627fd0e82ef40c5ead859aaf88891bcf3a643e3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f099cd22efe9c6f1981f66c23b96c154b3f3cd998e7b5b692e74f657bc0aa6b50220408fef906ad24ab0d996f3a6657a1d2a445a5583633adcc256b4a35631bb309f:922c64590222798bb761d5b6d8e72950

cves.json

@@ -507,6 +507,7 @@
 {"ID":"CVE-2017-5689","Info":{"Name":"Intel Active Management - Authentication Bypass","Severity":"critical","Description":"Intel Active Management platforms are susceptible to authentication bypass. A non-privileged network attacker can gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability. A non-privileged local attacker can provision manageability features, gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology. The issue has been observed in versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 for all three platforms. Versions before 6 and after 11.6 are not impacted.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-5689.yaml"}
 {"ID":"CVE-2017-5868","Info":{"Name":"OpenVPN Access Server 2.1.4 - CRLF Injection","Severity":"medium","Description":"CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via \"%0A\" characters in the PATH_INFO to __session_start__/.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-5868.yaml"}
 {"ID":"CVE-2017-5871","Info":{"Name":"Odoo \u003c= 8.0-20160726 \u0026 9.0 - Open Redirect","Severity":"medium","Description":"An Open Redirect vulnerability in Odoo versions \u003c= 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2017/CVE-2017-5871.yaml"}
+{"ID":"CVE-2017-5963","Info":{"Name":"TYPO3 Caddy Extension \u003c 7.2.10 - Cross-Site Scripting","Severity":"medium","Description":"The TYPO3 Caddy shopping-cart extension (not the Caddy web server) before 7.2.10 contains a reflected cross-site scripting vulnerability caused by insufficient sanitization of the paymillToken HTTP POST parameter in Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php. An unauthenticated attacker can inject arbitrary HTML and JavaScript that is returned in the HTTP response and executed in a victim's browser. NVD lists affected releases from 2.1.4 through 7.2.7. The issue was fixed in 7.2.10 (TYPO3 Forge #79325).\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-5963.yaml"}
 {"ID":"CVE-2017-5982","Info":{"Name":"Kodi 17.1 - Local File Inclusion","Severity":"high","Description":"Kodi 17.1 is vulnerable to local file inclusion vulnerabilities because of insufficient validation of user input.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-5982.yaml"}
 {"ID":"CVE-2017-5983","Info":{"Name":"JIRA Workflow Designer Plugin in Atlassian JIRA Server \u003e 6.3.0 - Remote Code Execution (XXE)","Severity":"critical","Description":"The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-5983.yaml"}
 {"ID":"CVE-2017-6090","Info":{"Name":"PhpColl 2.5.1 Arbitrary File Upload","Severity":"high","Description":"PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/ via clients/editclient.php.","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2017/CVE-2017-6090.yaml"}
@@ -1771,6 +1772,7 @@
 {"ID":"CVE-2021-4462","Info":{"Name":"Employee Records System 1.0 - Unauthenticated File Upload RCE","Severity":"critical","Description":"Employee Records System version 1.0 contains an unrestricted file upload vulnerability in uploadID.php that allows remote unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-4462.yaml"}
 {"ID":"CVE-2021-4463","Info":{"Name":"Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download","Severity":"high","Description":"Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files through directory traversal attacks.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-4463.yaml"}
 {"ID":"CVE-2021-44848","Info":{"Name":"Thinfinity VirtualUI User Enumeration","Severity":"medium","Description":"Thinfinity VirtualUI (before v3.0), /changePassword returns different responses for requests depending on whether the username exists. It may enumerate OS users (Administrator, Guest, etc.)","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2021/CVE-2021-44848.yaml"}
+{"ID":"CVE-2021-44868","Info":{"Name":"Mingsoft MCMS 5.1 - SQL Injection","Severity":"critical","Description":"Mingsoft MCMS 5.1 contains a SQL injection vulnerability in POST /ms/cms/content/list.do via the contentCategoryId parameter (mapped to categoryId in ContentBizImpl.java / IContentDao.xml). The original PoC uses a time-based SLEEP payload. Snyk's write-up uses an authenticated request (PR:Low), while NVD rates it as unauthenticated (PR:N); this template probes the endpoint without credentials first. No vendor-fixed version was listed by Snyk at disclosure.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-44868.yaml"}
 {"ID":"CVE-2021-45027","Info":{"Name":"Oliver 5 Library Server \u003c8.00.008.053 - Local File Inclusion","Severity":"high","Description":"Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-45027.yaml"}
 {"ID":"CVE-2021-45043","Info":{"Name":"HD-Network Realtime Monitoring System 2.0 - Local File Inclusion","Severity":"high","Description":"Instances of HD-Network Realtime Monitoring System version 2.0 are vulnerable to a Local File Inclusion vulnerability which allows remote unauthenticated attackers to view confidential information.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-45043.yaml"}
 {"ID":"CVE-2021-45046","Info":{"Name":"Apache Log4j2 - Remote Code Injection","Severity":"critical","Description":"Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.","Classification":{"CVSSScore":"9"}},"file_path":"http/cves/2021/CVE-2021-45046.yaml"}
@@ -2110,6 +2112,7 @@
 {"ID":"CVE-2022-29495","Info":{"Name":"WordPress Popup Builder \u003c= 4.1.11 - Cross-Site Request Forgery","Severity":"medium","Description":"Sygnoos Popup Builder plugin \u003c= 4.1.11 for WordPress contains a cross-site request forgery caused by lack of CSRF protection in plugin settings update, letting attackers change settings without authorization, exploit requires victim to visit malicious site or click malicious link.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2022/CVE-2022-29495.yaml"}
 {"ID":"CVE-2022-29548","Info":{"Name":"WSO2 - Cross-Site Scripting","Severity":"medium","Description":"WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-29548.yaml"}
 {"ID":"CVE-2022-29775","Info":{"Name":"iSpy 7.2.2.0 - Authentication Bypass","Severity":"critical","Description":"iSpy 7.2.2.0 contains an authentication bypass vulnerability. An attacker can craft a URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-29775.yaml"}
+{"ID":"CVE-2022-30047","Info":{"Name":"Mingsoft MCMS 5.2.7 - SQL Injection","Severity":"critical","Description":"Mingsoft MCMS 5.2.7 contains a SQL injection vulnerability in the /mdiy/dict/listExcludeApp endpoint via the orderBy parameter. An unauthenticated attacker can inject SQL (spaces can be bypassed with /**/ comments) and extract or modify data. This is the same endpoint and parameter as CVE-2022-25125 (MCMS 5.2.4), reported against 5.2.7 and fixed in 5.2.8 according to Snyk. Detection uses an error-based updatexml/md5 payload consistent with the official CVE-2022-25125 nuclei template.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-30047.yaml"}
 {"ID":"CVE-2022-30073","Info":{"Name":"WBCE CMS 1.5.2 - Cross-Site Scripting","Severity":"medium","Description":"WBCE CMS 1.5.2 contains a stored cross-site scripting vulnerability via \\admin\\user\\save.php Display Name parameters.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2022/CVE-2022-30073.yaml"}
 {"ID":"CVE-2022-30489","Info":{"Name":"Wavlink WN-535G3 - Cross-Site Scripting","Severity":"medium","Description":"Wavlink WN-535G3 contains a POST cross-site scripting vulnerability via the hostname parameter at /cgi-bin/login.cgi.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-30489.yaml"}
 {"ID":"CVE-2022-30512","Info":{"Name":"School Dormitory Management System 1.0 - SQL Injection","Severity":"critical","Description":"School Dormitory Management System 1.0 contains a SQL injection vulnerability via accounts/payment_history.php:31. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-30512.yaml"}
@@ -2839,6 +2842,7 @@
 {"ID":"CVE-2023-49438","Info":{"Name":"Python Flask-Security-Too \u003c=5.3.2 - Open Redirect","Severity":"medium","Description":"An open redirect vulnerability exists in the python package Flask-Security-Too prior to version 5.3.3. Attackers can abuse the 'next' parameter on the /login and /register routes to redirect unsuspecting users to malicious sites via crafted URLs, which could lead to phishing or other attacks ([NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-49438)).\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-49438.yaml"}
 {"ID":"CVE-2023-49489","Info":{"Name":"KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)","Severity":"medium","Description":"Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-49489.yaml"}
 {"ID":"CVE-2023-49494","Info":{"Name":"DedeCMS v5.7.111 - Cross-Site Scripting","Severity":"medium","Description":"DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-49494.yaml"}
+{"ID":"CVE-2023-49606","Info":{"Name":"Tinyproxy \u003c 1.11.2 - Use After Free in HTTP Connection Header","Severity":"critical","Description":"A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.10.0 through 1.11.1. The remove_connection_headers() function in reqs.c frees a header value pointer that is subsequently reused during header iteration, leading to memory corruption. An unauthenticated remote attacker can trigger this by sending a specially crafted HTTP Connection header (e.g., Connection: Connection), causing proxy worker process crashes (denial of service) or potentially achieving remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-49606.yaml"}
 {"ID":"CVE-2023-4966","Info":{"Name":"Citrix Bleed - Leaking Session Tokens","Severity":"high","Description":"Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA ?virtual?server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2023/CVE-2023-4966.yaml"}
 {"ID":"CVE-2023-4973","Info":{"Name":"Academy LMS 6.2 - Cross-Site Scripting","Severity":"medium","Description":"A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument searched_word/searched_tution_class_type[]/searched_price_type[]/searched_duration[] leads to cross site scripting. The attack can be launched remotely.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-4973.yaml"}
 {"ID":"CVE-2023-4974","Info":{"Name":"Academy LMS 6.2 - SQL Injection","Severity":"critical","Description":"A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument price_min/price_max leads to sql injection. The attack may be launched remotely. VDB-239750 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-4974.yaml"}
@@ -3535,6 +3539,7 @@
 {"ID":"CVE-2024-9916","Info":{"Name":"HuangDou UTCMS V9 - OS Command Injection","Severity":"high","Description":"A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The exploit has been disclosed to the public and may be used.The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2024/CVE-2024-9916.yaml"}
 {"ID":"CVE-2024-9935","Info":{"Name":"PDF Generator Addon for Elementor Page Builder \u003c= 1.7.5 - Arbitrary File Download","Severity":"high","Description":"The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtw_pgaepb_dwnld_pdf() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-9935.yaml"}
 {"ID":"CVE-2024-9989","Info":{"Name":"Crypto \u003c= 2.15 - Authentication Bypass","Severity":"critical","Description":"The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.15. This is due a to limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-9989.yaml"}
+{"ID":"CVE-2026-65600","Info":{"Name":"Traefik - Authentication Bypass - Version Detection","Severity":"high","Description":"Traefik versions \u003c= v2.11.51, \u003e= v3.0.0 \u003c= v3.6.22, and \u003e= v3.7.0 \u003c= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware (CVE-2026-65600). This template passively identifies vulnerable versions by reading the version reported on the Traefik API (/api/version), which is exposed when the dashboard/API is reachable (e.g. api.insecure=true or the api@internal service routed without auth).\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2026-65600.yaml"}
 {"ID":"CVE-2025-0107","Info":{"Name":"Palo Alto Networks Expedition - OS Command Injection","Severity":"critical","Description":"An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-0107.yaml"}
 {"ID":"CVE-2025-0108","Info":{"Name":"PAN-OS Management Interface - Path Confusion to Authentication Bypass","Severity":"critical","Description":"A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authentication checks enforced by X-pan-AuthCheck header.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2025/CVE-2025-0108.yaml"}
 {"ID":"CVE-2025-0133","Info":{"Name":"PAN-OS - Reflected Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link.The primary risk is phishing attacks that can lead to credential theft—particularly if you enabled Clientless VPN.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-0133.yaml"}
@@ -3752,6 +3757,7 @@
 {"ID":"CVE-2025-41393","Info":{"Name":"Ricoh Web Image Monitor - Reflected XSS","Severity":"medium","Description":"A reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-41393.yaml"}
 {"ID":"CVE-2025-41646","Info":{"Name":"RevPi Webstatus \u003c= v2.4.5 - Authentication Bypass","Severity":"critical","Description":"An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-41646.yaml"}
 {"ID":"CVE-2025-4210","Info":{"Name":"Casdoor - Authorization Bypass","Severity":"high","Description":"Casdoor up to 1.811.0 contains an authorization bypass caused by manipulation in HandleScim function in controllers/scim.go, letting remote attackers bypass authorization, exploit requires remote access.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2025/CVE-2025-4210.yaml"}
+{"ID":"CVE-2025-4283","Info":{"Name":"SourceCodester Stock Management System 1.0 - SQL Injection Authentication Bypass","Severity":"critical","Description":"SourceCodester Stock Management System 1.0 contains a SQL injection vulnerability in the login function at /sms/classes/Login.php. The username parameter is directly interpolated into an SQL query without sanitization, allowing an unauthenticated attacker to bypass authentication and gain admin access via a crafted OR-based payload.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4283.yaml"}
 {"ID":"CVE-2025-4302","Info":{"Name":"Stop User Enumeration WordPress plugin - Authentication Bypass","Severity":"medium","Description":"Stop User Enumeration WordPress plugin \u003c 1.7.3 contains an authentication bypass caused by URL-encoding the REST API path /wp-json/wp/v2/users/, letting attackers bypass user enumeration restrictions, exploit requires crafted URL encoding.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-4302.yaml"}
 {"ID":"CVE-2025-4322","Info":{"Name":"Motors \u003c= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover","Severity":"critical","Description":"The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4322.yaml"}
 {"ID":"CVE-2025-4334","Info":{"Name":"Simple User Registration \u003c= 6.3 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4334.yaml"}
@@ -3888,6 +3894,7 @@
 {"ID":"CVE-2025-59582","Info":{"Name":"Ajax Load More \u003c 7.6.1 - Unauthenticated Sensitive Information Exposure","Severity":"medium","Description":"The Ajax Load More – Infinite Scroll plugin for WordPress is vulnerable to  Sensitive Information Exposure in all versions up to, and including, 7.6.0.2. The plugin's AJAX endpoint (wp_ajax_nopriv_alm_get_posts) allows unauthenticated  users to access non-public posts (draft, private, pending, future, trash) by\ninjecting post_status via the custom_args parameter, which bypasses the post_status authorization check in class-alm-queryargs.php.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-59582.yaml"}
 {"ID":"CVE-2025-5961","Info":{"Name":"WordPress WPvivid Backup \u0026 Migration Plugin \u003c= 0.9.116 - Authenticated Arbitrary File Upload","Severity":"high","Description":"The Migration, Backup, Staging – WPvivid Backup \u0026 Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-5961.yaml"}
 {"ID":"CVE-2025-59716","Info":{"Name":"ownCloud Guests - User Enumeration","Severity":"medium","Description":"ownCloud Guests before 0.12.5 contains an unauthenticated user enumeration vulnerability caused by insufficient validation of the token in showPasswordForm at /apps/guests/register/{email}/{token}, letting unauthenticated attackers enumerate valid guest users, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-59716.yaml"}
+{"ID":"CVE-2025-60021","Info":{"Name":"Apache bRPC Heap Profiler - Remote Command Injection","Severity":"critical","Description":"Apache bRPC versions before 1.15.0 contain a remote command injection vulnerability in the heap profiler built-in service (/pprof/heap). The extra_options query parameter is concatenated directly into a shell command string passed to popen() without any validation or sanitization, allowing unauthenticated attackers to execute arbitrary OS commands on the server. The display parameter must be set to text, svg, or flamegraph to reach the vulnerable code path, and jemalloc profiling must be active (MALLOC_CONF=prof:true).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-60021.yaml"}
 {"ID":"CVE-2025-60188","Info":{"Name":"Atarim \u003c 4.2.2 - Sensitive Information Exposure","Severity":"high","Description":"Vito Peleg Atarim \u003c= 4.2 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve embedded sensitive data remotely, exploit requires no special privileges.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-60188.yaml"}
 {"ID":"CVE-2025-6058","Info":{"Name":"WPBookit \u003c= 1.0.4 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6058.yaml"}
 {"ID":"CVE-2025-61224","Info":{"Name":"DokuWiki \u003c= 2025-05-14a Librarian - Reflected Cross-Site Scripting","Severity":"medium","Description":"DokuWiki 2025-05-14a 'Librarian' contains a stored XSS caused by improper sanitization of the 'q' parameter, letting remote attackers execute arbitrary scripts, exploit requires no special privileges.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-61224.yaml"}
@@ -3933,6 +3940,7 @@
 {"ID":"CVE-2025-69411","Info":{"Name":"ionCube Tester Plus \u003c= 1.3 - Local File Inclusion","Severity":"high","Description":"The ionCube Tester Plus plugin for WordPress versions \u003c= 1.3 is vulnerable to unauthenticated arbitrary file read via path traversal. The 'ininame' parameter in loader-wizard.php is not properly sanitized, allowing attackers to read  sensitive files such as wp-config.php and /etc/passwd without authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-69411.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
 {"ID":"CVE-2025-69971","Info":{"Name":"FUXA \u003c= 1.2.7 - Hardcoded JWT Secret Authentication Bypass","Severity":"critical","Description":"FUXA v1.2.7 contains a hardcoded credentials vulnerability caused by use of a hard-coded secret key in server/api/jwt-helper.js, letting remote attackers forge admin tokens and bypass authentication, exploit requires no special conditions.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-69971.yaml"}
+{"ID":"CVE-2025-69985","Info":{"Name":"FUXA \u003c= 1.2.8 - Authentication Bypass to Remote Code Execution","Severity":"critical","Description":"FUXA versions up to and including 1.2.8 contain an authentication bypass in the jwt-helper.js middleware. The requireAuth function trusts the HTTP Referer header containing '/fuxa' (or localhost/loopback patterns) to whitelist requests as \"internal\", skipping JWT verification entirely. This allows unauthenticated attackers to POST to /api/runscript and execute arbitrary Node.js code server-side via Module._compile(), typically running as root inside Docker deployments.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-69985.yaml"}
 {"ID":"CVE-2025-71243","Info":{"Name":"SPIP Saisies - Remote Code Execution","Severity":"critical","Description":"SPIP Saisies plugin 5.4.0 through 5.11.0 contains a remote code execution caused by an unspecified flaw, letting attackers execute arbitrary code on the server, exploit requires no special conditions.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-71243.yaml"}
 {"ID":"CVE-2025-71257","Info":{"Name":"BMC FootPrints - Authentication Bypass","Severity":"medium","Description":"BMC FootPrints versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability in the password reset functionality. Unauthenticated attackers can access the /footprints/servicedesk/passwordreset/request/ endpoint to obtain a valid SEC_TOKEN session cookie without proper authentication. This vulnerability enables exploitation of other vulnerabilities in the chain including CVE-2025-71258 and CVE-2025-71259 (SSRF) and CVE-2025-71260 (deserialization RCE).\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-71257.yaml"}
 {"ID":"CVE-2025-71258","Info":{"Name":"BMC FootPrints 'searchWeb' - Server-Side Request Forgery","Severity":"high","Description":"BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery (SSRF) vulnerability in the /footprints/servicedesk/import/searchWeb endpoint. The 'url' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling access to internal services and bypassing firewall restrictions. This vulnerability is part of a pre-authenticated RCE chain when combined with CVE-2025-71257 (auth bypass) and CVE-2025-71260 (deserialization).\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-71258.yaml"}
@@ -3987,6 +3995,7 @@
 {"ID":"CVE-2026-108578","Info":{"Name":"Neterbit NW-431F - Unauthenticated SMS Disclosure","Severity":"medium","Description":"Neterbit NW-431F 20250715 contains an information disclosure vulnerability caused by manipulation in /sms.json of the Embedded Web Server, letting remote attackers access sensitive information, exploit requires no special conditions.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-108578.yaml"}
 {"ID":"CVE-2026-109618","Info":{"Name":"PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash Detection","Severity":"critical","Description":"PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-109618.yaml"}
 {"ID":"CVE-2026-109619","Info":{"Name":"PHP 8.2 \u003c 8.2.35, 8.3 \u003c 8.3.36, 8.4 \u003c 8.4.27, 8.5 \u003c 8.5.12 - Use-After-Free Remote Code Execution","Severity":"critical","Description":"PHP 8.2 before 8.2.35, 8.3 before 8.3.36, 8.4 before 8.4.27, and 8.5 before 8.5.12 contain a use-after-free caused by request-owned global state that is not reset before the request heap is freed, letting unauthenticated attackers execute arbitrary code in a subsequent request handled by the same worker; exploitation requires a crafted request sequence and a reachable session or INI consumer.\nThis template performs a passive version check against the PHP version disclosed in the X-Powered-By or Server response header and does not send a crafted request. It follows same-origin redirects (same host and port); redirects to another origin are ignored so a third-party response cannot be attributed to the scanned host. Limitations: detection requires the version to be exposed, so hosts with expose_php=Off and no PHP version in the Server header, hosts behind a proxy or FastCGI configuration that strips these headers, and applications that override them are not detected. These headers can also be spoofed, so a match is only as trustworthy as the disclosed header. Builds that backport the fix while keeping the upstream version number (for example 8.2.34-1ubuntu1) still match, so a match reports an affected upstream version rather than confirmed exploitability. Pre-release or development builds of a fixed version (for example 8.2.35RC1) and responses that advertise conflicting versions in different headers are not matched.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-109619.yaml"}
+{"ID":"CVE-2026-110355","Info":{"Name":"Imperia CMS SiteActive \u003c=11.5.4 - Unauthenticated SSTI Remote Code Execution","Severity":"critical","Description":"Imperia CMS versions 11.5.4 and below are vulnerable to unauthenticated server-side template injection via the TEMPLATE parameter in /cgi-bin/site_active.pl. An attacker escapes the generated include directive, injects PHP code, and triggers the PHPExec postconverter to execute arbitrary system commands. Requires CGI-enabled installations with SiteActive HTTP access and PHP available.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-110355.yaml"}
 {"ID":"CVE-2026-110372","Info":{"Name":"WordPress OttoKit Plugin \u003c= 1.1.40 - Unauthenticated Privilege Escalation via connection-denied Token","Severity":"critical","Description":"OttoKit (formerly SureTriggers) WordPress plugin \u003c= 1.1.40 unauthenticated privilege escalation. When an admin denies the OttoKit SaaS connection, the plugin stores the fixed public string 'connection-denied' as the site API secret. The RestController::autheticate_user permission callback reads the 'st_authorization' request header, strips a 'Bearer ' prefix via sscanf($token,'Bearer %s'), then hash_equals() it against the stored secret. An attacker who sends 'st-authorization: Bearer connection-denied' is authenticated to the automation REST API and can create administrator accounts. Fixed in 1.1.41.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-110372.yaml"}
 {"ID":"CVE-2026-110447","Info":{"Name":"Collabora Built-in CODE Server \u003c 26.4.303 - OS Command Injection","Severity":"critical","Description":"Collabora Online Built-in CODE Server before 26.4.303 contains a command injection caused by improper handling in proxy.php when the CODE server is not running, letting remote attackers execute OS commands, exploit requires CODE server to be stopped.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-110447.yaml"}
 {"ID":"CVE-2026-1115","Info":{"Name":"parisneo/lollms \u003c 2.2.0 - Authenticated Stored XSS","Severity":"high","Description":"parisneo/lollms \u003c 2.2.0 contains a stored XSS caused by unsanitized user input in create_post function in backend/routers/social/__init__.py, letting attackers inject malicious scripts executed in user browsers, exploit requires crafted post submission.\n","Classification":{"CVSSScore":"9.0"}},"file_path":"http/cves/2026/CVE-2026-1115.yaml"}
@@ -3996,6 +4005,7 @@
 {"ID":"CVE-2026-115574","Info":{"Name":"Zulip Server 11.0 - 12.1 - Unauthenticated Custom Profile Field Disclosure","Severity":"medium","Description":"Zulip 11.0 to 12.1 contains an information disclosure caused by missing access-control check in GET /json/users endpoint, letting unauthenticated spectators access all users' custom profile fields, exploit requires web-public channels enabled.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-115574.yaml"}
 {"ID":"CVE-2026-11565","Info":{"Name":"WordPress Advanced File Manager \u003c 5.4.13 - Arbitrary File Read","Severity":"high","Description":"The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server.\n","Classification":{"CVSSScore":"8.5"}},"file_path":"http/cves/2026/CVE-2026-11565.yaml"}
 {"ID":"CVE-2026-115886","Info":{"Name":"MLflow \u003c3.17.0 - Unauthenticated SSRF via Third-Party (TruLens) Scorer","Severity":"medium","Description":"MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party scorer data that Scorer.model_validate_json resolves using a module-path allowlist without constraining the selected class or its constructor arguments. When optional trulens and trulens-providers-litellm packages are installed, an attacker can select mlflow.genai.scorers.trulens, choose a model URI outside MLflow's native provider registry so execution uses the LiteLLM fallback, and supply api_base and api_key values that cause the server to send an outbound request to an attacker-chosen or internal host with attacker-controlled headers and body. The vulnerable deserialization occurs before a tracking-store lookup or job submission.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-115886.yaml"}
+{"ID":"CVE-2026-116000","Info":{"Name":"PrivateGPT - Server-Side Request Forgery via UriArtifact","Severity":"high","Description":"Zylon PrivateGPT 1.0.0/1.0.1 contains a server-side request forgery caused by manipulation of the Value argument in load_file_from_uri function of URI Artifact Loader, letting remote attackers initiate SSRF, exploit requires crafted request.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2026/CVE-2026-116000.yaml"}
 {"ID":"CVE-2026-116006","Info":{"Name":"Ruoyi-Vue-Pro - Unauthenticated Admin Takeover via Predictable SMS Code","Severity":"critical","Description":"ruoyi-vue-pro (Yudao) ships base configuration yudao.sms-code.begin-code=end-code=9999, so every generated SMS verification code is the constant \"9999\" in all profiles. The anonymous SMS-login flow therefore grants an access token to any account whose mobile number is known: send-sms-code followed by sms-login with code 9999 issues a full token, including for the seeded super administrator account (mobile 18818260272 in the shipped SQL). No CAPTCHA hook exists for scene=21 in any profile.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-116006.yaml"}
 {"ID":"CVE-2026-116067","Info":{"Name":"Paisa \u003c 0.7.8 - Unauthenticated Path Traversal","Severity":"high","Description":"Paisa \u003c 0.7.8 contains a path traversal vulnerability caused by improper sanitization of file names in GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers, letting unauthenticated attackers read arbitrary files and delete backups via ../ sequences.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-116067.yaml"}
 {"ID":"CVE-2026-116070","Info":{"Name":"Docker-Proxy hubcmdui - Missing Authentication on /api/config","Severity":"medium","Description":"Docker-Proxy through 5.1.9 exposes the hubcmdui configuration endpoint /api/config without authentication. An unauthenticated remote attacker can read the full server configuration, including the WeChat/Telegram monitoring webhook URLs and bot token inside monitoringConfig, the menuItems structure and docker host settings, and can overwrite configuration via the unauthenticated POST handler. The fix restricts anonymous callers to a public subset (theme, language, logo, proxyDomain).\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-116070.yaml"}
@@ -4014,6 +4024,7 @@
 {"ID":"CVE-2026-118267","Info":{"Name":"WP Data Access \u003c= 5.5.89 - Incorrect Authorization to Privilege Escalation","Severity":"high","Description":"The WP Data Access plugin for WordPress is vulnerable to Incorrect Authorization leading to Privilege Escalation in all versions up to, and including, 5.5.89. The plugin's write REST API endpoints (wpda/app/update, wpda/app/delete, wpda/app/insert) pass attacker-supplied key and val parameters directly to database operations without enforcing the container's row-filter (defaultWhere) or per-column allow-list (isSelected) restrictions that are correctly applied on read endpoints. Exploitation by unauthenticated attackers requires that an administrator has published a Data App whose rest_api.authorization is set to 'anonymous' and whose container has write transactions (update, delete, or insert) enabled. This is an explicitly advertised use-case of the plugin. When this precondition is met, an attacker can overwrite the administrator's password in wp_users and authenticate as admin for full site takeover.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-118267.yaml"}
 {"ID":"CVE-2026-118523","Info":{"Name":"EventPrime \u003c 4.3.6.1 - Unauthenticated Pending Post Disclosure","Severity":"medium","Description":"EventPrime WordPress plugin \u003c 4.3.6.1 contains a broken access control vulnerability caused by improper handling of Pending Review post status, letting unauthenticated users view non-public content awaiting review, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-118523.yaml"}
 {"ID":"CVE-2026-118539","Info":{"Name":"Drupal Commerce Core \u003c 3.3.13 / \u003c 8.x-2.41 - Guest Cart Admin Access Bypass","Severity":"critical","Description":"Drupal Commerce Core before 3.3.13 on the 3.x branch and before 8.x-2.41\non the 2.x branch does not sufficiently protect certain order administration\nroutes. This template finds a public product using a bounded set of 63\ncanonical product IDs, adds one item to a fresh guest cart, and checks\nwhether the guest can read that cart order's administrative state-transition\nform. No account, prior order ID, JSON:API, or checkout is required. The\nguest draft order persists. Sites without a usable product among the sampled\nIDs produce no finding, which is inconclusive.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-118539.yaml"}
+{"ID":"CVE-2026-119302","Info":{"Name":"NotificationX \u003c 3.3.7 - Unauthenticated Notification Preview","Severity":"high","Description":"NotificationX WordPress plugin \u003c 3.3.7 contains an authentication bypass caused by missing capability, authentication, and nonce checks on notification preview path, letting unauthenticated attackers disclose private content and execute arbitrary shortcodes, exploit requires crafted preview data on front-end requests.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-119302.yaml"}
 {"ID":"CVE-2026-119495","Info":{"Name":"WordPress Better Search \u003c 4.5.3 - Unauthenticated Arbitrary Post Type Content Disclosure","Severity":"medium","Description":"WebberZone Better Search \u003c= 4.5.2 contains a broken access control caused by incorrectly configured access control security levels, letting attackers exploit unauthorized access, exploit requires no special privileges.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-119495.yaml"}
 {"ID":"CVE-2026-120201","Info":{"Name":"Jpom 2.10.0-2.11.12 - Authentication Bypass","Severity":"critical","Description":"Jpom 2.10.0 through 2.11.12 contains an authentication bypass caused by injection of query conditions into the JPOM-USER-TOKEN header, letting unauthenticated attackers gain super-administrator access and execute commands, exploit requires crafted header injection.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-120201.yaml"}
 {"ID":"CVE-2026-120442","Info":{"Name":"ape-volo-admin \u003c= 3.5.2 - Authentication Bypass via Hardcoded JWT Signing Key","Severity":"critical","Description":"ape-volo-admin \u003c 3.6.1 contains an authentication bypass caused by a hardcoded JWT signing key in appsettings.json, letting unauthenticated attackers forge administrator tokens and gain full API control, exploit requires knowledge of the hardcoded key.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-120442.yaml"}
@@ -4144,6 +4155,7 @@
 {"ID":"CVE-2026-26980","Info":{"Name":"Ghost CMS Content API - SQL Injection","Severity":"critical","Description":"Ghost CMS before 6.19.1 is vulnerable to a blind SQL injection in the /ghost/api/content/tags/ endpoint via the filter parameter. This template checks for the vulnerability by sending a boolean-based payload.\n","Classification":{"CVSSScore":"9.4"}},"file_path":"http/cves/2026/CVE-2026-26980.yaml"}
 {"ID":"CVE-2026-2699","Info":{"Name":"Progress ShareFile Storage Zones Controller - Authentication Bypass","Severity":"critical","Description":"Customer Managed ShareFile Storage Zones Controller (SZC) contains an authentication bypass (Execution After Redirect) that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-2699.yaml"}
 {"ID":"CVE-2026-27174","Info":{"Name":"MajorDoMo - Unauthenticated RCE","Severity":"critical","Description":"MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-27174.yaml"}
+{"ID":"CVE-2026-27175","Info":{"Name":"MajorDoMo - OS Command Injection via Race Condition","Severity":"critical","Description":"MajorDoMo (Major Domestic Module) is vulnerable to unauthenticated OS command injection via rc/index.php. The $param variable is interpolated into a command string within double quotes without escapeshellarg() sanitization, and the cycle_execs.php worker executes the queued command via exec() without sanitization. An attacker triggers cycle_execs.php to start the polling worker, then injects a malicious command via the rc endpoint. Detection requires the cycle_execs.php worker to be running, which is the default state for deployed MajorDoMo instances.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-27175.yaml"}
 {"ID":"CVE-2026-27176","Info":{"Name":"MajorDoMo - Cross-Site Scripting","Severity":"medium","Description":"MajorDoMo contains a reflected XSS caused by unsanitized $qry parameter in command.php, letting attackers inject arbitrary JavaScript via crafted URLs, exploit requires victim to visit malicious URL.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-27176.yaml"}
 {"ID":"CVE-2026-27454","Info":{"Name":"Discourse \u003c=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass","Severity":"medium","Description":"Discourse versions before 2026.1.2, 2026.2.1, and 2026.3.0-latest.1 contain an authorization bypass in PostsController#display_post. The controller calls post.revert_to(params[:version]) directly whenever a version query parameter is present, without checking whether the corresponding PostRevision is hidden or whether the caller has permission to view edit history. By requesting a post at its publicly known version number via GET /posts/:id.json?version=\u003cpublic_version\u003e, the next PostRevision's stored modifications are applied unconditionally. If staff have hidden that revision, its pre-edit content is returned to an unauthenticated caller. On patched installs the same request is rejected with 403 because guardian.ensure_can_see!(post_revision) is evaluated first.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-27454.yaml"}
 {"ID":"CVE-2026-27483","Info":{"Name":"MindsDB - Remote Code Execution","Severity":"high","Description":"MindsDB \u003c 25.9.1.1 contains a remote code execution caused by path traversal in the /api/files upload file module, letting authenticated attackers write arbitrary files and execute commands, exploit requires authentication.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-27483.yaml"}
@@ -4161,11 +4173,13 @@
 {"ID":"CVE-2026-27971","Info":{"Name":"Qwik - Unauthenticated RCE via server$ Deserialization","Severity":"critical","Description":"Qwik \u003c=1.19.0 contains an insecure deserialization vulnerability in the server$ RPC mechanism, letting unauthenticated attackers execute arbitrary code remotely, exploit requires require() availability at runtime.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-27971.yaml"}
 {"ID":"CVE-2026-28141","Info":{"Name":"NextGEN Gallery \u003c= 4.2.3 - Reflected Cross-Site Scripting","Severity":"high","Description":"NextGEN Gallery through 4.2.3 reflects a URL-decoded `ngg_tag` route value into the generated tag page without the context-specific escaping added in 4.2.4. An unauthenticated attacker can break out of the tag context and inject an auto-executing script. This template injects an `svg onload` payload carrying a random nonce and matches its unencoded reflection; slash and backtick syntax keep the request off common WAF signatures.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-28141.yaml"}
 {"ID":"CVE-2026-28288","Info":{"Name":"Dify User Enumeration via Observable Response Discrepancy","Severity":"medium","Description":"Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-28288.yaml"}
+{"ID":"CVE-2026-28318","Info":{"Name":"SolarWinds Serv-U - Denial of Service","Severity":"high","Description":"SolarWinds Serv-U contains a denial of service vulnerability caused by specially crafted POST requests with Content-Encoding: deflate, letting unauthenticated attackers crash the Serv-U service, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-28318.yaml"}
 {"ID":"CVE-2026-28358","Info":{"Name":"NocoDB - User Enumeration","Severity":"medium","Description":"NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered emails, allowing user enumeration. This issue has been patched in version 0.301.3.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-28358.yaml"}
 {"ID":"CVE-2026-28409","Info":{"Name":"WeGIA \u003c= 3.6.4 - Remote Code Execution","Severity":"critical","Description":"WeGIA \u003c= 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-28409.yaml"}
 {"ID":"CVE-2026-28411","Info":{"Name":"WeGIA \u003c 3.6.5 - Unauthenticated Authentication Bypass via extract()","Severity":"critical","Description":"WeGIA \u003c 3.6.5 contains an authentication bypass caused by unsafe use of extract() on $_REQUEST, letting unauthenticated attackers bypass authentication and access protected areas, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-28411.yaml"}
 {"ID":"CVE-2026-28414","Info":{"Name":"Gradio - Absolute Path Traversal","Severity":"high","Description":"Gradio \u003c 6.7 on Windows with Python 3.13+ contains an absolute path traversal caused by incorrect path validation in path joining logic, letting unauthenticated attackers read arbitrary files from the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-28414.yaml"}
 {"ID":"CVE-2026-28496","Info":{"Name":"FOSSBilling - Server-Side Template Injection","Severity":"critical","Description":"A Server-Side Template Injection (SSTI) vulnerability exists in FOSSBilling's template rendering system. Administrators with access to features that render Twig templates (email templates, mass mail campaigns, custom payment adapters, and the string_render API endpoint) can inject arbitrary Twig expressions, leading to information disclosure and remote code execution. The vulnerability exists because Twig templates are rendered without a sandbox, allowing access to the full Twig environment, API context, and the application's dependency injection container.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-28496.yaml"}
+{"ID":"CVE-2026-28517","Info":{"Name":"openDCIM - Unauthenticated SQL Injection to OS Command Injection","Severity":"critical","Description":"openDCIM version 23.04 contains a command injection caused by unsanitized 'dot' configuration parameter passed to exec() in report_network_map.php, letting attackers execute arbitrary OS commands, exploit requires ability to modify fac_Config.dot value.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-28517.yaml"}
 {"ID":"CVE-2026-29014","Info":{"Name":"MetInfo CMS \u003c= 8.1 - Remote Code Execution","Severity":"critical","Description":"MetInfo CMS 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability caused by insufficient input neutralization in the execution path, letting remote attackers execute arbitrary code remotely, exploit requires crafted requests.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-29014.yaml"}
 {"ID":"CVE-2026-29058","Info":{"Name":"WWBN AVideo Encoder \u003c 7.0 - Unauthenticated OS Command Injection","Severity":"critical","Description":"AVideo \u003c 7.0 contains a command injection caused by shell command substitution in the base64Url GET parameter, letting unauthenticated attackers execute arbitrary OS commands, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-29058.yaml"}
 {"ID":"CVE-2026-29059","Info":{"Name":"Windmill/Nextcloud Flow \u003c 1.603.3 - Unauthenticated Path Traversal","Severity":"critical","Description":"Windmill \u003c 1.603.3 contains a path traversal caused by unsanitized filename parameter in get_log_file endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-29059.yaml"}
@@ -4240,6 +4254,7 @@
 {"ID":"CVE-2026-39365","Info":{"Name":"Vite Dev Server - Path Traversal in Optimized Deps .map Handling","Severity":"medium","Description":"Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePath(path.resolve(root, url.slice(1))) and calls readFile without restricting ../ segments in the URL. This allows an attacker to bypass server.fs.strict and retrieve auto-generated sourcemaps for files located outside the project root, leaking absolute filesystem paths. Only dev servers explicitly exposed to the network using --host or server.host are affected.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-39365.yaml"}
 {"ID":"CVE-2026-39468","Info":{"Name":"Meta Box \u003c= 5.11.1 - Arbitrary File Deletion","Severity":"high","Description":"The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajax_delete_file function. This makes it possible for authenticated attackers with Contributor-level access and above to delete arbitrary files on the server.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2026/CVE-2026-39468.yaml"}
 {"ID":"CVE-2026-39808","Info":{"Name":"Fortinet FortiSandbox - Command Injection","Severity":"critical","Description":"Fortinet FortiSandbox 4.4.0 through 4.4.8 contains a command injection caused by improper neutralization of special elements in OS commands, letting attackers execute unauthorized code or commands, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-39808.yaml"}
+{"ID":"CVE-2026-39813","Info":{"Name":"Fortinet FortiSandbox - Path Traversal Authentication Bypass","Severity":"critical","Description":"A path traversal vulnerability (CWE-24) in the FortiSandbox JRPC API is_valid_session() function allows an unauthenticated attacker to bypass authentication. The user-supplied session value is passed to os.path.join() without validation. A session of \"../../tmp/\" resolves to /tmp/, which always exists and has a recent mtime, so the session check succeeds. This grants unauthenticated access to read-only JRPC methods such as sys/status (version, hostname, serial number, and resource usage). Affects FortiSandbox 4.4.0 through 4.4.8 and 5.0.0 through 5.0.5. Fixed in 4.4.9 and 5.0.6 (FG-IR-26-112). The patched is_valid_session() accepts only 32-character hexadecimal session IDs.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-39813.yaml"}
 {"ID":"CVE-2026-40105","Info":{"Name":"XWiki - Cross-Site Scripting","Severity":"medium","Description":"XWiki is vulnerable to reflected Cross-Site Scripting (XSS) via the `viewer=changes` endpoint. The `rev2` parameter is not properly sanitised before being rendered in the response, allowing an attacker to inject arbitrary JavaScript. Affects XWiki versions prior to the patched release.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-40105.yaml"}
 {"ID":"CVE-2026-40151","Info":{"Name":"PraisonAI AgentOS - Information Disclosure","Severity":"medium","Description":"PraisonAI's AgentOS FastAPI application server exposes an unauthenticated `GET /api/agents` endpoint that lists every registered agent's name, role and the opening of its instructions (system prompt). No authentication is enforced on the route, allowing a remote attacker to enumerate agent configurations and harvest sensitive details embedded in system prompts, such as internal API references, business logic and credential hints. This endpoint belongs to the AgentOS FastAPI server and is distinct from the legacy Flask `/agents` server tracked as CVE-2026-44338.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-40151.yaml"}
 {"ID":"CVE-2026-4020","Info":{"Name":"Gravity SMTP WordPress Plugin - Sensitive Information Exposure","Severity":"high","Description":"Gravity SMTP WordPress plugin \u003c= 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-4020.yaml"}
@@ -4405,6 +4420,7 @@
 {"ID":"CVE-2026-6433","Info":{"Name":"FlipperCode Custom CSS, JS \u0026 PHP \u003c= 2.0.7 - Remote Code Execution","Severity":"critical","Description":"Custom css-js-php WordPress plugin through 2.0.7 contains a command injection caused by unsanitized user input used in SQL query and passed to eval(), letting unauthenticated attackers execute arbitrary PHP code on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-6433.yaml"}
 {"ID":"CVE-2026-64638","Info":{"Name":"WordPress Core \u003c 7.0.3 - Preauth Reflected XSS (XSS2Shell)","Severity":"high","Description":"Pre-authentication reflected XSS in WordPress wp-login.php (CVE-2026-64638).\nThe flaw exploits a parser differential between PHP strip_tags() and\nWordPress KSES. Tags with whitespace after \u003c (e.g. \"\u003c area\") survive\nstrip_tags() but are normalized to valid HTML by KSES, leading to\nattacker-controlled DOM elements that trigger automatic JavaScript\nexecution via user-profile.js. No user interaction required.\nAffects all WordPress versions \u003c 7.0.3.\n","Classification":{"CVSSScore":"8.9"}},"file_path":"http/cves/2026/CVE-2026-64638.yaml"}
 {"ID":"CVE-2026-64849","Info":{"Name":"MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass","Severity":"critical","Description":"MLflow \u003e 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-64849.yaml"}
+{"ID":"CVE-2026-64858","Info":{"Name":"vulnerability-operator \u003c 0.28.16 - Unauthenticated Report Directory Listing","Severity":"medium","Description":"vulnerability-operator \u003c 0.28.16 contains an information disclosure caused by unauthenticated access to /report/ HTTP endpoint exposing vulnerability scan reports, letting unauthenticated attackers access sensitive vulnerability data, exploit requires network access to operator HTTP port.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-64858.yaml"}
 {"ID":"CVE-2026-6495","Info":{"Name":"WordPress Ajax Load More \u003c 7.8.4 - Reflected Cross-Site Scripting","Severity":"high","Description":"The Ajax Load More WordPress plugin \u003c 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting attack which could be used against high privilege users such as administrators.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-6495.yaml"}
 {"ID":"CVE-2026-65442","Info":{"Name":"FormCraft3 \u003c= 3.9.15 - Server-Side Request Forgery","Severity":"high","Description":"Unauthenticated Server Side Request Forgery (SSRF) in FormCraft \u003c= 3.9.15 versions.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2026/CVE-2026-65442.yaml"}
 {"ID":"CVE-2026-65694","Info":{"Name":"Microweber CMS \u003c= 2.0.20 - Unauthenticated Arbitrary File Read","Severity":"high","Description":"Microweber CMS \u003c= 2.0.20 contains a path traversal vulnerability caused by failure to normalize path query parameter in static file controller, letting unauthenticated remote attackers read arbitrary files.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-65694.yaml"}
@@ -4442,6 +4458,7 @@
 {"ID":"CVE-2026-8089","Info":{"Name":"WordPress weMail \u003c 2.1.3 - Cross-Site Scripting","Severity":"high","Description":"The weMail plugin for WordPress \u003c 2.1.3 is vulnerable to reflected cross-site scripting. The plugin does not properly escape a user-supplied parameter before reflecting it into an HTML attribute on a non-nonce-protected AJAX response.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-8089.yaml"}
 {"ID":"CVE-2026-81199","Info":{"Name":"MasterStudy LMS \u003c 3.7.46 - Unauthenticated Student Statistics Disclosure","Severity":"medium","Description":"MasterStudy LMS WordPress plugin before 3.7.46 contains an information disclosure vulnerability caused by missing authorization checks in student learning statistics, letting unauthenticated attackers access sensitive user course data, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-81199.yaml"}
 {"ID":"CVE-2026-81578","Info":{"Name":"PaperCut NG/MF \u003c=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-Direct","Severity":"critical","Description":"PaperCut NG and PaperCut MF versions 24.x through 26.x contain an authentication bypass vulnerability in the Apache Tapestry-based web interface. By crafting a complex-direct service request that specifies the public Home page as the render target while invoking the privileged ConfigEditor page's form listeners, an unauthenticated remote attacker can search and modify server configuration options. PaperCut's access control validates the render page but fails to validate the component page, allowing full configuration access without authentication. When chained with CVE-2026-82078, an attacker reconfigures external user lookup to use a malicious JDBC URL whose initialization SQL evaluates arbitrary Groovy code, achieving unauthenticated remote code execution. This vulnerability is actively exploited in the wild.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-81578.yaml"}
+{"ID":"CVE-2026-81648","Info":{"Name":"CryptoPayment Gateway \u003c= 1.2.2 - Unauthenticated Broken Access Control","Severity":"critical","Description":"CryptoPayment Gateway WordPress plugin 1.2.1 to 1.2.2 contains a broken access control caused by missing authorization check on an AJAX endpoint, letting unauthenticated attackers perform administrative operations including file deletion and credential recovery.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-81648.yaml"}
 {"ID":"CVE-2026-8181","Info":{"Name":"WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass","Severity":"critical","Description":"Burst Statistics – Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in is_mainwp_authenticated() function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrator username.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-8181.yaml"}
 {"ID":"CVE-2026-82186","Info":{"Name":"WordPress WPLP Cookie Consent \u003c 4.4.2 - SQL Injection","Severity":"medium","Description":"The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to execute arbitrary SQL commands.\n","Classification":{"CVSSScore":"4.1"}},"file_path":"http/cves/2026/CVE-2026-82186.yaml"}
 {"ID":"CVE-2026-82222","Info":{"Name":"GiveWP \u003c= 4.16.7.1 - Remote Code Execution","Severity":"critical","Description":"GiveWP \u003c= 4.16.7.1 contains an insecure deserialization vulnerability caused by deserialization of untrusted data, letting attackers perform object injection remotely, exploit requires crafted input\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-82222.yaml"}
@@ -4497,7 +4514,9 @@
 {"ID":"CVE-2026-9506","Info":{"Name":"Bagisto \u003c= 2.4.1 - Unauthenticated Arbitrary File Read","Severity":"high","Description":"Bagisto through 2.4.1 is vulnerable to unauthenticated path traversal in the ImageCache controller. The `original` image-cache route (/cache/original/{filename}) passes the user-supplied filename to getImagePath() without any '..' filtering or realpath containment, allowing a remote unauthenticated attacker to read files outside the intended public image directories (upload/images) - for example the application's composer.json, artisan and other source files.\n","Classification":{"CVSSScore":"8.7"}},"file_path":"http/cves/2026/CVE-2026-9506.yaml"}
 {"ID":"CVE-2026-9586","Info":{"Name":"Sangoma Switchvox \u003c 8.4.0.2 - Unauthenticated SQL Injection","Severity":"critical","Description":"Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint (PhoneAppsHandler.pm). The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An attacker can break out of the single-quoted SQL string context and leverage PostgreSQL COPY TO PROGRAM to execute arbitrary operating system commands without authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9586.yaml"}
 {"ID":"CVE-2026-96652","Info":{"Name":"Plex Media Server \u003c 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell)","Severity":"medium","Description":"Plex Media Server \u003c 1.43.3.10861 contains a server side request forgery caused by improper validation of the 'protocol' parameter in /player/timeline, letting attackers with any X-Plex-Token value force the server to POST to arbitrary destinations, exploit requires any X-Plex-Token value.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-96652.yaml"}
+{"ID":"CVE-2026-96654","Info":{"Name":"Plex Media Server \u003c 1.43.3.10861 - Server Side Request Forgery","Severity":"medium","Description":"Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-96654.yaml"}
 {"ID":"CVE-2026-96655","Info":{"Name":"Plex Media Server \u003c 1.43.3.10861 - SSRF via Transcoder","Severity":"medium","Description":"Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-96655.yaml"}
+{"ID":"CVE-2026-96656","Info":{"Name":"Plex Media Server \u003c 1.43.3.10861 - Arbitrary File Write to Code Execution","Severity":"high","Description":"Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2026/CVE-2026-96656.yaml"}
 {"ID":"CVE-2026-97229","Info":{"Name":"GitLab CE/EE \u003c 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer Overflow","Severity":"critical","Description":"GitLab CE/EE 19.2.0–19.2.7, 19.3.0–19.3.4, and 19.4.0–19.4.1 contain a remote code execution caused by insufficient regular expression validation in CI/CD configuration, letting unauthenticated users execute arbitrary code remotely, exploit requires crafted regex in CI/CD config\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-97229.yaml"}
 {"ID":"CVE-2026-97359","Info":{"Name":"Rejetto HTTP File Server 2.4.x - Template Injection","Severity":"critical","Description":"Rejetto HTTP File Server (HFS) 2.4.x inserts the multipart upload filename into the server-side template symbol map as %item-resource% without escaping. A filename containing the literal %item-resource% is substituted a second time by the sequential global replacement in xtpl(), allowing a :} sequence to terminate the quoting region so a following {.exec|...} macro is executed as an operating-system command. An unauthenticated attacker achieves remote code execution with a single request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-97359.yaml"}
 {"ID":"CVE-2026-9833","Info":{"Name":"WordPress Tag Groups \u003c 2.2.0 - Reflected Cross-Site Scripting","Severity":"high","Description":"The Tag Groups WordPress plugin \u003c 2.2.0 contains a stored XSS caused by improper escaping of an AJAX parameter reflected in an HTML response, letting unauthenticated attackers execute arbitrary JavaScript in browsers of logged-in users with edit_pages capability, exploit requires victim interaction.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-9833.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-cc46f0f267588e28856052f9152715ac
+07011d8ec3a0e133b97d23e7c9cd52b5

dast/cves/2020/CVE-2020-9402.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2020-9402
     cwe-id: CWE-89
     epss-score: 0.23951
-    epss-percentile: 0.97852
+    epss-percentile: 0.97866
     cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
   metadata:
     vendor: djangoproject
@@ -54,4 +54,4 @@ http:
           - "ORA-06512:"
           - "Request Method:"
         condition: and
-# digest: 4a0a00473045022000862029ecfd23bd35dca18a1cebda0cd2205942675b72cd4b137015ae5443a8022100aecbcd08c132c83f960aa57de9d3472ea2e195075bda3077373eb95a997de8d2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206cfe5c123a72edbb3541fbffbaa1b347b00d1be6e98f44d7e3674c44eb60bca4022100cdb4f74b134a270de686e355a8b0067896cda0363523d20920f79e56294033e1:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-35042.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2021-35042
     cwe-id: CWE-89
     epss-score: 0.44369
-    epss-percentile: 0.98772
+    epss-percentile: 0.9878
   metadata:
     verified: true
     fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -66,4 +66,4 @@ http:
           - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
           - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
           - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 4a0a0047304502200a0bc7c626b3f872cddd87c2c309b8fe394b0aa8b66d23b1402137f12cb36e1c022100c5a3676e62218c55fccc100ddd886ac11d7b6e4e0b3f089e6c240bc470b7c7a6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008f429206737e82864b3072a63f6b5bcbfb8bc2b3c9f02914b3f11edab7692d8f02206b3d426297fadac2729c9a1ad645107db709fafa2d8483c7918d0e789e1f5363:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-45046-DAST.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2021-45046
     cwe-id: CWE-502
     epss-score: 0.99977
-    epss-percentile: 0.99979
+    epss-percentile: 0.9998
   metadata:
     max-request: 1
     confidence: tenative
@@ -66,4 +66,4 @@ http:
         group: 1
         regex:
           - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4b0a00483046022100b6ed1935cff5051003d99c6f19bcc8f1a999975bc7e3e9c5ac18f74bccb469ec022100842bffc0cbe807b3b39ad28a2f1e3a52a5fd8105a527b2ec81040e610a056adb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210098a606be9f9260509d5aadc9c99fe53ddcc52b08ffda7f277e6e56bbfee76c61022024e80e7164055c6b9bd13c69c8f9e7b8a0804037626759ff1948db15b2f2eb96:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-34265.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2022-34265
     cwe-id: CWE-89
     epss-score: 0.73607
-    epss-percentile: 0.99472
+    epss-percentile: 0.99476
   tags: sqli,dast,vulhub,cve,cve2022,django,vuln
 
 variables:
@@ -50,4 +50,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a00473045022100b546f009f75e704ba1a72c2885411bd3f210bfd48a978040ab602770424bf57d02206796825e165c9673bdd4f911ed9eb26e7c6e92ae91b78f05102292d55822bd7d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008e774e37b28fdaf54256501bac51611b00a034892a0f2179574d9c0fddf4f21602207dfa8905062f51bcaea36497cd4466afa4fe7496127fc73d44d9901bc175d6e7:922c64590222798bb761d5b6d8e72950

dast/cves/2024/CVE-2024-2961.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-2961
     cwe-id: CWE-787
     epss-score: 0.8833
-    epss-percentile: 0.99772
+    epss-percentile: 0.99774
   tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln
 
 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
       - type: regex
         regex:
           - "root:x:0:0"
-# digest: 4a0a00473045022065886788bdc77a8be012b96850bb02eeb17f0293ea70173f11becb31487d8afa022100e55b85b5be008c3404c31885b63adbc921405a82b3bce0e2a367dbe53884cdf6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210082712c886a76672c57a55a989160325e940c4af3c97435f49fc1a33730cf0c05022019cb4da2ca8c988201883603e084a8e05a0a9868e0a6e8fcf941270a13310a29:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
     epss-score: 0.42326
-    epss-percentile: 0.98713
+    epss-percentile: 0.98721
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -56,4 +56,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4b0a00483046022100cf5f5d1256914cefda16abe73c6a3481d7e387a8bc86994f50174fa6a60da405022100abb7f5fd61f41e147d35995c9392fb4f202d11cf3796c874ef327d169bef62b9:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100af460cad6d3213c8cc4756337b00e9b28bd384eedb37221a15f5502be8f7a610022100ce53af02e6567a2f76466465a32754f4bf8a3c6adea1b649021613bf5691f15b:922c64590222798bb761d5b6d8e72950

headless/cves/2020/CVE-2020-24900.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2020-24900
     epss-score: 0.01231
-    epss-percentile: 0.69192
+    epss-percentile: 0.69361
     cwe-id: CWE-79
   metadata:
     verified: true
@@ -78,4 +78,4 @@ headless:
       - type: dsl
         dsl:
           - 'BaseURL + path + "?xml=" + payload'
-# digest: 4a0a0047304502207d23fa2f24e1ca3263a439b65d7998e3c3935fb8ff84e0767cbd589c662c9152022100d95b9269f5750124ecffa6d5825c30802cb04e23d6e6101eadcf7de6d61b8bb7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fb740c37415a9cc4e9157559a5beddb84f9c57c81dddb94756d4bc91dfb19abe02206676517562781f6d9cfdf0932a12bb8c2101b3b9a65857a4995dd66a51cc5ba7:922c64590222798bb761d5b6d8e72950

headless/cves/2020/CVE-2020-24901.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2020-24901
     epss-score: 0.05242
-    epss-percentile: 0.92597
+    epss-percentile: 0.92644
     cwe-id: CWE-79
   metadata:
     verified: true
@@ -78,4 +78,4 @@ headless:
       - type: dsl
         dsl:
           - 'BaseURL + path + "?plugin[test].url=" + payload'
-# digest: 4a0a004730450221009a41157965fc28eb16ab6423fb42da17c9438e0220ee4181801a48936b1464a1022044be19f0e9169a27bf1985d5a1d73c06b23b767199094208bb1a7ed5dbd36095:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a4d2a599e8146a5d530ccb32177e642ccfb8b006a31bb53add9c31825624b98702201ac5626cbea1236e694454e363d3638ae33ccaba78e4b42c81909e9a23a6bf60:922c64590222798bb761d5b6d8e72950

headless/cves/2022/CVE-2022-29455-headless.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2022-29455
     cwe-id: CWE-79
     epss-score: 0.23678
-    epss-percentile: 0.97832
+    epss-percentile: 0.97846
     cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -52,4 +52,4 @@ headless:
         words:
           - "elementor"
         case-insensitive: true
-# digest: 4a0a00473045022100a2a043a22a313f24bec36157a1b4c16e48e383231860757bdb34c4280a0453e902206c6b3eb6d6b6906684099ea4a457dc0c15bab4e8e55963dd99a72c0caad93ef8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a8d51667dfec24e3f2d8cdfdec3e19d4b5e162e6c9a09691bd993d17f5ee85cf022100d2f49c608e34bd4f4c46b2b4692eda55694efecafec839dc5e506297a1e2d366:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
     epss-score: 0.01086
-    epss-percentile: 0.65545
+    epss-percentile: 0.65736
   metadata:
     verified: true
     max-request: 1
@@ -50,4 +50,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 4b0a0048304602210083786a831618cf5422566261ed4e64027bc5dd311e6d6ca02c264191129f07210221009892c49640d162801b5b9935a82b4b66fa0863928e116f29b7f9f20c2512ce6c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022020b09e2c9e50d03c7f4707bcc74e0515c3d3df2ac2abe2d61becfa74f81ec8ed022100a60ae585856b2f3044a5e6469b4699f4e8566e41bcc9f1c196f29070f8b248f8:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-38526
     epss-score: 0.03832
-    epss-percentile: 0.90186
+    epss-percentile: 0.90247
   tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
   - steps:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 4a0a004730450220391b0932a679c7535cead2276c0a41dc59639c39589cd00c0c70e3cae491c609022100a679dd08254ca455a47b0060732f3a6acd449b775353da80d10d725fdfe4bc7e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f2e7edcda1b691e3f09eadd24ad208ae9ec890414eaec2ccfc2c4dc784d2e05d022033180848810b139e9714c645491559fe1e2cb95a7d493ab3194536fc8abe5309:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -16,7 +16,7 @@ info:
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
   classification:
     epss-score: 0.01257
-    epss-percentile: 0.69799
+    epss-percentile: 0.69977
   metadata:
     verified: true
     max-request: 1
@@ -46,4 +46,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4b0a00483046022100b821297df010201a7dfd2397cc0fba443b3bf26499bb3ec033b7e47754a16272022100f14b88140a032a3308a3c66077a25ff3ad90bb03276f1704fa10d9103047f1a0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203120b86951bd7d4720adcd353194b622e237ff2134b599eb7fce9be3aba267dd02210099c4d298f5bbb68bf67f423ad80591c8a95274e72726c1165afe48739ea99d6d:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
     epss-score: 0.01736
-    epss-percentile: 0.77874
+    epss-percentile: 0.78012
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
     max-request: 7
@@ -190,4 +190,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 480a0045304302207bfb80618db8bf85301b4d8da21e91fae691a2f80c438157b68fc8900c87a40b021f64326d46202da963ea8598022d5a9ecf6e1430da7aa82f5d8c65c5e45cadc4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220446577c6514ba76ae4b7ae97d7574a6206b0aa0003fc22886b7c2125e8298d91022100df96c0bf35a932a057a3ae70d521d4f976edf06c8cb0ee50b0b90bf59aed4718:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-29927-HEADLESS.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2025-29927
     cwe-id: CWE-285
     epss-score: 0.99225
-    epss-percentile: 0.99935
+    epss-percentile: 0.99936
   metadata:
     vendor: vercel
     product: Next.js
@@ -59,4 +59,4 @@ headless:
           - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
           - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
         condition: or
-# digest: 4b0a00483046022100a5c5fda778886fac8336e331e8eeb4847c3892f980b81d3f7fd782d2b29c32da022100c0c986e9acf6c015ae1db236540f91363e548816f8368b522ca8330377d6f35b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d713bd255e28bedb7a085fcc2f44cff57312f6b5396dc96b3c15fc4baff6280c02205de56a310f02af55000cd4f7db87735a86e55641f05af4fe7657f9dd3952a827:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-8191
     cwe-id: CWE-79
     epss-score: 0.01821
-    epss-percentile: 0.78926
+    epss-percentile: 0.79057
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -69,4 +69,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a0047304502205c9f7ad7048d80f8ce497a49ef935d90d8129b7e88cc668978a3892376ba8c56022100999344f5ea078bacd6cd02db3623e96229c2369b5f72ee4bf6293f837ce59c9d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210084f72e03a3a5de02fff4d6ec8a033b0da11e95f9a0c8d2fa767162d7c5ef410b0220389ea361f83263bea9d02f6ea882645f64c9b722247c65f870284d97e58dbd50:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0114.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5.3
     cve-id: CVE-2000-0114
     epss-score: 0.47595
-    epss-percentile: 0.98855
+    epss-percentile: 0.98864
     cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
         group: 1
         regex:
           - 'version:([0-9.]+)'
-# digest: 4a0a00473045022055e211ced7ad9ebf84c2c96338b0c37f1859a4bef5c2f9a213308cc544a2158a022100a80b839376c91ecd2c0d17bfd18fc752451c5e11317e0a23271e8b90048bc51b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a12786ae6e457ff5bf5800557cbe8cca6f4f1f238f120b84db6fcf0d0535278102203082673de8e75be28821c35599201db49db34ad7fb12870064480367a34ee3e6:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2000-0760
     epss-score: 0.62496
-    epss-percentile: 0.99196
+    epss-percentile: 0.99201
     cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100e86bb9eb5adf38171a9d464ff7f2999683587bf09dd863f00ad8418c9caf0868022100a7f317ee94b14d9a5b740eaaf49f0274d1d157ce34b3aa291f821512cc8f2e69:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bc540d8e0b2d3eade20eb3c40435390b2f516716e5513104c424821b48fe5bde022033fdf9d5c3892bd163c6a0ae445c5477c0a5b3af7de6ad52d37e6423dc8154c9:922c64590222798bb761d5b6d8e72950

http/cves/2001/CVE-2001-0537.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2001-0537
     cwe-id: CWE-287
     epss-score: 0.6845
-    epss-percentile: 0.99341
+    epss-percentile: 0.99345
     cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -53,4 +53,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022038755f2242a711a8901f9df63b0ef5b71b526a0834128044ffd2034b1cbea2e302201acac83df489f0b1a247514d267f43c568809ede311403b29514f984646fed0a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022056358461a61978f35e97f074d86b3baafcd9e3247cfa2f18d761df80e0b443ff022078fe86df823f03304df097d9011ab801a52a35b66b71206cca09afb03a5075d1:922c64590222798bb761d5b6d8e72950

http/cves/2002/CVE-2002-1131.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2002-1131
     cwe-id: CWE-80
     epss-score: 0.25754
-    epss-percentile: 0.97985
+    epss-percentile: 0.97997
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 5
@@ -52,4 +52,4 @@ http:
           - 'contains(content_type, "text/html")'
           - 'status_code == 200'
         condition: and
-# digest: 490a00463044022045f2219740b7c20de8d3fe028b378bc8cf6835c6ecd8cbc023e9e841b483b28502200aa73c03402a9265a0e6058ac334d306a0907ef9a2a22efed6fa466ca03905b2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cb725f100cbf2f732431214a874175ffb438e63a68c3506efcb4f7c8ba9b2c24022100936da238eb69fe1b620cd423a5fb77616f6cdeb5c8de80c8fb2b7428b854a0c4:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
     epss-score: 0.22528
-    epss-percentile: 0.97723
+    epss-percentile: 0.97737
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f04b07f6949b46dd16096e4c8e41b162e9da138f4ef7e08f0a43f903283e1fac022017eedd1bf2ee5c4a602ab9f548b5a3879744b282719b2cc7e2ab3f76a49c409f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009523a3886704d273862299438072cf9bbef6fb9dc9b66feb5fb83e1507be00ca02207421aed7ba940935e29592c941d8e9964962d5b940b94a403f803642b1d6413b:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-1965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2004-1965
     cwe-id: NVD-CWE-Other
     epss-score: 0.09001
-    epss-percentile: 0.95311
+    epss-percentile: 0.95342
     cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a0047304502206e5c19cfd152dc93777daf08682841ad4d91ed413a36a72417809d3c136a3b6f022100e4a92d2b4174eea4dae3f4faa51cc3befcd33bd5c9e814d8c5ba99d6bc06985c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fcb0fc4bc9ef3f7a98cfe281175809a6ca6fe8eecbedbf929ab6627f20fa4c1c022100bf386224661a96f01f90bcc3791fe7ae1914367b65c123cf6b8727856982ecc7:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
     epss-score: 0.73028
-    epss-percentile: 0.99458
+    epss-percentile: 0.99462
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022045dc7cc57488438a8ed509254424ab647b5764b0a21f6589ceefc0c6eeb10f59022100df1d32960d67a0d2583d9fe536bd8be6930b452302a69cbf206864237b9ee40b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100940c41d75089666a64bdd311f9d85a6d0bb0893b31028cfcf88be645f250a06d022100b12f6c32291a38880b63eaa3b5e180147607aa7d3c9d13f870f2b22c68961a69:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3128.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5.4
     cve-id: CVE-2005-3128
     epss-score: 0.03436
-    epss-percentile: 0.89065
+    epss-percentile: 0.89133
     cwe-id: CWE-80
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
         part: header
         words:
           - "text/html"
-# digest: 4a0a004730450220367b4dff4908035e7b05300297349b733ed7ff9aaceff31853f5cb569e385ee60221009b2b1a94f59dc3ae93b03a193eeb1105c71dc4011fb7c6d2495d9103c336cbf2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207518dbec23129ccb10344defb223032d5abc3737ac8c257f2886e102365cfd65022100ba86a75098e6e4941a57dbacdea01e1d359e9f24ec33a98025e0f68c520cc637:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
     epss-score: 0.07986
-    epss-percentile: 0.94803
+    epss-percentile: 0.94836
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220754bb871d01ce60230e93774ef599324373464798b43457bbcb2dbadefaa7997022006de1baec9b10271452dabdf7a8689efe3e1c8dab90468c248135871301ac22f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022000fd1a17ab556c0a43239926a1e90594ae204ebbb243a4fca14db02e7f4e7ffd022100bb76e0a31bd1bd726cf3a37445acc0cc6a00f9f4353e61982bcb6679fd79d9e6:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
     epss-score: 0.17757
-    epss-percentile: 0.97186
+    epss-percentile: 0.97204
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a0047304502207da41152b8999f810fee11672d9001f2faa72005e16a23e3259950be5405e86f022100faa9241aa8bfd4a8a31f74552779f5a8cb7ce809f81e9dbc028bda0d20a93349:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008c18290bc5336e6bddd011c3e1b535615ba1db2e5e682ae9c4cbe2d2d83eee3102206d5a6d2f62ce7a3c00ab46767146d5d347872b040704db2ef54bd6e3aeb85399:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
     epss-score: 0.08836
-    epss-percentile: 0.95237
+    epss-percentile: 0.95267
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210089417e7ddf353447caeb685586e831f84127b89cc3bf0aa21bf31c0a3836114e0220063b188696e0df357f9e512c86e1b7557867a1291dc72bda3e780186a763d57e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d1f81be518e2d0d7e254227eef66d7a8630a23594e8faa7f56c1310e29f3872202207477a072e7dbab86b04922916f642d069454fe5258abb814633f62f0c81c6d34:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-1681.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2006-1681
     cwe-id: NVD-CWE-Other
     epss-score: 0.06798
-    epss-percentile: 0.94055
+    epss-percentile: 0.94092
     cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100bf1c201c92222d5a7ea6491f1e050191655424a0c05dfb3f838b08f4f317a1ed02206a2a3e50bd03b22033fb720253f7b6d0a9b8424398c769d7fce653504599ea4b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022046a189f8b7daa4c3d20ba35467860aae68fe2816c9dc624ad6b1fdab3dc25b2b0221008c627e851e87a8fd3651666419da496c4d84d6e4c236573641647ab7581c9fc8:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2006-2842
     cwe-id: CWE-22
     epss-score: 0.47196
-    epss-percentile: 0.98845
+    epss-percentile: 0.98855
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502206baf95c4e609bb25f171394bb74931e2ccbd159f5fc8cb526fb7570b753df9a8022100b9b10bb12c8aed668c0e7b36989a1602c0c58375ce4d34f97f925ef9bef81a44:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dfce183a7d77f884b227d6e5f135b59397e7f1694c07f61e0c5d6e2f64ff9d9202200a741284af1ad125fd8e402ed5d44a5bfd403189949801d6baa0d0ec8b2e0251:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-3392.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 5.0
     cve-id: CVE-2006-3392
     epss-score: 0.79489
-    epss-percentile: 0.99607
+    epss-percentile: 0.99609
     cwe-id: CWE-22
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100cd39497872f15751e7e86640ae146ef1959de093a063e0418b19789e5b1585e5022020d795fffb39a5e07c102d3a27b5b34ebca07aa87a7a35c99a4a0c7d681468c2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b3fcb8982e568c9a7b674ef5934faec458d6884c1f4beda5a6ade81ddfc137940220285c6127ca0c3815a3116335ddb8a895abbfb4d817c41c619c6759d27db1e19a:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-0885.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2007-0885
     cwe-id: NVD-CWE-Other
     epss-score: 0.05966
-    epss-percentile: 0.93353
+    epss-percentile: 0.93393
     cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d4c34ff29fc067abe1cddab2c3210d40ad8562f866ca581c9ecd29844aab1ae102206dda8ab6e9c0c8bc6d37ca5b0ef726e488d2feaaa0e8685b2a6c8ab0083c5f2a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f8000a73ac8f5927d2aab0928e19209930631f39c8a543d139d85053a007702102203b03619f686bf8eec2649cf0cb170abe7ed17efe164582bf5bb1dff5b6f916e1:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.2
     cwe-id: CWE-79
     epss-score: 0.77376
-    epss-percentile: 0.9956
+    epss-percentile: 0.99564
   metadata:
     max-request: 1
     verified: true
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e09354c1519a0935cdf7d8a16fe012a1938c924de7536751ad9d1af39aa9291502203f8ce4de9bafa6b7193920b942dbd133873ee163bc1ff92977153b2382ea0996:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205478c2ed68bf9394a0c143d8a387d88555627d02853756a6345c1fd9713f40b2022061b8ccd617c5fbaeed24a6936a5ab2eda55cf878cb65640d7267cef6df5d2c26:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-3010.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-3010
     cwe-id: CWE-20
     epss-score: 0.97385
-    epss-percentile: 0.99897
+    epss-percentile: 0.99899
     cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100806eba841ba03ffaf7908eaedf6161b5ae287b411057a66e84e79c1793e5f2aa022028c6c7bd71b20affa3a58cd445e3ec9c35a764c731725cc20c804f9229496ef4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202eeba4e1f59614f51b2b2b54a5d3acf9abdac906dd20308e4e41fd27a48ca0e7022100c8fafbabc5fafaae3a9ade98d534dc5ed2f8cd27d5c69630604799790e07b284:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
     epss-score: 0.09491
-    epss-percentile: 0.95479
+    epss-percentile: 0.95508
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022050f4d7e48826a48f50f74b29c078bc8ed4d817c3b7f18710165ac253569786c90220695070884ce66edcf49469cdbc1333f16e35d9973778d208b9bb0346bfd32d60:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008067a40f60184c33283beb5a83834645e1aa96f32a6d6610a7667ee7bad3acfd02204ca1620924f8e80079d197d53efcc8bc6cadf8131a27d33f01cdb129859fa239:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4556.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-4556
     cwe-id: NVD-CWE-Other
     epss-score: 0.25749
-    epss-percentile: 0.97984
+    epss-percentile: 0.97996
     cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402205e917b524daf9877b4829f39582309f42413ef4c18d2631db66515980acb99a502206c6dde50bc8fb927b01d06e8650d276f626a4bf1c45d1fe9086b08f5fbecc38e:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204bcb4a1f99c67c52b75f1d6c4c9fc3f129407e29e6479cc516fef3680e5d17a90220590f723a6c10deff0f25bf55a42445da1c2d3d4b81fefe74420ea8e292ae0f7b:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
     epss-score: 0.14639
-    epss-percentile: 0.96684
+    epss-percentile: 0.96706
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221009174ff8ce38eb0295b93bab4d7c808d4ea4d39f84108b5b17be7d76a4a2b4f840221008a1f14b3a896072680145394b21b67193c8b8d562fc32e3ba8c9874a08700d07:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200b1113538e8f22e03b30a3f49a37cbaf83063ee39c58130c5fd595c4b86f4e74022100c985d86b7c8b62f03e0d7257d1590610c2d18b99e6f5f965848d7793d803f84a:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1059.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1059
     cwe-id: CWE-94
     epss-score: 0.48329
-    epss-percentile: 0.98876
+    epss-percentile: 0.98884
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100d516fac054b0362e16f1edff7d4b9ece5729d22e2cef4d4084e9d615be6688cd022100c20d51e7bed0b101eb932654d2a1061419f7182f5c5fd24e04f88bef032d5ea8:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204581b6472edfb0c6c7a6a2320d31e2d4aeea91daf04a25a662e1ca0acf37bcd102207f8c360ee73961ac5b90b3e78e24a096756c6836a85eeecf82e107963b69cf97:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1061.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1061
     cwe-id: CWE-79
     epss-score: 0.074
-    epss-percentile: 0.94481
+    epss-percentile: 0.94516
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203ca76087b9e3476eebba38b08de8c17108356eeca39b0ae4472efb255efde01b022100b6918534d262a6e892a8d706dc0552b0a19f3bf25faf4a3e0bcb4d8392c66f3e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b02e1ed3171ac9a5687b072d4146c408733b4dfe718325331d34b13196051d4c02200eda7f0a1e6cdfdecd3bb475577210a22a5bb1d36a3b810accb3471b74fa6a9b:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1547.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1547
     cwe-id: CWE-601
     epss-score: 0.48137
-    epss-percentile: 0.9887
+    epss-percentile: 0.98877
     cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -51,4 +51,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4b0a00483046022100aa7b7f89d6c17f6f83173132cdb6c6c9872b453283faae6515797ec6803f8d11022100b3cecbf4bacb964d70547665e845e2243dd9c259b72def5fd96069f91759ad34:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220216569aa3561df7b30eaa83c99ce7f80b742152e61c1d05b98b2add03938f7b2022048001c21855ace6e3f3ed1e19ded7cd743d9cdce40d11fd083117ec4805a8480:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2052.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2008-2052
     epss-score: 0.01568
-    epss-percentile: 0.75551
+    epss-percentile: 0.75698
     cwe-id: CWE-601
     cpe: cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*
   metadata:
@@ -65,4 +65,4 @@ http:
         status:
           - 302
           - 301
-# digest: 490a00463044022066c255bb35ff81758da06ae0367f1a95d68f9723cea5b66307acc507556a610702206a4e8f4075cac80da28ae33cc1e03b4c2b57d4f12b455e64174379d9830b121f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204a239c91fdb6a47c0f44ec369477e4df95d019dc33edd91b122b2e96d6483214022100a7c2c8e85fbf416bc4c028a492c12fb8660f0b5a02f12c96dc9bda6465ebac75:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
     epss-score: 0.06232
-    epss-percentile: 0.93598
+    epss-percentile: 0.93637
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203a8cee54f4966a52d16b32fbd49677c58c0567ee3c4c61459eb85f29eed6212a022100ffdb52f61fcb8b88e278d0283d362100195bebaa0e6d5558dcfe1c078e4329c6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201bbab04e40fcb793c19c1fe4a454e8d586d85f552754d6b4293738eaba252d87022100dafc2595d6f4d5bc0c247fd7f8f564ffb7fac514248fb448dbde17922c545669:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
     epss-score: 0.18809
-    epss-percentile: 0.97305
+    epss-percentile: 0.97322
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f1aec54dc31173a7299e9930897b36fae69d9068787be88f8ac6cb2f1e03b46e022043952f8a452ddd27a60ec3472a0c7616ef17a0f5c67c9191f9d70252398b4c14:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008a9e43af8b0931732d4f1062a6a7955118c934d0d9b8ca30ea1059dada844c69022100c7abd5b891c14a37b0b8bdd37ab9042b41af2faf5163bf3b07f89c4610054d83:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
     epss-score: 0.21476
-    epss-percentile: 0.97634
+    epss-percentile: 0.97649
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203f05290f204cfc9e84365b83890ae4e90a1f1b25360b078d981fe9861bddb4250221009579571347cfac36d3030ab43e71d1ab43a639c4aa5e4aec9107c8556c650629:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201742541cc78f1e590f2e3e9c818494638b74dc9c4d9f8c1b0070386f5780b075022069de2fc2333f12bb067c252770bfbe7de503c87f279c4f8c82dffc805eda9671:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4764.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-4764
     cwe-id: CWE-22
     epss-score: 0.16505
-    epss-percentile: 0.97018
+    epss-percentile: 0.97036
     cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210092e886d67c13183ffe0ed0d9233aa99614a0919316c06c7532dddc23a8c1aa7f022100b9470c38a76c2bcc84075e79e6b394cc419e289da0c0da1d288af9515614e652:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022070b645d112746a1be125bdea8022d9598c91e99aae0f2e725552f054fb0f6638022100a6e186c0647fc4a006fbf9bbec7ede8dd0da52ebafdd26189d12053a5a3dc129:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-5587.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-5587
     cwe-id: CWE-22
     epss-score: 0.12865
-    epss-percentile: 0.96332
+    epss-percentile: 0.96355
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -49,4 +49,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f3be2df98b9f4a3b0d5d767d4d0546b9fe77912fe27341016c17fecc26007e45022033c20a7e112dcfef9814444f1cdc0ca66e9520a7922f1e49db4a8aec129627d8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220069dd877b91f3651725ef7fc21b6b65c4d89cdcbd6ea7b9c19d99fb68681405e02210089f1a614c956453d732585cb6fe9059e389fc98cc9acc4be09544abd54f73d82:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
     epss-score: 0.10637
-    epss-percentile: 0.95834
+    epss-percentile: 0.9586
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100bb34cfba739b271bc820f7e95c8f80d49a8533f89dcd48cf24a488c2793fe9e7022003ff4929e29efde45024e5706ab5b975ab8ebdefa8838c866d240a614635756a:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205bcdf5939530d6d070790289c6e4a0bf0b15356eaf13397aef246a7c6018cb240220025d23399c724de977a58a0ea631b1e004dfe5971a84b592e4aa503f55429b6d:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6172.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6172
     cwe-id: CWE-22
     epss-score: 0.12284
-    epss-percentile: 0.9622
+    epss-percentile: 0.96244
     cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100cd642a859970798272195b43b99fa3e9890fda86d1098e2e646fddf4686df5ba022100f22051f0294eed246e9b494c51a364d8d1341880f6204f3b97f419c1ebce0fcd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bdea031317148a5680f8ca6a7775db77c52ddf2c1868b330f459c74c2d01f2fe0221009bfddf9ffd8dc50bf04e1838533f06aae23f51697dbf22eb66c00765b9caaa41:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6222
     cwe-id: CWE-22
     epss-score: 0.11497
-    epss-percentile: 0.96054
+    epss-percentile: 0.96079
     cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022029ec5949c15b8ce0f6654e1b16c929877c76d4b9a1b2060f3912df61e4f3b01b022100a490dc5647dfdb03ed77f2ab154033e83beda9cdac9643cf507eb6efcac3c54b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100aea827efebff041ad61b705bbdc70b8db5fd1e023f5ba390fadeed268236955802207c504e72675949e6cff77cac3d9f655b28b1f88de02068c0a87b6e9d2c83b68b:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
     epss-score: 0.05114
-    epss-percentile: 0.92447
+    epss-percentile: 0.92494
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220030f52f638ff1b7fc6443196dde864dd63a81c3b192a74043e20142a75ed9471022061ef0b8cd10cd018b6caaac7920a86f77860b149e8faca8ac80ec3605ccfed55:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022026bef1c15568f440d26f32f71ed20a53a0d06823d17247313194c2cc270029360220681a8b5328376e956fd5d7707210a8d011cda4e0c872c8990196e1e10e33dad5:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-6668
     cwe-id: CWE-22
     epss-score: 0.14041
-    epss-percentile: 0.96589
+    epss-percentile: 0.9661
     cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -45,4 +45,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c51a17bbdeae9dc84a3ebc8c2c50f271b54f31551521f662c83c2016b27272230220057febde67320bd5d87bb55a1460d7a6437b555d2fa4257c88bbe17e75c613fd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e36500e136c54c0a7f09097794fae7fd3e1a73152f51a94e2a1d8dd31d92fd35022100b43f23f2d19ed165655fafa761f3cd4cc750bad9238759626a6887ca28d5658e:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6982.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6982
     cwe-id: CWE-79
     epss-score: 0.05782
-    epss-percentile: 0.9316
+    epss-percentile: 0.93201
     cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 490a00463044022034f9c6455dcf43278736f84e1270a7cef7fbea927aa963756b5451846197771f022035b1cf45eac890eef44095784d517e3c044cd34c63aaebf2a073e726d6981aaa:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202072e6061f60b6f41064c19462c91acfdc2383b7084ee1db92d1e9d5ca8e9fda02205cb348663c1baf0dbe1136f3b5ed381f23448bf132b3ec0b4d5938cbe2321ed3:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-7269.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-7269
     cwe-id: CWE-20
     epss-score: 0.08234
-    epss-percentile: 0.94939
+    epss-percentile: 0.94972
     cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
   metadata:
     verified: "true"
@@ -43,4 +43,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4b0a00483046022100db3ebda7f48474faa771862ad9012c78b8dda4eeb77bf05d6823fbec6c9a4f230221009545b8b3b990c4b54f4ecf040a52a47c3b3b7bc113c4294df79b35fcfad24192:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022018be2802d56eadac472dd8c1f5f08ade49fb1a8fbe5168743a8a0c13d7ae5967022057e528a37a6661dc93be006a08f7b2ad4f101ef109866b960cc6735553126064:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
     epss-score: 0.10932
-    epss-percentile: 0.95919
+    epss-percentile: 0.95945
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a004730450220118555fddd35eb91f46d0ad0f61cc3eaf4178729623c23417541c81e968a364c022100bf6db36053ec65ac8cb91362fddf5330826de20fca77848f02d5be1963b570c0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009adcf7e9aed32d568d981b33a948ce08cd71ba6ee53bbe9548a638a826c56218022079b0ea34b02fdf225e4c34c2defcf2dcbe1cb5b3363102377da82335a17938b2:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-0932
     cwe-id: CWE-22
     epss-score: 0.47871
-    epss-percentile: 0.98862
+    epss-percentile: 0.98871
     cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402204ea20384af07a159c1949dd70e438f96f0c0a6af0fdba705788e2417ab2cc31e02200807b1c99e135bb9819e830cfea74f41f3cce0dadebaf408b87dd86f169dadd1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fed7eca0e4ede00086e2c9d7cfd6a1856f704fa0362f7dad6334662cb048e2fb022100a36264b1f1e31cc644a6b2962882bedbaddfcc80d7aab403fcc60af91698f5f9:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1496.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-1496
     cwe-id: CWE-22
     epss-score: 0.07183
-    epss-percentile: 0.94351
+    epss-percentile: 0.94387
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402201a8ed0084e5d843bc412441824265c046af940ad4f8144feca6b7008e6bb866e02203897db37bfffd163238b82db72082bce1b77587638df6cefb603589611734d67:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008b781be5710f418e728639b5649fd8ea53c7d351fdbcfb2f00957f501378c6c1022018fc86a008d43638fd927d922c4d430f6ab5125ca3f4d7bcc532c2f81119e17a:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1558.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1558
     cwe-id: CWE-22
     epss-score: 0.29821
-    epss-percentile: 0.98216
+    epss-percentile: 0.98227
     cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022026fe84dbd6df93c5a90530c4e4aa56baaadf901d81a623a9338d4abab408a3bf0220296f4a17ae7f1fc59d7082e5319b68eb18958169f889d172f2614a0c30ef332e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c830e6277695b4668a357b8d5f81d270cb317fab23178ba6f496d4c0e9a1f27e02202fdab6c934e774dc3bd7be14a03d1099b140c41899eaad41d51239cc81146531:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
     epss-score: 0.16083
-    epss-percentile: 0.96948
+    epss-percentile: 0.96967
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -65,4 +65,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b26871662d8cfd93ebd603c48fb59df9168216ae4102e370b6801faf6c3227080221008df27cba2df9449238fd81220cea7e57b4129fc07026f034c6ef8f8ad8ead085:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220013f5faa8c51b12a176912fe631eebb24593ab01189a14aaeb0eeb568e09fdbc022100cdd281273330e53801d15d2cde24c3c0cdb5b0f7c9650049278984986d5e794c:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2015.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-2015
     cwe-id: CWE-22
     epss-score: 0.06507
-    epss-percentile: 0.93827
+    epss-percentile: 0.93865
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100fbd20457c75dfa89158e01274981f7780c7f5e0b3bce6e2954c8efc555bfc5b4022032cf6f15b9eeee704408810207e1df0df5ad95ee8befe9401942b1720565437e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203be86514e6262afdd4c844ed7b242ff753f2940c6824fe8b2cd115c95c4d5066022100bdc254904f2d864af83b8b37e45021fe321432a00912c6d2aecac0731ff3fc70:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2100.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2009-2100
     cwe-id: CWE-22
     epss-score: 0.08229
-    epss-percentile: 0.94936
+    epss-percentile: 0.94969
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402205b4570408076e28352a180a28351b28272a77aa456238631c4f5be9d8265f02e0220036ea5af874082594675dfaad2431cc4419de02da0ff457d653de34edbf6daf3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202f88ed70e941a679394a64a055110eaec034d4e1fd048f31b02f973a80a4b578022100a627f8283b7df9d17923d0442ebaf4d1340a6a8b669ea37f3efbff20425a0a90:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3053.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-3053
     cwe-id: CWE-22
     epss-score: 0.05925
-    epss-percentile: 0.93312
+    epss-percentile: 0.93353
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b1fc8c6fb77d1f9e29f0faca3f51ca9399bf95140bed49b9d0ffb9af50e8bb69022040b9f6d841fe9225e05c6ef3f886b7a50c5781e11ab8c0f8414593d650ebf37a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202714f46fb8a95f00cfb27e1e6db6b93a38d1c41638487dbb2a4c477ac84485c5022100ac93bde51fd2dbec3cb74b8fc49c56075710a4e9a62f39634e2917b276b4a802:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3318.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-3318
     cwe-id: CWE-22
     epss-score: 0.06455
-    epss-percentile: 0.93787
+    epss-percentile: 0.93825
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210085b2052b52c66e792fe6dd5e38687c4dd1691c336ae1730c0b202cd920a4ffe60221009f8abc614cd8eb72f7ef44c09cdef58f0418b63adef15209f1b37f545b42da5b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220268c959146d4fd672db43a5bf0f7c3e24785743f089af37e1fd9fb26512ef0f3022100875b706e70fc5a044298b8a6bf26e9f3c982fa3b1fd48e080d85fa6c1f9667b2:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4202.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4202
     cwe-id: CWE-22
     epss-score: 0.08109
-    epss-percentile: 0.94873
+    epss-percentile: 0.94905
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100db2d20e8d64803f010685adba2b52007b2e680e770ff08c3242fe8a5c17acc4f02203b0d533592b409ea89d770a0d056f542deb9305dec7d955976d5ac1d1cb6a211:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022049f4d6183dca54f37f75d9d71ff12fe2582d9dceb5a635f5ddce87a3cbffeff50221009bb7808d1659c4e0abf6983508eae00e04462f67ed3d1edf5b33a16aabe8d544:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4223.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4223
     cwe-id: CWE-94
     epss-score: 0.54584
-    epss-percentile: 0.99026
+    epss-percentile: 0.99033
     cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022003b9f5f5f8a5c774546d7bb257d1732975552108b1f07f48f95a213feeb7084e02207775c72cde559c84f06b7baf397ae4391c1459c16b70a0600d299c6406d16161:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bd9904ee46aa88b9eab533d10d4675e118a7025c02e06be42af369a48b6ec0b40221008126bf58752c22838de866bf5bbef9698015f70876cfe0ad29f8d494b4788ae5:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4679.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4679
     cwe-id: CWE-22
     epss-score: 0.07866
-    epss-percentile: 0.94745
+    epss-percentile: 0.94777
     cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ad6dd210d5dd84e3cbc11aa42a53c6f1f3dafa771437f7050f33b43550912992022038ccd31522f24d965a1e38c11c6279facb1ffcfd87968ad1d0f098853353c9a7:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022067b3dc804d6e15bcbaf39fc6106009068a16dfeddcd5d2032954eea640c1b4090220070e643536d3ec14c17f9e81b2bf103b67148aa3d2ea5dd03dc17f6e497c5aca:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5020.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2009-5020
     cwe-id: CWE-20
     epss-score: 0.03488
-    epss-percentile: 0.89235
+    epss-percentile: 0.89298
     cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -39,4 +39,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 490a0046304402206fb99024f89516223f77d0f9aacbb66bb91ab01256fd76c6e6637a864e5ecfe30220343cefad8e1ee43fa04ab3ebf228dae30acdbbc4fee37873698cd947dca42617:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f9d53a3dc42c10d386d655b639792bbbd57af0bc6b9832b6259faf19df43e9ab022100869947dbc5f02a64a54c0c8b5e67623fb6b6dc7807920d8bb289a61c2f218418:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5114.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-5114
     cwe-id: CWE-22
     epss-score: 0.11707
-    epss-percentile: 0.96101
+    epss-percentile: 0.96127
     cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402207aaece4e0d04b44bb6d25a286ee6fddc75a310b9bfeb92fd933cfab0bf7fe3c7022040fae47c9d59eb4e2cfb8ee173885d0e9890a5d9868bdb12909aeaead986ee68:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008daf6800203f6c3bc1cd22ec0e175fe9820899f74886ed851b3930a166953d610221009486f9388debe69452bc3f4aa5af1fa360ca82cfb3bd3baa12d004e74167ee83:922c64590222798bb761d5b6d8e72950