chore: generate templates checksum 🤖

* Update CVE-2026-111497 details and author list

* Uncomment digest line in CVE-2026-111497.yaml

* Update digest line in CVE-2026-111497.yaml

* minor update timeout and request handling in CVE-2026-111497

Reduced INTERIM_TIMEOUT from 5 to 2 seconds and modified the 'attempt' and 'send' functions to use a 'mode' parameter instead of 'probe'. Updated logic for handling streaming and expectations in the request process.

---------

Co-authored-by: Roberto Nunes <[email protected]>

.new-additions

@@ -1,3 +1,4 @@
+headless/cves/2020/CVE-2020-24900.yaml
 http/cves/2010/CVE-2010-1428.yaml
 http/cves/2023/CVE-2023-31719.yaml
 http/cves/2023/CVE-2023-54335.yaml
@@ -13,6 +14,8 @@ http/cves/2026/CVE-2026-108123.yaml
 http/cves/2026/CVE-2026-109619.yaml
 http/cves/2026/CVE-2026-110447.yaml
 http/cves/2026/CVE-2026-112866.yaml
+http/cves/2026/CVE-2026-114509.yaml
+http/cves/2026/CVE-2026-115574.yaml
 http/cves/2026/CVE-2026-11565.yaml
 http/cves/2026/CVE-2026-115886.yaml
 http/cves/2026/CVE-2026-116006.yaml
@@ -22,9 +25,18 @@ http/cves/2026/CVE-2026-116167.yaml
 http/cves/2026/CVE-2026-116205.yaml
 http/cves/2026/CVE-2026-116366.yaml
 http/cves/2026/CVE-2026-116485.yaml
+http/cves/2026/CVE-2026-116548.yaml
 http/cves/2026/CVE-2026-116690.yaml
 http/cves/2026/CVE-2026-116748.yaml
 http/cves/2026/CVE-2026-116817.yaml
+http/cves/2026/CVE-2026-118523.yaml
+http/cves/2026/CVE-2026-118539.yaml
+http/cves/2026/CVE-2026-119495.yaml
+http/cves/2026/CVE-2026-120201.yaml
+http/cves/2026/CVE-2026-120442.yaml
+http/cves/2026/CVE-2026-120446.yaml
+http/cves/2026/CVE-2026-120597.yaml
+http/cves/2026/CVE-2026-12583.yaml
 http/cves/2026/CVE-2026-12970.yaml
 http/cves/2026/CVE-2026-14554.yaml
 http/cves/2026/CVE-2026-16535.yaml
@@ -32,14 +44,17 @@ http/cves/2026/CVE-2026-16959.yaml
 http/cves/2026/CVE-2026-17540.yaml
 http/cves/2026/CVE-2026-18051.yaml
 http/cves/2026/CVE-2026-18110.yaml
+http/cves/2026/CVE-2026-22777.yaml
 http/cves/2026/CVE-2026-24898.yaml
 http/cves/2026/CVE-2026-34151.yaml
 http/cves/2026/CVE-2026-48048.yaml
 http/cves/2026/CVE-2026-53468.yaml
+http/cves/2026/CVE-2026-54419.yaml
 http/cves/2026/CVE-2026-55864.yaml
 http/cves/2026/CVE-2026-56062.yaml
 http/cves/2026/CVE-2026-59707.yaml
 http/cves/2026/CVE-2026-75128.yaml
+http/cves/2026/CVE-2026-75650.yaml
 http/cves/2026/CVE-2026-7873.yaml
 http/cves/2026/CVE-2026-82901.yaml
 http/cves/2026/CVE-2026-85595.yaml
@@ -49,14 +64,19 @@ http/cves/2026/CVE-2026-89079.yaml
 http/cves/2026/CVE-2026-9062.yaml
 http/cves/2026/CVE-2026-93485.yaml
 http/cves/2026/CVE-2026-96652.yaml
+http/cves/2026/CVE-2026-96655.yaml
 http/cves/2026/CVE-2026-97229.yaml
 http/cves/2026/CVE-2026-97359.yaml
 http/cves/2026/CVE-2026-9848.yaml
 http/default-logins/bwapp/bwapp-default-login.yaml
+http/default-logins/jboss/jboss-admin-console-default-login.yaml
+http/exposed-panels/coolify-panel.yaml
 http/exposed-panels/danfoss-ak-sm-800a-panel.yaml
 http/exposed-panels/infisical-panel.yaml
+http/exposed-panels/jboss/jboss-admin-console-panel.yaml
 http/exposed-panels/pocket-id-panel.yaml
 http/exposed-panels/tailscale-panel.yaml
+http/exposures/apis/prefect-api-exposure.yaml
 http/exposures/configs/lighter-config.yaml
 http/javascript/cves/2026/CVE-2026-111497.yaml
 http/misconfiguration/dvwa-setup.yaml

code/cves/2014/CVE-2014-0160.yaml

@@ -16,7 +16,7 @@ info:
     verified: true
   classification:
     epss-score: 0.99999
-    epss-percentile: 0.99996
+    epss-percentile: 0.99997
   tags: cve,cve2014,openssl,heartbleed,code,kev,vkev,vuln
 
 variables:
@@ -142,4 +142,4 @@ code:
       - type: dsl
         dsl:
           - "contains(response,'server is vulnerable')"
-# digest: 490a0046304402205a9132eb52348d653b30363732a391e9f68e7c7ae81dfb37bca5219e22b8e188022019cad40340faba8e7dc12e405e6e0eac2fcf1e1cb16d3a8e1c249edf4950b51f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201ff2c314c4c8207000c67249618772848dafdf609be8c63cfc46a3f709062d0c022100efe127d5604505631022ef6e7c3ce8a29445e0b9c32e5de8d983550ff8100289:922c64590222798bb761d5b6d8e72950

code/cves/2016/CVE-2016-8735.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2016-8735
     epss-score: 0.90338
-    epss-percentile: 0.99797
+    epss-percentile: 0.99799
     cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
   metadata:
     shodan-query: product:"tomcat"
@@ -83,4 +83,4 @@ code:
           - 'contains(response,"43726564656e7469616c732073686f756c6420626520537472696e675b5d20696e7374656164206f66206a6176612e7574696c2e486173684d61707572")'
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 490a0046304402204218bf0358be77f073da11a2200de7e32834de1f917a5ca29e2a4fa8ab7e12d302202ed6b2127e0410ac765dc1cc60323dc220a1796122777d49cd950e8791926a39:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220454eeb8bf987ba4ab5c029ea128172479132728dee2ba1979b26c201ac650b44022100f695b2f06aa31969c851bfefe0a19b7b06ac19fcdde50b181197bd907efde140:922c64590222798bb761d5b6d8e72950

code/cves/2019/CVE-2019-14287.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2019-14287
     cwe-id: CWE-755
     epss-score: 0.63764
-    epss-percentile: 0.99222
+    epss-percentile: 0.99224
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ code:
           - '!contains(code_1_response, "root")'
           - 'contains(code_2_response, "root")'
         condition: and
-# digest: 4b0a00483046022100f7a1f763d65c6e6e3c51906273969959ce129992b8f25f906f27399392fadb7c022100efb2c0f5d57315a5c7f6c81c7a9505d311a6a4c065654b1b51fa5e6f38f800f6:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022042cb8f7f446c6f5aba94a5d5ccd8bac63f36e915eb60ac89fe4795ba648b403802200f61bd31c84c9d6207b4ea751b8826a8c4783cf5967a3ea889e5085b669c8740:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-13935.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2020-13935
     epss-score: 0.86608
-    epss-percentile: 0.9974
+    epss-percentile: 0.99741
   reference:
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -281,4 +281,4 @@ code:
       - type: dsl
         dsl:
           - "contains_all(stderr, 'read tcp', 'i/o timeout') && !contains(stderr, 'websocket: close 1002 (protocol error): An invalid WebSocket frame was received - the most significant bit of a 64-bit payload was illegally set')"
-# digest: 490a0046304402204438c538053bde704adbf9e6321c0b2b9a887d7b5694d81ac330480987f2baed02205358e667f35734a87d22d8428f85864cafd8e1e1a06a167f9ae7979686073cbb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220696297a8c200dce0b67dbde81631b9fba28969813b1eb1328ce0b283ab86e91c022100d9491149f8271b9f417b426cf07b99dc92804a61844c6e77fc073f1a51bf4336:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2640.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-2640
     cwe-id: CWE-863
     epss-score: 0.15199
-    epss-percentile: 0.96758
+    epss-percentile: 0.96768
     cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ code:
           - '!contains(code_1_response, "(root)")'
           - 'contains(code_2_response, "(root)")'
         condition: and
-# digest: 490a0046304402206b389331075b1779cc756185e871a537fcc9419949688737ebba907d1a72d5f702206c39cb7283484babc91921d887d015069abb36f404ce25476667c1c4c59f34c2:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022023b91fa6a74d9c94a74cc478b034e94cb1a095d95850ee8645efa7bd054c046802200e66b65e44febb56f37a5d50d08c22fd1f7af608cfbe5b3a73f967d3d8c8903f:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-2986
     epss-score: 0.42544
-    epss-percentile: 0.98709
+    epss-percentile: 0.98714
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -630,4 +630,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4a0a00473045022100f0a0c6ae902d7b00d057595ee1aa9b3959f73b0002118576ff436567af44691e022008db627303a3a67ddbc19ac9bffb94e8c2b7f9c6e0f35da622d1498d92967f94:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220091a8f7719c84fc4f307288d55d3bd8b7356192225b0d296fcfc1a7a2a0de1da0220080d618002fbf507a04a7ec8e986379d81e9e0930857df83732a2fbe2861d9cc:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-49105.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-49105
     cwe-id: CWE-287
     epss-score: 0.4319
-    epss-percentile: 0.98727
+    epss-percentile: 0.98729
     cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -94,4 +94,4 @@ http:
       - type: dsl
         dsl:
           - '"Username => "+ username'
-# digest: 4b0a00483046022100bd918c4f3114765cd1ba16b69571a46d43a3861e6bb4281f3cb1613089050fb3022100cc8b8a6eced37856265884ff5f5d28b2941458562078daed49b816ecb8e49098:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dc9e0e457e470228ea6f0d2820849dbb2bc2861735cfa8a637407f791086faa7022100a38f024d8c71a47e01ffba52739cc63985f1721e4f9085cd9deb4309f37df5a4:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
     epss-score: 0.63769
-    epss-percentile: 0.99221
+    epss-percentile: 0.99224
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 490a0046304402202dfb11d053e0c6e859d5868854889ca6d8154feb6e8a301d7bbe0d5cc72696dc02201bd1a6c16086343a3caeb8451928cd7e501df18a7e7e0228158655e651281043:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203600061731c27a0d00d96447d8627a4763e2421b1983f477785d8a82870a9e3302210083cfcd084ad5eb4c90436a30e814b13ada0b9db95e63315f7ce023d539858a9d:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
     epss-score: 0.04794
-    epss-percentile: 0.91951
+    epss-percentile: 0.9198
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 490a0046304402205b6ee3a37fd61cb19419f632239c3fcabc43f6a7b0f49669a4612431c1d28ebe022049c191311519e7123ab927c89d87c06462675f47df29c300a2eefd5d0dd90a70:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220626ff5205ba30f80e9387468d8c236caea91c49603b52ce58b839769f9f954c5022100e1cc9452ac274085b72894058fc83a2a8b577f358e441d9bb911323f9ae9432d:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
     epss-score: 0.28525
-    epss-percentile: 0.98134
+    epss-percentile: 0.98141
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
     verified: true
@@ -58,4 +58,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 4b0a00483046022100de015985f98f885e1419d24c832533262de02ac04d1d9a5f157b23bf58c15c2d022100d704eed5ba82f48d82924499f12631f744ceaae96f808938a01661b1a138ab0a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200178fcf30296d58b913ed1eabfafaa298a704a180cd8cfbb38abfb0d282d26000221008afd5882cb0f42b22475d544a254c787f531076b59310c06cef5fc4743b5e56d:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-12356.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-12356
     cwe-id: CWE-77
     epss-score: 0.87432
-    epss-percentile: 0.99755
+    epss-percentile: 0.99758
     cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
   metadata:
     vendor: beyondtrust
@@ -41,4 +41,4 @@ code:
         words:
           - "0 success"
           - "1 try again later"
-# digest: 490a0046304402206b22f0e29aad85492e8106231b4c6d86650831127c476a9dc6d51af0dab5a3cd02205fc6dc57bc57a3f39523820c24940acbbd821d8aeec306a13967c1068cbf6375:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022012aad26b17b7d701519b30081ed555fc8f768cecc2c4eccca9964a9c02a4e205022100e7da17fa8eefe48cdf6d1ecfca3e393ba6d63983624eaf32e24ac80553f67c82:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-22120.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-22120
     cwe-id: CWE-20
     epss-score: 0.76618
-    epss-percentile: 0.99543
+    epss-percentile: 0.99546
   metadata:
     max-request: 1
     vendor: zabbix
@@ -73,4 +73,4 @@ code:
       - type: word
         words:
           - "Vulnerable to CVE-2024-22120"
-# digest: 4b0a00483046022100eb558f08ef16202e93f8d9a59e0ba55d5f4d6834d4fa16981b9026bdf36a2df2022100d2f0ef166ec6596e6bed136825086a6082c69b26b02db074f7c7f3210162766c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100974267b7102d5d734c8d82fbce57b5c0c9a0643159a57608245b2ca8695a6a96022100ebfbac6bf943675bce99c9f46da934487cddf6bac5dc2cad50405990e417656c:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-3094.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-3094
     cwe-id: CWE-506
     epss-score: 0.909
-    epss-percentile: 0.99806
+    epss-percentile: 0.99807
     cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022100e889efa52c7c43724f61b640d127f2f93620fdd0d12bc346016f8c84443ee36602207d95ef669daa865172185da0c8408dec8845f64152b124fbb7816f5509d82689:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201974ed80358079eb51a0f9142de525fc6f0fa11b831eb7e025152a4116250912022071e15d76d3f080c5c3d3aaa6b30ccbb3e0a61ba60c26f12e3d546a795aaf233a:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-4340.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2024-4340
     epss-score: 0.03237
-    epss-percentile: 0.883
+    epss-percentile: 0.88341
   reference:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
   tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
         part: stderr
         words:
           - "RecursionError: maximum recursion depth exceeded"
-# digest: 490a0046304402202096c415c0fba3481ae9c2210e5fa2b48b43531c1ca4012759e98abdb4bd97b002206e57288ca6e47306c3c260c4734c8f698ab97966c696156a7a5dd30aade09320:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022046e0c110028c17df7ad3912f674dc85030288a26fdb2382c4c246f0289637f1402203aa97a10113760cd2fc6af873b9795c0aa2aa6722a0167135b3939e164d048d2:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
     epss-score: 0.10684
-    epss-percentile: 0.95815
+    epss-percentile: 0.95831
   metadata:
     verified: true
     shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4b0a00483046022100b2a49772cc0ea7c6c57b613706d629f5f5a63f1308822ce7d131fe7f7631f32e022100ec456483e24947030cd2fd10b0752cea116f8f66916dd7513b4ffcf8c07f2226:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c780bc176e0e5fd439f8fc52cf59f37b84d56a840ae893d0e5cd5b5341aa0c6d022100f68d8f74b54e329bdcabec6530758ca5681140ff8dea9c50a1e35861d9338138:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-47575.yaml

@@ -27,7 +27,7 @@ info:
 variables:
   HOST: "{{Host}}"
   PORT: "{{Port}}"
-  keysDir: "helpers/payloads/cve-2024-475759-keys"
+  keysDir: "helpers/payloads/cve-2024-47575-keys"
 
 code:
   - engine:
@@ -147,4 +147,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 490a0046304402201150d0cdf8e0c6115fd901df3db1b0cd52d433797b5d413d3997a729e9c5632c02205000e87d91f5691fbfd8d123e3a8b8db1064e68f53753ec71d56390b852f8d1e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022018449b2bb4d73699afb706451d74784f6a22ce145681e197b4bd582731ee2e9e022100923e5e1d911ffca36315a9293b356fa5e30e869eb945bdf4f7f81b11badbcfc6:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
     epss-score: 0.43906
-    epss-percentile: 0.9875
+    epss-percentile: 0.98755
   metadata:
     verified: true
     max-request: 2
@@ -195,4 +195,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a0047304502206a7543679e9f4b86bdddc2491594b91ee1284b03c1e1b5c3113a6762061a30df022100f211404937ba511d1fca74a4b299b3a62c47c31c0277bb793f98c907e3350802:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210094c5a34fffaf15b6ae88391bfa68ebb86575e05fc8941a50a5b5f5fa7a8c403e022100b230a220a8975bf978bb39417fec1ce29f0377b8f076e37b6292f4419319b744:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-56331.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-56331
     cwe-id: CWE-22
     epss-score: 0.01845
-    epss-percentile: 0.7907
+    epss-percentile: 0.79139
   metadata:
     verified: true
     shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
       - type: word
         words:
           - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 490a00463044022037400b75e783ab30c4ebe0bd15a65edd6b8e398861253b4045568f9a51bc7ad802205bcd8698736a721a1aaa1ced6a9df9acc308c3bd30501b1a2525169c20e3c522:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100be42eb3260927e43dc5dc7b2eb185310a566f30eee6417a4f1724c5b85b28e9302206533eaa850605e92d759b50146292411b57b42d8ad45f58f165249d0aff96801:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -15,7 +15,7 @@ info:
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
     epss-score: 0.25607
-    epss-percentile: 0.97962
+    epss-percentile: 0.97969
   metadata:
     verified: true
     shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 4a0a0047304502210092191880f8c4198fe0e6c6eb7bc83dead228a53247a2da83f21f65ebfab78bf60220082b2e6ba9afb525f815b54539e26ffc618e6c3e708b29fe4f33a00e81fa5dfe:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022038e575ce2e72961d735cfa7aa1882b8e41e81c14d214e8621ae95371fe10e35f022100fce29cdd3d8c44bed723e16c7afdfdf7508af0f384648c6c54b68c2889839de0:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-1550.yaml

@@ -15,8 +15,8 @@ info:
     - https://github.com/keras-team/keras/pull/20751
     - https://towerofhanoi.it/writeups/cve-2025-1550/
   classification:
-    epss-score: 0.02626
-    epss-percentile: 0.85511
+    epss-score: 0.02604
+    epss-percentile: 0.85443
   metadata:
     max-request: 1
   tags: cve,cve2025,code,keras,rce,ml,vuln
@@ -77,4 +77,4 @@ code:
         part: response
         regex:
           - "root:.*:0:0:"
-# digest: 4b0a00483046022100affdad5e452bf46486838bcc1d85e19b90dafe98b756a2cc2501019c912ce7c102210098c52b07b53607e69d530767025df7123b130a86d2f20b8819c6ac950141e0b8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b1d63a921b1ea4ee5b4c5f8e1b52c3db42d31c4da505f1588c28508571e3582f02200384a840476a87af20d8cfdc6cc6f69bc2fef64fb8ca941fb6797c629cf2f98c:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
     epss-score: 0.20965
-    epss-percentile: 0.97565
+    epss-percentile: 0.97573
   metadata:
     verified: true
     vendor: gitlab
@@ -80,4 +80,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 490a0046304402205d88bffb39cbfde4e1c81db2d9968cfd0b16f15faf5019d090d6941a2333eb6e02205a5de0bfc89c7a366e19a9dfe95782c58b49b2360d0aa3d55d0261ca1ee31481:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022006a1560243ebfa0fb28ee36ac8dbd3ab6694ae2d01d496e5e705f6f2224dc767022039cb481f4d6945c4b3a2244cde1bc574eadc9986061b79937a72bd5c8804cfbd:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32463.yaml

@@ -19,7 +19,7 @@ info:
   classification:
     cve-id: CVE-2025-32463
     epss-score: 0.563
-    epss-percentile: 0.99053
+    epss-percentile: 0.99057
     cvss-score: 9.3
     cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cwe-id: CWE-426
@@ -65,4 +65,4 @@ code:
           - "!contains(tolower(response), 'password')"
           - "!contains(tolower(response), 'a password is required')"
           - "!contains(tolower(response), 'is not in the sudoers file')"
-# digest: 4a0a0047304502204eccaa3b1e01ecbc1bc83a1c34e1a35f48451272753d119a1dece7c08d5937d0022100a508c5c4f0d38598679ba7a9bd47d542d0f190c35d0dbb61f3ce0180a405ff9f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022048fa86a29c7465259b6cb82d9ed8db56361e65f64c5d509993a415922639486f022100bfea7a7feb7a5dbda73a626ea056ebec053427b1ef109dc880aeebeb75d1c5e8:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-54309.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-54309
     epss-score: 0.93473
-    epss-percentile: 0.99838
+    epss-percentile: 0.9984
     cwe-id: CWE-287,CWE-362
     cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*
   metadata:
@@ -200,4 +200,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 4a0a0047304502205f38729af5963de59fd877df72dcfabe98813839c575e7b1a5af64926614f9340221009b484346f6caf90503b2ee7ddc8e57f01686d6275deecc08e1e1dd02af05a5b7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c30546416b77b918aca040239e7720147308420e9c6fe2de9baf9a03b1d25af5022034f9648b3daff9e6d891901c928ab11a2cba1cce91a03e8219d3c6b03ae584b9:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -16,7 +16,7 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
     epss-score: 0.47775
-    epss-percentile: 0.98853
+    epss-percentile: 0.98857
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 490a0046304402203797e66f5f388c3025ffa9a34aeb891949bb02353dfcf4c3c82b70280dc7bdfe02201b09d665abbf8296b1b6a8d224761014a5de2d90674f9adb1cb24ef0075945eb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220526e2625ca92b0981e7853e353cb945092aac388936ed04fb5310086ad2f7c44022100b5e05eb7685d9422452c48acca5aea60e5a7d70da32faa0da576c73b7ebd6a85:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-68926.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-68926
     epss-score: 0.3185
-    epss-percentile: 0.98305
+    epss-percentile: 0.98311
     cwe-id: CWE-798
   metadata:
     verified: true
@@ -87,4 +87,4 @@ code:
         name: version
         regex:
           - "(\\d+\\.\\d+\\.\\d+-alpha\\.\\d+|grpc-auth-bypass)"
-# digest: 4a0a004730450220565c272f7f5cc060cced2d2b14f989b637d2f0529b27524d36708729784e794b02210094d9a519661b64f246a18cdcc952caebe72881946263074ff19f77b5e79106e3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205e4cc603e0f4becbec33e05f81cbcb555be705c1c2a2a8fd05558c477fb69abb022100d0169fe2288ad7407451e58e0a8c15334d746b7499c0a44159c92c2f1028e305:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6984.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2025-6984
     epss-score: 0.01647
-    epss-percentile: 0.76498
+    epss-percentile: 0.76573
     cwe-id: CWE-200
   metadata:
     verified: true
@@ -64,4 +64,4 @@ code:
           - "bin:"
           - "daemon:"
         condition: or
-# digest: 490a0046304402207e13bc936ca4fe52db05757c72cb3707fade4745f8f89a7d92f2b5565f44b9cc0220676b3f05221102c51f01f8a9077bdc30e0de79a7acf177987b620d7ba8aa9729:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ea981e739fda5fa2ccd86f37d779058b17f28580e1942a34cd50a7e155f241a7022100c2d6cad19699d3e3466a9c738fc50ddeaef304635f70bcacc6dd7b405b5ca930:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-9242.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-9242
     cwe-id: CWE-787,CWE-362
     epss-score: 0.92219
-    epss-percentile: 0.99821
+    epss-percentile: 0.99823
     cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -552,4 +552,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022100a96a71a1a01e427d723e7cb965b51a090f645d77ee933272e91f7673d09c75ec0220122c2e224e10c75757b29d509051fe981a36f2806d1d6523b51115e46fa91622:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201a421092e3a959ead141b13dbbbfebdb346052d8cc3f390a6549d6a47805e40f0221009d2fc0f2262af3f9dc925122f2ba67cc7775748a2535b646c1d5eb9c10d157e9:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-10795.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 8.1
     cve-id: CVE-2026-10795
     epss-score: 0.04308
-    epss-percentile: 0.91167
+    epss-percentile: 0.91198
     cwe-id: CWE-347
   metadata:
     max-request: 2
@@ -85,4 +85,4 @@ http:
           - 'status_code == 200'
           - 'contains(body, "\"udrpc_message\":\"")'
         condition: and
-# digest: 4a0a00473045022100d77db82017f2641afad46f06468b8e3080472c9cac8adc997440bb3d9e36c6740220118acf9dc8b0c0b4ccaa24f433d9ca85e4b0fa167515431ca4f308605ce6e28f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cbccfece7a4ec3dc32564dbd416f8c2bae01a1e1ca2b3cb5df3dde0cdca2f51f022100923b3976300d4bb674d186822afe8a3be720f7ef9ed3f22106167a871aa23f63:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-8467.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2026-8467
     epss-score: 0.02111
-    epss-percentile: 0.81817
+    epss-percentile: 0.81876
     cwe-id: CWE-94
   metadata:
     verified: true
@@ -276,4 +276,4 @@ code:
         group: 1
         regex:
           - "Output: (.*)"
-# digest: 4a0a00473045022100dbe1cc654ce5a2618c6c2de871da35f86c400b618b9e3349797ee189548078500220295c1d8d217e1b130c19e026d833263d5af2c0fc2194ea29a045c8ed5114c35a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b5d47bb3b409323c06c0a69d43dd2efc655299deaf65236f549b02744124fe270221009005e5bf760b103297f01bc490245e5e975b5aa756a8c5443da43311abb866b6:922c64590222798bb761d5b6d8e72950

cves.json

@@ -3981,6 +3981,8 @@
 {"ID":"CVE-2026-1115","Info":{"Name":"parisneo/lollms \u003c 2.2.0 - Authenticated Stored XSS","Severity":"high","Description":"parisneo/lollms \u003c 2.2.0 contains a stored XSS caused by unsanitized user input in create_post function in backend/routers/social/__init__.py, letting attackers inject malicious scripts executed in user browsers, exploit requires crafted post submission.\n","Classification":{"CVSSScore":"9.0"}},"file_path":"http/cves/2026/CVE-2026-1115.yaml"}
 {"ID":"CVE-2026-112866","Info":{"Name":"Product Filter by WBW \u003c= 3.4.6 - SQL Injection","Severity":"critical","Description":"WPFactory Product Filter by WBW woo-product-filter \u003c= 3.4.6 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-112866.yaml"}
 {"ID":"CVE-2026-11387","Info":{"Name":"SMS Alert – SMS \u0026 OTP for WooCommerce - Privilege Escalation","Severity":"critical","Description":"The SMS Alert – SMS \u0026 OTP for WooCommerce, Order Notifications \u0026 Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updating their details like reset the password of any user account, including administrators, and gain full access to those accounts. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. This is only vulnerable on sites with OTP verification for password resets enabled, and where the administrator (or other user) has set a phone number for OTP verification.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-11387.yaml"}
+{"ID":"CVE-2026-114509","Info":{"Name":"Laravel TokenGuard - Authentication Bypass","Severity":"critical","Description":"Laravel's TokenGuard (driver =\u003e token, hash =\u003e false) does not validate the\ncredential type before the database lookup. Sending a JSON body with\napi_token as an array of integers ({\"api_token\":[0]}) produces a\nwhereIn('api_token', [0]) query; under MySQL/MariaDB implicit casting,\nevery varchar token not starting with a digit evaluates to 0, so the first\nuser row is returned to an unauthenticated attacker.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-114509.yaml"}
+{"ID":"CVE-2026-115574","Info":{"Name":"Zulip Server 11.0 - 12.1 - Unauthenticated Custom Profile Field Disclosure","Severity":"medium","Description":"Zulip 11.0 to 12.1 contains an information disclosure caused by missing access-control check in GET /json/users endpoint, letting unauthenticated spectators access all users' custom profile fields, exploit requires web-public channels enabled.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-115574.yaml"}
 {"ID":"CVE-2026-11565","Info":{"Name":"WordPress Advanced File Manager \u003c 5.4.13 - Arbitrary File Read","Severity":"high","Description":"The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server.\n","Classification":{"CVSSScore":"8.5"}},"file_path":"http/cves/2026/CVE-2026-11565.yaml"}
 {"ID":"CVE-2026-115886","Info":{"Name":"MLflow \u003c3.17.0 - Unauthenticated SSRF via Third-Party (TruLens) Scorer","Severity":"medium","Description":"MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party scorer data that Scorer.model_validate_json resolves using a module-path allowlist without constraining the selected class or its constructor arguments. When optional trulens and trulens-providers-litellm packages are installed, an attacker can select mlflow.genai.scorers.trulens, choose a model URI outside MLflow's native provider registry so execution uses the LiteLLM fallback, and supply api_base and api_key values that cause the server to send an outbound request to an attacker-chosen or internal host with attacker-controlled headers and body. The vulnerable deserialization occurs before a tracking-store lookup or job submission.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-115886.yaml"}
 {"ID":"CVE-2026-116006","Info":{"Name":"Ruoyi-Vue-Pro - Unauthenticated Admin Takeover via Predictable SMS Code","Severity":"critical","Description":"ruoyi-vue-pro (Yudao) ships base configuration yudao.sms-code.begin-code=end-code=9999, so every generated SMS verification code is the constant \"9999\" in all profiles. The anonymous SMS-login flow therefore grants an access token to any account whose mobile number is known: send-sms-code followed by sms-login with code 9999 issues a full token, including for the seeded super administrator account (mobile 18818260272 in the shipped SQL). No CAPTCHA hook exists for scene=21 in any profile.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-116006.yaml"}
@@ -3990,13 +3992,22 @@
 {"ID":"CVE-2026-116205","Info":{"Name":"YesWiki \u003c 4.7.0 - Unauthenticated Server-Side Request Forgery","Severity":"high","Description":"YesWiki \u003c 4.7.0 contains an unauthenticated server-side request forgery caused by improper handling of [[|URL]] wiki syntax in the render handler, letting remote attackers fetch arbitrary URLs, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-116205.yaml"}
 {"ID":"CVE-2026-116366","Info":{"Name":"ClickHouse Server - Brotli v1.2.0 Decoder DoS/OOB-Write","Severity":"critical","Description":"ClickHouse Server contains a remote code execution vulnerability caused by improper access control, letting unauthenticated users with network access execute arbitrary code remotely, exploit requires network access.\n","Classification":{"CVSSScore":"9.5"}},"file_path":"http/cves/2026/CVE-2026-116366.yaml"}
 {"ID":"CVE-2026-116485","Info":{"Name":"danmu_api - Unauthenticated Access to Admin API via Default Token","Severity":"high","Description":"danmu_api before 1.21.7 contains an authentication bypass caused by default TOKEN usage and unset ADMIN_TOKEN, letting unauthenticated attackers modify server environment configuration via specific API endpoints, exploit requires default token configuration.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-116485.yaml"}
+{"ID":"CVE-2026-116548","Info":{"Name":"VikRentCar \u003c= 1.4.10 - Cross-Site Scripting","Severity":"high","Description":"The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionals' parameter in all versions up to, and including, 1.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2026/CVE-2026-116548.yaml"}
 {"ID":"CVE-2026-116690","Info":{"Name":"MLflow 3.10.0-3.16.1 - Arbitrary File Read","Severity":"high","Description":"MLflow 3.10.0 through 3.16.1 contains a path traversal in the prompt branch of the CreateModelVersion handler. The fix for CVE-2026-2614 only validated prompt sources that carry a URL scheme, so a schemeless relative path such as ../../../etc is stored unchanged as the model version artifact location and later served by the model-versions/get-artifact endpoint, letting unauthenticated remote attackers read arbitrary files from the server filesystem.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-116690.yaml"}
 {"ID":"CVE-2026-116748","Info":{"Name":"Transmission 4.0.0-4.1.2 - Permissive CORS Exposes RPC Session ID","Severity":"medium","Description":"Transmission 4.0.0 through 4.1.2 sends Access-Control-Allow-Origin: * on RPC responses and advertises X-Transmission-Session-Id via Access-Control-Expose-Headers on the 409 session handshake. Any website a user visits can read the session-id nonce that guards against CSRF, enabling cross-origin control of the daemon's RPC API.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-116748.yaml"}
 {"ID":"CVE-2026-116817","Info":{"Name":"OpenPanel - Unauthenticated Bull Board Queue Dashboard","Severity":"medium","Description":"OpenPanel before 3.0.0 contains a broken authentication vulnerability caused by missing authentication on the Bull Board dashboard served on the worker HTTP port, letting unauthenticated attackers access and modify queue data and jobs, exploit requires no authentication.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-116817.yaml"}
 {"ID":"CVE-2026-11801","Info":{"Name":"WPAdverts \u003c= 2.3.2 - Information Disclosure","Severity":"high","Description":"WPAdverts – Classifieds Plugin for WordPress \u003c= 2.3.2 contains an authorization bypass caused by improper user authorization verification in classifieds-types REST endpoint, letting unauthenticated attackers retrieve internal site configuration data, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-11801.yaml"}
+{"ID":"CVE-2026-118523","Info":{"Name":"EventPrime \u003c 4.3.6.1 - Unauthenticated Pending Post Disclosure","Severity":"medium","Description":"EventPrime WordPress plugin \u003c 4.3.6.1 contains a broken access control vulnerability caused by improper handling of Pending Review post status, letting unauthenticated users view non-public content awaiting review, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-118523.yaml"}
+{"ID":"CVE-2026-118539","Info":{"Name":"Drupal Commerce Core \u003c 3.3.13 / \u003c 8.x-2.41 - Guest Cart Admin Access Bypass","Severity":"critical","Description":"Drupal Commerce Core before 3.3.13 on the 3.x branch and before 8.x-2.41\non the 2.x branch does not sufficiently protect certain order administration\nroutes. This template finds a public product using a bounded set of 63\ncanonical product IDs, adds one item to a fresh guest cart, and checks\nwhether the guest can read that cart order's administrative state-transition\nform. No account, prior order ID, JSON:API, or checkout is required. The\nguest draft order persists. Sites without a usable product among the sampled\nIDs produce no finding, which is inconclusive.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-118539.yaml"}
+{"ID":"CVE-2026-119495","Info":{"Name":"WordPress Better Search \u003c 4.5.3 - Unauthenticated Arbitrary Post Type Content Disclosure","Severity":"medium","Description":"WebberZone Better Search \u003c= 4.5.2 contains a broken access control caused by incorrectly configured access control security levels, letting attackers exploit unauthorized access, exploit requires no special privileges.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-119495.yaml"}
+{"ID":"CVE-2026-120201","Info":{"Name":"Jpom 2.10.0-2.11.12 - Authentication Bypass","Severity":"critical","Description":"Jpom 2.10.0 through 2.11.12 contains an authentication bypass caused by injection of query conditions into the JPOM-USER-TOKEN header, letting unauthenticated attackers gain super-administrator access and execute commands, exploit requires crafted header injection.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-120201.yaml"}
+{"ID":"CVE-2026-120442","Info":{"Name":"ape-volo-admin \u003c= 3.5.2 - Authentication Bypass via Hardcoded JWT Signing Key","Severity":"critical","Description":"ape-volo-admin \u003c 3.6.1 contains an authentication bypass caused by a hardcoded JWT signing key in appsettings.json, letting unauthenticated attackers forge administrator tokens and gain full API control, exploit requires knowledge of the hardcoded key.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-120442.yaml"}
+{"ID":"CVE-2026-120446","Info":{"Name":"madong-admin-saas \u003c= 5.1.4 - Unauthenticated Platform Tenant Management Access","Severity":"high","Description":"madong-admin-saas \u003c= 5.1.4 contains a broken authentication caused by 'platformapi' middleware key mismatch in platform tenant management API, letting unauthenticated remote attackers manage tenants and subscription plans.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-120446.yaml"}
+{"ID":"CVE-2026-120597","Info":{"Name":"WordPress Welcart e-Commerce \u003c 2.12.7 -  Cross-Site Scripting","Severity":"medium","Description":"Welcart e-Commerce Plugin up to 2.12.6 contains a stored XSS caused by improper escaping of the ResponseCd argument in ESCOTT_MAIN::error_page_message, letting remote attackers execute scripts, exploit requires crafted input.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-120597.yaml"}
 {"ID":"CVE-2026-1207","Info":{"Name":"Django RasterField - SQL Injection","Severity":"high","Description":"Django \u003c 6.0.2, \u003c 5.2.11, and \u003c 4.2.28 contains a SQL injection caused by improper sanitization of the band index parameter in RasterField on PostGIS, letting remote attackers inject SQL, exploit requires crafted input.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-1207.yaml"}
 {"ID":"CVE-2026-12227","Info":{"Name":"Visual Composer \u003c= 45.16.0 - Unauthenticated LFI","Severity":"critical","Description":"Visual Composer Website Builder for WordPress \u003c= 45.16.0 contains a local file inclusion vulnerability caused by improper validation of the vcv-template parameter, letting unauthenticated attackers include and execute arbitrary files, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-12227.yaml"}
 {"ID":"CVE-2026-12394","Info":{"Name":"WordPress MemberGlut \u003c 1.1.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"MemberGlut WordPress plugin \u003c 1.1.5 contains a broken access control vulnerability caused by lack of validation of roles during front-end registration, letting unauthenticated users register with arbitrary roles including administrator, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-12394.yaml"}
+{"ID":"CVE-2026-12583","Info":{"Name":"Newsletters \u003c 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field","Severity":"high","Description":"The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored through a public form, allowing unauthenticated attackers to inject a PHP object and, via a property-oriented gadget chain bundled with the Newsletters WordPress plugin before 4.15, write arbitrary files and execute code on the server.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-12583.yaml"}
 {"ID":"CVE-2026-12609","Info":{"Name":"Eclipse Theia - Unauthenticated Path Traversal","Severity":"high","Description":"Eclipse Theia's plugin-ext backend exposes the hostedPlugin endpoint without constraining the resolved path to the plugin directory. An unauthenticated request using encoded traversal sequences can therefore read files accessible to the backend process. The built-in vscode_bat plugin identifier provides a deterministic anchor without target-specific setup.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-12609.yaml"}
 {"ID":"CVE-2026-12741","Info":{"Name":"WP Fast Total Search \u003c= 1.80.280 - Unauthenticated Time-Based Blind SQL Injection","Severity":"high","Description":"WP Fast Total Search (fulltext-search) versions up to and including 1.80.280 contain an unauthenticated time-based blind SQL injection. The wp_ajax_nopriv_wpfts_autocomplete handler reads the form_data[s] parameter and feeds it into a WP_Query. The plugin's index_sql_where() builds its cluster query with double-quoted string literals using esc_like() which only escapes LIKE wildcards and not quotes, allowing a double quote to break out of the literal. When form_data[sentence] is set, the search term is used verbatim, giving a clean injection point.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-12741.yaml"}
 {"ID":"CVE-2026-1277","Info":{"Name":"URL Shortify \u003c= 1.12.1 - Open Redirect","Severity":"medium","Description":"The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites via a crafted link.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2026/CVE-2026-1277.yaml"}
@@ -4070,6 +4081,7 @@
 {"ID":"CVE-2026-2262","Info":{"Name":"Easy Appointments \u003c= 3.12.21 - Information Disclosure","Severity":"high","Description":"Easy Appointments WordPress plugin \u003c= 3.12.21 contains a sensitive information exposure caused by an unauthenticated REST API endpoint /wp-json/wp/v2/eablocks/ea_appointments/ registered with permission_callback allowing unrestricted access, letting unauthenticated attackers extract sensitive customer appointment data.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-2262.yaml"}
 {"ID":"CVE-2026-22683","Info":{"Name":"Windmill \u003c 1.603.3 - Operator Authorization Bypass","Severity":"high","Description":"Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are restricted users intended to only execute existing scripts, but due to missing server-side authorization checks, operators can create folders, manage folder permissions, and access owner management endpoints. This bypass serves as the prerequisite for exploiting CVE-2026-23696 (SQL injection via folder addowner) enabling full privilege escalation from operator to super admin with remote code execution.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-22683.yaml"}
 {"ID":"CVE-2026-22739","Info":{"Name":"Spring Cloud Config Server - Path Traversal","Severity":"high","Description":"Spring Cloud 3.1.x \u003c 3.1.13, 4.1.x \u003c 4.1.9, 4.2.x \u003c 4.2.3, 4.3.x \u003c 4.3.2, and 5.0.x \u003c 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-22739.yaml"}
+{"ID":"CVE-2026-22777","Info":{"Name":"ComfyUI-Manager \u003c 3.39.2 - CRLF Configuration Injection","Severity":"high","Description":"ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-22777.yaml"}
 {"ID":"CVE-2026-22778","Info":{"Name":"vLLM 0.8.3 - 0.14.0 - Information Disclosure","Severity":"critical","Description":"vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-22778.yaml"}
 {"ID":"CVE-2026-22812","Info":{"Name":"OpenCode \u003c 1.0.216 - Unauthenticated Remote Code Execution","Severity":"high","Description":"OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying server.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-22812.yaml"}
 {"ID":"CVE-2026-23482","Info":{"Name":"Blinko \u003c 1.8.4 - Path Traversal","Severity":"high","Description":"Blinko \u003c 1.8.4 contains a path traversal vulnerability caused by lack of permission checks and filtering on the temp/ path in the file server endpoint, letting unauthorized attackers read arbitrary files including backup files with user notes and tokens, exploit requires no special privileges.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-23482.yaml"}
@@ -4310,6 +4322,7 @@
 {"ID":"CVE-2026-54069","Info":{"Name":"SiYuan Note \u003c= 3.6.5 - Authentication Bypass","Severity":"high","Description":"SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth middleware unconditionally trusted all chrome-extension:// origins, granting RoleAdministrator access without token validation to any request with a spoofed Origin header. Fixed in v3.7.0.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2026/CVE-2026-54069.yaml"}
 {"ID":"CVE-2026-54157","Info":{"Name":"LobeHub LobeChat \u003c= 2.1.56 - Server-Side Request Forgery","Severity":"medium","Description":"LobeHub LobeChat versions up to and including 2.1.56 are vulnerable to an unauthenticated server-side request forgery vulnerability in the /webapi/proxy endpoint. The endpoint accepts a URL in the POST request body and fetches it server-side without authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-54157.yaml"}
 {"ID":"CVE-2026-54236","Info":{"Name":"vLLM \u003c= 0.23.0 - Anthropic Router Heap Address Information Leak","Severity":"medium","Description":"vLLM \u003c= 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitize_message to the OpenAI router but the Anthropic-compatible router (/v1/messages) echoes str(exc) directly.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-54236.yaml"}
+{"ID":"CVE-2026-54419","Info":{"Name":"PIAF-HMS ec.php - SQL Injection","Severity":"critical","Description":"claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1c104212cd62be2bfca21e5) contains multiple unauthenticated SQL injection vulnerabilities. The application has no authentication mechanism and passes user-supplied HTTP parameters directly into deprecated mysql_query calls via string concatenation, without sanitization, escaping, or parameterization.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-54419.yaml"}
 {"ID":"CVE-2026-54617","Info":{"Name":"GravitLauncher LaunchServer \u003c=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read","Severity":"critical","Description":"LaunchServer's Netty FileServerHandler computes the served path by stripping one leading character on the assumption that every request-target begins with '/'. Netty's HttpServerCodec accepts a request-target without a leading slash verbatim, so a request without a leading slash bypasses path normalization and escapes the updatesDir. The file server is enabled by default (netty.fileServerEnabled=true) on 0.0.0.0:9274 with no authentication, allowing an unauthenticated remote GET to read any file readable by the LaunchServer process including its own ECDSA signing key (.keys/ecdsa_id), which signs access JWTs and enables full authentication bypass for any account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-54617.yaml"}
 {"ID":"CVE-2026-54836","Info":{"Name":"YMC Filter - SQL Injection","Severity":"critical","Description":"YMC Filter \u003c= 3.11.5 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-54836.yaml"}
 {"ID":"CVE-2026-54917","Info":{"Name":"SeaweedFS \u003c= 4.29 - Path Traversal File Write","Severity":"high","Description":"SeaweedFS versions through 4.29 build the S3 API and Iceberg REST catalog routers with mux.NewRouter().SkipClean(true), which disables URL path cleaning. A `..` segment in the request path therefore survives routing and reaches the handlers unnormalised, so a request such as `PUT /bucket-A/../evil-bucket/key` is matched as bucket=bucket-A with object=../evil-bucket/key. The captured object key is then joined into a filer path where the `..` is collapsed server-side, so the write lands in evil-bucket while authorisation is evaluated against bucket-A, enabling cross-bucket file write.\n","Classification":{"CVSSScore":"7.8"}},"file_path":"http/cves/2026/CVE-2026-54917.yaml"}
@@ -4388,6 +4401,7 @@
 {"ID":"CVE-2026-73034","Info":{"Name":"DB-GPT \u003c= 0.8.1 - Arbitrary File Write","Severity":"critical","Description":"DB-GPT through 0.8.1 allows unauthenticated arbitrary file writes via a path traversal in the user_id HTTP header of the POST /api/v1/python/file/upload endpoint, letting attackers escape the intended upload directory and write files anywhere, as confirmed by the reflected upload path in the JSON response.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-73034.yaml"}
 {"ID":"CVE-2026-7467","Info":{"Name":"Read More \u0026 Accordion \u003c= 3.5.7 - Authenticated Privilege Escalation","Severity":"high","Description":"The Read More \u0026 Accordion (expand-maker) plugin for WordPress through 3.5.7 allows privilege escalation due to improper validation in the importData AJAX handler (yrm_import_data action). An authenticated user with plugin access can upload a crafted JSON attachment to insert arbitrary rows into WordPress database tables, including those that control user roles and capabilities, potentially leading to site takeover.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-7467.yaml"}
 {"ID":"CVE-2026-75128","Info":{"Name":"Langchain-Chatchat \u003c= 0.3.1.3 - Unauthenticated RCE","Severity":"critical","Description":"Langchain-Chatchat \u003c= 0.3.1.3 contains a command injection caused by unauthenticated access to the /tools/call API endpoint invoking the shell tool, letting remote attackers execute arbitrary OS commands as root, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-75128.yaml"}
+{"ID":"CVE-2026-75650","Info":{"Name":"Adobe Commerce/Magento \u003c= 2.4.9 - StyleSmuggler Unauthenticated RCE via SSTI","Severity":"critical","Description":"Adobe Commerce contains a template injection caused by improper neutralization of special elements in the template engine, letting attackers execute arbitrary code in the context of the current user, exploit requires no user interaction\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-75650.yaml"}
 {"ID":"CVE-2026-76268","Info":{"Name":"Splunk Enterprise Patroni REST API - Missing Authentication RCE","Severity":"critical","Description":"Splunk Enterprise versions 10.2.0 through 10.2.6 and 10.4.0 through 10.4.2 expose the Patroni REST API (PostgreSQL sidecar) on SHC members without authentication. An unauthenticated attacker can PATCH /config to set a malicious archive_command and POST /restart to trigger it, achieving remote code execution with the privileges of the PostgreSQL process via the classic Patroni RCE chain.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-76268.yaml"}
 {"ID":"CVE-2026-76460","Info":{"Name":"Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass","Severity":"critical","Description":"Cisco Identity Services Engine contains an authentication bypass caused by insufficient authentication control on an API endpoint, letting unauthenticated remote attackers gain unauthorized access, exploit requires crafted request to API endpoint.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-76460.yaml"}
 {"ID":"CVE-2026-76904","Info":{"Name":"GeoServer jsonArrayContains CQL Filter - SQL Injection","Severity":"critical","Description":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoTools FilterToSqlHelper.constructEquality writes the expected argument of the jsonArrayContains CQL function RAW into the SQL string while only escaping the JSON pointer. A single quote in the value parameter breaks out of the PostgreSQL jsonb_path_exists string literal, enabling unauthenticated SQL injection. When the PostGIS backend runs with superuser privileges, the injection escalates to operating system command execution through PostgreSQL COPY TO PROGRAM. Patches are available in GeoTools 33.6 and 34.5. No known workaround is available, so the scope can only be limited by restricting which CQL functions are exposed.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-76904.yaml"}
@@ -4455,6 +4469,7 @@
 {"ID":"CVE-2026-9506","Info":{"Name":"Bagisto \u003c= 2.4.1 - Unauthenticated Arbitrary File Read","Severity":"high","Description":"Bagisto through 2.4.1 is vulnerable to unauthenticated path traversal in the ImageCache controller. The `original` image-cache route (/cache/original/{filename}) passes the user-supplied filename to getImagePath() without any '..' filtering or realpath containment, allowing a remote unauthenticated attacker to read files outside the intended public image directories (upload/images) - for example the application's composer.json, artisan and other source files.\n","Classification":{"CVSSScore":"8.7"}},"file_path":"http/cves/2026/CVE-2026-9506.yaml"}
 {"ID":"CVE-2026-9586","Info":{"Name":"Sangoma Switchvox \u003c 8.4.0.2 - Unauthenticated SQL Injection","Severity":"critical","Description":"Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint (PhoneAppsHandler.pm). The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An attacker can break out of the single-quoted SQL string context and leverage PostgreSQL COPY TO PROGRAM to execute arbitrary operating system commands without authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9586.yaml"}
 {"ID":"CVE-2026-96652","Info":{"Name":"Plex Media Server \u003c 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell)","Severity":"medium","Description":"Plex Media Server \u003c 1.43.3.10861 contains a server side request forgery caused by improper validation of the 'protocol' parameter in /player/timeline, letting attackers with any X-Plex-Token value force the server to POST to arbitrary destinations, exploit requires any X-Plex-Token value.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-96652.yaml"}
+{"ID":"CVE-2026-96655","Info":{"Name":"Plex Media Server \u003c 1.43.3.10861 - SSRF via Transcoder","Severity":"medium","Description":"Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-96655.yaml"}
 {"ID":"CVE-2026-97229","Info":{"Name":"GitLab CE/EE \u003c 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer Overflow","Severity":"critical","Description":"GitLab CE/EE 19.2.0–19.2.7, 19.3.0–19.3.4, and 19.4.0–19.4.1 contain a remote code execution caused by insufficient regular expression validation in CI/CD configuration, letting unauthenticated users execute arbitrary code remotely, exploit requires crafted regex in CI/CD config\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-97229.yaml"}
 {"ID":"CVE-2026-97359","Info":{"Name":"Rejetto HTTP File Server 2.4.x - Template Injection","Severity":"critical","Description":"Rejetto HTTP File Server (HFS) 2.4.x inserts the multipart upload filename into the server-side template symbol map as %item-resource% without escaping. A filename containing the literal %item-resource% is substituted a second time by the sequential global replacement in xtpl(), allowing a :} sequence to terminate the quoting region so a following {.exec|...} macro is executed as an operating-system command. An unauthenticated attacker achieves remote code execution with a single request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-97359.yaml"}
 {"ID":"CVE-2026-9833","Info":{"Name":"WordPress Tag Groups \u003c 2.2.0 - Reflected Cross-Site Scripting","Severity":"high","Description":"The Tag Groups WordPress plugin \u003c 2.2.0 contains a stored XSS caused by improper escaping of an AJAX parameter reflected in an HTML response, letting unauthenticated attackers execute arbitrary JavaScript in browsers of logged-in users with edit_pages capability, exploit requires victim interaction.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-9833.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-2dfc3e730386e72f3fc9d98de65ac874
+f3990275d1c6fc2915600ac9e66904ac

dast/cves/2020/CVE-2020-9402.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2020-9402
     cwe-id: CWE-89
     epss-score: 0.22513
-    epss-percentile: 0.97712
+    epss-percentile: 0.97715
     cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
   metadata:
     vendor: djangoproject
@@ -54,4 +54,4 @@ http:
           - "ORA-06512:"
           - "Request Method:"
         condition: and
-# digest: 4b0a00483046022100fe78dde8c0c02ee18d9593ca409d7ff432cf34ddbb29e6327ce77d79ec93e74d022100f67c0e710f9059ba5e92ad532c52c211a4c4442da058cae63398ffc993b63a0f:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220147d54404e5435ace823b18bdaca18e8bc1f7f48ead04730e44cb51c836f2d260220661dfc2fa94b8a56c140f8283da2d0857b014efee28cd2197599661593ecff5a:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-35042.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2021-35042
     cwe-id: CWE-89
     epss-score: 0.44369
-    epss-percentile: 0.98763
+    epss-percentile: 0.98768
   metadata:
     verified: true
     fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -66,4 +66,4 @@ http:
           - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
           - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
           - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 4a0a0047304502206472b09275211abe6f94a73cf7fde58b49c03692c6faae8dde38a8094562d76f022100de57607ec6e1cfb9c11f3005869479806b7f85a5a8f2d97b0561c24afd609768:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b6d3f02b21233dc13034971472ef9303cc2d7ca17d6d15e539cead7ca3a568d0022100f181cb6a510bc29993cabc2368f8d2ebd646d8d63b8adb42ae2576f8126b0380:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-45046-DAST.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2021-45046
     cwe-id: CWE-502
     epss-score: 0.99977
-    epss-percentile: 0.9998
+    epss-percentile: 0.99979
   metadata:
     max-request: 1
     confidence: tenative
@@ -66,4 +66,4 @@ http:
         group: 1
         regex:
           - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4a0a00473045022100afaa866c7f62a5ffce9b7049cf5fa3e7d8e775734bad7542211fb12d61c6c1f40220561a16e5b75fc10da2bb8b3ddbfbe4dcf16a8e1b49640cf3fbf9100f246aa8ee:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b6ed1935cff5051003d99c6f19bcc8f1a999975bc7e3e9c5ac18f74bccb469ec022100842bffc0cbe807b3b39ad28a2f1e3a52a5fd8105a527b2ec81040e610a056adb:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-34265.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2022-34265
     cwe-id: CWE-89
     epss-score: 0.73607
-    epss-percentile: 0.9947
+    epss-percentile: 0.99472
   tags: sqli,dast,vulhub,cve,cve2022,django,vuln
 
 variables:
@@ -50,4 +50,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a00473045022071a18418fa32da6b6452ef0ebcde066ae63ff4be8159c649e9ad41d60131de96022100ad106ee3f57d421557f098852c997f92cdab7774c2605c49fbe8823d6972d563:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b546f009f75e704ba1a72c2885411bd3f210bfd48a978040ab602770424bf57d02206796825e165c9673bdd4f911ed9eb26e7c6e92ae91b78f05102292d55822bd7d:922c64590222798bb761d5b6d8e72950

dast/cves/2024/CVE-2024-2961.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-2961
     cwe-id: CWE-787
     epss-score: 0.8833
-    epss-percentile: 0.99769
+    epss-percentile: 0.99771
   tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln
 
 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
       - type: regex
         regex:
           - "root:x:0:0"
-# digest: 4a0a0047304502210080188bc70cf67dbf8193cb75588249817b6aa31cb1b786e524d8646acb1fd94402202d54418443ae566fe295a0ea3ff3c18b773b5040d465bf16eeaa98335c938658:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203cc146f11f2e115d795986b5518b2187e5b790281d595d333607a34e133746510221009081f17d57be2b7129eacf3198808e60555da8d98c8ed16700d93da9b68af336:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
     epss-score: 0.42326
-    epss-percentile: 0.98702
+    epss-percentile: 0.98707
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -56,4 +56,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4b0a00483046022100afb5a2f4557bd9f30230e3e7dd642387633e6adaeee7c6d9acf7d822a4ab5d60022100e52993e3f7dc3a73f3df85b762964547da0a7b2140700dbf370d75d41bba01e5:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022018980ec2bf9f1d907dce1e627a416effc9031ef6d78848978343c7552d071a4702201d64b56f2269f91a25729144ba62e4b08901d330efe48a50561bc4fd4b991e46:922c64590222798bb761d5b6d8e72950

headless/cves/2020/CVE-2020-24900.yaml

@@ -0,0 +1,81 @@
+id: CVE-2020-24900
+
+info:
+  name: Krpano Panorama Viewer <= 1.20.8 - Cross-Site Scripting
+  author: s4e-io
+  severity: medium
+  description: |
+    The default installation of Krpano Panorama Viewer version 1.20.8 and before is prone to reflected cross-site scripting via the xml parameter in krpano.html. When passQueryParameters allows the xml parameter, a remote XML file supplied in the URL is loaded and its embedded Javascript action is executed in the origin of the viewer.
+  impact: |
+    An attacker can execute arbitrary Javascript in the victim's browser in the context of the vulnerable site by sending a crafted link, which can lead to session theft or actions performed on behalf of the victim.
+  remediation: |
+    Update to the latest Krpano version and set passQueryParameters to a fixed list of parameters that does not include xml, instead of true.
+  reference:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-24900
+    - https://krpano.com/docu/releasenotes/?version=12010
+    - https://krpano.com/docu/embedpano/
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 6.1
+    cve-id: CVE-2020-24900
+    epss-score: 0.00868
+    epss-percentile: 0.58923
+    cwe-id: CWE-79
+  metadata:
+    verified: true
+    max-request: 1
+    vendor: krpano
+    product: panorama_viewer
+    shodan-query: http.html:"embedpano"
+  tags: cve,cve2020,krpano,xss,headless,viewer
+
+variables:
+  payload: "https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/CVE-2020-24900.xml"
+
+flow: (http(1) || http(2)) && headless(1)
+
+http:
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body, "embedpano(")'
+          - 'contains(body, "passQueryParameters")'
+        condition: and
+        internal: true
+
+headless:
+  - payloads:
+      path:
+        - "/"
+        - "/index.html"
+        - "/tour.html"
+        - "/krpano.html"
+        - "/vtour/index.html"
+        - "/vtour/tour.html"
+
+    attack: batteringram
+
+    steps:
+      - action: navigate
+        args:
+          url: "{{BaseURL}}{{path}}?xml={{payload}}"
+      - action: waitdialog
+        name: krpano_xss
+
+    stop-at-first-match: true
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'krpano_xss == true'
+
+    extractors:
+      - type: dsl
+        dsl:
+          - 'BaseURL + path + "?xml=" + payload'
+# digest: 490a0046304402206466109bbe1a70a09dfc9ac614a49ff513e459c3ea8df2d390a75549c134c7d102203c0df3bb76e3b0c54802ee61413b9d8d053bd47dedc3c57caa9b763fb3b1c0c4:922c64590222798bb761d5b6d8e72950

headless/cves/2022/CVE-2022-29455-headless.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2022-29455
     cwe-id: CWE-79
     epss-score: 0.23678
-    epss-percentile: 0.97821
+    epss-percentile: 0.97824
     cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -52,4 +52,4 @@ headless:
         words:
           - "elementor"
         case-insensitive: true
-# digest: 490a0046304402201f650fe8195d571d265b3496e637f81051404f3dacbb4d5b5d124691e7c4c0220220056cd340b3cb50cdb1dd43355f28dc78449ee7353eef4f1c595ccdeac26497d7:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022027814118b37f59c43325bc3f14e9679afe72f8d5a9b1c20fc2afed0edd84a11602201557c3b1263d374d75fbdbb60fe2789560b92e50405add548388e51c77b9c740:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
     epss-score: 0.01086
-    epss-percentile: 0.6531
+    epss-percentile: 0.65417
   metadata:
     verified: true
     max-request: 1
@@ -50,4 +50,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 4a0a00473045022100e83e5cef0de22712266eee9a1e9bb02cd530eeda96fa4cc9d5718abf99d8bef5022041aa65078f259ebd3043e8eaf2acd7398ea37e00695d9f078d5f9ced3cfc3cb6:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220082ddaeee769f1563e15d375e2bf5127ae25b57dac032e1d37f7335042f9362d0220424cae4c7559f801b858d78ab4b17e2eb293d169a09cb892bc62735f42eab237:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-38526
     epss-score: 0.03832
-    epss-percentile: 0.90109
+    epss-percentile: 0.90143
   tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
   - steps:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 490a0046304402207b482d8550c5dd1f6080df974128518daf1456b03fd1af6ba5839969f188070c022070d022d51d32b229dabc875da1521d5b985bfe808a05abcc415dc3a8e77b6810:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203ba617944985b7e79ba9d993ac4d39614fecfa633c417a23f895a21b0ddf1b1e0221009b22ddaad243f6997ef3e45691f31addc5ca309019514d47dad92f3782b2c4e4:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -16,7 +16,7 @@ info:
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
   classification:
     epss-score: 0.01233
-    epss-percentile: 0.69033
+    epss-percentile: 0.69124
   metadata:
     verified: true
     max-request: 1
@@ -46,4 +46,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4a0a00473045022100878ebfdbec0139706c75e504f8fafb61d5038206c02510032107cf41f44a67d4022039d3d19cf690a29c854d74cdfce1753bac46e93a31176b9e85b8fdc6df996313:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220719459f8b1c4b04bad61706faaff91681c6cb3d9a5126c213618c188315a61050220592d37cbeb808de4f0494af69bd95310a33d013db8a07afdb05d4215519f9842:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
     epss-score: 0.01721
-    epss-percentile: 0.77506
+    epss-percentile: 0.77574
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
     max-request: 7
@@ -190,4 +190,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 4a0a00473045022100c5a33844fa8661a9dcccba41ebaaed4df154c1aa3e12b5120464be4573e642fa022026c2df02fd401cac32ab33c84aedcdaa9c0309641d69f346014f28567630a775:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202adbbca72b3251e73c2032e19b5401ea58e85d1264fd041fb33ad3a846c6916a02205ee14b293c376a75dfeec545f8730dc7f567f4801553c4b5b08aab78d255e03e:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-29927-HEADLESS.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2025-29927
     cwe-id: CWE-285
     epss-score: 0.99225
-    epss-percentile: 0.99936
+    epss-percentile: 0.99935
   metadata:
     vendor: vercel
     product: Next.js
@@ -59,4 +59,4 @@ headless:
           - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
           - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
         condition: or
-# digest: 4b0a00483046022100aac93e1fd57974ef6c1924e79d2f0ebd678e5f0d2279d2f1b33329fb79f3a142022100861f8b3d2b8a072773236b2d06cfdeb246fdbbafceee0c8c515b72c7bafd8dbf:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a5c5fda778886fac8336e331e8eeb4847c3892f980b81d3f7fd782d2b29c32da022100c0c986e9acf6c015ae1db236540f91363e548816f8368b522ca8330377d6f35b:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-8191
     cwe-id: CWE-79
     epss-score: 0.01821
-    epss-percentile: 0.78774
+    epss-percentile: 0.78843
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -69,4 +69,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a00473045022100ef7bc67602dbe1807befa7271dd122b1fe7a02e2288b6041398cbdc3fc9779fd02204d2f2e34e17874c89194c131adfbe8ee7f5fd203856db1becb927d4317229e24:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f224b41b0b1815153883ec773f4d8a02c75ac01ca089adef9ee8864767810c8e022021af05332892492a09f4439f82db88a74ef02a862b5a2afce920e9f1531ee44d:922c64590222798bb761d5b6d8e72950

helpers/payloads/CVE-2020-24900.xml

@@ -0,0 +1,5 @@
+<krpano>
+	<action name="s4e" autorun="preinit" type="Javascript"><![CDATA[
+		alert(document.domain);
+	]]></action>
+</krpano>

http/cves/2000/CVE-2000-0114.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5.3
     cve-id: CVE-2000-0114
     epss-score: 0.47595
-    epss-percentile: 0.98847
+    epss-percentile: 0.98851
     cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
         group: 1
         regex:
           - 'version:([0-9.]+)'
-# digest: 4b0a00483046022100f8396fc285fabbe1cf98b30bdc076d60d3e30177dff25e39e2f31e754aa7afcf022100c7c80afe8e37cb4202eafc4542e41707473c00c562d8b002dc69596fef39ee4a:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201eafb489562f19779bda62f0c6eecd2403c0f72e2c4432bb327e64726373527b02204f187b4f37a80d9b70ac9bced2f1374acf9a56742621071e4488a533924fdba8:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2000-0760
     epss-score: 0.62496
-    epss-percentile: 0.9919
+    epss-percentile: 0.99192
     cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f2fe733b0d0e9703fd34c9f69c74ff8a734add0c80be84e1fa1a2fc11643c37302205b0923bf21b420da6f552cb05d156ca79a09bf6c8235e7a4f016aff2e7ac6db7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220019f5cb0af9f799cfdac4e7921284e885acc32df97c1062aa7164bb4e5c22912022100f9892a36633413fd64118b4382e0e8e0480cc55d90ac5e6b4d6be60fe93ec589:922c64590222798bb761d5b6d8e72950

http/cves/2001/CVE-2001-0537.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2001-0537
     cwe-id: CWE-287
     epss-score: 0.6845
-    epss-percentile: 0.99336
+    epss-percentile: 0.99338
     cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -53,4 +53,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402207ff892d6f7441e26349e9eb7ff66ce143d5390a399a84988078a0487522c7f5f02203b7e10bb5845a89f4fcb2cc16f1e189bced6643028f563285e111e02870f468a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b77c9d8e4615002281c0e7eb98ca2c47a45cc803eca0569ab4dbbe5586ac75fc022100b486008ab9909f1d4ee59b4409c2ceffc69d22d62d36a7c7a251c7b290fdd49a:922c64590222798bb761d5b6d8e72950

http/cves/2002/CVE-2002-1131.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2002-1131
     cwe-id: CWE-80
     epss-score: 0.25754
-    epss-percentile: 0.97973
+    epss-percentile: 0.97979
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 5
@@ -52,4 +52,4 @@ http:
           - 'contains(content_type, "text/html")'
           - 'status_code == 200'
         condition: and
-# digest: 4b0a00483046022100a6e65682d524bb87fb79b3fbdc941164641b6c3c4e1fe0ce4b5d9587c84c56ff022100938de1295441b24cc147823580d537321b4e0bdd0e884a3990fe1c1bf62155a7:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204ad52b341d4721adfbae8f03f93db292bd4441ddfe95748702f7147480c3322d02202f80831dc372b17492817c169b1539418fe5e79d5b6832656596d7fb500f43b3:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
     epss-score: 0.22528
-    epss-percentile: 0.97714
+    epss-percentile: 0.97716
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c5fe03dfd2e1f3ef82d66f793dfd90ffd32f357bc50fec18685eb25548ddf9e102205341aed71c36c16533c3f61248e96ea17c016fc117cedf49377930be36cf066b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a97c58d88371bc91177d59b34d038942ca19068b9409cfa8fda8f1eae78f8e71022100bebe87388116b6effd0b846e64869c0cdad44ebbbedea3e48fcc8b47f53c6070:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-1965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2004-1965
     cwe-id: NVD-CWE-Other
     epss-score: 0.09001
-    epss-percentile: 0.95277
+    epss-percentile: 0.95293
     cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a00473045022005c90da8ff292cc6b9a0b93d5fbbaed07b58f1b60f7d16152d1450b86728cc7202210085470cf0ddda6986f5a9bd3e4a396e2310a9a62eade4a262577d8d889650ce9a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b2375bd4c9923c0071dc7f106dd84044fee37dbcf69cff87a8d261c0a50a1bc502205a36537f680fb1cce08cb29c8e6a6181fe3c7b9c473700c50df8e45c567f6502:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
     epss-score: 0.73028
-    epss-percentile: 0.99455
+    epss-percentile: 0.99457
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220049f14e8c95153b0d0bcd3042aea7cc3ee14637c640d0a3d76e0adce878ed49e022100b62fa39faf18f69054ebd7593effaae599ec5dac80e0d56ea52cab9ceaaac328:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022016155a49c843b410d98703af616e44680c4306116c89a0a0c87626cbc0dce6d702204b2cd2d30d4a68de2c130abebdc01b83262ffa1954f808907e7f4d51a1a8db48:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3128.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5.4
     cve-id: CVE-2005-3128
     epss-score: 0.03436
-    epss-percentile: 0.88976
+    epss-percentile: 0.89018
     cwe-id: CWE-80
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
         part: header
         words:
           - "text/html"
-# digest: 490a0046304402206d9c3724e9d978865b29239b9569a2ead4afc10834641095f453b37d29078424022011b3bfc3cb2c0f02ec2138f832ce4224a1eb0d9b4b5b79ba0a43a36b97609d5c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202be5fc3c6e62445cd41145bdd6bc37f86d4f22677c4c2f5ba75db4350090c90102203c420aa2100f379cf3062044416cedf0b6d9d0aff7abae870409f34430609fce:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
     epss-score: 0.07986
-    epss-percentile: 0.94765
+    epss-percentile: 0.94782
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220311a4f38611db57e8ee92da5a2d4cdb10c50ea01372fb5f52b9c6441fcc2856602206fc44441b45dc79b28b98bf4ddd1c37a6abdc5b69a620a382eddb73faf738b3b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206bf171deb5d495a9371a5368d32815a2ec8e470418e233fa967a2378159b8a3a022053674842de02c46145345ef0a7fdb1e066366e3ce68aa0e9a92e895fd572379e:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
     epss-score: 0.17757
-    epss-percentile: 0.97167
+    epss-percentile: 0.97176
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4b0a00483046022100ab7419248f91c186cff7a3760ed3bc5077c6c9dcec93db8b6351c515d2026919022100a2c1078d30332dee3aa38d8e044f01c1dc814a791ae454d0b4a4cccbcf096d7f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cb26439a797690146b8bebd5f7053ec3779e5123366ac4062b41e31cfcc67cc8022100e1abe8a0283051f402d349b272ce75d84cdd95a42286c2b0e0610e926631f43c:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
     epss-score: 0.08836
-    epss-percentile: 0.95203
+    epss-percentile: 0.95218
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100abe45308fb18a5643d3b005348cd623b861807861381e0823e177cb74195811d022029fd869756a4e41405a115adee219c09a7158f7b1955959d826b2329607fc154:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ffc445b8f5736ef7038aa5d52e701e6b41f82c01456d5976be4a28b932e14ec7022009b6ae946c903f4866b55115604557ae8999ab0e8cb398b45f54405b9aa43a7d:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-1681.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2006-1681
     cwe-id: NVD-CWE-Other
     epss-score: 0.06798
-    epss-percentile: 0.94013
+    epss-percentile: 0.94033
     cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022064aa6818022e56f9e38996b5eee61f8c57c3369b4bae3481c0794ae36aac291102210094aa62bcda6145e1cb03e2c0a6097461373f16ec31814ed25b103b48d0e3ed6d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e66340edbc81de663d0c8c6c59f9edd6c78d05ca84db2c16482c01886fe43b0b02205691c7fc2e1a0e4ec7aa9363f645465ae16ee84470d63a9f6eb3185df415c5cf:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2006-2842
     cwe-id: CWE-22
     epss-score: 0.47196
-    epss-percentile: 0.98839
+    epss-percentile: 0.98841
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220043652605cf3417224303820fad171b627095c9010485fb69ad9e3af42b07734022009e77be9d462e85be248266a17a346ee6d8f1780f16ec7eb35a6f870d4205435:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cd965f49655c3b30a6324457e7390ca1f4d6a4005d86ee9b8f83da94caebf05a022100ca366dbeb3d27dffd8bfbd9fe7082933ebc7cbe1b5420d0d7ea5b03e8ec0991f:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-0885.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2007-0885
     cwe-id: NVD-CWE-Other
     epss-score: 0.05746
-    epss-percentile: 0.93075
+    epss-percentile: 0.93099
     cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220499a5a591cbccd3919ec77a13f5f5c33c77302bda493946399a784f31f8a8c250220428d40d33b248bee09a2d12c5dadaa594c84ba97b8678eda7002264406e7cca4:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022061a97a3182101a407889962a1fdfa21535fa90334ae0e63b1fedbbcf2aaf8c1f022004ba1d7e1b32941d79d3313da8d927fc8a04e2143e33118296f8fea9a2dcdd49:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.2
     cwe-id: CWE-79
     epss-score: 0.77376
-    epss-percentile: 0.99557
+    epss-percentile: 0.9956
   metadata:
     max-request: 1
     verified: true
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450221009800833c6629bd68f99a3dccaf0f199b395ca6a50a8d94c7720bee6783a2633002204e17137f283c029f2314eb8807acda82e765b79bc37bbd2f515caebaf8d919d7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e09354c1519a0935cdf7d8a16fe012a1938c924de7536751ad9d1af39aa9291502203f8ce4de9bafa6b7193920b942dbd133873ee163bc1ff92977153b2382ea0996:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
     epss-score: 0.09491
-    epss-percentile: 0.95447
+    epss-percentile: 0.95463
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100ebd322115e4a6648f7b2b4d035595d461e8aaaabe12908d3b673c0c626d6bf0e02210081f960f72f1ca959f8534dd3cf0cb2970943ba6cb17b575d97d46be462d4120d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022007aa4f228ec34ba088433a82f2c0a9b498deafff778ad2ed81ce5a14d31e379e02205de8afcfd3ef014f6c3bf3a1e3a80a94d92a09d4bf484d7b4afd04658932a668:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4556.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-4556
     cwe-id: NVD-CWE-Other
     epss-score: 0.25749
-    epss-percentile: 0.97972
+    epss-percentile: 0.97979
     cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100d7855756b1245ee08680a63fcce3d58c9100d3407588ebd7a03495397d46d7de022100a1c61cb339a76233032b3a785df412a5352e7a31e8c24258b68f30ee2bd93826:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206568356bea0648d5c2e2165902aff11d3b25d521722231e3495deb74bca67a03022100ea2c9400453061c9c485f6709b2a2e7218e0e51a5636c0b37d6afbe043ca1c0e:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
     epss-score: 0.14639
-    epss-percentile: 0.96663
+    epss-percentile: 0.96672
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502201ae258acc7aa75e0919dad6454691379a5d47c8c328e1b30a879a853fb081ea1022100d63814e063c0fd42ffbc71b9b892e3ebb2d4f5d4bedca9cdde8b2eb0eed81aa6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e80213f3827e8473d7985991c082aa65cdc0e85661ef07df2814083882f01c5f022100cf56eb509dc50a7ebbcdd03b69875d7db39dcd73420b72f62aaff0a93b84fdeb:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1059.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1059
     cwe-id: CWE-94
     epss-score: 0.48329
-    epss-percentile: 0.98867
+    epss-percentile: 0.98872
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022063bbf26e6a965bae7018b95f777875a7219f5e75eeb8f5a13c7d7710ba375728022008d1f3f31371496fc31a9ad01485feab33125fc3301be133f58f07f7d673abe3:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ff9ca6c79c7447dcfafee5fc7e373cbe7184c2f66586483b19c1694d64a48ac1022100b7801be4e7d4b238798033a0a4ec0a2062135b010f0d2459dd0ff1bdb6bcf533:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1061.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1061
     cwe-id: CWE-79
     epss-score: 0.074
-    epss-percentile: 0.9444
+    epss-percentile: 0.94459
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402201abfb8d7684b7d34233411b31a54fb9b503856c188167f56b6278c798d7e35f4022001128c0f337161753ceab8204b2cbc4aa4ab551c15a5bf1b82bf2d9c4954ec75:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100898db1f65c5caebf1b4f9cbb6450bb7e674601f09fff7341c7b82785479acf2a022070d319568ad863221f00e6ed9f2678f7f95fd527c36929f62499a6fce2b07bf3:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1547.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1547
     cwe-id: CWE-601
     epss-score: 0.48137
-    epss-percentile: 0.98862
+    epss-percentile: 0.98866
     cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -51,4 +51,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402201a2c4a587efb773ff6cdb3059c1896148bba79a9b91fe4a65fc7f51946034a7e02203b6cc87857a0db5188834f7a73a3d219a335124fec8737b5de018d5321a52f2d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203f38f20f27cdbb71ff5a45af4fbf1b0088edef32e9bb3b29df6f5d7a193d20fa02205c0cfc5d45233017c748c690c00719d2859807eb56b8c81a22e420fb22a2404b:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2052.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2008-2052
     epss-score: 0.01568
-    epss-percentile: 0.75369
+    epss-percentile: 0.75452
     cwe-id: CWE-601
     cpe: cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*
   metadata:
@@ -65,4 +65,4 @@ http:
         status:
           - 302
           - 301
-# digest: 4a0a0047304502201b2e37708d9c200fad701ec75f01c35ad33ddb3d5151cd0e4237d30f49f47a40022100e16185d6e1b7034f435e8da61623ad8c6794b889f10c60819508a18200965e83:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022020c69e3b8b5b6e830015ba7e787fac522c975c374bf404627a1343899a6c2b1202207ec44bc42e1e778c8f5049466b6be986a9d3d177a39bb54e928db3a5c3496335:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
     epss-score: 0.06232
-    epss-percentile: 0.93551
+    epss-percentile: 0.93574
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022055522dc2512a8f73739049753f980672b25d28bc44d4199ecdb1706b955e1f360221009b31cdbbee1e73641f7824028ee420e9348a68c42d7b4bd05538dad14740b97f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100aeacb5588b57d5b9d7f6dd1abda029327754ae41e8207a2bc41917bb12ef9ae8022100e49d3989d57228e9ad219e912a70b843d2447e600c77844717209f0ac6dec6d0:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
     epss-score: 0.18809
-    epss-percentile: 0.97285
+    epss-percentile: 0.97294
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100cdd9a52e32c80ee62f0f1ab1107993fd02831ddbe39f147a1d2d99160e92ae80022100fc7e721a2e846ba31a29a1e48d375f35c17d5b3d987b6d36f862ccee33ad31f9:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220761ffcabef9f982d824e096626c958f4b27eabdd047bfdfeacae6a77fc2a663002205b906cfd744edfba42b4caf4fd3126cc22c326bdf874caaf71eba24c24d8e2be:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
     epss-score: 0.21476
-    epss-percentile: 0.97619
+    epss-percentile: 0.97627
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022019ecfe7dcd1dff0294c9eea59243cb9c79c074091ea0c9398e8cb283203b9ee90220552a744a763321bfb0ccc3a2743202ee649223196ba228d0ed4d076da0f6262e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202172a65b473eb015185269e9ae49ba3c43bbbaadbef169cb729717aaee13a4d5022100f98982e12c52a7f3efc901086ef69002a834e64ad703936e7b9757e420f33d79:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4764.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-4764
     cwe-id: CWE-22
     epss-score: 0.16505
-    epss-percentile: 0.96997
+    epss-percentile: 0.97006
     cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100ffa85fc0cf1841315ff2567d3acd752c2ea25e7a5b24beafb5d058d4dd465457022100f64411dc7cbdf45be364356fe47e04ea199cd9a6b2aecbf70ff198b8615447bc:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205981f82dafaed4d6a22656e490c2c1a8ee5250038f935373b28c17c18e9732f3022038da81c982766929a908634b3ad25033d2bf5dc4355e9454f6f6730c335e787e:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-5587.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-5587
     cwe-id: CWE-22
     epss-score: 0.12865
-    epss-percentile: 0.96304
+    epss-percentile: 0.96318
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -49,4 +49,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220602c2341b283cfb0065449fd89a06a0ce6250fc6fa3f9184d13d1c574d716888022036df193136f040a955376a12f377c8ba6547fc5e907afb50639672de56a43f0f:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022029f0ca43a2540e77abbee50ede555b13bd9ff1053b1b173d0dae2dea8cb9c1d8022046092650885225677e7855d4c414cf99480cdf0673e46e54cf72cf12c86a765e:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
     epss-score: 0.10637
-    epss-percentile: 0.95802
+    epss-percentile: 0.95818
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502206582a61d7b37a474cfab1dda83586ac8f89093ab22038c9e3ff4dc1bc4dce93f022100d1a7a7b3b2df338b969e96f6dca2e89fdf8713b5b0ac4976a2b090963fff44c6:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204ccb7738f7dff6398a474f17fa65dc8f82f4597c0740468cbfd1ed3116184c0402203a88fe3403f6344c59be1de6cdaffe45a0bc99be42e4076577b237f88036a693:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6172.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6172
     cwe-id: CWE-22
     epss-score: 0.12284
-    epss-percentile: 0.96192
+    epss-percentile: 0.96205
     cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b65bd4e2c136b852b87594c781d9f4cb48bfbddc40bad2e504651b2b887cf44602204f383a3d1aef2c54cc4970e94c70251d61ace3b492951f694db9a4a2ecf2128b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d4af2fa464fd5984514c6a16aa76d1d4eb818e59049af9ee8a70ae005ed5982e02201fdca34c20e5b8566809518cdb7a04b6b1f41082824faf8cceda8a9d1acac7ee:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6222
     cwe-id: CWE-22
     epss-score: 0.11497
-    epss-percentile: 0.96025
+    epss-percentile: 0.96039
     cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ac885bfcfce98640a1ff0633fde4f1f75e1c67bc6332f200dd6ec70b679e93be02201489af320993f5060781fc0991baac1b2bc4a8f2c1e24aee9e260163f094e75e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210081bb79318ffd418448c6ef7dfa1ea03b6b05c5d8cc30d7f66865517915657edb022100b166f91f0f19b82d8b874e325d59fcbd455b99ce89ee1fe4c7a3f9c12decd6d4:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
     epss-score: 0.05114
-    epss-percentile: 0.92391
+    epss-percentile: 0.92417
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c74602733db8e2054a8515367360ab5c1919c72972f3c5e0b278369dc774d97d02207295b69087258649fe06b82e5ba9b4832673c16414abc9011521c71b89943397:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205facee04daa063b397ed7e191a80f2ed5825dfffd429978531c5fc1494cb5f760220693c3bc6f2d6050d9dcab493222c9a1bf5f73d4bec73a2d2c9186c5e89de7350:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-6668
     cwe-id: CWE-22
     epss-score: 0.14041
-    epss-percentile: 0.96564
+    epss-percentile: 0.96576
     cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -45,4 +45,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100a5b6d779376b6c563c62cd074f8650415ea9472473bf7bbb06b2218a53872a18022072b9672a8361ba6abf1a4af3d2c8f668fbffc6de351e59ea0d8f041307f0c762:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009c4870af417123b46bd47a63c7ac6b6307149aa9052f828c38ad7117cd351fbd02203666ef2158c756422b780341e096d203e639ea4234cf7f0d3d063885ac76e726:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6982.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6982
     cwe-id: CWE-79
     epss-score: 0.05782
-    epss-percentile: 0.93108
+    epss-percentile: 0.93133
     cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 490a0046304402205666e9377078439943b15992b596b056047f050c8c74434585403000fae412790220335ad8927bae6b903df36c1ed28fb4eacca839d854f4d60d05df818abf59aaa7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100911bc9c5c644f719b4b25737c3ddb8d4f5dc696af429a0f5e762f70f6ceca7e002207a7afbafedd8340fb3d2876c776320f823e6b9d8d500e14bb202cca37ae82b0f:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-7269.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-7269
     cwe-id: CWE-20
     epss-score: 0.08234
-    epss-percentile: 0.94901
+    epss-percentile: 0.94918
     cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
   metadata:
     verified: "true"
@@ -43,4 +43,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402201964131d49384f602cb49c8b9f72eaef369569dc2097cda4ef2d2e684614fa1c0220252f046a19614b5156543fcc8de3617b094baa0cf75e1b5878ae30d2d2c5ad4c:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022068b901c6573428da5655e6bae3f70d8918822586726810c4f564dfbf9a9d844c02202daa55c1fb0ab466868675da3096c04f4da8c4b6bd7fba031925c68ed42b087c:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
     epss-score: 0.10932
-    epss-percentile: 0.95889
+    epss-percentile: 0.95904
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502203f28e5f415f31d3ff33706264021e94e7b9484fafe97cf6fec0329118b2475a1022100ccd57d433497e30452fcfa7029f9fc623cc43fc266d34bcc7eaa25f27de46f85:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022061f292c062e781304ef760fc57c0ef455b862bb14f95c7a86f868c981d7be6cd02200eaaa9544793959be5164370e932b12cbcfe9aaacc4ba5164a6b449961132302:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0545.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-0545
     cwe-id: CWE-20
     epss-score: 0.90386
-    epss-percentile: 0.99799
+    epss-percentile: 0.99801
     cpe: cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
         part: body
         regex:
           - "root:.*:0:0:"
-# digest: 490a0046304402206f0f35e6747ace58e999dbc870dacd559d5905011d0524fc4f76e1ab054951e40220646661c6f37955d48b38f9deae5941c18ca97892f2ce79dece5e5df72217783a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203a70628d57b4cf2ac05811ecca20ef5c7d280c35c2bfa08e3e0f913f23c277240221008c11651d57fa4b316a50b2f79b4fe172bbfa019a940170c286445f793dc06e23:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-0932
     cwe-id: CWE-22
     epss-score: 0.47871
-    epss-percentile: 0.98855
+    epss-percentile: 0.98859
     cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221009e67d3fcc052cc289806f5a8a16b1e89abd460ff3cfdc6abed66da24fe55dc21022100bd8dc603bb36818e6d8d49f3a87221641907b9b2ed31318b9c8a33dac34261ef:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220527078db505a747d8c7b42eecaef08c55abc90df780f493d61705068e32724f0022100f2ed9f8e88b4c6c7d27e91d9beb3a193e0f076291857e46a40a3d3478d49cc0b:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1496.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-1496
     cwe-id: CWE-22
     epss-score: 0.07183
-    epss-percentile: 0.94309
+    epss-percentile: 0.94327
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220682b1229282d848100ca2b4272835b8e7429737c524a6009b4095e79a9effc6b0220076e65e413e98ec93375370dc341539c6286a3ce6dcb45a5806ed1f95453f487:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210091b2889019102b3f0bda069b5ecea0ab96ebb403f1f959a587e7849752ccc67b02205f8ff3542aba05ff2e888d599acaebc404444c4967716719d44bd250a4cf9853:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1558.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1558
     cwe-id: CWE-22
     epss-score: 0.29821
-    epss-percentile: 0.98203
+    epss-percentile: 0.9821
     cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100dbc9354a6824352dcb612864d539198cfe9bae3ac1528267ff9f2e6a272457ba02204b1a7d57e4bef75a0ea7b78f5e1de849dc7fcaed2558f0e7655a37e559d0f6e8:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205bb49930aea026f80abca2926e7bf54b2a29ef7ea1a067c2ddee6a91a0efe85f02203c6436caa5c275d22b3a4740c38e3c37b03dfed241fcd8c15905161c25aab542:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
     epss-score: 0.16083
-    epss-percentile: 0.96926
+    epss-percentile: 0.96936
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -65,4 +65,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402202b30cd4a65bc451c08ee2bcf40851889f02c4c843dcf202365c5a69295183fb702204ec03c3822014a5ebff612f00d87609a689445b466defd98dff306e4a7bd0e27:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205508a33bdb4237eccace4758da75d4e898669579104b95388091f7dcf74d2449022016ac1e1f86978d7b7488c9a217f3489a600ee3d2d51fd47aef37c815992dfe09:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2015.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-2015
     cwe-id: CWE-22
     epss-score: 0.06507
-    epss-percentile: 0.93784
+    epss-percentile: 0.93804
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ad2c5809fd2de9911a8fad3bfba89c82d9e6b2084417a535348739bc75f762d5022013c2f76b053927b362a57b99d8b82029f3fadc2d36f483690e97bfee722b34f8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210088e9c1ece495c359c29431b407d645143a6a228ede598a61cd0cb00d9efbe609022100d1b00075975d24139b6dc60b66fd9e43e62f530b906eb567a6db3d904f26e291:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2100.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2009-2100
     cwe-id: CWE-22
     epss-score: 0.08229
-    epss-percentile: 0.94898
+    epss-percentile: 0.94916
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502201cecd189a95e32005d89a94def71ae86cf2b6ed50dbcfbce70fc0836617d8ec9022100c72e2d8f29aec25bafe8ec9c01fd7fcc2d9288557ad8f9c16ce1bb7e141a7ebc:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100aa5c25b6f8f28bc56fe08b6c0a91f363ecfee4b70804a60f55fb514bf820adb702207cc7b2f925e64f7f5e2f1104f127c6183c834ad2c8f5a4e2601ffda879a843a9:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3053.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-3053
     cwe-id: CWE-22
     epss-score: 0.05925
-    epss-percentile: 0.93261
+    epss-percentile: 0.93285
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e7af069ec3b2d8bbd587532c65deb2fd384399a9e343d68e54ec7941bfd690de02201d17f7f33e383e71c206d0d64e1d80fc5e3c92fb3f7b6e83bd673983653c594d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022010949f4678abc3253e311d056655decb6dbce0779fac406232f630331ac4047e02203d53ebf35041d016eb001d31fe4d4bc60757f77697ad4f972e2df4511999fe03:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3318.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-3318
     cwe-id: CWE-22
     epss-score: 0.06455
-    epss-percentile: 0.93744
+    epss-percentile: 0.93765
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100e8ea582855a5a4daaa4a74079e33048f7029cccd22a1fc3e1c8229cfe9e2f8b5022100bf44bdef045ead5c0c8a61d3e533633970290f10b50993e9534ee6c2a493d95d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a99100ff2f98a3fc407d20eb11946c90acf1198f8649f3ac8774ac06983b077f022100a0557abecd0e8fe2de64bfa9704b6ad043a0f904788868a219c04d90ace49a62:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4202.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4202
     cwe-id: CWE-22
     epss-score: 0.08109
-    epss-percentile: 0.94835
+    epss-percentile: 0.94851
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022057738d00f3a9feee9be5d2f40dbafb4a4f1c062536d8a13cb801c7410b44da5002205c022449871d395efd6b2f5595eb5ae4e1a6d5c236be27cc630725fe8b49a6d3:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022030fda47ffe3fa1e46a25ef785fadc1cc4599a5f60e98fbb40c88132ff0ee65de02203d3d055d0483a670fccfe3969298561f1e2ce8c392155177a09fd3561ba888b0:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4223.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4223
     cwe-id: CWE-94
     epss-score: 0.54584
-    epss-percentile: 0.99019
+    epss-percentile: 0.99023
     cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d512b7303fe060f277a0567bb3237a48c3d594c3c00f9db143cf99b0d66e66f3022020f678601d1e7ce2d7c794de8736be89142f62972a15478d574fb348d4b0563a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f2a09fcdc9978e6400da9de7fa7171b3f94d10b548ae3e5914f74846020e18d202203538d70bd6622a24b60c696a50fd59e7a6b4a80e16f2a402e852ae32c2bb220a:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4679.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4679
     cwe-id: CWE-22
     epss-score: 0.07866
-    epss-percentile: 0.94705
+    epss-percentile: 0.94723
     cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022067d5ad6f93275c6b3a37435764d63cfa5d3c2b8aa89e72bd08517d7eefdd888402204a7d68a99f218112e7077b7c1dd37dbf0f60551efa3f7108dae52cf4c02b266d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d5959c253ad6f51dbdf38114ec990f6f94f490c8dbc5b57f1c4a13ca994063cb02204bd1041dd97f0cc23b8996bda00b4716cc8d72137de40c8d92a8c33d4c1e5130:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5020.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2009-5020
     cwe-id: CWE-20
     epss-score: 0.03488
-    epss-percentile: 0.89151
+    epss-percentile: 0.89191
     cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -39,4 +39,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4a0a00473045022100ed1b617ee05ddeb4de18ffb13edb7de944d84a2c39f2c5c6dfa3d60be8a70e1b022014837468f9e2e7ed052e754c1836dbb4976d61026a236a2676f7d3ac89b3798d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022040e53ebf7ca46748d91246df82fcf29dc0d93ebb441d33b5e517e5790148f325022059d4c60e4b6161266495b001f064b8941e57b41b89b0a0b5ad85e5a1614b4fd6:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5114.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-5114
     cwe-id: CWE-22
     epss-score: 0.11707
-    epss-percentile: 0.96073
+    epss-percentile: 0.96086
     cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210099f076042ca08b7d2f5665ec09bf2d58427c797d4192ea5723e569659bbc79420221009d26529c2b7f18df0b4b713fc8dc40c9e486e76acd3e7cd33dbcd1854980f631:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008b941b08e3272321a9f1d519ec8ead51f2dac27abb02cc460b6a958903b65135022100f8f13efe6b36dc171b1ecb0da4ff9001eb010e1f8664cc483544364a09ffd938:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0157.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2010-0157
     cwe-id: CWE-22
     epss-score: 0.12969
-    epss-percentile: 0.96329
+    epss-percentile: 0.96343
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502204de15c192404d682b7ada5dfcd43e41b47302a159c88cefe4687abaeff56e588022100f3a1b6e0d1619af3f5717f9f3eefafbae7ec106d694eb4988db15004673535fb:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100edd759ee10fbf9764fe514a7924b545286e933dbcc9c7058697d40b29e7d5319022100ea3efe6a9ad2caee52f33aa9cbf8f562bf0b4562ff70af1d1c2d5e3e2ea741f1:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0219.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2010-0219
     cwe-id: CWE-255
     epss-score: 0.90851
-    epss-percentile: 0.99806
+    epss-percentile: 0.99807
     cpe: cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -64,4 +64,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022018b0ef7579ca266d9c6da2ee5ee0a0a6c18f3d0072d99cfe577fafb69892b5ad022028fa616737247a309b6f0de883fed30e95b1437ec3ab08854cc0e187f2d9a564:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f85bf99255959fb6073a5e91bffe44cd99bda036660d2b1337263776d385076802202b53f49e6adc8efd376e3e14f5ca2a8f97de8b0a3a0fad19320cd6574c8cd7d2:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0467.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0467
     cwe-id: CWE-22
     epss-score: 0.43296
-    epss-percentile: 0.9873
+    epss-percentile: 0.98732
     cpe: cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b5c0b9810fc59282a8edffbe31ce042800624feb8f240dc72eb038728c691c7f022031119f825eaa9fbedfca8576ff0e564d01a580f9bd8376ecc7552abef1221284:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206b180e4e4879a3d94b68e2f680253fdb4db874e341f5f37f3cd3cc37f6be836b022100876962d8e1564aa75ebbb5abacd1ec92eebc9bccc8ff0e3c01c23b485b8273df:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0696.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0696
     cwe-id: CWE-22
     epss-score: 0.28222
-    epss-percentile: 0.98117
+    epss-percentile: 0.98124
     cpe: cpe:2.3:a:joomlaworks:jw_allvideos:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402202d3d1260c66f6e1d04f9e9d0874d6ea910341dfd4e70c856c5ad740890208e2e02204561a9ba3ed910329cc5ed34895a059845d17d0f9f6893293ec7d4c251515176:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f81024dd9f9c2a566d5de7536ba28253edeb7cbee4d3896b43ffb3868c9ff72b022100f3aec271af02a90990518794769ee5afcd22f56f4e03b194a52e36c3b480156d:922c64590222798bb761d5b6d8e72950