Update metadata and improve template quality

Create CVE-2023-6266.yaml
chore: update EPSS scores 🤖
2026-11-07 08:36:19 -10:00 · 2025-11-30 10:51:35 +00:00 · 2025-11-30 12:06:49 +05:30 · 2025-11-30 02:38:00 +00:00 · 2025-11-29 18:27:40 +04:00 · 2025-11-29 18:25:50 +04:00
2635 changed files with 15333 additions and 14703 deletions
@@ -14,11 +14,11 @@ Nuclei Templates
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">Documentation</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">Documentation</a> •
  <a href="#-contributions">Contributions</a> •
  <a href="#-discussion">Discussion</a> •
  <a href="#-community">Community</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Join Discord</a>
 </p>

@@ -20,11 +20,11 @@ Nuclei 模板
 </p>

 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">文档</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">文档</a> •
  <a href="#-贡献">贡献</a> •
  <a href="#-交流">交流</a> •
  <a href="#-社区">社区</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">加入Discord</a>
 </p>

@@ -11,11 +11,11 @@ Nuclei テンプレート
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">ドキュメント</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">ドキュメント</a> •
  <a href="#-contributions">貢献</a> •
  <a href="#-discussion">ディスカッション</a> •
  <a href="#-community">コミュニティ</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Discordに参加</a>
 </p>

@@ -14,11 +14,11 @@ Nuclei 템플릿
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">가이드 문서</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">가이드 문서</a> •
  <a href="#-contributions">기여</a> •
  <a href="#-discussion">논의</a> •
  <a href="#-community">커뮤니티</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">디스코드</a>
 </p>

@@ -1,52 +0,0 @@
-dast/vulnerabilities/xss/csp-bypass/jquery-cdn-csp-bypass.yaml
-file/malware/shai-hulud-supply-chain.yaml
-headless/cves/2025/CVE-2025-7901.yaml
-http/cves/2017/CVE-2017-14725.yaml
-http/cves/2017/CVE-2017-17092.yaml
-http/cves/2017/CVE-2017-5983.yaml
-http/cves/2018/CVE-2018-13317.yaml
-http/cves/2019/CVE-2019-19822.yaml
-http/cves/2019/CVE-2019-19823.yaml
-http/cves/2019/CVE-2019-19825.yaml
-http/cves/2021/CVE-2021-34427.yaml
-http/cves/2022/CVE-2022-29081.yaml
-http/cves/2023/CVE-2021-4449.yaml
-http/cves/2024/CVE-2024-20404.yaml
-http/cves/2024/CVE-2024-53995.yaml
-http/cves/2025/CVE-2025-11700.yaml
-http/cves/2025/CVE-2025-11833.yaml
-http/cves/2025/CVE-2025-12055.yaml
-http/cves/2025/CVE-2025-27915.yaml
-http/cves/2025/CVE-2025-49706.yaml
-http/cves/2025/CVE-2025-55523.yaml
-http/cves/2025/CVE-2025-61757.yaml
-http/cves/2025/CVE-2025-64525.yaml
-http/cves/2025/CVE-2025-64764.yaml
-http/cves/2025/CVE-2025-9316.yaml
-http/default-logins/traggo-default-login.yaml
-http/default-logins/vtigercrm-default-login.yaml
-http/exposures/files/vtigercrm-data-exposed.yaml
-http/miscellaneous/crypto-address-detect.yaml
-http/misconfiguration/aem/aem-anonymous-write.yaml
-http/misconfiguration/microsoft/sharepoint-layouts-disclosure.yaml
-http/misconfiguration/microsoft/sharepoint-masterpage-disclosure.yaml
-http/misconfiguration/microsoft/sharepoint-site-metadata-disclosure.yaml
-http/misconfiguration/microsoft/sharepoint-sitepages-disclosure.yaml
-http/misconfiguration/nginx/nginx-status-403-bypass.yaml
-http/misconfiguration/unauth-akhq-dashboard.yaml
-http/misconfiguration/unauth-hawkeye-dashboard.yaml
-http/misconfiguration/unauth-kafka-config-editor.yaml
-http/technologies/agent-zero-detect.yaml
-http/technologies/cisco-finesse-detect.yaml
-http/technologies/microsoft/sharepoint-web-services-discovery.yaml
-http/technologies/nostromo-detect.yaml
-http/technologies/odoo-detect.yaml
-http/technologies/traggo-server-detect.yaml
-http/technologies/vtigercrm-detect.yaml
-http/technologies/winstone-detect.yaml
-http/vulnerabilities/wordpress/wp-security-hidden-login-exposure.yaml
-http/vulnerabilities/wordpress/wp-twenty-theme-fpd.yaml
-http/vulnerabilities/wordpress/wp-twentysixteen-fpd.yaml
-http/vulnerabilities/wordpress/wp-twentytwenty-fpd.yaml
-http/vulnerabilities/wp-functions-php-disclosure.yaml
-http/vulnerabilities/yonyou/yonyou-u9-patchfile-upload.yaml
@@ -36,4 +36,5 @@ files:
  - javascript/enumeration/redis/redis-require-auth.yaml
  - dast/vulnerabilities/sqli/time-based-sqli.yaml
  - javascript/enumeration/minecraft-enum.yaml
-  - javascript/enumeration/minecraft-enum.yaml
+  - http/miscellaneous/crypto-address-detect.yaml
+  - http/vulnerabilities/wp-functions-php-disclosure.yaml
@@ -22,7 +22,7 @@

 ### Additional References:

- [Nuclei Template Creation Guideline](https://nuclei.projectdiscovery.io/templating-guide/)
+- [Nuclei Template Creation Guideline](https://docs.projectdiscovery.io/templates/introduction)
 - [Nuclei Template Matcher Guideline](https://github.com/projectdiscovery/nuclei-templates/wiki/Unique-Template-Matchers)
 - [Nuclei Template Contribution Guideline](https://github.com/projectdiscovery/nuclei-templates/blob/master/CONTRIBUTING.md)
 - [PD-Community Discord server](https://discord.gg/projectdiscovery)
@@ -14,11 +14,11 @@ Nuclei Templates
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">Documentation</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">Documentation</a> •
  <a href="#-contributions">Contributions</a> •
  <a href="#-discussion">Discussion</a> •
  <a href="#-community">Community</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Join Discord</a>
 </p>

@@ -20,11 +20,11 @@ Nuclei 模板
 </p>

 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">文档</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">文档</a> •
  <a href="#-贡献">贡献</a> •
  <a href="#-交流">交流</a> •
  <a href="#-社区">社区</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">加入Discord</a>
 </p>

@@ -11,11 +11,11 @@ Nuclei テンプレート
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">ドキュメント</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">ドキュメント</a> •
  <a href="#-contributions">貢献</a> •
  <a href="#-discussion">ディスカッション</a> •
  <a href="#-community">コミュニティ</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Discordに参加</a>
 </p>

@@ -14,11 +14,11 @@ Nuclei 템플릿
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">가이드 문서</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">가이드 문서</a> •
  <a href="#-contributions">기여</a> •
  <a href="#-discussion">논의</a> •
  <a href="#-community">커뮤니티</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">디스코드</a>
 </p>

@@ -1 +1 @@
-{"tags":[{"name":"vuln","count":6468},{"name":"cve","count":3587},{"name":"discovery","count":3265},{"name":"vkev","count":1394},{"name":"panel","count":1365},{"name":"xss","count":1269},{"name":"wordpress","count":1261},{"name":"exposure","count":1141},{"name":"wp-plugin","count":1103},{"name":"osint","count":848},{"name":"rce","count":834},{"name":"tech","count":821},{"name":"lfi","count":796},{"name":"misconfig","count":784},{"name":"devops","count":742},{"name":"cloud","count":698},{"name":"wp","count":647},{"name":"detect","count":604},{"name":"edb","count":598},{"name":"wpscan","count":570},{"name":"cve2021","count":552},{"name":"packetstorm","count":551},{"name":"cve2022","count":540},{"name":"cve2023","count":516},{"name":"sqli","count":509},{"name":"cve2024","count":501},{"name":"login","count":475},{"name":"unauth","count":469},{"name":"intrusive","count":462},{"name":"authenticated","count":443},{"name":"kev","count":433},{"name":"file","count":379},{"name":"network","count":350},{"name":"cve2020","count":307},{"name":"oast","count":300},{"name":"default-login","count":288},{"name":"config","count":259},{"name":"tcp","count":255},{"name":"apache","count":252},{"name":"token-spray","count":247},{"name":"microsoft","count":244},{"name":"top-200","count":235},{"name":"osint-social","count":232},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"cve2025","count":218},{"name":"auth-bypass","count":213},{"name":"token","count":213},{"name":"malware","count":213},{"name":"azure","count":210},{"name":"","count":206},{"name":"cve2019","count":204},{"name":"cve2018","count":195},{"name":"iot","count":195},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"csp-bypass","count":189},{"name":"code","count":182},{"name":"amazon","count":174},{"name":"install","count":169},{"name":"redirect","count":162},{"name":"ssrf","count":158},{"name":"keys","count":157},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"security","count":141},{"name":"linux","count":137},{"name":"local","count":134},{"name":"router","count":133},{"name":"ftp","count":133},{"name":"cms","count":127},{"name":"files","count":126},{"name":"cve2017","count":123},{"name":"phishing","count":119},{"name":"cve2010","count":115},{"name":"kubernetes","count":113},{"name":"disclosure","count":106},{"name":"audit","count":102},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"js","count":96},{"name":"windows-audit","count":90},{"name":"oss","count":87},{"name":"seclists","count":86},{"name":"oracle","count":85},{"name":"privesc","count":85},{"name":"file-upload","count":84},{"name":"takeover","count":82},{"name":"passive","count":79},{"name":"cisco","count":78},{"name":"enum","count":77},{"name":"windows","count":77},{"name":"fileupload","count":76},{"name":"k8s","count":73},{"name":"adobe","count":69},{"name":"cve2015","count":65},{"name":"detection","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"vmware","count":63},{"name":"cve2016","count":62},{"name":"deserialization","count":62},{"name":"alibaba","count":61},{"name":"c2","count":61},{"name":"google","count":59},{"name":"atlassian","count":59},{"name":"cve2014","count":55},{"name":"php","count":53},{"name":"dast","count":51},{"name":"traversal","count":51},{"name":"misc","count":51},{"name":"logs","count":50},{"name":"ssti","count":49},{"name":"ssh","count":49},{"name":"osint-gaming","count":49},{"name":"tenable","count":48},{"name":"aem","count":48},{"name":"api","count":48},{"name":"plugin","count":48},{"name":"log4j","count":48},{"name":"debug","count":48},{"name":"hackerone","count":48},{"name":"generic","count":47},{"name":"cnvd","count":47},{"name":"vulhub","count":46},{"name":"injection","count":46},{"name":"ibm","count":46},{"name":"aliyun","count":45},{"name":"fortinet","count":45},{"name":"jndi","count":44},{"name":"kisa","count":44},{"name":"info-leak","count":43},{"name":"springboot","count":43},{"name":"miscellaneous","count":43},{"name":"oa","count":43},{"name":"firewall","count":43},{"name":"ssl","count":43},{"name":"osint-porn","count":42},{"name":"osint-hobby","count":42},{"name":"listing","count":41},{"name":"tls","count":41},{"name":"wp-theme","count":41},{"name":"sap","count":40},{"name":"postgresql","count":40},{"name":"k8s-cluster-security","count":39},{"name":"dlink","count":39},{"name":"cti","count":38},{"name":"xxe","count":37},{"name":"jira","count":37},{"name":"devsecops","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-coding","count":36},{"name":"graphql","count":35},{"name":"osint-misc","count":35},{"name":"dns","count":34},{"name":"fuzz","count":34},{"name":"networking","count":34},{"name":"oob","count":34},{"name":"gitlab","count":34},{"name":"printer","count":34},{"name":"yonyou","count":33},{"name":"lfr","count":33},{"name":"vpc","count":31},{"name":"presLine truncated
+{"tags":[{"name":"vuln","count":6497},{"name":"cve","count":3669},{"name":"discovery","count":3263},{"name":"vkev","count":1456},{"name":"panel","count":1370},{"name":"xss","count":1285},{"name":"wordpress","count":1279},{"name":"exposure","count":1162},{"name":"wp-plugin","count":1115},{"name":"rce","count":849},{"name":"osint","count":847},{"name":"tech","count":840},{"name":"misconfig","count":806},{"name":"lfi","count":803},{"name":"devops","count":744},{"name":"cloud","count":700},{"name":"wp","count":657},{"name":"detect","count":619},{"name":"edb","count":598},{"name":"wpscan","count":578},{"name":"cve2021","count":558},{"name":"packetstorm","count":551},{"name":"cve2022","count":542},{"name":"cve2023","count":519},{"name":"cve2024","count":516},{"name":"sqli","count":514},{"name":"unauth","count":495},{"name":"login","count":478},{"name":"intrusive","count":475},{"name":"kev","count":453},{"name":"authenticated","count":452},{"name":"file","count":388},{"name":"network","count":355},{"name":"cve2020","count":308},{"name":"oast","count":308},{"name":"default-login","count":294},{"name":"cve2025","count":264},{"name":"config","count":261},{"name":"tcp","count":259},{"name":"apache","count":253},{"name":"microsoft","count":251},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"auth-bypass","count":223},{"name":"malware","count":214},{"name":"token","count":214},{"name":"azure","count":210},{"name":"cve2019","count":209},{"name":"","count":206},{"name":"cve2018","count":197},{"name":"iot","count":195},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"csp-bypass","count":190},{"name":"code","count":184},{"name":"amazon","count":174},{"name":"install","count":169},{"name":"redirect","count":166},{"name":"ssrf","count":163},{"name":"security","count":161},{"name":"keys","count":157},{"name":"local","count":154},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"linux","count":137},{"name":"router","count":134},{"name":"ftp","count":134},{"name":"cms","count":127},{"name":"files","count":126},{"name":"cve2017","count":125},{"name":"audit","count":122},{"name":"phishing","count":119},{"name":"kubernetes","count":116},{"name":"cve2010","count":115},{"name":"disclosure","count":110},{"name":"tokens","count":102},{"name":"js","count":101},{"name":"top-100","count":100},{"name":"file-upload","count":90},{"name":"windows-audit","count":90},{"name":"oss","count":89},{"name":"oracle","count":88},{"name":"seclists","count":86},{"name":"privesc","count":86},{"name":"takeover","count":83},{"name":"passive","count":83},{"name":"cisco","count":80},{"name":"enum","count":79},{"name":"windows","count":78},{"name":"fileupload","count":77},{"name":"k8s","count":75},{"name":"adobe","count":73},{"name":"cve2015","count":65},{"name":"detection","count":65},{"name":"huntr","count":64},{"name":"deserialization","count":64},{"name":"vmware","count":64},{"name":"ir","count":63},{"name":"cve2016","count":62},{"name":"alibaba","count":61},{"name":"c2","count":61},{"name":"google","count":59},{"name":"atlassian","count":59},{"name":"cve2014","count":55},{"name":"traversal","count":53},{"name":"ssh","count":53},{"name":"aem","count":52},{"name":"php","count":52},{"name":"debug","count":51},{"name":"dast","count":51},{"name":"misc","count":51},{"name":"ssti","count":50},{"name":"logs","count":50},{"name":"osint-gaming","count":49},{"name":"log4j","count":48},{"name":"plugin","count":48},{"name":"tenable","count":48},{"name":"api","count":48},{"name":"injection","count":48},{"name":"hackerone","count":48},{"name":"ibm","count":47},{"name":"fortinet","count":47},{"name":"generic","count":47},{"name":"cnvd","count":46},{"name":"vulhub","count":46},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"kisa","count":44},{"name":"info-leak","count":43},{"name":"springboot","count":43},{"name":"oa","count":43},{"name":"miscellaneous","count":43},{"name":"firewall","count":43},{"name":"ssl","count":43},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"postgresql","count":41},{"name":"wp-theme","count":41},{"name":"k8s-cluster-security","count":41},{"name":"listing","count":41},{"name":"tls","count":41},{"name":"sap","count":40},{"name":"xxe","count":40},{"name":"dlink","count":39},{"name":"oob","count":39},{"name":"cti","count":38},{"name":"jira","count":38},{"name":"dns","count":38},{"name":"devsecops","count":38},{"name":"osint-coding","count":36},{"name":"graphql","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"dashboard","count":35},{"name":"fuzz","count":35},{"name":"yonyou","count":34},{"name":"networking","count":34},{"name":"printer","count":34},{"name":"gitlab","count":34},{"name":"xwiki","count":34},{"naLine truncated
@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| vuln      |  6468 | dhiyaneshdk   |  1894 | http       |  9281 | info     |  4353 | file |   436 |
-| cve       |  3587 | daffainfo     |   905 | cloud      |   659 | high     |  2552 | dns  |    26 |
-| discovery |  3265 | princechaddha |   854 | file       |   436 | medium   |  2457 |      |       |
-| vkev      |  1394 | dwisiswant0   |   805 | network    |   259 | critical |  1555 |      |       |
-| panel     |  1365 | ritikchaddha  |   678 | code       |   251 | low      |   330 |      |       |
-| xss       |  1269 | pussycat0x    |   675 | dast       |   240 | unknown  |    54 |      |       |
-| wordpress |  1261 | pikpikcu      |   353 | workflows  |   205 |          |       |      |       |
-| exposure  |  1141 | pdteam        |   314 | javascript |    92 |          |       |      |       |
-| wp-plugin |  1103 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
-| osint     |   848 | iamnoooob     |   263 | dns        |    23 |          |       |      |       |
+| vuln      |  6497 | dhiyaneshdk   |  1923 | http       |  9423 | info     |  4395 | file |   445 |
+| cve       |  3669 | daffainfo     |   908 | cloud      |   661 | high     |  2602 | dns  |    27 |
+| discovery |  3263 | princechaddha |   857 | file       |   445 | medium   |  2501 |      |       |
+| vkev      |  1456 | dwisiswant0   |   805 | code       |   275 | critical |  1597 |      |       |
+| panel     |  1370 | ritikchaddha  |   691 | network    |   264 | low      |   342 |      |       |
+| xss       |  1285 | pussycat0x    |   688 | dast       |   241 | unknown  |    54 |      |       |
+| wordpress |  1279 | pikpikcu      |   352 | workflows  |   205 |          |       |      |       |
+| exposure  |  1162 | pdteam        |   316 | javascript |    97 |          |       |      |       |
+| wp-plugin |  1115 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| rce       |   849 | iamnoooob     |   263 | dns        |    24 |          |       |      |       |
@@ -15,8 +15,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2017-1000353
    cwe-id: CWE-502
-    epss-score: 0.94475
-    epss-percentile: 0.99998
+    epss-score: 0.94508
+    epss-percentile: 1
    cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
  metadata:
    vendor: jenkins
@@ -104,4 +104,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4a0a00473045022100e1496aea12dd7d8360ca428f1b5f8aaac521642504593625cfdd6fdd50554b6302200cc16c1df502a88f9ce58860fc3a8b491e6c9a4ff33b180a61d215280b97e9b9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220013b6879d7764487c8b88f29158a874858c91a913af2263e70b20f6120607c7e022100907a0683448cf78b2c40b409b2ea20a8f53080bc0433c209b1f27d4f11e042ab:922c64590222798bb761d5b6d8e72950
@@ -55,4 +55,4 @@ code:
          - '!contains(code_1_response, "(root)")'
          - 'contains(code_2_response, "(root)")'
        condition: and
-# digest: 4a0a0047304502205661bfabdeec84cdb0d8cd85f400fdde90013e98f28947af2016ba03a7e95e270221008b847b21e9f65244e274e61e784ce5be03d3c313f744589eca2d93de00634b6b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e3e54ab5bfb2f60d03b6a237019b84cfecb2eace4381bb1b959ae0764f1dce8202203f1220006e8e5d19d69b6e74c701295f2d06c2649a269ee45f38e578750b64f9:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2023-49105
    cwe-id: CWE-287
    epss-score: 0.86244
-    epss-percentile: 0.99356
+    epss-percentile: 0.99358
    cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "139"     # Segmentation Fault Exit Code
-# digest: 490a004630440220155082bb6a73ee722b38f8b1f4ac2aaeda267a117bfb52938ee665784a056c1502203d4e1504fa39a81de29581207a6bb7106978be9db76534a48024d146a3bfcffe:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210088de18f60ccbfb17a2d25e4bae39d32bb2d4dc5b2bdf5e5282427943e933ca400221009937c76fda32aa99520007e948e8e7c1f58a95828d58dcfbf252e068a511b519:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2023-6246
    cwe-id: CWE-787,CWE-122
    epss-score: 0.31786
-    epss-percentile: 0.96608
+    epss-percentile: 0.96611
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "127"     # Segmentation Fault Exit Code
-# digest: 4a0a00473045022100bbfa15e8bdc2aa5d8a417f4883e5780d372254d1125a52d1ab0a1ce0e5c8c0aa022031ec4301016dbe92d6cead98440bd7d15786aa40f1005a386e0f4337fcd3f8a4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a831a78eed0a5135ad8c5cbde8a4d335acc624a56494bcfe0f228edfb75546e9022077e10905de69a2e5fb978187e1035ee975e8ad1395543a16d1b35a831d54efe5:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cve-id: CVE-2024-10443
    cwe-id: CWE-77
    epss-score: 0.67268
-    epss-percentile: 0.98481
+    epss-percentile: 0.98482
    cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
  metadata:
    verified: true
@@ -37,4 +37,4 @@ code:
        words:
          - "0 success"
          - "1 try again later"
-# digest: 490a0046304402203d3277e020269d68bc7d538db1582bcc38a518efac4aa57697c30a93f828480502201fbb50e3cd29574a62e3d81ce632e07c322ee30feaa1a14eda3a4ec028a4cf53:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022044b3b01083ee26fd4013799925fc4b832efbc6109f7afb5f3236d98c0203b2290221008eeccd0a8f6a91a3549be4004db0eb45db41394ba3840e6312e9c54728ef81ec:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-3094
    cwe-id: CWE-506
    epss-score: 0.85778
-    epss-percentile: 0.99331
+    epss-percentile: 0.99333
    cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -10,8 +10,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    cvss-score: 7.5
    cve-id: CVE-2024-4340
-    epss-score: 0.16207
-    epss-percentile: 0.94547
+    epss-score: 0.15162
+    epss-percentile: 0.94328
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
  tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -29,4 +29,4 @@ code:
        part: stderr
        words:
          - "RecursionError: maximum recursion depth exceeded"
-# digest: 4b0a00483046022100c7f17dda36dcd616b5419e65c76face4811aeaabe0f0c266184084bf4f740213022100c459e7c71c25eaa6857cdb4049688a744fb1bea9c6a1ce5d606876a43856b116:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c4901d7cffb025864722c0ebb1836da18c540df805f350b363c7d098ace5ce150220074efd03642822ab6121b1c028806d3ab90e59802c8ad61a5002253c26001d7a:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2024-45409
    cwe-id: CWE-347
    epss-score: 0.39163
-    epss-percentile: 0.97104
+    epss-percentile: 0.97105
  metadata:
    verified: true
    shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 490a0046304402206573dca524aa5cb319dd62380214248d589aa9ea1c2d02f5083ca86e42f3c1160220179f3510f9283e936ad657ac7fe721c1529a1ccf0837bcaca791b576ba073a05:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022050d3597a46db26baf1399bfebea1bccc212318e39c2da4dad3b72cb7978fb29a022001cfd6dfb7fe87712ee6eb058f3d18c1f996be490431e25202e25031669c0c7c:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-55556
    cwe-id: CWE-502
-    epss-score: 0.85568
-    epss-percentile: 0.99322
+    epss-score: 0.8111
+    epss-percentile: 0.99106
  metadata:
    verified: true
    max-request: 2
@@ -193,4 +193,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a00473045022100b6fcc8dbe04df0c042479292d3bdbb04fa90fbd39956165c29588bfdf9f5fbfe0220042629ab78737bbceb9076d29e82159d1a14929893815826330324270a98465b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202c698cf765d4a181bbe9ad719f715db924dfe58f7f90d2bc3aeb42cc300f842f022100994fcf3e4898d95172f1378082c38c856532814691cd3acc23074203c7a5866a:922c64590222798bb761d5b6d8e72950
@@ -10,8 +10,8 @@ info:
    - https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass
    - https://github.com/advisories/GHSA-g83h-4727-5rpv
  classification:
-    epss-score: 0.53044
-    epss-percentile: 0.97826
+    epss-score: 0.57271
+    epss-percentile: 0.98025
  metadata:
    verified: true
    shodan-query: title:"GitHub Enterprise"
@@ -188,4 +188,4 @@ http:
      - type: kval
        kval:
          - user_session
-# digest: 4a0a00473045022100aa88f44216574d162c09bcff77b81c0b203d0041324899f1c8d066c81032e45d0220049e79aa14c431d3b4afe4ebcf56cd327f3949c8183bb31b921f0ce9a4026b30:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ba22773e4e63c40ff9649c9e18646112dab86ad03887a0dc2177ed3e83eeaabb022100f359ffd2de41134ba37a2a18f3b0f4ecbb5a79ff7dfb259f13a74d0c1066d120:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    - https://towerofhanoi.it/writeups/cve-2025-1550/
  classification:
    epss-score: 0.04785
-    epss-percentile: 0.88996
+    epss-percentile: 0.89058
  metadata:
    max-request: 1
  tags: cve,cve2025,code,keras,rce,ml
@@ -77,4 +77,4 @@ code:
        part: response
        regex:
          - "root:.*:0:0:"
-# digest: 490a0046304402202702fa4fb794de06a6a7fb798def00e5e59d05c49c4465820eb9696ce1d7035d022055d99fa4c72b348988ffa7363abadee5549d20fb36240cf9b6ac322211652178:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206e9f88fa35e1efe0dfbc77021347d1416c8ba34d87b6fe132de6da3d2029fb4f022038ce20d668ec47e686855a23065d676529df72108390bb46791ac0c0b3213ca8:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 9.0
    cve-id: CVE-2025-22457
    cwe-id: CWE-121,CWE-787
-    epss-score: 0.76863
-    epss-percentile: 0.98895
+    epss-score: 0.73531
+    epss-percentile: 0.98743
    cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
  metadata:
    vendor: ivanti
@@ -128,4 +128,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 490a0046304402202c5cae79496de4e30915b77c571fa5839b41e803432ca3890748d12311562a0a02206abec4b11a87a39174bfe2672f6fce818e87cc0ef263513d55dee76ebb646a60:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ec9c867b3ff7b861066adcced1fe7de0d1f5ff812ccf5603681b68bebf830884022100b484462113de4ed76f3b3aa286afcefc14b4792924f39c31ef340333b1cc7dd6:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2025-25291
    cwe-id: CWE-347
    epss-score: 0.17247
-    epss-percentile: 0.9476
+    epss-percentile: 0.94765
  metadata:
    verified: true
    vendor: gitlab
@@ -78,4 +78,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 4a0a00473045022100d02dbf992fe6c05fc7cf15e6f638957a05b46bdc14421e9a73a277315636e46202206cf9c278e3e4483d0380149c1cd27f04c6fe03d2766f96a6472b7bc2a5a6525f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100adb57051ff1daa01738c529688fc1f8286ecddb12ff7750b55f4dee5345377a8022100a67ac9d936e4c7a807ce5ced0673a1ae7c54dca17aa2a240e916d19b21b5f907:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2025-32433
    cwe-id: CWE-306
    epss-score: 0.41165
-    epss-percentile: 0.97228
+    epss-percentile: 0.97227
  metadata:
    verified: true
    max-request: 1
@@ -172,4 +172,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4b0a0048304602210089db0a1b82c25420d5775a0b8983ab84d65a12197d4a55d699699e6a05981174022100e479f8d8134ea9933fa0d0e6d4da76bd50b2063e65dc7000b468b988e841e42a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dd8ddeab01e47c07e10352b4027a648f5c363824133547baeb077682ea87e231022062f13a6c9decbe45656d320be77c84bd9612eef84e1b1b4cecfe8e279dfe9d24:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-54309
    epss-score: 0.49642
-    epss-percentile: 0.97665
+    epss-percentile: 0.97664
    cwe-id: CWE-287,CWE-362
    cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*
  metadata:
@@ -200,4 +200,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4a0a0047304502206f8a0decbbd1459c672aa1bb7894d90045fc531da688cee0129b76714fcb72fa022100e3ef9478a6a4129252b8d7232284f9982ea667e6a19e4752529259b47bd482f5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008a8dd55bf66f637ca027a8855f2f5818b2b61941d47c02cc4a0de9e64a3217b6022041cd67ffdfe401811fd58f5f98edfb5986e0cda3f5c9a3868e1fb3d62aad110e:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
    - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
  classification:
-    epss-score: 0.23131
-    epss-percentile: 0.95705
+    epss-score: 0.17485
+    epss-percentile: 0.9481
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
      - type: dsl  # type of the extractor
        dsl:
          - '"Reset URL: " + code_response'
-# digest: 4b0a00483046022100c6bece7478ac45f88871c6cd3f14651af44d06e06535d8508463675cc7866b31022100b19320a88d18c8d48a7ba4b3a4cc01b24c7dda839140e4c790864b4ca94f0a0e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100812b35c7792d91de6d806c9de888d86356456ed934b6cf023de300abf3db9147022100bb8929166261f9a620a6585ecc98393446ab3cbd7223736942a966a56976a932:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2025-9242
    cwe-id: CWE-787,CWE-362
    epss-score: 0.7437
-    epss-percentile: 0.98776
+    epss-percentile: 0.98777
    cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -552,4 +552,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 490a0046304402200b20b5e843543b5c93b206a8371f1e4ba414338ffba73b9802ce6f607c792a1c022011bdd0baafcaafea5825557eb2878d8301fd5618033a17af7f28316310629452:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c233c6c94743a7d3b12ad897deafc5b3d6b991238260e216746f4b85a8f3757802210094bfa8e92a0793f96f7816e8c93847bebb126dc3a846724a931af80b109f6f2d:922c64590222798bb761d5b6d8e72950
@@ -1679,6 +1679,7 @@
 {"ID":"CVE-2021-44515","Info":{"Name":"Zoho ManageEngine Desktop Central - Remote Code Execution","Severity":"critical","Description":"Zoho ManageEngine Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-44515.yaml"}
 {"ID":"CVE-2021-44528","Info":{"Name":"Open Redirect in Host Authorization Middleware","Severity":"medium","Description":"Specially crafted \"X-Forwarded-Host\" headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-44528.yaml"}
 {"ID":"CVE-2021-44529","Info":{"Name":"Ivanti EPM Cloud Services Appliance Code Injection","Severity":"critical","Description":"Ivanti EPM Cloud Services Appliance (CSA) before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-44529.yaml"}
+{"ID":"CVE-2021-4462","Info":{"Name":"Employee Records System 1.0 - Unauthenticated File Upload RCE","Severity":"critical","Description":"Employee Records System version 1.0 contains an unrestricted file upload vulnerability in uploadID.php that allows remote unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-4462.yaml"}
 {"ID":"CVE-2021-44848","Info":{"Name":"Thinfinity VirtualUI User Enumeration","Severity":"medium","Description":"Thinfinity VirtualUI (before v3.0), /changePassword returns different responses for requests depending on whether the username exists. It may enumerate OS users (Administrator, Guest, etc.)","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2021/CVE-2021-44848.yaml"}
 {"ID":"CVE-2021-44910","Info":{"Name":"SpringBlade - Information Leakage","Severity":"high","Description":"SpringBlade is a comprehensive project upgraded and optimized from a commercial-grade project, featuring both a SpringCloud distributed microservice architecture and a SpringBoot monolithic microservice architecture. The SpringBlade framework has a default SIGN_KEY, which can be exploited by attackers to obtain sensitive information such as user account password logs.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2021/CVE-2021-44910.yaml"}
 {"ID":"CVE-2021-45027","Info":{"Name":"Oliver 5 Library Server \u003c8.00.008.053 - Local File Inclusion","Severity":"high","Description":"Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-45027.yaml"}
@@ -3254,6 +3255,7 @@
 {"ID":"CVE-2025-0674","Info":{"Name":"Elber ESE DVB-S/S2 - Authentication Bypass","Severity":"critical","Description":"Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-0674.yaml"}
 {"ID":"CVE-2025-0868","Info":{"Name":"DocsGPT - Unauthenticated Remote Code Execution","Severity":"critical","Description":"A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.This issue affects DocsGPT- from 0.8.1 through 0.12.0.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-0868.yaml"}
 {"ID":"CVE-2025-10035","Info":{"Name":"GoAnywhere - Authentication Bypass","Severity":"critical","Description":"Fortra GoAnywhere MFT contains an insecure deserialization vulnerability in the License Servlet caused by deserializing attacker-controlled objects with a valid forged license response signature, letting attackers perform command injection, exploit requires valid forged license signature.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-10035.yaml"}
+{"ID":"CVE-2025-10204","Info":{"Name":"AC Smart II - Authentication Bypass","Severity":"high","Description":"AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-10204.yaml"}
 {"ID":"CVE-2025-1023","Info":{"Name":"ChurchCRM - SQL Injection","Severity":"critical","Description":"A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1023.yaml"}
 {"ID":"CVE-2025-1025","Info":{"Name":"Cockpit \u003c 2.4.1 - Arbitrary File Upload","Severity":"high","Description":"Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extensions to bypass the upload filter.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1025.yaml"}
 {"ID":"CVE-2025-1035","Info":{"Name":"KLog Server - Path Traversal","Severity":"medium","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls.This issue affects KLog Server: before 3.1.1.\n","Classification":{"CVSSScore":"5.7"}},"file_path":"http/cves/2025/CVE-2025-1035.yaml"}
@@ -3268,6 +3270,7 @@
 {"ID":"CVE-2025-12480","Info":{"Name":"Triofox - Improper Access Control","Severity":"critical","Description":"The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely access, view, and potentially interact with the database management interface, risking data disclosure or system compromise.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-12480.yaml"}
 {"ID":"CVE-2025-1302","Info":{"Name":"JSONPath Plus \u003c 10.3.0 - Remote Code Execution","Severity":"critical","Description":"Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for [CVE-2024-21534]\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1302.yaml"}
 {"ID":"CVE-2025-1323","Info":{"Name":"WP-Recall – Plugin \u003c= 16.26.10 - Unauthenticated SQL Injection","Severity":"high","Description":"The WP-Recall – Registration, Profile, Commerce \u0026 More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1323.yaml"}
+{"ID":"CVE-2025-13315","Info":{"Name":"Twonky Server 8.5.2 on Linux and Windows - Log File Exposure","Severity":"critical","Description":"Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-13315.yaml"}
 {"ID":"CVE-2025-1562","Info":{"Name":"Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control","Severity":"critical","Description":"The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1562.yaml"}
 {"ID":"CVE-2025-1595","Info":{"Name":"EasyCVR \u003c=2.1.2 - Information Disclosure","Severity":"medium","Description":"A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1595.yaml"}
 {"ID":"CVE-2025-1661","Info":{"Name":"HUSKY – Products Filter Professional for WooCommerce \u003c= 1.3.6.5 - Unauthenticated Local File Inclusion","Severity":"critical","Description":"The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1661.yaml"}
@@ -3460,6 +3463,7 @@
 {"ID":"CVE-2025-57819","Info":{"Name":"FreePBX - Remote Code Execution","Severity":"critical","Description":"FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-57819.yaml"}
 {"ID":"CVE-2025-57822","Info":{"Name":"Next.js Middleware - Server-Side Request Forgery","Severity":"medium","Description":"In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next(), an attacker could exploit this behavior to perform Server-Side Request Forgery (SSRF) attacks.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-57822.yaml"}
 {"ID":"CVE-2025-58179","Info":{"Name":"Astro Cloudflare Adapter - Server Side Request Forgery","Severity":"high","Description":"Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2025/CVE-2025-58179.yaml"}
+{"ID":"CVE-2025-58360","Info":{"Name":"GeoServer - XML External Entity Injection","Severity":"high","Description":"GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity (XXE) injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-58360.yaml"}
 {"ID":"CVE-2025-58434","Info":{"Name":"Flowise \u003c= 3.0.5 - Account Takeover","Severity":"critical","Description":"Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-58434.yaml"}
 {"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c= 1.5.10.1673 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
 {"ID":"CVE-2025-58751","Info":{"Name":"Vite Dev Server - Path Traversal","Severity":"low","Description":"Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-58751.yaml"}
@@ -1 +1 @@
-a8f8707a5ba704eb87ed0af91bf14b37
+586c34d78b5069508832e896c7ef31aa
@@ -18,8 +18,8 @@ info:
    cvss-score: 7.3
    cve-id: CVE-2024-2961
    cwe-id: CWE-787
-    epss-score: 0.92923
-    epss-percentile: 0.9976
+    epss-score: 0.92795
+    epss-percentile: 0.9975
  tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln

 flow: http(1) && http(2)
@@ -44,8 +44,8 @@ http:
      - type: regex
        regex:
          # MySQL
-          - "SQL syntax.*?MySQL"
-          - "Warning.*?\\Wmysqli?_"
+          - "SQL syntax.{0,500}?MySQL"
+          - "Warning.{0,500}?\\Wmysqli?_"
          - "MySQLSyntaxErrorException"
          - "valid MySQL result"
          - "check the manual that (corresponds to|fits) your MySQL server version"
@@ -65,8 +65,8 @@ http:
          - "is not supported by MemSQL"
          - "unsupported nested scalar subselect"
          # PostgreSQL
-          - "PostgreSQL.*?ERROR"
-          - "Warning.*?\\Wpg_"
+          - "PostgreSQL.{0,500}?ERROR"
+          - "Warning.{0,500}?\\Wpg_"
          - "valid PostgreSQL result"
          - "Npgsql\\."
          - "PG::SyntaxError:"
@@ -78,13 +78,13 @@ http:
          - "Pdo[./_\\\\]Pgsql"
          - "PSQLException"
          # Microsoft SQL Server
-          - "Driver.*? SQL[\\-\\_\\ ]*Server"
-          - "OLE DB.*? SQL Server"
+          - "Driver.{0,500}? SQL[\\-\\_\\ ]*Server"
+          - "OLE DB.{0,500}? SQL Server"
          - "\\bSQL Server[^&lt;&quot;]+Driver"
-          - "Warning.*?\\W(mssql|sqlsrv)_"
+          - "Warning.{0,500}?\\W(mssql|sqlsrv)_"
          - "\\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"
          - "System\\.Data\\.SqlClient\\.SqlException\\.(SqlException|SqlConnection\\.OnError)"
-          - "(?s)Exception.*?\\bRoadhouse\\.Cms\\."
+          - "(?s)Exception.{0,500}?\\bRoadhouse\\.Cms\\."
          - "Microsoft SQL Native Client error '[0-9a-fA-F]{8}"
          - "\\[SQL Server\\]"
          - "ODBC SQL Server Driver"
@@ -106,8 +106,8 @@ http:
          # Oracle
          - "\\bORA-\\d{5}"
          - "Oracle error"
-          - "Oracle.*?Driver"
-          - "Warning.*?\\W(oci|ora)_"
+          - "Oracle.{0,500}?Driver"
+          - "Warning.{0,500}?\\W(oci|ora)_"
          - "quoted string not properly terminated"
          - "SQL command not properly ended"
          - "macromedia\\.jdbc\\.oracle"
@@ -116,7 +116,7 @@ http:
          - "Pdo[./_\\\\](Oracle|OCI)"
          - "OracleException"
          # IBM DB2
-          - "CLI Driver.*?DB2"
+          - "CLI Driver.{0,500}?DB2"
          - "DB2 SQL error"
          - "\\bdb2_\\w+\\("
          - "SQLCODE[=:\\d, -]+SQLSTATE"
@@ -126,8 +126,8 @@ http:
          - "DB2Exception"
          - "ibm_db_dbi\\.ProgrammingError"
          # Informix
-          - "Warning.*?\\Wifx_"
-          - "Exception.*?Informix"
+          - "Warning.{0,500}?\\Wifx_"
+          - "Exception.{0,500}?Informix"
          - "Informix ODBC Driver"
          - "ODBC Informix driver"
          - "com\\.informix\\.jdbc"
@@ -136,14 +136,14 @@ http:
          - "IfxException"
          # Firebird
          - "Dynamic SQL Error"
-          - "Warning.*?\\Wibase_"
+          - "Warning.{0,500}?\\Wibase_"
          - "org\\.firebirdsql\\.jdbc"
          - "Pdo[./_\\\\]Firebird"
          # SQLite
          - "SQLite/JDBCDriver"
          - "SQLite\\.Exception"
          - "(Microsoft|System)\\.Data\\.SQLite\\.SQLiteException"
-          - "Warning.*?\\W(sqlite_|SQLite3::)"
+          - "Warning.{0,500}?\\W(sqlite_|SQLite3::)"
          - "SQLITE_ERROR"
          - "SQLite error \\d+:"
          - "sqlite3.OperationalError:"
@@ -152,23 +152,23 @@ http:
          - "Pdo[./_\\\\]Sqlite"
          - "SQLiteException"
          # SAP MaxDB
-          - "SQL error.*?POS([0-9]+)"
-          - "Warning.*?\\Wmaxdb_"
+          - "SQL error.{0,500}?POS([0-9]+)"
+          - "Warning.{0,500}?\\Wmaxdb_"
          - "DriverSapDB"
-          - "-3014.*?Invalid end of SQL statement"
+          - "-3014.{0,500}?Invalid end of SQL statement"
          - "com\\.sap\\.dbtech\\.jdbc"
-          - "\\[-3008\\].*?: Invalid keyword or missing delimiter"
+          - "\\[-3008\\].{0,500}?: Invalid keyword or missing delimiter"
          # Sybase
-          - "Warning.*?\\Wsybase_"
+          - "Warning.{0,500}?\\Wsybase_"
          - "Sybase message"
-          - "Sybase.*?Server message"
+          - "Sybase.{0,500}?Server message"
          - "SybSQLException"
          - "Sybase\\.Data\\.AseClient"
          - "com\\.sybase\\.jdbc"
          # Ingres
-          - "Warning.*?\\Wingres_"
+          - "Warning.{0,500}?\\Wingres_"
          - "Ingres SQLSTATE"
-          - "Ingres\\W.*?Driver"
+          - "Ingres\\W.{0,500}?Driver"
          - "com\\.ingres\\.gcf\\.jdbc"
          # FrontBase
          - "Exception (condition )?\\d+\\. Transaction rollback"
@@ -177,7 +177,7 @@ http:
          - "(Semantic|Syntax) error [1-4]\\d{2}\\."
          # HSQLDB
          - "Unexpected end of command in statement \\["
-          - "Unexpected token.*?in statement \\["
+          - "Unexpected token.{0,500}?in statement \\["
          - "org\\.hsqldb\\.jdbc"
          # H2
          - "org\\.h2\\.jdbc"
@@ -230,8 +230,8 @@ http:
      - type: regex
        name: mysql
        regex:
-          - "SQL syntax.*?MySQL"
-          - "Warning.*?\\Wmysqli?_"
+          - "SQL syntax.{0,500}?MySQL"
+          - "Warning.{0,500}?\\Wmysqli?_"
          - "MySQLSyntaxErrorException"
          - "valid MySQL result"
          - "check the manual that (corresponds to|fits) your MySQL server version"
@@ -263,8 +263,8 @@ http:
      - type: regex
        name: postgresql
        regex:
-          - "PostgreSQL.*?ERROR"
-          - "Warning.*?\\Wpg_"
+          - "PostgreSQL.{0,500}?ERROR"
+          - "Warning.{0,500}?\\Wpg_"
          - "valid PostgreSQL result"
          - "Npgsql\\."
          - "PG::SyntaxError:"
@@ -279,13 +279,13 @@ http:
      - type: regex
        name: microsoftsqlserver
        regex:
-          - "Driver.*? SQL[\\-\\_\\ ]*Server"
-          - "OLE DB.*? SQL Server"
+          - "Driver.{0,500}? SQL[\\-\\_\\ ]*Server"
+          - "OLE DB.{0,500}? SQL Server"
          - "\\bSQL Server[^&lt;&quot;]+Driver"
-          - "Warning.*?\\W(mssql|sqlsrv)_"
+          - "Warning.{0,500}?\\W(mssql|sqlsrv)_"
          - "\\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"
          - "System\\.Data\\.SqlClient\\.SqlException\\.(SqlException|SqlConnection\\.OnError)"
-          - "(?s)Exception.*?\\bRoadhouse\\.Cms\\."
+          - "(?s)Exception.{0,500}?\\bRoadhouse\\.Cms\\."
          - "Microsoft SQL Native Client error '[0-9a-fA-F]{8}"
          - "\\[SQL Server\\]"
          - "ODBC SQL Server Driver"
@@ -313,8 +313,8 @@ http:
        regex:
          - "\\bORA-\\d{5}"
          - "Oracle error"
-          - "Oracle.*?Driver"
-          - "Warning.*?\\W(oci|ora)_"
+          - "Oracle.{0,500}?Driver"
+          - "Warning.{0,500}?\\W(oci|ora)_"
          - "quoted string not properly terminated"
          - "SQL command not properly ended"
          - "macromedia\\.jdbc\\.oracle"
@@ -326,7 +326,7 @@ http:
      - type: regex
        name: ibmdb2
        regex:
-          - "CLI Driver.*?DB2"
+          - "CLI Driver.{0,500}?DB2"
          - "DB2 SQL error"
          - "\\bdb2_\\w+\\("
          - "SQLCODE[=:\\d, -]+SQLSTATE"
@@ -339,8 +339,8 @@ http:
      - type: regex
        name: informix
        regex:
-          - "Warning.*?\\Wifx_"
-          - "Exception.*?Informix"
+          - "Warning.{0,500}?\\Wifx_"
+          - "Exception.{0,500}?Informix"
          - "Informix ODBC Driver"
          - "ODBC Informix driver"
          - "com\\.informix\\.jdbc"
@@ -352,7 +352,7 @@ http:
        name: firebird
        regex:
          - "Dynamic SQL Error"
-          - "Warning.*?\\Wibase_"
+          - "Warning.{0,500}?\\Wibase_"
          - "org\\.firebirdsql\\.jdbc"
          - "Pdo[./_\\\\]Firebird"

@@ -362,7 +362,7 @@ http:
          - "SQLite/JDBCDriver"
          - "SQLite\\.Exception"
          - "(Microsoft|System)\\.Data\\.SQLite\\.SQLiteException"
-          - "Warning.*?\\W(sqlite_|SQLite3::)"
+          - "Warning.{0,500}?\\W(sqlite_|SQLite3::)"
          - "SQLITE_ERROR"
          - "SQLite error \\d+:"
          - "sqlite3.OperationalError:"
@@ -374,19 +374,19 @@ http:
      - type: regex
        name: sapmaxdb
        regex:
-          - "SQL error.*?POS([0-9]+)"
-          - "Warning.*?\\Wmaxdb_"
+          - "SQL error.{0,500}?POS([0-9]+)"
+          - "Warning.{0,500}?\\Wmaxdb_"
          - "DriverSapDB"
-          - "-3014.*?Invalid end of SQL statement"
+          - "-3014.{0,500}?Invalid end of SQL statement"
          - "com\\.sap\\.dbtech\\.jdbc"
-          - "\\[-3008\\].*?: Invalid keyword or missing delimiter"
+          - "\\[-3008\\].{0,500}?: Invalid keyword or missing delimiter"

      - type: regex
        name: sybase
        regex:
-          - "Warning.*?\\Wsybase_"
+          - "Warning.{0,500}?\\Wsybase_"
          - "Sybase message"
-          - "Sybase.*?Server message"
+          - "Sybase.{0,500}?Server message"
          - "SybSQLException"
          - "Sybase\\.Data\\.AseClient"
          - "com\\.sybase\\.jdbc"
@@ -394,9 +394,9 @@ http:
      - type: regex
        name: ingres
        regex:
-          - "Warning.*?\\Wingres_"
+          - "Warning.{0,500}?\\Wingres_"
          - "Ingres SQLSTATE"
-          - "Ingres\\W.*?Driver"
+          - "Ingres\\W.{0,500}?Driver"
          - "com\\.ingres\\.gcf\\.jdbc"

      - type: regex
@@ -411,7 +411,7 @@ http:
        name: hsqldb
        regex:
          - "Unexpected end of command in statement \\["
-          - "Unexpected token.*?in statement \\["
+          - "Unexpected token.{0,500}?in statement \\["
          - "org\\.hsqldb\\.jdbc"

      - type: regex
@@ -494,4 +494,4 @@ http:
          - "SQ200: No table "
          - "Virtuoso S0002 Error"
          - "\\[(Virtuoso Driver|Virtuoso iODBC Driver)\\]\\[Virtuoso Server\\]"
-# digest: 4b0a00483046022100fc7880d1ba52b68e380ae499d88bfb728689d1f8cf19a0b3614da15cff736951022100b90853b96511c04b6ca8fd4ebeaa539b9a100804e46acb3f5beb203f2ff7e575:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b3102693f70190b12ccb6f15140a61b65dd91c218b1e3ea99ea59e75ad8f03170220211591503e0603405ab968f481fb3f615c7c3deb8f5849ac281640b5011fcb30:922c64590222798bb761d5b6d8e72950
@@ -22,4 +22,4 @@ file:
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
-# digest: 4a0a00473045022100ff04773837067383500f868d5157269c2caf0352a5e98bedf7e0f9db7777e3ae0220429aa87554f392ca8e57f3439df71bfe602ceb5de02eb1ddae9c737d140cbfb2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100de58c54ce8c6f5700c5ead0e1603478a9f36bfac9df080e0295d2b7506758d57022100da154a869059fd9d5dc541be9259deed9492691f62586f7b8e4ceb9e873f068a:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ file:
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
-# digest: 4b0a00483046022100a08677731c06b5e9565c309b8b60df000c38800abad647220d7def34f61e6690022100f839dfbffa9b0c297b4bca43fefdc09a8c2a80fffd1ec936ba20b99dfb531a33:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207e199cde6ace693b2f43539c2e252718232d3c8059092d3901e52f779053c48b022100e7cb1502fec95eb82e88e2a87460e65db1ad4bff70184e19164b83da50f27c6a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2018-25031
    cwe-id: CWE-20
    epss-score: 0.81926
-    epss-percentile: 0.99152
+    epss-percentile: 0.99153
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -54,4 +54,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a00473045022022a57d7477272f68e9cad11e228f2a6d288e7d908585d2bd85d8d0d1529587d8022100ec7054fc59ba0a78cf90d79644e12939e34556c20b90544b428f86b1df47eca6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c58a2db5549b42e824f47f6fd010205d520bca965d7a51d61885cc1ab366a550022100db7f453b735cd3ff2911a39652d1d34e88d1375aaea41875cf19e85abd105db6:922c64590222798bb761d5b6d8e72950
@@ -52,4 +52,4 @@ headless:
        words:
          - "elementor"
        case-insensitive: true
-# digest: 4a0a0047304502201904d130bbb1704cfcf458d96c6a9112a4dc3abf1c28e7174d45071b7251c0a7022100c9d288afc522a30d898fae9e1d9e63f20414e89e6a21bb0e338cb5037591e79f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c8674b11802b1ae7904ea489b210bf456f2bff59c0ab8edc8aa7b7343c9c023f022077b203c5b2b587d3c862e3a1170cdf9cd8a26ab49123d1bd6021d81ccdd6703c:922c64590222798bb761d5b6d8e72950
@@ -14,8 +14,8 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-29882
    cwe-id: CWE-79
-    epss-score: 0.03413
-    epss-percentile: 0.86951
+    epss-score: 0.02542
+    epss-percentile: 0.84972
  metadata:
    verified: true
    max-request: 1
@@ -46,4 +46,4 @@ headless:
          - "ConnectSRS</a>"
        condition: or
        case-insensitive: true
-# digest: 4b0a00483046022100f0ba0b9e4d341022a8a20383260c7cbdf454afc728ab843c304d92cf1eb8bf4802210083d7cddcfaff30b8b5e708171f1e1bff900d0bd997d56a2597ad67845328db12:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220073c85396fe93e046eb762b09bf6d0b916b1ce9c7a79e644434d9cbb9e4c633c02203d62e7a42b3d466e5736567f6f06d3b514fd55e8b770f9f47df2f77cf3aea721:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-38526
    epss-score: 0.82064
-    epss-percentile: 0.99159
+    epss-percentile: 0.9916
  tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
  - steps:
@@ -60,4 +60,4 @@ headless:
          - "union.macoms.la"
          - "newcrbpc.com"
        part: urls
-# digest: 4a0a00473045022100bf526411eb2ed63b0ee0e8edb373d3929b735c8c7d7ca6f46b84d1981e78e6b2022034381b6f4144eb2611aa00e964d60d9762c0f65c1c6ba20472c4e465898d0ebe:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203c7db50c71ce0bebfd969223f1334215867ed9d82b28e7c3bbe2bd3653ee9f95022052a1c2ed23d0e26b3ffd2d2ed3aef8491be0af8f6525b6e05216c4751d6c8d83:922c64590222798bb761d5b6d8e72950
@@ -12,7 +12,7 @@ info:
    - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
  classification:
    epss-score: 0.03281
-    epss-percentile: 0.86694
+    epss-percentile: 0.86755
  metadata:
    verified: true
    max-request: 1
@@ -42,4 +42,4 @@ headless:
        words:
          - "{{random_int}}"
        case-insensitive: true
-# digest: 490a004630440220192f5825043f682402fddb3fa5f1563cc25be22d92e61af31e9e7faa742ea8550220489cd46e33d480cf5c127ae75034c411f1982da3eac5b4a716beb8d9febdcfa4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220337222e3b2bd6d7c8f662ee5c18e8367ce8cf0a4bb2ab6f702df7a117f0002010221008da3ee67fa6dfda05b757839957744f3ac6804379dfd46365cf46b92cfc4791f:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2025-25062
    cwe-id: CWE-79
    epss-score: 0.34064
-    epss-percentile: 0.96787
+    epss-percentile: 0.96788
    cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
  metadata:
    max-request: 7
@@ -186,4 +186,4 @@ headless:
        dsl:
          - reflected_text_xss_type
          - reflected_text_xss_message
-# digest: 490a0046304402201a50308fdfe283666031e32a399c2dc0b75543904c9eb4b6b2f96a054c05ec0602200ae4426ed4ebfac2aea5dcee0f2c0a718feae3a8c6b1970f80d21953d410e2ab:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022036e69341a5a2857bb9ec40715721a572962940ab9fa85b847f11dbafd09c17d40220022945479f3119bf2eb06f4024679f9c18072069ffb10b59a55896c04c660db6:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cve-id: CVE-2025-8191
    cwe-id: CWE-79
    epss-score: 0.01236
-    epss-percentile: 0.78605
+    epss-percentile: 0.7861
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -65,4 +65,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4b0a00483046022100a72a51f95669d2d3d9bbf9049f8a7b16de946e8db37707c62c59e9dfa8bfa22b022100f5d2abb657c63d1434b85f9acdad8c21855471d2944a6785ca99c639281fb81a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a56b4c33bf952dbfd4a267bf8bf5bb2d6c37993c090f72a9dd28332f2264be93022100be592d73391be3c499aacdd6c0046ba1ddd8b2e05efbd8a1b499d359101d1f6b:922c64590222798bb761d5b6d8e72950
@@ -69,4 +69,4 @@ Help us improve the credential stuffing templates by contributing new templates,

 Fix issues, add new templates, and update existing ones by submitting a pull request. Always adhere to the best practices for YAML syntax and ensure that your template is tested before submitting.

-Please refer to the template documentation to learn more about writing and submitting new templates to this repository: https://nuclei.projectdiscovery.io/templating-guide/
+Please refer to the template documentation to learn more about writing and submitting new templates to this repository: https://docs.projectdiscovery.io/templates/introduction
@@ -16,7 +16,7 @@ info:
    cvss-score: 5.3
    cve-id: CVE-2000-0114
    epss-score: 0.05458
-    epss-percentile: 0.89763
+    epss-percentile: 0.89819
    cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -59,4 +59,4 @@ http:
        group: 1
        regex:
          - 'version:([0-9.]+)'
-# digest: 4b0a00483046022100f22c77a68f70bef8ea54e891cccac67ec3b836cd88a188f06a7ef0913090c6a1022100b10462741abdb4ffaf924586a4a8df69c1a04f3d9facc96796a7d2375139582e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207e9fce2938f57554caecb55ef56590fe1ea41c406c309a9f8798f54f7aa48b3d02210089d46550452976b6c92cefbcb46c8cbb96b639a79e73f302e101aa3df0f2221d:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N
    cvss-score: 6.4
    cve-id: CVE-2000-0760
-    epss-score: 0.33581
-    epss-percentile: 0.96746
+    epss-score: 0.33099
+    epss-percentile: 0.96708
    cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100ee147459e569e7326a90299a5191f522252c657a3a1a8c1cc9ec2d5e2005958102206e62605d31c1449561c7e8da5234913a4177e8840cba078ea40c9083c12736e8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a6bc32abf13503861c291509627f46f6dfb21ed3037d995806e64a4dab6d94970221008a156d7b89e61e2b6896b4d7e6b2bea41c44abb9848fac645e22fedce1ace055:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2002-1131
    cwe-id: CWE-80
    epss-score: 0.03877
-    epss-percentile: 0.87753
+    epss-percentile: 0.87816
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 5
@@ -60,4 +60,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201f949ea4bcd01aa8f0a31fe33bb8b9d71f9b18e87606b2f46979cc928e2f5fbe022100b0f080452994d6869f7a3c910450f2252374f9740975e784f6382e90587d2fd1:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022052df99c94ad6eba2feaf70d127bce09c66f98b1c40c2d9ea3439be25531ecf0d02200a2b5928665d77a5e5fbd3dd8b19ced9bd9f305530ed9999589c5847f30a8522:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2004-0519
    cwe-id: NVD-CWE-Other
    epss-score: 0.00124
-    epss-percentile: 0.32297
+    epss-percentile: 0.32274
    cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402202ecbc7256f11908e72c652ec1e3e7d6a68f03e0aa6348941e06ba56714858265022072a6fdb99da647b63d2f3d71b2886bb1db6ee65f33d0c382084898b02703ab0e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c1688b0613a16e56c152ce7caf2480402d3bb4734ec2ae0450de08fd5b74ce58022100f7bd0adde8891eef26abb7c210c22fc4c657abe47613293a3eb08d5aa2bb0c9d:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2004-1965
    cwe-id: NVD-CWE-Other
    epss-score: 0.00265
-    epss-percentile: 0.49765
+    epss-percentile: 0.49708
    cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a0047304502203fbdc8b9537943c34a13862071586343d3abd71a48713761c6d1c20054460dfb022100d2c7c6dc2db2bfb5ea131af1f196d8a5e9db2eb9c67f29cdd557b6caa5af13d0:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210088bee1aa0a5c56cd4d2d98ecbed7d122d457e0f4174e97c8654c49c4b177942b02210090000b94ebc5e49d81da1bec1ff952ade23205d9cda5ed757f1fb5f8e7c076be:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-2428
    cwe-id: CWE-200
    epss-score: 0.08605
-    epss-percentile: 0.92065
+    epss-percentile: 0.92077
    cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220022062fafffe1c0dae81442f53887bca863acf193fd8edc72d935dd05bd96fb0022100b67a5fd7d6ded66e7de588b29cda8d7cf8b629a9cb92c3f873287b57c1d28eab:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220107323d61ec3380262e562447ddb3676fa81ee90084275698a12e158600ee1f9022100db1924dcf5d0f38b66066ef4ac3b7f8fe003902998ed6b957e5ebb5c6bf22574:922c64590222798bb761d5b6d8e72950
@@ -13,7 +13,7 @@ info:
    cvss-score: 5.4
    cve-id: CVE-2005-3128
    epss-score: 0.01733
-    epss-percentile: 0.81879
+    epss-percentile: 0.81884
    cwe-id: CWE-80
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        words:
          - "text/html"
-# digest: 490a00463044022042e3bdd031eb59b17e521b46fdb83277eaeff9f7c2b05bea365263c2fe6d07f7022011a3ed8a153d381598d3353404f4e0380f007ced30a16b42737ed49b77eab24f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fb86585677d2a740090d0666599342450464b643570fa67af41b7950a46b525202200b735da384f664a2057a0f0057a63387c7c64f5d4d291286a2f05f38d5233ef1:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2005-3344
    cwe-id: NVD-CWE-Other
    epss-score: 0.1015
-    epss-percentile: 0.92816
+    epss-percentile: 0.92823
    cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220079a0eee39c82e1fc39a498a9cf1b7d876a0c19f5d8b7438b7e96022773e43080220601c2f800eb5c0072b4c8d7aa8b5ae63732d213f8da9e1a8cbe7c8e9c0118e4f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f01c4e1400522f3ad7148c4706b91aaeeba7456d83637cda8c35e0cf02bf63b302205997b0902c7a235bc6b3eb2a2eb94da7703128598800d9bfdc81c7f0540ef19e:922c64590222798bb761d5b6d8e72950
@@ -23,7 +23,7 @@ info:
    cve-id: CVE-2005-3634
    cwe-id: NVD-CWE-Other
    epss-score: 0.01653
-    epss-percentile: 0.81452
+    epss-percentile: 0.81457
    cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -45,4 +45,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a0047304502210093d32e1dd9de106a0df772255d6e80663e639d67f7f16ceddf0dd8bda32ca6b8022017e055d2c695a53257e7bfab6eebe5d0aa8a61da5653394052eca3f24c5b81a6:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220208068733c65b757804da1fc56eb066316ee6526ea2655f5a0896db08a89109b022048bae6bce1e3ff5df1acff54a197c0ea4a0e8852e0e61a1fbd1a7a21cc80f912:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-4385
    cwe-id: NVD-CWE-Other
    epss-score: 0.00373
-    epss-percentile: 0.58258
+    epss-percentile: 0.58223
    cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502204e71542f69d8e756162b715dec7f13867b621bc31eb11e144c41bbe592fcd227022100d1f947310f58875b09c6351cb456042a917f03341d58ede67a3b013f56c684f8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b2562a1cb5fd01dadd6f9defbdef695f100415e5cd175e9adc83c9c7c347376e022100fc6d3289044636054ce84dc273d413ef19d8953f7d93245aa2e14ab352a7016e:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2006-1681
    cwe-id: NVD-CWE-Other
    epss-score: 0.00299
-    epss-percentile: 0.5275
+    epss-percentile: 0.52708
    cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022000a1ad51521fc497890c4553e7e2908df5c98a5d2f7eb11171f56dc137277e8a022056cb1a77a7526f84bb56a1e86b3809131ed989a7428313826ac0d34113c20478:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022010d46f76a61ae0d2bdaa1ccf81d7d6742453f2cf08e6c4c1c89cffb590ec931d0220008832d06805bb573d4ee433a82e303558a30e4ef3fb89bcb2531b77d4c36d54:922c64590222798bb761d5b6d8e72950
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502210098efab8714fc275c410546d16ada96c15685a671595b8fbeb8a4acd85562b63802206097871749cfe368f4c713a49bc033b174829fbdb5b853d3be478e63c832780e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022076dd06f407486e3feaf6f1013b05d01587451d04d90bb7a3f3bc65b36ca2223c0221008e556fa489c2c69997f48830bee963750479e0d356b3f3718395e53991bae1d8:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2007-0885
    cwe-id: NVD-CWE-Other
    epss-score: 0.02133
-    epss-percentile: 0.83615
+    epss-percentile: 0.83625
    cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450221009ae4b05dfaf8ef0e137f5d31cbfd508cb147b4c918adff7beed0f8f44be7e82d02204d5596d447b62d56c598294b98f7f5a8b226e04a5b715367dfc39a7de94cc18f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202968a2cba48310a0bbab76b0de7a760405eb55c14e329c5c0592f04e7bb0a216022100b3658b78c4742829059e9d7f8dc4afe9ef7213be380450b1443e67e9eff7e056:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cvss-score: 7.2
    cwe-id: CWE-79
    epss-score: 0.82646
-    epss-percentile: 0.99185
+    epss-percentile: 0.99187
  metadata:
    max-request: 1
    verified: true
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022048c0995c6ea32b2b116f060a6a5b4a54e227c9b9146b8a81217d34f3b1ce6b40022100e3eb4262299a8aee6068b43cce8cc9750d97cd324927a7534e1a613fad911fba:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022013395ca8e005c3af19e52902290e4e3838c6e1c2d426c93123c23eb226bead7702201b33239a28438c31e358cc083b3ca08c97250f9d4ca91d3d86ecab1612bde94e:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2007-4504
    cwe-id: CWE-22
    epss-score: 0.00177
-    epss-percentile: 0.39576
+    epss-percentile: 0.39528
    cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220359e339a299e1466f1de478e54be6b7a8dafa0c16ead24e6bb69000dfbbcdede0220427bd2dc30b5817865da42d4de8646294abfe9db3c33d6ddd72e48aa5dd73cf1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f4e9fa927a8ab663963a1dc0eaf26e58d82ed3663b069e00ab501395d094810e022100d4fbf0e616d8bef71e1b1bcf74df47c0420004f1ed4dd785659154caeb10f52f:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-4556
    cwe-id: NVD-CWE-Other
    epss-score: 0.02359
-    epss-percentile: 0.84385
+    epss-percentile: 0.84402
    cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220416bc017754b296cd9236b2996fd9b6b9ddb09662d5746ccbf651cce98120f9c022014060ad34e89955f2c4cd645f12e5dfd36022c2eb7854874fe8fd300a77f9eec:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ed8010f0ca28735bbd10ea101b23b91d0ea5be53ff42e3abdd58c49d77b5d6be0221008e44848bc87980209e4de4599c5c10d0616f0af516e06d9dfbed3ea413d19f07:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2007-5728
    cwe-id: CWE-79
    epss-score: 0.00523
-    epss-percentile: 0.66057
+    epss-percentile: 0.66035
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -57,4 +57,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ec26c83f65a5de7cba1fda662e97c899bffd5bcca254bd27797836425526fa7a022100e482289dd78f282124a366e29a96513dfe8a441db5d0e130b744083a4d3c74d1:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200b42149f9587254062835ce8a6f168055828f1a8b8549a2cb884034e5eafa26a02203ecf62a28ef97b86f61fde212eb30717cb4c7446cd316c167664624457e5b5a6:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1059
    cwe-id: CWE-94
    epss-score: 0.00265
-    epss-percentile: 0.49787
+    epss-percentile: 0.4973
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022064799422910598421f9e507de9b03dff9dc2a88564b81371bb8edd70b8d9328602205857a577dd022a801520bb18db410d39b7e8c38fa57e9b8335cf3bff78503f34:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204299632f86bc604a51f3fcd4399e78a450f4f707623e4cbf969f39bf4dd4966502210090bd6d8975ffaa2e85f4db5856d6ad75cf3a3dde10003ab2c619c5d9e9d59a07:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2008-1061
    cwe-id: CWE-79
-    epss-score: 0.00155
-    epss-percentile: 0.36753
+    epss-score: 0.00158
+    epss-percentile: 0.37099
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100c754aea52cb4bacdcaab6819922c663a7c1741c1ee6ed74c918d428a74327d1b022100ab40e48ab367e474b97bc1b71d0aa6cb7bf8e5cd7592daa42a7410ba0979b724:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100888fe0985c1442f28daa00a44db4529d129f2ab34510390b47a0f6f2ba447842022100df5cc0e1d60e4fb2ddc72da12a449e10200ab2d63a43402220c2ffefc45acadf:922c64590222798bb761d5b6d8e72950
@@ -51,4 +51,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4b0a00483046022100a413f0cedbf963231ea0d73117fff517cd57e54303cd703ab01dfdc6d9fd7f31022100c0086853c3833512f8ff16f3f5bbd1ea4a5a7a18ae6cb8a1f290838367622b8f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202f3253eb3f2e0b32f36a6847731bd6812473d564f79c7b9131f3f61015551229022100866a3a86e7cc9666ff46b1030ff0f24898eb1ab175016f2317fe8d47a0c42e8e:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2008-2398
    cwe-id: CWE-79
    epss-score: 0.00437
-    epss-percentile: 0.62292
+    epss-percentile: 0.62257
    cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402204a6bffd7d5e1ddc0e4b4b1a669d4ab879335968443389b93ea8539ce95f2129d0220185bb2da9e87ab6f58954212a91289f50f7010a7f4db3d935a524c2bb7b6c2c3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220025235b752e05757f305ef1750a9594c1d657bc69956f21ea0af2031928217b40221009f6756767d3dc4eedb805d21b74bfe326d0525a8b632f183932bdb5c64a7d6af:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-2650
    cwe-id: CWE-22
    epss-score: 0.01643
-    epss-percentile: 0.81391
+    epss-percentile: 0.81395
    cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402201ad06c997be82763e75fdf225b18b063fad5f8a584ffd5ad9abc4052e0af36e9022001c8787354f7ddf33f4aa9a4904010fe2a75e1e8a2012cad6dc0f52d0cc0fd0e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022028f5819851354e516d03fe0b3e765ba36e0a1f7d2e8c6c5eaec98f0cab788521022100dbb8b55795f427be45bb2a07296f0974081e84659f72d89463e4e88926026e25:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-4668
    cwe-id: CWE-22
    epss-score: 0.00268
-    epss-percentile: 0.50048
+    epss-percentile: 0.4999
    cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022045299341b276f369afab958d4bb4446351965b6d12e05d51a2fcdb73734987b8022070be80ab407ad3caac02d63ae499ba7aa9b24eec9cb093966329a4793605a30c:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022012d4d7efbb3110058f30a60ba2054ca8d4e1c27fae54c4faf63c74a35949a509022055e811d3a3c0e2ad4495d5ace2560f15fa8a4202a02bf8914376c49493b9b1ba:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2008-4764
    cwe-id: CWE-22
-    epss-score: 0.01921
-    epss-percentile: 0.82795
+    epss-score: 0.01041
+    epss-percentile: 0.76781
    cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100f6797411b1276563f8a0b46b738440b4dfd5930ea42e16900138ec03f2ab9b1f022100fcc60c7b639bb48b7209b3131494beb799450f3e6a58e8e2620558cb0bb4e03c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fc07e3c7f2b9d5722804eacdcb3f7fd56ffe510dc9673320f3b48b253bf36bcd02200204497d3a39dd1bfd8be9d5a6492d815c17a162c8bce3a41c2642a3813b2206:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-5587
    cwe-id: CWE-22
    epss-score: 0.01986
-    epss-percentile: 0.83037
+    epss-percentile: 0.8304
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -49,4 +49,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100ec3ebe851f50cdb529ac949425288bffb761578294ff1c3213e3aab7d75c477802206d5362d2d31b71509bb57d76b89ef47c2e208d8255ae061299d9f8a1253d893c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210081779e5a2c40332a193818aab520ef5866cb8b85ce881b582ad7f5dafa683773022071da84584dec84ea2e171211ad1103aacaff386dd60ae29964faed3a62300700:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6080
    cwe-id: CWE-22
    epss-score: 0.063
-    epss-percentile: 0.90551
+    epss-percentile: 0.90574
    cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402207705346b6810c36784b71ce839f969d3304ca910a23fb07abd9a09a6db58d6820220672e2eb02e78a748a544157ee0fa733d7bd9ccb5c1bee227b948e9cc54926df3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220182237fa23a58f323e3884fbd377432495e4ecdcafb2ff2a153d92905f6e296b022100c22f39dee9977468ab9215f33fabdee1cb5d165b2ef52036fb689a6518af6d56:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6172
    cwe-id: CWE-22
    epss-score: 0.07294
-    epss-percentile: 0.91285
+    epss-percentile: 0.91307
    cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ef614108534b5eedbdc6185f68080c1442c1da532eee68259515a62bb4329fee02210095694c906eb97f93961d21a690d038074dba78e726a1b072c48c83943563dc06:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100df9d649cfc658cfad3fada24e3b8d4783295159a9c469b85653da560f5d2bbba022100a0c70ef6423e963b6fca904a8d8bb0f2f503a21426ad131c69f0c469e0c8281a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6222
    cwe-id: CWE-22
    epss-score: 0.01649
-    epss-percentile: 0.8143
+    epss-percentile: 0.81435
    cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100f0161b7a93014ddd32d498a88aab85bb8e9d6c4ab4a900926e910f28e8aa26ec0221009895e395447871ead53827c2a642d7709ec6a7c9a238c09dd44c8090acb763b6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c7046788a57dbc3b2669a2b160b6b6b15d61f1037c486984c304be694e0d839702203b467d87ee2d7a512907a013af9a3e3b38da2ef3a63a8db5df668aa91ab4cdc7:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-6465
    cwe-id: CWE-79
    epss-score: 0.01157
-    epss-percentile: 0.77929
+    epss-percentile: 0.77938
    cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
  metadata:
    verified: true
@@ -63,4 +63,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100c7d78546064710358fda0ddbf774c1a5b863d6997e7c85f220eb59c2a70d7511022100c0cf46c7c3a4783373d731d613bb76eb0df36d3c95f54f5be2dc316a4970346f:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220011ff4bb070345d32b0626472e3b2e2124730ccec904f36a06596a59154ab87502207ddfea3023f6e87fe74855c249cbe19cd83d6b4acf584f6fb978bfd6631bb236:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-6668
    cwe-id: CWE-22
    epss-score: 0.01077
-    epss-percentile: 0.7715
+    epss-percentile: 0.77157
    cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -45,4 +45,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201c466cae8ff26d99bd132bea702c53ee2d605c30a2f11b2a5040bb986ff2b07b02210094a703cae3c322aac2c0299fafa838f393ae32315a840e59bad915ecd6fd6064:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207a8b1081e6aa36feee01c6bd92006a60392da710b4c333b1229e219ef3565514022029f9b4a00a31a7d1cec58e820fc26171ecc4b43b8cc090dffd9cfdcdf801ede9:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-6982
    cwe-id: CWE-79
    epss-score: 0.08587
-    epss-percentile: 0.92054
+    epss-percentile: 0.92067
    cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a00473045022074d8b74d83102cb8267dd27098cdbd4344c04195812acf5bc945ce2d0b4320c0022100fe8015660a737b543edf577eb9757fdab1d8e816e854bca84e0957096fe61fa3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206c95198f6fc0991435fb5c599236e43364df6e5038896ab2c0a1f375fd3fda36022100814c485e72cefa99eba0f1479df44f95b036393b9e5ceb21f789e06e62e441a1:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2008-7269
    cwe-id: CWE-20
    epss-score: 0.00653
-    epss-percentile: 0.70101
+    epss-percentile: 0.70085
    cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
  metadata:
    verified: "true"
@@ -41,4 +41,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402200793b0cd1ea46303ce5f41c43ac7ac582d293eb4c6585906bec43c8bf6bbe87c02200abf49dcdca25584ce00caf68e0c9f47472b36ee012a81379d43481286df693c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d969a99a9e2cb0cc09d8cc59a11f688034617e5d063f9264b56dc281ae2ecbff022100df6f4e556eae57518aee7319c4bcd487fce5a22ff87f9a6e9795a22f940552e9:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2009-0347
    cwe-id: CWE-59
    epss-score: 0.03639
-    epss-percentile: 0.87353
+    epss-percentile: 0.87413
    cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502205f34e534f7132758cf6c241fab7753a5775aeada15bfb730cb8c21b461631d01022100901ad57143203fdc89571eec376c26a11e87416c59eb73c38ae4cf33e4a29da9:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210085d46805b0a3ab9315e62668c57c8f6dece94a79ad4d34b348b34e05c4c0fa32022100dd36f42a49d15fd783d72c7fc61eb2cd689397ca71244a8913cee693a4bfbc43:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-0932
    cwe-id: CWE-22
    epss-score: 0.05612
-    epss-percentile: 0.89915
+    epss-percentile: 0.89969
    cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100977361fd96bf993196bc37fbe4237e35b91ad31ecc313134d9e8b2e4d9dc3b86022054dd2f05241c839505ae15b7623dfa4319900696b1e162ad15b373b4ab685327:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206bcd0c6deef80ee1251427177baad21f5b8e0afdd217c0729766659015c9faf7022100c54bc9bfeab8f3ee61185b4e0e242dca4fdeb5b42d9324ffe595c700e930e910:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1151
    cwe-id: CWE-94
    epss-score: 0.93032
-    epss-percentile: 0.99768
+    epss-percentile: 0.99767
    cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -58,4 +58,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220050e650a1739d1ffec219cdb0ee1f50410320f321ea90d5253656ce892d9d78c022100b84a91803030f091403cf8b0236378668737ac6fe9b7ab31e2074525e6e732af:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206e4ff2860b3f054dd2b23bbd9d01cfe48dadb208bb3736b62b46e8ec9199ce94022100aad92825bfb8baa69f7b63bd818e63f844d7402da3d1fd486c011e1db2309e65:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-1496
    cwe-id: CWE-22
    epss-score: 0.01473
-    epss-percentile: 0.80349
+    epss-percentile: 0.80351
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e85ab418b3429c42fb75d9b8f4d97123ef22422e7034fcba41ce4aeec9bfc2d8022063d12736e1e5a8321f98a2e69b38ad1101fcb31fb73a4c015d52bec2892dd797:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c25c4ff3962c03323aa3745d81c9f62d1e10337317cf21c16c40ba9b536bdd67022021eba09074cd3300a047cb1eb5a20e40e37ef92d8391686e65f07cca1f71b3f7:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1558
    cwe-id: CWE-22
    epss-score: 0.10881
-    epss-percentile: 0.93093
+    epss-percentile: 0.93092
    cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502210080b03d7686e9150707297c99e85aa415e41e89b59708979834f40c999e5b34ff0220728979b5de3a217aaaa7a7c00ba235f52be1331ea68483f2a386a22a40bbfd48:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200dddf66f5bc9715cf5024e15c99932e0cb8286fff3ac858b4fd1c6cb95f2aed9022100b451a27fa7904ee39b695119ba167524ab67ac46718480ad7f647cb8cfb22169:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1872
    cwe-id: CWE-79
    epss-score: 0.08673
-    epss-percentile: 0.92103
+    epss-percentile: 0.92113
    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a0048304602210098174cb1b84edc23cd48487c86e65de4a536883dd0335237905a11ed6829b5fa022100ff989f73df0fc66aa78a019d2d6449cdc52ebf505a46663c1a468c9131652ccb:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a5eedd523e6e242e0ad2a57627d01319cd0685adaf39cae8fa43866ca604a677022100d1fca26b20ddeffbb700371e42a776619a3c11faf61818c8924de8e028069178:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-2015
    cwe-id: CWE-22
    epss-score: 0.01674
-    epss-percentile: 0.81565
+    epss-percentile: 0.81571
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022018b111ad09aed614c4ad3e13db0a69622f0ebe66e07bf49c50699c11adf927cb022100c9e6fd82e3c968b2f9ea40b581d07b84351303363990c00290d428d79473bbdd:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207f1a80caf38aa12bbb904549abd2c68852b16fb52f6cfd88436b0f410f85d024022100c136d957d7e704322f07b5378e5fd9be05199a7f0c40d117350bd2649d627feb:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2009-2100
    cwe-id: CWE-22
    epss-score: 0.01877
-    epss-percentile: 0.82565
+    epss-percentile: 0.82559
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100eff75cd96576d3738af4d650f9a1e798d9b2740b34d8869c6b4833995e5ff9440220653c1d2d811f90a029a8052087dbd595934d4cf42a471f81ca59220185863ac6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100be4b550f3d69c44393e7455adb01b23f4fdf77ee65eca8781a1186179f1b735e022013e781be45f4074cce9c5a919d08dc044cb3e6ee9f2e8b241ea5761946b1d370:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-3053
    cwe-id: CWE-22
    epss-score: 0.01573
-    epss-percentile: 0.80966
+    epss-percentile: 0.80968
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100d1761bb0ac2756f287e763fc3c201fffeb5ea7ce0164463be12af42cd266ce60022100cf68ad52f4ef64a98f3c1342a8ebcb5ea331ea2b08a07eb080c3519d0e0449e4:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206814df5a598e085eddef9031df73a193550bd813817e3e12793eacc076acd39d0220279b5cc169220276ae4bb0d0b638fb55e89aed9bde1f6819d1724a51a9e9f793:922c64590222798bb761d5b6d8e72950
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220440454aaef806216718fe0f25a25da4d5d5ecfd270bc4699c4be15e22809daae0221008a586d06e5ebf166ac6ee75ac1bed84719adb81cd4e4296c684ab8f741c89f80:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e40fe0825da82e1b67cc0a670556bcc8d6712405f0309700defc451906dddfb0022076a8c2bd514281c244b89870830e39385076156f8346ecf130e0adc9c9316d9c:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4202
    cwe-id: CWE-22
    epss-score: 0.02099
-    epss-percentile: 0.83502
+    epss-percentile: 0.83504
    cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a0048304602210092a4d08099c010a7e636d97109f178a04c57573baa153b808297d669fb7643e002210095aafc1f93ed8410f5d8020d87948044119cccdb8d718e027a5cdc7c23128507:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200d80f619deb0a9de4e27e07466befa1cc51dd0daf76625c7c30c96a257726ac0022100fe7466b62f9352bb83a98e9af9711205153a5035d74bf60e08037ecd47f894f5:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4223
    cwe-id: CWE-94
    epss-score: 0.04261
-    epss-percentile: 0.88314
+    epss-percentile: 0.88381
    cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502206550e882f10ad40259f277775faf10710a756325bcb159cda1f51de0e1bf494f022100c1518eab52cd35f5b61ed0df7324e47790232bc1d7406c06a2dab2fb4616a25f:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204629e38d704788d3d9d2fc85355493c05089fc0cbd1c4aed6cc2ea1315648df502204ac6a0c845823e0d01421a4c5874d33afe8791b1020f5ea74aa0b99a9be97a99:922c64590222798bb761d5b6d8e72950
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100f3c6c71906a54d80a2c35de27939ed9da9fe17d2866db510a8c7f8b36ca95ae0022100b010406ddff4b3cf678e31d32b7724f4d664f2b8e230ef36c86af4ffeba23a0b:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220245e6283c8c35946c6b33c5ff022a2930e5048e11081aae515f26c059ebe673902204f1f0d71909fb2e196a63d9a2d39b795241e3274b17501866836b742f90e88fc:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2009-5020
    cwe-id: CWE-20
    epss-score: 0.01389
-    epss-percentile: 0.79764
+    epss-percentile: 0.79768
    cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -39,4 +39,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4a0a00473045022100f3cd7aba1ba3dd6f8eb2d606f60e02460ab51986c86f9a53f4c9e1357791831702205ebdbeaeb901e7ac40ccdef3b4e81adc13c67edd2d2ceac78910ec0cf57530ca:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100805cfb0b4de4afb63b2c2fd610384d795cba451a420283b73f183538a9769c5a0221008321d4f28c562cc0e017d59e482abaa71f9554912470c85c17caa5b20b5da3c2:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-5114
    cwe-id: CWE-22
    epss-score: 0.08663
-    epss-percentile: 0.92099
+    epss-percentile: 0.92109
    cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100c1d07d9a39b6ef7bb203845a3a5ae34dbdd971f212c2254c91158f3b086af3a8022100f7255b0bbb89c32e014786291d981b0b4df168856e0d1a62e9f8fb4a9425a325:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a5d71cba208c9774f478fa51dce895cccaff6c109d5be3b1dd2369ad75c7a0bc022100ac2f63ef884793711f3fa79700007df828bfcb0243003c2490a250d0c95520ad:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2010-0157
    cwe-id: CWE-22
    epss-score: 0.06394
-    epss-percentile: 0.90617
+    epss-percentile: 0.90641
    cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402204aad44ac2b9b77e5861775606b6808f4ec1d201b469d6f0850828470c00f063b0220095263e457196a92d8dcc9b3e5ddc8af259934ca9b09a409fa6a32a56101fb86:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d1319d04402aa897674efba9b6ca4261962f0781099c05bcaa5359b5ac74f68a02206fe5a5932db0de39ba8e64d4ee51d19aadef9df6c8d4f93aa09a85d020fcdcf7:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0467
    cwe-id: CWE-22
    epss-score: 0.26746
-    epss-percentile: 0.96145
+    epss-percentile: 0.96148
    cpe: cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502204f57d56eda345782efe10d665c5f1170670b69972ffe878d3258e28b4a5a75ce022100c03fb6d13aebe019381beab814893dbb3cba154b750f765f66c09321349c4caf:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b2e1383ae366a9098e6f4b8c51301b233d0a40d4efd3239c863fbef5e829fbe602204ac94aeea6df71156ce65eb8c8044243688e1ef956701391bd65f508d36459fb:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0696
    cwe-id: CWE-22
    epss-score: 0.48022
-    epss-percentile: 0.97587
+    epss-percentile: 0.97584
    cpe: cpe:2.3:a:joomlaworks:jw_allvideos:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0759
    cwe-id: CWE-22
    epss-score: 0.06605
-    epss-percentile: 0.9078
+    epss-percentile: 0.90806
    cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e49726966ebdb984302e5138eb2bd71a91b6336179db23060b12eac7d5d979dc0220530fd35ff995b6a76faa70e0bc0e4b2779aed7f4747a4e872314ec4fbfda8e90:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220166f4486157316a87dd70c559a8a1daf427d118ade85342852d42d9141e254ab02204418c0cfc9fd6a7a277c64464cadd130a2d38242790d138bdee8ad8604c69a41:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0942
    cwe-id: CWE-22
    epss-score: 0.04088
-    epss-percentile: 0.88075
+    epss-percentile: 0.88144
    cpe: cpe:2.3:a:jvideodirect:com_jvideodirect:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100effbd66de4da19682c376f0f1c7f8121b2cca8d69088cf6a1c25097ed4ed62a90220571980b7c81a5724a403928f015d42fcb0e187cbfd54e8e6a517cf40ab9e9b56:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bc733274ba3648fec91a8f97dd8925699ca37d524bd0c187ab46dcb606df60a4022100d4816fe9f47a70ed28502b5cefccbe5f7471ae3f8fa2ce70085ee89b5cd0eb2e:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0943
    cwe-id: CWE-22
    epss-score: 0.01978
-    epss-percentile: 0.83008
+    epss-percentile: 0.83013
    cpe: cpe:2.3:a:joomlart:com_jashowcase:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502206c336463046206073a77b79e1e920c44cad67aab830c91f985a0b1da4f727270022100a1bfce4eff04ada9bc2b8fe268fd6b854e3d1ff87f029582b56a986975a4bace:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009cc6b5bbf68dfb68a12301d00378275cc3c467357a0b6c833d3d9c26b053388c0220676c73614bb86451f5c80ec242e0f4ac6d8d43f8da1b839919beb81e1ac16183:922c64590222798bb761d5b6d8e72950
Author	SHA1	Message	Date
Prince Chaddha	e7cc1f0ab0	Update metadata and improve template quality	2025-11-30 10:51:35 +00:00
Ritesh Sahu	f6d979b95a	Create CVE-2023-6266.yaml	2025-11-30 12:06:49 +05:30
ghost	5d356cf295	chore: update EPSS scores 🤖	2025-11-30 02:38:00 +00:00
Prince Chaddha	41aeb32963	Update .nuclei-ignore	2025-11-29 18:27:40 +04:00
Prince Chaddha	9f07790db8	Add crypto-address-detect.yaml to .nuclei-ignore	2025-11-29 18:25:50 +04:00
ghost	1b01eab808	chore: generate templates stats 🤖	2025-11-29 14:22:51 +00:00
Prince Chaddha	931fd1f48d	Update .nuclei-ignore	2025-11-29 15:25:03 +04:00
Prince Chaddha	785930287e	Update .nuclei-ignore	2025-11-29 15:24:42 +04:00
ghost	d3bd44d0f1	chore: sign templates 🤖	2025-11-29 11:17:47 +00:00
ghost	8bfea24fe7	chore: generate templates checksum 🤖	2025-11-29 11:17:45 +00:00
Prince Chaddha	5b3c7d4b33	Merge pull request #14117 from projectdiscovery/pussycat0x-patch-13 Update csp-script-src-wildcard.yaml	2025-11-29 15:17:23 +04:00
Prince Chaddha	cea0abf54b	Merge branch 'main' into pussycat0x-patch-13	2025-11-29 15:17:16 +04:00
ghost	f2cfb32ef5	chore: generate new addition list 🤖	2025-11-29 11:17:15 +00:00
ghost	5cf9bbbcec	chore: generate templates checksum 🤖	2025-11-29 11:17:07 +00:00
ghost	bbc98d40c8	chore: sign templates 🤖	2025-11-29 11:16:59 +00:00
Prince Chaddha	844c5feae0	Delete http/miscellaneous/crypto-address-detect.yaml	2025-11-29 15:16:36 +04:00
pussycat0x	3e51bdebb5	Update csp-script-src-wildcard.yaml	2025-11-29 15:15:30 +04:00
Prince Chaddha	4cd3698ad9	Update .nuclei-ignore	2025-11-29 15:11:52 +04:00
ghost	3c9f2b8d3d	chore: generate templates stats 🤖	2025-11-29 10:47:11 +00:00
ghost	0c074664cc	chore: generate templates checksum 🤖	2025-11-29 10:41:35 +00:00
ghost	51b4cce167	chore: sign templates 🤖	2025-11-29 10:41:31 +00:00
Prince Chaddha	cbb4571bb2	Merge pull request #14116 from projectdiscovery/v10.3.3-release v10.3.3 - Release	2025-11-29 14:41:08 +04:00
ghost	449f6be1cd	chore: generate templates checksum 🤖	2025-11-29 10:35:50 +00:00
ghost	fec8006a20	chore: sign templates 🤖	2025-11-29 10:35:48 +00:00
Ritik Chaddha	a3aff7ea82	Merge pull request #14086 from fernandotorrijos-stoik/main Proposed change to CVE-2021-45467.yaml due to False Positive Detections	2025-11-29 16:05:28 +05:30
Prince Chaddha	869ad6781a	v10.3.3 - Release	2025-11-29 14:35:20 +04:00
ghost	eaf608b495	chore: update KEV and vKEV tags and metadata 🤖	2025-11-29 03:24:55 +00:00
ghost	a96d1ccaf2	chore: generate new addition list 🤖	2025-11-29 02:52:07 +00:00
ghost	153508bf8e	chore: sign templates 🤖	2025-11-29 02:51:53 +00:00
ghost	c601e32d9c	chore: generate templates checksum 🤖	2025-11-29 02:51:44 +00:00
Roberto Nunes	fce1166234	Merge pull request #14107 from projectdiscovery/pussycat0x-patch-13 Create csp-script-src-wildcard.yaml	2025-11-29 11:51:23 +09:00
ghost	db2bacc310	chore: update EPSS scores 🤖	2025-11-29 02:31:08 +00:00
pussycat0x	23f3a3346f	Update csp-script-src-wildcard.yaml	2025-11-28 22:47:46 +04:00
pussycat0x	c398120615	Update csp-script-src-wildcard.yaml	2025-11-28 22:47:27 +04:00
pussycat0x	20f122a2d2	Create csp-script-src-wildcard.yaml	2025-11-28 22:38:05 +04:00
ghost	986b6734d2	chore: generate new addition list 🤖	2025-11-28 16:49:20 +00:00
ghost	f30604637a	chore: generate templates checksum 🤖	2025-11-28 16:49:02 +00:00
ghost	9f1736c49e	chore: sign templates 🤖	2025-11-28 16:49:00 +00:00
Dhiyaneshwaran	cb05756306	Merge pull request #14100 from projectdiscovery/pussycat0x-patch-8 Create sharepoint-files-disclosure.yaml	2025-11-28 22:18:40 +05:30
ghost	02e765a038	chore: generate new addition list 🤖	2025-11-28 16:45:00 +00:00
ghost	c8e520a863	chore: sign templates 🤖	2025-11-28 16:44:45 +00:00
ghost	1d767a4451	chore: generate CVEs metadata 🤖	2025-11-28 16:44:42 +00:00
ghost	b21f380ee1	chore: generate templates checksum 🤖	2025-11-28 16:44:39 +00:00
Dhiyaneshwaran	9b906907d9	Merge pull request #14102 from projectdiscovery/pussycat0x-patch-13 Create CVE-2025-13315.yaml	2025-11-28 22:14:20 +05:30
pussycat0x	080d59881c	Update CVE-2025-13315.yaml	2025-11-28 18:19:52 +04:00
pussycat0x	d7d0bf8f5f	Update CVE-2025-13315.yaml	2025-11-28 17:17:20 +04:00
pussycat0x	2b85b0c543	Create CVE-2025-13315.yaml	2025-11-28 16:43:29 +04:00
ghost	b08cc29f81	chore: generate new addition list 🤖	2025-11-28 11:08:55 +00:00
ghost	f4c2db98b6	chore: sign templates 🤖	2025-11-28 11:08:41 +00:00
ghost	a63469f7d9	chore: generate templates checksum 🤖	2025-11-28 11:08:38 +00:00
Roberto Nunes	73c9ca2c8a	Merge pull request #14099 from projectdiscovery/blackbox-exporter-exposure Blackbox Exporter - Exposure	2025-11-28 20:08:14 +09:00
ghost	f1ce650854	chore: generate new addition list 🤖	2025-11-28 11:07:49 +00:00
ghost	f200f0e8ce	chore: sign templates 🤖	2025-11-28 11:07:33 +00:00
ghost	1c956d07ba	chore: generate templates checksum 🤖	2025-11-28 11:07:31 +00:00
Roberto Nunes	b958a535f7	Merge pull request #14094 from projectdiscovery/unauth-qdrantui Qdrant UI - Unauthenticated Access	2025-11-28 20:07:07 +09:00
ghost	740c60303b	chore: generate new addition list 🤖	2025-11-28 09:35:35 +00:00
ghost	2662dd54ac	chore: sign templates 🤖	2025-11-28 09:35:20 +00:00
ghost	929c27126c	chore: generate templates checksum 🤖	2025-11-28 09:35:16 +00:00
pussycat0x	0445643efa	Merge pull request #14097 from projectdiscovery/memtracker-exposure MemTracker - Exposure	2025-11-28 13:34:54 +04:00
pussycat0x	040b6403d6	Create sharepoint-files-disclosure.yaml	2025-11-28 13:29:55 +04:00
ghost	7be6c4681f	chore: generate new addition list 🤖	2025-11-28 09:23:38 +00:00
ghost	1fb0a3aaf6	chore: generate templates checksum 🤖	2025-11-28 09:23:20 +00:00
ghost	1c3a1137d2	chore: sign templates 🤖	2025-11-28 09:23:18 +00:00
Aman Rawat	9e616edc6e	Merge pull request #14095 from projectdiscovery/postrest-api-exposure PostgREST API Server - Exposure	2025-11-28 14:52:57 +05:30
ghost	c0088b4794	chore: generate new addition list 🤖	2025-11-28 09:21:53 +00:00
ghost	eb13a9d604	chore: generate templates checksum 🤖	2025-11-28 09:21:38 +00:00
ghost	b84de2ff90	chore: sign templates 🤖	2025-11-28 09:21:34 +00:00
Aman Rawat	eef218a9c5	Merge pull request #14096 from projectdiscovery/postgresql-cluster-config PostgreSQL Cluster - Configuration	2025-11-28 14:51:10 +05:30
Dhiyaneshwaran	f9e258c124	Add Shodan query for unauth-qdrantui.yaml	2025-11-28 14:34:45 +05:30
Dhiyaneshwaran	1e3793e13a	Blackbox Exporter - Exposure	2025-11-28 14:29:59 +05:30
Dhiyaneshwaran	46bb76f52a	MemTracker - Exposure	2025-11-28 14:28:04 +05:30
Dhiyaneshwaran	30ce1c877e	PostgreSQL Cluster - Configuration	2025-11-28 14:27:07 +05:30
Dhiyaneshwaran	fbc9308669	PostgREST API Server - Exposure	2025-11-28 14:26:07 +05:30
Dhiyaneshwaran	9ff8a41f18	Qdrant UI - Unauthenticated Access	2025-11-28 14:22:48 +05:30
ghost	2c021d19f1	chore: update KEV and vKEV tags and metadata 🤖	2025-11-28 03:24:52 +00:00
ghost	b2f42f01b3	chore: update EPSS scores 🤖	2025-11-28 02:31:15 +00:00
ghost	81cf0b91e7	chore: generate new addition list 🤖	2025-11-28 02:05:22 +00:00
ghost	72f0d500e4	chore: sign templates 🤖	2025-11-28 02:05:03 +00:00
ghost	01de4f306a	chore: generate templates checksum 🤖	2025-11-28 02:05:02 +00:00
Roberto Nunes	0194b31d64	Merge pull request #14091 from projectdiscovery/unauth-phoenix-dashboard Unauth Phoenix Dashboard - Detect	2025-11-28 11:04:41 +09:00
Dhiyaneshwaran	0650294d90	Unauth Phoenix Dashboard - Detect	2025-11-28 05:43:34 +05:30
ghost	1d9510e56a	chore: generate new addition list 🤖	2025-11-28 00:02:14 +00:00
ghost	0681fa50c2	chore: generate templates checksum 🤖	2025-11-28 00:01:55 +00:00
ghost	48f36fb7a8	chore: generate new addition list 🤖	2025-11-28 00:01:33 +00:00
Roberto Nunes	1d17b4bf77	Merge pull request #14089 from projectdiscovery/unauth-supervisor-dashboard Unauth Supervisor Dashboard - Detect	2025-11-28 09:01:32 +09:00
ghost	7e32f582f5	chore: generate templates checksum 🤖	2025-11-28 00:01:17 +00:00
Prince Chaddha	1c5c1a327f	Merge pull request #14058 from projectdiscovery/cluster-trino-admin-login Cluster Overview Trino - Admin Login	2025-11-28 04:00:53 +04:00
Dhiyaneshwaran	9aa659164c	Unauth Supervisor Dashboard - Detect	2025-11-28 05:20:28 +05:30
ghost	9d049567bc	chore: sign templates 🤖	2025-11-27 22:39:30 +00:00
ghost	2e9da74962	chore: generate templates checksum 🤖	2025-11-27 22:39:25 +00:00
ghost	3f87bb5f3e	chore: generate CVEs metadata 🤖	2025-11-27 22:39:23 +00:00
Roberto Nunes	99a4c9c19e	Merge pull request #14088 from darses/patch-54 Update CVE-2025-58360	2025-11-28 07:39:06 +09:00
Ritik Chaddha	9178eb5d2a	Update cluster-trino-admin-login.yaml	2025-11-27 23:38:16 +05:30
ghost	49d1f5d3c6	chore: generate new addition list 🤖	2025-11-27 18:05:54 +00:00
ghost	a8bbe0c7a3	chore: generate templates checksum 🤖	2025-11-27 18:05:40 +00:00
ghost	320677306c	chore: sign templates 🤖	2025-11-27 18:05:35 +00:00
Ritik Chaddha	dcc5000602	Merge pull request #14057 from projectdiscovery/cluster-trino-panel Cluster Overview Trino - Panel	2025-11-27 23:35:14 +05:30
ghost	9d2af4d906	chore: generate templates checksum 🤖	2025-11-27 18:05:06 +00:00
ghost	3dc9e262f8	chore: sign templates 🤖	2025-11-27 18:05:02 +00:00
Ritik Chaddha	8df9530ce5	Merge pull request #14054 from righettod/jitsi_upd Refactor the "JITSI" template.	2025-11-27 23:34:38 +05:30
Chris	12a28e04f4	Use wfs endpoint with WMS service URL param	2025-11-27 16:34:28 +01:00
Chris	41da89fd26	My bad	2025-11-27 16:07:11 +01:00
Chris	a96abf8b61	Reduce two requests to match error	2025-11-27 16:05:55 +01:00
Chris	b1ae534dc6	Update CVE-2025-58360 - Add classification - Add references - Add shodan/fofa queries - Add path without geoserver prefix - Minimize URL params - Minimize post body - Add additional matcher	2025-11-27 15:59:15 +01:00
fernandotorrijos-stoik	1e699de29d	Merge branch 'projectdiscovery:main' into main	2025-11-27 14:48:35 +01:00
ghost	21c3928460	chore: generate new addition list 🤖	2025-11-27 13:43:07 +00:00
ghost	a297d9b38d	chore: generate templates checksum 🤖	2025-11-27 13:42:47 +00:00
ghost	8a6ca5d8d6	chore: sign templates 🤖	2025-11-27 13:42:47 +00:00
ghost	baf2ac146d	chore: generate CVEs metadata 🤖	2025-11-27 13:42:45 +00:00
pussycat0x	6957856810	Merge pull request #14082 from projectdiscovery/CVE-2025-10204 CVE-2025-10204 - AC Smart II - Authentication Bypass	2025-11-27 17:42:25 +04:00
fernandotorrijos-stoik	f0e51cf184	Proposed change to CVE-2021-45467.yaml due to False Positive Detections	2025-11-27 14:31:22 +01:00
pussycat0x	8db256690c	Update CVE-2025-10204.yaml	2025-11-27 17:27:05 +04:00
ghost	c0abefad32	chore: generate new addition list 🤖	2025-11-27 07:09:32 +00:00
ghost	6a760a1ae6	chore: generate templates checksum 🤖	2025-11-27 07:09:20 +00:00
ghost	e4c8707d1f	chore: sign templates 🤖	2025-11-27 07:09:17 +00:00
ghost	535c2a00ff	chore: generate CVEs metadata 🤖	2025-11-27 07:09:14 +00:00
Aman Rawat	f4a08fb0eb	Merge pull request #14078 from projectdiscovery/CVE-2025-58360 CVE-2025-58360 - GeoServer - XML External Entity Injection	2025-11-27 12:38:51 +05:30
Aman Rawat	c2c1f291b9	Update CVE-2025-58360.yaml	2025-11-27 12:29:01 +05:30
Dhiyaneshwaran	c87ae23b4c	CVE-2025-10204 - AC Smart II - Authentication Bypass	2025-11-27 12:27:26 +05:30
Roberto Nunes	54910d34ca	Merge pull request #14075 from l-teles/Update-unavailable-documentation-URLs Update unavailable documentation URLs	2025-11-27 14:19:12 +09:00
Dhiyaneshwaran	b4f7a83163	CVE-2025-58360 - GeoServer - XML External Entity Injection	2025-11-27 10:39:25 +05:30
ghost	1bb7deeaec	chore: update KEV and vKEV tags and metadata 🤖	2025-11-27 03:25:07 +00:00
ghost	796921b94d	chore: update EPSS scores 🤖	2025-11-27 02:31:34 +00:00
Luís Teles	25315c7c1d	Update unavailable documentation URLs	2025-11-26 23:50:01 +00:00
ghost	b13aef255b	chore: generate new addition list 🤖	2025-11-26 23:02:21 +00:00
ghost	1f0cb2429e	chore: generate templates checksum 🤖	2025-11-26 23:02:10 +00:00
ghost	12f6729c35	chore: sign templates 🤖	2025-11-26 23:02:04 +00:00
Roberto Nunes	1fe603c208	Merge pull request #14070 from righettod/flower_add Add detection of "FLOWER" instances.	2025-11-27 08:01:39 +09:00
pussycat0x	2aec46ac71	Update flower-detect.yaml	2025-11-26 22:08:21 +04:00
Dominique RIGHETTO	56e3cb8de6	Add files via upload	2025-11-26 15:21:15 +01:00
ghost	d71bb2ecb0	chore: generate templates checksum 🤖	2025-11-26 10:44:29 +00:00
ghost	bdbb7a1b1e	chore: sign templates 🤖	2025-11-26 10:44:15 +00:00
Aman Rawat	fcc2d9b35a	Merge pull request #13990 from kazet/upper-bound-length Upper bound on .* in error-based SQLi regular expressions	2025-11-26 16:13:54 +05:30
ghost	1656aede79	chore: generate new addition list 🤖	2025-11-26 08:34:38 +00:00
ghost	a231da56b2	chore: generate templates checksum 🤖	2025-11-26 08:34:26 +00:00
ghost	e75ec8aeb7	chore: sign templates 🤖	2025-11-26 08:34:23 +00:00
ghost	4b3f3ffe6a	chore: generate CVEs metadata 🤖	2025-11-26 08:34:18 +00:00
Roberto Nunes	19e9599ef3	Merge pull request #14042 from JosephTTD/CVE-2021-4462-employee-records-rce Add CVE-2021-4462 - Employee Records System File Upload RCE	2025-11-26 17:33:56 +09:00
pussycat0x	3c603dc8f4	Update CVE-2021-4462.yaml	2025-11-26 10:25:03 +04:00
pussycat0x	f6d9040f35	Update CVE-2021-4462.yaml	2025-11-26 10:15:00 +04:00
pussycat0x	1256ac92a4	Update CVE-2021-4462.yaml	2025-11-26 09:53:26 +04:00
Dhiyaneshwaran	6e561b12cd	Fix author casing in jitsi-meet-detect.yaml	2025-11-26 10:12:30 +05:30
Dhiyaneshwaran	9fea071938	Cluster Overview Trino - Admin Login Added a configuration file for Trino admin login vulnerability.	2025-11-26 02:35:03 +05:30
Dhiyaneshwaran	1045c75dd3	Cluster Overview Trino - Panel	2025-11-26 02:09:56 +05:30
Dominique RIGHETTO	226d029dda	Add files via upload	2025-11-25 20:18:30 +01:00
Joseph Dada	0510213925	Add CVE-2021-4462 - Employee Records System File Upload RCE - Unauthenticated file upload in uploadID.php - Remote code execution via PHP file upload - Tested and verified against vulnerable Docker instance - Includes complete POC with verification string Closes #14040	2025-11-25 04:15:36 +01:00
Krzysztof Zając	9b0e2e544a	Upper bound on .* in error-based SQLi regular expressions	2025-11-19 14:33:19 +01:00