mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-11-13 17:57:00 -10:00
Compare commits
1
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
14a0c547b9 |
No files matched your search
@@ -2,21 +2,17 @@ http/cves/2017/CVE-2017-5963.yaml
|
||||
http/cves/2021/CVE-2021-44868.yaml
|
||||
http/cves/2022/CVE-2022-30047.yaml
|
||||
http/cves/2023/CVE-2023-49606.yaml
|
||||
http/cves/2024/CVE-2026-65600.yaml
|
||||
http/cves/2025/CVE-2025-4283.yaml
|
||||
http/cves/2025/CVE-2025-60021.yaml
|
||||
http/cves/2025/CVE-2025-69985.yaml
|
||||
http/cves/2026/CVE-2026-110355.yaml
|
||||
http/cves/2026/CVE-2026-116000.yaml
|
||||
http/cves/2026/CVE-2026-119302.yaml
|
||||
http/cves/2026/CVE-2026-124027.yaml
|
||||
http/cves/2026/CVE-2026-27175.yaml
|
||||
http/cves/2026/CVE-2026-28318.yaml
|
||||
http/cves/2026/CVE-2026-28517.yaml
|
||||
http/cves/2026/CVE-2026-33344.yaml
|
||||
http/cves/2026/CVE-2026-39813.yaml
|
||||
http/cves/2026/CVE-2026-64858.yaml
|
||||
http/cves/2026/CVE-2026-81648.yaml
|
||||
http/cves/2026/CVE-2026-96654.yaml
|
||||
http/cves/2026/CVE-2026-96656.yaml
|
||||
network/cves/2019/CVE-2019-19492.yaml
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2019-14287
|
||||
cwe-id: CWE-755
|
||||
epss-score: 0.63764
|
||||
epss-percentile: 0.99234
|
||||
epss-percentile: 0.99232
|
||||
cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -51,4 +51,4 @@ code:
|
||||
- '!contains(code_1_response, "root")'
|
||||
- 'contains(code_2_response, "root")'
|
||||
condition: and
|
||||
# digest: 490a00463044022030f8011fea8c58c5c93497cb653a326652460c27773af5510271d0eaa732ea27022051922c583e643802e739130a8058b65ff2b34ae83a9aba136b4d6168fdca70f6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502206fa93520ff0ae6c1595c672dad3a61c81472b0ad81ff8f05a6d21d962eb4de49022100bdc22a57e002e825809f90dea26ce7fb4da6b400f277a888db0313697dbf9e85:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2020-0646
|
||||
cwe-id: CWE-91
|
||||
epss-score: 0.99222
|
||||
epss-percentile: 0.99936
|
||||
epss-percentile: 0.99935
|
||||
cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -106,4 +106,4 @@ code:
|
||||
- 'contains(content_type, "text/xml")'
|
||||
- 'status_code == 200'
|
||||
condition: and
|
||||
# digest: 490a0046304402201deaae639933571de94d28b5746279714a83575f9155a3250ad9fbc7d6ec36cb0220171cd06d546dda19e7f5a32d7e1f8f0f2831e55dd287040b676e669333ec5b41:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502206987d50162e5094e8395d966e0c9994bcc274759874a0abfbdbd63eac17971d40221008a5f294f8a7fe9c8119213710c3a31344aaab72da3a5317059d7ef5047e3b591:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2023-2640
|
||||
cwe-id: CWE-863
|
||||
epss-score: 0.15199
|
||||
epss-percentile: 0.96804
|
||||
epss-percentile: 0.96799
|
||||
cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -55,4 +55,4 @@ code:
|
||||
- '!contains(code_1_response, "(root)")'
|
||||
- 'contains(code_2_response, "(root)")'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022100d29537ef202a1f16c836c3f39701b7c4901ce759b7beb995e418dd5b1d39d320022054f40c7047d035243b7a65022f6ace5a4c1ef8337c3ab8f79a241dbca81dfa77:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022039eb7f64a9a0b19ef14ad9897456caf0db89b0c8df1656dbe7ff60928409d0c0022100d5758c9ead115b2d00634662b44929305da3ab8b9071f5a61022df1567381bb7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2023-2986
|
||||
epss-score: 0.42544
|
||||
epss-percentile: 0.98728
|
||||
epss-percentile: 0.98727
|
||||
cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -630,4 +630,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 302
|
||||
# digest: 4a0a00473045022100f88b7970cac31bd44f76291e741db77f127f74027ebbeef9a2f5372a63aa601602201ac0284a5e2581e15c406993cd61f6957df6d453438f6add5de7cb89ce262f50:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220077ad0665d15ccdea84ac0affe82c4e12be604bbaf4537b084e8829dbe2836c0022100f4650598afb582f1563641e03761ed122d29ae3dbcdfe67675bb35f41887a6d2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2023-49105
|
||||
cwe-id: CWE-287
|
||||
epss-score: 0.4319
|
||||
epss-percentile: 0.98744
|
||||
epss-percentile: 0.98742
|
||||
cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -94,4 +94,4 @@ http:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- '"Username => "+ username'
|
||||
# digest: 4a0a00473045022100f42da077cf10ad5ff52e77fc145434061f1e0b26afe8903f87fcf72f18b9b1f5022063f4f7e5627b2d8994fefa30f63d161ade1c059c1fb55c9831c5de35754cb2e3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502210080f98e8d65fdae32bda122a692be5403dcca9cf66e8e4b900fe3413e80e163ad02201425fb3815ab4259ba01cb4fdc85ad79445b568ad0e28230222cd4bb783378fc:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2023-6246
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.04794
|
||||
epss-percentile: 0.92076
|
||||
epss-percentile: 0.92063
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "127" # Segmentation Fault Exit Code
|
||||
# digest: 4a0a00473045022041ad802aa88734a61ba7b525a0ac1d71c8792e1debf202eaca2ae336328d1cbf022100d70eeb3620dc6967e3208f8711102104d083f73738dce5c04c55ef58ca4feb95:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100fed8981fa1e21cb50c46791da614ae078b018c375cb3c864e5690df6c6e97330022033df8607aa26156befe02766a486ea50ced41f3d519687c0616c2a99a71b7e1b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2024-10443
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.28525
|
||||
epss-percentile: 0.9816
|
||||
epss-percentile: 0.98158
|
||||
cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -58,4 +58,4 @@ code:
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- "dns"
|
||||
# digest: 490a00463044022028ddf7a459a853ae081215bc16f89a5ba543ea39eef282d21a3638d99d60632f02206ffa4587831f583e8aefd2798a729618b8ee81874ffb8fd6bb129f25fce3e931:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203238407d7e167321c977057a2e49d3440967694321f42c561abbc09638f65f2702206735542ac389049426eb9a5a6cf080d27de193056323721f77934e40ae04b886:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,7 +15,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2024-4340
|
||||
epss-score: 0.0321
|
||||
epss-percentile: 0.88373
|
||||
epss-percentile: 0.88354
|
||||
reference:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2024-4340
|
||||
tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
|
||||
@@ -33,4 +33,4 @@ code:
|
||||
part: stderr
|
||||
words:
|
||||
- "RecursionError: maximum recursion depth exceeded"
|
||||
# digest: 4a0a00473045022010b0960b84fe590997cbba7c4d04d567816f02dd3dc319547d5dc43a3ce5cc17022100c4bf4d5e85772b1cace421035f1ebf0127f9502d26d39ea4505e193b9bf8c595:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402207e19f947e6f0131d4027edd1d71643cecd17c7cd11f65a22f47266d914fa7ad8022004de9d89959477bd8c5e69e675d041a366f0c1872c9942e3f7b8c976b61fe1eb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2024-45409
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.12454
|
||||
epss-percentile: 0.96279
|
||||
epss-percentile: 0.96273
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"GitLab"
|
||||
@@ -123,4 +123,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 4a0a0047304502204f7e44b4c1344cdcd38f312ff1bfa3a4547763305a2a78bdd60fc2249a2f54c602210088e1fda37f2325b18a9a39ec41c100c3c516466ec8af7b870951077ceec086b0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203c238f1066001e7bbacf12b2b432ae084fb925b9ddfac41cb3d723d326a059f5022100fc74d5ac1c1c6f59c98d10004d30321b6b10e71d1f31b35c78cb14f16ccb6bee:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2024-56331
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01845
|
||||
epss-percentile: 0.79381
|
||||
epss-percentile: 0.79352
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"Uptime Kuma"
|
||||
@@ -124,4 +124,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
|
||||
# digest: 4a0a0047304502204bf23923e8dbe5c6d45b27a53227884ce5efcdf8c615624e560ca40834f73ecb022100880f7515ad698b70a5540f23e5d318e166de7bf53367d1ab33d2f4949848e527:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402207c80123c34e180671fc3b91413e8e43bd711da6912ed1568b49b3b70ae446fec0220143bf6e7ee5ac00e5edaa668af5612794c931fcca16a6506369ba3012abe4a28:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,7 +15,7 @@ info:
|
||||
- https://github.com/advisories/GHSA-g83h-4727-5rpv
|
||||
classification:
|
||||
epss-score: 0.25607
|
||||
epss-percentile: 0.97989
|
||||
epss-percentile: 0.97987
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: title:"GitHub Enterprise"
|
||||
@@ -192,4 +192,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- user_session
|
||||
# digest: 490a0046304402203476d5b0f899af8d4d9339a8bd804c63845309f8351adfb60d28135256f9614502202ca0434ad8154cd1698a935d191ff7a02e5e79fb945d8070c400bc0801ebac9e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100dd2398b4c8a74af0a59260f756e78d6bf019aefff053dd7e4db2d1300209b325022100e49b4b86f949e5305cbf65f3a4b7b65c3fb241ff38613517ea66de4a7af1954b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
- https://towerofhanoi.it/writeups/cve-2025-1550/
|
||||
classification:
|
||||
epss-score: 0.02604
|
||||
epss-percentile: 0.85617
|
||||
epss-percentile: 0.85594
|
||||
metadata:
|
||||
max-request: 1
|
||||
tags: cve,cve2025,code,keras,rce,ml,vuln
|
||||
@@ -77,4 +77,4 @@ code:
|
||||
part: response
|
||||
regex:
|
||||
- "root:.*:0:0:"
|
||||
# digest: 4a0a004730450220449434e68be4b3b8fc0d6b20f38b3d7230ae31dbba4f7264a25dc44ca3007ded0221008be983bb92d835932a00d552ef24c57dcdfb6073996a4ddbdc1542459d285c89:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022029f78690413717fd3d24dd95f012c356bcbef5c946519e7fae11a1cc333a0a7a0220760c9147413bd824d699e0095392ef3c428c13f8068d96dfba83c64abb831556:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2025-22457
|
||||
cwe-id: CWE-121,CWE-787
|
||||
epss-score: 0.99981
|
||||
epss-percentile: 0.99982
|
||||
epss-percentile: 0.99981
|
||||
cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
|
||||
metadata:
|
||||
vendor: ivanti
|
||||
@@ -164,4 +164,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "VULNERABLE:"
|
||||
# digest: 4a0a0047304502210086512eacc45b70dd10b05b164842c3fa576274a0399ab4fdef3c0cc74ed03edb02206d535a3781ad21dc4ad75128e4a2fc28aa0f1e08823363c9c30cab36057362a6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e5cb98c61eec3c597a1456695773320cbf0b1f0df66d11b25e749cadf5ebf85c022100c72c4262c32a36c69f8c3266a92313d2cb6edf58b69fdde9f118ad564cbba0a0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2025-25291
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.20965
|
||||
epss-percentile: 0.97601
|
||||
epss-percentile: 0.97597
|
||||
metadata:
|
||||
verified: true
|
||||
vendor: gitlab
|
||||
@@ -80,4 +80,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 4a0a0047304502210089b7280cdb6498403339628979ffcbdf2c53bb9f35f6bd5db6bb3e078a548bf80220748a666b1a15211d04fb85b88dd0b304d85a89fa746c55c8977104e6e9146ca8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a004830460221009b3a9378477664df098731a4b3a99a416c33882c5e71815f34ffe94ac64eaeca0221008981f949009a34eaee929c3c429eb5003cc706622b9878769926ed1101533e29:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,7 +23,7 @@ info:
|
||||
cve-id: CVE-2025-32433
|
||||
cwe-id: CWE-306
|
||||
epss-score: 0.98924
|
||||
epss-percentile: 0.99929
|
||||
epss-percentile: 0.99927
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -174,4 +174,4 @@ code:
|
||||
dsl:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022010bfa5b78018c5489998557525d5b42060c8af35ff140e143828c810a6d4d1f00221008afbd43ead803498bc8a07729eaefd5818c652828d1c88d1b7f7444a30b0b8d2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f73c5941c82d36fefc97f9070af94ea8949936ed1e457dcc37802f53b6f7f38b02204d6d48f5bbb62eac0d1c08d00b6614ab37771f36c8776548061a05d1e41f99bb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
classification:
|
||||
cve-id: CVE-2025-32463
|
||||
epss-score: 0.563
|
||||
epss-percentile: 0.99067
|
||||
epss-percentile: 0.99065
|
||||
cvss-score: 9.3
|
||||
cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
||||
cwe-id: CWE-426
|
||||
@@ -65,4 +65,4 @@ code:
|
||||
- "!contains(tolower(response), 'password')"
|
||||
- "!contains(tolower(response), 'a password is required')"
|
||||
- "!contains(tolower(response), 'is not in the sudoers file')"
|
||||
# digest: 490a004630440220683d4ac9eb5c177864cea64d1ff2cc5ef05b672719f5710ddafb64fffb0c391102202fe28d697d21b08d8e3f39024391ec36c5d2cce24595352b0ca1710f97b25dfc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022015277cb2684c2e8ac777a9e4a4225cd64179e0816012301437c22fea80c7bd48022023bc32c70b1d1ab03d6e7e9b39427c80335e033b50a0189beb75b13473500daf:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2025-6216
|
||||
classification:
|
||||
epss-score: 0.47775
|
||||
epss-percentile: 0.98871
|
||||
epss-percentile: 0.98869
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2025-6216
|
||||
@@ -115,4 +115,4 @@ code:
|
||||
- type: dsl # type of the extractor
|
||||
dsl:
|
||||
- '"Reset URL: " + code_response'
|
||||
# digest: 4a0a00473045022100e045460f36bee5da5ab627a41021befb9279fb906146a3e4e9edd2a436691b8b022034b47eb8273e02443ab16ae525e17ffae5c39cc362e94dafcfee5f1cb5e93eaa:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022000ef2ebd5bc0a7bc0b8de17aa368af2d85bb2f901b6101d1dae429acf3542be40220182552986011b57629575d77365db8b65616682a90648ae52ca82738596cc4cf:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2025-68926
|
||||
epss-score: 0.32078
|
||||
epss-percentile: 0.98338
|
||||
epss-percentile: 0.98336
|
||||
cwe-id: CWE-798
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -87,4 +87,4 @@ code:
|
||||
name: version
|
||||
regex:
|
||||
- "(\\d+\\.\\d+\\.\\d+-alpha\\.\\d+|grpc-auth-bypass)"
|
||||
# digest: 4b0a004830460221009181b02e63797eda0802aeb76ee95bda5c71b6adabbfc655afef4486893480fe022100bc13b2180a723ab60cbd4a082c944eeba0c936816417e3d435f24ce601908b55:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f7a763ee800430f938332ef57843152ce0b1ad395d81eedf31ee5b17fcd59d99022100d525fe9f8497d1be651715e6921b034b4332cc53ba9da877a88bac6a48da7392:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2025-6984
|
||||
epss-score: 0.01647
|
||||
epss-percentile: 0.76856
|
||||
epss-percentile: 0.7682
|
||||
cwe-id: CWE-200
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -64,4 +64,4 @@ code:
|
||||
- "bin:"
|
||||
- "daemon:"
|
||||
condition: or
|
||||
# digest: 4a0a00473045022100c6efb57f4b717bd6d06b220915aa036b5fe1bb4005d1865131710e26f51df5da0220232d8a7e89bd82b6e4103048b2dd2135446683e1f06c0c3e6acdafedb025a075:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203f7273a961324e8285274266c8c9378bfbcd0d5fc9535782bc85952753a4ae220221008a6795366bfbaab28f560a884f6a88fe16d075960949170254fabbfe4deb41e6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 8.1
|
||||
cve-id: CVE-2026-10795
|
||||
epss-score: 0.04308
|
||||
epss-percentile: 0.913
|
||||
epss-percentile: 0.91286
|
||||
cwe-id: CWE-347
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -85,4 +85,4 @@ http:
|
||||
- 'status_code == 200'
|
||||
- 'contains(body, "\"udrpc_message\":\"")'
|
||||
condition: and
|
||||
# digest: 4b0a0048304602210090da278999992d87c2971d977679f77ec662cd79fb952549f7d972af2ce71d2e02210093d403becae78d51f7669b4bf6d36a83400992fbc9cfb646a471152bd41d7047:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a0048304602210095307dfebcac9fd10d3f456cf134c8363d29c5991054afcbd43e1464c933ffb0022100926886a1f1d833ee394de0ebd0890c562cad7ed7cb61a5012c814b2cdd497dbb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2026-8467
|
||||
epss-score: 0.02111
|
||||
epss-percentile: 0.82089
|
||||
epss-percentile: 0.82067
|
||||
cwe-id: CWE-94
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -276,4 +276,4 @@ code:
|
||||
group: 1
|
||||
regex:
|
||||
- "Output: (.*)"
|
||||
# digest: 4a0a0047304502201a53b46c91a7e8739144c1cc99cb474bcd65b3443d82b452cb186187cb804a71022100c6e0bec2e85bbf1ecc7984d61b177aa4355ba3ae5207219c07406e3bfa9ccea1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f099cd22efe9c6f1981f66c23b96c154b3f3cd998e7b5b692e74f657bc0aa6b50220408fef906ad24ab0d996f3a6657a1d2a445a5583633adcc256b4a35631bb309f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -3539,7 +3539,6 @@
|
||||
{"ID":"CVE-2024-9916","Info":{"Name":"HuangDou UTCMS V9 - OS Command Injection","Severity":"high","Description":"A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The exploit has been disclosed to the public and may be used.The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2024/CVE-2024-9916.yaml"}
|
||||
{"ID":"CVE-2024-9935","Info":{"Name":"PDF Generator Addon for Elementor Page Builder \u003c= 1.7.5 - Arbitrary File Download","Severity":"high","Description":"The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtw_pgaepb_dwnld_pdf() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-9935.yaml"}
|
||||
{"ID":"CVE-2024-9989","Info":{"Name":"Crypto \u003c= 2.15 - Authentication Bypass","Severity":"critical","Description":"The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.15. This is due a to limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-9989.yaml"}
|
||||
{"ID":"CVE-2026-65600","Info":{"Name":"Traefik - Authentication Bypass - Version Detection","Severity":"high","Description":"Traefik versions \u003c= v2.11.51, \u003e= v3.0.0 \u003c= v3.6.22, and \u003e= v3.7.0 \u003c= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware (CVE-2026-65600). This template passively identifies vulnerable versions by reading the version reported on the Traefik API (/api/version), which is exposed when the dashboard/API is reachable (e.g. api.insecure=true or the api@internal service routed without auth).\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2026-65600.yaml"}
|
||||
{"ID":"CVE-2025-0107","Info":{"Name":"Palo Alto Networks Expedition - OS Command Injection","Severity":"critical","Description":"An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-0107.yaml"}
|
||||
{"ID":"CVE-2025-0108","Info":{"Name":"PAN-OS Management Interface - Path Confusion to Authentication Bypass","Severity":"critical","Description":"A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authentication checks enforced by X-pan-AuthCheck header.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2025/CVE-2025-0108.yaml"}
|
||||
{"ID":"CVE-2025-0133","Info":{"Name":"PAN-OS - Reflected Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link.The primary risk is phishing attacks that can lead to credential theft—particularly if you enabled Clientless VPN.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-0133.yaml"}
|
||||
@@ -4035,7 +4034,6 @@
|
||||
{"ID":"CVE-2026-123270","Info":{"Name":"Redpanda Connect Streams API - Unauthenticated Remote Code Execution","Severity":"critical","Description":"Redpanda Connect 4.39.0 through 4.110.0 exposes an unauthenticated streams management API by default; an attacker can register and trigger a stream containing a command processor.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-123270.yaml"}
|
||||
{"ID":"CVE-2026-123488","Info":{"Name":"Craft CMS \u003c 4.18.9, \u003c 5.11.2 - Unauthenticated SQL Injection","Severity":"critical","Description":"Craft CMS \u003c 4.18.9, \u003c 5.11.2 contain an unauthenticated SQL injection caused by unsanitized concatenation of the attribute parameter in the element search endpoint, letting remote attackers read and write the database to gain administrator access, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-123488.yaml"}
|
||||
{"ID":"CVE-2026-12394","Info":{"Name":"WordPress MemberGlut \u003c 1.1.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"MemberGlut WordPress plugin \u003c 1.1.5 contains a broken access control vulnerability caused by lack of validation of roles during front-end registration, letting unauthenticated users register with arbitrary roles including administrator, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-12394.yaml"}
|
||||
{"ID":"CVE-2026-124027","Info":{"Name":"ChatWiki \u003c 2.10.0 - Cross-Tenant Document Page Disclosure","Severity":"high","Description":"ChatWiki before 2.10.0 exposes /manage/getLibRawFileOnePage without authentication and trusts a caller-supplied admin_user_id, allowing document-page access across tenants.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-124027.yaml"}
|
||||
{"ID":"CVE-2026-125357","Info":{"Name":"Munin munin-httpd 2.99.1-2.999.18 - Unauthenticated Path Traversal","Severity":"medium","Description":"Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal caused by improper '/../' substring check in static file handler Munin::Master::HTML::handle_request, letting unauthenticated attackers read files outside the static directory.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-125357.yaml"}
|
||||
{"ID":"CVE-2026-12583","Info":{"Name":"Newsletters \u003c 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field","Severity":"high","Description":"The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored through a public form, allowing unauthenticated attackers to inject a PHP object and, via a property-oriented gadget chain bundled with the Newsletters WordPress plugin before 4.15, write arbitrary files and execute code on the server.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-12583.yaml"}
|
||||
{"ID":"CVE-2026-12592","Info":{"Name":"SlimStat Analytics \u003c 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header","Severity":"high","Description":"SlimStat Analytics WordPress plugin \u003c 5.5.0 contains a stored XSS caused by unescaped visitor-controlled geolocation value in admin analytics reports, letting unauthenticated visitors execute scripts in admin browsers, exploit requires Cloudflare geolocation provider configuration.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-12592.yaml"}
|
||||
@@ -4213,7 +4211,6 @@
|
||||
{"ID":"CVE-2026-33057","Info":{"Name":"Mesop AI Sandbox \u003c= 1.2.2 - Remote Code Execution","Severity":"critical","Description":"Mesop \u003c= 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-33057.yaml"}
|
||||
{"ID":"CVE-2026-3326","Info":{"Name":"XStore Theme \u003c 9.7.3 - SQL Injection","Severity":"high","Description":"The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-3326.yaml"}
|
||||
{"ID":"CVE-2026-33340","Info":{"Name":"LoLLMs WEBUI - Server-Side Request Forgery","Severity":"critical","Description":"LoLLMs WEBUI contains a server-side request forgery caused by unauthenticated access to the /api/proxy endpoint, letting attackers force the server to make arbitrary GET requests, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2026/CVE-2026-33340.yaml"}
|
||||
{"ID":"CVE-2026-33344","Info":{"Name":"dagu \u003c= 2.3.0 - Path Traversal via Encoded Slashes in DAG Name","Severity":"high","Description":"Dagu is a workflow engine with a built-in Web user interface. From version 2.0.0 to before version 2.3.1, the fix for CVE-2026-27598 added ValidateDAGName to CreateNewDAG and rewrote generateFilePath to use filepath.Base. This patched the CREATE path. The remaining API endpoints - GET, DELETE, RENAME, EXECUTE - all pass the {fileName} URL path parameter to locateDAG without calling ValidateDAGName. %2F-encoded forward slashes in the {fileName} segment traverse outside the DAGs directory. This issue has been patched in version 2.3.1.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-33344.yaml"}
|
||||
{"ID":"CVE-2026-3335","Info":{"Name":"Canto \u003c= 3.1.1 - Missing Authorization to Unauthenticated File Upload","Severity":"medium","Description":"The Canto plugin for WordPress is vulnerable to missing authorization in the copy-media.php upload flow.\nThe file is directly accessible and accepts attacker-controlled parameters for the upload destination, allowing unauthenticated users to upload arbitrary files constrained to WordPress-allowed MIME types.\nThe fbc_app_api parameter controls the domain WordPress fetches from via wp_safe_remote_get, enabling SSRF to attacker-controlled infrastructure.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-3335.yaml"}
|
||||
{"ID":"CVE-2026-33425","Info":{"Name":"Discourse - Private Group Membership Inference via exclude_groups","Severity":"medium","Description":"Discourse \u003c 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contains an information disclosure caused by unauthenticated users observing directory results changes with the exclude_groups parameter, letting attackers determine private group membership, exploit requires public access to user directory.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-33425.yaml"}
|
||||
{"ID":"CVE-2026-33439","Info":{"Name":"OpenAM \u003c= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization","Severity":"critical","Description":"Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution (RCE) via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypasses the WhitelistObjectInputStream mitigation that was applied to the jato.pageSession parameter after CVE-2021-35464. This vulnerability is fixed in 16.0.6.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-33439.yaml"}
|
||||
@@ -4552,7 +4549,6 @@
|
||||
{"ID":"CVE-2018-2628","Info":{"Name":"Oracle WebLogic Server Deserialization - Remote Code Execution","Severity":"critical","Description":"The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) versions 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3 contains an easily exploitable vulnerability that allows unauthenticated attackers with network access via T3 to compromise Oracle WebLogic Server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2018/CVE-2018-2628.yaml"}
|
||||
{"ID":"CVE-2018-2893","Info":{"Name":"Oracle WebLogic Server - Remote Code Execution","Severity":"critical","Description":"The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) versions 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via T3 to compromise Oracle WebLogic Server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2018/CVE-2018-2893.yaml"}
|
||||
{"ID":"CVE-2019-18217","Info":{"Name":"ProFTPD \u003c 1.3.6b - Remote Unauthenticated DoS","Severity":"high","Description":"ProFTPD versions before 1.3.6b and various pre-release versions (1.3.7rc before 1.3.7rc2) are vulnerable to remote unauthenticated denial of service. The vulnerability occurs when processing overly long commands, causing an infinite loop in a child process that can crash the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2019/CVE-2019-18217.yaml"}
|
||||
{"ID":"CVE-2019-19492","Info":{"Name":"FreeSWITCH Event Socket - Default Credentials (ClueCon)","Severity":"critical","Description":"FreeSWITCH (1.6.10 through 1.10.1, and any deployment that exposes mod_event_socket with its shipped configuration) ships event_socket.conf.xml with the hard-coded default password \"ClueCon\" (CVE-2019-19492, CWE-798). When the Event Socket Layer (ESL, TCP 8021) is reachable and the default password is unchanged, an unauthenticated remote attacker authenticates with \"ClueCon\" and gains full control of the switch - issuing FreeSWITCH API commands including bgapi system \u003ccmd\u003e for OS command execution. This template connects to the ESL port and confirms the default password is accepted (+OK accepted).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2019/CVE-2019-19492.yaml"}
|
||||
{"ID":"CVE-2019-20176","Info":{"Name":"Pure-FTPd \u003c 1.0.50 - DoS via Resource Exhaustion","Severity":"high","Description":"Pure-FTPd versions prior to 1.0.50 are vulnerable to resource exhaustion leading to denial of service. The vulnerability occurs in the listdir() function when processing crafted LIST commands, causing stack exhaustion that can crash the FTP server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2019/CVE-2019-20176.yaml"}
|
||||
{"ID":"CVE-2019-5544","Info":{"Name":"VMware ESXi SLP - Heap Overflow DoS","Severity":"critical","Description":"OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2019/CVE-2019-5544.yaml"}
|
||||
{"ID":"CVE-2020-0796","Info":{"Name":"Microsoft SMBv3 - Remote Code Execution","Severity":"critical","Description":"A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.\n","Classification":{"CVSSScore":"10"}},"file_path":"network/cves/2020/CVE-2020-0796.yaml"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
e28562f947b0697dc66626626b3e37b3
|
||||
6b887acb1b9217486edbacd08afb9713
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2020-9402
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.23951
|
||||
epss-percentile: 0.97869
|
||||
epss-percentile: 0.97866
|
||||
cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
vendor: djangoproject
|
||||
@@ -54,4 +54,4 @@ http:
|
||||
- "ORA-06512:"
|
||||
- "Request Method:"
|
||||
condition: and
|
||||
# digest: 4a0a0047304502200f1f628d1e50fe03934e44d85a4fe47f1d98e839c1563c29284581f6959a6f5d022100ebf978806b6480e1db4bba9f0d39e8f6e1312a8588b0efa8aa50cbf87d6a34d5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502206cfe5c123a72edbb3541fbffbaa1b347b00d1be6e98f44d7e3674c44eb60bca4022100cdb4f74b134a270de686e355a8b0067896cda0363523d20920f79e56294033e1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2021-35042
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.44369
|
||||
epss-percentile: 0.98782
|
||||
epss-percentile: 0.9878
|
||||
metadata:
|
||||
verified: true
|
||||
fofa-query: body="ProgrammingError" && body="ORDER BY"
|
||||
@@ -66,4 +66,4 @@ http:
|
||||
- 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
|
||||
- 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
|
||||
- "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
|
||||
# digest: 4a0a00473045022100ebff6f96336ff75595de277ffda7a364c6c20a1a8243f04c33c442faeefb775502204d4edcfb6ecca8690fd33fc76e186068961a14505fdcdd8afb58990f707167e9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008f429206737e82864b3072a63f6b5bcbfb8bc2b3c9f02914b3f11edab7692d8f02206b3d426297fadac2729c9a1ad645107db709fafa2d8483c7918d0e789e1f5363:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2022-34265
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.73607
|
||||
epss-percentile: 0.99477
|
||||
epss-percentile: 0.99476
|
||||
tags: sqli,dast,vulhub,cve,cve2022,django,vuln
|
||||
|
||||
variables:
|
||||
@@ -50,4 +50,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 4a0a00473045022100af3613d89f0ee39d1c9f436d0e4a9ddafbfef29cd9e1ed4235cbb90bd341a02c02206d59994138a5dacb71b7efa5e1448e14eced1aa94b976d461fb62155309619e6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008e774e37b28fdaf54256501bac51611b00a034892a0f2179574d9c0fddf4f21602207dfa8905062f51bcaea36497cd4466afa4fe7496127fc73d44d9901bc175d6e7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 6.1
|
||||
cve-id: CVE-2020-24900
|
||||
epss-score: 0.01231
|
||||
epss-percentile: 0.69404
|
||||
epss-percentile: 0.69361
|
||||
cwe-id: CWE-79
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -78,4 +78,4 @@ headless:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- 'BaseURL + path + "?xml=" + payload'
|
||||
# digest: 4b0a0048304602210082d8b45d68d839b00e92ba8e8f2e0c09269fc1ed482891fe9bc3415e24d495d30221009d063fd5604c07c899607be70093534989e7f1cd65d5d6a5985c24df6c33018a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100fb740c37415a9cc4e9157559a5beddb84f9c57c81dddb94756d4bc91dfb19abe02206676517562781f6d9cfdf0932a12bb8c2101b3b9a65857a4995dd66a51cc5ba7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 6.1
|
||||
cve-id: CVE-2020-24901
|
||||
epss-score: 0.05242
|
||||
epss-percentile: 0.92655
|
||||
epss-percentile: 0.92644
|
||||
cwe-id: CWE-79
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -78,4 +78,4 @@ headless:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- 'BaseURL + path + "?plugin[test].url=" + payload'
|
||||
# digest: 4a0a0047304502206929d573b80dd0ed464fd8c8f5c25cdb21bfb593cef849813dd6fc474d17bff202210096d750c6bcf2d2056cc9ac8a0402149333c508eb1a05bd7e5dcc8adecb6716fe:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a4d2a599e8146a5d530ccb32177e642ccfb8b006a31bb53add9c31825624b98702201ac5626cbea1236e694454e363d3638ae33ccaba78e4b42c81909e9a23a6bf60:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2022-29455
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.23678
|
||||
epss-percentile: 0.97849
|
||||
epss-percentile: 0.97846
|
||||
cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -52,4 +52,4 @@ headless:
|
||||
words:
|
||||
- "elementor"
|
||||
case-insensitive: true
|
||||
# digest: 4a0a00473045022100f68c31ec2a375509c6af91670f28ada8e9e8004ebb0714308d10c3b71a2ecd9b0220091fb43ae70e8a922a753badb576be41c86e1435b8d3875b2651b4e7aec356a7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100a8d51667dfec24e3f2d8cdfdec3e19d4b5e162e6c9a09691bd993d17f5ee85cf022100d2f49c608e34bd4f4c46b2b4692eda55694efecafec839dc5e506297a1e2d366:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2024-29882
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.01086
|
||||
epss-percentile: 0.65781
|
||||
epss-percentile: 0.65736
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -50,4 +50,4 @@ headless:
|
||||
- "ConnectSRS</a>"
|
||||
condition: or
|
||||
case-insensitive: true
|
||||
# digest: 490a0046304402202110dd547c030b4a4150890f01b1063d9cd458c77d25ce90eaa67301499ca0ba0220589eae9453eab382420c23327d9783ffba2e683ce890d599c37c65a710538df9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022020b09e2c9e50d03c7f4707bcc74e0515c3d3df2ac2abe2d61becfa74f81ec8ed022100a60ae585856b2f3044a5e6469b4699f4e8566e41bcc9f1c196f29070f8b248f8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cvss-score: 7.2
|
||||
cve-id: CVE-2024-38526
|
||||
epss-score: 0.03832
|
||||
epss-percentile: 0.90263
|
||||
epss-percentile: 0.90247
|
||||
tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
|
||||
headless:
|
||||
- steps:
|
||||
@@ -60,4 +60,4 @@ headless:
|
||||
- "union.macoms.la"
|
||||
- "newcrbpc.com"
|
||||
part: urls
|
||||
# digest: 4b0a0048304602210098c367d4a00ba115d54d355d5c2d9d7e26e2d21d7d31650f23be940c029fdc7a022100ce72863bdd9d45b18b07e9bf89840a54d826d5440a623b4935abf5fa04b3299e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f2e7edcda1b691e3f09eadd24ad208ae9ec890414eaec2ccfc2c4dc784d2e05d022033180848810b139e9714c645491559fe1e2cb95a7d493ab3194536fc8abe5309:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
- https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
|
||||
classification:
|
||||
epss-score: 0.01257
|
||||
epss-percentile: 0.70017
|
||||
epss-percentile: 0.69977
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -46,4 +46,4 @@ headless:
|
||||
words:
|
||||
- "{{random_int}}"
|
||||
case-insensitive: true
|
||||
# digest: 4b0a00483046022100f8a9eed7926d02e44ba7c9fee09c2038233c26e182aba27ff78d48ca0d7abfc502210085af19f6ea61fd0d7024bf4983ed2a2ec98a1ca3623911c3ef387a717034f450:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203120b86951bd7d4720adcd353194b622e237ff2134b599eb7fce9be3aba267dd02210099c4d298f5bbb68bf67f423ad80591c8a95274e72726c1165afe48739ea99d6d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2025-25062
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.01736
|
||||
epss-percentile: 0.78043
|
||||
epss-percentile: 0.78012
|
||||
cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 7
|
||||
@@ -190,4 +190,4 @@ headless:
|
||||
dsl:
|
||||
- reflected_text_xss_type
|
||||
- reflected_text_xss_message
|
||||
# digest: 4b0a00483046022100c63f37fc43718f2905255187087aa185b5dd7e404feb19a6b5deb2b994187b04022100ccdc8670b6de234d32b3286b5a0df63738a495c7586ef6b319e18878289a3554:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220446577c6514ba76ae4b7ae97d7574a6206b0aa0003fc22886b7c2125e8298d91022100df96c0bf35a932a057a3ae70d521d4f976edf06c8cb0ee50b0b90bf59aed4718:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2025-8191
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.01821
|
||||
epss-percentile: 0.79086
|
||||
epss-percentile: 0.79057
|
||||
cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -69,4 +69,4 @@ headless:
|
||||
words:
|
||||
- "swagger"
|
||||
case-insensitive: true
|
||||
# digest: 490a00463044022070596afcb40e1d5ae588e935d42ef2ea647cb6cff6f8d8614769371c104b53f502202e1faac4ff170cf8d41cef214f1dcbcf9ad8a073f425db0bd5f4e31a14622967:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502210084f72e03a3a5de02fff4d6ec8a033b0da11e95f9a0c8d2fa767162d7c5ef410b0220389ea361f83263bea9d02f6ea882645f64c9b722247c65f870284d97e58dbd50:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cvss-score: 5.3
|
||||
cve-id: CVE-2000-0114
|
||||
epss-score: 0.47595
|
||||
epss-percentile: 0.98865
|
||||
epss-percentile: 0.98864
|
||||
cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
group: 1
|
||||
regex:
|
||||
- 'version:([0-9.]+)'
|
||||
# digest: 4a0a004730450220356ff9c66c59730df1f9ea72a0f4e10582ac481aad7ca6af2dfd471395a2b0a4022100faf40da47ecd556eb026c44492c69d4c141d6d6fa0b3748c4e1d76046d6470b4:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a12786ae6e457ff5bf5800557cbe8cca6f4f1f238f120b84db6fcf0d0535278102203082673de8e75be28821c35599201db49db34ad7fb12870064480367a34ee3e6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 6.4
|
||||
cve-id: CVE-2000-0760
|
||||
epss-score: 0.62496
|
||||
epss-percentile: 0.99203
|
||||
epss-percentile: 0.99201
|
||||
cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -55,4 +55,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221009c82f22cfe50ff82ffc223df37dca4bb66e84d5ffa76b92d75dcff1be261abd7022100d4bcf253a69d65a341d2711565464ddc2d3a0c76561155790a810f1c2b1a935b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100bc540d8e0b2d3eade20eb3c40435390b2f516716e5513104c424821b48fe5bde022033fdf9d5c3892bd163c6a0ae445c5477c0a5b3af7de6ad52d37e6423dc8154c9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2002-1131
|
||||
cwe-id: CWE-80
|
||||
epss-score: 0.25754
|
||||
epss-percentile: 0.97999
|
||||
epss-percentile: 0.97997
|
||||
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 5
|
||||
@@ -52,4 +52,4 @@ http:
|
||||
- 'contains(content_type, "text/html")'
|
||||
- 'status_code == 200'
|
||||
condition: and
|
||||
# digest: 4b0a00483046022100e4db791164f9f8de7f967562a3ad42e380fd0740a223ba374b887c0b53859fb1022100a55e35e2905bdc13ff18f123c7426c59a39818b8d488eccaa77900a3453d20e3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100cb725f100cbf2f732431214a874175ffb438e63a68c3506efcb4f7c8ba9b2c24022100936da238eb69fe1b620cd423a5fb77616f6cdeb5c8de80c8fb2b7428b854a0c4:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2004-0519
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.22528
|
||||
epss-percentile: 0.9774
|
||||
epss-percentile: 0.97737
|
||||
cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a0048304602210087049018f9722304f96bbee8b537bc9f5e9e195bdaf30b650a716538ebf9bb7c0221009f8f1cb7001d3be43c99e5ff1e2a6b8e2919801427322bad023cfaaee013e27e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221009523a3886704d273862299438072cf9bbef6fb9dc9b66feb5fb83e1507be00ca02207421aed7ba940935e29592c941d8e9964962d5b940b94a403f803642b1d6413b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2004-1965
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.09001
|
||||
epss-percentile: 0.95348
|
||||
epss-percentile: 0.95342
|
||||
cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 4a0a00473045022047a681682e53114c2da633a8bcf7e0548abbd87e5c0590f523868089894a935c022100b3a06f9bca504f412d7ec68270adb764642ef8baeeb9e1c026ab75ecb74daf15:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100fcb0fc4bc9ef3f7a98cfe281175809a6ca6fe8eecbedbf929ab6627f20fa4c1c022100bf386224661a96f01f90bcc3791fe7ae1914367b65c123cf6b8727856982ecc7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2005-2428
|
||||
cwe-id: CWE-200
|
||||
epss-score: 0.73028
|
||||
epss-percentile: 0.99463
|
||||
epss-percentile: 0.99462
|
||||
cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022054b4a87fdb2db514a7027244035a2aa68ea3b3a6a19d350d0bf1f0a721799654022100e2d45ff4ea6dc8b9e6bd470e351b8fde037cf3596ebd7efda463d8236077efd8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100940c41d75089666a64bdd311f9d85a6d0bb0893b31028cfcf88be645f250a06d022100b12f6c32291a38880b63eaa3b5e180147607aa7d3c9d13f870f2b22c68961a69:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 5.4
|
||||
cve-id: CVE-2005-3128
|
||||
epss-score: 0.03436
|
||||
epss-percentile: 0.89151
|
||||
epss-percentile: 0.89133
|
||||
cwe-id: CWE-80
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
part: header
|
||||
words:
|
||||
- "text/html"
|
||||
# digest: 4a0a00473045022100cabaee0f5d50cdec624464a6660f9902f4d5417b3773ae2e217efee115000b25022071a25bdc5de54ae8f45325bc006cb4eef863582266de40eb2cb3b60d51975f95:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207518dbec23129ccb10344defb223032d5abc3737ac8c257f2886e102365cfd65022100ba86a75098e6e4941a57dbacdea01e1d359e9f24ec33a98025e0f68c520cc637:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2005-3344
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.07986
|
||||
epss-percentile: 0.94843
|
||||
epss-percentile: 0.94836
|
||||
cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502200d33c4c86a8ca80a9f9198ba2b8d94f11698b9449e82aa9b2df355ff1a60542f022100c8d38d8138b543080d7249274dbd949e002145240490b749a4d5f3df189306ee:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022000fd1a17ab556c0a43239926a1e90594ae204ebbb243a4fca14db02e7f4e7ffd022100bb76e0a31bd1bd726cf3a37445acc0cc6a00f9f4353e61982bcb6679fd79d9e6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,7 +23,7 @@ info:
|
||||
cve-id: CVE-2005-3634
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.17757
|
||||
epss-percentile: 0.97208
|
||||
epss-percentile: 0.97204
|
||||
cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 4b0a00483046022100981901cb21e348dafa901b0362b329e0b49cfe627c19f0bb755afbffefed9743022100ad9e3f23292eaf8968e02cc076f8437b9d093e57c216e8b43af1cfa891b65ea8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008c18290bc5336e6bddd011c3e1b535615ba1db2e5e682ae9c4cbe2d2d83eee3102206d5a6d2f62ce7a3c00ab46767146d5d347872b040704db2ef54bd6e3aeb85399:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2005-4385
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.08836
|
||||
epss-percentile: 0.95274
|
||||
epss-percentile: 0.95267
|
||||
cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100fc7ba7ee6ef92b4afb358308b73e0daa616209ebb6cef3bd95a74dec69ce3426022100ed3ccf81629a468e44abf9a049fcb5de488dde69a814de1cde0ae8263dfd4586:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100d1f81be518e2d0d7e254227eef66d7a8630a23594e8faa7f56c1310e29f3872202207477a072e7dbab86b04922916f642d069454fe5258abb814633f62f0c81c6d34:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2006-1681
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.06798
|
||||
epss-percentile: 0.94099
|
||||
epss-percentile: 0.94092
|
||||
cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221009bbc4284fec544493ee2961ccb8b57803fd739554a5e0145a24e28ab3eb26621022073965b2da4475f27dd2d1c2ef6aa2abb2bd0b9e849d501f93a95dd9e28dd746b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022046a189f8b7daa4c3d20ba35467860aae68fe2816c9dc624ad6b1fdab3dc25b2b0221008c627e851e87a8fd3651666419da496c4d84d6e4c236573641647ab7581c9fc8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2007-0885
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.05966
|
||||
epss-percentile: 0.93404
|
||||
epss-percentile: 0.93393
|
||||
cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -46,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100fec7e3f67cd351e3e78a036433a3244a9f89a5aa1cab1505ed91183c53d75ad4022100f9c67ad797482f223f2c4d6d6a85560736af145c06d07ec7b36495604b4e8839:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f8000a73ac8f5927d2aab0928e19209930631f39c8a543d139d85053a007702102203b03619f686bf8eec2649cf0cb170abe7ed17efe164582bf5bb1dff5b6f916e1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2007-4504
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.09491
|
||||
epss-percentile: 0.95514
|
||||
epss-percentile: 0.95508
|
||||
cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402201da132422eb6decb63a985006784a3f351df9ec96090e4a5da9027bcac20d84c02201ccfd88256fbd70fecf9473a1a0fd0cb033ee23522ac625ea1fdf0df188388d9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008067a40f60184c33283beb5a83834645e1aa96f32a6d6610a7667ee7bad3acfd02204ca1620924f8e80079d197d53efcc8bc6cadf8131a27d33f01cdb129859fa239:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2007-4556
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.25749
|
||||
epss-percentile: 0.97998
|
||||
epss-percentile: 0.97996
|
||||
cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100f8c7c5f21ccc307c9d0ee0836d4594d755d6410bb156bdd25695915900bb0d3f022065e38f158e3308ae05c8f41936baf4d576837b2535bfaa501576ed5b7454c029:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402204bcb4a1f99c67c52b75f1d6c4c9fc3f129407e29e6479cc516fef3680e5d17a90220590f723a6c10deff0f25bf55a42445da1c2d3d4b81fefe74420ea8e292ae0f7b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2007-5728
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.14639
|
||||
epss-percentile: 0.96711
|
||||
epss-percentile: 0.96706
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -57,4 +57,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502210088e36141684d5b65ba3c7daa3d26e590e78064154b59d0aa3e3207385bc0b0330220775e9fbff2cdb911954b7b674e64672a501233b3fd2ec881d1b1f6cc2b6d98e6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502200b1113538e8f22e03b30a3f49a37cbaf83063ee39c58130c5fd595c4b86f4e74022100c985d86b7c8b62f03e0d7257d1590610c2d18b99e6f5f965848d7793d803f84a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-1061
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.074
|
||||
epss-percentile: 0.94524
|
||||
epss-percentile: 0.94516
|
||||
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402204bf833ee7969e86fd56a961c986d4f7c1ecbddbc0630ba64415e4f2f0b94dc5f02204f49f01de82dacdcfe73df3a24909f3caeded190e125ec3a55e2f99ce3948ba3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100b02e1ed3171ac9a5687b072d4146c408733b4dfe718325331d34b13196051d4c02200eda7f0a1e6cdfdecd3bb475577210a22a5bb1d36a3b810accb3471b74fa6a9b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-1547
|
||||
cwe-id: CWE-601
|
||||
epss-score: 0.48137
|
||||
epss-percentile: 0.98879
|
||||
epss-percentile: 0.98877
|
||||
cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4b0a00483046022100b34403455c25e4e07076f12110105a38580b8dd0d0a411477e73ecd0ccb32965022100cd417b309eaf26d75779f78bd7cc418c432a4d51bc0b6d8358aa9584e8681854:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220216569aa3561df7b30eaa83c99ce7f80b742152e61c1d05b98b2add03938f7b2022048001c21855ace6e3f3ed1e19ded7cd743d9cdce40d11fd083117ec4805a8480:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cvss-score: 6.1
|
||||
cve-id: CVE-2008-2052
|
||||
epss-score: 0.01568
|
||||
epss-percentile: 0.75734
|
||||
epss-percentile: 0.75698
|
||||
cwe-id: CWE-601
|
||||
cpe: cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -65,4 +65,4 @@ http:
|
||||
status:
|
||||
- 302
|
||||
- 301
|
||||
# digest: 490a004630440220778e507abcec8ccdfa438f6eb9bd3e2eb773c9916355c0d673ef6a6feb2a6353022057721b588e7b2b27877f6317677deffb09d8ce354607570dfb7d35fca0b1cfc1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502204a239c91fdb6a47c0f44ec369477e4df95d019dc33edd91b122b2e96d6483214022100a7c2c8e85fbf416bc4c028a492c12fb8660f0b5a02f12c96dc9bda6465ebac75:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2008-2398
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.06232
|
||||
epss-percentile: 0.93647
|
||||
epss-percentile: 0.93637
|
||||
cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450220252b2bf17f5e77e3cbaade475fbd3b7b99895fea4ece96dac5df0bfcc967b909022100e1828d8ac86264f834d65664791391e44a598dbe897bf71bc9103caadf92c70a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502201bbab04e40fcb793c19c1fe4a454e8d586d85f552754d6b4293738eaba252d87022100dafc2595d6f4d5bc0c247fd7f8f564ffb7fac514248fb448dbde17922c545669:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-2650
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.18809
|
||||
epss-percentile: 0.97327
|
||||
epss-percentile: 0.97322
|
||||
cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022040c40d82721c9e35a7d348580c3fc9a2e7c5c962d1d286d289aed277874011d10220248ebc87fb355d4aa9a100c6b813b33350dd5c80c075c7ed03946c1975310ee6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a004830460221008a9e43af8b0931732d4f1062a6a7955118c934d0d9b8ca30ea1059dada844c69022100c7abd5b891c14a37b0b8bdd37ab9042b41af2faf5163bf3b07f89c4610054d83:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2008-4668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.21476
|
||||
epss-percentile: 0.97652
|
||||
epss-percentile: 0.97649
|
||||
cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450220085cf95d10598b755e63d89ab7848500fcf26bd96b3cbf7696c2c25db568de00022100cf11e9cb7fb845a5e3a98ad6f644b72b5fffca57e8a30b651c97dcd1aa5ede8c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402201742541cc78f1e590f2e3e9c818494638b74dc9c4d9f8c1b0070386f5780b075022069de2fc2333f12bb067c252770bfbe7de503c87f279c4f8c82dffc805eda9671:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-4764
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.16505
|
||||
epss-percentile: 0.97041
|
||||
epss-percentile: 0.97036
|
||||
cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022001b591986f7e7312d7dc72ca74191d99e034c9c2c3f5e131856af27dae537fc5022100a3e54284f929b4f7deaca2ab6256259bcd3e6c4c4aa69455426013ebb828e040:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022070b645d112746a1be125bdea8022d9598c91e99aae0f2e725552f054fb0f6638022100a6e186c0647fc4a006fbf9bbec7ede8dd0da52ebafdd26189d12053a5a3dc129:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2008-5587
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.12865
|
||||
epss-percentile: 0.96361
|
||||
epss-percentile: 0.96355
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -49,4 +49,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022043a4483b423715d87338047b5af7fdfbf12d65f5ccef19669ca759ea952fbf150220442a063a4677aba8460f48e45233750c0ed1838181b9bf8358e6f9ac121e0a0c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220069dd877b91f3651725ef7fc21b6b65c4d89cdcbd6ea7b9c19d99fb68681405e02210089f1a614c956453d732585cb6fe9059e389fc98cc9acc4be09544abd54f73d82:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-6080
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.10637
|
||||
epss-percentile: 0.95865
|
||||
epss-percentile: 0.9586
|
||||
cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502210099df6825ad8aebeec71b2e67c3dabd7db32e7a0284a861a01c884052be794246022031591ce5855f1be623a3af2694c85ba91af0e4983ef404629e3bc6129c4171b2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402205bcdf5939530d6d070790289c6e4a0bf0b15356eaf13397aef246a7c6018cb240220025d23399c724de977a58a0ea631b1e004dfe5971a84b592e4aa503f55429b6d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-6172
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.12284
|
||||
epss-percentile: 0.96249
|
||||
epss-percentile: 0.96244
|
||||
cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502202f73cab1b77fda6693c2076e7e1aef829832ccdd08fd590691300ba4317b7e23022100ca52c119b21a16692517bbca5fe454a6562e4087a83a35e4d259c965e0fade56:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100bdea031317148a5680f8ca6a7775db77c52ddf2c1868b330f459c74c2d01f2fe0221009bfddf9ffd8dc50bf04e1838533f06aae23f51697dbf22eb66c00765b9caaa41:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-6222
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.11497
|
||||
epss-percentile: 0.96084
|
||||
epss-percentile: 0.96079
|
||||
cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402207cfa92a657b8cedc1cac106f9728e0103f9c8129c5f77168f9b0aded1b25a35502206e2b63c54533571df7ffcc8efdc60818e68f970b63d0376478240a861582352d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100aea827efebff041ad61b705bbdc70b8db5fd1e023f5ba390fadeed268236955802207c504e72675949e6cff77cac3d9f655b28b1f88de02068c0a87b6e9d2c83b68b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-6465
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.05114
|
||||
epss-percentile: 0.92506
|
||||
epss-percentile: 0.92494
|
||||
cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -63,4 +63,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100fc1a5f856d807262eb6af202a9264a058dacecde0177b6fd598abde1d49da0ad0221008c3d9b0dd795baecb0db840f54f653bdc9d391713267a7a698716452d62efd78:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022026bef1c15568f440d26f32f71ed20a53a0d06823d17247313194c2cc270029360220681a8b5328376e956fd5d7707210a8d011cda4e0c872c8990196e1e10e33dad5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2008-6668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.14041
|
||||
epss-percentile: 0.96614
|
||||
epss-percentile: 0.9661
|
||||
cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100b15c37d43f3a166d76ba77e4c56c00f6b44661630bf8a912cab8e531dc96eeed022100ae74347afbe50a7c715e5d191967ad111d8ca0897800c2acadb82b60ddb577e4:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e36500e136c54c0a7f09097794fae7fd3e1a73152f51a94e2a1d8dd31d92fd35022100b43f23f2d19ed165655fafa761f3cd4cc750bad9238759626a6887ca28d5658e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-6982
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.05782
|
||||
epss-percentile: 0.93212
|
||||
epss-percentile: 0.93201
|
||||
cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 4b0a00483046022100e709c339a8d320427e527fcf46656310d627ffa6bec6180b7bd5eeca4c3ecd6f02210095efe3b97bbdbdf6ad507e7a68a9915ed169cc9a5eced68f5b29d579b4b5251a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402202072e6061f60b6f41064c19462c91acfdc2383b7084ee1db92d1e9d5ca8e9fda02205cb348663c1baf0dbe1136f3b5ed381f23448bf132b3ec0b4d5938cbe2321ed3:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-7269
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.08234
|
||||
epss-percentile: 0.9498
|
||||
epss-percentile: 0.94972
|
||||
cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: "true"
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4a0a00473045022044625ba746a81101a68e53b7b002469ea1e7f58050ce30f6e0423a5e29ee34cb022100fc3160e2e76942e91b919f5c8c27e4b5c589d981246f8614897d0e5568784278:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022018be2802d56eadac472dd8c1f5f08ade49fb1a8fbe5168743a8a0c13d7ae5967022057e528a37a6661dc93be006a08f7b2ad4f101ef109866b960cc6735553126064:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2009-0347
|
||||
cwe-id: CWE-59
|
||||
epss-score: 0.10932
|
||||
epss-percentile: 0.95949
|
||||
epss-percentile: 0.95945
|
||||
cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4a0a004730450221008ec510ea475fa73d7e9e22915ffbde5777f8278a390b49569cbb7b9fd28dde76022023a2781944ae9aefdd7ef1cca1f96917d3c92369d2d3915e829bf8130130cb53:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221009adcf7e9aed32d568d981b33a948ce08cd71ba6ee53bbe9548a638a826c56218022079b0ea34b02fdf225e4c34c2defcf2dcbe1cb5b3363102377da82335a17938b2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-0545
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.90386
|
||||
epss-percentile: 0.99804
|
||||
epss-percentile: 0.99802
|
||||
cpe: cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
part: body
|
||||
regex:
|
||||
- "root:.*:0:0:"
|
||||
# digest: 490a0046304402204d185d19d351ddc105387a00feda18de548e9a84479795083a34509e508198250220479ce35f49ebcc4fb3c5238f6b8d7fa5af338631caa166002236d61fd78950ed:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100d97eee2f0e469d0fe2aded98255c4fa50a5038873110b1dea9c068629eeaa147022100c71c64e212eb0783bc0ccff46b43a321581ad1bfddebd62721d7de5c35e5f338:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-0932
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.47871
|
||||
epss-percentile: 0.98873
|
||||
epss-percentile: 0.98871
|
||||
cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221008046e4da27bf2682d404728b5784a1fc35013152da743e170a80e4f089e60823022100865afaa1ab4b1deb99586021b0ff49b91231b079f70825245aa75fa59483dd50:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100fed7eca0e4ede00086e2c9d7cfd6a1856f704fa0362f7dad6334662cb048e2fb022100a36264b1f1e31cc644a6b2962882bedbaddfcc80d7aab403fcc60af91698f5f9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2009-1496
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07183
|
||||
epss-percentile: 0.94394
|
||||
epss-percentile: 0.94387
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402201229a47a7fdd90eef993ba9f19dfdf22439ec9701d2b486e72771fe7de861f1d0220705a9af9d30ad367ba6dba726a5c51220c1b1913fc152bbb52705d35787a691a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008b781be5710f418e728639b5649fd8ea53c7d351fdbcfb2f00957f501378c6c1022018fc86a008d43638fd927d922c4d430f6ab5125ca3f4d7bcc532c2f81119e17a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-1558
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.29821
|
||||
epss-percentile: 0.98229
|
||||
epss-percentile: 0.98227
|
||||
cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022037f816a60a930eff6821f573af64bc4dc7f1bc47225c692441c5478632501e52022100c30b9d1a676a903eaa6a7d3fc64c3b2eac6d8d680f5471ef79677f19ea771a5a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100c830e6277695b4668a357b8d5f81d270cb317fab23178ba6f496d4c0e9a1f27e02202fdab6c934e774dc3bd7be14a03d1099b140c41899eaad41d51239cc81146531:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-1872
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.16083
|
||||
epss-percentile: 0.96972
|
||||
epss-percentile: 0.96967
|
||||
cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -65,4 +65,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100bcc6038b99f1e801a2c01d323b83f1bedaa225d97371e55c0e81e9c4a988ac0d022071c7d02b18c554148a4fd9540908e083ef26d83e4b02578e0c067387d348af7b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220013f5faa8c51b12a176912fe631eebb24593ab01189a14aaeb0eeb568e09fdbc022100cdd281273330e53801d15d2cde24c3c0cdb5b0f7c9650049278984986d5e794c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2009-2015
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06507
|
||||
epss-percentile: 0.93873
|
||||
epss-percentile: 0.93865
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221009f96b78fba6b43407dde94a6bf291329530b6aa988694777000c281bf1800d25022077f1d0bee9a6fdd33d73c5226dfeae14813ed39112f0642f2a421296280147eb:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203be86514e6262afdd4c844ed7b242ff753f2940c6824fe8b2cd115c95c4d5066022100bdc254904f2d864af83b8b37e45021fe321432a00912c6d2aecac0731ff3fc70:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2009-2100
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.08229
|
||||
epss-percentile: 0.94977
|
||||
epss-percentile: 0.94969
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100d1eb82191cebf7d926940a6d5ce102fb79547407198a7cc7f1a4a266d6faed8c02206b3ceff52981915b3a15c1946d7e05bbe363918ba3c35584118f046e31b1112c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202f88ed70e941a679394a64a055110eaec034d4e1fd048f31b02f973a80a4b578022100a627f8283b7df9d17923d0442ebaf4d1340a6a8b669ea37f3efbff20425a0a90:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-3053
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05925
|
||||
epss-percentile: 0.93364
|
||||
epss-percentile: 0.93353
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a0048304602210090dabef39adccdea83a5c687ae9fb0dccf6865fcd6f2112c36696d0d4974310f022100873f0c01d61cad2a924fd0c42e85b9e2520ebfc6d3c4083ccb3befa086804654:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202714f46fb8a95f00cfb27e1e6db6b93a38d1c41638487dbb2a4c477ac84485c5022100ac93bde51fd2dbec3cb74b8fc49c56075710a4e9a62f39634e2917b276b4a802:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2009-3318
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06455
|
||||
epss-percentile: 0.93835
|
||||
epss-percentile: 0.93825
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220649d96b09e9181e5743c98bb03877139bb4968a0d6ed317d4fe82387e910d201022029bffa54f661c4baac2bda9f6659ef063da92da2a752a8529496cd3daba00590:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220268c959146d4fd672db43a5bf0f7c3e24785743f089af37e1fd9fb26512ef0f3022100875b706e70fc5a044298b8a6bf26e9f3c982fa3b1fd48e080d85fa6c1f9667b2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-4202
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.08109
|
||||
epss-percentile: 0.94913
|
||||
epss-percentile: 0.94905
|
||||
cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c573758cca663b7fe1b2102b597d939f06714b17bc381b3dcd6f35686fe2459e022100f4b384e9c0c0b328c10c28858479eb6c783375a2fb498339fe56fde82f67624e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022049f4d6183dca54f37f75d9d71ff12fe2582d9dceb5a635f5ddce87a3cbffeff50221009bb7808d1659c4e0abf6983508eae00e04462f67ed3d1edf5b33a16aabe8d544:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-4679
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07866
|
||||
epss-percentile: 0.94784
|
||||
epss-percentile: 0.94777
|
||||
cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502207ef5acb439e0be603b8869f61a7931eca77457452e9ca541f65432bd2746a39e022100ca6b79edc50f3a9ec7f7b9ac1bd4e87d36958089abd90e9451ce31cea31a9338:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022067b3dc804d6e15bcbaf39fc6106009068a16dfeddcd5d2032954eea640c1b4090220070e643536d3ec14c17f9e81b2bf103b67148aa3d2ea5dd03dc17f6e497c5aca:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2009-5020
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.03488
|
||||
epss-percentile: 0.89316
|
||||
epss-percentile: 0.89298
|
||||
cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
|
||||
# digest: 4b0a004830460221009f925055e916c7fc2d65a6f7b2b7c900a60531ebeafef6b28ad92a9fa8d78843022100e6eadcffa71c124a3c35133e84fcb863a29522fc83aa3789331d6dcf862eafd3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f9d53a3dc42c10d386d655b639792bbbd57af0bc6b9832b6259faf19df43e9ab022100869947dbc5f02a64a54c0c8b5e67623fb6b6dc7807920d8bb289a61c2f218418:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2009-5114
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.11707
|
||||
epss-percentile: 0.96132
|
||||
epss-percentile: 0.96127
|
||||
cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402205500cb0c8af3d495d0b6de429e3918d5317867997bfa9cb53b60c6c2d503d5ec0220202191e2222ef224c0477cb3b025374cc74da97e403ecdb5ba7886b02f371124:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a004830460221008daf6800203f6c3bc1cd22ec0e175fe9820899f74886ed851b3930a166953d610221009486f9388debe69452bc3f4aa5af1fa360ca82cfb3bd3baa12d004e74167ee83:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-0157
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.12969
|
||||
epss-percentile: 0.96386
|
||||
epss-percentile: 0.96381
|
||||
cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -46,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100d06b48ae89cd672223de25c80869c9ef920319db7423dc0d5a8374b04fce032602206a29a839329f21d5acb1b629c7b86e683eeece35ffe502b8702a242fa0c9389a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502205b307f90e1702a93eef20c296153b49e5e440fc3d4b74e19115f09eea2d6055f0221008a32d82af7621c76194be2956c3596f34aba8db9e4f82cbda1f0bca47ee73c7f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0467
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.43296
|
||||
epss-percentile: 0.98747
|
||||
epss-percentile: 0.98745
|
||||
cpe: cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100dbeb4bed5805c198b4d447f59a34c9db554c5405eb502044834b18f6909efde2022005090ec6560c5928ae6013a6e9804ef5fe0adb3d8a0e58dcc4081cadbf501ae8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008596bb27efa6201697389f03a40c4e730109eab4ee0d2b9fb71c39c6bb32e05102205954e473b2370176df76c48eeddd1e0611302b1438fb75e90884d0b3a753015b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0696
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.28222
|
||||
epss-percentile: 0.98143
|
||||
epss-percentile: 0.98141
|
||||
cpe: cpe:2.3:a:joomlaworks:jw_allvideos:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402207dab6c4bfb25d8d7b1b9d50c0a93f9a6261e7dae47f1a991bde1acfa9b86292202200914324ae08c1cb0169284e83a5a7f2d77821f26fd822741fc2bcf5f4e509121:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100db64a9ad31262aa9da4f19f9d9d9b472182c85a96aeb0827ed3fec410fcace06022100c90a0d7fd24427161888e00e7b7d92d0b6b06dfea9962387e89ca586e319f516:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0759
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.15242
|
||||
epss-percentile: 0.96813
|
||||
epss-percentile: 0.96808
|
||||
cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022043ba5efa767a0004de30c8d68a1c18ade5690cc84e7b54da0d8c547f6b8d7e03022100d7fbb31c2637201bc07842e4842a44136439e588d594c35cfeb2e6f0d37f2df8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402202dd61a9c8b56812e347ebfd3461cdad2b2a6ecfa6653a5384d943f777f516dda02204ac16b2c4b11fa25437d0a4ebd07e6a1180c0e3b0081057ac238cd03ab9c8957:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0942
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0724
|
||||
epss-percentile: 0.94423
|
||||
epss-percentile: 0.94416
|
||||
cpe: cpe:2.3:a:jvideodirect:com_jvideodirect:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100af5834fe63dea0d37df64723ba0cfdb0447393de4f0bea580fd358fce7084c70022100800d6302bbe3ac0326d5f9860081797b0c6d1fd149664b6cbb9db8b8dcfb56f1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022014dd72a29f0d07e234953c769a656a5f9e410ea41df9db907a17f41f1e299eb80221009877a2e7e5e3f2ccb020be8478605dbb5628532fe864524bcceab8816cc5c6e5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0943
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.15936
|
||||
epss-percentile: 0.96948
|
||||
epss-percentile: 0.96943
|
||||
cpe: cpe:2.3:a:joomlart:com_jashowcase:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100c29be37aff26c761724d71fdfeee92b868d77475eb4224258e6ac09a31fe95f0022045dd5ab07be05c821b8c2df882b8ab73dc8fe89e1efc2e4c1ecdf35efe283e05:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a0048304602210096258ca40ef39d92978a65cd155fe2cfb6e51656589109f537d1dfec9a552ad3022100fab0b8d6b106fd241ca56cd28c9c011cf97823ed0238d738e8cccfe96bfc904a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0944
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.14041
|
||||
epss-percentile: 0.96614
|
||||
epss-percentile: 0.9661
|
||||
cpe: cpe:2.3:a:thorsten_riess:com_jcollection:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c1eb10b25d749648c18f3a296cc6c17d9873b7847ccd5786a59c9f8adf5901ec0221009d99e945c07611254cf849c07e02876fc9fcfb3b3578c7d61130287d0c2308bb:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008d4e2be848443a33bced925255cd59fbe73647f3e4212937ecc1624de28d85b0022027d62dd5a06772f3792b728eb4fde08b1aae88dc98b741519276bd6b29bf7121:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0972
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.13504
|
||||
epss-percentile: 0.96502
|
||||
epss-percentile: 0.96497
|
||||
cpe: cpe:2.3:a:g4j.laoneo:com_gcalendar:2.1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100be6e195ced0aa2de30162f5ff9505fd1038b21a69439270daa27d883211c38b3022042ffb36e7a804c31b54fdd2bfe7aead8e5a44636e3117febb1af726c75fb45fd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502210098615d7f2a3696b357dc03fd79698c0ca41fece660f92a722c92c50542bb2f210220513da4242c13566f8ebb00d0843e7724087a46b22ea3d3d19e9435cfd4387350:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cve-id: CVE-2010-0982
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06829
|
||||
epss-percentile: 0.94118
|
||||
epss-percentile: 0.94111
|
||||
cpe: cpe:2.3:a:joomlamo:com_cartweberp:1.56.75:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402204da52a8003613a8dca6a5daade56e69162cee5da9f832476d2f70b80c3f9980802200ae85c8042ba357910575ee210b0ebaa0ef12d4e26250013060d67027dbfd5fd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022056bbd5624009cf1ec4175134ef0a41731e636289419ff91a71223cf5d860234b0220119eeacfc1d3e2c611591dd73d936d8a0b76f43af1f0dbf2f5e42e23990327c7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0985
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.13339
|
||||
epss-percentile: 0.96464
|
||||
epss-percentile: 0.96459
|
||||
cpe: cpe:2.3:a:chris_simon:com_abbrev:1.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402207ef7cec722b9d09be6222a6eea89080ba72ff0641138aed571b988febea736ea022026179797747333cce98d14b1fb2a4000481cdbe5b29c5c74719bd47597a54cd3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022046e03bf708e0f5b4d807e31d0c3df68fdd5c057897f7bb61b149dafb636e148502210085000471343224229a5f6a54c4fd480557077879ef2de250fbe2789da3bceaee:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1056
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.11414
|
||||
epss-percentile: 0.96064
|
||||
epss-percentile: 0.9606
|
||||
cpe: cpe:2.3:a:rockettheme:com_rokdownloads:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c3e5f14fec32c79b043548894aae77d71a8198e7a6ffb57d599e2182a2680cd7022100b132f5bf5f2b25c60779d6357cd0e931200de38efdaff8a61b08f2bc53bf9597:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f3ded9ce762a33f255e9219a5369f1572c4ce90ba18ae6d5854221a421fc569d02201832a5df22d64ae05e2de1f0286ff05e47933e4f45689f603217aa8d3b449ac2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1081
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.14597
|
||||
epss-percentile: 0.96703
|
||||
epss-percentile: 0.96699
|
||||
cpe: cpe:2.3:a:corejoomla:com_communitypolls:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450220725e4f6c4ae39068dd47657976b867b4575816e810b0f882a2881e6b70daf0b0022100a6554ff567cb8e6eb6526658981435f8079cf07fba63b23800a5d072261a17a0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220026d998202d45b3c91de12ad39b525f97a0fb8a8677606d163c9cb6213a06e4a02210096e88ac6b23d69443aa594bdc7232bcf854970e41c8b75396e0bf79c0205c1f5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1217
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06377
|
||||
epss-percentile: 0.93764
|
||||
epss-percentile: 0.93755
|
||||
cpe: cpe:2.3:a:je_form_creator:je_form_creator:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022040b7debf552a3b6de067e8c02c02e9a4955dedd776574511792fa0a0de8ac28d022100e8b7b487aca94f8a1d85c7bcd6dab22ddd3630a8a3907977c42b585e09f67703:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022020ef009d157a8095d2e62e1432813929fd5c5806d2ede110fe8641ca7867c0d4022100e827a9e9355b803c8667bf900d4df712f1b730d048686b22083cdfbafef62012:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1219
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.082
|
||||
epss-percentile: 0.94961
|
||||
epss-percentile: 0.94954
|
||||
cpe: cpe:2.3:a:com_janews:com_janews:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022032a3eb60e83a83b359f0a7a380b98c3eaa78a6c2af57e7a0b4981abbc2b4125a022073e00f273e50c0f9b971ee4e36bf5019e84c5483061e33b964ff0584a5b95cec:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502204840639335d11303f5995b2ddaf6dbf68ee53c0be76b19466599e5b7132061b1022100b4d800c20914a827927a0b3958864471e54301b9381bf16691222cd968848b40:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2010-1302
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.08483
|
||||
epss-percentile: 0.9511
|
||||
epss-percentile: 0.95102
|
||||
cpe: cpe:2.3:a:decryptweb:com_dwgraphs:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100db91a812dc9c96f2cf2055ac10204666d9f1a4ea5ed7add1d150fa1e589b88f9022004abc6fb3dbcf49a49e91f3370b3b5865bc54ef522a8fcdd4e225dc58ac153ea:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100c1083d2ba97eb58dc8ac2fe0c0b95d30bc3f3204687997107364519edbf2bbb602205cc9535ce9d3301d376ce04a27044e0a9187fc38bd4efc5142045f415198113e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1304
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.14041
|
||||
epss-percentile: 0.96614
|
||||
epss-percentile: 0.9661
|
||||
cpe: cpe:2.3:a:joomlamo:com_userstatus:1.21.16:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022072a6e95bb88924c0c976165a1f37dc421f1e678d0bcff438c452de34ef0fcc8202203991f84e65faa0e9fd291cde70474bcf10639ea24e7cd95ad9dbd29b0b3972b1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f202a7c288e07fdc2d18df7a352f03c6a1533c8311a6db740ab347dbf249f98502204ca19a1a8153d70e128e178da7f058f875686940f229c06704f841bccb910105:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1305
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.20719
|
||||
epss-percentile: 0.97572
|
||||
epss-percentile: 0.97568
|
||||
cpe: cpe:2.3:a:joomlamo:com_jinventory:1.23.02:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402206bdbc6cb4c4318ca9fcacac08e7dbb9475f57afe3de5aa1f6510bb8a1a5c37da02201c1ca98374496cc9225cbba74cd154b974f1e0742a6b1fac458577158d50a3f5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008237d59885e1bee4302031c57d66b5c40a5c4a77e251e154cd031b339a213ddd02201c9dd3ec9eddea48526d4b0cbb787c93956a699432b7fc9ae1727a51962fb0dc:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1306
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.15722
|
||||
epss-percentile: 0.96911
|
||||
epss-percentile: 0.96906
|
||||
cpe: cpe:2.3:a:roberto_aloi:com_joomlapicasa2:2.0.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100b949db70a40d3785231aa41c70ce55fc8ab77c7de2fcbb14afee2b30fd7922cc022100e6916174525050cd9d828bff3c08e2b52cd6627d94c8f1400aca12a03b569963:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100a0d102e1a6a4eb689b559c81bab7c63d30e56798e19a5508cce2581cf32789b3022100a0fca12c008cee0931893c4859fa6f8183c7fe5015cce6979479ca4a393ce485:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1307
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.10158
|
||||
epss-percentile: 0.95726
|
||||
epss-percentile: 0.95721
|
||||
cpe: cpe:2.3:a:software.realtyna:com_joomlaupdater:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022031aee55f2491d8cf51d72407553b245786175a117f95bd98b0233c51a7d051d90220585519bef6a4e732c72dd67c031d870951cfcab66774d19e87e8d1abcfb1a640:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206359ee59a5a586c17f6929c548db30a50b7c48fd06b320aa5747dbc45cc6ad68022026e3d3d722970f6a933265779360920d3aaaefde6b5c893c63ed45f4f420df4e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1308
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.13997
|
||||
epss-percentile: 0.96608
|
||||
epss-percentile: 0.96604
|
||||
cpe: cpe:2.3:a:la-souris-verte:com_svmap:1.1.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022007f38b76d1f36d219e11c0006ca5a0c18cb85e77ad278832e22c1c32a85f79d102210094007963ad73d57754ec4e7ac0598866fe88147e4a82d0dc7f0e7540a59a02bc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100b2b6d1b382093a342f74940bc89accf7ea10f92638085504c9bdb331c5597135022004b1f7dbd2164097ff6f3ae6a51c713d1a8ea45a9d7db299b5e3e5d0ccd10675:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1312
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.13621
|
||||
epss-percentile: 0.96531
|
||||
epss-percentile: 0.96527
|
||||
cpe: cpe:2.3:a:ijoomla:com_news_portal:1.5.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220259280e79d9ba759225d00e5cafffea7097be1d4195d7d840a7a6679f7f261a9022003be0238d0125d0d3a09a2a2e5391b27e0535731361d40d96af1d9ebbc4d19a8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a0048304602210092eaa96eb03430a478450c007d55444946b5c53a6abd8c134ecb3236fe3d2fbd022100ebf5af09249b85c775daaff9efeaae54a498e1fc10a98d2a2daea8aaf48eaf6b:922c64590222798bb761d5b6d8e72950
|
||||
Loaded 100 of 3518 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user