Move CVE-2025-8286 to correct directory and improve template

- Move template from http/cves/2025/ to network/cves/2025/ (TCP protocol) - Update name to follow format guidelines - Add max-request metadata - Improve description clarity - Add guralp vendor tag - Fix FOFA query formatting - Remove trailing spaces
Increase banner size
2026-11-08 10:10:28 -10:00 · 2025-08-01 08:15:10 -07:00 · 2025-08-01 16:09:51 +02:00 · 2025-08-01 15:55:09 +02:00 · 2025-07-31 10:37:29 +00:00 · 2025-07-31 10:37:25 +00:00
1974 changed files with 13693 additions and 12939 deletions
@@ -1,46 +1,13 @@
-http/cves/2017/CVE-2017-18349.yaml
-http/cves/2020/CVE-2020-29390.yaml
-http/cves/2024/CVE-2024-11587.yaml
-http/cves/2024/CVE-2024-29198.yaml
-http/cves/2024/CVE-2024-33832.yaml
-http/cves/2024/CVE-2024-36675.yaml
-http/cves/2024/CVE-2024-42852.yaml
-http/cves/2024/CVE-2024-50477.yaml
-http/cves/2024/CVE-2024-58136.yaml
-http/cves/2024/CVE-2024-9007.yaml
-http/cves/2025/CVE-2025-2709.yaml
-http/cves/2025/CVE-2025-2710.yaml
-http/cves/2025/CVE-2025-2711.yaml
-http/cves/2025/CVE-2025-2712.yaml
-http/cves/2025/CVE-2025-34077.yaml
-http/cves/2025/CVE-2025-34141.yaml
-http/cves/2025/CVE-2025-34300.yaml
-http/cves/2025/CVE-2025-40630.yaml
-http/cves/2025/CVE-2025-49029.yaml
-http/cves/2025/CVE-2025-53770.yaml
-http/cves/2025/CVE-2025-53833.yaml
-http/cves/2025/CVE-2025-5961.yaml
-http/cves/2025/CVE-2025-6058.yaml
-http/cves/2025/CVE-2025-6851.yaml
-http/cves/2025/CVE-2025-6970.yaml
-http/exposed-panels/c2/amatera-stealer-panel.yaml
-http/exposed-panels/c2/bofamet-stealer-panel.yaml
-http/exposed-panels/c2/cyber-stealer-panel.yaml
-http/exposed-panels/c2/oxf-phaas-panel.yaml
-http/exposed-panels/saltbo-zpan-panel.yaml
-http/misconfiguration/installer/ibarn-installer.yaml
-http/misconfiguration/installer/saltbo-zpan-installer.yaml
-http/misconfiguration/installer/strongshop-installer.yaml
-http/osint/user-enumeration/luma.yaml
-http/technologies/wordpress/plugins/blocksy-companion.yaml
-http/technologies/wordpress/plugins/gosmtp.yaml
-http/technologies/wordpress/plugins/honeypot.yaml
-http/technologies/wordpress/plugins/pagelayer.yaml
-http/technologies/wordpress/plugins/pojo-accessibility.yaml
-http/technologies/wordpress/plugins/siteseo.yaml
-http/technologies/wordpress/plugins/unlimited-elements-for-elementor.yaml
-http/vulnerabilities/backdoor/sharepoint-toolshell-backdoor.yaml
-http/vulnerabilities/wordpress/wp-ninja-tables-lfi.yaml
-network/cves/2019/CVE-2019-5544.yaml
-network/detection/vtun-server.yaml
-network/enumeration/nats-server-enum.yaml
+http/cves/2022/CVE-2022-25237.yaml
+http/cves/2024/CVE-2024-2053.yaml
+http/cves/2025/CVE-2025-1595.yaml
+http/cves/2025/CVE-2025-44177.yaml
+http/cves/2025/CVE-2025-6197.yaml
+http/default-logins/apache/apache-inlong-default-login.yaml
+http/default-logins/openmetadata/openmetadata-default-login.yaml
+http/exposed-panels/scalar-detection.yaml
+http/miscellaneous/dnt-policy-detect.yaml
+http/technologies/apache/apache-inlong-detect.yaml
+http/technologies/nocobase-detect.yaml
+http/technologies/openmetadata-detect.yaml
+http/vulnerabilities/other/easycvr-user-info-disclosure.yaml
@@ -42,18 +42,18 @@ An overview of the nuclei template project, including statistics on unique tags,

 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3248 | dhiyaneshdk   |  1872 | http       |  8877 | info     |  4144 | file |   435 |
-| panel     |  1332 | daffainfo     |   868 | cloud      |   657 | high     |  2430 | dns  |    26 |
-| xss       |  1247 | princechaddha |   826 | file       |   435 | medium   |  2364 |      |       |
-| wordpress |  1172 | dwisiswant0   |   806 | dast       |   255 | critical |  1405 |      |       |
-| exposure  |  1102 | ritikchaddha  |   634 | workflows  |   202 | low      |   319 |      |       |
-| wp-plugin |  1025 | pussycat0x    |   520 | code       |   196 | unknown  |    56 |      |       |
-| osint     |   812 | pikpikcu      |   352 | network    |   142 |          |       |      |       |
+| cve       |  3275 | dhiyaneshdk   |  1877 | http       |  8913 | info     |  4154 | file |   435 |
+| panel     |  1338 | daffainfo     |   868 | cloud      |   657 | high     |  2439 | dns  |    26 |
+| xss       |  1255 | princechaddha |   826 | file       |   435 | medium   |  2374 |      |       |
+| wordpress |  1180 | dwisiswant0   |   806 | dast       |   255 | critical |  1418 |      |       |
+| exposure  |  1105 | ritikchaddha  |   648 | workflows  |   202 | low      |   318 |      |       |
+| wp-plugin |  1031 | pussycat0x    |   529 | code       |   198 | unknown  |    56 |      |       |
+| osint     |   813 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
 | tech      |   800 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   777 | pdresearch    |   261 | ssl        |    38 |          |       |      |       |
-| lfi       |   774 | iamnoooob     |   250 | dns        |    23 |          |       |      |       |
+| rce       |   783 | pdresearch    |   267 | ssl        |    38 |          |       |      |       |
+| lfi       |   775 | iamnoooob     |   256 | dns        |    23 |          |       |      |       |

-**845 directories, 11246 files**.
+**847 directories, 11287 files**.

 </td>
 </tr>
@@ -1 +1 @@
-{"tags":[{"name":"cve","count":3248},{"name":"panel","count":1332},{"name":"xss","count":1247},{"name":"wordpress","count":1172},{"name":"exposure","count":1102},{"name":"wp-plugin","count":1025},{"name":"osint","count":812},{"name":"tech","count":800},{"name":"rce","count":777},{"name":"lfi","count":774},{"name":"misconfig","count":751},{"name":"devops","count":740},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":575},{"name":"packetstorm","count":552},{"name":"wpscan","count":533},{"name":"cve2022","count":513},{"name":"cve2021","count":513},{"name":"cve2023","count":489},{"name":"detect","count":488},{"name":"sqli","count":486},{"name":"cve2024","count":464},{"name":"login","count":450},{"name":"unauth","count":434},{"name":"kev","count":424},{"name":"authenticated","count":423},{"name":"intrusive","count":401},{"name":"file","count":377},{"name":"oast","count":279},{"name":"default-login","count":276},{"name":"cve2020","count":276},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":217},{"name":"malware","count":213},{"name":"token","count":211},{"name":"osint-social","count":211},{"name":"azure","count":210},{"name":"csp-bypass","count":204},{"name":"","count":204},{"name":"aws","count":192},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"auth-bypass","count":187},{"name":"iot","count":184},{"name":"cve2018","count":184},{"name":"cve2019","count":182},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":156},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":140},{"name":"security","count":137},{"name":"router","count":131},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"cve2025","count":111},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":84},{"name":"takeover","count":81},{"name":"local","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"windows","count":76},{"name":"cisco","count":75},{"name":"js","count":75},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"file-upload","count":63},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"cve2016","count":60},{"name":"google","count":59},{"name":"detection","count":59},{"name":"atlassian","count":59},{"name":"c2","count":57},{"name":"vmware","count":57},{"name":"audit","count":55},{"name":"deserialization","count":55},{"name":"dast","count":51},{"name":"php","count":51},{"name":"logs","count":50},{"name":"cve2014","count":50},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"ssh","count":47},{"name":"cnvd","count":46},{"name":"vulhub","count":46},{"name":"ssti","count":46},{"name":"aem","count":46},{"name":"misc","count":46},{"name":"osint-gaming","count":45},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"plugin","count":44},{"name":"jndi","count":44},{"name":"springboot","count":43},{"name":"ssl","count":43},{"name":"oa","count":43},{"name":"osint-hobby","count":42},{"name":"fortinet","count":42},{"name":"osint-porn","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"info-leak","count":40},{"name":"dlink","count":39},{"name":"postgresql","count":39},{"name":"miscellaneous","count":39},{"name":"api","count":38},{"name":"sap","count":38},{"name":"cti","count":37},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"lfr","count":34},{"name":"gitlab","count":34},{"name":"networking","count":34},{"name":"xxe","count":34},{"name":"devsecops","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"osint-tech","count":31},{"name":"nginx","count":31},{"name":"graphql","count":31},{"name":"vpc","count":31},{"name":"printer","count":31},{"name":"ec2","count":30},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"prestashop","count":29},{"name":"admin","count":29},{"name":"gke","count":29},{"name":"ftp","count":29},{"namLine truncated
+{"tags":[{"name":"cve","count":3275},{"name":"panel","count":1338},{"name":"xss","count":1255},{"name":"wordpress","count":1180},{"name":"exposure","count":1105},{"name":"wp-plugin","count":1031},{"name":"osint","count":813},{"name":"tech","count":800},{"name":"rce","count":783},{"name":"lfi","count":775},{"name":"misconfig","count":754},{"name":"devops","count":740},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":578},{"name":"packetstorm","count":552},{"name":"wpscan","count":536},{"name":"cve2021","count":513},{"name":"cve2022","count":513},{"name":"detect","count":492},{"name":"cve2023","count":489},{"name":"sqli","count":487},{"name":"cve2024","count":472},{"name":"login","count":456},{"name":"unauth","count":436},{"name":"kev","count":436},{"name":"authenticated","count":425},{"name":"intrusive","count":405},{"name":"file","count":377},{"name":"oast","count":284},{"name":"cve2020","count":277},{"name":"default-login","count":276},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":240},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":219},{"name":"malware","count":213},{"name":"osint-social","count":212},{"name":"token","count":211},{"name":"azure","count":210},{"name":"","count":205},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"auth-bypass","count":190},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"cve2019","count":183},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":157},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"ssrf","count":148},{"name":"aws-cloud-config","count":147},{"name":"tcp","count":142},{"name":"security","count":137},{"name":"router","count":132},{"name":"cve2025","count":127},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":120},{"name":"phishing","count":118},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":85},{"name":"local","count":81},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"js","count":76},{"name":"windows","count":76},{"name":"cisco","count":75},{"name":"enum","count":73},{"name":"k8s","count":71},{"name":"file-upload","count":66},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"c2","count":61},{"name":"cve2015","count":61},{"name":"alibaba","count":61},{"name":"cve2016","count":60},{"name":"atlassian","count":59},{"name":"google","count":59},{"name":"detection","count":59},{"name":"vmware","count":58},{"name":"deserialization","count":56},{"name":"audit","count":55},{"name":"php","count":52},{"name":"dast","count":51},{"name":"logs","count":50},{"name":"cve2014","count":50},{"name":"tenable","count":48},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"ssti","count":48},{"name":"generic","count":47},{"name":"ssh","count":47},{"name":"debug","count":47},{"name":"misc","count":46},{"name":"vulhub","count":46},{"name":"cnvd","count":46},{"name":"aem","count":46},{"name":"osint-gaming","count":45},{"name":"injection","count":45},{"name":"plugin","count":45},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"oa","count":43},{"name":"ssl","count":43},{"name":"springboot","count":43},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"tls","count":41},{"name":"firewall","count":41},{"name":"listing","count":40},{"name":"info-leak","count":40},{"name":"miscellaneous","count":39},{"name":"postgresql","count":39},{"name":"dlink","count":39},{"name":"cti","count":38},{"name":"sap","count":38},{"name":"api","count":38},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"wp-theme","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"networking","count":34},{"name":"devsecops","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"yonyou","count":32},{"name":"printer","count":31},{"name":"vpc","count":31},{"name":"graphql","count":31},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"ec2","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"osint-coding","count":30},{"name":"prestashop","count":29},{"name":"gke","count":29},{"name":"ftp","count":29},{"naLine truncated
@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3248 | dhiyaneshdk   |  1872 | http       |  8877 | info     |  4144 | file |   435 |
-| panel     |  1332 | daffainfo     |   868 | cloud      |   657 | high     |  2430 | dns  |    26 |
-| xss       |  1247 | princechaddha |   826 | file       |   435 | medium   |  2364 |      |       |
-| wordpress |  1172 | dwisiswant0   |   806 | dast       |   255 | critical |  1405 |      |       |
-| exposure  |  1102 | ritikchaddha  |   634 | workflows  |   202 | low      |   319 |      |       |
-| wp-plugin |  1025 | pussycat0x    |   520 | code       |   196 | unknown  |    56 |      |       |
-| osint     |   812 | pikpikcu      |   352 | network    |   142 |          |       |      |       |
+| cve       |  3275 | dhiyaneshdk   |  1877 | http       |  8913 | info     |  4154 | file |   435 |
+| panel     |  1338 | daffainfo     |   868 | cloud      |   657 | high     |  2439 | dns  |    26 |
+| xss       |  1255 | princechaddha |   826 | file       |   435 | medium   |  2374 |      |       |
+| wordpress |  1180 | dwisiswant0   |   806 | dast       |   255 | critical |  1418 |      |       |
+| exposure  |  1105 | ritikchaddha  |   648 | workflows  |   202 | low      |   318 |      |       |
+| wp-plugin |  1031 | pussycat0x    |   529 | code       |   198 | unknown  |    56 |      |       |
+| osint     |   813 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
 | tech      |   800 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   777 | pdresearch    |   261 | ssl        |    38 |          |       |      |       |
-| lfi       |   774 | iamnoooob     |   250 | dns        |    23 |          |       |      |       |
+| rce       |   783 | pdresearch    |   267 | ssl        |    38 |          |       |      |       |
+| lfi       |   775 | iamnoooob     |   256 | dns        |    23 |          |       |      |       |
@@ -10,6 +10,8 @@ info:
    - https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160
  metadata:
    verified: true
+  classification:
+    epss-score: 0.94462
  tags: cve,cve2014,openssl,heartbleed,code,kev

 variables:
@@ -135,4 +137,4 @@ code:
      - type: dsl
        dsl:
          - "contains(response,'server is vulnerable')"
-# digest: 4b0a00483046022100ed75e4d98947fd01fbc7873eeb6436b559a749bb88a5a85f71fef8c2f83f9e48022100cb170dc3f8592781394acbba1560953c29e7b0b1d36c191aee134aa6d178aa74:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022072146a555c1e39921511dd324015ad2f19b58bef855a158d53f18bad4a3068f70221008aea99f59b94f83393eb50e906fb55a005e15f80d20d8502d4a6bbdeea861d8a:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2019-0604
    cwe-id: CWE-20
-    epss-score: 0.94411
+    epss-score: 0.94436
    epss-percentile: 0.99974
  metadata:
    verified: true
@@ -154,4 +154,4 @@ code:
          - 'contains(interactsh_protocol, "dns")'
          - 'contains(interactsh_request, hex_encode(marker))'
        condition: and
-# digest: 4a0a00473045022022019f9c11593b4c5a1f55755d532f6a64858d80153beb783f2c2d61684e0439022100fd41aa3e2ae1ad5d411c2c569383a2498ebf4a48cb1a9cf01f89748879c446c7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4400e86f6a613a3fec15c78d78b5eaa02c765fc3cd2a0fedae2a3caf6a640f602206838f019d39312a9e53fa6c5595b7ed095cef565d8599f8a9e20273c38886bbe:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2020-0646
    cwe-id: CWE-91
-    epss-score: 0.92775
+    epss-score: 0.93121
    epss-percentile: 0.99755
    cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
  metadata:
@@ -102,4 +102,4 @@ code:
          - 'contains(content_type, "text/xml")'
          - 'status_code == 200'
        condition: and
-# digest: 4a0a00473045022100a9c7370f5d64f484afc46075695941e15917d5a0687dd077ae6699501475bc1c02207a3961cc5b43a81ff13243b2dbb044a37081cf76fead5b7be2c772e481685c5c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cb487f0bd652d387ee37c93aeff51bc10e1ee1685ed827748844380e2a1d224802202681a6f09065aa05fe76062fb4b71a801d269cccb60e095d1a1b782981fdff69:922c64590222798bb761d5b6d8e72950
@@ -10,7 +10,7 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    cvss-score: 7.5
    cve-id: CVE-2020-13935
-    epss-score: 0.91885
+    epss-score: 0.92195
    epss-percentile: 0.99681
  reference:
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
@@ -17,7 +17,7 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2021-3156
    cwe-id: CWE-193
-    epss-score: 0.92019
+    epss-score: 0.92263
    epss-percentile: 0.99693
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
@@ -40,4 +40,4 @@ code:
          - "malloc(): memory corruption"
          - "Aborted (core dumped)"
        condition: and
-# digest: 4a0a0047304502203288bc289d0cc0f4e06e605006f21fa1933c3a8a43067f2e9217000a34b340ae022100eb4c9a1fad050dd80783cfcff25e73bc958d1ad84a2f6f09fcbf1c0deebe680c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220156c4b47288c1bd2c345a71670734fd19e48ad7b8e807cf94a55943b470236ae022100b0a5f9dbc02cd24f1b8c73147526a7ad7d50553730b0ecb9325cca9c7b327c6d:922c64590222798bb761d5b6d8e72950
@@ -17,6 +17,7 @@ info:
    - https://labs.watchtowr.com/fortinet-no-more-funny-titles-cve-2022-42475/
    - https://bishopfox.com/blog/exploit-cve-2022-42475
  classification:
+    epss-score: 0.94003
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2024-42475
@@ -173,4 +174,4 @@ code:
      - type: word
        words:
          - "Target appears to be VULNERABLE"
-# digest: 4b0a00483046022100df2185bba8207644d6ccf7a16a4f4fd737eeee1f8bd6f4622ac7049188f5040b022100ef25386cc59ebe43e9f9d3796c23e7edee1e2f34a0d1a88c7318c3180af1f587:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220200109caa2f7e95a45434593458382a6ca875167ade0946689005f9fc29664df0220764ae12713d8cb30e3105165bd261c4564a51b50ee294d63d57ca53aa338374d:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2023-2986
-    epss-score: 0.91200
+    epss-score: 0.90996
    epss-percentile: 0.99636
    cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
  metadata:
@@ -626,4 +626,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 4a0a004730450221009fa711a5846a3c93bac4bc69d04eac250dfdf6df030b766ed7e272e1c41e6afd0220383dd08bfdfe5d8ab5f2dc3f9f0c2881b2ab73ec4502c81f92cdf28db1651b82:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207360b6e655f665c3206296d537b3fb08f38c3e75292145fdd0ce7ff3d2ebc4950220555ab766a2fc4290ba5e70aebf3972ec448bbaa7f7ec17857a4d36eb1ce85d0d:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2023-49105
    cwe-id: CWE-287
-    epss-score: 0.86872
+    epss-score: 0.86688
    epss-percentile: 0.99395
    cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
  metadata:
@@ -90,4 +90,4 @@ http:
      - type: dsl
        dsl:
          - '"Username => "+ username'
-# digest: 490a0046304402204b1fb18af3e1a3a93ddf533a7112f566b1c32c20d54fce52634df059c876cd060220684fd961920c7f143e93d510a7e4219626c8ef2291c908ffecbb8a92171f9185:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d1361a88791cd15ca47fa69ee04109e863d4b64e0ff51fd402aee326f02b3afb022100956866982e3aa3ff3694a645f6b77b7a705056f078771cc8881db8f55acaff45:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2023-4911
    cwe-id: CWE-787,CWE-122
-    epss-score: 0.66736
+    epss-score: 0.78156
    epss-percentile: 0.98452
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "139"     # Segmentation Fault Exit Code
-# digest: 4a0a0047304502207a6e5753b4c34b6c6a6b114a627b1024aea6e7ffaf398b1a92eb895c3a0449b9022100e7d7bde1dcc8c8248fa38491377b58370af797f1769f84f3be87a1fa8e672445:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200467c526f6043a379948d8ced51cc69e62cda1e931a681fe275eb9860d715f37022100f445b6a72ea04c499b20fe826724ee120544d715795d1445709b8145a9895277:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2023-6246
    cwe-id: CWE-787,CWE-122
-    epss-score: 0.22699
+    epss-score: 0.26478
    epss-percentile: 0.95613
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "127"     # Segmentation Fault Exit Code
-# digest: 490a004630440220435fc0f1f42662dd77393d370309115320794f7957843c0ff1ef4c0e68d5566402200e729fedbc5915a5e9a5c33cd70ccff6646981ea2ae405bb1341c83e0b228b08:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202186423140cba034149105b6c5f8fae507a03844c26e4329d1f4437abb29e41202201f13cba920b16ae34421b775498e1bca85f7cc6659582da1e8cfbad540281d7c:922c64590222798bb761d5b6d8e72950
@@ -13,7 +13,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-10443
    cwe-id: CWE-77
-    epss-score: 0.69629
+    epss-score: 0.67637
    epss-percentile: 0.98573
    cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
  metadata:
@@ -54,4 +54,4 @@ code:
        part: interactsh_protocol # Confirms the HTTP Interaction
        words:
          - "dns"
-# digest: 4a0a004730450220238322406ea7b36d09adcd8d11555a98663066124719295b82627c0c6aa649c602210097fd42ed176237bd31b1b6fe4b675eb74f378636c66888f6578c5f20d49e8af4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bc3a13e648e7ec51ac1836066641533bfcdbb2cedab653a2e02b0fd70616fb4602204417a29e0f2a5863f30dfa9119cccd591a4435fcdd7a5ff36a762cbc92812c8b:922c64590222798bb761d5b6d8e72950
@@ -13,7 +13,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-12356
    cwe-id: CWE-77
-    epss-score: 0.93590
+    epss-score: 0.93687
    epss-percentile: 0.99831
    cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
  metadata:
@@ -37,4 +37,4 @@ code:
        words:
          - "0 success"
          - "1 try again later"
-# digest: 4a0a00473045022100be13ba221189875a5c3c181eb1e6c5d7c4806c31798dc6f540657279fac5b029022031676609cf3da0030625ce6aac0a33787770a4d084ec52ac9f58d0faa903025f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008fdc45694288c9092a928bc2ba325f5b16bf96f4c94065e7afc046dffccdc7f6022100b3c8af22d05813a12e0a1cc490999e848f91a3bbeb4d9e87bc1e3c1dd6a45c0b:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 10
    cve-id: CVE-2024-3094
    cwe-id: CWE-506
-    epss-score: 0.84011
+    epss-score: 0.84169
    epss-percentile: 0.99254
    cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
  metadata:
@@ -59,4 +59,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4b0a00483046022100f7234c73aae801d78da251277aec0c21a4952b8b344944b3892eee84ec5891ae0221008d992982b582811cdd8173176149ef196cc6f7b672fcf16d10c05aab8badd9db:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022058d32a2e8218872afa1f30ea214365196b87480a320425dd7b5082c3a11a01c00221009fb13dcff0743b605d213aee84fdc614cddbb7aa034a6bdfdfb5d6e6af71a8c6:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-45409
    cwe-id: CWE-347
-    epss-score: 0.16139
+    epss-score: 0.14907
    epss-percentile: 0.94531
  metadata:
    verified: true
@@ -123,4 +123,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 490a0046304402201e63c308fefaaa4d4ba99b5a7c2ea3d7dcdf5544dc8d4a1ae1a0fbd532d7241702207232eaea82be593da580ba735e84de2153ee1708552ae08603c4c7237f2e1112:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207fcad984b97d6cf3e7d103a97d8ac0b804375bc62fa335801c66337b72c68cb2022028a34cecc66c0b0b0afdc46859c2675df13bcf803911b3c5b00359239183b814:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-55556
    cwe-id: CWE-502
-    epss-score: 0.80857
+    epss-score: 0.7976
    epss-percentile: 0.99096
  metadata:
    verified: true
@@ -193,4 +193,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4b0a00483046022100e75d786df30fc6d158bb38bc2b13a5af3c2e27174c1617fe01b419f3a5d69b57022100840b6aaccec646d85c578e77492eda810bfb731287ba8520e5d657e92f883297:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bedda7807b6e8b1de9d06c3de6965d20f099c71510556bb6cd624a2fad2be0db02207a9e0962a7814c6422cdc32195f4b474081785e386a7578b5a1705d5add154cc:922c64590222798bb761d5b6d8e72950
@@ -10,7 +10,7 @@ info:
    - https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass
    - https://github.com/advisories/GHSA-g83h-4727-5rpv
  classification:
-    epss-score: 0.38910
+    epss-score: 0.3891
    epss-percentile: 0.97110
  metadata:
    verified: true
@@ -188,4 +188,4 @@ http:
      - type: kval
        kval:
          - user_session
-# digest: 4a0a00473045022100d4499f701d4dbaa3fee40a00ced7f7790a94891bc9007aed06b4741a76fd543c0220713f41ccb6c2e702ac3513a926d5308c1077bf3cf7f01d4b049c347bd3dfd7e7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022011426fc5ebeb8774da55b3e13ea70980635eae1dfcdc9265862c83ccee5dd32c022100a3811bfcc159dbc91424ddb31e76806b5b1a64acd73aa014e5f2306f058cb32f:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 9.3
    cve-id: CVE-2025-25291
    cwe-id: CWE-347
-    epss-score: 0.01703
+    epss-score: 0.02296
    epss-percentile: 0.81527
  metadata:
    verified: true
@@ -78,4 +78,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 490a00463044022100be3b0643c89a1ddcd15aa06afc686f3efb80fa245984ce21ca1b4275c74d42a2021f4b0e28ee37a26ab75834991f37b275727fac03c60f0170a2e59e232ae078d8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220235b1de01210fb06562b784c31b9774a385c46ff77e11ce19f1df321822bc3e8022100d6bad0364c99e6c8086521ab2accbb9575b74af87cc682d0d57ef38099fbe991:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 10
    cve-id: CVE-2025-32433
    cwe-id: CWE-306
-    epss-score: 0.55376
+    epss-score: 0.57377
    epss-percentile: 0.97930
  metadata:
    verified: true
@@ -172,4 +172,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4a0a0047304502207edfd6f617b697c540c8375a5278b5c1016c928b22d041e1dc19ddfdad65d43b022100a4785eb798107b1413fd119e65a851be94361018e5eb785f393d26feed858cc1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e36084dcd9b8fa5347cf8bf47d18d1e3d76a0744981414bbcbc23fd7e702706102204ef22a6591bcc3ee21aee8ed14e150571204b0fda60f783ec25790c083b54e0b:922c64590222798bb761d5b6d8e72950
@@ -15,6 +15,7 @@ info:
    - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
    - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
  classification:
+    epss-score: 0.11118
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-6216
@@ -113,4 +114,4 @@ code:
      - type: dsl  # type of the extractor
        dsl:
          - '"Reset URL: " + code_response'
-# digest: 4a0a00473045022100e16640c86c7d6f0d855aad545c1028cd614abdc1388b9a33da23d66b1d3beddf022010383e6897d82a9fabb755115271a0635ca5ee8a36633e8f1485f601840f5caa:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f8903b48a3426223b074cf3692b1d6a29234635491568677b23e79a7e63b8d3c0220607199839279491185e602067f73ce3373035197e4345c24ed28e64259923e79:922c64590222798bb761d5b6d8e72950
@@ -1804,6 +1804,7 @@
 {"ID":"CVE-2022-25149","Info":{"Name":"WordPress Plugin WP Statistics \u003c= 13.1.5 - SQL Injection","Severity":"high","Description":"The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-25149.yaml"}
 {"ID":"CVE-2022-25216","Info":{"Name":"DVDFab 12 Player/PlayerFab - Local File Inclusion","Severity":"high","Description":"DVDFab 12 Player/PlayerFab is susceptible to local file inclusion which allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-25216.yaml"}
 {"ID":"CVE-2022-25226","Info":{"Name":"ThinVNC - Authentication Bypass","Severity":"critical","Description":"ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2022/CVE-2022-25226.yaml"}
+{"ID":"CVE-2022-25237","Info":{"Name":"Bonita Web 2021.2 - Authentication/Authorization Bypass","Severity":"critical","Description":"Bonita Web 2021.2 contains an authentication/authorization bypass vulnerability caused by an overly broad exclude pattern in RestAPIAuthorizationFilter, allowing unauthenticated users to access privileged API endpoints by appending ;i18ntranslation or /../i18ntranslation/ to the URL.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-25237.yaml"}
 {"ID":"CVE-2022-25323","Info":{"Name":"ZEROF Web Server 2.0 - Cross-Site Scripting","Severity":"medium","Description":"ZEROF Web Server 2.0 allows /admin.back cross-site scripting.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-25323.yaml"}
 {"ID":"CVE-2022-2535","Info":{"Name":"SearchWP Live Ajax Search \u003c 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure","Severity":"medium","Description":"The plugin does not ensure that users making. alive search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-2535.yaml"}
 {"ID":"CVE-2022-25356","Info":{"Name":"Alt-n/MDaemon Security Gateway \u003c=8.5.0 - XML Injection","Severity":"medium","Description":"Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information such as protection used (2FA), admin email, and product registration keys.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-25356.yaml"}
@@ -2656,6 +2657,7 @@
 {"ID":"CVE-2024-20419","Info":{"Name":"Cisco SSM On-Prem \u003c= 8-202206 - Password Reset Account Takeover","Severity":"critical","Description":"A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2024/CVE-2024-20419.yaml"}
 {"ID":"CVE-2024-20439","Info":{"Name":"Hardcoded Admin Credentials For Cisco Smart Licensing Utility API","Severity":"critical","Description":"A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to log in to the affected system. A successful exploit could allow the attacker to log in to the affected system with administrative privileges over the API of the Cisco Smart Licensing Utility application.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-20439.yaml"}
 {"ID":"CVE-2024-20440","Info":{"Name":"Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials","Severity":"high","Description":"A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-20440.yaml"}
+{"ID":"CVE-2024-2053","Info":{"Name":"Artica Proxy  - Unauthenticated LFI","Severity":"high","Description":"The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the \"www-data\" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to prevent local file inclusion. These protections can be bypassed and arbitrary file requests supplied by unauthenticated users will be returned according to the privileges of the \"www-data\" user.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-2053.yaml"}
 {"ID":"CVE-2024-20767","Info":{"Name":"Adobe ColdFusion - Arbitrary File Read","Severity":"high","Description":"ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary file system write. Exploitation of this issue does not require user interaction.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2024/CVE-2024-20767.yaml"}
 {"ID":"CVE-2024-21136","Info":{"Name":"Oracle Retail Xstore Suite - Pre-authenticated Path Traversal","Severity":"high","Description":"Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office. While the vulnerability is in Oracle Retail Xstore Office, attacks may significantly impact additional products (scope change).\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-21136.yaml"}
 {"ID":"CVE-2024-21485","Info":{"Name":"Dash Framework - Cross-site Scripting","Severity":"medium","Description":"Dash framework versions before 2.15.0 are vulnerable to Cross-site Scripting (XSS) via href attribute in anchor tags. This template tests for javascript:alert payload injection.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2024/CVE-2024-21485.yaml"}
@@ -2745,7 +2747,7 @@
 {"ID":"CVE-2024-31850","Info":{"Name":"CData Arc \u003c 23.4.8839 - Path Traversal","Severity":"high","Description":"A path traversal vulnerability exists in the Java version of CData Arc \u003c 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-31850.yaml"}
 {"ID":"CVE-2024-31851","Info":{"Name":"CData Sync \u003c 23.4.8843 - Path Traversal","Severity":"high","Description":"A path traversal vulnerability exists in the Java version of CData Sync \u003c 23.4.8843 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-31851.yaml"}
 {"ID":"CVE-2024-31982","Info":{"Name":"XWiki \u003c 4.10.20 - Remote code execution","Severity":"critical","Description":"XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-31982.yaml"}
-{"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
+{"ID":"CVE-2024-32113","Info":{"Name":"Apache OFBiz Directory Traversal - Remote Code Execution","Severity":"high","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32113.yaml"}
 {"ID":"CVE-2024-32231","Info":{"Name":"Stash \u003c 0.26.0 -  SQL Injection","Severity":"critical","Description":"Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-32231.yaml"}
 {"ID":"CVE-2024-32238","Info":{"Name":"H3C ER8300G2-X - Password Disclosure","Severity":"critical","Description":"H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-32238.yaml"}
 {"ID":"CVE-2024-3234","Info":{"Name":"Chuanhu Chat - Directory Traversal","Severity":"critical","Description":"The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-3234.yaml"}
@@ -3042,6 +3044,7 @@
 {"ID":"CVE-2025-1097","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1097.yaml"}
 {"ID":"CVE-2025-1098","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1098.yaml"}
 {"ID":"CVE-2025-1323","Info":{"Name":"WP-Recall – Plugin \u003c= 16.26.10 - Unauthenticated SQL Injection","Severity":"high","Description":"The WP-Recall – Registration, Profile, Commerce \u0026 More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1323.yaml"}
+{"ID":"CVE-2025-1595","Info":{"Name":"EasyCVR \u003c=2.1.2 - Information Disclosure","Severity":"medium","Description":"A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1595.yaml"}
 {"ID":"CVE-2025-1661","Info":{"Name":"HUSKY – Products Filter Professional for WooCommerce \u003c= 1.3.6.5 - Unauthenticated Local File Inclusion","Severity":"critical","Description":"The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1661.yaml"}
 {"ID":"CVE-2025-1743","Info":{"Name":"Pichome 2.1.0 - Arbitrary File Read","Severity":"high","Description":"A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1743.yaml"}
 {"ID":"CVE-2025-1974","Info":{"Name":"Ingress-Nginx Controller - Remote Code Execution","Severity":"critical","Description":"A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1974.yaml"}
@@ -3112,6 +3115,7 @@
 {"ID":"CVE-2025-34077","Info":{"Name":"WordPress Pie Register \u003c= 3.7.1.4 - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators.Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34077.yaml"}
 {"ID":"CVE-2025-34085","Info":{"Name":"WordPress Simple File List \u003c=4.2.2 - Remote Code Execution","Severity":"critical","Description":"An unrestricted file upload vulnerability in the WordPress Simple File List plugin before version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34085.yaml"}
 {"ID":"CVE-2025-34141","Info":{"Name":"ETQ Reliance - Reflected XSS via SQLConverterServlet","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-34141.yaml"}
+{"ID":"CVE-2025-34143","Info":{"Name":"ETQ Reliance - Authentication Bypass via Trailing Space","Severity":"critical","Description":"An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login page to obtain elevated access. Once authenticated, an attacker could achieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing stricter validation logic to exclude internal accounts from public authentication workflows in version MP-4583.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34143.yaml"}
 {"ID":"CVE-2025-3415","Info":{"Name":"Grafana - Exposes DingDing API Keys","Severity":"medium","Description":"An incident occurred where the DingDing alerting integration URL was inadvertently exposed to viewers due to a setting oversight in versions below or equals to 12.0.1.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-3415.yaml"}
 {"ID":"CVE-2025-34300","Info":{"Name":"SawtoothSoftware Lighthouse Studio \u003c 9.16.14 - Pre-Auth Remote Code Execution","Severity":"critical","Description":"A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the `eval` function within the Perl CGI component `ciwweb.pl`, where attacker-supplied input inside `hid_Random_ACARAT` is directly passed to `eval`. This allows remote unauthenticated attackers to execute arbitrary Perl code on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34300.yaml"}
 {"ID":"CVE-2025-4008","Info":{"Name":"MeteoBridge \u003c= 6.1 - Remote Code Execution","Severity":"high","Description":"The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-4008.yaml"}
@@ -3122,9 +3126,10 @@
 {"ID":"CVE-2025-41646","Info":{"Name":"RevPi Webstatus \u003c= v2.4.5 - Authentication Bypass","Severity":"critical","Description":"An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-41646.yaml"}
 {"ID":"CVE-2025-4322","Info":{"Name":"Motors \u003c= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover","Severity":"critical","Description":"The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4322.yaml"}
 {"ID":"CVE-2025-4380","Info":{"Name":"Ads Pro Plugin \u003c= 4.89 - Local File Inclusion","Severity":"critical","Description":"The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases .php files can can be uploaded and included, or already exist on the site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4380.yaml"}
-{"ID":"CVE-2025-4388","Info":{"Name":"Liferay Portal 'marketplace-app-manager-web' - Reflected XSS","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-4388.yaml"}
+{"ID":"CVE-2025-4388","Info":{"Name":"Liferay Portal - Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-4388.yaml"}
 {"ID":"CVE-2025-4396","Info":{"Name":"Relevanssi \u003c= 4.24.4 (Free) - Unauthenticated SQL Injection","Severity":"high","Description":"The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and \u003c= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-4396.yaml"}
 {"ID":"CVE-2025-44148","Info":{"Name":"MailEnable Mail Service \u003c v10 - Cross-Site Scripting","Severity":"medium","Description":"Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2025/CVE-2025-44148.yaml"}
+{"ID":"CVE-2025-44177","Info":{"Name":"White Star Software ProTop - Directory Traversal","Severity":"high","Description":"A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-44177.yaml"}
 {"ID":"CVE-2025-4427","Info":{"Name":"Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution","Severity":"critical","Description":"An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials. This leads to unauthenticated Remote Code Execution via unsafe userinput in one of the bean validators which is sink for Server-Side Template Injection.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-4427.yaml"}
 {"ID":"CVE-2025-45854","Info":{"Name":"JEHC-BPM - Remote Code Execute","Severity":"critical","Description":"A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM \u003c= v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-45854.yaml"}
 {"ID":"CVE-2025-45985","Info":{"Name":"Blink Router - Command Injection","Severity":"critical","Description":"Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide function.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-45985.yaml"}
@@ -3152,6 +3157,7 @@
 {"ID":"CVE-2025-5777","Info":{"Name":"Citrix NetScaler Memory Disclosure - CitrixBleed 2","Severity":"critical","Description":"Insufficient input validation leading to memory overread on the NetScaler Management Interface NetScaler ADC and NetScaler Gateway\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-5777.yaml"}
 {"ID":"CVE-2025-5961","Info":{"Name":"WordPress WPvivid Backup \u0026 Migration Plugin \u003c= 0.9.116 - Authenticated Arbitrary File Upload","Severity":"high","Description":"The Migration, Backup, Staging – WPvivid Backup \u0026 Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-5961.yaml"}
 {"ID":"CVE-2025-6058","Info":{"Name":"WPBookit \u003c= 1.0.4 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6058.yaml"}
+{"ID":"CVE-2025-6197","Info":{"Name":"Open Redirect via Organization Switching","Severity":"medium","Description":"An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6197.yaml"}
 {"ID":"CVE-2025-6851","Info":{"Name":"WordPress Broken Link Notifier \u003c 1.3.1 - Unauthenticated SSRF","Severity":"high","Description":"The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-6851.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
@@ -1 +1 @@
-7a87fca0a901556d67f5ab48bab66d19
+a035127e8cdac3981a1525e82b9ac7e9
@@ -16,7 +16,7 @@ info:
    cvss-score: 9
    cve-id: CVE-2021-45046
    cwe-id: CWE-502
-    epss-score: 0.94340
+    epss-score: 0.9434
    epss-percentile: 0.99946
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4b0a00483046022100a8939bb9bc6ccb1b77d9f06e06ca0db8116d5c0b73361a660d9f9a7b3e104f20022100df3e7994cdfd47bb085887aab47b53e80f0fc32a8589e337462d83aa015db1c9:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b2d82bb000abf87ac9bee230b6e1bd3f97c674c9650a7048299640e9eb976321022100added7594d87013b651893248c5b84c38b1755e5a5d199346eebb9799483a762:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2022-22965
    cwe-id: CWE-94
-    epss-score: 0.94460
+    epss-score: 0.9446
    epss-percentile: 0.99992
    cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
  metadata:
@@ -55,4 +55,4 @@ http:
        words:
          - "User-Agent: Java"
        case-insensitive: true
-# digest: 4b0a00483046022100915d17fb5a8d51b02db38fbe465d2de61ea80000397a7e86ebc49a4a9889412b022100820d081fc544c8aa867d04cfa1d0878008729d0459f08a166c459d7d16234099:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009aa5803189d9de1bc1973013f1cc5da110b2e46b1c62ea16cf1a491d31f3e3930221009486794f409eb77b8e87d8be71b79f23bf2d7c2dd6378e79c7707acd3cd75b9e:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2022-34265
    cwe-id: CWE-89
-    epss-score: 0.92493
+    epss-score: 0.92734
    epss-percentile: 0.99731
  tags: sqli,dast,vulhub,cve,cve2022,django

@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 490a004630440220765d0b95605f033abc16dd45dbd789eab737ca6bd0c261eb914b8fcf1fc7f9e902202d55d0d730a667ad2683e84023cdea5e2896a20b863a8cf0a2865d081aaf575b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210098d78757d6c41dc230c2e3d9355ac08365b4359ce54975ea46fb15f1232e9d7e022100bab0052a218ffc6a25ab06e85cb78c0bd25291ee57bc9c3027d550638335ccb6:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 7.3
    cve-id: CVE-2024-2961
    cwe-id: CWE-787
-    epss-score: 0.91735
+    epss-score: 0.91923
    epss-percentile: 0.99668
  tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast

@@ -57,4 +57,4 @@ http:
      - type: regex
        regex:
          - "root:x:0:0"
-# digest: 4b0a00483046022100f5fcacc5989901a485f707e1e046c0bb430448747aa9d1753933a28c4d863e75022100bf1a25c7f01875384e8ce50fdb752faf2f3d5336ede7c0491f8f74852d678a7d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100982f2b65afa11c4113a1c937d0e0c157b236d7414622bd1e26e903d042e50949022100ce852c63c7c449a66c53722a65379f5fdedee549a38679abfe6dc2f6e5fd0a91:922c64590222798bb761d5b6d8e72950
@@ -23,4 +23,4 @@ dns:
      - type: regex
        regex:
          - "v=BIMI1(.+)"
-# digest: 490a0046304402200fe01a5c826372c4c474961cd9b60e14995e68146274efce51e1bfb98f88357d02202d93208ad29783b0da3f6d871b70322582ad4cc6a716131858b6ceb7fcfe353d:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220144cb590d9b26dd8e1fd56ad6cb84d67c8063ee83efbe264e281f8ef8db116d702203c7ce396d27898d05a0e631abfddd1844576b7cb31852596b65fa3dbdc4cd218:922c64590222798bb761d5b6d8e72950
@@ -35,4 +35,4 @@ dns:
        group: 1
        regex:
          - "IN\\tNS\\t(.+)"
-# digest: 490a0046304402203e0e1ffafe16d73163325e32a7a04da98be487fa00bdaef8f4f003bdba49f00002204d883ccbbe96f46a3431dd9062cfe1c366478bc2dcbfdd7dc265e9f327dca690:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d88188a9858184586962e3325bd1d333cc75ad21b6b3ebd1dbb5357988831449022100aac32d5a2d093046b11204b01d2261bd0b01e1d2378845c3d4cf1597d332c362:922c64590222798bb761d5b6d8e72950
@@ -81,4 +81,4 @@ dns:
        name: "edge-cast"
        words:
          - "edgecastdns.net"
-# digest: 4b0a00483046022100dd92ea103a6f1b572f6103f4ff933eefe5c492f2c253caaf426a565e20c9ef85022100fcd4d733862bff8d4896e2c539df05719ce276b7c12c2870854eb8044de20cc5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e7307621d15e187ade8dc349d483a9dfb49053dbbe94baa2b959b356adfccb4502203a116b3087fd12133d6c569edea7e6e941b6d8b8e05d8df098c3830f1cfdd45c:922c64590222798bb761d5b6d8e72950
@@ -23,4 +23,4 @@ dns:
      - type: regex
        regex:
          - "v=spf1(.+)"
-# digest: 4b0a00483046022100de19f8abe369bd24782662b43e369f7836bafa4c16d99a9c52e68baf78835a1e022100d3db136a58fd3abc20c8be76ad2a27b714688afc0408efa4ac6151e53794a4dd:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022051bcadfd59f2bd2150858b5121cf7ff00120dc273ab8bdd3671cb4787e5093c90221009f67c2189406c7123516ef8b05869609d400adaaf86358f3875d1e1ec61d4e61:922c64590222798bb761d5b6d8e72950
@@ -218,4 +218,4 @@ dns:
        name: "whimsical"
        words:
          - "whimsical"
-# digest: 4a0a00473045022018ed39d1161316778a3806e51f4bf714824be603db9bfd19ba0bf6fcf2872d32022100fb9045b8ab82a9c156a8eb0ccae9f6de4c47261799ea37109dd79bbe1d23d38b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f4522b37e6c10f63832c428973771b8a8f404977887c00c4e50c7230b1d7dfd5022100d8900238cc8b036564f29b1934ad9c331f0fcb0a73d1247f3df22a60c8801384:922c64590222798bb761d5b6d8e72950
@@ -22,4 +22,4 @@ file:
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
-# digest: 4a0a00473045022055e217736e72f927aa32291855637a4d4a62d88481d51e8b14c08e7b2d1eb242022100c6ff9a9064d0c8843594a70a8a66aa9c9e24a50b739f0959849e2fe4484d8b65:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205d4b2d68068a3e1d23d46444224697aded58abcfefaeff9fd6eff1fde56d3a46022048d66a449fa58ad871365451924088f816ef3b1ca9aee5af56cf8e5960b10542:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ file:
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
-# digest: 490a0046304402206b453ac694a2c05c8663102d13e9b938aeed5225d070ab99eed518ab28a4a7be02201146d5408400ad112604c8985d03be4fcfd01227b8e7120154f6c2c6176a2d54:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b9b483db74c03f17203be8295c244d8fb34b107654751c6d3208003551a0fa7c022100be8b6786d5cba42d0e12278f2296145e49d920d82c37e1a4f5e203cdab7b859a:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ headless:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502203490f9d3cc3e02c27a39e9ca9140e65c55adf9e36701ba4b0778f5ea2ed9ef290221008d2ca11b5bd968a270adf6d15371db627dcffb442e306aacf6820bf0b76f5588:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202b10604a50f335a616cdc064c4e0c579f4a8bd6a80fbce3e9e1a29ab8d8c549b022100f1dcd720629b0cd7faa91c097bd5e6f3390a35cc98849db28713301850c0c9b4:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2018-25031
    cwe-id: CWE-20
-    epss-score: 0.81869
+    epss-score: 0.82878
    epss-percentile: 0.99147
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
@@ -54,4 +54,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a00473045022100a2f7e5ac70597ad87663ef0c9ad4bee161a599d2e03938161ace1128046c9b20022046775d61a5e4cae1d9c124ef010c9e100dcf6f7b6b078485fc0fe735de5c59d6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009aeabef438a58bf3836d81dfd29b471e543e948f670793238652ebdad6be4a75022100e4eefab1496063a33f82cb64d5d7721ada3a18f5cee561ec49c9943629968c94:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-29882
    cwe-id: CWE-79
-    epss-score: 0.02012
+    epss-score: 0.01812
    epss-percentile: 0.82957
  metadata:
    verified: true
@@ -46,4 +46,4 @@ headless:
          - "ConnectSRS</a>"
        condition: or
        case-insensitive: true
-# digest: 490a0046304402206cddf49edf926f4a2fc79e6bc3d44c28d92452607fab4a78c546667823eea63e022078814f733d0906b711afdbd5826bb664f3171ae8c38e5d175d567d52c877d89c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cb7c065d3d1f46a4311cdb471f6afe0f117d06bd60e805b0bc9f9cc974e10e9b022100d35eebc647e75db583d63d38016762baa3cc84652e810fee9ffad89a73529094:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
    cvss-score: 7.2
    cve-id: CVE-2024-38526
-    epss-score: 0.66721
+    epss-score: 0.56332
    epss-percentile: 0.98451
  tags: cve,cve2024,supply-chain,polyfill
 headless:
@@ -60,4 +60,4 @@ headless:
          - "union.macoms.la"
          - "newcrbpc.com"
        part: urls
-# digest: 4b0a00483046022100db8ee4bad1a3f649738173744c0b13228813c8f6149eed8ce1b9428955372d7a0221009d6fdcfee495e43dc703fb4ae3f9b8928359673160b77f0da6b553db315ad3d0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201096d64f0fcf071cac45f34f69eccfd1fd4d2c8fcdd0f798a63445b2895b468f022100c0494cc5abb2e052bb11f4437b5cc9919bfb400794a8cc6a3c62e5d35129fcca:922c64590222798bb761d5b6d8e72950
@@ -10,6 +10,8 @@ info:
    - https://www.tenable.com/plugins/was/114609
    - https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
    - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
+  classification:
+    epss-score: 0.03071
  metadata:
    verified: true
    max-request: 1
@@ -39,4 +41,4 @@ headless:
        words:
          - "{{random_int}}"
        case-insensitive: true
-# digest: 4a0a00473045022000b042f51608cca47a2a1f7bb177f443e5aab2d7922d69d7f2b66d68888cb7fc0221009e736ccd5e74d05842fa56a943949cc17d330fb501505a2beec0c400eca3adf0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022036e53f3f929e789da67d5b1394060a391c996d197d5b92b89b1a29ba6c4a0551022100c6a0eb7e423745b36411a672f943bb1c1f83c7d6009b0d78cabf6b06038533cd:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cvss-score: 4.4
    cve-id: CVE-2025-25062
    cwe-id: CWE-79
-    epss-score: 0.38601
+    epss-score: 0.25298
    epss-percentile: 0.97094
    cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
  metadata:
@@ -186,4 +186,4 @@ headless:
        dsl:
          - reflected_text_xss_type
          - reflected_text_xss_message
-# digest: 4a0a00473045022100a5afa1435b236d15615599536490803e61d1c57bd159c9b2a6d7c074e3204e3302207728ec9bdeffa792d62a6f7de273d13f778a88f935ffbeefb406321f35b0d011:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b90b74395a05943022b84862855923ed3f0d4ebd88dae181f555ee333429af2d022016c375dd01704289bd1812300bd3573d66977fdad60d7e984566111ed7b7ffa6:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2000-0114
    cwe-id: NVD-CWE-Other
-    epss-score: 0.02800
+    epss-score: 0.02967
    epss-percentile: 0.85545
    cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
  metadata:
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100f3a5e5052ec9628797b4a0195dc7dfdc41d8d4add40fcf444f5dd76289e248f60220663ea447f80771112856ef24f2e881f00c892440d3dbd1f627336ac9f72dd5b3:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205f1e2e9658b4b5031f4e0de671b50bb742ac3a33a72373771a436a06aa34dd7b02204f75b2cdd3eaac2623232db2cfab38cc344644a6f56dc7dc76869e055b0d93cc:922c64590222798bb761d5b6d8e72950
@@ -9,6 +9,8 @@ info:
  reference:
    - https://vulners.com/nessus/TOMCAT_SNOOP.NASL
    - https://nvd.nist.gov/vuln/detail/CVE-2000-0760
+  classification:
+    epss-score: 0.37735
  metadata:
    max-request: 1
    verified: true
@@ -35,4 +37,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100c38ec76668a3b46cd038ee246cfd6ca32bfba0d9a85eb247b0d1003e0970dd5202206e604cbc55d2f11ae55b78a3b13f582c932fb0b9bee09abdfe6e0f549d576b25:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210099c180c67ea3f15d6ee54ffceb98560b1a0fae475e859ad38e9baa02759da412022037f4661740b4315fb66b4a69c8831c7f22838f9fbaab9288aaeefb9d7e5a06ef:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2004-0519
    cwe-id: NVD-CWE-Other
-    epss-score: 0.00186
+    epss-score: 0.00124
    epss-percentile: 0.40980
    cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
  metadata:
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a0048304602210088c29bd8341924dee96550f25c070c64b3ffbcdd4263658f6bedb37286c495e0022100bbaa969fc39a95abbf72a528b6fa73666362ac3af1d7ed94a39f972065c2edd7:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204ae398fa41f69cd70d689e0d4c8e2ba89ffc9c7ba705ba252856fc4b6a599861022013184dcf58f3c3800a5b0fc4d91c163f196088b015906ca3156b9a4a430851c8:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2005-2428
    cwe-id: CWE-200
-    epss-score: 0.07654
+    epss-score: 0.07065
    epss-percentile: 0.91483
    cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
  metadata:
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100886ef721c95f20e2e899cabd7a5d1f28af25ad28f3e5b127ac105501debc964802200fb26d3c4ca946bcba55ad4cad10fa0b537a7c4a6bef1414002696a4dd71e120:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c1265840b66bbc938087fbd3f02bcf43b1f2eef0511818f481d30e2bdb483e1e02203292624c4ae219fe3cc801c8240411f1aa002d829c6f03cd7e33e7435c3724b5:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 10
    cve-id: CVE-2005-3344
    cwe-id: NVD-CWE-Other
-    epss-score: 0.10150
+    epss-score: 0.1015
    epss-percentile: 0.92789
    cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  metadata:
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100eba37eb777f79438aa34370ec751417489fbdc27c9875b321dde0806ee141c3c022100e4b5f28d965fe4a0ab5489be0f19ba8552ee0a0c57405cea8348b327540bafdb:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220245a2dd8d4bc65c9fdbcce5d9fd6e4d929ed1104273b31c0167e08a24aedb1f1022074746b0fd493ee75446bbb3c390fcd761d35280da8d20ddae168a3369d088883:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2005-3634
    cwe-id: NVD-CWE-Other
-    epss-score: 0.02140
+    epss-score: 0.0214
    epss-percentile: 0.83500
    cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
  metadata:
@@ -45,4 +45,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a0046304402200a71076886733b957fe5ec2af43ca20c0bfcc4ef985474b7ac410b79ca19484c02206e7e5345f20a65009ae13dfddbf68937b6ff4503819bf72dc92b83bd25ddf504:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008f6a5d863c2ee33f47572eb814fdea7b2197e5f03bbca14347e76a0a7ff35735022100ea64b95fdf0f03922e9d91bee058f1c318afbf4f22d340cdf0eb9c46fd6f03ff:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2005-4385
    cwe-id: NVD-CWE-Other
-    epss-score: 0.00220
+    epss-score: 0.00231
    epss-percentile: 0.44836
    cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022024de6f73185416c516398c724d12c4d7c3a27a26eafeda6c7c0a6e8f9db7709b02200bc9af502bb74e5ea36d4be547983c9714da9047b734277bee72b8d8d48fc2e0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c08cf9bf71df90890d63d5cba93fa26b47158a3a05ca2fb4aa27abffc35bf935022031c230d7ebbde2adb2ce67f1e66b4dd8e2c2bff3a34e23e4929b7ac0e2dc0304:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2006-2842
    cwe-id: CWE-22
-    epss-score: 0.00909
+    epss-score: 0.0094
    epss-percentile: 0.74870
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220356f2985899529b7495f141c558373414b15e565771f883f2309fdde8f57ffde022039f993cdd57a00c0e67428bd815efc6c6169f6ee204dc62b533d1fe285e4bc5b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008fe0dc506204ac3a7809306e4a70b6f2cb9cfb9099edc296c1133b3df2a0b491022100fad1e5b5ae35a53390e055290f744c5a4a383f9c37d07e68856b88dd69989fcb:922c64590222798bb761d5b6d8e72950
@@ -13,7 +13,7 @@ info:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    cvss-score: 7.2
    cwe-id: CWE-79
-    epss-score: 0.89189
+    epss-score: 0.83233
    epss-percentile: 0.99515
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450221009b7ce2019233a1a4dab78f26dfa982683e34e9343e5149b17c4c7aeecb0e3c20022022448fad5fe11b5054733f026bf42e3ddcfcda5a781695de364556a9e2e4cb29:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d9e4e47cb2e2031ba7c2e73907100bf7d8f3cdc6074879c85c351c2e30e19766022100923791610ea61a181ae7522232e999d5c6a3d3da4770d972689b1a393305fe50:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 10
    cve-id: CVE-2007-3010
    cwe-id: CWE-20
-    epss-score: 0.94065
+    epss-score: 0.94007
    epss-percentile: 0.99890
    cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
  metadata:
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e049d9b1ddd06ff9d586414191f3665d44e3b3f29a4913cd653bbb0ba421867102203a976db1a2bc56b625c5d3b935986718a09b7b5f8daa714df1930eca654e96d7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4ea32828db6e93a4397c2861ea59dad773d7ef36f16ac0b082f329c2065f63c02204e2db78bedbb914ef75bc5ad4e1b2511db66fcfc3fb27666b5d9c96cb0c11d00:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2007-4504
    cwe-id: CWE-22
-    epss-score: 0.00063
+    epss-score: 0.0006
    epss-percentile: 0.19921
    cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100e3cb5319977a6a9d76783a9fd6f4dceaedd3048dcd4fbc4df1b05d074ba63609022100d7df5632a9677a5221468b759e0e976b30942f574994ce636e97bf3d7a3b76f7:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fe15d8208006e113d99ecf5f7b5e38ec42c58622d3f67cad06dad850aaf94333022100bddfd712a6e6ac6fc735a508f8c159d322770d70aa4ba6699b2b142574caed8f:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2007-5728
    cwe-id: CWE-79
-    epss-score: 0.00282
+    epss-score: 0.00457
    epss-percentile: 0.51310
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
  metadata:
@@ -57,4 +57,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022029b04d7527b85b77f305198f89b79b67231232e1f15d63e0123b7670955a8b04022100b05129b789e371c3992e80ecd582b120ab1bce2e0b682ee885907f0837fef3c0:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022024cf56006b807e276377fd36fb437d63b17939be0ec9b7a75116c66f0d0a822b02206451ddcf2caef2947d0854ac7540b364ccfeab891f42452c78b6097b63ba073e:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2008-2398
    cwe-id: CWE-79
-    epss-score: 0.00831
+    epss-score: 0.00764
    epss-percentile: 0.73651
    cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
  metadata:
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022036afde93383e45ddae2d39d1c8493aa45346c0fc49397ec75e0fca7016051fbe022071edecdf81f559646264142636cfbb6d67e1848306dd44d211a1efb08db7d39f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008ec3e522097f06d84c09b35e60dbe266ccd7e68cb5325bafe5bed8ff4727157e022100f0ae8e0997a42c36fab50820607de58b11e6b5957e7cbdb196a7db30d8b254b7:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2008-2650
    cwe-id: CWE-22
-    epss-score: 0.03520
+    epss-score: 0.0352
    epss-percentile: 0.87196
    cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
  metadata:
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502203ee4722b9bc3f86d13f492fe8f28c7e9240cff0e9254d3c44bc584772ebfe3a6022100c4a3dbd47dcb2edd116be32239f4f0846e7aa1e6ed546863ee6d1112d1d1498b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206cf309613104f4063640621cdc6ac76a8b1ebf4aa6e2398e29f16dc10576ec7f022100bda95259a430056547282e1978bf98df463fe215395f1f6a055fb69e275f9fca:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 9
    cve-id: CVE-2008-4668
    cwe-id: CWE-22
-    epss-score: 0.00276
+    epss-score: 0.00268
    epss-percentile: 0.50824
    cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220552fc4231924e143d1c6017e328fe5867c9cf8cd112849abc81079797a27df51022100f5572d7e467882078a33cb8324fc369c5f08f8af804b5b468726c544c1729967:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cfc9e1d33955d2db814e69e5e756850a27e89ffac1da93d06eadf29d1985062e02200d6d472180b55ad8eeee0852af45275e3ffeba650fd839902c5c753d1c77b671:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2008-6080
    cwe-id: CWE-22
-    epss-score: 0.06300
+    epss-score: 0.063
    epss-percentile: 0.90534
    cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502207cab7f188986068ae71ebe05bdd580aa7607d10c89d214bde7f41f92805b1466022100f913822c3f037833c41d0114859f633f2cfeb08440ab0d1494035a7f691ee048:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c3dcae9a53e7bd42a5d48f1b8c47dae32d5a06d6936d91fdd162b104ecf8c95e02202d687acf24034fcc228576a9a591f518f303c0f386b1796a5daf99511bc23334:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2008-6222
    cwe-id: CWE-22
-    epss-score: 0.01954
+    epss-score: 0.01649
    epss-percentile: 0.82681
    cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402203d956ac5c3c7b38c803d4b254b97f948f0aca8881d9455716bfb24cd79d459ec022056546cffa9dca77d3c60a3e68d3a5288d07c9b1ce756435aa99eff2ef55089b8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022004ea26a7a9c9ae2ab3e838faf7ec3b5b86f50d4ab9848a816bd53a142bec9749022100b6269eb1fc86eff26400bb3e5f7700e320f269e599ca407a3d16d81c04d7918b:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2008-6465
    cwe-id: CWE-79
-    epss-score: 0.00946
+    epss-score: 0.01157
    epss-percentile: 0.75387
    cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
  metadata:
@@ -63,4 +63,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a8ddacfdb460740bcabd58529a78bc158aeabeff9c8ef5fd2db0d66963578e14022100993afa3340dd4699cdbfc50fcfa058be309cdd1ad10e82e82b4667b14bd21d63:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022041b9257b5bd5628030be58e1edcbdfcda9dcc70d538f4acdb683cde345153490022004e92280a5ba33c7edc8ef0a11ed86943759bceb47d4277e6c37730b483217e0:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 5.8
    cve-id: CVE-2009-0347
    cwe-id: CWE-59
-    epss-score: 0.00975
+    epss-score: 0.03639
    epss-percentile: 0.75768
    cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
  metadata:
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4b0a00483046022100c9794f93c6e8255cbc05e717a1174209e8568781c4f10dc5ce4892990b266e87022100e536d16ecf17c1a53b9040ecf633c6eaa299073dae46959386f0968c47e3862d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022037fae629b878386bf90b0e8ee68ac88724fda2580b3aafbf75177ed8cad2122b022100f245301564969ae7a8a98753cfc70ecd9fd0da26015febca1e753dcbd50e2ed2:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 6.4
    cve-id: CVE-2009-0932
    cwe-id: CWE-22
-    epss-score: 0.02929
+    epss-score: 0.05612
    epss-percentile: 0.85882
    cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100fa7a7599a9aed841b58a95abd16a3b6dd2d5c9afde444fb5362f3fe7b817d51a022061bf65ba2c58981cc2ba509e4435e0c1f9761b24409d28a327fcca15b9b0f5f0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100be6e47c26b931add067f2e02c8d58dc5369135f3e54a5ecea0badcef7713210b022064d3dda047863eea37beedb95097f2815b35c9b29f2113109d9ac18069f904b7:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2009-1151
    cwe-id: CWE-94
-    epss-score: 0.93004
+    epss-score: 0.93032
    epss-percentile: 0.99772
    cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
  metadata:
@@ -58,4 +58,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100ce354e3493b88815fc5798af69afadbd03ebe17ea03f55aa5e0b865c70faab2d02204e8bbe8d251434eb095b60ce48cdc76f7e8fae7fa1997a8f9b8d750a3658a1d2:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022074e409e038eee68bf2772c873664ba63ee34838d9b7a28e5b7125235b508a1a50220598f0a3dfbec59524ecda264e472a8bb8d00e4d81e2a588111c8398b7dd2485a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2009-1872
    cwe-id: CWE-79
-    epss-score: 0.15300
+    epss-score: 0.12
    epss-percentile: 0.94335
    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
  metadata:
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022079339845518bcf9f965afee9485fb46d0823069a1de468b8284416dc610189de022100b5daa6e74fecb0dd3b4e932724402d1059dac68062b5c053b5eb6b4fdd3b300d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220678eab7565aa815d42c2f81dc82d936021df5a12a013a6e72ae996571fad811002210082ea5d9bbe37fec811c18f37eff655cb05bf215fb49ac6de3157c0ca42c51eda:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2009-2100
    cwe-id: CWE-22
-    epss-score: 0.01710
+    epss-score: 0.01877
    epss-percentile: 0.81559
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e2e0e06f33d9ba2643fce9a45e4bf6e8ffc08fe3bc6704d74624117aedca6bc902202d10ce90cc5426c9f11ac78bb54882d5d48dfbe04f9a0cd7d4057dbbd434f81a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022043361ea5d6f300ad2658ab18271d61adcb266367b4934f7ae4bc23e8050d0602022057a14a756c96238b7ebb66e9d855af9dfcd3b3b06b6fbddf2bb5c37741be4297:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2009-3053
    cwe-id: CWE-22
-    epss-score: 0.06037
+    epss-score: 0.01573
    epss-percentile: 0.90330
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100d81fa7d737e9e7ae1de4ec69de1920d04c6336b05c36bf18ad688e71b6ac3446022100f37702933431e2a05b2b5f3b4e33bcbba1daedfcbe1049482b21af5029ba4a68:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200b972654c86f3133ebe021c742eacb65da63c5a7e1e6a40d5c698626f3d2015c022100e8fa4b132f6aede71beb3c454cd2128a9cf4f4a621083b843dba3526b8ff72c1:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2009-4223
    cwe-id: CWE-94
-    epss-score: 0.04140
+    epss-score: 0.04334
    epss-percentile: 0.88207
    cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
  metadata:
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100e561dc69cb17c55e1d32c1361da502a4ed24c8150b429857df188970a3a705b3022100bdbfe1c6e2d4fcbef5aff74e2c66bd80bfeba4020c7c6886a3782e0e45382e04:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207258ab162b78d6d8cd49a89364d3ad162289a9597733a7f600bad997382ddf46022100d84e8640ebba0baaa38e95782fe4fe936e5ad963c19e6041a189c8c49bc38a94:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 5.8
    cve-id: CVE-2009-5020
    cwe-id: CWE-20
-    epss-score: 0.00826
+    epss-score: 0.01389
    epss-percentile: 0.73572
    cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
  metadata:
@@ -39,4 +39,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4a0a00473045022100effbbb567e9b2d3402f1fe2f47be6a8b1d810c7d549ced4c2499ef55ee401964022014333065014916917c4332171f6e7681b3813e1c454dc586b899a19e6619087b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202aef040328e64e7c7e13821a3c190a00ca83e0e7f6b161f7c28fa686cdd643090221008b896962392338d05cb6a4bda781f59aab16b9acea00db67b44808428e2003e0:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-0157
    cwe-id: CWE-22
-    epss-score: 0.04639
+    epss-score: 0.06147
    epss-percentile: 0.88873
    cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
  metadata:
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ca7fdb7c8b24b7db2d7e793bfa70b0fcb8d7553830c841bf3612ef3b7171e2b0022100b3f0a12c66963f7c3a9808a92e784c76626634c018c339324d7286d00441dfe8:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207373acc933249d64b48cede672fd4ecfe9cf284f764ab0cb429158363217ca1c02204dcdd5d0e9e0f2d03d6459c63d30aa1be621f455afeab203b69a57edbfe602b8:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 10
    cve-id: CVE-2010-0219
    cwe-id: CWE-255
-    epss-score: 0.92029
+    epss-score: 0.93449
    epss-percentile: 0.99693
    cpe: cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*
  metadata:
@@ -64,4 +64,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502205e382206023c07203ee95377a6bcb381fd5e54af9d7a590431713a97652deb80022100870b4775cc779ad3ae8c8aeb9a2a7ad2567459ce8d765fd9763c8ece4691ea12:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f23e03229161d9c04f7fca2684a769eff592fbeeebdb7a2c76871e87e6f4f366022100b6fe6db904d1eb12438316c79099b660dbd5221e4169afde6db8c36efbd3f63d:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-0759
    cwe-id: CWE-22
-    epss-score: 0.03967
+    epss-score: 0.04993
    epss-percentile: 0.87943
    cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022033934f74766824677667e328806b8dd59585d0cacf06246f1cf6f325cf96bb9d022100fd7e7805dfb56c4bd09a965d14d9ad41353eda383bca418960490e1029298adf:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022008e9444b28413d51b642feed5ab51cc5cea9c9878e0c8159197907213d91468002202ad1b4590b1903866556f09cc4c278803d89010a0a10cbb9f150dc0756a9eaf0:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2010-1217
    cwe-id: CWE-22
-    epss-score: 0.02108
+    epss-score: 0.04908
    epss-percentile: 0.83380
    cpe: cpe:2.3:a:je_form_creator:je_form_creator:*:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022053d8a753cabc02c5fdfee1cf14e8a29755bbe554d650340a743785fc1855cceb02210091c3a09dd6c30a816e38eee274c41736a309ecdcce8108a72bffbcbd91e895d4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210099bc12f8bc5588f264e422f244ee8d4afef14761a1d1427d7d59d363264da05702200fcb781fe2c9d8daecc2e96320aa3af7efb6ef7c4b2797fe8341bd02da50be65:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1307
    cwe-id: CWE-22
-    epss-score: 0.08046
+    epss-score: 0.0609
    epss-percentile: 0.91731
    cpe: cpe:2.3:a:software.realtyna:com_joomlaupdater:1.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100df69829cb1cab3bbdd702c7122d9d590f83462b72db5b6315b1a2fd7b04cd5a302207b0f34368d2a35f2ac283625f1bc222749c43ee020e434b57bf959de99a89c95:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202dcd5b51d41bb2cbfe79704f15ee96fb4fb590ca6f6bc73f8bd7abd1105928070220481df2b0a9df1b7abbd3ea0990c6b97c246a7796b96261a87e99410baa9b032c:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1308
    cwe-id: CWE-22
-    epss-score: 0.08228
+    epss-score: 0.06232
    epss-percentile: 0.91834
    cpe: cpe:2.3:a:la-souris-verte:com_svmap:1.1.1:*:*:*:*:*:*:*
  metadata:
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100d80f649973e7d843a82620997b9d07526015e1eb66afe4b1b535bcc1f25a59b802200adf21919dbe1364e77f5e5b473d8ab2cc2e2e6e77cc0a555dae20e2c33774f1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100aea747f7e81bcf6c45ef1524ecb14760c2e294af59898249a8b1e67d5a6c0f0b02200dda23571d060aed7cfb3602fce2ed0d1f0591d0a3bff48c341718fed9f53512:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1429
    cwe-id: CWE-264
-    epss-score: 0.19593
+    epss-score: 0.21185
    epss-percentile: 0.95161
    cpe: cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:cp08:*:*:*:*:*:*
  metadata:
@@ -54,4 +54,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100c30199cc1bdd0e1492db951f79b58ec41fa3a74bda905b5e930827f104eb38e90220185b9e9f2b986c533a78c88a196cb3060723a9b3fbf65973382d216f1c08dbec:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202b22c9a6ef50abf9c22ae6387b0d40271973b72228e9131d4ec608d114ea4de402210091ae115392c0d72820ca4dcf93b0c1b3327e99a72dde84ae0043c461da64f4dd:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-1470
    cwe-id: CWE-22
-    epss-score: 0.09630
+    epss-score: 0.07329
    epss-percentile: 0.92550
    cpe: cpe:2.3:a:dev.pucit.edu.pk:com_webtv:1.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100d6960c148b6579853a17a630cd4d00fea1140de1adc191598ae6d178dbb34303022100852ca810bc96d7e8038832589db5c813418e739aed5f8a31734b6fd1e568899a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201b511a43a9b82cd15c6b8f3132f1cf4ad0faa372df679ec7b8beadb5c145615902210094a6befb71ab94af40c92331a098acfea5b3b834f56873e7d1b815c1de7cef53:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-1471
    cwe-id: CWE-22
-    epss-score: 0.09320
+    epss-score: 0.0932
    epss-percentile: 0.92414
    cpe: cpe:2.3:a:b-elektro:com_addressbook:1.5.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402200176f591d50b402654469e4ab3decdf85d3fc79ce71c069d8439a655a4e411c9022013e85c870cfc728162c4cc031b56bd2a04dfb1f3f3d3de0f3f23d8fd99c6d50d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206ed3eb043072cb6906745ba0385bf6365e71a64a6ea94beca6868d6ce296065c02207366a6676924ffcb0baf4620b1169aacad17ea05e8207d7829a4d238dc368d07:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-1472
    cwe-id: CWE-22
-    epss-score: 0.09234
+    epss-score: 0.07018
    epss-percentile: 0.92374
    cpe: cpe:2.3:a:kazulah:com_horoscope:1.5.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100f837a72aecd53f947a32775cd7ce2c919de79ba863eec98f72a6ff6ce3655396022100ad44a06a4706849f786c5bb3dc86c000bdff67ffcd430cab61032385e70c4a2c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bc71544db0c8d32d8d7a8711c494cc91cfa48620cc60a7fe1baa2b6a1399e07a02207b0657006b96de674bfc83a1fbb0a1e8b2fc53fc9470ae391ca09ddc10e777a3:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2010-1474
    cwe-id: CWE-22
-    epss-score: 0.01514
+    epss-score: 0.01602
    epss-percentile: 0.80419
    cpe: cpe:2.3:a:supachai_teasakul:com_sweetykeeper:*:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502200bfa7ac9551f1b5f5d7f78e0d99525a27e14acc814ab020096fb16698f2fe9f0022100de0ae346f5fefb5ecc6bed34adf4731b364b9555fc17248709ced6827d6796e8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201a22c4331e8f58e9ab01c7c38f4ba1641a31fa25cfaaf5fce6d07a45f98057d0022100d3247d54c6db2645a1f166ca6fd6c6914ae3958a4ca72fdfaf4c66934d2f8c09:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2010-1475
    cwe-id: CWE-22
-    epss-score: 0.02440
+    epss-score: 0.0244
    epss-percentile: 0.84545
    cpe: cpe:2.3:a:ternaria:com_preventive:1.0.5:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100baa4ba3bfaa834142f4df99d7209d8cd9009a280519bf98f91c997f1e3a2560a022100c3e604e686356b206ebe13532296590133c899de5bf173be99e6a4b8ecf488d1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c0954cb4b311e43468846c72d58342bcd486172b71a97db79dbedd844bb574a70221008b568d3afd6e87e0f0f143ba15cce9e37c2268efecc7c4bcc6dc1ad8b6c178c5:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1534
    cwe-id: CWE-22
-    epss-score: 0.03170
+    epss-score: 0.0317
    epss-percentile: 0.86445
    cpe: cpe:2.3:a:joomla.batjo:com_shoutbox:*:*:*:*:*:*:*:*
  metadata:
@@ -40,4 +40,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100b359b61f481360c497f026ea9c2e8cd3a6c6eebdd8255e864bf051fff90005d3022100902f1727b733eb91ebac94182bf867b4e89ebd863c08ef5a652587711f1363fb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210093d60c4ac628318313811656653731287b36153b6d18e4a508da156db7b0c6f202204d8ce7e3d2f2ac6ba25adba532e0329106173946782d427c52eb1ba116ee9966:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2010-1586
    cwe-id: CWE-20
-    epss-score: 0.00663
+    epss-score: 0.00657
    epss-percentile: 0.70327
    cpe: cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*
  metadata:
@@ -38,4 +38,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a004730450220049220cfd791ebd32f1264edf5f6a20a748d5ba95f70c88023082184da88b95f022100e3eea5a59102f46041f3910979e6ccb89a542cf13a161f0e91345116df5cd133:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f42e66b5c32d971dcc7128e85ef1b9057319b8cde8c81611a75e83491c3188a3022075cf41c06037ee8f629a4acb2acc558412b33d9d38fc4215f2812a1e4cffd3c6:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1714
    cwe-id: CWE-22
-    epss-score: 0.10542
+    epss-score: 0.06091
    epss-percentile: 0.92942
    cpe: cpe:2.3:a:dev.pucit.edu.pk:com_arcadegames:1.0:*:*:*:*:*:*:*
  metadata:
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022053b37ef1cd84f3c403d53286809ca71bb4d3ee45529e51a35c6bf76ed2daae2002203d9620b6f2942fb93d1eff96cb5b55d0ad7fc3a55f92d500c8b2d9212ed851a8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b52cdfd57a2694c6d6b07aaa97ac7c3a5e377d1a2096560402801bd6a699ecf50221008316db939be46e723c785aa868e789d629e95c584cea0f7e487a35484c1cdc54:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2010-1718
    cwe-id: CWE-22
-    epss-score: 0.02406
+    epss-score: 0.02192
    epss-percentile: 0.84442
    cpe: cpe:2.3:a:lispeltuut:com_archeryscores:1.0.6:*:*:*:*:*:*:*
  metadata:
@@ -39,4 +39,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201f41829486e6f0f6b9d447655df67ae7be472584a3392a9e1a880c832b6dd7c9022100c249bd8d9bd166c30af42e3a1d6f21ee1cde14383815df6ae548f1e36f93c931:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022078fd3ede818c0c8fa89f22594ec55da236bddff89b2526b640e88c69c529a97f0220609c64220f964d7cf19ac9cfa51cc1cd89ce1f6507737449965ad122c162517c:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2010-1722
    cwe-id: CWE-22
-    epss-score: 0.01514
+    epss-score: 0.01602
    epss-percentile: 0.80419
    cpe: cpe:2.3:a:dev.pucit.edu.pk:com_market:2.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402202eb1b4cf2dbaf98da7a68dc5d129c9756c82e4f629597bbd933050914254320402207e0da442095e6278595b463eee006f089d2a3e16c15060a925165c73f7ddd3a2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c431cd158c3b87723aece30761dfb0411f110defe5826d0ab08303007b1d358a022100e29204f8818be4933f08182f9d32b1bd065f8257a7605b75a797a28d147ed961:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2010-1723
    cwe-id: CWE-22
-    epss-score: 0.06235
+    epss-score: 0.0469
    epss-percentile: 0.90482
    cpe: cpe:2.3:a:joomlacomponent.inetlanka:com_drawroot:1.1:*:*:*:*:*:*:*
  metadata:
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502202bdd11eb81584c4779521127c2ab2b4d07d03014e5c31acb319c85a371b39fff022100c499e14840e5e25ea53c535de6940f7f23d4c97b4572eddc397dcb12674bb47d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022029fe17878a502530479234eb83ea279be4019df3ad6ba2e9d0506ab8c503449602210083bca5e759cce9b83ddd995cbc6c18d318a50acde758db05d8437d97ee8f8f76:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1870
    cwe-id: CWE-917
-    epss-score: 0.93315
+    epss-score: 0.93509
    epss-percentile: 0.99802
    cpe: cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
  metadata:
@@ -51,4 +51,4 @@ http:
          - 'LISTSERV Maestro\s+[5678]'
          - 'Administration Hub 9\.0-[123456780]'
          - 'Administration Hub [5678]'
-# digest: 4b0a00483046022100d52cc7db77e7952a42ffacc9ae19b4beb63b0489fd1545896c11fd54ed540d6c022100a93394e353c9b2d89107519af8f29c0854bdb0bdde0a9d613c22494938a8ea2f:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022033e45e4bdd649fa5cc6cf30d3fa39165500aba5b12a4f368dd4b6767a5d30103022051b4c8852d6401d8897d64bd4c8866331c561557088c4737ba0193cbf046856f:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-1954
    cwe-id: CWE-22
-    epss-score: 0.08580
+    epss-score: 0.0858
    epss-percentile: 0.92000
    cpe: cpe:2.3:a:joomlacomponent.inetlanka:com_multiroot:1.0:*:*:*:*:*:*:*
  metadata:
@@ -39,4 +39,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220432886d9cbec939bad2379e52ef7b6594ba797c8025871b822d16159f2d6f3db022100f1310fc31145c039d926adc1027240895253fa05834101544cb88df6ae601e64:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100823bc82fdc95d2b3ced3c5f960b0c514a971d313b21d5e6a2eed79b2d31e6e81022100d8fad40f4b0703971b20a2bdb52aa49f72950ad57992e2db79eca3ed20a1f0a2:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-1982
    cwe-id: CWE-22
-    epss-score: 0.02057
+    epss-score: 0.04499
    epss-percentile: 0.83134
    cpe: cpe:2.3:a:joomlart:com_javoice:2.0:*:*:*:*:*:*:*
  metadata:
@@ -40,4 +40,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402206936d5ae0ef414c9808a78a26493ebd232c307b62c0102bc0ef0bb2f497c1b17022010b6fa012075fc2fa59920d293467be620eb1b748d1833763d237e053794f830:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206c92d6f2e7b67142fda15699b97d25f6494dddbbf3d48412e083a3562659775f02205675db91e408d64ae2e9f12798c30a50cc7c8dd381af933e28295f6f79c6d489:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-1983
    cwe-id: CWE-22
-    epss-score: 0.01018
+    epss-score: 0.02013
    epss-percentile: 0.76283
    cpe: cpe:2.3:a:redcomponent:com_redtwitter:1.0b8:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402200daad5dd12e59aeffc7d28149dacf7c9b1aa216f904bc50b9849db3d35d1ec80022042c0fbc92a32c5988488260b05628d1f16584eebed8704586cca920b9a761ec1:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022056e07c8143799489592cc73a14f0036f1ec611bc924226cae6b92e8bf8fb85ed02204b921318def8b7c6e7cf5bd949e7ff35959cb421591b0394244debae98fa2960:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-2259
    cwe-id: CWE-22
-    epss-score: 0.00840
+    epss-score: 0.00893
    epss-percentile: 0.73789
    cpe: cpe:2.3:a:tamlyncreative:com_bfsurvey_profree:1.2.6:*:*:*:*:*:*:*
  metadata:
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100bd2b7b58953d40fb1a12a5df8bd39963b5037edda840c87bffef05aa1bb8586b02205496733fc2451ad4d36a773309dd212cf8a1be47acb239a2f830f0efb0429802:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ab2a2f35004b9a469e462d635ce5b11b19b53124e385dc6614d291a0d79019ff02200a2ff0fbd2681852272a8754dd851b949fb2243d6bf2acf9cb4d2910d47ee3a7:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-2307
    cwe-id: CWE-22
-    epss-score: 0.05839
+    epss-score: 0.04386
    epss-percentile: 0.90153
    cpe: cpe:2.3:h:motorola:surfboard_sbv6120e:sbv6x2x-1.0.0.5-scm-02-shpc:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e6209452c3cee206201f336ee8eadf4f335b2702ef7f387910f083cacb64a0cc02205d5cc4bd2a020a26ac7e2ce8e93a9ddf2642aac353aed54f22a5fb9488adcd9e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008562c27d2ddeb8e7f76be377bcc13329570a32fe857ccfa394f94c55a47b55eb022100dbe180592166307348fa75ef4e84a06cd121015f37fae493cfdcb54086a4abdd:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2010-2507
    cwe-id: CWE-22
-    epss-score: 0.01930
+    epss-score: 0.0193
    epss-percentile: 0.82598
    cpe: cpe:2.3:a:masselink:com_picasa2gallery:*:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502204379f3e6d7cf0b9ded74d37d05fc0d214e21824aa8bdc86f9ae83793a4ccae6b022100dc888cf8850e2a0d612125f76db4d62c8808bf4dcbf54c64a13907d8b97b2d6b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202ae034710e310289f65db3f123e4d8477de690886f1604797ab6dd430b01832702207c616dd9f2499c25e2414f1e1e491df8075b65cee6e24ecbc40b07f366fa9d52:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-2861
    cwe-id: CWE-22
-    epss-score: 0.94299
+    epss-score: 0.94334
    epss-percentile: 0.99935
    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
  metadata:
@@ -54,4 +54,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100c87f054847ae2fa87f15d01d6bae3cf4a95ffa00e34a3389f0f7a7a14cac6e31022100f8f57edd28ea81110678f20181e4007908d25184c59dba3967a5f662ce2f3190:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220387af9752bc7cf71156c6bfec3f23d817e87da52b8163414e9619045324709ac02205f8cae98f5a49cc73babd7df41883d9ea98dccd59d80baff4962762eb6b38056:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5
    cve-id: CVE-2010-3203
    cwe-id: CWE-22
-    epss-score: 0.02280
+    epss-score: 0.0228
    epss-percentile: 0.84015
    cpe: cpe:2.3:a:xmlswf:com_picsell:1.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402205ea9c4080b09f6313aeea49791c513c840332cecdbdf4c1ac4117a9c4d46b0f802204934d5898695d357a56de64696d4469ebf8db495882a8d2849f384e99b80c11c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d2eaef0ac0a8f22b09118f408bc433acef57e5bb03ce5d551d8fc083f3395553022100e11ec1858f9d71f9fc04eb12011da67e6e3c623e0ae864ba3ccb6593381db5ae:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-4769
    cwe-id: CWE-22
-    epss-score: 0.08231
+    epss-score: 0.02614
    epss-percentile: 0.91836
    cpe: cpe:2.3:a:janguo:com_jimtawl:1.0.2:*:*:*:*:*:*:*
  metadata:
@@ -39,4 +39,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a004830460221009732e1ffbfedb248d8e0ec33567bbcc5b6a6ef652f086a143b7386324ca5635c022100ada19cb4d68a53f59516e329d587eb7b3a137695ef11e1604d6e0c2a2bf6593a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4af0344ae8a527c779451470e24a53b6ad63aa2445a5b3a5977efbc8813c9210220338a2d46426bbdca37d11932f13e3c5896b62029ead1b5aa46b12022f5f70497:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-4977
    cwe-id: CWE-89
-    epss-score: 0.09105
+    epss-score: 0.05215
    epss-percentile: 0.92312
    cpe: cpe:2.3:a:miniwork:com_canteen:1.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450221008d605ef5881c1831a2dc167225e5e127294f1a1970ecdaa75dc43009102b922202201d8178571be0f7846c53bd8253397d555f68f0eae85b2436ef3f11fca269025c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207108180502e322f94bffb2aecf662f8ae33642b3885af4daa24f0074c9b3228d0221009f97fd8e835ead12ea4626d2f955ae66cb5476b4cb901149ca5c27d388e316d6:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2010-5028
    cwe-id: CWE-89
-    epss-score: 0.17118
+    epss-score: 0.10291
    epss-percentile: 0.94721
    cpe: cpe:2.3:a:harmistechnology:com_jejob:1.0:*:*:*:*:*:*:*
  metadata:
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100db83a18948a12f19b4678a8c615ade6a33603691e76a4bf7e9b730d0c6460b8d022100866d805c4c9498ea0c28d7c3b91cd944f152097539b8cd0333930dab6dfecc1d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022012433756465ff881eabbd72705bdc447da2846344d4a8d67b0908b6e50e7dff50220290e75fce3e71360eb538aedc27b78879cbefe0cd5efbda5590a1c033ff4f93c:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2010-5278
    cwe-id: CWE-22
-    epss-score: 0.23359
+    epss-score: 0.25059
    epss-percentile: 0.95712
    cpe: cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*
  metadata:
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022064bfae8a8dae503af36740b8589f48e8c3d554ec6777a31430f06c9a8bb7510c022100c265595ca7673b05b62aa09cd5fea8d5fd27a2a125d30ac0b05fff5a73a5e187:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022003792c79a1581834af6f02dd96b8482bd5499d5958a3f920647a7d4a2c5c4ad4022032a762456334e45ba02a988cea7582a5274cf51b6c9fb7d73080aa07c4684299:922c64590222798bb761d5b6d8e72950
Author	SHA1	Message	Date
Prince Chaddha	34da6336a3	Move CVE-2025-8286 to correct directory and improve template - Move template from http/cves/2025/ to network/cves/2025/ (TCP protocol) - Update name to follow format guidelines - Add max-request metadata - Improve description clarity - Add guralp vendor tag - Fix FOFA query formatting - Remove trailing spaces	2025-08-01 08:15:10 -07:00
Chris	3c26069bab	Increase banner size	2025-08-01 16:09:51 +02:00
Chris	9d159b4b6a	Add CVE-2025-8286 - Güralp Systems FMUS	2025-08-01 15:55:09 +02:00
ghost	7e5f3fa1a8	chore: generate new addition list 🤖	2025-07-31 10:37:29 +00:00
ghost	6e75d2506a	chore: sign templates 🤖	2025-07-31 10:37:25 +00:00
ghost	80c43c5372	chore: generate templates checksum 🤖	2025-07-31 10:37:23 +00:00
ghost	d0577e6bf0	chore: generate CVEs metadata 🤖	2025-07-31 10:37:20 +00:00
Dhiyaneshwaran	4cb66a7f77	Merge pull request #12754 from projectdiscovery/pussycat0x-patch-8 Create CVE-2024-2053.yaml	2025-07-31 16:06:57 +05:30
ghost	ce7e069119	chore: generate new addition list 🤖	2025-07-31 10:27:50 +00:00
ghost	d3a99d33d0	chore: sign templates 🤖	2025-07-31 10:27:43 +00:00
ghost	8128d0c7f7	chore: generate CVEs metadata 🤖	2025-07-31 10:27:39 +00:00
pussycat0x	761c038a18	Merge pull request #12749 from s-cu-bot/add-templates Add CVE-2025-44177 template	2025-07-31 15:57:15 +05:30
pussycat0x	152b15545b	tags - update	2025-07-31 15:52:34 +05:30
Dhiyaneshwaran	a24494c988	updated matcher	2025-07-31 12:15:33 +05:30
ghost	f30cca4fc2	chore: generate new addition list 🤖	2025-07-31 06:35:48 +00:00
ghost	648fdd9dc6	chore: sign templates 🤖	2025-07-31 06:35:40 +00:00
ghost	84b8fd9738	chore: generate templates checksum 🤖	2025-07-31 06:35:37 +00:00
Dhiyaneshwaran	315740906c	Merge pull request #12751 from icarot/main Create apache-inlong-detect.yaml and apache-inlong-default-login.yaml	2025-07-31 12:05:12 +05:30
Dhiyaneshwaran	77d3f83a6e	fix-trail-space	2025-07-31 11:51:38 +05:30
ghost	a45462d7b7	chore: generate new addition list 🤖	2025-07-31 06:19:58 +00:00
ghost	b1bff7ba2a	chore: generate templates checksum 🤖	2025-07-31 06:19:46 +00:00
ghost	caaf13c413	chore: sign templates 🤖	2025-07-31 06:19:39 +00:00
Dhiyaneshwaran	928b3b0ecd	Merge pull request #11984 from HuTa0kj/feature/nocobase Add NocoBase Detect	2025-07-31 11:49:15 +05:30
Dhiyaneshwaran	c038a828a5	updated metadata	2025-07-30 17:43:42 +05:30
Dhiyaneshwaran	c3c224545b	Update CVE-2024-2053.yaml	2025-07-30 17:42:18 +05:30
pussycat0x	f0fc36f580	matchers - update	2025-07-30 17:38:38 +05:30
pussycat0x	be9521710a	reference - update	2025-07-30 17:32:42 +05:30
pussycat0x	36ec678978	Create CVE-2024-2053.yaml	2025-07-30 17:25:19 +05:30
ghost	94e0273137	chore: generate new addition list 🤖	2025-07-30 10:08:33 +00:00
ghost	85501366bf	chore: sign templates 🤖	2025-07-30 10:08:26 +00:00
ghost	8825edfb51	chore: generate templates checksum 🤖	2025-07-30 10:08:22 +00:00
Dhiyaneshwaran	a21728af8a	Merge pull request #11972 from rxerium/dnt-detect DNT Policy Detect	2025-07-30 15:38:01 +05:30
ghost	0e5b6ab62b	chore: generate new addition list 🤖	2025-07-30 10:07:57 +00:00
ghost	54801cd36d	chore: sign templates 🤖	2025-07-30 10:07:51 +00:00
ghost	737d155021	chore: generate templates checksum 🤖	2025-07-30 10:07:47 +00:00
Dhiyaneshwaran	1a684af098	Merge pull request #12652 from projectdiscovery/Anonymous-LWhws8NzLuhJoscTAqcVoS Added template for easycvr-user-info-leak	2025-07-30 15:37:23 +05:30
Dhiyaneshwaran	34c5911837	Update and rename http/vulnerabilities/easycvr-user-info-disclosure.yaml to http/vulnerabilities/other/easycvr-user-info-disclosure.yaml	2025-07-30 15:33:03 +05:30
ghost	32b58b3a8c	chore: generate new addition list 🤖	2025-07-30 10:02:32 +00:00
ghost	9809c6bc5d	chore: sign templates 🤖	2025-07-30 10:02:29 +00:00
ghost	94dbcfb78a	chore: generate templates checksum 🤖	2025-07-30 10:02:26 +00:00
ghost	0125cde038	chore: generate CVEs metadata 🤖	2025-07-30 10:02:21 +00:00
Dhiyaneshwaran	3ebd12c02b	Merge pull request #12753 from projectdiscovery/CVE-2025-1595 Create CVE-2025-1595.yaml	2025-07-30 15:32:03 +05:30
ghost	6d6be0335d	chore: sign templates 🤖	2025-07-30 10:01:13 +00:00
ghost	d980f3b47a	chore: generate templates checksum 🤖	2025-07-30 10:01:01 +00:00
Dhiyaneshwaran	27a2502659	Merge pull request #12562 from thezakman/composer Fixed FN .lock detection	2025-07-30 15:30:36 +05:30
Dhiyaneshwaran	9b9e50d26c	fix-file-name	2025-07-30 15:27:39 +05:30
Dhiyaneshwaran	43624afd61	fix space	2025-07-30 15:24:53 +05:30
Ritik Chaddha	8e31663257	Create CVE-2025-1595.yaml	2025-07-30 09:55:18 +05:30
Ritik Chaddha	d4710dd125	Update and rename easycvr-user-info-leak.yaml to http/vulnerabilities/easycvr-user-info-disclosure.yaml	2025-07-30 09:44:27 +05:30
Ritik Chaddha	e92f3a88e9	updated matchers	2025-07-30 09:33:04 +05:30
Ritik Chaddha	a507f32385	Update do-not-track-policy-detect.yaml	2025-07-30 09:27:14 +05:30
Ritik Chaddha	1716f30874	Update nocobase-detect.yaml	2025-07-30 09:25:31 +05:30
Ritik Chaddha	5ad3603776	updated matcher	2025-07-30 09:19:01 +05:30
Ritik Chaddha	194a4f5b7f	updated matchers	2025-07-30 09:14:10 +05:30
Icaro Torres	48a5976444	Create apache-inlong-detect.yaml Detects a Apache InLong server, a one-stop, full-scenario integration framework for massive data.	2025-07-29 22:21:28 -03:00
Icaro Torres	b6aa937547	Create apache-inlong-default-login.yaml Apache InLong server enables default admin credentials. An attacker can execute unauthorized operations.	2025-07-29 22:19:28 -03:00
s-cu-bot	77d3b6970c	Merge branch 'main' into add-templates	2025-07-30 08:33:35 +09:00
s-cu-bot	652518b76e	Update CVE-2025-44177.yaml - Fixed vendor/product metadata to use lowercase format - Revise cve tag to cve2025 - Fixed tag formatting by removing spaces - fixed template ID to 'CVE-2025-44177' - add impact section in description	2025-07-30 08:33:10 +09:00
s-cu-bot	1b19340044	Update CVE-2025-44177.yaml	2025-07-30 08:26:00 +09:00
ghost	5c0d68a8ee	chore: generate new addition list 🤖	2025-07-29 20:28:06 +00:00
ghost	d8599a79a3	chore: sign templates 🤖	2025-07-29 20:28:05 +00:00
ghost	b5c9d107c1	chore: generate templates checksum 🤖	2025-07-29 20:27:54 +00:00
Dhiyaneshwaran	79d026a32e	Merge pull request #12662 from projectdiscovery/add-scalar-detection-template Add Scalar API documentation detection template	2025-07-30 01:57:30 +05:30
Ritik Chaddha	8a135c4029	updated matchers	2025-07-30 01:49:28 +05:30
Ritik Chaddha	cbe00a6d9a	Delete http/cves/2020/CVE-2020-24914.yaml	2025-07-30 01:37:52 +05:30
s-cu-bot	f9a18da686	Add CVE-2025-44177 template	2025-07-30 00:11:52 +09:00
ghost	3348f92609	chore: generate new addition list 🤖	2025-07-29 10:54:27 +00:00
ghost	d8fc44d079	chore: generate templates checksum 🤖	2025-07-29 10:54:23 +00:00
ghost	a9b8dec658	chore: generate CVEs metadata 🤖	2025-07-29 10:54:19 +00:00
Dhiyaneshwaran	74b30ea26d	Merge pull request #12657 from Sourabh-Sahu/main Create CVE-2022-25237.yaml	2025-07-29 16:23:56 +05:30
Dhiyaneshwaran	8ecd04b29f	Update CVE-2022-25237.yaml	2025-07-29 16:15:20 +05:30
ghost	64467ef2a8	chore: generate new addition list 🤖	2025-07-29 10:42:41 +00:00
ghost	bedc88b537	chore: sign templates 🤖	2025-07-29 10:42:39 +00:00
ghost	2c056bceb3	chore: generate templates checksum 🤖	2025-07-29 10:42:30 +00:00
Dhiyaneshwaran	07c5c00969	Merge pull request #12498 from icarot/main Create openmetadata-detect.yaml and openmetadata-default-login.yaml	2025-07-29 16:12:09 +05:30
Dhiyaneshwaran	bacc2f08c4	trail-space-fix	2025-07-29 16:09:30 +05:30
ghost	257efe3b87	chore: generate new addition list 🤖	2025-07-29 10:37:23 +00:00
ghost	5d8ced2a75	chore: sign templates 🤖	2025-07-29 10:37:20 +00:00
ghost	597647f11d	chore: generate CVEs metadata 🤖	2025-07-29 10:37:19 +00:00
ghost	aa21c9dba3	chore: generate templates checksum 🤖	2025-07-29 10:37:13 +00:00
pussycat0x	84a808db18	Merge pull request #12714 from projectdiscovery/CVE-2025-6197 Create CVE-2025-6197.yaml (Open Redirect via Organization Switching)	2025-07-29 16:06:51 +05:30
Dhiyaneshwaran	0198b40b62	case sensitive fix metadata	2025-07-29 16:06:32 +05:30
Dhiyaneshwaran	9acc7ece4e	Update and rename http/default-logins/openmetadata-default-login.yaml to http/default-logins/openmetadata/openmetadata-default-login.yaml	2025-07-29 16:05:45 +05:30
Dhiyaneshwaran	78ac9c6617	update username and password with variables	2025-07-29 16:01:18 +05:30
ghost	b94d8e5ada	chore: generate new addition list 🤖	2025-07-29 10:28:57 +00:00
ghost	c26130fb14	chore: sign templates 🤖	2025-07-29 10:28:51 +00:00
pussycat0x	901822f559	Merge pull request #12708 from hdm/bug/12697 Address false negative in iDRAC 9 Default Login	2025-07-29 15:58:27 +05:30
ghost	59b2ee2fde	docs: update README 🤖	2025-07-28 22:52:49 +00:00
ghost	749b9094c1	chore: generate templates stats 🤖	2025-07-28 22:52:06 +00:00
ghost	364dd93c55	chore: sign templates 🤖	2025-07-28 22:46:10 +00:00
ghost	ac2dbf327e	chore: generate templates checksum 🤖	2025-07-28 22:46:07 +00:00
ghost	f60239197e	chore: generate CVEs metadata 🤖	2025-07-28 22:46:03 +00:00
Dhiyaneshwaran	e6f207dfd5	Merge pull request #12746 from projectdiscovery/FN-CVE-2025-4388 Fix FN CVE-2025-4388.yaml	2025-07-29 04:15:45 +05:30
ghost	39b997c979	chore: sign templates 🤖	2025-07-28 22:44:50 +00:00
ghost	e3da19d00e	chore: generate templates checksum 🤖	2025-07-28 22:44:41 +00:00
Dhiyaneshwaran	2c66908168	Merge pull request #12643 from darses/patch-34 Update aspect-control-panel	2025-07-29 04:14:25 +05:30
ghost	62cdc4465a	chore: generate templates checksum 🤖	2025-07-28 22:44:16 +00:00
ghost	4642a085e0	chore: sign templates 🤖	2025-07-28 22:44:13 +00:00
Dhiyaneshwaran	4ad2d0ded0	Merge pull request #12738 from darses/patch-35 Update papercut-ng-panel	2025-07-29 04:13:49 +05:30
ghost	9bcf811c4f	chore: sign templates 🤖	2025-07-28 22:42:38 +00:00
ghost	937601233a	chore: generate templates checksum 🤖	2025-07-28 22:42:29 +00:00
Dhiyaneshwaran	959ef7e047	Merge pull request #12578 from adervis3/main Update CVE-2024-32113.yaml	2025-07-29 04:12:03 +05:30
Dhiyaneshwaran	1089777fb6	Merge branch 'main' into main	2025-07-29 04:11:24 +05:30
Ritik Chaddha	5ad430f27d	Fix FN CVE-2025-4388.yaml	2025-07-29 04:06:09 +05:30
Prince Chaddha	901f54e4cf	Update .new-additions	2025-07-28 17:34:45 -05:00
ghost	ab5879aea8	chore: sign templates 🤖	2025-07-28 22:24:01 +00:00
ghost	f33448ca0a	chore: generate templates checksum 🤖	2025-07-28 22:23:45 +00:00
Prince Chaddha	1aed9011a8	Merge pull request #12744 from projectdiscovery/v10.2.6-release v10.2.6-release - removed invalid WP templates + fixed redirect field + Updated EPSS	2025-07-28 17:23:20 -05:00
Prince Chaddha	9d187aaec7	Merge branch 'main' into v10.2.6-release	2025-07-28 17:16:38 -05:00
ghost	8e291f6b50	chore: sign templates 🤖	2025-07-28 22:15:47 +00:00
ghost	5afb209f04	chore: generate templates checksum 🤖	2025-07-28 22:15:44 +00:00
Prince Chaddha	1b25195568	Merge pull request #12745 from projectdiscovery/cursor/update-kev-tags-for-vulnerabilities-6cd7 Update kev tags for vulnerabilities	2025-07-28 17:15:20 -05:00
Prince Chaddha	d32621427b	updated EPSS score	2025-07-28 17:11:21 -05:00
Cursor Agentandprince	01a5929977	Add 'kev' tag to multiple CVE and vulnerability templates Co-authored-by: prince <[email protected]>	2025-07-28 20:37:38 +00:00
Prince Chaddha	34ea099b62	removed invalid WP templates and fixed redirect field	2025-07-28 15:26:51 -05:00
Ritik Chaddha	58545f32b2	Update papercut-ng-panel.yaml	2025-07-29 01:55:18 +05:30
Ritik Chaddha	2a4f36f140	Update openmetadata-default-login.yaml	2025-07-29 01:50:39 +05:30
Ritik Chaddha	d62971d8a2	Update openmetadata-detect.yaml	2025-07-29 01:48:21 +05:30
Ritik Chaddha	7f601b59e8	updated macthers	2025-07-29 01:46:47 +05:30
Prince Chaddha	1d8edc6beb	Fix papercut-ng-panel template issues - Fixed typo in Shodan query: httl.favicon.hash -> http.favicon.hash - Removed trailing colon from favicon hash query - Added CVSS metrics and CWE-200 to classification section - Added ZoomEye query for better search coverage	2025-07-28 15:15:22 -05:00
ghost	db46c5e0b2	chore: generate new addition list 🤖	2025-07-28 20:10:12 +00:00
ghost	9ca7d70920	chore: sign templates 🤖	2025-07-28 20:10:10 +00:00
ghost	c00d6ad004	chore: generate templates checksum 🤖	2025-07-28 20:10:08 +00:00
Dhiyaneshwaran	661c82652c	Merge pull request #12580 from matejsmycka/ysoft-enum feat: add YSoft SafeQ panel exposure template	2025-07-29 01:39:42 +05:30
ghost	ae9c9d52a8	chore: generate templates checksum 🤖	2025-07-28 20:06:16 +00:00
ghost	544d44de72	chore: sign templates 🤖	2025-07-28 20:06:07 +00:00
Ritik Chaddha	f6bd321a43	Merge pull request #12501 from rxerium/threads-update Threads Domain Update	2025-07-29 01:35:44 +05:30
Ritik Chaddha	f6ee3f5456	Update safeq-panel.yaml	2025-07-29 01:32:48 +05:30
Ritik Chaddha	9cd038dbd8	Update aspect-control-panel.yaml	2025-07-29 01:20:29 +05:30
Chris	60dbffdd40	Update papercut-ng-panel - Additional fofa/shodan queries - Extract build date from static file reference	2025-07-28 19:40:00 +02:00
ghost	5ce505c492	chore: generate new addition list 🤖	2025-07-28 12:26:53 +00:00
ghost	b5065b6d74	chore: generate CVEs metadata 🤖	2025-07-28 12:26:51 +00:00
ghost	cca8cc3a49	chore: sign templates 🤖	2025-07-28 12:26:48 +00:00
ghost	aa5c736a6e	chore: generate templates checksum 🤖	2025-07-28 12:26:42 +00:00
pussycat0x	ccb2ad76ab	Merge pull request #12685 from projectdiscovery/etq-reliance-auth-bypass Create CVE-2025-34143.yaml (ETQ Reliance Authentication Bypass via Trailing Space)	2025-07-28 17:56:24 +05:30
Dhiyaneshwaran	e62d424bdf	Update CVE-2025-6197.yaml	2025-07-25 20:41:03 +05:30
Dhiyaneshwaran	f89de0db5d	Create CVE-2025-6197.yaml	2025-07-25 20:35:22 +05:30
Pedro Araujo	d6cd81164d	Merge branch 'main' into composer	2025-07-25 10:33:42 -03:00
Rishi	8b4d2e1244	fix	2025-07-25 12:07:00 +01:00
Rishi	cf1afe81d4	strengthen matchers	2025-07-25 12:02:01 +01:00
Dhiyaneshwaran	131683c5e8	description-format-update	2025-07-25 14:55:07 +05:30
HD Moore	209157c2ff	fix #12697 by switching to regex matcher	2025-07-24 23:10:48 -05:00
Icaro Torres	23b2897b75	Update openmetadata-detect.yaml Including princechaddha suggestion	2025-07-24 08:32:20 -03:00
Icaro Torres	2a0e16ff15	Update openmetadata-default-login.yaml Including princechaddha suggestion	2025-07-24 08:31:12 -03:00
Prince Chaddha	7fa54c1c40	Update CVE-2025-34143 template structure - Add impact and remediation sections - Include proper classification with CVSS metrics and CWE - Add missing cve and cve2025 tags - Add NVD reference link - Set verified to true in metadata	2025-07-23 11:23:21 +04:00
Dhiyaneshwaran	9bb1dad95d	fix-template	2025-07-23 12:14:57 +05:30
Dhiyaneshwaran	c4b84986ee	fix-template	2025-07-23 12:12:11 +05:30
Sourabh Sahu	41de55890c	Update CVE-2022-25237.yaml	2025-07-22 16:49:02 +05:30
Dhiyaneshwaran	8a43448e7c	Create etq-reliance-auth-bypass.yaml	2025-07-22 14:20:35 +05:30
Prince ChaddhaandClaude	6906fceae8	Add Scalar API documentation detection template - Adds detection for Scalar UI in backend applications - Targets /scalar and /scalar/v1 endpoints - Includes proper metadata and classification - Resolves GitHub issue #12622 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>	2025-07-20 10:09:59 +04:00
Prince Chaddha	6661aac63e	Update CVE-2022-25237.yaml	2025-07-20 09:50:36 +04:00
Sourabh Sahu	15b818fb9c	Update CVE-2022-25237.yaml	2025-07-20 09:57:58 +05:30
Sourabh Sahu	9f16f47311	Create CVE-2022-25237.yaml	2025-07-20 08:51:09 +05:30
Chris	2f861d2034	Add ics tag	2025-07-17 20:50:00 +02:00
Chris	360c82fe14	Update aspect-control-panel	2025-07-17 20:38:39 +02:00
adervis3	ad8184c91f	Merge branch 'main' into main	2025-07-14 09:22:24 +03:00
Prince Chaddha	f2026a7406	misc updates	2025-07-12 16:09:40 +05:30
Matej SmyckaandChris	3cccee9b60	Apply suggestions from code review Co-authored-by: Chris <[email protected]>	2025-07-11 21:05:52 +02:00
Matej Smycka	10150fbf11	feat: add YSoft SafeQ panel exposure template	2025-07-11 15:42:47 +02:00
adervis3	42f1d3e828	Update CVE-2024-32113.yaml Added windows support: CVE-2024-32113	2025-07-11 15:45:58 +03:00
Pedro Araujo	70ee04b407	fix .lock detection	2025-07-07 19:57:59 -03:00
Rishi	ca2c5e6103	domain update	2025-06-30 15:11:00 +01:00
Icaro Torres	9ce34ceab4	Create openmetadata-detect.yaml	2025-06-29 17:32:39 -03:00
Icaro Torres	42cdc1dbf8	Create openmetadata-default-login.yaml	2025-06-29 17:29:17 -03:00
Rishi	e932fe991d	add tags	2025-04-22 18:35:11 +01:00
rivers	2d258d99a5	rename	2025-04-22 17:16:22 +08:00
rivers	84b520d380	Add nocobase	2025-04-22 17:07:04 +08:00
Rishi	bd9fc87cc2	remove trailing space	2025-04-20 19:49:42 +01:00
Rishi	c750d445f3	dnt-policy-detect	2025-04-20 19:43:04 +01:00
Anonymous	0ced7df900	Added template for easycvr-user-info-leak	-