mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-11-07 08:36:19 -10:00
Compare commits
100
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
a0fd48aab8 | ||
|
|
7593a6ff73 | ||
|
|
5d85511db8 | ||
|
|
32549038b6 | ||
|
|
154aeeaa6f | ||
|
|
498624e6d8 | ||
|
|
89af84f423 | ||
|
|
eb5c356793 | ||
|
|
3248d80e69 | ||
|
|
d64be06153 | ||
|
|
6db2187ce9 | ||
|
|
083ab10db5 | ||
|
|
ce294489b5 | ||
|
|
1e39089003 | ||
|
|
487b07e5b6 | ||
|
|
b36e8548a6 | ||
|
|
b9f288d101 | ||
|
|
81d5e21f31 | ||
|
|
16b628ac02 | ||
|
|
3ea4683692 | ||
|
|
2ea4df12f3 | ||
|
|
adb4733fa4 | ||
|
|
bfac8a0998 | ||
|
|
84274828cf | ||
|
|
f74845198e | ||
|
|
b898967785 | ||
|
|
4763190137 | ||
|
|
e29ee728ec | ||
|
|
b2f20abd9f | ||
|
|
4fc6e3419c | ||
|
|
bd91089aa8 | ||
|
|
140d97b6ab | ||
|
|
12d6637fff | ||
|
|
60bbcc689e | ||
|
|
cc7b25b9fb | ||
|
|
e711b42671 | ||
|
|
67eec954c3 | ||
|
|
fdc06caee6 | ||
|
|
3598024a47 | ||
|
|
917bc7ae01 | ||
|
|
ae6899ec89 | ||
|
|
8b0960f13d | ||
|
|
9f42d8ea5d | ||
|
|
3e4fab2de1 | ||
|
|
2d8ca26d75 | ||
|
|
bc281bd6eb | ||
|
|
90ace8c3e5 | ||
|
|
69797379bc | ||
|
|
c22d1f0457 | ||
|
|
83ca02caa5 | ||
|
|
59db62720a | ||
|
|
8a40bc0730 | ||
|
|
5df53e6ac0 | ||
|
|
3f1c40a39a | ||
|
|
e7e51eaaef | ||
|
|
60c4cbf882 | ||
|
|
74b67d9cda | ||
|
|
578e26529a | ||
|
|
80e461b261 | ||
|
|
4c1eaef1c7 | ||
|
|
1a404d9cf6 | ||
|
|
2856c7ce60 | ||
|
|
c40d8c5694 | ||
|
|
b4d5d765a6 | ||
|
|
acdb706949 | ||
|
|
19f8f9d1b0 | ||
|
|
3f1ab3656a | ||
|
|
36b472eca8 | ||
|
|
bc29a40672 | ||
|
|
09dc274019 | ||
|
|
c83db59b65 | ||
|
|
187a3b5e5e | ||
|
|
7b85a488cc | ||
|
|
1a0a0de79a | ||
|
|
f7c09bc79a | ||
|
|
1603bc9629 | ||
|
|
d009260fb0 | ||
|
|
e7e97edc2b | ||
|
|
acc9619cd3 | ||
|
|
d66d3e33bd | ||
|
|
4c07bee8c0 | ||
|
|
74c0a710a6 | ||
|
|
1c48f61c3f | ||
|
|
980b69cb9b | ||
|
|
a814a8ae77 | ||
|
|
6ec5e8b631 | ||
|
|
59b3333f76 | ||
|
|
c04dede6d7 | ||
|
|
270291506b | ||
|
|
94a98309e7 | ||
|
|
74e4ae5084 | ||
|
|
325fda0f5f | ||
|
|
a90848eabd | ||
|
|
f1b20fd4de | ||
|
|
82344db5f3 | ||
|
|
53894a44fd | ||
|
|
9b2ecdd116 | ||
|
|
a2664e41e4 | ||
|
|
e7daa74fb8 | ||
|
|
23d80ba001 | - |
No files matched your search
@@ -1,4 +1,5 @@
|
||||
code/cves/2024/CVE-2024-47575.yaml
|
||||
code/misconfiguration/dns-axfr-enabled.yaml
|
||||
http/cves/2018/CVE-2018-6882.yaml
|
||||
http/cves/2019/CVE-2019-11507.yaml
|
||||
http/cves/2021/CVE-2021-41419.yaml
|
||||
@@ -6,6 +7,8 @@ http/cves/2021/CVE-2021-45467.yaml
|
||||
http/cves/2022/CVE-2022-26143.yaml
|
||||
http/cves/2023/CVE-2023-2437.yaml
|
||||
http/cves/2023/CVE-2023-34048.yaml
|
||||
http/cves/2024/CVE-2024-0799.yaml
|
||||
http/cves/2024/CVE-2024-0801.yaml
|
||||
http/cves/2024/CVE-2024-10146.yaml
|
||||
http/cves/2024/CVE-2024-11238.yaml
|
||||
http/cves/2024/CVE-2024-27443.yaml
|
||||
@@ -30,14 +33,22 @@ http/cves/2025/CVE-2025-6174.yaml
|
||||
http/cves/2025/CVE-2025-61884.yaml
|
||||
http/cves/2025/CVE-2025-6403.yaml
|
||||
http/cves/2025/CVE-2025-64095.yaml
|
||||
http/cves/2025/CVE-2025-9985.yaml
|
||||
http/default-logins/churchcrm/churchcrm-default-login.yaml
|
||||
http/exposed-panels/churchcrm-panel.yaml
|
||||
http/exposures/backups/generic-php-files.yaml
|
||||
http/misconfiguration/aem/aem-dispatcher-bypass.yaml
|
||||
http/misconfiguration/aem/aem-querybuilder-bypass.yaml
|
||||
http/misconfiguration/installer/churchcrm-installer.yaml
|
||||
http/misconfiguration/tomcat-snoop-servlet-exposed.yaml
|
||||
http/takeovers/mailgun-takeover.yaml
|
||||
http/vulnerabilities/generic/xss-uri-reflected.yaml
|
||||
http/vulnerabilities/unifi/unifi-create-user.yaml
|
||||
http/vulnerabilities/unifi/unifi-nfc-credentials.yaml
|
||||
javascript/cves/2019/CVE-2019-6443.yaml
|
||||
javascript/detection/ntp-version-detect.yaml
|
||||
javascript/misconfiguration/mqtt-uauth-broker.yaml
|
||||
javascript/udp/misconfiguration/ntp-enum-variables-enabled.yaml
|
||||
network/cves/2020/CVE-2020-14644.yaml
|
||||
network/cves/2024/CVE-2024-23108.yaml
|
||||
network/detection/rtl-tcp-server-detect.yaml
|
||||
@@ -11,7 +11,7 @@ info:
|
||||
metadata:
|
||||
verified: true
|
||||
classification:
|
||||
epss-score: 0.94475
|
||||
epss-score: 0.94477
|
||||
epss-percentile: 0.99998
|
||||
tags: cve,cve2014,openssl,heartbleed,code,kev,vkev,vuln
|
||||
|
||||
@@ -138,4 +138,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "contains(response,'server is vulnerable')"
|
||||
# digest: 4b0a00483046022100fc7280fbd384cd9da75e3fe3d4555a0b75097b9bc2c08add286f44fe4baa4d67022100c2c2cd59af37402bb981589f52e8262e5969c6fe71858dc35b736e1b379235d0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220253c760b6f21558040bda6901fd015197a1b07bcd3071335dbc0a5fc5c97ef3b022100fd75f119e678cf94e08677f89145a463de9844d09a8c06970e23b00c321dab73:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2023-2986
|
||||
epss-score: 0.9117
|
||||
epss-percentile: 0.99626
|
||||
epss-percentile: 0.99625
|
||||
cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -626,4 +626,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 302
|
||||
# digest: 4a0a00473045022100d739c8e2fec546aadf5d00f7f3e1e1d480a0beea43be157d180394f5f6c7d9e7022013e143e1b01806b7c746be1c8665ce5d731cf2efdcbb5c3f0ebf99efcd0d313d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e6eab6f55170064a588506282efa987cb311cb8e2f791c1066d1d0d643b71b76022068fc331e222d13fd82f83dea7d76fa1aeb431eea1a0f9f415a3eb6917ef1e6a9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2023-4911
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.78409
|
||||
epss-percentile: 0.9898
|
||||
epss-percentile: 0.98978
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -39,4 +39,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "139" # Segmentation Fault Exit Code
|
||||
# digest: 490a00463044022053a017b784585a3e6393885524aff0dce3de892c50065af8729b1636491122b502200c6527cfdff7345c2319db15e049af20d9cac15442bb3a6677abb9f87a711344:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a004830460221009b5dc3be045aba05dec88023cb7dddc24188b00eec844cfa3909377e9d6317eb022100e0078981f9b353e41cf8e5e46fe4c1e421ddbbb0038b65ead953e45bb4b81381:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2023-6246
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.25078
|
||||
epss-percentile: 0.95933
|
||||
epss-percentile: 0.95931
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -39,4 +39,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "127" # Segmentation Fault Exit Code
|
||||
# digest: 4a0a0047304502202facd440702f89f6952221a8820c8324d25366d10256b2fb7f441dd85a6daccb022100cd10a5c317c0cb21c86266854fd055e1ee78e88c6507f5da7fdc67aedfad5e7b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220707af88658762f3e5a34c0b6adc5c8761db5b3a68d793de3ce1583c5e2334dbc022100aa3e773dd28b5a80f46c9e117e3cff530f72279898a97cf61d0f542ddad6451d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -14,7 +14,7 @@ info:
|
||||
cve-id: CVE-2024-10443
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.69676
|
||||
epss-percentile: 0.98587
|
||||
epss-percentile: 0.98585
|
||||
cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -54,4 +54,4 @@ code:
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- "dns"
|
||||
# digest: 4a0a004730450221008036794bba97fca7065decee1f622142071454515988164af95a9fb0dcb72a1102206e5b59a993e6fd2fdede5196a2f74afdab1f7cfbe000ec4c590d1231eac93791:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008b5ac203a17c5ac2495444e747470435d1f73ab86119dbac864498facc0299ba0220706f90afe3ebad35664001b827141b2c9308fbf3c09d879a0fe9232a2602ff14:922c64590222798bb761d5b6d8e72950
|
||||
@@ -14,7 +14,7 @@ info:
|
||||
cve-id: CVE-2024-12356
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.93687
|
||||
epss-percentile: 0.99832
|
||||
epss-percentile: 0.99833
|
||||
cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
vendor: beyondtrust
|
||||
@@ -37,4 +37,4 @@ code:
|
||||
words:
|
||||
- "0 success"
|
||||
- "1 try again later"
|
||||
# digest: 4b0a00483046022100ad57d7b4a1db4967e53112120866623af78057e470d624e37d2cf73f5e3e56c8022100f0c122b071e440a5c44aaae72d43c507737d20f01234f7e2eef21d2cbff44cf3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100bcb70958bd42473e557963672c2efd5866879d3fd84e491b51e19b39e53ac0b6022100cec4f199e93652df8d28806d7fa5ebf4e7eee2e68522774ed5ad2fda01bf9d05:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2024-3094
|
||||
cwe-id: CWE-506
|
||||
epss-score: 0.86006
|
||||
epss-percentile: 0.99345
|
||||
epss-score: 0.85778
|
||||
epss-percentile: 0.99331
|
||||
cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -59,4 +59,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- response
|
||||
# digest: 4a0a004730450220299449bf4881021e698e33b6f6b806057dfc94adc1ed435548dd37a3d43041ef022100f7ffbaff658e80183a72c2926a4c708c9f2e704ed8b643d17379ea6ec74ffdb3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502210092d5ac481a41f2bce742d30e9a53e6cfcce47b99b02f4291b382802664d6f8c80220616412b2e3eab8e90f86485850f7ca389e9ac0b0f1a890e827325eb9677048d9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2024-45409
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.39163
|
||||
epss-percentile: 0.97098
|
||||
epss-percentile: 0.97099
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"GitLab"
|
||||
@@ -123,4 +123,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 4a0a0047304502210093bdbdeea6e90f7496f7ef9b504b157383b8026f35408c0094967e8569cba95f02200898ca875fcf2a24058dfb5873c7de06a15190e8b7deccf8133ef910bef51683:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402205e030f7d186f18e2ddf5cd9281a48cb0af2d6ac63498b37cb4a9ce899f84a59e022005a03e6ea351d60b08436740f6db2daf9e303d0323c278f564ab1230e9a678f2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2024-56331
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.41406
|
||||
epss-percentile: 0.97234
|
||||
epss-percentile: 0.97235
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"Uptime Kuma"
|
||||
@@ -124,4 +124,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
|
||||
# digest: 4a0a0047304502204e0750eb887241e9ff7648d6f26af7ef10ad78ca48728d4748c2029023cab91f022100c17273366858b0e07531cb4ee70d332d5856ae2589e3dd10254f8d1068cf4e30:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502204c5b24fda7a91e193ed794e32f38673f924ed17e393ebcb8e6e0e9351a6cde85022100860aa6411a18b6baec11fa99823a8fb2c3ed558adab797c067b1fe8ff009577e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -11,7 +11,7 @@ info:
|
||||
- https://github.com/advisories/GHSA-g83h-4727-5rpv
|
||||
classification:
|
||||
epss-score: 0.36115
|
||||
epss-percentile: 0.96903
|
||||
epss-percentile: 0.96904
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: title:"GitHub Enterprise"
|
||||
@@ -188,4 +188,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- user_session
|
||||
# digest: 4a0a00473045022049363455f97ab37fee9c1591bb518d9218602e52f8329d1fd969650a3cbf7e8e022100c5c0b1cd107d2c0dae88b9fb914b9783df2dfc9a5d5e8af5fefe552c4cbb5d7f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402207d41ce6b6af9c3b0133e15c33183fdce00ba09f874633dbea4f3cb29234c64d8022004ad19707190bb70f9ff118286b04f22a704b252594a598f0b96850afa09a55d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2025-22457
|
||||
cwe-id: CWE-121,CWE-787
|
||||
epss-score: 0.76863
|
||||
epss-percentile: 0.989
|
||||
epss-percentile: 0.98898
|
||||
cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
|
||||
metadata:
|
||||
vendor: ivanti
|
||||
@@ -128,4 +128,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "VULNERABLE:"
|
||||
# digest: 4a0a0047304502201ada98e32db9199256313aab261eeffcb5d7bc92c30a5bce8d1c7f97c9b1b873022100cb61d45f09c04abd6fac7d1dca856190cd27453dd4a1a250423696a7941b79f8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203f75dbfaad4ad6b004f89a6abe6b8ff05ec8c740385c91234058adab770eb6ea022100d31419b68e13b98dbfdede575d41d57e7b949ade2001446d470aa73c3a7f4bb4:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2025-32433
|
||||
cwe-id: CWE-306
|
||||
epss-score: 0.65284
|
||||
epss-percentile: 0.98394
|
||||
epss-score: 0.53778
|
||||
epss-percentile: 0.97866
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -172,4 +172,4 @@ code:
|
||||
dsl:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
condition: and
|
||||
# digest: 490a0046304402205a583d141a815774d63772e7b78d28d83cec2494687acca32ec3fb1bb9fa3bef022007c0706ef1651e0ddef51f82427a8575758037fcd9be38b9bfa7f67faeed5768:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a836215ff57c937a4e67f2d0356c07465020153450ad01d5d8fb3ee70ea58c7d022074f5c22f26df10c73b3c23b69fccd923b643dd8de88c214cfed73f65fc67f2a5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2025-54309
|
||||
epss-score: 0.56973
|
||||
epss-percentile: 0.98015
|
||||
epss-percentile: 0.98016
|
||||
cwe-id: CWE-287,CWE-362
|
||||
cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
@@ -200,4 +200,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "VULNERABLE:"
|
||||
# digest: 4b0a00483046022100b21abdf9fd92227bfd97285501f31023be0fd18d7691f8d0678808fd99f22bf4022100db4b431671f83590f87773baec46dfa7ead05dc4ccac3eb394047c3dea2c675c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a004830460221009e096641682d45560e5ef9e35a24ef1d999c1237e1c7300af90e97c940eda5a1022100af9eb03cc7d7732a901c609bef6ca34d6632f0827751b77c4338a9f26eee5e2c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2025-6216
|
||||
classification:
|
||||
epss-score: 0.28615
|
||||
epss-percentile: 0.96308
|
||||
epss-percentile: 0.96307
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2025-6216
|
||||
@@ -115,4 +115,4 @@ code:
|
||||
- type: dsl # type of the extractor
|
||||
dsl:
|
||||
- '"Reset URL: " + code_response'
|
||||
# digest: 4b0a00483046022100c9f393b62d807b11721ed906b939b902ddf045044002a15a54df35895e4e0b72022100d5db42f60272b05baa17440c1c3a8055cc11b7d69a7e84dada46909a8e089899:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502204e15f75d847313a94159ce612853e8d43c07acd7907aaa6116166434ed694ca6022100b51bf8064525483171bb588675b324c60cbe3f8a3987f86db575d2baeaa20225:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,12 +19,12 @@ info:
|
||||
cve-id: CVE-2025-9242
|
||||
cwe-id: CWE-787,CWE-362
|
||||
epss-score: 0.055
|
||||
epss-percentile: 0.89773
|
||||
epss-percentile: 0.89772
|
||||
cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: html:"Watchguard" html:"Authentication Server"
|
||||
tags: cve,cve2025,watchguard,ikev2,rce,passive,vpn,vkev
|
||||
tags: cve,cve2025,watchguard,ikev2,rce,passive,vpn
|
||||
|
||||
variables:
|
||||
HOST: "{{Host}}"
|
||||
@@ -552,4 +552,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- response
|
||||
# digest: 490a004630440220277107871b09efb32840839f938189426d5f16ab2f5688f09b17c45dea8679f502206045f02ac2ac897602ee87f93802c2640411eaa6c8356ade3fee864c7a4a40e0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100dcff8d2117d05c7f29608fb37b2e2c96880d295642afaa19a7b9fd87fbbe7189022015423b37441c71e3f9b33c8cd1635fd58e97b63018684175eecad56ee9676538:922c64590222798bb761d5b6d8e72950
|
||||
@@ -0,0 +1,34 @@
|
||||
id: dns-axfr-enabled
|
||||
|
||||
info:
|
||||
name: DNS Zone Transfer Check (AXFR)
|
||||
author: matejsmycka
|
||||
severity: medium
|
||||
description: |
|
||||
Checks if particular domain can be queried via DNS Zone Transfer (AXFR). An open zone transfer can disclose all DNS records for a zone, leading to information leakage.
|
||||
reference:
|
||||
- https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: port:53
|
||||
tags: dns,tcp,axfr,code
|
||||
|
||||
code:
|
||||
- engine:
|
||||
- bash
|
||||
source: |
|
||||
domain=$Host
|
||||
dig axfr $domain @$(dig $domain ns +short | head -n1)
|
||||
|
||||
matchers:
|
||||
- type: regex
|
||||
regex:
|
||||
- 'XFR size: [1-9][0-9]* records?'
|
||||
condition: and
|
||||
|
||||
extractors:
|
||||
- type: regex
|
||||
regex:
|
||||
- 'SOA\s+([^\s]+)'
|
||||
group: 1
|
||||
# digest: 4a0a004730450220035a0e8c35c138a76af730a8b2beba052efc136bfedf13160598e9d360c3853c0221008a598f55b7c84f2ac2dbc10e1831976297c3b5cfec55eaa95ddfde27e0fd62cc:922c64590222798bb761d5b6d8e72950
|
||||
@@ -2760,6 +2760,8 @@
|
||||
{"ID":"CVE-2024-0593","Info":{"Name":"WordPress Simple Job Board - Unauthorized Data Access","Severity":"medium","Description":"The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetch_quick_job() function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2024/CVE-2024-0593.yaml"}
|
||||
{"ID":"CVE-2024-0692","Info":{"Name":"SolarWinds Security Event Manager - Unauthenticated RCE","Severity":"high","Description":"The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-0692.yaml"}
|
||||
{"ID":"CVE-2024-0713","Info":{"Name":"Monitorr Services Configuration - Arbitrary File Upload","Severity":"high","Description":"A vulnerability was found in Monitorr 1.7.6m. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assets/php/upload.php of the component Services Configuration. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251539. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-0713.yaml"}
|
||||
{"ID":"CVE-2024-0799","Info":{"Name":"Arcserve Unified Data Protection - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-0799.yaml"}
|
||||
{"ID":"CVE-2024-0801","Info":{"Name":"Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll","Severity":"high","Description":"A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-0801.yaml"}
|
||||
{"ID":"CVE-2024-0881","Info":{"Name":"Combo Blocks \u003c 2.2.76 - Improper Access Control","Severity":"medium","Description":"The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-0881.yaml"}
|
||||
{"ID":"CVE-2024-0939","Info":{"Name":"Smart S210 Management Platform - Arbitary File Upload","Severity":"critical","Description":"A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-0939.yaml"}
|
||||
{"ID":"CVE-2024-0986","Info":{"Name":"Issabel Authenticated - Remote Code Execution","Severity":"medium","Description":"A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252251. NOTE- The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2024/CVE-2024-0986.yaml"}
|
||||
@@ -3452,6 +3454,7 @@
|
||||
{"ID":"CVE-2025-8868","Info":{"Name":"Chef Automate \u003c 4.13.295 — SQL Injection","Severity":"critical","Description":"In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8868.yaml"}
|
||||
{"ID":"CVE-2025-9196","Info":{"Name":"Trinity Audio \u003c= 5.21.0 - Information Exposure","Severity":"medium","Description":"The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to extract sensitive data including configuration data.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-9196.yaml"}
|
||||
{"ID":"CVE-2025-9744","Info":{"Name":"Loan Management System 1.0 - SQL Injection","Severity":"critical","Description":"Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-9744.yaml"}
|
||||
{"ID":"CVE-2025-9985","Info":{"Name":"Featured Image from URL (FIFU) \u003c= 5.2.7 - Unauthenticated Information Exposure via Log File","Severity":"medium","Description":"The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9985.yaml"}
|
||||
{"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
|
||||
{"ID":"CVE-2004-0437","Info":{"Name":"Titan FTP Server 3.01 - DoS via LIST Command Disconnection","Severity":"medium","Description":"Titan FTP Server version 3.01 build 163 (and possibly other older versions) contains a vulnerability where disconnecting during a LIST -L command may crash the daemon. Remote attackers can cause denial of service by initiating a LIST -L command and then abruptly disconnecting, leading to server instability.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0437.yaml"}
|
||||
{"ID":"CVE-2004-0656","Info":{"Name":"Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion","Severity":"medium","Description":"Pure-FTPd versions ≤ 1.0.18 are vulnerable to denial of service through connection limit exhaustion. The vulnerability occurs in the accept_client function when the maximum number of connections is exceeded, potentially causing the server to become unresponsive or crash.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0656.yaml"}
|
||||
@@ -3485,6 +3488,7 @@
|
||||
{"ID":"CVE-2019-5544","Info":{"Name":"VMware ESXi SLP - Heap Overflow DoS","Severity":"critical","Description":"OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2019/CVE-2019-5544.yaml"}
|
||||
{"ID":"CVE-2020-0796","Info":{"Name":"Microsoft SMBv3 - Remote Code Execution","Severity":"critical","Description":"A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.\n","Classification":{"CVSSScore":"10"}},"file_path":"network/cves/2020/CVE-2020-0796.yaml"}
|
||||
{"ID":"CVE-2020-11981","Info":{"Name":"Apache Airflow \u003c=1.10.10 - Command Injection","Severity":"critical","Description":"An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-11981.yaml"}
|
||||
{"ID":"CVE-2020-14644","Info":{"Name":"Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)","Severity":"critical","Description":"Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 contain a remote code execution caused by unauthenticated network access via IIOP and T3, letting attackers take over the server, exploit requires network access.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-14644.yaml"}
|
||||
{"ID":"CVE-2020-1938","Info":{"Name":"Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability","Severity":"critical","Description":"When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-1938.yaml"}
|
||||
{"ID":"CVE-2020-35359","Info":{"Name":"Pure-FTPd 1.0.48 - Denial of Service","Severity":"high","Description":"Pure-FTPd 1.0.48 is vulnerable to Denial of Service via exhaustion of connections due to lack of proper connection limits.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2020/CVE-2020-35359.yaml"}
|
||||
{"ID":"CVE-2020-9274","Info":{"Name":"Pure-FTPd ≤ 1.0.49 - DoS via Uninitialized Pointer","Severity":"high","Description":"Pure-FTPd versions ≤ 1.0.49 (\u003e= ~0.96) contain a vulnerability in the init_aliases() function within diraliases.c when processing aliases. This leads to access of an uninitialized pointer, which can cause a denial of service (DoS) condition.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2020/CVE-2020-9274.yaml"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
d44028a79702b8125c8e1d90fde8b9a1
|
||||
04825279d81a90757969be8bbeccd5b4
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cve-id: CVE-2018-19518
|
||||
cwe-id: CWE-88
|
||||
epss-score: 0.93956
|
||||
epss-percentile: 0.99874
|
||||
epss-percentile: 0.99875
|
||||
metadata:
|
||||
max-request: 1
|
||||
confidence: tenative
|
||||
@@ -49,4 +49,4 @@ http:
|
||||
part: interactsh_request
|
||||
words:
|
||||
- "User-Agent: curl"
|
||||
# digest: 4a0a0047304502203582b4bcd5319545741c906c0a0494cb10405439d7ca40b5710f998ecc82c20802210088109b826dbfdfcaf12b1d31ef057d22c37191809cf0ac3e292046c5b1b8d0c6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022003d7f90673973a982e5558470f07a7f4ad8f8cc685710dc21348cb4bc670b4d9022100b5549b5ebdfda9e3d3841380d1a9818136dc794c3e03b05c487cb841c88f78b5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cve-id: CVE-2022-34265
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.92734
|
||||
epss-percentile: 0.99743
|
||||
epss-percentile: 0.99742
|
||||
tags: sqli,dast,vulhub,cve,cve2022,django,vuln
|
||||
|
||||
variables:
|
||||
@@ -46,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 4a0a004730450220715cd1f48cebe582115d33d322733ca573a25de7f151a8951e7cf00770c79b25022100cc2e95fa6f27100e16023760dd2c81bd081399e6970d261fec4495ce2be8b0f3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220313f97ef1ed9ca9259404dcc6b2a3d20024e5d93c5e240fc3691a60445b3521b02202dc02c16af44d82d9a1c893c9c85690e677e801a7bd2759dad7b66a31591b236:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,4 +22,4 @@ file:
|
||||
- 'InvalidOperationException'
|
||||
- 'UnauthorizedAccessException'
|
||||
- 'NotFound'
|
||||
# digest: 490a004630440220599c04e78fa5540dd80b86ff4392d563fecdcccca9c686d11023ab7f144f2c78022039e8cebdbdec2e0c0e83407e1acf4f13fff63240e53360b44eac1123701f3424:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022001a28cfdfeefcf2533646ec4e84101d825e19d420db7d5d7909b43b437bc547e022060002c6ac0078d9aeed09ea81c2e819a74549e623eec8134a59bfecf0e6055dd:922c64590222798bb761d5b6d8e72950
|
||||
@@ -30,4 +30,4 @@ file:
|
||||
- 'BadRequestError'
|
||||
- 'MongoError'
|
||||
- 'SequelizeDatabaseError'
|
||||
# digest: 490a0046304402202cf79fb5cf4f6cf0235a899e1ca14aba73c27076883e58d7f3b36f709e9794d302207b1ba97be4bae44ddde508ad5eb8130742b1e301c7e16d4354f7250da06ebff5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ba8e6c12e8ec5e4ae3e0801b7390b711631dfb574d037999d5c90c8eced666fc022100e66a617a1ec1e10cec9119814077b2b790c3dba13e2a9264c4cf9500d2db53f8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2022-29455
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.69544
|
||||
epss-percentile: 0.98581
|
||||
epss-percentile: 0.98579
|
||||
cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -52,4 +52,4 @@ headless:
|
||||
words:
|
||||
- "elementor"
|
||||
case-insensitive: true
|
||||
# digest: 4a0a00473045022100b61f4f2387e6d68c4eaf551b0ec1669d99bcf47672902f0435b9d57af55c80360220788f2830f95b164b097fa440fd77ae0c4ebc9d27284c8b7cfaf2493d68cb2f64:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022034041612068bb6cc23a19b360e6acbd244a6a4058cf1d36cd8222f5a2f1b503f02210080b9f278c949817375c1590c7732a2e556d93e25ea1090cd9a519b1c90a90a62:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,7 +15,7 @@ info:
|
||||
cve-id: CVE-2024-29882
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.02716
|
||||
epss-percentile: 0.85396
|
||||
epss-percentile: 0.85401
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -46,4 +46,4 @@ headless:
|
||||
- "ConnectSRS</a>"
|
||||
condition: or
|
||||
case-insensitive: true
|
||||
# digest: 4b0a00483046022100f3639c0af89b25a1b6ebdaf864db8ae0277db15a9ad9ab2f1bf7a5927b153f6a022100ec077c866af9eb3169f40673f37c8650f5fbef151397d5684f8d954e7e29c72a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220558a089dc181f6ec5760dd0ce307114bfa92ee5a5c1016d5bee66631a891b03402203e32c3102bf24d9b61500ae2f19afe47da572f008de06db6a8a6a53e462a9703:922c64590222798bb761d5b6d8e72950
|
||||
@@ -12,7 +12,7 @@ info:
|
||||
- https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
|
||||
classification:
|
||||
epss-score: 0.03198
|
||||
epss-percentile: 0.86483
|
||||
epss-percentile: 0.86487
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ headless:
|
||||
words:
|
||||
- "{{random_int}}"
|
||||
case-insensitive: true
|
||||
# digest: 490a0046304402207595e930e7fcd4e73666459c47d3b771c49cfd71c23a5e046a72af45084e6ae002206bd8b5b6c130eac09aadde8d76baadad6726b967f6c9ba72bd1e235bd0c57891:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220620f3dc941df3e688c304ad234066a1d8a87fc2b1fa1a04ef9850f24e613510e022100b00c68736b6f7bac99a0677c564247d90e688024cc08909d957a4fc6c55309c1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cve-id: CVE-2025-25062
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.34064
|
||||
epss-percentile: 0.96765
|
||||
epss-percentile: 0.96767
|
||||
cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 7
|
||||
@@ -186,4 +186,4 @@ headless:
|
||||
dsl:
|
||||
- reflected_text_xss_type
|
||||
- reflected_text_xss_message
|
||||
# digest: 490a0046304402207b8047399f61f0a9b80843398485e9e5f990de59c0309c4dbbd7e19507cbdfde0220341bcd5b431bfabaebfc31819a234403c0072ca6a1c0471af1c3f91026e54539:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a17efb62fee55c45342f1aca08abe8984f346f12eae5f7bf59b14f8a31240df0022006f396de2e67edbc06c2fcbbd24ba3de7ad0df3e39ea1e26656466e8717c348d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,8 +15,8 @@ info:
|
||||
cvss-score: 9.1
|
||||
cve-id: CVE-2025-29927
|
||||
cwe-id: CWE-285
|
||||
epss-score: 0.92084
|
||||
epss-percentile: 0.9969
|
||||
epss-score: 0.9253
|
||||
epss-percentile: 0.99722
|
||||
metadata:
|
||||
vendor: vercel
|
||||
product: Next.js
|
||||
@@ -55,4 +55,4 @@ headless:
|
||||
- "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
|
||||
- "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
|
||||
condition: or
|
||||
# digest: 490a00463044022025e88fe1987c29862cf5f60a1c0b192eadde55583f0beaccd90644c1ce227b24022032548fcbe9c724deb3aa975358066cb23de37174fb818282ba2aa3b796b1394b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100af9785bc77b70ef5e8fe304f65b6827a469b6897d09860a8cbafe4ef5b4098ab02204b88dc3575deadacfc2e3f730e88fc5cd6f6286be4be01bdaedeafafa4d21b23:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cvss-score: 5.3
|
||||
cve-id: CVE-2000-0114
|
||||
epss-score: 0.05458
|
||||
epss-percentile: 0.89733
|
||||
epss-percentile: 0.8973
|
||||
cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -59,4 +59,4 @@ http:
|
||||
group: 1
|
||||
regex:
|
||||
- 'version:([0-9.]+)'
|
||||
# digest: 490a004630440220707b6a320feca6531fb7cc640294499f41264e573c49fdbb80728bbaa27a8d7802206c7311fd1a4cd754868fcd7cbec51ad0febcd3073b00be47f2db56cc032b0d4d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402205332a03942b696ffdaf4514030f433335731ac7445fcfa0a9131c17cb83b687202207e6fc2c1d794e984243e5f602ea871821d372de93b4374a49b3b3a80ae77428b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -1,29 +1,46 @@
|
||||
id: CVE-2000-0760
|
||||
|
||||
info:
|
||||
name: Jakarta Tomcat 3.1 and 3.0 - Exposure
|
||||
author: Thabisocn
|
||||
severity: low
|
||||
name: Jakarta Tomcat 3.1 and 3.0 - Information Disclosure
|
||||
author: Thabisocn,0x_Akoko
|
||||
severity: medium
|
||||
description: |
|
||||
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
|
||||
Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access.
|
||||
impact: |
|
||||
Attackers can retrieve sensitive system information, potentially aiding further attacks or information disclosure.
|
||||
remediation: |
|
||||
Update to the latest version of Jakarta Tomcat or apply security patches that fix the Snoop servlet issue.
|
||||
reference:
|
||||
- https://vulners.com/nessus/TOMCAT_SNOOP.NASL
|
||||
- https://www.exploit-db.com/exploits/20132
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2000-0760
|
||||
classification:
|
||||
cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N
|
||||
cvss-score: 6.4
|
||||
cve-id: CVE-2000-0760
|
||||
epss-score: 0.65623
|
||||
epss-percentile: 0.98414
|
||||
epss-percentile: 0.98413
|
||||
cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
google-query: site:*/examples/jsp/snp/snoop.jsp
|
||||
max-request: 1
|
||||
vendor: apache
|
||||
product: tomcat
|
||||
tags: cve,cve2000,jakarta,tomcat,exposure,info-leak,vuln
|
||||
shodan-query:
|
||||
- cpe:"cpe:2.3:a:apache:tomcat"
|
||||
- http.component:"apache tomcat"
|
||||
- product:"tomcat"
|
||||
fofa-query:
|
||||
- body="apache tomcat"
|
||||
- body="jk status manager"
|
||||
google-query:
|
||||
- site:*/examples/jsp/snp/snoop.jsp
|
||||
- intitle:"apache tomcat"
|
||||
tags: cve,cve2000,jakarta,tomcat,exposure
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/examples/jsp/snp/snoop.jsp"
|
||||
- "{{BaseURL}}/examples/jsp/snp/anything.snp"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
@@ -38,4 +55,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502207bfd4c52364c67c29143cb688914602b4278cc02044ebfda8710d629cc6c5b480221008298eec536523b656243b4f67ab2b78afcff81c9ded0c1dba87549449984fe5e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502205ce0b599e4c517935b356826b8b065ac225bdde1d74ff84196e6f529739a4292022100aa157c5a6531f56de77d8a205e3fce64dd0c3e50bc42f6b93daee89acab80545:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2002-1131
|
||||
cwe-id: CWE-80
|
||||
epss-score: 0.03877
|
||||
epss-percentile: 0.87734
|
||||
epss-percentile: 0.87736
|
||||
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 5
|
||||
@@ -60,4 +60,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022028e378b2225feeef3e563a4aacc495bbaa9c8e507f7a1ada000291e1fc083e2d022100cc42cfc1216207e672730a2f992f761a7b8598836a20633a48658191a1fd8f93:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221009dafa7d7a8dffea049773b86bb1bbab11544ca0004bcb9b849683c76c8e2485a02200b0f46c61ce9c0cb51b9c95b6df330fc5ce87295ad1df784bc9f4235474320ac:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2004-0519
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00124
|
||||
epss-percentile: 0.32353
|
||||
epss-percentile: 0.32339
|
||||
cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402203df1eab27d0b2460b39a1bd61e5a970ec22852f3695f8afe98ebcac0f63b938902207e2f1106711fe08527bcc10452c02f4ef10cf3dfa80b4ef3408c8309a1bb4983:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220482f005db704fd496f0e04fdc5d6a657b64028a787c62478aab7bd17dda4d0ec022100a9f5e846faf7569e3b54f6039cf126a36df1bb35625535b66ec3afb5617340c5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2004-1965
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00265
|
||||
epss-percentile: 0.49817
|
||||
epss-percentile: 0.49806
|
||||
cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 4a0a00473045022100d0e4ad48ee514554c107960b002c97df3418b0d615c48d36c615b2a1d08f0a58022055906d273a4576145c3a6383434f4b63164f3cd20f1cd4fd120b5cd087de1ccc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206c46055e57092ee031148672031d0e22b49272e5a0857ad53ad2e466153ad9950220799ce49158105f62ff4e3014ebde77ffd93d2e6f867c026fc1374b547807da6a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2005-3344
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.1015
|
||||
epss-percentile: 0.92775
|
||||
epss-percentile: 0.92777
|
||||
cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022043deacfc16b051d575d1ac25333a728a3061f4949367c49d84aaed70c59a710b022100d7d19a41f2ffe09dc1c99c5ebf12bad51129f196408beb7e1a7da52bfdc7a55a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022069103c3ec6f0b5a4782b752580b541c494e6b687ccd290707d59cf3fd8506466022100953d7f3ec676dfcbb248c252e23aeb7ba6a4e0cee7f7b364ecde1719f69e7d51:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,7 +23,7 @@ info:
|
||||
cve-id: CVE-2005-3634
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.01653
|
||||
epss-percentile: 0.81404
|
||||
epss-percentile: 0.81406
|
||||
cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 490a00463044022032071cf681c18021d046372af6336ee2f97678d97705c64a20ad0499690762bd02207a50f21b667a914780bb4490b6be488ee59f571472a159ceeb215b380faddb4c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402207726228cd9e49dd00ff836be3fa993d42520855df4c6f681ea14de91dae929fd02207519f13c615ae1b06c303012ad6a9870ac907371e261fd0c50d088a9830f76f2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2005-4385
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00373
|
||||
epss-percentile: 0.58283
|
||||
epss-percentile: 0.58266
|
||||
cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100cf6bb8b3790e6772859fc0d4b0461d0d6e27fc16e0ef91390febc1772f3507cb02205e8c18f1d220b9ba279d45c38c46b2a06ffbabae4df8429e29d47e16259380cd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f86f9b46831b1c7f323168fda14e3907af8e723ea601697be19dd06af30a740902200104575dbb4b8138f97e00a0228ffd9a3b66efaccdba58c87a89256d55bafcd9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2006-1681
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00299
|
||||
epss-percentile: 0.52785
|
||||
epss-percentile: 0.52759
|
||||
cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100af5e603a6e9e0a4c57bbe60a984d4339c7e08e8ef5aadbf321f2a023896daf3f022041f077c710c3f7c33eea6f4b337ea7fe01d6807694c49adbbd909af2d2077f50:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220062e8d719f08e84a250949357d925976fe5b07e77eacf1573945d251933effe90221008b1630fc674b9060b4fcf210f55349c253d1df35de9a83a31c3247257bcf21ca:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2006-2842
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0094
|
||||
epss-percentile: 0.75464
|
||||
epss-percentile: 0.7546
|
||||
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c56385473bd3f2d7cb184c027be1fcef0ee6ceaeb511e01ae2ee2e377963eba7022100e06108fbf13966fcc17acd692ec9c4ce25ba5a64b736f5b1b9bca9b079dbf7fe:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100c2256d78915d25d4df1e0d25e028d15520fe12f70247fa5b1d4e9042b77f43c0022100a96fd7c141b6a40abaeb7a77962424e653b9c4c1e3760d3adabed6209e3b04af:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cve-id: CVE-2007-0885
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.02133
|
||||
epss-percentile: 0.83595
|
||||
epss-percentile: 0.83599
|
||||
cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402203c3bc9ca4723accd9ebbeab24ee0a279436ac47165f159fba26bc3a9e1abebaa02205fa8b8549c37dc00fa4d18e41a84467454c422a4768c3f48d5a791be9548810e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100eda14ccf8eeaaaf8029c97bf324dca7df1aa289f71825ee667a5e4508f98e3af0220546cbe42bab6ab502d562e0fb84906334df35aca519cfb9e0da612e58f684709:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2007-4504
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0006
|
||||
epss-percentile: 0.18644
|
||||
epss-percentile: 0.18655
|
||||
cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402207101021e6e91ac350119db67da61585791f8987fc9c06edfcc8f37f872f3ed660220529c5372e3f5f032a7acc97d59b0c00ac80a0cde6aee87896f93bed1b22884c7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a632fbd89ee7d7168b84c7a8351cb260c3be99daa440dca4d93607d2e2e92682022010d8370dadd0bedd78f49f13c84874587afe8e1191cecfe5d3952b173de2df09:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2007-4556
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.02359
|
||||
epss-percentile: 0.8437
|
||||
epss-percentile: 0.84375
|
||||
cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c92f2b2a7057ec2654abfa03785592a4385b291257d399c5f7153912e8a5fc5a022100dae66ca74e53a6ad8295e727fe9298a4dd9c628e910fe962d41ea37412885c0e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220681e3e030dae241ae87fc985bcbbc0bda37e25945ee039dce2932c0279e9ae6902210093d3e554bbe06521fabf8cc5cefb9e8bb6644fc79769a5cb835fad89a8348e15:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2007-5728
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00488
|
||||
epss-percentile: 0.64619
|
||||
epss-percentile: 0.64598
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -57,4 +57,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100fd7139785737c7dfbd98d7f5f2fe03ebf5a53e7f0106395ae0fe075d38d4a6ef022100f62f512997911d41ce1c2e63471cba859c4c6c47d10458583dde25e164e1481f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100be9d734739e44ad53d0b091b97e512e640fda1e67c535820f98f8723a21e6f6302206bd8b0cdd90a0807cd8e869f2192e57a6d6a70d126f59ca474a1c0e7b0c00eed:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-1059
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.00265
|
||||
epss-percentile: 0.4984
|
||||
epss-percentile: 0.49829
|
||||
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100e57dffadfc3ff434191d44cb68dd9eddcc83ee897441a8383ebbc1d9ea60a69b022100ce912df0cc8b89a623f493fa4edc08f2a12df1039331bae05cb7274972c12649:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100d0caca73172cb00699df02ab0255d6bb20bb48cf44e51006f86ff2440523f783022100dbfe50ad7ad767fcf4ec516ba133fbe911f95a4e6f568389c3ed2499a3734ea7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-1061
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00155
|
||||
epss-percentile: 0.36798
|
||||
epss-percentile: 0.36788
|
||||
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502202d8fc6c1169b014ea653bab6462db580c75d751564df63282ee0e6ec7fb40ba9022100dcab4c1b3a1874e18b6eee2d4bc7ab3bbc73c8b4594dd40118046728c6f457b8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202d74bbb178b65b8d4d1c670fdb6ccb0368f61303f47995ecc3317e2cad75316b022100eb29d9070b1a7e33dd63756ff0a3fc4f88d7cd434da57289b9b9860b3af1a748:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2008-2398
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00437
|
||||
epss-percentile: 0.62264
|
||||
epss-percentile: 0.62251
|
||||
cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022044a46181eda3e7ee80049c7dc17abcb4478049f759b15b5112d66856f56cd07202203304a5ca81d6bb9b36144f99855b98084da7526ac36928f5596bf5d0c124a2c7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100dbb4edac2211a6f44c91611514b36fd0c8a5cd62275248b63ac032f941586a0e022100ecad4b52469a21900bb07fd05e241016c9a309b50000c842e50380ad4bebc920:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2008-4668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.00268
|
||||
epss-percentile: 0.50106
|
||||
epss-percentile: 0.50093
|
||||
cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100c59e448c176cf928d9f3e4fd6d8296f7431034fa6e9a6a1d391e3c5cc063bfeb0220611f26512c50c0f4399b694c3b55f52bbafbb02b08f0705fc2a59c230db51fb5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100eadba1af98a8c502efd2b328b97649670174156ebdb235ea47da9439f75e2ca2022100e2ab130c92dd67485449eabf269398cd9e8560c4fdd31cbf252aebc8fdbeef63:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2008-4764
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01921
|
||||
epss-percentile: 0.82755
|
||||
epss-percentile: 0.82759
|
||||
cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100a299c724c47667b4c2ea95b45b507e15b625fc112735554ac154bcf9e45e6cd30221009a1da9364b9fff22cd84532e261034e2df28ab9f9d065afae2095a9b9930663d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022021a79bd295e6fd6b0fede95d696b48cbcce7a2e5e9b02d688c7d4d69a4147d72022025de58100c84a3578d39444afcc4f40a5b1a5a2c5614c723be801cc6278ee2c4:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2008-5587
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01986
|
||||
epss-percentile: 0.82995
|
||||
epss-percentile: 0.83
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -49,4 +49,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450220522478625b0bef1a33107c10af6591274718fe5f5bae6ab8bd1a367545a9f4c7022100e18bc0a487a352e9b7f6461546f0f5037a86c1fc399a43b491094706cce05948:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f9a7dc14da2d0497c06b87f8d20553cdbb032bd812ef52cfa4bb6266fad045c70220054cdfd3aced4268ac1b90ad4f6c4b6909e1138a5e91e35e702d5a4cb31f0005:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-6172
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07294
|
||||
epss-percentile: 0.91245
|
||||
epss-percentile: 0.91242
|
||||
cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100e4f989d01218191039fff14aae70b5240674a661bcb9dbe6124ee4ecfcddb462022100c9f3e9020e63d30e9d532594486b78fc3e560edcf4a88dac723d6f5e0018f207:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100d0f3de31f714d4fae5dc9bc4a27f0859c1e87e2ed1907a88e450963d713d29e10221009b22df03a24b19daf97a19f3e0de2817402656fbe1f99887001fb9eddd55db98:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2008-6222
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01649
|
||||
epss-percentile: 0.81382
|
||||
epss-percentile: 0.81383
|
||||
cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221009a05c031ff2df9353f530b02951318ee241852d1f7ae4f71ecf6b0c2b43f43b202206b8336a91f9cb36a985859f84d8b0b5e9ed04062a140e67228804f2d18269e77:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502200a229a693b9dbe066bb2ed32a1ab6b9e57f73a79dd9bc75ea031ebdcff68fd6d02210092e285fb42e8ad23105647ae3f4fe013a42107a1c8b8e25e8f34c91caa568c3e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2008-6465
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.01157
|
||||
epss-percentile: 0.77879
|
||||
epss-percentile: 0.77881
|
||||
cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -63,4 +63,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502203a136cb149f0ece30bfe68ded5670dc3ead884e6f88ccc494da85afeccae62df022100e050792cc2d008d912c6f02b8df22be28d105dab8a31ba282066c22fdc8db472:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ed4c2fcbcd3d631b0d91ef04752e2d73305a6542080b775f8476468db672b7e80221009c80fa6bb7f1126bac87d3c52e1e2d5c5cec31eae8092d102bde74ca946c77be:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2008-6668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01077
|
||||
epss-percentile: 0.77105
|
||||
epss-percentile: 0.77107
|
||||
cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100ad7cc7323281ef29db4128f3fa3a350a90f059df9b735ebe878c3692bebcd4f3022100eecbb4456ab816543290fa87e459d71ef57afba055fadca1b283fdcd46401fa2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100fad404533668ec9446f59658b59a65e3a0e382786d50ebc1ad33086351f458610220079f45cba82719e58f0ffe6a60df506a2231b25d10c88cd795bfb3b8ac2e8ebf:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2008-7269
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.00653
|
||||
epss-percentile: 0.70098
|
||||
epss-percentile: 0.70083
|
||||
cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: "true"
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4a0a0047304502204992304ab74e88daf8b3ebe6066f71479ec72183811863cb12255bc8738b0ae602210096fa80a24d0fb380c7fe314675b74f47ba217bfc6977f0e39f1c8480fa91a85e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008f4efaf8be4e2884ef06a78fc6d21bd0b9234647d377c0b33deb0086d4e46d660220151a81309f2e4007b3b05fd1c0ecab5eee0e875830ddcd9c87bcc631cfb2511d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,7 +22,7 @@ info:
|
||||
cve-id: CVE-2009-0347
|
||||
cwe-id: CWE-59
|
||||
epss-score: 0.03639
|
||||
epss-percentile: 0.87332
|
||||
epss-percentile: 0.87334
|
||||
cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 4a0a0047304502201a4cc0f7f1da84027c4be7ee87718c9ad33ff2427b1839ba14f15854eb0b28dc022100920289bda51698e1ac0b881bbd0ca90712463dda548f6d7bd6ddcc87ab199951:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502205f9b463cd06f54364d3a10e8694205ac9a67530a30fb21404a8afce42555ea7e022100cf8c3e7c768d201fce4be03382f832e58a939d013002ed9e1fa92ff9fc4512b3:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-0932
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05612
|
||||
epss-percentile: 0.89888
|
||||
epss-percentile: 0.89887
|
||||
cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502203799d3d849166471ed50568aecbcfd3e8be6ab473ef9b9bed2b14f50c307be71022100c3d83ca1cc031bdb537c10025c89ade7aa1449ae8660d42f4c8a024ca2e67722:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202b600e7fed55d00d3dc6100bd2cd018bd9d39e271f15fc31591142836ddd1be6022100acd6a90d265d34f568cbde3bd37e4ee8dd8d898b462329b0110516ee74611380:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2009-2015
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01674
|
||||
epss-percentile: 0.81515
|
||||
epss-percentile: 0.81517
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220755f6e2d2ec61ff49588ac7b947a1affa0c3d8ba5a3c00c547e83cfa86ef622102207b6bc590f05d7fc25672f7bd3e0862378532194feef4dc224ec1099e3ffb4937:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402207c2576c55f314a48dd3e141751664fa70c1dd2f91f615f50a68c21ea1dc8a21202201e289e4351bb115f7d51baf4374874e46fc0c6451ebe3b6dc2839e175e485ada:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2009-2100
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01877
|
||||
epss-percentile: 0.82531
|
||||
epss-percentile: 0.82534
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100d3eef42f51451d490d9ccc9034d3f990b8c06da2e639232befdc2e44cad80f38022100b978881960f194f4feff3c17d6bf6a3a7879f8c4eaa7b9a24058cb3d4a90a5e6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220578e17d86e638bfe9bc788e50763238f031f8f2966929fdcbb17c5479b08709502204bfe69b32b2d1e29f7614cdb053472c1f427d0bea7b2d405778017803f9613c6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2009-3318
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01442
|
||||
epss-percentile: 0.80081
|
||||
epss-percentile: 0.80083
|
||||
cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221009ad2a9e5ef3e059e89402f044527889a974f8d854571e7d568c467fa782c12650220597568d595aeb5485b02e934d3de28f19f584c068fdd1a5cb88bea4feb448348:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202cc31533f35d81509f646b20fd986db62a965efc8d4a75e7c3b74366671595df022100d55b8c636142221f1a51aef5e7b2e15157fea40f1cb3dafb2efca13656c8b446:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-4202
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02099
|
||||
epss-percentile: 0.83482
|
||||
epss-percentile: 0.83488
|
||||
cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022071065b592db366013360e360fede9af983b1b93859ff4ccdbfaf228a387e945402203a822b9c7c787da1b98eea0f1a4c2ea231483af017651748212295c8a7ce7566:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203d870eb30ec9ca3a56ca069e3a20ee24cdaebf5d3976cc4182d2020743b0d48202206733a946217a67a1f21cafd3e31db02e9ccf4888aa2150df644bbd21a872ae72:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-4223
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.04159
|
||||
epss-percentile: 0.88163
|
||||
epss-percentile: 0.88161
|
||||
cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100921f3d5f490975f662546eaddd295d5ec6f2cc80e9bf533ed0872660eb84d279022100c1ce0a2782f6c6e4ceb0cf95ad85be7a0a0f2289691cee189fc5e736e3815902:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e062d5b488122414fb0c50f4d5c123e0adeb1e46f11acb5d89e9466e300d9c93022075a429d90bd1cb7f0d4794d8acea63c94675c6f3b78b3d914a1dfaacdaa692b0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2009-4679
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.23302
|
||||
epss-percentile: 0.95714
|
||||
epss-percentile: 0.95712
|
||||
cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100bdfca9bab0aee0f62eb2dcb8208fe2cae1909149955722da2ce4fad6e96deb5c022032ce58e9b041aa1b03a12bf5e55ffd4f240da1bad4ceed7cbb951dab8cc242eb:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100ea856041ddbbbcd430231fe38d4b8480746e6e710e0a9771fbabe31d5fe2fee2022077a2f7df454585f2936ef232ef0c66cdbd26238e34a4e62d536565360921f0cb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2009-5020
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.01389
|
||||
epss-percentile: 0.79708
|
||||
epss-percentile: 0.79711
|
||||
cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
|
||||
# digest: 4a0a0047304502201de77f09f06cdaad7475b5a83d162bfa2cf9c5f15f685484e6527ad56bc81b18022100c31d709894f9d1f7709269e2ab0ac9412e434f084dabb1841de6d376af808b49:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022065bffed319745b0b2fd2fe00c266833e382453ca49552295029c858bb0f38b1b022059afda8815dd4db0234fc7c18fb056701bb91211e3ba5c04d429884a77c519c6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-0157
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07582
|
||||
epss-percentile: 0.91418
|
||||
epss-percentile: 0.91416
|
||||
cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -46,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100a20f6dea22ccd62654e23b66ea405dd9f4a556e8748930cffea2c987273055ef02201eacfcbb856a2d594b0bfab1f97389b80cfbc284e30f5b965aac3eac8ed7dc62:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e272bcf0a1ec2611112888a8d1a42d62c6e4178c0e39fe964135fe6ad5c2581b0221009c1ff5d821edb176622da40bb34611656cfb17bcabc91bebaac56a5ba3a0b904:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0467
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.26746
|
||||
epss-percentile: 0.9612
|
||||
epss-percentile: 0.96118
|
||||
cpe: cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022076d9856ebd3b138bbbf35ed402f483d30920a6c5d1265932bbf64482bff50e8d0221008aded6eda3eff57ab7a8250fe77f8afa8be57253b970080e6659fde288b32749:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100cf8f12a27c13513ce645740a264d25459087522017e5229da8b1d0e29933ec15022100a00ffbf358ffd5606db90f4fc3f44277139283922f9b69837071b7fe39d0b64b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0943
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0204
|
||||
epss-percentile: 0.83232
|
||||
epss-percentile: 0.83237
|
||||
cpe: cpe:2.3:a:joomlart:com_jashowcase:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c478e1f38239c04842b065d0668c277ae84437e30b781fbce2fdd4a2be736ace022100e9fcd67b54b4609dbe28f62a19abd7087aa84ec433503afbaddc52bdc36b4c78:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ab49622431e488f8b9cb1a2ff33b08ae57da97b2b4489fb8a007cb0f3ae1ef34022100eecbe40236541d55e06f7af4435b1737a93cd260d6b9d96c84e81b17f9e236ff:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0944
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0143
|
||||
epss-percentile: 0.80007
|
||||
epss-percentile: 0.80009
|
||||
cpe: cpe:2.3:a:thorsten_riess:com_jcollection:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100f8d34a4c54ac928836597b65ba47bcac59b34e2a30e15898f8e5e1dec7299700022015982545c3a3d74bb624b5130e2680706aa6dee28a7800f82a9390db1dada90b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a93c128b409b435f2c18f97a710781be5fd4c834046ed28c0f4131ac556c8f0f022079c9c6b29155dbd60da1c21da5c6a39508a35001acffbf2c9c5d73ff02e2271b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0972
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.03709
|
||||
epss-percentile: 0.87446
|
||||
epss-percentile: 0.87448
|
||||
cpe: cpe:2.3:a:g4j.laoneo:com_gcalendar:2.1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100f0a882492a98c9238ebbdbf6822c29b02732ec173208ab92ced03556e088add0022100c2ada41d5da43053979aed3d0590f98d779e51d3fb7c5f9a2b75e094311234a9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203ca9c6f5463ba6a33f5f3aeda1acdc3c6706aca6682ceedd8ed6f034c4854e310221009b462a5261d1d4726f57256d02d35f09ef083e9753cca60befb02291c0a96b19:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-0985
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05737
|
||||
epss-percentile: 0.90034
|
||||
epss-percentile: 0.90032
|
||||
cpe: cpe:2.3:a:chris_simon:com_abbrev:1.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022045ac36a6089f90044f9464ed3fe772da83fecf1a202497a695e645dee7da088902206765705dc0b4fd8588ed7af1a705efa686b52ac44fff381ef861cd45ca22a466:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200100d14778cbc4745774f153c9b753664e29d8b94d8a9d248a60527f89310c15022007070c310cb991ac547a262aed119cea38b809bc64e341d258c2bfffc8cfca54:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1217
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02222
|
||||
epss-percentile: 0.83935
|
||||
epss-percentile: 0.83941
|
||||
cpe: cpe:2.3:a:je_form_creator:je_form_creator:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100e411fade06a617de4db745383a85a2ea08bbf7ebccce48876eb23d422af1236802205c62ad1d65dbb627410b532444e6214fb66b0b7a3ec4385f9e0b4dd78b5ecdec:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100b02b7311d8cab0e5fd45168d5124dcbcadeb6a77dda148b98392e1d5bfbe6a0202205caaf80a4f993c364886730755a3905e827e24d62b9d31b8eafb68d1aa67170e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2010-1304
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0324
|
||||
epss-percentile: 0.86595
|
||||
epss-percentile: 0.86598
|
||||
cpe: cpe:2.3:a:joomlamo:com_userstatus:1.21.16:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221008669c1b9dfcedd04b2d7bdd2a5855b37a6782981d9f5f63064108a2132d8da0902207bd45af9c055a9c5ec22c23164a16bb8839416b0656a0b93679340f71c99d167:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100fa22c37b7e0c57e14f6fff3279daae65439237918155a9c0f2a325f1daf02eda022067879324b6431b4f48fac5c638b4c3f6f7433d56f0614a22e5d8157be434e09b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1313
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02571
|
||||
epss-percentile: 0.85003
|
||||
epss-percentile: 0.85008
|
||||
cpe: cpe:2.3:a:seber:com_sebercart:1.0.0.12:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502207d3bfb5a43132008d20bd8c30af4dbb0aef179040a07333f7ea691aaa6cbe626022100fa074da234e7209d220a8eee50c9441e16651f26094503e7336b9b6a044b265f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502201c5c3ae7a7e59dbd1caee469f3b6fc726a0eb9e16ed830b8f2fb9254f6f62521022100ea92b5f2e2073f2d502dac0149c86131a2d6282aa2c9e68bf41bc0c6b7d6fc5a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1314
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01964
|
||||
epss-percentile: 0.82915
|
||||
epss-percentile: 0.82919
|
||||
cpe: cpe:2.3:a:joomlanook:com_hsconfig:1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022019b5d3e13fb2cb015b32b50d5e658b2c8f56ae8e2e86a45dfd3a9f7208a7d4e0022019c40d1775feed32277d498411d19a1a8965d9e93776137017cbb9ecc0f88764:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100c3b3057a5ef8d6dbc4771c414854a2e483fa815d33690e51499d87ee7db6238b02200da7e738ebf0e05a7d15e94e8d4de238b8ec6f8c10062d6d397aadc21a0f7518:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1340
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.03958
|
||||
epss-percentile: 0.87843
|
||||
epss-percentile: 0.87846
|
||||
cpe: cpe:2.3:a:joomla-research:com_jresearch:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a0048304602210094fe8f2dd03aa4275da8a4b64f0f4239cd041c89d4f1507cdb383aa4d6c44f9a022100a12c8a4407c1776938d746556a9b31a555b2742017de2fa12d4cf3e017bdf70e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402204a725974d356b74d0cac4ecaa4f3b8cabbeebeb96269254ae88270a01c9f2ea002202ef1fd8111714e8dc7f3e47eeae6eef887de47fb2c12246a2ba5f776a05413ab:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1345
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.04141
|
||||
epss-percentile: 0.88139
|
||||
epss-percentile: 0.88137
|
||||
cpe: cpe:2.3:a:cookex:com_ckforms:1.3.3:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100b08a7c95b9fef35766e0de9568913ec0843c29e16cec2151a7e650409ca2d538022100f49bad0d3858a1647b3faa19fdbc272bb667dcd6777d6ce50818713ec14ab0f5:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022065e36c1feaa1951b700f60a821655b051de3d0a6bc52651ae99622d096df240b02210087e54fce127f6d061471f159efb74ca10430e973193bb5a122c335420f2cbe7a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1352
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.04773
|
||||
epss-percentile: 0.88954
|
||||
epss-percentile: 0.88952
|
||||
cpe: cpe:2.3:a:jooforge:com_jukebox:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220085b8a703cbea30cca048971ca58fa8b1fdf845a63492978334e263fad50a83b0220739011a90a6b03b1d43120f67478c6d9ea788e45cb8437938baa0549307b2630:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203e873424f943866e2603c37a76c944caea6c21edfede19a27f9d9e3874a1dd20022100e7f0672c9b032a0ac7c1a74c17f3c4812b1b6c0e0db72bb179428068729e823a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1353
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01501
|
||||
epss-percentile: 0.8051
|
||||
epss-percentile: 0.80512
|
||||
cpe: cpe:2.3:a:wowjoomla:com_loginbox:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402201da74327d76cd2cacfe0149f7a55ed1245b85a50ae120d2497dc6e2691faf66e022013de10ae3ffcc58735f5c1780d08de1d10a575dc4c046776c1b3b05eb34b6413:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ff83128c3e4581d353fd1e5c1fde99275c22b816e947a31a1d657ab01788727b022100b0dff0655ac4eb75bf556458be9952bb077304b34f79f0d8f398561099994b91:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1354
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05644
|
||||
epss-percentile: 0.89922
|
||||
epss-percentile: 0.89921
|
||||
cpe: cpe:2.3:a:ternaria:com_vjdeo:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100f2249f69104b7cc3046d84383db7745f8237186c0c52e57c17394c38e709384102207e9e202fedfa903319b4bdcb62e0db2e442a9a6394ee64562c0d61d753b2d2d6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022047097c509020807c8be995d2185d8416ae2f2191a155d6f1fbe2ae3dc455847302206b16e9e03a127a94b107c837c9bc94efa71832e6a3b0aaf697a2f060e9447a09:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1461
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05776
|
||||
epss-percentile: 0.90066
|
||||
epss-percentile: 0.90065
|
||||
cpe: cpe:2.3:a:gogoritas:com_photobattle:1.0.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100bf52affc271b07ded6e28aac2e1b3885a3bf36461f43dc4b0024fe6c2bee8eda022100c11c070c857b16bfa3cc9367cdeff78f0c3a734c8c62f78f8874bbd1ba9cd0fa:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100afa885f1a42988d031cdef72289b32e998670b774be666c36cc037c4728f5c2e0221009123984026d46f5b2461bbe5a5999996d17ca495225e19fc66041b6a7bc0393f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1470
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.07329
|
||||
epss-percentile: 0.91267
|
||||
epss-percentile: 0.91265
|
||||
cpe: cpe:2.3:a:dev.pucit.edu.pk:com_webtv:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220478f7a667c8933d572fe2c64d36f419b9e875db27c9a92cb9e744f2ff142bbb302201339481f032644bfc991bf0c63380eaaa313f74ef41ddabdb9862101eb2ab0e3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100feef3adc830724e0aaaef286c6c88983691921e379b68ffcc8f39b03de05dc2f02203ab52c899121487d36bf71b2b651ef2838f99b5ecc174ee27e184c4cf6dff761:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1471
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0932
|
||||
epss-percentile: 0.92395
|
||||
epss-percentile: 0.92397
|
||||
cpe: cpe:2.3:a:b-elektro:com_addressbook:1.5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402205980578da54d28a104eb83b0b1932c3f0fd3a77d2936a48428b458348fd05b6d02200f4787f8fec18a112855d46984603076e4102cc5c6f307efa0cca0876872fc3a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f18776d0de82834fcd3a4269838a361d06013560956167cb2b0e4fd0e8f3ec8b022100bd0b5695a280c1d88fefbc4442e843dad10d1b7e01cc340df6f8cc4f24394bf9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1473
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02925
|
||||
epss-percentile: 0.8589
|
||||
epss-percentile: 0.85893
|
||||
cpe: cpe:2.3:a:johnmccollum:com_advertising:0.25:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502204b21f5683a716e19f05106c6348631e56574d239252a8b19b52ff52f55616111022100e784469b48f10b4b651801f8aa7380c544a710ec88a3f414207f829d2f1940bd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402207b5608a2e10e2fe6385c66ffb6005a292bd1b2d51200e1e2faa48324230c31a7022019fb1792267108930d6cb6b34b7ad199b26a9999fe8b96eff2f252b093b36bc7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1474
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01377
|
||||
epss-percentile: 0.79624
|
||||
epss-percentile: 0.79626
|
||||
cpe: cpe:2.3:a:supachai_teasakul:com_sweetykeeper:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022023c767ec0314fd996456215af6647a88b59acfc1c88f7382a4649a7ec948ac210220725d2a23d29b7bdd9a0d548cf07df3a52e919d0718e50f565b82901ed2c0edbc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e488aad861a455a4ad9662e17805e74292034b14881436ec0bfc1a58ae144c31022100ed383f1e7b8b5b61334bf5d463eb01b3d641122ccac572aae9a5659e795e1e47:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1475
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0244
|
||||
epss-percentile: 0.84632
|
||||
epss-percentile: 0.84636
|
||||
cpe: cpe:2.3:a:ternaria:com_preventive:1.0.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100a3fce5db34daa4373b5c7f56f2b928fc5eb47e7678ae2922ea1af0f13b39b6f3022100925aa119687106b9af490099e23af07ad182814acf4f240b0d4c46d777a6efa8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100fe27246f2b5a096b8cb8e52adeb0be0ad0970048207b8727c1437d37316dcfc502210098cb395c146049bc34683ca17ae7bbd9bc0be6190100518f8b7ffc7222083463:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2010-1478
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02414
|
||||
epss-percentile: 0.84555
|
||||
epss-percentile: 0.84558
|
||||
cpe: cpe:2.3:a:ternaria:com_jfeedback:1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502203799975976f372f2fc0c505cfe8c362a876f4376f92770ec5afc030a50afbf66022100ff0526e91a8e67c1dd41f7cd8c3b8708d545a72662b0ae7c0db9147b2d57dc90:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e50b9b71f6f40947326c5f96264a4c992ebbbd8d8139d0c1fc2a725e41d3228e022025098c1702233acfb91f4e4675106fdefdfbc25c4e60eddebdc16fb857beac37:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1491
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.03585
|
||||
epss-percentile: 0.87246
|
||||
epss-percentile: 0.87248
|
||||
cpe: cpe:2.3:a:mms.pipp:com_mmsblog:2.3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221009d362d8bcaae279cee02ca9d630efc31d8ce9233e9e3368c131fc9c69d70bc9c022100adf67ed7b6657823100d9cbd496570e84ce3026a696e3e2baa36f0991347dd15:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203e2396cd61cdc85ef72c286d8c0fd92e1405362a414067ed14b1d82091420a5202210097f87c899a1f857b42dc66c7ef9e3d77b91644bf581773d5a1cc9226abc87082:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1532
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01536
|
||||
epss-percentile: 0.80719
|
||||
epss-percentile: 0.80721
|
||||
cpe: cpe:2.3:a:givesight:com_powermail:1.53:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502200d45510f3a2693c8e9653b09ef0af069b2ec65cdd816f3daa962009585a01cb40221008c79bf687b36201e5696360d54789ba0b7bdb8ca4caefd70b313b7393066b8e9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202a9872209bb1a08050bc7600b7b8242a669d036b72ba76887cce020d35f0b71a022100ec04e496ebc25bee5aeffbae374df5fe16cb65e8ab9c0a0b0facc618bcce389e:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1533
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.00957
|
||||
epss-percentile: 0.75685
|
||||
epss-percentile: 0.75681
|
||||
cpe: cpe:2.3:a:peter_hocherl:com_tweetla:1.0.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502201dbab9af5632450e421eb6343115ec373d769824beb70919ef5e82ff1db4e2540221009a95686ea513b4d2521a2ed379173c44ca36c6e09bc1574c8c30d679b730a7c6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502200960bcdb3cefba4c8662d6a3c0f480e527742c29f5792f8f6ca654aeb3b5e4720221009b8095d65870b175e62d03f967aca0be6cd1f706e785909db6841700fa23d8b1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,7 +18,7 @@ info:
|
||||
cve-id: CVE-2010-1534
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.0317
|
||||
epss-percentile: 0.86417
|
||||
epss-percentile: 0.86419
|
||||
cpe: cpe:2.3:a:joomla.batjo:com_shoutbox:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100b2ea633022074948e6c473a67c694c185cb9f00a5f31ef65b2dedb09da1c4ce8022100ba8983216de097cf25e9a7d7c322670b6f60b1018d6ef87f5c414b52694fcfa0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203243bb124f5abf8c62e8ff047fcc78952c8bffccc0d5a87c8c7e4137c8ac8fe402202141e746476074bdcc0458c9c308e51ab54bc7553278ca274e6029a5defaf0f2:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1535
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02609
|
||||
epss-percentile: 0.85111
|
||||
epss-percentile: 0.85115
|
||||
cpe: cpe:2.3:a:peter_hocherl:com_travelbook:1.0.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100ed157ace845a99c9f5c72384d33977e1ec243497b0279db57070f3b88e24c7fe0220294ac26d2bed1176cefc19591c08e9c8e2e79a7b55f3772c6a331256dc17a99f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022022ccfcc5bb3aab0c162749a19f022b09f8f6b173c362b840af773b783b89fa32022100d075aa363c2040d39dd4ce80de80fb3c5884c2795f877cad197d016f983ba0e6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1586
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.00524
|
||||
epss-percentile: 0.66074
|
||||
epss-percentile: 0.66051
|
||||
cpe: cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -38,4 +38,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 490a0046304402200bcaa4a3474a6ada7c262d7e68e8c401d51d222e8359c7660cb923ae42a46de202204eb00dd5f55d839cbc3774b8a89d1cc27b5966d8ff8aabc38994bcfa123aaca3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220181e3eef382a639b473dfca1b6541f07e2d6d5fb38b75c1246fb14868166beb6022066425982c1d246e313475756592922295d0fb4f5f69a55fe5c368da2403ec5dc:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1601
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.03973
|
||||
epss-percentile: 0.87882
|
||||
epss-percentile: 0.87885
|
||||
cpe: cpe:2.3:a:joomlamart:com_jacomment:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100d1bb5b5421ee6d3740336253e60241645bdc46c52838d764ae0e040097e308e3022100ecefc8e82d0b87724b9d52189d3378eaafd7130d2d0755a383b343268e25aa4f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e5a41b610e908fb8134481169e8b63be165d3367395ca819cdaadb9cfcc1f4ab022029435d02f995c19b4e579945d3d560fb2f61e5a6c2771fb4ebccd1e4b003989a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1602
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01427
|
||||
epss-percentile: 0.79988
|
||||
epss-percentile: 0.7999
|
||||
cpe: cpe:2.3:a:zimbllc:com_zimbcomment:0.8.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502201e19e821620e838c4d19786f0c24d6e968679b70096c252497786ab1e70feb2f0221008772268425d41aaa354b255912df17c00b3c62a935ffc31ade0a3be948a89151:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a0048304602210080952911f74bdf0542078f4664cd6b06681a986948718295f7b5e761af725139022100e9b9a91cee180e099b96f174463e3dbb4a049c3b1e36115956202d2c20c2350c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,7 +20,7 @@ info:
|
||||
cve-id: CVE-2010-1607
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02245
|
||||
epss-percentile: 0.84006
|
||||
epss-percentile: 0.84011
|
||||
cpe: cpe:2.3:a:paysyspro:com_wmi:1.5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100c61dba7dc38aec42d613203ae8f8db7b78bffc1cc9c2efac68fd9b7cd24759f10221008ab08bec384887a3a007a29d85fcda5e41375b56d891398a99ca93dc1f2875c9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100fd4ebe24578fda4b278252e32cf9553ab26d05f7c42b3bf1b45cd1c58e94572202200aeb02f858ca91a9babcf62f8417ff80973a86fa3f77c3dddfec3665e2a23257:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1653
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.05171
|
||||
epss-percentile: 0.89407
|
||||
epss-percentile: 0.89405
|
||||
cpe: cpe:2.3:a:htmlcoderhelper:com_graphics:1.0.6:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450220789a8d42fb03113e307e062ea06ef9222eb70ea105b4616d0166e8aa2718fab9022100a5f9aa08bd86f4b80d3860617698ae95ec3d98a26866ce341372cc532c7440fd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402202c8bfdf846eccba976794d626447786c808574028529f50bee75f4b38b0e16c40220039e5ba6f4e7bad8408b73f7f9cb3ec8e95871b94392222f8950722426985aa5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1657
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01291
|
||||
epss-percentile: 0.7901
|
||||
epss-percentile: 0.79009
|
||||
cpe: cpe:2.3:a:recly:com_smartsite:1.0.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022015d0b4d141813eaf67dfc69f058c0eeeadfb1679f31e8ef94c268fbf56b6f7be02202229b094698cf9736aa3e60d50ebb3dbdf1fb4a23e521acfeed1f179afe294d2:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100b5a2ca7bd51e59a0ab8de830a34e5610029a460c6477875a369bae426804efc20220216cc329388fc22b9e26dbcd44109a28fd821ba21e066019378a6342e370dd44:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1659
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02965
|
||||
epss-percentile: 0.85976
|
||||
epss-percentile: 0.85979
|
||||
cpe: cpe:2.3:a:webkul:com_ultimateportfolio:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502207d7e97090496d34ca733278eb9447ff638e03f2438133a2b644c9d0e51557e25022100fec86a383f24b10df91896e2d71aa3691741b167a488565be67611669321c6c1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022079a9af325b6a265e32858ecc4ee84c697036455eae4c5d8f780aa9d81637eb5402206bea3c05da2f3f0420064b71fd057d63e8cc43b7d1ec0fd290f6682095d2a1b9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1714
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06091
|
||||
epss-percentile: 0.90343
|
||||
epss-percentile: 0.90341
|
||||
cpe: cpe:2.3:a:dev.pucit.edu.pk:com_arcadegames:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402200d7aac068a62ed0e2134be67163edb04627e896d2509e05c163b36e2a6888ad302200faa2850aeb2a5787d3dfe484a10ace7263d79abcbb316f4e764183ffc873def:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220009f51e9b1e65cf5d06008c1341baabca4c28c7098c2086303661d00daf761e602204e795970b9452eedcc34a72405e22be5f0d247fa0414635f93a9d7a32e4a665d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,7 +19,7 @@ info:
|
||||
cve-id: CVE-2010-1715
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02144
|
||||
epss-percentile: 0.83637
|
||||
epss-percentile: 0.83641
|
||||
cpe: cpe:2.3:a:pucit.edu:com_onlineexam:1.5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -41,4 +41,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100dde00599a8402e13b0af31ba00f9dc0ced22ca2d311e5428adafac6deeba50de02200a7bbfc07b85ef80871e67506ce5fdf357073a9053f8ae0ef470e08711e312dc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022004bed1606ea06b3bfefcbc3894237e042447c419db23f7722f6fa1b96436204b0221008c7ef36f4de7f39e5093935b8f4b15139e80853b30281c143e334d677932c55f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,7 +17,7 @@ info:
|
||||
cve-id: CVE-2010-1718
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01887
|
||||
epss-percentile: 0.8258
|
||||
epss-percentile: 0.82583
|
||||
cpe: cpe:2.3:a:lispeltuut:com_archeryscores:1.0.6:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -39,4 +39,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100dd77bb1f566aba88d58ac704bc6f46dc0745737333c27098a57bd87de0d70125022100d5a51113460967ab0b238b45e9371a168ded79ca15dc990df90aaac595865c21:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100c7ae1eee37c285ea88f28e612dc1d4c885904979e8ca3c8d466d482c8ab8564c022023e109d6a2ba9d72952369efa478c345569e3ae8e402334335d8ac93694e3117:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,7 +21,7 @@ info:
|
||||
cve-id: CVE-2010-1719
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02884
|
||||
epss-percentile: 0.85805
|
||||
epss-percentile: 0.85809
|
||||
cpe: cpe:2.3:a:moto-treks:com_mtfireeagle:1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100f6f42f3bac9791798987e847cab802373caee3f35791e35ab4537945d1ad5b17022100e4bf4ae0af3c4967ab71baa4af32821d07af4de51815b2b494b8daf05f2bcde0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100929dff89b848cde3fad5ee5e4ab09097e19f44bfa3be59ed77f5d36d2532217f02206f4602d2664cde5bb9aed4d054d98443a050193fc2d1614777bf3e05204ff8d4:922c64590222798bb761d5b6d8e72950
|
||||
Loaded 100 of 1495 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user