Update CVE-2025-6569.yaml

improve matcher CVE-2025-6569.yaml
Create CVE-2025-6569.yaml
2026-11-07 08:36:19 -10:00 · 2025-11-03 10:57:13 +09:00 · 2025-11-03 10:33:28 +09:00 · 2025-11-03 10:22:43 +09:00
3501 changed files with 11408 additions and 13951 deletions
@@ -1,54 +1,26 @@
+CVE-2024-28623.yaml
 code/cves/2024/CVE-2024-47575.yaml
-code/misconfiguration/dns-axfr-enabled.yaml
 http/cves/2018/CVE-2018-6882.yaml
 http/cves/2019/CVE-2019-11507.yaml
-http/cves/2021/CVE-2021-41419.yaml
 http/cves/2021/CVE-2021-45467.yaml
 http/cves/2022/CVE-2022-26143.yaml
 http/cves/2023/CVE-2023-2437.yaml
 http/cves/2023/CVE-2023-34048.yaml
-http/cves/2024/CVE-2024-0799.yaml
-http/cves/2024/CVE-2024-0801.yaml
 http/cves/2024/CVE-2024-10146.yaml
 http/cves/2024/CVE-2024-11238.yaml
 http/cves/2024/CVE-2024-27443.yaml
-http/cves/2024/CVE-2024-28623.yaml
 http/cves/2024/CVE-2024-4180.yaml
 http/cves/2024/CVE-2024-6690.yaml
-http/cves/2025/CVE-2025-1023.yaml
-http/cves/2025/CVE-2025-1302.yaml
 http/cves/2025/CVE-2025-24354.yaml
-http/cves/2025/CVE-2025-32429.yaml
 http/cves/2025/CVE-2025-41243.yaml
-http/cves/2025/CVE-2025-51482.yaml
-http/cves/2025/CVE-2025-52472.yaml
-http/cves/2025/CVE-2025-52665.yaml
 http/cves/2025/CVE-2025-54236.yaml
 http/cves/2025/CVE-2025-54253.yaml
-http/cves/2025/CVE-2025-55190.yaml
 http/cves/2025/CVE-2025-5605.yaml
-http/cves/2025/CVE-2025-58443.yaml
 http/cves/2025/CVE-2025-59287.yaml
 http/cves/2025/CVE-2025-6174.yaml
 http/cves/2025/CVE-2025-61884.yaml
-http/cves/2025/CVE-2025-6403.yaml
-http/cves/2025/CVE-2025-64095.yaml
-http/cves/2025/CVE-2025-9985.yaml
-http/default-logins/churchcrm/churchcrm-default-login.yaml
-http/exposed-panels/churchcrm-panel.yaml
-http/exposures/backups/generic-php-files.yaml
 http/misconfiguration/aem/aem-dispatcher-bypass.yaml
 http/misconfiguration/aem/aem-querybuilder-bypass.yaml
-http/misconfiguration/installer/churchcrm-installer.yaml
-http/misconfiguration/tomcat-snoop-servlet-exposed.yaml
-http/takeovers/mailgun-takeover.yaml
-http/vulnerabilities/generic/xss-uri-reflected.yaml
-http/vulnerabilities/unifi/unifi-create-user.yaml
-http/vulnerabilities/unifi/unifi-nfc-credentials.yaml
-javascript/cves/2019/CVE-2019-6443.yaml
-javascript/detection/ntp-version-detect.yaml
 javascript/misconfiguration/mqtt-uauth-broker.yaml
 javascript/udp/misconfiguration/ntp-enum-variables-enabled.yaml
-network/cves/2020/CVE-2020-14644.yaml
 network/cves/2024/CVE-2024-23108.yaml
-network/detection/rtl-tcp-server-detect.yaml
@@ -18,8 +18,8 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2024-28623
    cwe-id: CWE-79
-    epss-score: 0.03629
-    epss-percentile: 0.8732
+    epss-score: 0.00103
+    epss-percentile: 0.29279
    cpe: cpe:2.3:a:ritecms:ritecms:3.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -68,4 +68,4 @@ http:
          - 'contains(content_type, "text/html")'
          - 'status_code == 200'
        condition: and
-# digest: 4a0a00473045022070a622f12025185c40cefb099b0d6e1d4142bc26f1a5885112d8f1188aac96a1022100a8a39a94a6015761abe75561cd9d357b64c258aa3f2c66cfd04f2a5a00bff871:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207f06b5bc0527e52c7f7838da889bb8fc882b94146d9f7b029906b50eb26a7cfd022076fd4924b71cb5a093f3b503d24a6c66a478c16c7b399b1a32d3645216481693:922c64590222798bb761d5b6d8e72950
@@ -11,7 +11,7 @@ info:
  metadata:
    verified: true
  classification:
-    epss-score: 0.94477
+    epss-score: 0.94482
    epss-percentile: 0.99998
  tags: cve,cve2014,openssl,heartbleed,code,kev,vkev,vuln

@@ -138,4 +138,4 @@ code:
      - type: dsl
        dsl:
          - "contains(response,'server is vulnerable')"
-# digest: 4a0a004730450220253c760b6f21558040bda6901fd015197a1b07bcd3071335dbc0a5fc5c97ef3b022100fd75f119e678cf94e08677f89145a463de9844d09a8c06970e23b00c321dab73:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100869158bef50a465b37da0a4a9938b474b78d4494eb412bd5962b937d498be69102206683aa92f5ee33e197cb690c2ebb643014c78b55b68d7d6ec5ebb0e4b166e4aa:922c64590222798bb761d5b6d8e72950
@@ -13,8 +13,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2016-8735
-    epss-score: 0.93875
-    epss-percentile: 0.99862
+    epss-score: 0.93817
+    epss-percentile: 0.99854
    cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
  metadata:
    shodan-query: product:"tomcat"
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2019-0604
    cwe-id: CWE-20
    epss-score: 0.94414
-    epss-percentile: 0.99976
+    epss-percentile: 0.99977
  metadata:
    verified: true
    vendor: microsoft
@@ -154,4 +154,4 @@ code:
          - 'contains(interactsh_protocol, "dns")'
          - 'contains(interactsh_request, hex_encode(marker))'
        condition: and
-# digest: 4b0a0048304602210082461cf3c1e6dd2447ebe24351e8beb9729daeaa31c70ffcee8b29094d53e51b022100e6f972c3ab3ec97a3380691d598c83e68e66ecb8f2eb69db912e5d3f66231e1d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b5aa52708ffbb2d9f89134de40b403a3c73ff25c65b22234c2670242b173d0e8022005d624bb447165e84abef3c774bb55936da982c0305539fe4b824cc62f588db8:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2019-14287
    cwe-id: CWE-755
    epss-score: 0.86126
-    epss-percentile: 0.99351
+    epss-percentile: 0.99365
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -47,4 +47,4 @@ code:
          - '!contains(code_1_response, "root")'
          - 'contains(code_2_response, "root")'
        condition: and
-# digest: 490a004630440220142b1e84a588dc114782c86821e49717d24b8ba55118a4080f47606c1aca3d7c02204503a2b4bcb76f99ad7088beeeb4a5af71dda20062a84b1667142ba11ea5490a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e5c2f380c478f32d10a2739ed8d7dbf1c18b63ec19e3e4fd973d2a67911203ef022100a8a3620c75626c55a4510266c9defefdca0e3477a6be1c80f30d187da41f1d0c:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2020-0646
    cwe-id: CWE-91
-    epss-score: 0.93368
-    epss-percentile: 0.99801
+    epss-score: 0.93081
+    epss-percentile: 0.99775
    cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
  metadata:
    verified: true
@@ -102,4 +102,4 @@ code:
          - 'contains(content_type, "text/xml")'
          - 'status_code == 200'
        condition: and
-# digest: 4b0a004830460221009d9bdc3780607102c88f8e2c24b7c11abaa1db7626959bea30844b3becad4398022100f8b42cfb37bdec09e2e983826a04f66fa50937cebe0b05d8b98cea1b558a21a9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d9da65c70c4ca8f260836e5b774edd12d41561d03f9f142e9d6c546e26ded31d0220345109b405df5bd0aced26c9d9814a4b4d76ff1eab24a6a68cf57d030df04cbc:922c64590222798bb761d5b6d8e72950
@@ -10,8 +10,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    cvss-score: 7.5
    cve-id: CVE-2020-13935
-    epss-score: 0.92155
-    epss-percentile: 0.99695
+    epss-score: 0.9169
+    epss-percentile: 0.9967
  reference:
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -17,8 +17,8 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2021-3156
    cwe-id: CWE-193
-    epss-score: 0.92188
-    epss-percentile: 0.99697
+    epss-score: 0.92019
+    epss-percentile: 0.99691
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -40,4 +40,4 @@ code:
          - "malloc(): memory corruption"
          - "Aborted (core dumped)"
        condition: and
-# digest: 4b0a00483046022100f71982b68a0941b58c28d66c71e85126c4c968ced5ce8646155128b001dda849022100e1dfe8f43d26c8c72bbdedf39a5ca890a46771c1b941308525a570abd452244c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206a26df5d59703d43d60c65f819fec8a18f01c6f9601fc631dbb0d4dd5fac11ab022053e81d13af27aa8eb25d64d7a341eb753032c560e24c38e38dd6c17ac8136f77:922c64590222798bb761d5b6d8e72950
@@ -23,7 +23,7 @@ info:
    cve-id: CVE-2022-42475
    cwe-id: CWE-197,CWE-787
    epss-score: 0.9394
-    epss-percentile: 0.99872
+    epss-percentile: 0.99874
    cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -197,4 +197,4 @@ code:
      - type: word
        words:
          - "Target appears to be VULNERABLE"
-# digest: 4a0a00473045022100e913085eb3784826410469b3e2477d893db8b66741034bd3bf2b96c432ae5fa402207e41770b1a18ba058d8288ed36abea4b314f410b9b7a540c6db34418cddda5e7:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022015db877d3ba82455b9b6c4790a21a0a1fbf15298a5d058b0e1f2dd55ba2e294002200b6cddf0aa7864e01c29b8d6e4b0ebc0ec1701baa343fbc66f73a3b94bdb1b22:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-2640
    cwe-id: CWE-863
    epss-score: 0.92037
-    epss-percentile: 0.99684
+    epss-percentile: 0.99694
    cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ code:
          - '!contains(code_1_response, "(root)")'
          - 'contains(code_2_response, "(root)")'
        condition: and
-# digest: 490a004630440220042744883085da6be3360bc592800813b59a32ca3cca5b357679359e6253ba240220221969866987b2d8a715ea12875a3378b4d34a00642ee1940414fb062dbb7ccc:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bcc9575b543f193888153580cc4a3c78e38b847310061fe6a8a0047f498fa06f022100a7f8a67bb888081e9ef7ccfe95153b86a02baa95e2a1f024a02dd5bec98f82e7:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2023-2986
    epss-score: 0.9117
-    epss-percentile: 0.99625
+    epss-percentile: 0.99639
    cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -626,4 +626,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 4a0a00473045022100e6eab6f55170064a588506282efa987cb311cb8e2f791c1066d1d0d643b71b76022068fc331e222d13fd82f83dea7d76fa1aeb431eea1a0f9f415a3eb6917ef1e6a9:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f3b4f1acb6f511b36bad03fee5f72730151dfecb5fa4998a3c79a8760624d49f022100e87284a26b9fb2e8164a6be1824cdb5e1e62e862e06d41d5e35ad20856daf16b:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2023-49105
    cwe-id: CWE-287
    epss-score: 0.86244
-    epss-percentile: 0.99356
+    epss-percentile: 0.99369
    cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -90,4 +90,4 @@ http:
      - type: dsl
        dsl:
          - '"Username => "+ username'
-# digest: 4a0a00473045022100cf2286e2b9e4ad6a4e7a1300d561d89e3de6c89744d3b4d2e1fb5fb3a21e657602201a70a5fb1b750c545c39bb3c3cdb175a2d69af7540d635a926f13d4e1fbab54b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201308cb0bd5dafab9c7d3a5912da33ed59f853d78b31a513e9c516cb017d552b3022100fbdbd05b062321a694f01a44d1d647b38aab9626c0784ebda210bf84c1b963b6:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 7.8
    cve-id: CVE-2023-4911
    cwe-id: CWE-787,CWE-122
-    epss-score: 0.78409
-    epss-percentile: 0.98978
+    epss-score: 0.78361
+    epss-percentile: 0.98987
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "139"     # Segmentation Fault Exit Code
-# digest: 4b0a004830460221009b5dc3be045aba05dec88023cb7dddc24188b00eec844cfa3909377e9d6317eb022100e0078981f9b353e41cf8e5e46fe4c1e421ddbbb0038b65ead953e45bb4b81381:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203fa2dc626ae41841960a2f35bda69ffec62f7fb357ef82165ad78955c39d6c0c022009c0ee1587f1d287fa07440f3e5052b5fe286e7572d0e53fa4fcd46d886e4e86:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2023-6246
    cwe-id: CWE-787,CWE-122
    epss-score: 0.25078
-    epss-percentile: 0.95931
+    epss-percentile: 0.95965
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "127"     # Segmentation Fault Exit Code
-# digest: 4a0a004730450220707af88658762f3e5a34c0b6adc5c8761db5b3a68d793de3ce1583c5e2334dbc022100aa3e773dd28b5a80f46c9e117e3cff530f72279898a97cf61d0f542ddad6451d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201039bbf1fa7cb2a2b2ce6c2582948ae7e8c238b5239a25149b526559b6ec9424022068927783003349aa159613a99bad7c0a7c2c161817f7ba2f069c26866ac5fabb:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cve-id: CVE-2024-10443
    cwe-id: CWE-77
    epss-score: 0.69676
-    epss-percentile: 0.98585
+    epss-percentile: 0.986
    cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
  metadata:
    verified: true
@@ -54,4 +54,4 @@ code:
        part: interactsh_protocol # Confirms the HTTP Interaction
        words:
          - "dns"
-# digest: 4a0a004730450221008b5ac203a17c5ac2495444e747470435d1f73ab86119dbac864498facc0299ba0220706f90afe3ebad35664001b827141b2c9308fbf3c09d879a0fe9232a2602ff14:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200f329cc1b4f84d497a47fdd2af1ee34464eb4b4d6b8ff8131bce0735ef231560022100f6a3f1447ecf66ac35bc0f88bd1f1c6d2ac1e0c3162a63fef2922037c6708c28:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cve-id: CVE-2024-12356
    cwe-id: CWE-77
    epss-score: 0.93687
-    epss-percentile: 0.99833
+    epss-percentile: 0.99836
    cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
  metadata:
    vendor: beyondtrust
@@ -37,4 +37,4 @@ code:
        words:
          - "0 success"
          - "1 try again later"
-# digest: 4b0a00483046022100bcb70958bd42473e557963672c2efd5866879d3fd84e491b51e19b39e53ac0b6022100cec4f199e93652df8d28806d7fa5ebf4e7eee2e68522774ed5ad2fda01bf9d05:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100eb9365a6aeb991949bd26b0af2d1a98476595c7e5f1c0f4964efe751edf63b3502200474f65c9c1963fb4d288bf407f8bfae3e8c7e5f86b4631e111e5d31a174db6c:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 9.1
    cve-id: CVE-2024-22120
    cwe-id: CWE-20
-    epss-score: 0.93259
-    epss-percentile: 0.99793
+    epss-score: 0.93506
+    epss-percentile: 0.99817
  metadata:
    max-request: 1
    vendor: zabbix
@@ -71,4 +71,4 @@ code:
      - type: word
        words:
          - "Vulnerable to CVE-2024-22120"
-# digest: 4b0a00483046022100c29b03d6ec221f62966546d687c9c8c86e41f5d46f37e8896f3473a10d8b08b3022100867de1666d89e4ae22d98a7a0fd65b75a1716a312aaec979b2fabcd6b2ae1cf9:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009847f62dd1b32d34c8a63be1a33cee98f01ba64729b22a34daecb7ee27d1db51022100f026f82d40364e4ab2390b461051a6967279f313598e1de74413f7173e4e6627:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 10
    cve-id: CVE-2024-3094
    cwe-id: CWE-506
-    epss-score: 0.85778
-    epss-percentile: 0.99331
+    epss-score: 0.86006
+    epss-percentile: 0.99359
    cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a0047304502210092d5ac481a41f2bce742d30e9a53e6cfcce47b99b02f4291b382802664d6f8c80220616412b2e3eab8e90f86485850f7ca389e9ac0b0f1a890e827325eb9677048d9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b923b9dee06216de4336f4c64bbcc32b77233702859804b102c5130b0c8214ce0220294a8d797b81883111e1bd9de2ab5423668cec7d06a6a679fa2e0047ef760fff:922c64590222798bb761d5b6d8e72950
@@ -10,8 +10,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    cvss-score: 7.5
    cve-id: CVE-2024-4340
-    epss-score: 0.16207
-    epss-percentile: 0.94529
+    epss-score: 0.14988
+    epss-percentile: 0.94304
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
  tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -29,4 +29,4 @@ code:
        part: stderr
        words:
          - "RecursionError: maximum recursion depth exceeded"
-# digest: 490a004630440220549dc564dc5471bdf1dc63334bf0ff6ef0f2c050664a3b06189b22683d31875f02204d49ed2a7bd8a9158503467d45b113fb0e8b20c98a09747235c176e23a8ef696:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200d35eeb33d4692bc8493954555160a2c5b0f2487b94306a65f19bb55122056b8022100e2e5255c01b8d7abb8a10850368a3566390505eb786b49211f0322520e092279:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-45409
    cwe-id: CWE-347
-    epss-score: 0.39163
-    epss-percentile: 0.97099
+    epss-score: 0.39537
+    epss-percentile: 0.97143
  metadata:
    verified: true
    shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 490a0046304402205e030f7d186f18e2ddf5cd9281a48cb0af2d6ac63498b37cb4a9ce899f84a59e022005a03e6ea351d60b08436740f6db2daf9e303d0323c278f564ab1230e9a678f2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210090ae551f28f4bab3fb780276921411eb772cd0325416fefe2741531ddb27ec4c022063ffaf911ab320457d40ed1e116bd6aa0a701fc6c7d29518afac54ccf5d99d25:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-47575
    cwe-id: CWE-306
    epss-score: 0.93874
-    epss-percentile: 0.99861
+    epss-percentile: 0.99864
    cpe: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*
  tags: cve,cve2024,fortinet,fortimanager,kev,rce,vkev

@@ -145,4 +145,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4b0a00483046022100ec14e45bc6bc3f9a31bebf7c7e91cff5df5cb9159169aa0226e3d067fc01f1e2022100c71d9207b4a6d950032c7216f57a8e2347823a4f8aad944aa50de2e9b4fd6978:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022053c9492152b5a242f33bdd2baa60c17e38d244f3e15b248dfebe103d3537da4e022100ec074c3bb81adc25c2b490f98b04f93accb4c64b8d3d669e43a9619acda027b2:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-55556
    cwe-id: CWE-502
-    epss-score: 0.84379
-    epss-percentile: 0.99271
+    epss-score: 0.7976
+    epss-percentile: 0.99055
  metadata:
    verified: true
    max-request: 2
@@ -193,4 +193,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a00473045022100c33a7e4170efd830fed04dc81dff116c0d6de6a7a04013690afafee5aa4dd7eb022016a273dda70ccb4e18af5f17d14d297c9dbcfbe9981b3789e6ea9b4eafeab7a9:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022052e5b775578a7fca6cb990ade7233643fd8f7e44495eaf56f7f62661d3a861be02207bfbf384f7a79e0e5e5e7f192577929a0213e8ccca02d072bbd5e29ebc673ef5:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-56331
    cwe-id: CWE-22
    epss-score: 0.41406
-    epss-percentile: 0.97235
+    epss-percentile: 0.9726
  metadata:
    verified: true
    shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
      - type: word
        words:
          - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4a0a0047304502204c5b24fda7a91e193ed794e32f38673f924ed17e393ebcb8e6e0e9351a6cde85022100860aa6411a18b6baec11fa99823a8fb2c3ed558adab797c067b1fe8ff009577e:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022006b8b326484a5c81f8da2d54c73235eb9ed0dd8be1c1359ad68656c8481c96e902200357b0465882db9a1a82adf437bddf8529ce4e44ee98cf6b6ee94caec37db85f:922c64590222798bb761d5b6d8e72950
@@ -11,7 +11,7 @@ info:
    - https://github.com/advisories/GHSA-g83h-4727-5rpv
  classification:
    epss-score: 0.36115
-    epss-percentile: 0.96904
+    epss-percentile: 0.96929
  metadata:
    verified: true
    shodan-query: title:"GitHub Enterprise"
@@ -188,4 +188,4 @@ http:
      - type: kval
        kval:
          - user_session
-# digest: 490a0046304402207d41ce6b6af9c3b0133e15c33183fdce00ba09f874633dbea4f3cb29234c64d8022004ad19707190bb70f9ff118286b04f22a704b252594a598f0b96850afa09a55d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f582435da247d372a892f0cadd60d50b85839655f298e9055a456e808cd3a0a8022100944402534e1ccefe8d2074a1d23814f9e71e5342a703273805c71d0cd9b0916c:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2025-22457
    cwe-id: CWE-121,CWE-787
    epss-score: 0.76863
-    epss-percentile: 0.98898
+    epss-percentile: 0.98911
    cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
  metadata:
    vendor: ivanti
@@ -128,4 +128,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4a0a0047304502203f75dbfaad4ad6b004f89a6abe6b8ff05ec8c740385c91234058adab770eb6ea022100d31419b68e13b98dbfdede575d41d57e7b949ade2001446d470aa73c3a7f4bb4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e877d67bb07b4213ccda0e1423a15e427d1ec40e182ef220c977d4e2d9b6118d022006d4fbdc5d89498ed8a4b871af115c9f8589610510a89759be2ac81c325f0828:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 9.3
    cve-id: CVE-2025-25291
    cwe-id: CWE-347
-    epss-score: 0.17247
-    epss-percentile: 0.94744
+    epss-score: 0.17932
+    epss-percentile: 0.94912
  metadata:
    verified: true
    vendor: gitlab
@@ -78,4 +78,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 490a0046304402202d4a3417e1248c02987e65aaa3859a0691580be5c5e6841ef09e1546d4f6ce770220709dc70e279c9f4aa652e8391870e72f9f0ed9badcc811469e6425b2882cd484:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202649fbc90d6d9d23a36674a3480a47f79af9343f4f33a3cf741342b9221df49702203e1c004761febb037410a5829551d53cd1986424e3a363349803b78e171fca4c:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 10
    cve-id: CVE-2025-32433
    cwe-id: CWE-306
-    epss-score: 0.53778
-    epss-percentile: 0.97866
+    epss-score: 0.64931
+    epss-percentile: 0.98398
  metadata:
    verified: true
    max-request: 1
@@ -172,4 +172,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4a0a00473045022100a836215ff57c937a4e67f2d0356c07465020153450ad01d5d8fb3ee70ea58c7d022074f5c22f26df10c73b3c23b69fccd923b643dd8de88c214cfed73f65fc67f2a5:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d6f79e25ffb9d10c2cc4ca51de5e52e2979aece6deba0f62caa897ef235390f9022100c243d88faee4e2311890c46f013beb7b1f62cd37f568ca84fd94941711b92095:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-54309
    epss-score: 0.56973
-    epss-percentile: 0.98016
+    epss-percentile: 0.98026
    cwe-id: CWE-287,CWE-362
    cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*
  metadata:
@@ -200,4 +200,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4b0a004830460221009e096641682d45560e5ef9e35a24ef1d999c1237e1c7300af90e97c940eda5a1022100af9eb03cc7d7732a901c609bef6ca34d6632f0827751b77c4338a9f26eee5e2c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205addfd2fcc9bddf251a3606b8baf2b77dfe21e359a260aff0770350ff7804b1302204356334dc2910339645859d33ae0d55886992447645a3d727ecc2162aeab7caf:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
  classification:
    epss-score: 0.28615
-    epss-percentile: 0.96307
+    epss-percentile: 0.96336
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
      - type: dsl  # type of the extractor
        dsl:
          - '"Reset URL: " + code_response'
-# digest: 4a0a0047304502204e15f75d847313a94159ce612853e8d43c07acd7907aaa6116166434ed694ca6022100b51bf8064525483171bb588675b324c60cbe3f8a3987f86db575d2baeaa20225:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100959bb469c6cbcecc35328cc23186e426485767b243807b50454ab6139c6f7de702204ad4389476662d2a781b929111d39bfd640cbc5221ec2a24100063531de9da90:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-9242
    cwe-id: CWE-787,CWE-362
-    epss-score: 0.055
-    epss-percentile: 0.89772
+    epss-score: 0.04058
+    epss-percentile: 0.88082
    cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -552,4 +552,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a00473045022100dcff8d2117d05c7f29608fb37b2e2c96880d295642afaa19a7b9fd87fbbe7189022015423b37441c71e3f9b33c8cd1635fd58e97b63018684175eecad56ee9676538:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c6ba53b550a6681830a09cdd2c39fcee1f49f9ff848666fc142ee5d8d7af19b702205d68ad85902625ec80dcabb54b10cc31582d4586986b2d213c4aa5d31900662e:922c64590222798bb761d5b6d8e72950
@@ -1,34 +0,0 @@
-id: dns-axfr-enabled
-
-info:
-  name: DNS Zone Transfer Check (AXFR)
-  author: matejsmycka
-  severity: medium
-  description: |
-    Checks if particular domain can be queried via DNS Zone Transfer (AXFR). An open zone transfer can disclose all DNS records for a zone, leading to information leakage.
-  reference:
-    - https://beaglesecurity.com/blog/vulnerability/dns-zone-transfer.html
-  metadata:
-    verified: true
-    shodan-query: port:53
-  tags: dns,tcp,axfr,code
-
-code:
-  - engine:
-      - bash
-    source: |
-      domain=$Host
-      dig axfr $domain @$(dig $domain ns +short | head -n1)
-
-    matchers:
-      - type: regex
-        regex:
-          - 'XFR size: [1-9][0-9]* records?'
-        condition: and
-
-    extractors:
-      - type: regex
-        regex:
-          - 'SOA\s+([^\s]+)'
-        group: 1
-# digest: 4a0a004730450220035a0e8c35c138a76af730a8b2beba052efc136bfedf13160598e9d360c3853c0221008a598f55b7c84f2ac2dbc10e1831976297c3b5cfec55eaa95ddfde27e0fd62cc:922c64590222798bb761d5b6d8e72950
@@ -1615,7 +1615,6 @@
 {"ID":"CVE-2021-41293","Info":{"Name":"ECOA Building Automation System - Arbitrary File Retrieval","Severity":"high","Description":"The ECOA BAS controller suffers from an arbitrary file disclosure vulnerability. Using the 'fname' POST parameter in viewlog.jsp, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-41293.yaml"}
 {"ID":"CVE-2021-41349","Info":{"Name":"Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting","Severity":"medium","Description":"Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305.","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2021/CVE-2021-41349.yaml"}
 {"ID":"CVE-2021-41381","Info":{"Name":"Payara Micro Community 5.2021.6 Directory Traversal","Severity":"high","Description":"Payara Micro Community 5.2021.6 and below contains a directory traversal vulnerability.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-41381.yaml"}
-{"ID":"CVE-2021-41419","Info":{"Name":"QVIS NVR/DVR - Remote Code Execution","Severity":"critical","Description":"QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-41419.yaml"}
 {"ID":"CVE-2021-41432","Info":{"Name":"FlatPress 1.2.1 - Stored Cross-Site Scripting","Severity":"medium","Description":"FlatPress 1.2.1 contains a stored cross-site scripting vulnerability that allows for arbitrary execution of JavaScript commands through blog content. An attacker can possibly steal cookie-based authentication credentials and launch other attacks.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2021/CVE-2021-41432.yaml"}
 {"ID":"CVE-2021-41460","Info":{"Name":"ECShop 4.1.0 - SQL Injection","Severity":"high","Description":"ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-41460.yaml"}
 {"ID":"CVE-2021-41467","Info":{"Name":"JustWriting - Cross-Site Scripting","Severity":"medium","Description":"A cross-site scripting vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-41467.yaml"}
@@ -2760,8 +2759,6 @@
 {"ID":"CVE-2024-0593","Info":{"Name":"WordPress Simple Job Board - Unauthorized Data Access","Severity":"medium","Description":"The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetch_quick_job() function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2024/CVE-2024-0593.yaml"}
 {"ID":"CVE-2024-0692","Info":{"Name":"SolarWinds Security Event Manager - Unauthenticated RCE","Severity":"high","Description":"The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-0692.yaml"}
 {"ID":"CVE-2024-0713","Info":{"Name":"Monitorr Services Configuration - Arbitrary File Upload","Severity":"high","Description":"A vulnerability was found in Monitorr 1.7.6m. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assets/php/upload.php of the component Services Configuration. The manipulation of the argument fileToUpload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251539. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-0713.yaml"}
-{"ID":"CVE-2024-0799","Info":{"Name":"Arcserve Unified Data Protection - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-0799.yaml"}
-{"ID":"CVE-2024-0801","Info":{"Name":"Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll","Severity":"high","Description":"A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-0801.yaml"}
 {"ID":"CVE-2024-0881","Info":{"Name":"Combo Blocks \u003c 2.2.76 - Improper Access Control","Severity":"medium","Description":"The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-0881.yaml"}
 {"ID":"CVE-2024-0939","Info":{"Name":"Smart S210 Management Platform - Arbitary File Upload","Severity":"critical","Description":"A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-0939.yaml"}
 {"ID":"CVE-2024-0986","Info":{"Name":"Issabel Authenticated - Remote Code Execution","Severity":"medium","Description":"A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252251. NOTE- The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2024/CVE-2024-0986.yaml"}
@@ -2886,7 +2883,6 @@
 {"ID":"CVE-2024-28000","Info":{"Name":"WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin","Severity":"critical","Description":"Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-28000.yaml"}
 {"ID":"CVE-2024-28255","Info":{"Name":"OpenMetadata - Authentication Bypass","Severity":"critical","Description":"OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `JwtFilter` handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request's path is checked against this list. When the request's path contains any of the excluded endpoints the filter returns without validating the JWT. Unfortunately, an attacker may use Path Parameters to make any path contain any arbitrary strings. For example, a request to `GET /api/v1;v1%2fusers%2flogin/events/subscriptions/validation/condition/111` will match the excluded endpoint condition and therefore will be processed with no JWT validation allowing an attacker to bypass the authentication mechanism and reach any arbitrary endpoint, including the ones listed above that lead to arbitrary SpEL expression injection. This bypass will not work when the endpoint uses the `SecurityContext.getUserPrincipal()` since it will return `null` and will throw an NPE. This issue may lead to authentication bypass and has been addressed in version 1.2.4. Users are advised to upgrade. There are no known workarounds for this vulnerability. This issue is also tracked as `GHSL-2023-237`.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-28255.yaml"}
 {"ID":"CVE-2024-28397","Info":{"Name":"pyload-ng js2py - Remote Code Execution","Severity":"medium","Description":"An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2024/CVE-2024-28397.yaml"}
-{"ID":"CVE-2024-28623","Info":{"Name":"RiteCMS 3.0.0 - Cross-site Scripting","Severity":"medium","Description":"RiteCMS v3.0.0 contains a reflected XSS caused by unsanitized input in the main_menu/edit_section component, letting attackers execute arbitrary scripts in the context of the victim's browser.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-28623.yaml"}
 {"ID":"CVE-2024-28734","Info":{"Name":"Coda v.2024Q1 - Cross-Site Scripting","Severity":"medium","Description":"Cross Site Scripting vulnerability in Unit4 Financials by Coda v.2024Q1 allows a remote attacker to escalate privileges via a crafted script to the cols parameter.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-28734.yaml"}
 {"ID":"CVE-2024-2876","Info":{"Name":"Wordpress Email Subscribers by Icegram Express - SQL Injection","Severity":"critical","Description":"The Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress \u0026 WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-2876.yaml"}
 {"ID":"CVE-2024-2879","Info":{"Name":"WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection","Severity":"high","Description":"The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-2879.yaml"}
@@ -3237,14 +3233,12 @@
 {"ID":"CVE-2025-0674","Info":{"Name":"Elber ESE DVB-S/S2 - Authentication Bypass","Severity":"critical","Description":"Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-0674.yaml"}
 {"ID":"CVE-2025-0868","Info":{"Name":"DocsGPT - Unauthenticated Remote Code Execution","Severity":"critical","Description":"A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.This issue affects DocsGPT- from 0.8.1 through 0.12.0.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-0868.yaml"}
 {"ID":"CVE-2025-10035","Info":{"Name":"GoAnywhere - Authentication Bypass","Severity":"critical","Description":"Fortra GoAnywhere MFT contains an insecure deserialization vulnerability in the License Servlet caused by deserializing attacker-controlled objects with a valid forged license response signature, letting attackers perform command injection, exploit requires valid forged license signature.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-10035.yaml"}
-{"ID":"CVE-2025-1023","Info":{"Name":"ChurchCRM - SQL Injection","Severity":"critical","Description":"A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1023.yaml"}
 {"ID":"CVE-2025-1025","Info":{"Name":"Cockpit \u003c 2.4.1 - Arbitrary File Upload","Severity":"high","Description":"Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extensions to bypass the upload filter.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1025.yaml"}
 {"ID":"CVE-2025-1035","Info":{"Name":"KLog Server - Path Traversal","Severity":"medium","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls.This issue affects KLog Server: before 3.1.1.\n","Classification":{"CVSSScore":"5.7"}},"file_path":"http/cves/2025/CVE-2025-1035.yaml"}
 {"ID":"CVE-2025-1097","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1097.yaml"}
 {"ID":"CVE-2025-1098","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1098.yaml"}
 {"ID":"CVE-2025-11371","Info":{"Name":"Gladinet CentreStack \u0026 TrioFox - Local File Inclusion","Severity":"medium","Description":"In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560\n","Classification":{"CVSSScore":"6.2"}},"file_path":"http/cves/2025/CVE-2025-11371.yaml"}
 {"ID":"CVE-2025-11750","Info":{"Name":"Dify - User Enumeration via \"Account not found\" Message","Severity":"medium","Description":"A user enumeration vulnerability exists in langgenius/dify, where the login API leaks information about whether a user account exists or not. When an invalid/non-existent email is used during login, the API returns a distinct error message such as \"account_not_found\" or \"Account not found.\", allowing attackers to identify valid accounts.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-11750.yaml"}
-{"ID":"CVE-2025-1302","Info":{"Name":"JSONPath Plus \u003c 10.3.0 - Remote Code Execution","Severity":"critical","Description":"Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for [CVE-2024-21534]\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1302.yaml"}
 {"ID":"CVE-2025-1323","Info":{"Name":"WP-Recall – Plugin \u003c= 16.26.10 - Unauthenticated SQL Injection","Severity":"high","Description":"The WP-Recall – Registration, Profile, Commerce \u0026 More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1323.yaml"}
 {"ID":"CVE-2025-1562","Info":{"Name":"Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control","Severity":"critical","Description":"The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1562.yaml"}
 {"ID":"CVE-2025-1595","Info":{"Name":"EasyCVR \u003c=2.1.2 - Information Disclosure","Severity":"medium","Description":"A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1595.yaml"}
@@ -3321,7 +3315,6 @@
 {"ID":"CVE-2025-31324","Info":{"Name":"SAP NetWeaver Visual Composer Metadata Uploader - Deserialization","Severity":"critical","Description":"SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-31324.yaml"}
 {"ID":"CVE-2025-31489","Info":{"Name":"MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads","Severity":"high","Description":"MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on the bucket. Prior knowledge of access-key, and bucket name this user might have access\nto - and an access-key with a WRITE permissions is necessary. However with relevant information in place, uploading random objects to buckets is trivial and easy via curl.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-31489.yaml"}
 {"ID":"CVE-2025-32101","Info":{"Name":"UNA CMS \u003c= 14.0.0-RC4 - PHP Object Injection","Severity":"critical","Description":"The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode() method. When calling this method, user input passed through the \"profile_id\" POST parameter is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to inject arbitrary PHP objects into the application scope, allowing them to perform a variety of attacks, such as writing and executing arbitrary PHP code.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-32101.yaml"}
-{"ID":"CVE-2025-32429","Info":{"Name":"XWiki Platform - SQL Injection","Severity":"critical","Description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-32429.yaml"}
 {"ID":"CVE-2025-32430","Info":{"Name":"XWiki Platform - Cross-Site Scripting","Severity":"medium","Description":"XWiki Platform versions \u003e= 4.2-milestone-3 and \u003c 16.4.8, \u003e= 16.5.0-rc-1 and \u003c 16.10.6, and \u003e= 17.0.0-rc-1 and \u003c 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-32430.yaml"}
 {"ID":"CVE-2025-32432","Info":{"Name":"CraftCMS - Remote Code Execution","Severity":"critical","Description":"Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-32432.yaml"}
 {"ID":"CVE-2025-3248","Info":{"Name":"Langflow AI - Unauthenticated Remote Code Execution","Severity":"critical","Description":"Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-3248.yaml"}
@@ -3390,13 +3383,10 @@
 {"ID":"CVE-2025-49596","Info":{"Name":"MCP Inspector \u003c 0.14.0 UnauthenticatedRemote Code Execution","Severity":"critical","Description":"The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-49596.yaml"}
 {"ID":"CVE-2025-49825","Info":{"Name":"Teleport - Authentication Bypass","Severity":"critical","Description":"Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-49825.yaml"}
 {"ID":"CVE-2025-5086","Info":{"Name":"Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization","Severity":"critical","Description":"A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.\n","Classification":{"CVSSScore":"9"}},"file_path":"http/cves/2025/CVE-2025-5086.yaml"}
-{"ID":"CVE-2025-51482","Info":{"Name":"Letta Letta 0.7.12 - Remote Code Execution","Severity":"high","Description":"Letta 0.7.12 is vulnerable to remote code execution via POST /v1/tools/run in letta.server.rest_api.routers.v1.tools.run_tool_from_source, allowing attackers to execute arbitrary Python and OS commands via crafted tool source code.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-51482.yaml"}
 {"ID":"CVE-2025-51501","Info":{"Name":"Microweber CMS2.0 - Cross-Site Scripting","Severity":"medium","Description":"Reflected Cross-Site Scripting (XSS) in the `id` parameter of the `live_edit.module_settings` API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-51501.yaml"}
 {"ID":"CVE-2025-51502","Info":{"Name":"Microweber CMS 2.0 - Reflected XSS in Admin Page Creation","Severity":"medium","Description":"Reflected Cross-Site Scripting (XSS) exists in Microweber CMS 2.0 through the layout parameter on the /admin/page/create page. It allows arbitrary JavaScript to execute in the context of authenticated admin users.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-51502.yaml"}
 {"ID":"CVE-2025-52207","Info":{"Name":"MikoPBX - Unrestricted File Upload","Severity":"critical","Description":"MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-52207.yaml"}
-{"ID":"CVE-2025-52472","Info":{"Name":"XWiki - HQL Injection","Severity":"high","Description":"XWiki is vulnerable to Hibernate Query Language (HQL) injection in the wiki and space search REST API starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0. The vulnerability allows attackers to inject malicious HQL queries through the orderField parameter, potentially leading to data extraction, authentication bypass, or remote code execution depending on database backend and configuration.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-52472.yaml"}
 {"ID":"CVE-2025-52488","Info":{"Name":"DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure","Severity":"high","Description":"DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-52488.yaml"}
-{"ID":"CVE-2025-52665","Info":{"Name":"UniFi Access - Broken Access Control","Severity":"critical","Description":"UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-52665.yaml"}
 {"ID":"CVE-2025-5287","Info":{"Name":"Likes and Dislikes Plugin \u003c= 1.0.0 - Unauthenticated SQL Injection","Severity":"high","Description":"The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-5287.yaml"}
 {"ID":"CVE-2025-53118","Info":{"Name":"Securden Unified PAM - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-53118.yaml"}
 {"ID":"CVE-2025-53364","Info":{"Name":"Parse Server - GraphQL Schema Information Disclosure","Severity":"medium","Description":"The Parse Server GraphQL API previously allowed public access to the GraphQL schema without requiring a session token or the master key. While schema introspection reveals only metadata and not actual data, this metadata can still expand the potential attack surface.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-53364.yaml"}
@@ -3416,7 +3406,6 @@
 {"ID":"CVE-2025-54782","Info":{"Name":"NestJS DevTools Integration - Remote Code Execution","Severity":"critical","Description":"Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API endpoint that uses an unsafe JavaScript sandbox (safe-eval-like implementation). Due to improper sandboxing and missing cross-origin protections, any malicious website visited by a developer can execute arbitrary code on their local machine. The package adds HTTP endpoints to a locally running NestJS development server. One of these endpoints, /inspector/graph/interact, accepts JSON input containing a code field and executes the provided code in a Node.js vm.runInNewContext sandbox.\n","Classification":{"CVSSScore":"9.4"}},"file_path":"http/cves/2025/CVE-2025-54782.yaml"}
 {"ID":"CVE-2025-55161","Info":{"Name":"Stirling-PDF SSRF via Markdown","Severity":"high","Description":"Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization which can be bypassed and result in SSRF.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-55161.yaml"}
 {"ID":"CVE-2025-55169","Info":{"Name":"WeGIA - Directory Traversal","Severity":"critical","Description":"WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/download_remessa.php endpoint. This vulnerability could allow an attacker to gain unauthorized access to local files in the server and sensitive information stored in config.php. config.php contains information that could allow direct access to the database. This issue has been patched in version 3.4.8.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-55169.yaml"}
-{"ID":"CVE-2025-55190","Info":{"Name":"ArgoCD Project API Token Repository Credentials Exposure","Severity":"critical","Description":"Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials\n(usernames, passwords) through the project details API endpoint, even when the token only has standard\napplication management permissions and no explicit access to secrets. This vulnerability affects versions\nv2.2.0-rc1 and later, including 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12,\nand 3.1.0-rc1 through 3.1.1. Any token with project get permissions is vulnerable, including global permissions.\nNote: This template requires valid ArgoCD credentials (username/password) to test the vulnerability.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-55190.yaml"}
 {"ID":"CVE-2025-5569","Info":{"Name":"IdeaCMS \u003c= 1.7 - SQL Injection","Severity":"critical","Description":"IdeaCMS up to 1.7 is vulnerable to SQL injection via the field parameter in article and product query interfaces. This template uses a time-based payload to safely detect the vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-5569.yaml"}
 {"ID":"CVE-2025-55747","Info":{"Name":"XWiki Platform - Information Disclosure","Severity":"high","Description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-55747.yaml"}
 {"ID":"CVE-2025-55748","Info":{"Name":"XWiki Platform - Path Traversal","Severity":"high","Description":"XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-55748.yaml"}
@@ -3430,7 +3419,6 @@
 {"ID":"CVE-2025-57822","Info":{"Name":"Next.js Middleware - Server-Side Request Forgery","Severity":"medium","Description":"In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next(), an attacker could exploit this behavior to perform Server-Side Request Forgery (SSRF) attacks.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-57822.yaml"}
 {"ID":"CVE-2025-58179","Info":{"Name":"Astro Cloudflare Adapter - Server Side Request Forgery","Severity":"high","Description":"Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2025/CVE-2025-58179.yaml"}
 {"ID":"CVE-2025-58434","Info":{"Name":"Flowise \u003c= 3.0.5 - Account Takeover","Severity":"critical","Description":"Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-58434.yaml"}
-{"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c= 1.5.10.1673 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
 {"ID":"CVE-2025-58751","Info":{"Name":"Vite Dev Server - Path Traversal","Severity":"low","Description":"Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-58751.yaml"}
 {"ID":"CVE-2025-59049","Info":{"Name":"Mockoon \u003c 9.2.0 - Path Traversal","Severity":"high","Description":"Mockoon before 9.2.0 contains a path traversal and local file inclusion caused by unsafe templating of server filenames from user input, letting attackers read arbitrary files on the mock server filesystem, exploit requires crafted request.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-59049.yaml"}
 {"ID":"CVE-2025-59287","Info":{"Name":"Windows Server Update Service - Insecure Deserialization","Severity":"critical","Description":"Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-59287.yaml"}
@@ -3444,8 +3432,6 @@
 {"ID":"CVE-2025-6197","Info":{"Name":"Open Redirect via Organization Switching","Severity":"medium","Description":"An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6197.yaml"}
 {"ID":"CVE-2025-6204","Info":{"Name":"DELMIA Apriso - Command Injection","Severity":"critical","Description":"An Improper Control of Generation of Code (code injection / file upload → RCE) vulnerability affecting DELMIA Apriso (Release 2020 → Release 2025). When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place executable artifacts into web-served locations (via path traversal or insufficient normalization) and achieve remote code execution under the webserver context.\n","Classification":{"CVSSScore":"9.0"}},"file_path":"http/cves/2025/CVE-2025-6204.yaml"}
 {"ID":"CVE-2025-6205","Info":{"Name":"DELMIA Apriso - Broken Access Control","Severity":"high","Description":"DELMIA Apriso Release 2020 through Release 2025 contains a broken access control vulnerability caused by missing authorization, letting attackers gain privileged access to the application, exploit requires no special conditions.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-6205.yaml"}
-{"ID":"CVE-2025-6403","Info":{"Name":"Code-Projects School Fees Payment System 1.0 - SQL Injection","Severity":"critical","Description":"A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6403.yaml"}
-{"ID":"CVE-2025-64095","Info":{"Name":"DNN - Unrestricted Arbitrary File Upload","Severity":"critical","Description":"DNN (formerly DotNetNuke) \\u003C 10.1.1 contains an unrestricted file upload vulnerability caused by the default HTML editor provider allowing unauthenticated file uploads and overwriting existing files, letting unauthenticated attackers deface websites and inject XSS payloads, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-64095.yaml"}
 {"ID":"CVE-2025-6851","Info":{"Name":"WordPress Broken Link Notifier \u003c 1.3.1 - Unauthenticated SSRF","Severity":"high","Description":"The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-6851.yaml"}
 {"ID":"CVE-2025-6934","Info":{"Name":"The Opal Estate Pro – Property Management \u003c= 1.7.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Opal Estate Pro plugin (≤ 1.7.5) is vulnerable to privilege escalation. Due to missing role restrictions in the on_register_user function, users can register with any role. This allows unauthenticated attackers to create administrator accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6934.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
@@ -3454,7 +3440,6 @@
 {"ID":"CVE-2025-8868","Info":{"Name":"Chef Automate \u003c 4.13.295 — SQL Injection","Severity":"critical","Description":"In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8868.yaml"}
 {"ID":"CVE-2025-9196","Info":{"Name":"Trinity Audio \u003c= 5.21.0 - Information Exposure","Severity":"medium","Description":"The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to extract sensitive data including configuration data.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-9196.yaml"}
 {"ID":"CVE-2025-9744","Info":{"Name":"Loan Management System 1.0 - SQL Injection","Severity":"critical","Description":"Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-9744.yaml"}
-{"ID":"CVE-2025-9985","Info":{"Name":"Featured Image from URL (FIFU) \u003c= 5.2.7 - Unauthenticated Information Exposure via Log File","Severity":"medium","Description":"The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9985.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
 {"ID":"CVE-2004-0437","Info":{"Name":"Titan FTP Server 3.01 - DoS via LIST Command Disconnection","Severity":"medium","Description":"Titan FTP Server version 3.01 build 163 (and possibly other older versions) contains a vulnerability where disconnecting during a LIST -L command may crash the daemon. Remote attackers can cause denial of service by initiating a LIST -L command and then abruptly disconnecting, leading to server instability.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0437.yaml"}
 {"ID":"CVE-2004-0656","Info":{"Name":"Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion","Severity":"medium","Description":"Pure-FTPd versions ≤ 1.0.18 are vulnerable to denial of service through connection limit exhaustion. The vulnerability occurs in the accept_client function when the maximum number of connections is exceeded, potentially causing the server to become unresponsive or crash.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0656.yaml"}
@@ -3488,7 +3473,6 @@
 {"ID":"CVE-2019-5544","Info":{"Name":"VMware ESXi SLP - Heap Overflow DoS","Severity":"critical","Description":"OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2019/CVE-2019-5544.yaml"}
 {"ID":"CVE-2020-0796","Info":{"Name":"Microsoft SMBv3 - Remote Code Execution","Severity":"critical","Description":"A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.\n","Classification":{"CVSSScore":"10"}},"file_path":"network/cves/2020/CVE-2020-0796.yaml"}
 {"ID":"CVE-2020-11981","Info":{"Name":"Apache Airflow \u003c=1.10.10 - Command Injection","Severity":"critical","Description":"An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-11981.yaml"}
-{"ID":"CVE-2020-14644","Info":{"Name":"Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)","Severity":"critical","Description":"Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 contain a remote code execution caused by unauthenticated network access via IIOP and T3, letting attackers take over the server, exploit requires network access.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-14644.yaml"}
 {"ID":"CVE-2020-1938","Info":{"Name":"Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability","Severity":"critical","Description":"When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2020/CVE-2020-1938.yaml"}
 {"ID":"CVE-2020-35359","Info":{"Name":"Pure-FTPd 1.0.48 - Denial of Service","Severity":"high","Description":"Pure-FTPd 1.0.48 is vulnerable to Denial of Service via exhaustion of connections due to lack of proper connection limits.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2020/CVE-2020-35359.yaml"}
 {"ID":"CVE-2020-9274","Info":{"Name":"Pure-FTPd ≤ 1.0.49 - DoS via Uninitialized Pointer","Severity":"high","Description":"Pure-FTPd versions ≤ 1.0.49 (\u003e= ~0.96) contain a vulnerability in the init_aliases() function within diraliases.c when processing aliases. This leads to access of an uninitialized pointer, which can cause a denial of service (DoS) condition.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2020/CVE-2020-9274.yaml"}
@@ -3516,7 +3500,6 @@
 {"ID":"CVE-2012-2122","Info":{"Name":"MySQL - Authentication Bypass","Severity":"medium","Description":"sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.\n","Classification":{"CVSSScore":"5.1"}},"file_path":"javascript/cves/2012/CVE-2012-2122.yaml"}
 {"ID":"CVE-2016-8706","Info":{"Name":"Memcached Server SASL Authentication - Remote Code Execution","Severity":"high","Description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"javascript/cves/2016/CVE-2016-8706.yaml"}
 {"ID":"CVE-2018-0171","Info":{"Name":"Cisco Smart Install - Configuration Download","Severity":"critical","Description":"A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"javascript/cves/2018/CVE-2018-0171.yaml"}
-{"ID":"CVE-2019-6443","Info":{"Name":"NTPsec \u003e 1.1.3 - 'ctl_getitem' Out-of-Bounds Read","Severity":"critical","Description":"NTPsec before 1.1.3 contains a stack-based buffer over-read caused by a bug in ctl_getitem in read_sysvars in ntp_control.c in ntpd, letting local or remote attackers read sensitive memory, exploit requires sending crafted control requests.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"javascript/cves/2019/CVE-2019-6443.yaml"}
 {"ID":"CVE-2019-9193","Info":{"Name":"PostgreSQL 9.3-12.3 Authenticated Remote Code Execution","Severity":"high","Description":"In PostgreSQL 9.3 through 11.2, the \"COPY TO/FROM PROGRAM\" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"javascript/cves/2019/CVE-2019-9193.yaml"}
 {"ID":"CVE-2020-2883","Info":{"Name":"Oracle WebLogic Server - Remote Code Execution","Severity":"critical","Description":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"javascript/cves/2020/CVE-2020-2883.yaml"}
 {"ID":"CVE-2020-4429","Info":{"Name":"IBM Data Risk Manager - Hardcoded Credentials","Severity":"critical","Description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID- 180534.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"javascript/cves/2020/CVE-2020-4429.yaml"}
@@ -1 +1 @@
-04825279d81a90757969be8bbeccd5b4
+6422b30708fe76b024738e852eb7431f
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2018-19518
    cwe-id: CWE-88
    epss-score: 0.93956
-    epss-percentile: 0.99875
+    epss-percentile: 0.99877
  metadata:
    max-request: 1
    confidence: tenative
@@ -49,4 +49,4 @@ http:
        part: interactsh_request
        words:
          - "User-Agent: curl"
-# digest: 4a0a00473045022003d7f90673973a982e5558470f07a7f4ad8f8cc685710dc21348cb4bc670b4d9022100b5549b5ebdfda9e3d3841380d1a9818136dc794c3e03b05c487cb841c88f78b5:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022030ef7844c72c1df2eb23f6b98cb54cefbd5a59aa5d36519ebfe6aade99aeeb5e02203758d3a5fa252ad6a593dd5ff012ab0d3a5077b8794d9cb3e8f63d2bdf648e2d:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2021-45046
    cwe-id: CWE-502
    epss-score: 0.9434
-    epss-percentile: 0.99949
+    epss-percentile: 0.99951
  metadata:
    max-request: 1
    confidence: tenative
@@ -62,4 +62,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4b0a004830460221009196c1d6ef2d3d8e4b25ff18bfa83c04a308b9765b740c9162c14bbc6731d5dd022100d96615e2b640d1a1570bb2c83be10885b97f859a08cdf30f244d62072624fd42:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e7cac3137df9d2ff796133b37fd4454476e42a2a20c4f7e3aa4cb9c5ee92e7fc02206e726a24ee1e449291203bdffd6e84de4269148f4fa0a481b40683c3b5a13fba:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2022-22965
    cwe-id: CWE-94
    epss-score: 0.94441
-    epss-percentile: 0.99989
+    epss-percentile: 0.9999
    cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -55,4 +55,4 @@ http:
        words:
          - "User-Agent: Java"
        case-insensitive: true
-# digest: 4a0a00473045022100cbb1a7ae18dc796cbd8d01a2416573459737a0f5c5bef589a865dba4e022096602206ff2e01b0d20ab6cefb4ab847190e4ea41429ad947a64493881626897d7b9006:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022057c004296c7cc298bfc13db724a4f01b8908fd7154a6a1724d39ff1fe49f3733022100e892c847584be7db4f81a395eeb10cd4c84c6b07c439e38ba57c7c02cc83ac15:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2022-34265
    cwe-id: CWE-89
    epss-score: 0.92734
-    epss-percentile: 0.99742
+    epss-percentile: 0.99748
  tags: sqli,dast,vulhub,cve,cve2022,django,vuln

 variables:
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 490a004630440220313f97ef1ed9ca9259404dcc6b2a3d20024e5d93c5e240fc3691a60445b3521b02202dc02c16af44d82d9a1c893c9c85690e677e801a7bd2759dad7b66a31591b236:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022068c2cfd3684b066c04542155588692e18073d4d1d297921f24da43ea4ec25050022100f1f9f928ec47b7041f25d5a3223bdb590a39373bb9f9730dc1ed274d0ffba0f4:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2022-42889
    cwe-id: CWE-94
    epss-score: 0.94161
-    epss-percentile: 0.99907
+    epss-percentile: 0.9991
  metadata:
    max-request: 1
    confidence: tenative
@@ -68,4 +68,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4a0a00473045022007239687d8e5b0b562ae071607fcc17bf9e0a75003422cc11d019e4c973a71ed022100e39d76c5c714ec810722b624baa6687e4178262aba54c4973139c572bed95be5:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203c97c7adfcde085577438811e428c7c4b1e25dccf7be131cf568b351b695ab6d0220546426ab49191229ddc97bcddfa899a8a3f7f8c8e13818804297bdfe819272bf:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-score: 7.3
    cve-id: CVE-2024-2961
    cwe-id: CWE-787
-    epss-score: 0.9261
-    epss-percentile: 0.9973
+    epss-score: 0.92472
+    epss-percentile: 0.99723
  tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln

 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
      - type: regex
        regex:
          - "root:x:0:0"
-# digest: 4b0a00483046022100aa92d96d35809e43ff9944ae82a2d175820a83937e0f8e01f7e7f4bcf976deb9022100db0273ebd16109f8dcc5b9bc3f0cba9388e844a71558447228205f8f635d7b06:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b9f31b9c0e85408532325528b029a5f2b87befb42a74df2a7710876ae770b7be02203275cc64a0a110cad4f2f1e9ce6ffe92777fca4f3471bc64fec3739ee2f9ce7b:922c64590222798bb761d5b6d8e72950
@@ -22,4 +22,4 @@ file:
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
-# digest: 490a00463044022001a28cfdfeefcf2533646ec4e84101d825e19d420db7d5d7909b43b437bc547e022060002c6ac0078d9aeed09ea81c2e819a74549e623eec8134a59bfecf0e6055dd:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204c06946211ed44cd2ce7e1c370fa59ed67d4bde27b30a02c486c365d36e6f3eb022100826554217ed0f582d155d6c899c76d7891b6afd3fba4cb96f329d682c456be79:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ file:
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
-# digest: 4b0a00483046022100ba8e6c12e8ec5e4ae3e0801b7390b711631dfb574d037999d5c90c8eced666fc022100e66a617a1ec1e10cec9119814077b2b790c3dba13e2a9264c4cf9500d2db53f8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022057f76fbd45cd3bad910a0acf5fd2619dad772286a326260855950a1951fbd33c022100a7ae8b5fd07e9f6ab9e8091c711059ce2d1cd1c82aeadbc0bf88e088a36ae7b4:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2018-25031
    cwe-id: CWE-20
-    epss-score: 0.82992
-    epss-percentile: 0.99204
+    epss-score: 0.83032
+    epss-percentile: 0.99217
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -54,4 +54,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4b0a0048304602210092addecbe0999e8ac7566a8b688cfbd6a662f6480b8b8aab4c4dc0b19656a67e022100d627e696252fbcffe4f777cb7bcb58f4a7b501b34222468a4025204389672d21:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022049066491c47881f10f9bb7f5603f800d8e7b230be3aee3a9168ec7512d85681d022100d8ab0c597c50cccaecd7f55fd01d2c660d24301609af90e79e61deae3c0da80d:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2022-29455
    cwe-id: CWE-79
-    epss-score: 0.69544
-    epss-percentile: 0.98579
+    epss-score: 0.73995
+    epss-percentile: 0.98772
    cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -52,4 +52,4 @@ headless:
        words:
          - "elementor"
        case-insensitive: true
-# digest: 4a0a00473045022034041612068bb6cc23a19b360e6acbd244a6a4058cf1d36cd8222f5a2f1b503f02210080b9f278c949817375c1590c7732a2e556d93e25ea1090cd9a519b1c90a90a62:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fa5e2db4c3f3952f85361fc6d49939bf2273c68edc34ea09cf55ad1210c6846d022100d5a8e4a5ebe1dd7eb22f3b9fb90e9d5628bb7c880171fb1af5868fbf2ea2d8d2:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cve-id: CVE-2024-29882
    cwe-id: CWE-79
    epss-score: 0.02716
-    epss-percentile: 0.85401
+    epss-percentile: 0.85451
  metadata:
    verified: true
    max-request: 1
@@ -46,4 +46,4 @@ headless:
          - "ConnectSRS</a>"
        condition: or
        case-insensitive: true
-# digest: 490a004630440220558a089dc181f6ec5760dd0ce307114bfa92ee5a5c1016d5bee66631a891b03402203e32c3102bf24d9b61500ae2f19afe47da572f008de06db6a8a6a53e462a9703:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022058b32c9ae34061ebab359182e96023d86682145cb57428a1ace0ae53256305e5022062ba25d7ea9c8976f88d6565877f824c2b05145f2132dbd9c2a18e2cdf4c9912:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
    cvss-score: 7.2
    cve-id: CVE-2024-38526
-    epss-score: 0.79167
-    epss-percentile: 0.99018
+    epss-score: 0.83976
+    epss-percentile: 0.99268
  tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
  - steps:
@@ -60,4 +60,4 @@ headless:
          - "union.macoms.la"
          - "newcrbpc.com"
        part: urls
-# digest: 4a0a00473045022100b931374196adc17b46064f13d99af21f0b4d196d6d98ef8a0f6399a13814b18a02200e531edd5973acf6e0487bf3875e44a0680ca471226aed577a872ea97374088f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f5c7a7c44d33b8a4e7b118671060be89e0c20d2dcd1b339ad5d3576d02372314022100efbfd77fe347b06c80cb98c885ce2f4a24d23635a1fa53a92edfb98e22510a1d:922c64590222798bb761d5b6d8e72950
@@ -11,8 +11,8 @@ info:
    - https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
    - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
  classification:
-    epss-score: 0.03198
-    epss-percentile: 0.86487
+    epss-score: 0.01886
+    epss-percentile: 0.82647
  metadata:
    verified: true
    max-request: 1
@@ -42,4 +42,4 @@ headless:
        words:
          - "{{random_int}}"
        case-insensitive: true
-# digest: 4a0a004730450220620f3dc941df3e688c304ad234066a1d8a87fc2b1fa1a04ef9850f24e613510e022100b00c68736b6f7bac99a0677c564247d90e688024cc08909d957a4fc6c55309c1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f709bfed9bd55e86017df25649fc03ea0e440908e3a489746511268cec277065022100ed5ea9184451ca5131e60f15e82d665f0a41a820d290bd45340edc504ced9a49:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2025-25062
    cwe-id: CWE-79
    epss-score: 0.34064
-    epss-percentile: 0.96767
+    epss-percentile: 0.96792
    cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
  metadata:
    max-request: 7
@@ -186,4 +186,4 @@ headless:
        dsl:
          - reflected_text_xss_type
          - reflected_text_xss_message
-# digest: 4a0a00473045022100a17efb62fee55c45342f1aca08abe8984f346f12eae5f7bf59b14f8a31240df0022006f396de2e67edbc06c2fcbbd24ba3de7ad0df3e39ea1e26656466e8717c348d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009674fa793d8d3c3a4c49e1f9e72d7264810dd9a568ecda882629d1c7d96a8a9c0221008eb2d65b54ef765296f0764dfc3b058cc9ba77f656fcb0e169201396264b04fe:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    cvss-score: 9.1
    cve-id: CVE-2025-29927
    cwe-id: CWE-285
-    epss-score: 0.9253
-    epss-percentile: 0.99722
+    epss-score: 0.91603
+    epss-percentile: 0.99665
  metadata:
    vendor: vercel
    product: Next.js
@@ -55,4 +55,4 @@ headless:
          - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
          - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
        condition: or
-# digest: 4a0a00473045022100af9785bc77b70ef5e8fe304f65b6827a469b6897d09860a8cbafe4ef5b4098ab02204b88dc3575deadacfc2e3f730e88fc5cd6f6286be4be01bdaedeafafa4d21b23:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e5205918c514ac5a389a09a992b1ad4e6ece6e5b0e8e3a5f2486dcd7f707636f0220681120db58d849b9dcea807bff26efda556412671d0e0d9f4d1ca3420a8210da:922c64590222798bb761d5b6d8e72950
@@ -14,8 +14,8 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2025-8191
    cwe-id: CWE-79
-    epss-score: 0.0123
-    epss-percentile: 0.78509
+    epss-score: 0.01591
+    epss-percentile: 0.81124
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -65,4 +65,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a00473045022100bf467b92bb54a513c07a7dd2aa60c60f41c1addbed2fc05dca493900e01bcaed02202a8a76331e4af40e5f08916dbd0bb736cade93edc26639886155adeb880bf8b9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100993393140392424e91b9fb45d55a520fcb18da705fb6712d1972c71a3f4d00b6022023346bb49086e3422fc1c87c097d5aa0350f0b2132503ee1c2f9d103e2f8eb9d:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cve-id: CVE-2000-0114
-    epss-score: 0.05458
-    epss-percentile: 0.8973
+    epss-score: 0.04728
+    epss-percentile: 0.88952
    cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -59,4 +59,4 @@ http:
        group: 1
        regex:
          - 'version:([0-9.]+)'
-# digest: 490a0046304402205332a03942b696ffdaf4514030f433335731ac7445fcfa0a9131c17cb83b687202207e6fc2c1d794e984243e5f602ea871821d372de93b4374a49b3b3a80ae77428b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202fca682465a978b196e1b805f2a1fa804bc63acf07d27f253ab51b93453c04b5022068e855f38262c3f4bd824ff09d01b9f66d7fe1f861128402d44c854cb5de21aa:922c64590222798bb761d5b6d8e72950
@@ -1,46 +1,29 @@
 id: CVE-2000-0760

 info:
-  name: Jakarta Tomcat 3.1 and 3.0 - Information Disclosure
-  author: Thabisocn,0x_Akoko
-  severity: medium
+  name: Jakarta Tomcat 3.1 and 3.0 - Exposure
+  author: Thabisocn
+  severity: low
  description: |
-    Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access.
-  impact: |
-    Attackers can retrieve sensitive system information, potentially aiding further attacks or information disclosure.
-  remediation: |
-    Update to the latest version of Jakarta Tomcat or apply security patches that fix the Snoop servlet issue.
+    The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
  reference:
-    - https://www.exploit-db.com/exploits/20132
+    - https://vulners.com/nessus/TOMCAT_SNOOP.NASL
    - https://nvd.nist.gov/vuln/detail/CVE-2000-0760
  classification:
-    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N
-    cvss-score: 6.4
-    cve-id: CVE-2000-0760
-    epss-score: 0.65623
-    epss-percentile: 0.98413
-    cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
+    epss-score: 0.68493
+    epss-percentile: 0.98547
  metadata:
-    verified: true
    max-request: 1
+    verified: true
+    google-query: site:*/examples/jsp/snp/snoop.jsp
    vendor: apache
    product: tomcat
-    shodan-query:
-      - cpe:"cpe:2.3:a:apache:tomcat"
-      - http.component:"apache tomcat"
-      - product:"tomcat"
-    fofa-query:
-      - body="apache tomcat"
-      - body="jk status manager"
-    google-query:
-      - site:*/examples/jsp/snp/snoop.jsp
-      - intitle:"apache tomcat"
-  tags: cve,cve2000,jakarta,tomcat,exposure
+  tags: cve,cve2000,jakarta,tomcat,exposure,info-leak,vuln

 http:
  - method: GET
    path:
-      - "{{BaseURL}}/examples/jsp/snp/anything.snp"
+      - "{{BaseURL}}/examples/jsp/snp/snoop.jsp"

    matchers-condition: and
    matchers:
@@ -55,4 +38,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502205ce0b599e4c517935b356826b8b065ac225bdde1d74ff84196e6f529739a4292022100aa157c5a6531f56de77d8a205e3fce64dd0c3e50bc42f6b93daee89acab80545:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210090b625a54f81b8544c2c5d860c296bb8011f223b667acd53d25b8a12029f975c0221008f4c5f4d505de5b93068341faa907c76ca5b04d773a096b3eb7e1666715b57d9:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2001-0537
    cwe-id: CWE-287
    epss-score: 0.93696
-    epss-percentile: 0.99833
+    epss-percentile: 0.99837
    cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -53,4 +53,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502204cb765e57d2253f0d95e309e3caf15a5463c5124f5c2ab2d4aacc694575b8ca6022100e20e658418ff17b3f354b65fc2a03db3f81d7a3cd9be8f582cc7e896e5853e31:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202056e7ed0c90326fd4acd7e26e247262ad16182178fd604ef84b41bb5362173b0220082886349ab1a891a4f7da42b9b9c73c6110eef00c8f8302d881ccc094408b42:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2002-1131
    cwe-id: CWE-80
    epss-score: 0.03877
-    epss-percentile: 0.87736
+    epss-percentile: 0.87794
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 5
@@ -60,4 +60,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450221009dafa7d7a8dffea049773b86bb1bbab11544ca0004bcb9b849683c76c8e2485a02200b0f46c61ce9c0cb51b9c95b6df330fc5ce87295ad1df784bc9f4235474320ac:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200ec075d4e13546a7918ffb7a384fa56cc32a0496e73f13b62de4fe96f9f96561022100fd27c71cf50b00bdf1006e02af98e5896e25d99b9bfb50eee568aa4ba841cf0a:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2004-0519
    cwe-id: NVD-CWE-Other
-    epss-score: 0.00124
-    epss-percentile: 0.32339
+    epss-score: 0.00186
+    epss-percentile: 0.40815
    cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220482f005db704fd496f0e04fdc5d6a657b64028a787c62478aab7bd17dda4d0ec022100a9f5e846faf7569e3b54f6039cf126a36df1bb35625535b66ec3afb5617340c5:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206b40a89a0711dc8b38f98a5e5f18bce826cbf791c321c80305b55f60d8a268e5022078640705adc1ea1007c4a9d4456df5dd36c4ca1e51ef2feb1154585a06af8eed:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2004-1965
    cwe-id: NVD-CWE-Other
    epss-score: 0.00265
-    epss-percentile: 0.49806
+    epss-percentile: 0.50028
    cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a0046304402206c46055e57092ee031148672031d0e22b49272e5a0857ad53ad2e466153ad9950220799ce49158105f62ff4e3014ebde77ffd93d2e6f867c026fc1374b547807da6a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201ecc3343e9f8e6017e61c59f51549aa7e66e1f5e3925a10ccdb3b931991aa27a022100c04481c0de9a8af52ccf1c45138b79d5918ff39c402446209b1d974ce7ccd01d:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2005-2428
    cwe-id: CWE-200
-    epss-score: 0.06321
-    epss-percentile: 0.90538
+    epss-score: 0.07654
+    epss-percentile: 0.91514
    cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100e27b5564c1ce0432367fef28996116fdfed26910e63a54119ca94bc05da9d5820221008de003eec4ec0a8dd72263eaf0baba52b74b655528d8970c724fad9ac84af23b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008e25827d7c9c6c5b6145cc2277b9dba631c7cf914df78657892bea60cf60c18002207ed8133adc274bb95eedabf6ce29ba1c57b52ae8a2822ad5f8245b7f1b7e02ee:922c64590222798bb761d5b6d8e72950
@@ -13,7 +13,7 @@ info:
    cvss-score: 5.4
    cve-id: CVE-2005-3128
    epss-score: 0.01733
-    epss-percentile: 0.81832
+    epss-percentile: 0.81904
    cwe-id: CWE-80
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        words:
          - "text/html"
-# digest: 4a0a0047304502205afe95746bc2a44a6192867c14a26fa883d19454a3323a564477a56ecd6e309f022100c6dad1a5f54df0f542edae68dd1a3d64a4075360fb0ba50c49078aa5a931ae66:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203953ffd9f7b8481bbdbe517f10ee2f9a004f21ff5935a20615529e637bc42e0a02207e18eb70c967d0aab3e7a04606b601d3a87b140680920fb8aa98748596726543:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2005-3344
    cwe-id: NVD-CWE-Other
    epss-score: 0.1015
-    epss-percentile: 0.92777
+    epss-percentile: 0.92813
    cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022069103c3ec6f0b5a4782b752580b541c494e6b687ccd290707d59cf3fd8506466022100953d7f3ec676dfcbb248c252e23aeb7ba6a4e0cee7f7b364ecde1719f69e7d51:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008132548ffefed278b11471d1768cee4a3162213cae0f0bdea2dcb4812c1a438f022100edfc43aa5292ac0c752be143a4d552705faac9db2c756427d41e661ee75ae339:922c64590222798bb761d5b6d8e72950
@@ -23,7 +23,7 @@ info:
    cve-id: CVE-2005-3634
    cwe-id: NVD-CWE-Other
    epss-score: 0.01653
-    epss-percentile: 0.81406
+    epss-percentile: 0.8149
    cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -45,4 +45,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a0046304402207726228cd9e49dd00ff836be3fa993d42520855df4c6f681ea14de91dae929fd02207519f13c615ae1b06c303012ad6a9870ac907371e261fd0c50d088a9830f76f2:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205853c15c368fef4431531c1a0fa120d32ebca7591c1fb05c1f1261bcc4c3f47b022028de85169533d4e8e160d2c1759ba7a709f38d016f26d99b7871d77e1a000d6b:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-4385
    cwe-id: NVD-CWE-Other
    epss-score: 0.00373
-    epss-percentile: 0.58266
+    epss-percentile: 0.58461
    cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100f86f9b46831b1c7f323168fda14e3907af8e723ea601697be19dd06af30a740902200104575dbb4b8138f97e00a0228ffd9a3b66efaccdba58c87a89256d55bafcd9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220047ee98cf5682815a95ccdc6ca1cbd530b3f7acaea57e035ef4df386a15e15f002210089ca7c90b86b1a5e4c15f7b5c5a83fdd36d95f63130e4a14ec5f16c2bfd8dc3c:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2006-1681
    cwe-id: NVD-CWE-Other
    epss-score: 0.00299
-    epss-percentile: 0.52759
+    epss-percentile: 0.52991
    cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220062e8d719f08e84a250949357d925976fe5b07e77eacf1573945d251933effe90221008b1630fc674b9060b4fcf210f55349c253d1df35de9a83a31c3247257bcf21ca:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100aa2eb4dccadd12dbbcf1f49aaf27cdbc00ce25f1f5e553c5b5808ab1eacf4c9602205a861ccf6f90eb391d40b1753a678e697132df0230ebad7f1aca9ef876a19366:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2006-2842
    cwe-id: CWE-22
    epss-score: 0.0094
-    epss-percentile: 0.7546
+    epss-percentile: 0.75614
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100c2256d78915d25d4df1e0d25e028d15520fe12f70247fa5b1d4e9042b77f43c0022100a96fd7c141b6a40abaeb7a77962424e653b9c4c1e3760d3adabed6209e3b04af:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dd7526104c04faf97c24f638f21770f4bf51d4d462361bc2665a39066f9c2bf8022100b3b16c2d151b82cd20ebdc81a78f964ec2b9830fc8fab190fe7fe430ef90fdb3:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2007-0885
    cwe-id: NVD-CWE-Other
    epss-score: 0.02133
-    epss-percentile: 0.83599
+    epss-percentile: 0.83656
    cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100eda14ccf8eeaaaf8029c97bf324dca7df1aa289f71825ee667a5e4508f98e3af0220546cbe42bab6ab502d562e0fb84906334df35aca519cfb9e0da612e58f684709:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fae7a94b89a7e821c79ecb6d79ab885cff2b777c1c2c11d3e720c474588a92a302202d28cd1ef38a2ed3ed02d07498895c56faac2b7cada2d99d18510530d7969d3d:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cvss-score: 7.2
    cwe-id: CWE-79
    epss-score: 0.82646
-    epss-percentile: 0.99186
+    epss-percentile: 0.99195
  metadata:
    max-request: 1
    verified: true
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100d49e6b4103625a0f23f4aa0615bc422dc87fdcb9f3b6c09b6c2b38d7a00b3461022100bc4a6c1947a3935fc76fd745e7d1ed1f1cc1a4f27c7dc12159b9dcc336a65a7e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203d4c0657c5583890081b975880877c383d4cf1add5d906e696890afdc77dac5a022100ea30b8eece046b5fc05cbaa39a761b71c024d0015ea7719193bcdd9b3a06e014:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-3010
    cwe-id: CWE-20
    epss-score: 0.93855
-    epss-percentile: 0.99859
+    epss-percentile: 0.99861
    cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402201e1b3c65272c35ee8bef72b7534cf3cceadbbfdd68b6b173ffeff916c10a5ac7022061b637a3d59a8dfabbae9daa892b6dd7c0542b778b1a11f69bd720f23d2badea:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c5d59be90da48b16bf7e8417620db274db67a0998d207acf6ef9480db2873d39022100a35332f167da84370bd98b3e357b7daa0be4020b701a8e7064b630af226f2c46:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2007-4504
    cwe-id: CWE-22
-    epss-score: 0.0006
-    epss-percentile: 0.18655
+    epss-score: 0.00063
+    epss-percentile: 0.19809
    cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100a632fbd89ee7d7168b84c7a8351cb260c3be99daa440dca4d93607d2e2e92682022010d8370dadd0bedd78f49f13c84874587afe8e1191cecfe5d3952b173de2df09:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022042f4734a0a69ab33f89021713db8649dd66d898bd9c9d00b91df666d557ac92e022060f39e0582dde17e07bdbaedfabf7bb739f0e88b148bc70dd6a9bae080d7c8c9:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-4556
    cwe-id: NVD-CWE-Other
    epss-score: 0.02359
-    epss-percentile: 0.84375
+    epss-percentile: 0.84428
    cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220681e3e030dae241ae87fc985bcbbc0bda37e25945ee039dce2932c0279e9ae6902210093d3e554bbe06521fabf8cc5cefb9e8bb6644fc79769a5cb835fad89a8348e15:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207774974264fdc723236eeae14b4c4d59874dc28b20bf86c70f901074d7a0167202201f15e0424d1b2d6a0c7898531f57ee72a67ae2ab3924b6d562218457e870d292:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2007-5728
    cwe-id: CWE-79
-    epss-score: 0.00488
-    epss-percentile: 0.64598
+    epss-score: 0.00301
+    epss-percentile: 0.53137
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -57,4 +57,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100be9d734739e44ad53d0b091b97e512e640fda1e67c535820f98f8723a21e6f6302206bd8b0cdd90a0807cd8e869f2192e57a6d6a70d126f59ca474a1c0e7b0c00eed:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b66bb8e7a427fb444db62388cbf46ab38e4aaf31c2cb48ecad7d1d0201f2b0e3022100c1ce6949f7522d84a11e80dc34d70905d65b71ddb116e3a8b21a47e5b574452d:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1059
    cwe-id: CWE-94
    epss-score: 0.00265
-    epss-percentile: 0.49829
+    epss-percentile: 0.50051
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100d0caca73172cb00699df02ab0255d6bb20bb48cf44e51006f86ff2440523f783022100dbfe50ad7ad767fcf4ec516ba133fbe911f95a4e6f568389c3ed2499a3734ea7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022015c81372859cba541a44cc461548bdcae94ed01c557f1a9723f80c6578507afa0221009e0906244ea232a24e0f5916a7fd4041d6a8d3f47b52bc2d4b7a595803f20117:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1061
    cwe-id: CWE-79
    epss-score: 0.00155
-    epss-percentile: 0.36788
+    epss-percentile: 0.37011
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502202d74bbb178b65b8d4d1c670fdb6ccb0368f61303f47995ecc3317e2cad75316b022100eb29d9070b1a7e33dd63756ff0a3fc4f88d7cd434da57289b9b9860b3af1a748:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c8466413e954000e3240bf2aac2f3e5f5e9e4223e4f5ff2f57599820c64f8e92022100c0782e3a6c04be31c1271a63fca5921eb33227164163ad36bec349467bea9d50:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1547
    cwe-id: CWE-601
    epss-score: 0.65006
-    epss-percentile: 0.98381
+    epss-percentile: 0.98399
    cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -51,4 +51,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502205f796732a5355990b3abba6f7d86afd5da7b38c87e122344e56f3df1ea81d3ff022100d06446bd84b9a9875c9a043e5b9bdb7d7f18e936eb082127fe58209450dd621f:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201760e780673fefdd767861d73c454f1af870896a0b75faedced70356472d03d602205f243887cc480e3f4614a2b749032f77790dba17e08d8436600e32b5ef38344c:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2008-2398
    cwe-id: CWE-79
-    epss-score: 0.00437
-    epss-percentile: 0.62251
+    epss-score: 0.00845
+    epss-percentile: 0.74215
    cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100dbb4edac2211a6f44c91611514b36fd0c8a5cd62275248b63ac032f941586a0e022100ecad4b52469a21900bb07fd05e241016c9a309b50000c842e50380ad4bebc920:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201bcf2174eea7e5f908fef9ba9677268fd73e7ac644081ca04f47b0b1c30bb4b3022068d5548561d4e550843a561703b7de4275f71435256995ed5cbd77856485d5cd:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-2650
    cwe-id: CWE-22
    epss-score: 0.01643
-    epss-percentile: 0.81341
+    epss-percentile: 0.81427
    cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100cec0e71f86555acb50c217e41def09899827c0f6864abac2fcfb1dcd6f1c84e9022100f91a1a004065ef2b4309bc9fd8ae4b6ceae074c508e1f352ea0de141deab0c25:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009792762f9c7474abdd6550c6f1eb7ad7fb29420a538a514b12b7974d8f03d6a1022100b3a78bb48a29bd8e1c9a0cd3f54d5b64ebc03628686bb9bf3a37f47316ca2c46:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 9
    cve-id: CVE-2008-4668
    cwe-id: CWE-22
-    epss-score: 0.00268
-    epss-percentile: 0.50093
+    epss-score: 0.00276
+    epss-percentile: 0.509
    cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100eadba1af98a8c502efd2b328b97649670174156ebdb235ea47da9439f75e2ca2022100e2ab130c92dd67485449eabf269398cd9e8560c4fdd31cbf252aebc8fdbeef63:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022056e0aa4f873190879b13f57a848cea1ede8d17819637194871c8defb562424ca022100c975fda228e77121f793b44c02c2acf231b5ddb85dd9d4aa124955b17630c2dd:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2008-4764
    cwe-id: CWE-22
    epss-score: 0.01921
-    epss-percentile: 0.82759
+    epss-percentile: 0.82818
    cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022021a79bd295e6fd6b0fede95d696b48cbcce7a2e5e9b02d688c7d4d69a4147d72022025de58100c84a3578d39444afcc4f40a5b1a5a2c5614c723be801cc6278ee2c4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fe8a82a0179bc94fb2b24c777a0e88fa41ca49f624ffbe0c152f22e3e5df0ff802204af00129515ae6fb77cd4cd0681440c43d99cb0c99c905cbb6a39efacc02783f:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-5587
    cwe-id: CWE-22
    epss-score: 0.01986
-    epss-percentile: 0.83
+    epss-percentile: 0.83057
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -49,4 +49,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100f9a7dc14da2d0497c06b87f8d20553cdbb032bd812ef52cfa4bb6266fad045c70220054cdfd3aced4268ac1b90ad4f6c4b6909e1138a5e91e35e702d5a4cb31f0005:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220688191a0dfbb73fd5ff3664da3e42746eb7f73bbb2694b5f7dba45f6642d0e300220540c2ff417043a8a952c33110f39270fb0a34ae8471c3ecc0f27987aacc170b4:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6080
    cwe-id: CWE-22
    epss-score: 0.063
-    epss-percentile: 0.90524
+    epss-percentile: 0.90565
    cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402205ffc8f2f0d134563344a20994f84be19bc8d3ab9f2e187602e54cb420ebe6044022031c2b187dfd17883a1c9bc6fad0c4b74b632d063a2ab4fc9d40d08947b41d3b0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203b3d284648fb5357474b584556b1655f0b8280877e8801cea3d83b3048de3d6e022100f23ac52db67e46de412a475a5c995eb424d9b20d94a064206fc9d945a3fc69e2:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6172
    cwe-id: CWE-22
    epss-score: 0.07294
-    epss-percentile: 0.91242
+    epss-percentile: 0.91276
    cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100d0f3de31f714d4fae5dc9bc4a27f0859c1e87e2ed1907a88e450963d713d29e10221009b22df03a24b19daf97a19f3e0de2817402656fbe1f99887001fb9eddd55db98:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207cf27b87a6efcfe51776b791103bb5a8c11ebf96aa842af27f8f7bf547c2e5cf0221009ea124e1093d74e868ed068312aa4dd80bb86306a22e34d40df9c4f2ed1d55d1:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2008-6222
    cwe-id: CWE-22
-    epss-score: 0.01649
-    epss-percentile: 0.81383
+    epss-score: 0.01954
+    epss-percentile: 0.82939
    cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502200a229a693b9dbe066bb2ed32a1ab6b9e57f73a79dd9bc75ea031ebdcff68fd6d02210092e285fb42e8ad23105647ae3f4fe013a42107a1c8b8e25e8f34c91caa568c3e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220122c23321474ca49173f7ba6116a2c0f170db4a5c081e46ded5def3176f04e51022100b9bdf76f348cc321e35127098235c5ba6b7c06a9c9fc10c82648c1063cf289ec:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2008-6465
    cwe-id: CWE-79
-    epss-score: 0.01157
-    epss-percentile: 0.77881
+    epss-score: 0.00946
+    epss-percentile: 0.75707
    cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
  metadata:
    verified: true
@@ -63,4 +63,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ed4c2fcbcd3d631b0d91ef04752e2d73305a6542080b775f8476468db672b7e80221009c80fa6bb7f1126bac87d3c52e1e2d5c5cec31eae8092d102bde74ca946c77be:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d7ae676d9861f7c31b29b81af064c01ef5fa56630b3273e56a56136d533469ce022052378a27aca42a9fdfceab86e1455182b7c8a750febf7cb5ac9c1a48b6b485bf:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-6668
    cwe-id: CWE-22
    epss-score: 0.01077
-    epss-percentile: 0.77107
+    epss-percentile: 0.77225
    cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -45,4 +45,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100fad404533668ec9446f59658b59a65e3a0e382786d50ebc1ad33086351f458610220079f45cba82719e58f0ffe6a60df506a2231b25d10c88cd795bfb3b8ac2e8ebf:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e497d0a5b7e2a2e7b094b614ee4b5293e59ac33a19238dba05f489d4b48a7d87022100861eac5a4dd4447fcb54ec982c332488f8197a6bce8529197cacff891b3b91ad:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-6982
    cwe-id: CWE-79
    epss-score: 0.08587
-    epss-percentile: 0.92017
+    epss-percentile: 0.92046
    cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a0047304502210095abf9858d1995714056c15b0f767110876f0cce8312a63775da93c4201d49310220358c793e386f9f7db123af2a23322c71cb81cf8dca011b10b3289ca9ceeb85de:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bec51a7ab47d69aa9c4ff3cd43c9c541a16efcc1d891320835c1fdf1d65cdf4b022100fa51895feff5bc6113ba8eeb56f9f9b29b66d2c4b7d4224221b99c0eac1cb158:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2008-7269
    cwe-id: CWE-20
    epss-score: 0.00653
-    epss-percentile: 0.70083
+    epss-percentile: 0.70266
    cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
  metadata:
    verified: "true"
@@ -41,4 +41,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a004730450221008f4efaf8be4e2884ef06a78fc6d21bd0b9234647d377c0b33deb0086d4e46d660220151a81309f2e4007b3b05fd1c0ecab5eee0e875830ddcd9c87bcc631cfb2511d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201ff97ca033a2cc185f6fec8b80251bdf7685518452321ee058888753411a23b50220786831d2be459e177d48146f9bb32db6a76610bf91a6a69cf5c81b95ff0d8b35:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2009-0347
    cwe-id: CWE-59
    epss-score: 0.03639
-    epss-percentile: 0.87334
+    epss-percentile: 0.87388
    cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502205f9b463cd06f54364d3a10e8694205ac9a67530a30fb21404a8afce42555ea7e022100cf8c3e7c768d201fce4be03382f832e58a939d013002ed9e1fa92ff9fc4512b3:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205503d198c9541b545c6e8dfc57f5a2daf504ba880bd65e814e0931b4f2ecab0502205fe15444b84ed0bb2401404a6dd7dc75bade26adcb53ac971107ad47a9a65068:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-0545
    cwe-id: CWE-20
    epss-score: 0.93944
-    epss-percentile: 0.99872
+    epss-percentile: 0.99875
    cpe: cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
        part: body
        regex:
          - "root:.*:0:0:"
-# digest: 4a0a00473045022032d15ebb09eb2277244558773a05a18c71577dde1accacf18d5dc9fee647b2d6022100ce20c8c61c1aca0bcefa310004f930d6005ebff4e81659af47dac184bdfe5103:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c5587173ae873f64fcf5a80302194ec6c78ce1b74df87109680732922333005e022100dbb21925869bbc8c6da8722340268c74e866cd7e273b7698e8a4b3f033d0af9b:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 6.4
    cve-id: CVE-2009-0932
    cwe-id: CWE-22
-    epss-score: 0.05612
-    epss-percentile: 0.89887
+    epss-score: 0.02929
+    epss-percentile: 0.85957
    cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502202b600e7fed55d00d3dc6100bd2cd018bd9d39e271f15fc31591142836ddd1be6022100acd6a90d265d34f568cbde3bd37e4ee8dd8d898b462329b0110516ee74611380:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022075633e1ee506c7aa3a7c5d29ffd1927de02dad3684806e33d05b9bfb93cd4ce602200ac2465127b194866eb2591f850e600a7c67801c2e3d0f4d9aab0c92e99dc8c4:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1151
    cwe-id: CWE-94
    epss-score: 0.93032
-    epss-percentile: 0.99767
+    epss-percentile: 0.9977
    cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -58,4 +58,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502206ec863f730507abfd2517eb6f80d98c2d756ec7579b04ec58ee00c1c38362acf02210087f219b47c9c0a444e14770597ac8926a115dc28317c48fe195aba0716eab07f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220075102250e6c47cdc63f1f9081ff045f4636917b712b9bfbdb2fac4b2c02035a0221008223218e37d71798aa1e476ec1ee9c1227d190bdde0dc2555683202e045500af:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-1496
    cwe-id: CWE-22
    epss-score: 0.01473
-    epss-percentile: 0.80292
+    epss-percentile: 0.80381
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022028681f3404a5b4cddf4ae759ff84ca8ce20c689d06706fb0ef1ce309a27f900b022066e25e37ba9412fe25f388b44d0af60122f8845b2ca2864078d8f2158932f075:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206bc94a15a09963312aef0f53c79252c0018426c277c10144db90e8a00f5d1a00022061f5e17aca2fcd37133103fcd31d0206ee0fe0e45ca79be845a1c33fab31429d:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1558
    cwe-id: CWE-22
    epss-score: 0.10881
-    epss-percentile: 0.93052
+    epss-percentile: 0.93106
    cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022039aa2e307abbd59b5282da0f7e095a3881e294e837f60d1ac55a786e3d2f92ad022100934a57a6650ab2d22f620ddad1135f9700f90429870b4ce2ecf0a26012205b5b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100aa71cf21b8bfa16631b8c9719b007a297c6b6a6c6e9fa86f3b3ab7f4747f575c0221009b8e5e9a7a942618d0660e0c4b6aeb871b74528815198e5bd34166aa9a0ecaf4:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1872
    cwe-id: CWE-79
    epss-score: 0.08673
-    epss-percentile: 0.92064
+    epss-percentile: 0.92094
    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502206310f97fdec0e38822775e99e75927613be27210db9e0a29e4db60636c6ae51a022100ceba849b73e885e56dd6b8ebffd6afdb7c9c7c3c88100cf5f090093e470d80ce:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d0fa3efc652db35584f28d68a2475554d7259065b2d8f7425c02c3792d753a7402203f45a36fa91690a7d05d8e43eafb019606600a600e2ccca0cbf8b37ced00a273:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-2015
    cwe-id: CWE-22
    epss-score: 0.01674
-    epss-percentile: 0.81517
+    epss-percentile: 0.816
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402207c2576c55f314a48dd3e141751664fa70c1dd2f91f615f50a68c21ea1dc8a21202201e289e4351bb115f7d51baf4374874e46fc0c6451ebe3b6dc2839e175e485ada:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009eb5c49c6243fc3ce4a685de2e7a7d6243be1c930eed0b27e4ee98cd10c7b028022100a67065dc347efb33cf04f867ced4faeb33b24ff8df9e2c56d2dbaa22e759506b:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2009-2100
    cwe-id: CWE-22
-    epss-score: 0.01877
-    epss-percentile: 0.82534
+    epss-score: 0.0171
+    epss-percentile: 0.81778
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220578e17d86e638bfe9bc788e50763238f031f8f2966929fdcbb17c5479b08709502204bfe69b32b2d1e29f7614cdb053472c1f427d0bea7b2d405778017803f9613c6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210087645b74157dc99978bdd0b660ebaf8c3e614708e20a11c015971d8b6074e4ee022100eba6a92b544be8d2d898ba7583c787a15a6c40c1ee2a81ec695bcf7b019ad2c0:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2009-3053
    cwe-id: CWE-22
-    epss-score: 0.01573
-    epss-percentile: 0.80918
+    epss-score: 0.01432
+    epss-percentile: 0.80118
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502210094f40da7a223a4590ae0e05498a0e5149f3d3d80d915c5cdfeea8772fbdfc6d8022010d91bd7f4121b9df88f7e0a6e3fdf20fdde1a78bafe0579d47c2bc81e4cddf1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f2a1623fca06a754a93544c84c5550cd3d6cdbdda772d32d02307bc1d9cbf3d002200ddbf80daf1c80d4b2b776683279d0061d6c93bcb8c8e44a4e5421745fc3e427:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-3318
    cwe-id: CWE-22
    epss-score: 0.01442
-    epss-percentile: 0.80083
+    epss-percentile: 0.80176
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502202cc31533f35d81509f646b20fd986db62a965efc8d4a75e7c3b74366671595df022100d55b8c636142221f1a51aef5e7b2e15157fea40f1cb3dafb2efca13656c8b446:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ebabffd58c8048bb1ee23d5b596746523c18fe9024799087b846efb5a69bde900220262b5056c500d55262dae95734be81685d4259aef3e6d44df3cb69d6824deb5f:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4202
    cwe-id: CWE-22
    epss-score: 0.02099
-    epss-percentile: 0.83488
+    epss-percentile: 0.83543
    cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402203d870eb30ec9ca3a56ca069e3a20ee24cdaebf5d3976cc4182d2020743b0d48202206733a946217a67a1f21cafd3e31db02e9ccf4888aa2150df644bbd21a872ae72:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022037c48b7a924e5dfc2aa3f7e0abb43972720117864d6353774eeb5d68c5e55e38022100c618f13308f6f9cb461938465b98b77378fd5c18099a269bb9f427a49f7e4b2b:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4223
    cwe-id: CWE-94
    epss-score: 0.04159
-    epss-percentile: 0.88161
+    epss-percentile: 0.88223
    cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e062d5b488122414fb0c50f4d5c123e0adeb1e46f11acb5d89e9466e300d9c93022075a429d90bd1cb7f0d4794d8acea63c94675c6f3b78b3d914a1dfaacdaa692b0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ee16f06c161b764d8cc4d94f08de3102e9e7b1ee76aa297b53497f1eda27b364022040fa45d5d7fd8b13d411ece44d1dd89dcbd590bb2d8cdc160693d9d1de802853:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4679
    cwe-id: CWE-22
    epss-score: 0.23302
-    epss-percentile: 0.95712
+    epss-percentile: 0.95747
    cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100ea856041ddbbbcd430231fe38d4b8480746e6e710e0a9771fbabe31d5fe2fee2022077a2f7df454585f2936ef232ef0c66cdbd26238e34a4e62d536565360921f0cb:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c78a76ddb5e8e44b66160f2f3f9871c1b8220eb1bc9317431b9f988c46ff79dc02210089018218f1aca265a37cb4c5e7c875ae6c9ea03e6b058ff86e7394118623722a:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 5.8
    cve-id: CVE-2009-5020
    cwe-id: CWE-20
-    epss-score: 0.01389
-    epss-percentile: 0.79711
+    epss-score: 0.00826
+    epss-percentile: 0.73895
    cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -39,4 +39,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 490a00463044022065bffed319745b0b2fd2fe00c266833e382453ca49552295029c858bb0f38b1b022059afda8815dd4db0234fc7c18fb056701bb91211e3ba5c04d429884a77c519c6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205b95db1b06874442ded4de04a3c011a19f3ba4cbe3c3f6d8709dc37dbe71b66b022100b77a9ad53c862518717b2f171d8c8a600ac5018d6e2dc6e51dc2264cb3b11d07:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-5114
    cwe-id: CWE-22
    epss-score: 0.26552
-    epss-percentile: 0.96104
+    epss-percentile: 0.96135
    cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a0211c034f35f080126370744c31ac161cece4c07ce2930639029763f7a35d42022100c3b2128829fb5f8592c16aef2c91c6e113752b3eebea277435527ae1d4895bf8:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220641bc4d65d393b57922555476e8b6869e93ec9e5f6401e76e5416d0f01d7a0ce02201640369204c11428fb64516c8025e0f030db0c8b0850f46b08c495c28a95a791:922c64590222798bb761d5b6d8e72950
Author	SHA1	Message	Date
Roberto Nunes	7ba13e30b7	Update CVE-2025-6569.yaml	2025-11-03 10:57:13 +09:00
Roberto Nunes	0d4fca3878	improve matcher CVE-2025-6569.yaml	2025-11-03 10:33:28 +09:00
Roberto Nunes	3c09f76d54	Create CVE-2025-6569.yaml	2025-11-03 10:22:43 +09:00