mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-11-07 08:36:19 -10:00
Compare commits
43
Commits
v10.2.4
...
ysoft-enum
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
cd067d2813 | ||
|
|
3cccee9b60 | ||
|
|
10150fbf11 | ||
|
|
8444715a5c | ||
|
|
d7c7419537 | ||
|
|
9c3a31c906 | ||
|
|
4896303394 | ||
|
|
af86d3eb72 | ||
|
|
1d6de9d67f | ||
|
|
104bcc47e0 | ||
|
|
e85e6cce88 | ||
|
|
8e6ac95791 | ||
|
|
ae5da84c00 | ||
|
|
1e3aeea1e6 | ||
|
|
2bf1db70dc | ||
|
|
721f5e9c09 | ||
|
|
d3b492bf9e | ||
|
|
b04ae9716a | ||
|
|
f58d77dcd6 | ||
|
|
d736c5529e | ||
|
|
d51a93f171 | ||
|
|
b3b5acbb26 | ||
|
|
6b17394a2d | ||
|
|
5a114fa018 | ||
|
|
e5a0a56867 | ||
|
|
99f018ab3f | ||
|
|
b301202050 | ||
|
|
5db656f405 | ||
|
|
c7cdf0425b | ||
|
|
f542f6b962 | ||
|
|
23c4575b19 | ||
|
|
8a85dd865c | ||
|
|
c7d682d224 | ||
|
|
367689f393 | ||
|
|
54baa546d2 | ||
|
|
205b995a18 | ||
|
|
7d2f919ffe | ||
|
|
92b5022b12 | ||
|
|
8c9cc94e7f | ||
|
|
c0184f884b | ||
|
|
994477b741 | ||
|
|
ebd70279b0 | ||
|
|
11ea58a365 |
No files matched your search
+11
-67
@@ -1,67 +1,11 @@
|
||||
cloud/kubernetes/kubernetes-exposing-docker-socket-hostpath.yaml
|
||||
cloud/kubernetes/rbac/k8s-role-pod-create.yaml
|
||||
code/cves/2019/CVE-2019-0604.yaml
|
||||
code/cves/2020/CVE-2020-0646.yaml
|
||||
dns/fbi-seized-nameserver.yaml
|
||||
http/cves/2018/CVE-2018-11686.yaml
|
||||
http/cves/2018/CVE-2018-14933.yaml
|
||||
http/cves/2018/CVE-2018-19207.yaml
|
||||
http/cves/2019/CVE-2019-17564.yaml
|
||||
http/cves/2019/CVE-2019-7194.yaml
|
||||
http/cves/2019/CVE-2019-9194.yaml
|
||||
http/cves/2020/CVE-2020-11984.yaml
|
||||
http/cves/2020/CVE-2020-36333.yaml
|
||||
http/cves/2021/CVE-2021-33045.yaml
|
||||
http/cves/2023/CVE-2023-48022.yaml
|
||||
http/cves/2023/CVE-2023-7116.yaml
|
||||
http/cves/2024/CVE-2024-3272.yaml
|
||||
http/cves/2024/CVE-2024-4325.yaml
|
||||
http/cves/2024/CVE-2024-51977.yaml
|
||||
http/cves/2024/CVE-2024-51978.yaml
|
||||
http/cves/2025/CVE-2025-30220.yaml
|
||||
http/cves/2025/CVE-2025-34031.yaml
|
||||
http/cves/2025/CVE-2025-34032.yaml
|
||||
http/cves/2025/CVE-2025-3415.yaml
|
||||
http/cves/2025/CVE-2025-44148.yaml
|
||||
http/cves/2025/CVE-2025-45854.yaml
|
||||
http/cves/2025/CVE-2025-45985.yaml
|
||||
http/cves/2025/CVE-2025-47423.yaml
|
||||
http/cves/2025/CVE-2025-47646.yaml
|
||||
http/cves/2025/CVE-2025-49132.yaml
|
||||
http/cves/2025/CVE-2025-5287.yaml
|
||||
http/cves/2025/CVE-2025-5569.yaml
|
||||
http/default-logins/activemq/activemq-artemis-default-login.yaml
|
||||
http/default-logins/apache/airflow-v3-default-login.yaml
|
||||
http/default-logins/hp/hp-printer-default-login.yaml
|
||||
http/default-logins/ibm/ibm-security-verify-default-login.yaml
|
||||
http/default-logins/nuuo-nvr-default-login.yaml
|
||||
http/default-logins/opensearch-default-login.yaml
|
||||
http/default-logins/photoprism-default-login.yaml
|
||||
http/exposed-panels/beyondtrust-remotesupport-panel.yaml
|
||||
http/exposed-panels/brother-printer-panel.yaml
|
||||
http/exposed-panels/forgerock-ig-panel.yaml
|
||||
http/exposed-panels/ibm/ibm-security-verify-panel.yaml
|
||||
http/exposed-panels/motive-eim-panel.yaml
|
||||
http/exposed-panels/myq-panel.yaml
|
||||
http/exposed-panels/opensearch-dashboard-panel.yaml
|
||||
http/exposed-panels/openshift-oauth-proxy-panel.yaml
|
||||
http/exposed-panels/pterodactyl-panel.yaml
|
||||
http/exposed-panels/teleport-login-panel.yaml
|
||||
http/exposed-panels/tools4ever-ssrpm-panel.yaml
|
||||
http/exposed-panels/windows-admin-center-panel.yaml
|
||||
http/exposures/configs/apache-kyuubi-config.yaml
|
||||
http/exposures/configs/config-json-exposure-fuzz.yaml
|
||||
http/miscellaneous/discord-invite-detect.yaml
|
||||
http/misconfiguration/installer/totolink-installer.yaml
|
||||
http/misconfiguration/opensearch-dashboard-unauth.yaml
|
||||
http/misconfiguration/photoprism-unauth.yaml
|
||||
http/takeovers/greatpages-takeover.yaml
|
||||
http/technologies/apache/apache-kyuubi-detect.yaml
|
||||
http/technologies/beyondtrust-remotesupport-version.yaml
|
||||
http/technologies/cryptshare-detect.yaml
|
||||
http/technologies/mitel-version-detect.yaml
|
||||
http/vulnerabilities/dahua/dahua-icc-getclassvalue-rce.yaml
|
||||
http/vulnerabilities/totolink-boaform-rce.yaml
|
||||
http/vulnerabilities/totolink-n150rt-password-exposure.yaml
|
||||
http/vulnerabilities/ueditor-arbitrary-file-upload.yaml
|
||||
network/cves/2020/CVE-2020-0796.yaml
|
||||
http/cves/2025/CVE-2025-47812.yaml
|
||||
http/cves/2025/CVE-2025-47813.yaml
|
||||
http/exposed-panels/google-adk-api-exposed.yaml
|
||||
http/exposed-panels/google-adk-webui-exposed.yaml
|
||||
http/exposed-panels/wingftp-panel.yaml
|
||||
http/technologies/wordpress/plugins/blocksy-companion.yaml
|
||||
http/technologies/wordpress/plugins/gosmtp.yaml
|
||||
http/technologies/wordpress/plugins/honeypot.yaml
|
||||
http/technologies/wordpress/plugins/pagelayer.yaml
|
||||
http/technologies/wordpress/plugins/siteseo.yaml
|
||||
http/technologies/wordpress/plugins/unlimited-elements-for-elementor.yaml
|
||||
@@ -44,8 +44,8 @@ An overview of the nuclei template project, including statistics on unique tags,
|
||||
|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
|
||||
| cve | 3225 | dhiyaneshdk | 1866 | http | 8825 | info | 4118 | file | 435 |
|
||||
| panel | 1327 | daffainfo | 868 | cloud | 657 | high | 2423 | dns | 26 |
|
||||
| xss | 1246 | princechaddha | 806 | file | 435 | medium | 2339 | | |
|
||||
| wordpress | 1168 | dwisiswant0 | 806 | dast | 255 | critical | 1391 | | |
|
||||
| xss | 1246 | dwisiswant0 | 806 | file | 435 | medium | 2339 | | |
|
||||
| wordpress | 1168 | princechaddha | 806 | dast | 255 | critical | 1391 | | |
|
||||
| exposure | 1094 | ritikchaddha | 633 | workflows | 202 | low | 318 | | |
|
||||
| wp-plugin | 1023 | pussycat0x | 519 | code | 174 | unknown | 54 | | |
|
||||
| osint | 810 | pikpikcu | 352 | network | 141 | | | | |
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"tags":[{"name":"cve","count":3225},{"name":"panel","count":1327},{"name":"xss","count":1246},{"name":"wordpress","count":1168},{"name":"exposure","count":1094},{"name":"wp-plugin","count":1023},{"name":"osint","count":810},{"name":"tech","count":782},{"name":"lfi","count":772},{"name":"rce","count":770},{"name":"misconfig","count":747},{"name":"devops","count":738},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":573},{"name":"packetstorm","count":552},{"name":"wpscan","count":534},{"name":"cve2021","count":513},{"name":"cve2022","count":512},{"name":"cve2023","count":488},{"name":"detect","count":486},{"name":"sqli","count":484},{"name":"cve2024","count":462},{"name":"login","count":446},{"name":"unauth","count":431},{"name":"authenticated","count":422},{"name":"kev","count":405},{"name":"intrusive","count":398},{"name":"file","count":377},{"name":"oast","count":276},{"name":"default-login","count":275},{"name":"cve2020","count":274},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":216},{"name":"malware","count":213},{"name":"token","count":211},{"name":"azure","count":210},{"name":"osint-social","count":210},{"name":"","count":204},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"auth-bypass","count":183},{"name":"cve2019","count":182},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"code","count":157},{"name":"redirect","count":156},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":139},{"name":"security","count":133},{"name":"router","count":130},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"cve2025","count":94},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":83},{"name":"local","count":81},{"name":"privesc","count":81},{"name":"takeover","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":78},{"name":"js","count":75},{"name":"windows","count":74},{"name":"cisco","count":73},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"windows-audit","count":70},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"cve2015","count":61},{"name":"alibaba","count":61},{"name":"cve2016","count":60},{"name":"atlassian","count":59},{"name":"detection","count":59},{"name":"file-upload","count":59},{"name":"google","count":57},{"name":"vmware","count":57},{"name":"c2","count":57},{"name":"audit","count":55},{"name":"deserialization","count":53},{"name":"dast","count":51},{"name":"cve2014","count":50},{"name":"php","count":50},{"name":"logs","count":50},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"ssh","count":47},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"vulhub","count":46},{"name":"aem","count":46},{"name":"misc","count":46},{"name":"cnvd","count":46},{"name":"ssti","count":46},{"name":"osint-gaming","count":45},{"name":"injection","count":45},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"plugin","count":44},{"name":"ssl","count":43},{"name":"oa","count":43},{"name":"springboot","count":43},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"osint-porn","count":42},{"name":"osint-hobby","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"postgresql","count":39},{"name":"miscellaneous","count":39},{"name":"info-leak","count":39},{"name":"dlink","count":39},{"name":"sap","count":38},{"name":"k8s-cluster-security","count":37},{"name":"api","count":37},{"name":"jira","count":37},{"name":"cti","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"devsecops","count":34},{"name":"networking","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":33},{"name":"fuzz","count":33},{"name":"dns","count":32},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"printer","count":31},{"name":"vpc","count":31},{"name":"ec2","count":30},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"prestashop","count":29},{"name":"gke","count":29},{"name":"admin","count":29},{"name":"yonyou","count":28},{"name":"manageengine","count":28Line truncated
|
||||
{"tags":[{"name":"cve","count":3225},{"name":"panel","count":1327},{"name":"xss","count":1246},{"name":"wordpress","count":1168},{"name":"exposure","count":1094},{"name":"wp-plugin","count":1023},{"name":"osint","count":810},{"name":"tech","count":782},{"name":"lfi","count":772},{"name":"rce","count":770},{"name":"misconfig","count":747},{"name":"devops","count":738},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":573},{"name":"packetstorm","count":552},{"name":"wpscan","count":534},{"name":"cve2021","count":513},{"name":"cve2022","count":512},{"name":"cve2023","count":488},{"name":"detect","count":486},{"name":"sqli","count":484},{"name":"cve2024","count":462},{"name":"login","count":446},{"name":"unauth","count":431},{"name":"authenticated","count":422},{"name":"kev","count":405},{"name":"intrusive","count":398},{"name":"file","count":377},{"name":"oast","count":276},{"name":"default-login","count":275},{"name":"cve2020","count":274},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":216},{"name":"malware","count":213},{"name":"token","count":211},{"name":"osint-social","count":210},{"name":"azure","count":210},{"name":"csp-bypass","count":204},{"name":"","count":204},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"iot","count":184},{"name":"cve2018","count":184},{"name":"auth-bypass","count":183},{"name":"cve2019","count":182},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"code","count":157},{"name":"keys","count":156},{"name":"redirect","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":139},{"name":"security","count":133},{"name":"router","count":130},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"cve2025","count":94},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":83},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"local","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":78},{"name":"js","count":75},{"name":"windows","count":74},{"name":"cisco","count":73},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"windows-audit","count":70},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"cve2016","count":60},{"name":"file-upload","count":59},{"name":"detection","count":59},{"name":"atlassian","count":59},{"name":"google","count":57},{"name":"c2","count":57},{"name":"vmware","count":57},{"name":"audit","count":55},{"name":"deserialization","count":53},{"name":"dast","count":51},{"name":"cve2014","count":50},{"name":"php","count":50},{"name":"logs","count":50},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"ssh","count":47},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"vulhub","count":46},{"name":"misc","count":46},{"name":"ssti","count":46},{"name":"cnvd","count":46},{"name":"aem","count":46},{"name":"osint-gaming","count":45},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"jndi","count":44},{"name":"plugin","count":44},{"name":"ssl","count":43},{"name":"springboot","count":43},{"name":"oa","count":43},{"name":"osint-porn","count":42},{"name":"osint-hobby","count":42},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"miscellaneous","count":39},{"name":"dlink","count":39},{"name":"info-leak","count":39},{"name":"postgresql","count":39},{"name":"sap","count":38},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"cti","count":37},{"name":"api","count":37},{"name":"wp-theme","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"networking","count":34},{"name":"devsecops","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":33},{"name":"fuzz","count":33},{"name":"dns","count":32},{"name":"nginx","count":31},{"name":"vpc","count":31},{"name":"printer","count":31},{"name":"osint-tech","count":31},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"ec2","count":30},{"name":"admin","count":29},{"name":"gke","count":29},{"name":"prestashop","count":29},{"name":"tomcat","count":28},{"name":"proxy","count":28},{"namLine truncated
|
||||
+6676
-6676
File diff suppressed because it is too large.
Load diff
@@ -2,8 +2,8 @@
|
||||
|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
|
||||
| cve | 3225 | dhiyaneshdk | 1866 | http | 8825 | info | 4118 | file | 435 |
|
||||
| panel | 1327 | daffainfo | 868 | cloud | 657 | high | 2423 | dns | 26 |
|
||||
| xss | 1246 | princechaddha | 806 | file | 435 | medium | 2339 | | |
|
||||
| wordpress | 1168 | dwisiswant0 | 806 | dast | 255 | critical | 1391 | | |
|
||||
| xss | 1246 | dwisiswant0 | 806 | file | 435 | medium | 2339 | | |
|
||||
| wordpress | 1168 | princechaddha | 806 | dast | 255 | critical | 1391 | | |
|
||||
| exposure | 1094 | ritikchaddha | 633 | workflows | 202 | low | 318 | | |
|
||||
| wp-plugin | 1023 | pussycat0x | 519 | code | 174 | unknown | 54 | | |
|
||||
| osint | 810 | pikpikcu | 352 | network | 141 | | | | |
|
||||
|
||||
@@ -10,7 +10,7 @@ info:
|
||||
- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160
|
||||
metadata:
|
||||
verified: true
|
||||
tags: cve,cve2014,openssl,heartbleed,code
|
||||
tags: cve,cve2014,openssl,heartbleed,code,kev
|
||||
|
||||
variables:
|
||||
url: "{{RootURL}}"
|
||||
@@ -135,4 +135,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "contains(response,'server is vulnerable')"
|
||||
# digest: 4a0a00473045022100dbbea58d04f9d75d0256102028ede5d7bf09a90175cb7dfcc7a394a9cb017e4c02205fdba48a22acce8f57cc53b0e6e2a79711a5f7d8515c4bce365d17d7b5048d56:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ed75e4d98947fd01fbc7873eeb6436b559a749bb88a5a85f71fef8c2f83f9e48022100cb170dc3f8592781394acbba1560953c29e7b0b1d36c191aee134aa6d178aa74:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,8 +15,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2017-1000353
|
||||
cwe-id: CWE-502
|
||||
epss-score: 0.97201
|
||||
epss-percentile: 0.99862
|
||||
epss-score: 0.94421
|
||||
epss-percentile: 0.99980
|
||||
cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
vendor: jenkins
|
||||
@@ -104,4 +104,4 @@ code:
|
||||
dsl:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022003497add318e43154d20f752633565cadb8c406ddac3e6661b034e20594acfc1022100d947b1c765918742118b4ec4c926376292eb19715157a299d04aa01aab3fa1d6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221008ad7ac179e8f3a0e00ba3b55bbcd325bc227198722b23a0dbe8a67a6612064aa02205d4644f6641fec1f795b5e8798530e4fda4a73f321b2e9d982bcc104a3218ae5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,6 +17,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2019-0604
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.94411
|
||||
epss-percentile: 0.99974
|
||||
metadata:
|
||||
verified: true
|
||||
vendor: microsoft
|
||||
@@ -152,4 +154,4 @@ code:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
- 'contains(interactsh_request, hex_encode(marker))'
|
||||
condition: and
|
||||
# digest: 490a00463044022069d81fdb4bdb4d4192e579e3a0a916d6b87e2b353568c031b5c72108768c76ee02202d626dd9675124c44d8ef28ef448734a9425c32f2eaacf7623a23747d14c330a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022022019f9c11593b4c5a1f55755d532f6a64858d80153beb783f2c2d61684e0439022100fd41aa3e2ae1ad5d411c2c569383a2498ebf4a48cb1a9cf01f89748879c446c7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 8.8
|
||||
cve-id: CVE-2019-14287
|
||||
cwe-id: CWE-755
|
||||
epss-score: 0.30814
|
||||
epss-percentile: 0.96854
|
||||
epss-score: 0.84563
|
||||
epss-percentile: 0.99279
|
||||
cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -47,4 +47,4 @@ code:
|
||||
- '!contains(code_1_response, "root")'
|
||||
- 'contains(code_2_response, "root")'
|
||||
condition: and
|
||||
# digest: 490a00463044022100b66bc431046c222bdbdf17c5c6b5c9743d91f902f877967c4434d46ff44bf79c021f498f3f2a5efedc922b9a142b06d7578ca7f5c9413b964c46a676b14d2f4dfa:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203ef02b5bc66bde9a84033a2d0eb02c7b2e73e3277c34377c90de755624be9ba6022055e7503686510f19241007aa2443ba097120831bbe89ba7526451d5f3aa95896:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,7 +16,7 @@ info:
|
||||
cve-id: CVE-2020-0646
|
||||
cwe-id: CWE-91
|
||||
epss-score: 0.92775
|
||||
epss-percentile: 0.99747
|
||||
epss-percentile: 0.99755
|
||||
cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -102,4 +102,4 @@ code:
|
||||
- 'contains(content_type, "text/xml")'
|
||||
- 'status_code == 200'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022100b6c2748a74cf076796ab726f2c2026ed63f45760043398ddb8f5b684499bca0f02201adbb3e5bedc567548b48547ac54d9a1e59c2f55ca2cb8bc107511bb8f798f2b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a9c7370f5d64f484afc46075695941e15917d5a0687dd077ae6699501475bc1c02207a3961cc5b43a81ff13243b2dbb044a37081cf76fead5b7be2c772e481685c5c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -10,6 +10,8 @@ info:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2020-13935
|
||||
epss-score: 0.91885
|
||||
epss-percentile: 0.99681
|
||||
reference:
|
||||
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
|
||||
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
|
||||
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2021-3156
|
||||
cwe-id: CWE-193
|
||||
epss-score: 0.97085
|
||||
epss-percentile: 0.99757
|
||||
epss-score: 0.92019
|
||||
epss-percentile: 0.99693
|
||||
cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -40,4 +40,4 @@ code:
|
||||
- "malloc(): memory corruption"
|
||||
- "Aborted (core dumped)"
|
||||
condition: and
|
||||
# digest: 490a00463044022003e9a47a2c4c44efd51b49bbac2f179b9affcc5acfca59cac2b0b120cef766ba0220690376c3929640e6e24b046b094bc38eb63e08f4c2914c732e04919353394a1f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203288bc289d0cc0f4e06e605006f21fa1933c3a8a43067f2e9217000a34b340ae022100eb4c9a1fad050dd80783cfcff25e73bc958d1ad84a2f6f09fcbf1c0deebe680c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2023-2640
|
||||
cwe-id: CWE-863
|
||||
epss-score: 0.00232
|
||||
epss-percentile: 0.60636
|
||||
epss-score: 0.91874
|
||||
epss-percentile: 0.99680
|
||||
cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -55,4 +55,4 @@ code:
|
||||
- '!contains(code_1_response, "(root)")'
|
||||
- 'contains(code_2_response, "(root)")'
|
||||
condition: and
|
||||
# digest: 4a0a00473045022100af1ce9e558408f86de2a92c299f2c032d05d4c87ca0b3b94e5372325c57a6247022018cc3e6806b89d0ab44dd51123fc94309a65fcb8b07605f505d528c67faa4862:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202809a713e4b7f0f60945476a6178a11001fed63e5a210c5f7d1e3051d0f2d532022100c48469b0082d1264875fcb51ece29a27c1a5ecc9513ccca86afd183931ae3472:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2023-49105
|
||||
cwe-id: CWE-287
|
||||
epss-score: 0.18166
|
||||
epss-percentile: 0.96172
|
||||
epss-score: 0.86872
|
||||
epss-percentile: 0.99395
|
||||
cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -90,4 +90,4 @@ http:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- '"Username => "+ username'
|
||||
# digest: 4b0a0048304602210097de106f56df20d4649d793b15fa2d3f84941e9ce92c24229d036e6b293a3d3a022100d810cbc181ba167025440b9de7b86d072c009e244ce2abd4e4aed6ab1599d1ce:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402204b1fb18af3e1a3a93ddf533a7112f566b1c32c20d54fce52634df059c876cd060220684fd961920c7f143e93d510a7e4219626c8ef2291c908ffecbb8a92171f9185:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2023-4911
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.0171
|
||||
epss-percentile: 0.87439
|
||||
epss-score: 0.66736
|
||||
epss-percentile: 0.98452
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -39,4 +39,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "139" # Segmentation Fault Exit Code
|
||||
# digest: 4b0a004830460221009b0b0cfac42037ebc60fb784afe5b4b70d62670e925e5b173d8e9e1e88fdc163022100edfb6d5010a063cfdbe507710c75ef7c530b946d363571fad08d504e9e519505:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207a6e5753b4c34b6c6a6b114a627b1024aea6e7ffaf398b1a92eb895c3a0449b9022100e7d7bde1dcc8c8248fa38491377b58370af797f1769f84f3be87a1fa8e672445:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 7.8
|
||||
cve-id: CVE-2023-6246
|
||||
cwe-id: CWE-787,CWE-122
|
||||
epss-score: 0.0077
|
||||
epss-percentile: 0.80859
|
||||
epss-score: 0.22699
|
||||
epss-percentile: 0.95613
|
||||
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -39,4 +39,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "127" # Segmentation Fault Exit Code
|
||||
# digest: 490a00463044022067d33f4da6f38d0bbdd03910db3f757750cd7d17e8865d79a7f6dc3b68b2367702207a1573a717bd2ecba367dfdee834be3861b73053905b847e9199345d993f7acd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220435fc0f1f42662dd77393d370309115320794f7957843c0ff1ef4c0e68d5566402200e729fedbc5915a5e9a5c33cd70ccff6646981ea2ae405bb1341c83e0b228b08:922c64590222798bb761d5b6d8e72950
|
||||
@@ -13,8 +13,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-10443
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.02427
|
||||
epss-percentile: 0.84387
|
||||
epss-score: 0.69629
|
||||
epss-percentile: 0.98573
|
||||
cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -54,4 +54,4 @@ code:
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- "dns"
|
||||
# digest: 4a0a00473045022100f541247d987a9e0240988176fd4eab32d5d1bb5786cb57757b66812cc52804fa022046cdeedbf8367a55b9eea6faa7ff8bfa9a159a7c456af48d8e50e69f8e0f547c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220238322406ea7b36d09adcd8d11555a98663066124719295b82627c0c6aa649c602210097fd42ed176237bd31b1b6fe4b675eb74f378636c66888f6578c5f20d49e8af4:922c64590222798bb761d5b6d8e72950
|
||||
@@ -13,12 +13,14 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-12356
|
||||
cwe-id: CWE-77
|
||||
epss-score: 0.93590
|
||||
epss-percentile: 0.99831
|
||||
cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
vendor: beyondtrust
|
||||
product: privileged_remote_access
|
||||
verified: true
|
||||
tags: cve,cve2024,beyondtrust,rce,remote-support,privileged-remote-access
|
||||
tags: cve,cve2024,beyondtrust,rce,remote-support,privileged-remote-access,kev
|
||||
|
||||
code:
|
||||
- engine:
|
||||
@@ -35,4 +37,4 @@ code:
|
||||
words:
|
||||
- "0 success"
|
||||
- "1 try again later"
|
||||
# digest: 4b0a004830460221009b992dc11657502934210c647c8a324000984f2ced04da26d5afb3e8cc3a2f9d02210098f750c74fcb8749b28d18e1077b38d9d1a8c6ca6d00b10155f987033cee4171:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100be13ba221189875a5c3c181eb1e6c5d7c4806c31798dc6f540657279fac5b029022031676609cf3da0030625ce6aac0a33787770a4d084ec52ac9f58d0faa903025f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 9.1
|
||||
cve-id: CVE-2024-22120
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.00043
|
||||
epss-percentile: 0.09568
|
||||
epss-score: 0.93881
|
||||
epss-percentile: 0.99865
|
||||
metadata:
|
||||
max-request: 1
|
||||
vendor: zabbix
|
||||
@@ -71,4 +71,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "Vulnerable to CVE-2024-22120"
|
||||
# digest: 490a004630440220373630574dc675bb0fb8395e3ba509866bb2524b66ba5af917e1c88af91ec0aa022072b103b17bfeb7f48ed7ba168e35269ee51e499398be47a1c2f98f07cb4cd689:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022057371395d4fb23fb810c20049a9d700a8284af6c1bc84864c23f1b4470dc4583022100f4d401098a82c09507f92f49757fb5d6085c9739a37aabc3f9ba8dcd894bdfa8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2024-3094
|
||||
cwe-id: CWE-506
|
||||
epss-score: 0.00079
|
||||
epss-percentile: 0.32887
|
||||
epss-score: 0.84011
|
||||
epss-percentile: 0.99254
|
||||
cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -59,4 +59,4 @@ code:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- response
|
||||
# digest: 4a0a004730450221009abe47857ffdb332e0e64304eac070593121f5ed53dddca447b831feceb14de10220054bdf467470183f86c9da127ed80e2e19154c35e6fd7f0e9da3cbb4d5e4b866:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f7234c73aae801d78da251277aec0c21a4952b8b344944b3892eee84ec5891ae0221008d992982b582811cdd8173176149ef196cc6f7b672fcf16d10c05aab8badd9db:922c64590222798bb761d5b6d8e72950
|
||||
@@ -10,6 +10,8 @@ info:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2024-4340
|
||||
epss-score: 0.15598
|
||||
epss-percentile: 0.94407
|
||||
reference:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2024-4340
|
||||
tags: cve,cve2024,py,code,dos,python,sqlparse
|
||||
@@ -27,4 +29,4 @@ code:
|
||||
part: stderr
|
||||
words:
|
||||
- "RecursionError: maximum recursion depth exceeded"
|
||||
# digest: 490a0046304402201ac09f592d24f7e3d3087a1f7fbdb85b68416f74d0550fe9d9d9d41898a7b27b02206111d2729c3a07e5e63866a2ec73d167b64e612581728883cb8966797b137cf3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402204fca66bc1127003bf7091c3ef4aa8c9a979c22405fb23f6e34ed6ef18a8b0daa0220188f7df879246724eac3b609b7bba222ff83e2a839029e7a0ef168c88260941c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,6 +20,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-45409
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.16139
|
||||
epss-percentile: 0.94531
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"GitLab"
|
||||
@@ -121,4 +123,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 4a0a0047304502200ca1bbbc60fa2debbed3a416665eacb5232cea3b028b9da309258483b69822d6022100b0184d0a81fb72e2e32d58323bb81aa53d24b1c5fcd038771a71f8ff000e3ee6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402201e63c308fefaaa4d4ba99b5a7c2ea3d7dcdf5544dc8d4a1ae1a0fbd532d7241702207232eaea82be593da580ba735e84de2153ee1708552ae08603c4c7237f2e1112:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,6 +17,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2024-55556
|
||||
cwe-id: CWE-502
|
||||
epss-score: 0.80857
|
||||
epss-percentile: 0.99096
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 2
|
||||
@@ -191,4 +193,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 490a0046304402204698451453cf480c6f4c8e276ddf0d9380a61c999a65ec0d29c5ed8490864e9e02205439af80b227f33a6378587084d8d95d7a50df8523a6d8f338a2561adf63ebc1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e75d786df30fc6d158bb38bc2b13a5af3c2e27174c1617fe01b419f3a5d69b57022100840b6aaccec646d85c578e77492eda810bfb731287ba8520e5d657e92f883297:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,6 +21,8 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2024-56331
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.41406
|
||||
epss-percentile: 0.97262
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"Uptime Kuma"
|
||||
@@ -122,4 +124,4 @@ code:
|
||||
- type: word
|
||||
words:
|
||||
- "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
|
||||
# digest: 4a0a00473045022100df7d5d216b87880a14cc83c6a75207c8abe35918c11518caf6cc303812f77d7102202822e8fce807e7f5e5015788df46b6ecf677ff6ff2dcb6e1e3da8d3976b3ad45:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220767c6864cb0310b6d63e766a5284e127185a790ded13671c3b33ee3ae955d86a02202e855684ba68b62411f6e36c7e6c472bfbd78ce3f6729980b57f92116bca9a5c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 9.3
|
||||
cve-id: CVE-2025-25291
|
||||
cwe-id: CWE-347
|
||||
epss-score: 0.00655
|
||||
epss-percentile: 0.6872
|
||||
epss-score: 0.01703
|
||||
epss-percentile: 0.81527
|
||||
metadata:
|
||||
verified: true
|
||||
vendor: gitlab
|
||||
@@ -78,4 +78,4 @@ http:
|
||||
- type: kval
|
||||
kval:
|
||||
- _gitlab_session
|
||||
# digest: 490a00463044022004b71e49683e8e0fb5555bb3dd0c9f36c4b0804a6cd6e14e8c4c2664f14980df022061a0dd50918227101dcabe92ec86d4c56b40bdc98d8c9ffb396562bfc9e90887:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022100be3b0643c89a1ddcd15aa06afc686f3efb80fa245984ce21ca1b4275c74d42a2021f4b0e28ee37a26ab75834991f37b275727fac03c60f0170a2e59e232ae078d8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,13 +20,13 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2025-32433
|
||||
cwe-id: CWE-306
|
||||
epss-score: 0.00386
|
||||
epss-percentile: 0.58724
|
||||
epss-score: 0.55376
|
||||
epss-percentile: 0.97930
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
shodan-query: "Erlang OTP"
|
||||
tags: cve,cve2025,erlang,otp,ssh,rce,oast
|
||||
tags: cve,cve2025,erlang,otp,ssh,rce,oast,kev
|
||||
|
||||
variables:
|
||||
OAST: "{{interactsh-url}}"
|
||||
@@ -172,4 +172,4 @@ code:
|
||||
dsl:
|
||||
- 'contains(interactsh_protocol, "dns")'
|
||||
condition: and
|
||||
# digest: 4b0a00483046022100b8ef2c0e0e8c218076ba845e8b0334ee9a4bbe5430eb84597a96d40c403073ad022100d73b311fc1bb3404a0aea728f335bbe94e624e7a5e82a8d156f740510d82042c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207edfd6f617b697c540c8375a5278b5c1016c928b22d041e1dc19ddfdad65d43b022100a4785eb798107b1413fd119e65a851be94361018e5eb785f393d26feed858cc1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -3103,6 +3103,8 @@
|
||||
{"ID":"CVE-2025-47423","Info":{"Name":"Personal Weather Station Dashboard 12 - Directory Traversal","Severity":"high","Description":"Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.\n","Classification":{"CVSSScore":"5.8"}},"file_path":"http/cves/2025/CVE-2025-47423.yaml"}
|
||||
{"ID":"CVE-2025-47539","Info":{"Name":"Eventin \u003c= 4.0.26 - Privilege Escalation","Severity":"critical","Description":"The Eventin WordPress plugin before 4.0.27 suffers from an unauthenticated privilege escalation vulnerability. Due to a missing permission check in the a REST API endpoint, unauthenticated attackers can import users with arbitrary roles, including administrator, leading to full site compromise.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-47539.yaml"}
|
||||
{"ID":"CVE-2025-47646","Info":{"Name":"PSW Front-end Login \u0026 Registration 1.13 - Weak Password Recovery","Severity":"critical","Description":"PSW Front-end Login \u0026 Registration plugin for WordPress contains a weak password recovery mechanism that can be exploited by unauthenticated attackers. This vulnerability affects versions through 1.13 and allows attackers to potentially gain unauthorized access.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-47646.yaml"}
|
||||
{"ID":"CVE-2025-47812","Info":{"Name":"Wing FTP Server \u003c= 7.4.3 - Remote Code Execution","Severity":"critical","Description":"Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution (RCE) flaw (CVE-2025-47812).\nThe vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection\ninto session files. These injected session files are executed when accessing authenticated endpoints such as /dir.html, resulting\nin arbitrary command execution with elevated privileges. This attack is possible only when anonymous login is enabled on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-47812.yaml"}
|
||||
{"ID":"CVE-2025-47813","Info":{"Name":"Wing FTP Server \u003c= 7.4.3 - Path Disclosure via Overlong UID Cookie","Severity":"medium","Description":"Wing FTP Server versions prior to 7.4.4 are vulnerable to an authenticated information disclosure vulnerability (CVE-2025-47813).\nThe vulnerability occurs due to improper validation of the 'UID' session cookie in the /loginok.html endpoint. Supplying an\noverlong UID value causes the server to respond with an error that includes the full local filesystem path. This can aid in further\nexploitation (e.g., CVE-2025-47812) by revealing the application’s file system layout.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-47813.yaml"}
|
||||
{"ID":"CVE-2025-47916","Info":{"Name":"Invision Community \u003c=5.0.6 Unauthenticated RCE via Template Injection","Severity":"critical","Description":"Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller (/applications/core/modules/front/system/themeeditor.php), where a protected method named customCss can be invoked by unauthenticated users. This method passes the value of the content parameter to the Theme::makeProcessFunction() method, which is evaluated by the template engine. Accordingly, unauthenticated attackers can inject and execute arbitrary PHP code by providing crafted template strings.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-47916.yaml"}
|
||||
{"ID":"CVE-2025-48828","Info":{"Name":"vBulletin replaceAdTemplate - Remote Code Execution","Severity":"critical","Description":"vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution (RCE) vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted \u003cvb:if\u003e conditional that executes arbitrary PHP code via passthru($_POST[\u003cparam\u003e]), and triggering it with a second request to ajax/render/ad_\u003clocation\u003e, attackers can run arbitrary commands on the server as the webserver user.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-48828.yaml"}
|
||||
{"ID":"CVE-2025-49113","Info":{"Name":"Roundcube Webmail - Remote Code Execution","Severity":"critical","Description":"Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-49113.yaml"}
|
||||
|
||||
@@ -1 +1 @@
|
||||
707c432e3bcbd75c3ea29b5e2c389c0c
|
||||
f49818993b002ec6c2bd227c0a16b3f4
|
||||
@@ -16,6 +16,8 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2018-19518
|
||||
cwe-id: CWE-88
|
||||
epss-score: 0.93964
|
||||
epss-percentile: 0.99875
|
||||
metadata:
|
||||
max-request: 1
|
||||
confidence: tenative
|
||||
@@ -47,4 +49,4 @@ http:
|
||||
part: interactsh_request
|
||||
words:
|
||||
- "User-Agent: curl"
|
||||
# digest: 4b0a004830460221008543f7f2f49f049446873dd3c5bc4fb5a4a615e4633405b40698ddf599348551022100ea2a4180689633d4ed52d2be2b916ed056f3a39bdca0a8511dce2dfb572efe27:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f49d06537ed8ad00c2c83083d49e4676200bf096d2312f819280bbb90c7d7950022041ed93b924325ee5bec6087d2ad160b10fe25b492fc0cbcbd0bc5d52457548fe:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,10 +16,12 @@ info:
|
||||
cvss-score: 9
|
||||
cve-id: CVE-2021-45046
|
||||
cwe-id: CWE-502
|
||||
epss-score: 0.94340
|
||||
epss-percentile: 0.99946
|
||||
metadata:
|
||||
max-request: 1
|
||||
confidence: tenative
|
||||
tags: cve,cve2021,rce,oast,log4j,injection,dast
|
||||
tags: cve,cve2021,rce,oast,log4j,injection,dast,kev
|
||||
|
||||
http:
|
||||
- pre-condition:
|
||||
@@ -60,4 +62,4 @@ http:
|
||||
group: 1
|
||||
regex:
|
||||
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
|
||||
# digest: 4b0a00483046022100ca8099b9b7303f2c34f8b7d2247e672dcdd92a64154deb9077154caea26f48500221009cd27f47753dc8386aee743ad51c6af60dbfad1a6cdf8c824e6cd21292b409f9:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100a8939bb9bc6ccb1b77d9f06e06ca0db8116d5c0b73361a660d9f9a7b3e104f20022100df3e7994cdfd47bb085887aab47b53e80f0fc32a8589e337462d83aa015db1c9:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2022-22965
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.97483
|
||||
epss-percentile: 0.99971
|
||||
epss-score: 0.94460
|
||||
epss-percentile: 0.99992
|
||||
cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -55,4 +55,4 @@ http:
|
||||
words:
|
||||
- "User-Agent: Java"
|
||||
case-insensitive: true
|
||||
# digest: 4a0a00473045022100d3db8bbbe0510ee216ae27652bf3f525d711497be0e6081b59f614e469c9e0c60220241efddbb889520b5d9ab9461c2c38205bf09157df2bb490ff7b22635313159b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100915d17fb5a8d51b02db38fbe465d2de61ea80000397a7e86ebc49a4a9889412b022100820d081fc544c8aa867d04cfa1d0878008729d0459f08a166c459d7d16234099:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,6 +16,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2022-34265
|
||||
cwe-id: CWE-89
|
||||
epss-score: 0.92493
|
||||
epss-percentile: 0.99731
|
||||
tags: sqli,dast,vulhub,cve,cve2022,django
|
||||
|
||||
variables:
|
||||
@@ -44,4 +46,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 4a0a00473045022100f6bab24a5adea777e32c36b72485c0c608dbd991b9fb2c3fb4cdb52ad7fad6ae022076c4a91e8602b76617f44c2e3386f66d5e97a998ea4ea225a59fba922208f5c8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220765d0b95605f033abc16dd45dbd789eab737ca6bd0c261eb914b8fcf1fc7f9e902202d55d0d730a667ad2683e84023cdea5e2896a20b863a8cf0a2865d081aaf575b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,6 +18,8 @@ info:
|
||||
cvss-score: 9.8
|
||||
cve-id: CVE-2022-42889
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.94161
|
||||
epss-percentile: 0.99906
|
||||
metadata:
|
||||
max-request: 1
|
||||
confidence: tenative
|
||||
@@ -66,4 +68,4 @@ http:
|
||||
group: 1
|
||||
regex:
|
||||
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
|
||||
# digest: 4b0a00483046022100b4b0c092617fb0da67a9ba1daba6fb05e46310943778a0100e477801d9d43ebe0221009ccfccf8b16a26ec3f4150c837ef6ed7f3daa564fcfdb6ff5e60165b82bc9913:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200a540e28e8b29b0e815636f1bdf25ada03bef96b3a227f8db6984189302ef18f02200a3c13ec4b34fe4baf8cff6dec664f57ad70981271b2a7a601987ec1820de86d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,8 +18,8 @@ info:
|
||||
cvss-score: 7.3
|
||||
cve-id: CVE-2024-2961
|
||||
cwe-id: CWE-787
|
||||
epss-score: 0.00046
|
||||
epss-percentile: 0.17937
|
||||
epss-score: 0.91735
|
||||
epss-percentile: 0.99668
|
||||
tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast
|
||||
|
||||
flow: http(1) && http(2)
|
||||
@@ -57,4 +57,4 @@ http:
|
||||
- type: regex
|
||||
regex:
|
||||
- "root:x:0:0"
|
||||
# digest: 4a0a00473045022005ac06f3907c82aa128062a389b80cc85af23809ac157a8bc32e9b33d24b0d0a022100cb8111c68f3945d3705e3633e48d3f5993f0222aeef990481d3b29e8c61e4929:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100f5fcacc5989901a485f707e1e046c0bb430448747aa9d1753933a28c4d863e75022100bf1a25c7f01875384e8ce50fdb752faf2f3d5336ede7c0491f8f74852d678a7d:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,4 +23,4 @@ dns:
|
||||
- type: regex
|
||||
regex:
|
||||
- "v=BIMI1(.+)"
|
||||
# digest: 4a0a00473045022054ea2995dedcce4cce31c27496f86b13955ca559d9e115fe76222ac64cc4621302210085481af2ecb00b994938c61f5fc950fd08803472e03648ba194640829db146bc:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044021f3dec084b1d2c1f40d94cb514cd6098ab498130c1b40bd1030a95fbe476432f022100a42be26e7d98c478e4a0a97209ddea0a09b1c6e4b39cfabb29584fbdea08555a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -35,4 +35,4 @@ dns:
|
||||
group: 1
|
||||
regex:
|
||||
- "IN\\tNS\\t(.+)"
|
||||
# digest: 4b0a00483046022100fbcff8f1b623f0e3447aa76e0b490f9121ca29aeeb51f1d29c8d8d975f94ba39022100c8c446adec58f2c573f0f34a58555f77dc5d8cfe402804268aa92e153d981363:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502210096d75201441ef6df04dab28e29fd600ddfbc601b470ffbc62fb71ec3d963e120022068d2ae1a12e41c4d3f9da888719af2b8bc21e72ad2f997f3fdeb43c3bb448387:922c64590222798bb761d5b6d8e72950
|
||||
+1
-1
@@ -81,4 +81,4 @@ dns:
|
||||
name: "edge-cast"
|
||||
words:
|
||||
- "edgecastdns.net"
|
||||
# digest: 4a0a00473045022100959a5dd7337d298c4966aa97031bdd934769ac61f8ac53ee93501a0180d186e6022042d6ee89b0e9da8cb771efa82fa86dc5a6897b405e59b26050b7d19bea303c5e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022007358f350401a1b58f1ec32f847a4bdfb18e50d31b8fab1828c2b0c3fdf4f947022100c25b7a4d20d8a46b610a870f9ddbea4f3f12f526e57db0e00a73f45337dbfbdf:922c64590222798bb761d5b6d8e72950
|
||||
@@ -23,4 +23,4 @@ dns:
|
||||
- type: regex
|
||||
regex:
|
||||
- "v=spf1(.+)"
|
||||
# digest: 490a0046304402202689cb3ecdf3fb7f1991196610e0ddfb0ad6db7e40ae91ca63fdd012a8269f45022059caf7c9005fcedc7361e12cc2002fb09588e883b5e0ce2d74cd6ee271a54618:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502204c01508a4252bce667206d754ffed70a8d0cf3eb514703fe5842f02d5720c534022100b987bd973849478d4c59058624576c9806976d4b6e7514b352833b5369f7ebc1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -218,4 +218,4 @@ dns:
|
||||
name: "whimsical"
|
||||
words:
|
||||
- "whimsical"
|
||||
# digest: 4a0a00473045022100d128ab17ee8d02b57c8a2f1c118775f6b70a347217e4db9b81c7ccca1aba0f93022029b717d888e8d7e3a761c0dc784c8518df862afb63e0e8c940e2a8d1061ecff7:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200dae5dc0e8e008f0074bdc8fbe55d26fb5c96ae58f43710893555efbcb2724c302200e12c144c858b2c53080d8cade5eba414e6a7951d394c087429dd8922c3c4831:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,4 +22,4 @@ file:
|
||||
- 'InvalidOperationException'
|
||||
- 'UnauthorizedAccessException'
|
||||
- 'NotFound'
|
||||
# digest: 4a0a0047304502205a6f4bf294076b378a5bd3e65557c8ba155a7f0e9e76109fec0ec0e50e12d238022100e62246615353b646881ab54a982fb06dcb2cc6f8edc388df1fbd3ea7cf70973d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100dec910af6434c193c5f733ffd89c161047ffc838eb5012281a3475d94aadafe80220654b83eebe67d34d91da8a8709c1cb1bb05bd3cd23aefaecde43e664d828d0a8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -30,4 +30,4 @@ file:
|
||||
- 'BadRequestError'
|
||||
- 'MongoError'
|
||||
- 'SequelizeDatabaseError'
|
||||
# digest: 4b0a00483046022100adc26a7699b34f00e8ffd7d5c3ea4942936d68155b83dd1bc9c4bbabd7068dbd022100b7c61be76b3109175a1ae20d4ea5164e26cfcca6a8fd0ab1fcb60295df950685:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022053f139b0c7ac98002bb2f98cbf81064c0e83f458257755e346e366fbc8f2972b02210083d3f8e7e1fd0a73074abfee15d5aee0262a11bb3cc7604de8bd1d9926915b62:922c64590222798bb761d5b6d8e72950
|
||||
@@ -31,4 +31,4 @@ headless:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502204dcc39405b045a1b9d8171ef6380077c0cf615813abc1f81f5faaebb15511bcc022100d83f548a895b0795b67ea05abe4e1f966d8b80a4d133dddb458731443bfeef2e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203dd51450e01d8640405d801116b427f5707bf2d2ebd001511ec5f300ab5d7f1302205276f447a2b383ba799a55f8786e86be7874c45a6a6635477bc427eb5d2f8789:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2018-25031
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.00265
|
||||
epss-percentile: 0.65516
|
||||
epss-score: 0.81869
|
||||
epss-percentile: 0.99147
|
||||
cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -54,4 +54,4 @@ headless:
|
||||
words:
|
||||
- "swagger"
|
||||
case-insensitive: true
|
||||
# digest: 4a0a004730450220562625cf9d0b39525c5dea0c5f836c056faf8eaf4af1167015f8ecd599dda471022100ff45c3d91cd24bcb60b6dc6b97ba00415f73dec7cec12a2290e62d0c4e289b8a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a2f7e5ac70597ad87663ef0c9ad4bee161a599d2e03938161ace1128046c9b20022046775d61a5e4cae1d9c124ef010c9e100dcf6f7b6b078485fc0fe735de5c59d6:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 6.1
|
||||
cve-id: CVE-2022-29455
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.0019
|
||||
epss-percentile: 0.56534
|
||||
epss-score: 0.69783
|
||||
epss-percentile: 0.98579
|
||||
cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -52,4 +52,4 @@ headless:
|
||||
words:
|
||||
- "elementor"
|
||||
case-insensitive: true
|
||||
# digest: 490a004630440220602c65b98033eb217f85849d2f2f124d75439e00178c3544bdb4774eea850caf02203bb0d3421c9df657e3bc20ecded48468db5bc3cb91424bb28d5abc6ca6d3b7b6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100c2fd9fc4a0789a1c7b95d4c984fecbd1f75987a198917b15db7b62868a38a083022100a5eeeed98eceab08457e1389b8147321f4b7e66ffc77684f3a4ddcfa533defd7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -14,8 +14,8 @@ info:
|
||||
cvss-score: 7.2
|
||||
cve-id: CVE-2024-29882
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00043
|
||||
epss-percentile: 0.09568
|
||||
epss-score: 0.02012
|
||||
epss-percentile: 0.82957
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
@@ -46,4 +46,4 @@ headless:
|
||||
- "ConnectSRS</a>"
|
||||
condition: or
|
||||
case-insensitive: true
|
||||
# digest: 4a0a00473045022100910e5ce652f76d349702c7adc5d5b6b479e14b984978fa2f86a47498f11167d2022000daa49aed583b6da8b47060d9389e38c4d7046e2304d059377360d1d199f89e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206cddf49edf926f4a2fc79e6bc3d44c28d92452607fab4a78c546667823eea63e022078814f733d0906b711afdbd5826bb664f3171ae8c38e5d175d567d52c877d89c:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
|
||||
cvss-score: 7.2
|
||||
cve-id: CVE-2024-38526
|
||||
epss-score: 0.00045
|
||||
epss-percentile: 0.16001
|
||||
epss-score: 0.66721
|
||||
epss-percentile: 0.98451
|
||||
tags: cve,cve2024,supply-chain,polyfill
|
||||
headless:
|
||||
- steps:
|
||||
@@ -60,4 +60,4 @@ headless:
|
||||
- "union.macoms.la"
|
||||
- "newcrbpc.com"
|
||||
part: urls
|
||||
# digest: 4a0a00473045022100ab5c8f20bf119770c476bcf509788840cc4b8027283c225e8e9c77229e207bc5022011da301a71875b08f2ef2e11457cb76b757c8e53122e82b859b747db224ec683:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100db8ee4bad1a3f649738173744c0b13228813c8f6149eed8ce1b9428955372d7a0221009d6fdcfee495e43dc703fb4ae3f9b8928359673160b77f0da6b553db315ad3d0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,8 +16,8 @@ info:
|
||||
cvss-score: 4.4
|
||||
cve-id: CVE-2025-25062
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.04
|
||||
epss-percentile: 11.4
|
||||
epss-score: 0.38601
|
||||
epss-percentile: 0.97094
|
||||
cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 7
|
||||
@@ -186,4 +186,4 @@ headless:
|
||||
dsl:
|
||||
- reflected_text_xss_type
|
||||
- reflected_text_xss_message
|
||||
# digest: 4a0a0047304502202a21d134e954969443587f1c8f07043ff530af431ecf2c68b90e6f73501d012802210087447ccb9fb5bd47c55c968e1bacdc968d0bdaa9f77b4f3f35aa412e751ed42f:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100a5afa1435b236d15615599536490803e61d1c57bd159c9b2a6d7c074e3204e3302207728ec9bdeffa792d62a6f7de273d13f778a88f935ffbeefb406321f35b0d011:922c64590222798bb761d5b6d8e72950
|
||||
@@ -15,6 +15,8 @@ info:
|
||||
cvss-score: 9.1
|
||||
cve-id: CVE-2025-29927
|
||||
cwe-id: CWE-285
|
||||
epss-score: 0.93584
|
||||
epss-percentile: 0.99830
|
||||
metadata:
|
||||
vendor: vercel
|
||||
product: Next.js
|
||||
@@ -53,4 +55,4 @@ headless:
|
||||
- "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
|
||||
- "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
|
||||
condition: or
|
||||
# digest: 4a0a00473045022100e7ef01315b5c9dff2e5567ad1421f5cf95ccaa62554a094e5faada3fe08261a10220611dab02751e9a58d17176f3632bd8a638191fc08abc6b7453a34abb9de3a5a0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100ac16c24521b6360ac31bb606cdd5d22561a0167e15754eaaeec4787f65c638ba02206be9686219a9c2c21158e2e62acd2880dd2cbe0e89fba4180e1d9a9c1504d7c1:922c64590222798bb761d5b6d8e72950
|
||||
@@ -1 +1 @@
|
||||
2.8.3
|
||||
2.8.4
|
||||
@@ -1 +1 @@
|
||||
4.4.27
|
||||
4.4.28
|
||||
@@ -1 +1 @@
|
||||
3.29.2
|
||||
3.30.0
|
||||
@@ -1 +1 @@
|
||||
6.1.20
|
||||
6.2.0
|
||||
@@ -1 +1 @@
|
||||
3.0.0
|
||||
3.1.0
|
||||
@@ -1 +1 @@
|
||||
21.0.0
|
||||
21.1.0
|
||||
@@ -1 +1 @@
|
||||
2.4.2
|
||||
2.4.3
|
||||
@@ -1 +1 @@
|
||||
3.0.41
|
||||
3.0.42
|
||||
@@ -1 +1 @@
|
||||
2.2.8
|
||||
2.2.9
|
||||
@@ -1 +1 @@
|
||||
14.7
|
||||
14.8
|
||||
@@ -1 +1 @@
|
||||
3.5.11
|
||||
3.5.12
|
||||
@@ -1 +1 @@
|
||||
5.12.8
|
||||
5.12.9
|
||||
@@ -1 +1 @@
|
||||
4.0.0
|
||||
4.0.1
|
||||
@@ -1 +1 @@
|
||||
11.0.0.3
|
||||
11.0.0.4
|
||||
@@ -1 +1 @@
|
||||
4.11.15
|
||||
4.11.17
|
||||
@@ -1 +1 @@
|
||||
1.0.247
|
||||
1.0.248
|
||||
@@ -1 +1 @@
|
||||
6.13.2.1
|
||||
6.14.0
|
||||
@@ -1 +1 @@
|
||||
9.5.0
|
||||
9.6.0
|
||||
@@ -1 +1 @@
|
||||
3.0.6
|
||||
3.0.7
|
||||
@@ -1 +1 @@
|
||||
25.3.1
|
||||
25.4
|
||||
@@ -1 +1 @@
|
||||
0.9.116
|
||||
0.9.117
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2000-0114
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.15958
|
||||
epss-percentile: 0.95958
|
||||
epss-score: 0.02800
|
||||
epss-percentile: 0.85545
|
||||
cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221008f54c203a4eb6b4e7d422bab31617ee0c8f6a94b680752ed17616e6b0711a3130220044a58143970b8a3d2f602d3422de3c3471131cc8fa1e930cc18520d7e1962c1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100f3a5e5052ec9628797b4a0195dc7dfdc41d8d4add40fcf444f5dd76289e248f60220663ea447f80771112856ef24f2e881f00c892440d3dbd1f627336ac9f72dd5b3:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 9.3
|
||||
cve-id: CVE-2001-0537
|
||||
cwe-id: CWE-287
|
||||
epss-score: 0.87683
|
||||
epss-percentile: 0.98644
|
||||
epss-score: 0.93454
|
||||
epss-percentile: 0.99813
|
||||
cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -53,4 +53,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100afc7c731afad2248970b453f590c74a1550743ad33c733ec8cdb1280c40bc0b3022100f939193bb518fd589d14865a23945417345c4f11c7d35a38515bce88fce27849:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203f8c7e914277bfd017e2f385cf283baaaf71711ca717a0e0d4f68aeb6a408d11022100e495a25d1e4c3df3d6a3d301feaa85ac14725231ba7258eaf8c7739885a292fd:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2002-1131
|
||||
cwe-id: CWE-80
|
||||
epss-score: 0.04774
|
||||
epss-percentile: 0.92677
|
||||
epss-score: 0.02453
|
||||
epss-percentile: 0.84582
|
||||
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 5
|
||||
@@ -60,4 +60,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402204c7dc475bf2191dc7d4205f7d9ac8692591bfc3309ce83cbaff50582d4ef4ed102205435d5f587fed8871b48937e85562a7cda2442ff61014d895e51badb33537114:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022061f41506e3a106d34ba9f5ead492c534de5628c45baa4b098997a3ae11da15dd022047c3a0ef5fe2e3702d467d576cacb456121430e471a65406a6025092bd097c58:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2004-0519
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.02285
|
||||
epss-percentile: 0.89406
|
||||
epss-score: 0.00186
|
||||
epss-percentile: 0.40980
|
||||
cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100f78a8d897aa28c0c47112280df68043e3ff141b97b1a05aca36af43e614a114c02206f9ef394ee110452db0e12dd95668fd175fb2a7d5f152ebf8b194cab0eebaf9a:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a0048304602210088c29bd8341924dee96550f25c070c64b3ffbcdd4263658f6bedb37286c495e0022100bbaa969fc39a95abbf72a528b6fa73666362ac3af1d7ed94a39f972065c2edd7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2004-1965
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.0113
|
||||
epss-percentile: 0.84626
|
||||
epss-score: 0.00265
|
||||
epss-percentile: 0.49964
|
||||
cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 4a0a00473045022100f84083d58b2d871781c6d265978ee74b2e70991dd5399c50e9cfeb9444f2da47022047102d30874a358ee865967c889f1473e1a6406fd77db9b2c0be7c4cba0ffa79:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220598e404cc4d7910c237c51aa833b2e9da68ba17f2988b7fe82386439f87ec6fa0220460478ba743f5c90985861aa78158a71fc7dc344636fc79afbc273f914ac4584:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2005-2428
|
||||
cwe-id: CWE-200
|
||||
epss-score: 0.01188
|
||||
epss-percentile: 0.85053
|
||||
epss-score: 0.07654
|
||||
epss-percentile: 0.91483
|
||||
cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502204db7cb4cd73bf68475be2974c1a99b836fa6c1ece81d597a27c5029b853819970221008b73212d2c8d95890c30830bbfc5c6fa83bf5b91d1f0fc0af048371991cda24c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100886ef721c95f20e2e899cabd7a5d1f28af25ad28f3e5b127ac105501debc964802200fb26d3c4ca946bcba55ad4cad10fa0b537a7c4a6bef1414002696a4dd71e120:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2005-3344
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.01539
|
||||
epss-percentile: 0.87085
|
||||
epss-score: 0.10150
|
||||
epss-percentile: 0.92789
|
||||
cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a004830460221008dde134d2f0e499b2402de324f72f11091b3ff11255327e250d55a98ea7e00b2022100de155d52a688e88e372b890e33d6f1ed734ae068664f6ce1fbb092bfe26cab93:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100eba37eb777f79438aa34370ec751417489fbdc27c9875b321dde0806ee141c3c022100e4b5f28d965fe4a0ab5489be0f19ba8552ee0a0c57405cea8348b327540bafdb:922c64590222798bb761d5b6d8e72950
|
||||
@@ -22,8 +22,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2005-3634
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.02843
|
||||
epss-percentile: 0.90695
|
||||
epss-score: 0.02140
|
||||
epss-percentile: 0.83500
|
||||
cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
|
||||
# digest: 4a0a00473045022100c119b14935460ddd5eed1e46576940d17658c5acdbd9def8ac5912024a4a86bc022014357b4898f46615291fa724d19fe5aaf92fc15a72c521f9322382730a302ed1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200a71076886733b957fe5ec2af43ca20c0bfcc4ef985474b7ac410b79ca19484c02206e7e5345f20a65009ae13dfddbf68937b6ff4503819bf72dc92b83bd25ddf504:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2005-4385
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.00294
|
||||
epss-percentile: 0.68633
|
||||
epss-score: 0.00220
|
||||
epss-percentile: 0.44836
|
||||
cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402201dc377fe9eb8d660ca84d628ecff56a00bfbbd4d2886390f148aab88ad14ca6502206d477bd2d0a93c3a6c5e465edd8c63c764ba917f0b72f65c6a4651c78b1defc6:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022024de6f73185416c516398c724d12c4d7c3a27a26eafeda6c7c0a6e8f9db7709b02200bc9af502bb74e5ea36d4be547983c9714da9047b734277bee72b8d8d48fc2e0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2006-1681
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.01015
|
||||
epss-percentile: 0.82067
|
||||
epss-score: 0.00286
|
||||
epss-percentile: 0.51865
|
||||
cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a0048304602210099220370851d360dcc2112b19968336872b31286e6b36fdfb10bd789677e7d26022100b55e13e750cf697c662dc5d1f39be91ef4ef435640fd54fbd268286c0384e83d:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402205471b1ff22c7477bc6882f670e3ee625eb410ca2b066e93fc40b9a49fc0fbfda02204a356c53b1a7bfcc6700a3f245431d9577c670848200e57d520e0dda6c8527db:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2006-2842
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.28102
|
||||
epss-percentile: 0.96839
|
||||
epss-score: 0.00909
|
||||
epss-percentile: 0.74870
|
||||
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100ef713ea083410c3bed3a81966b840683baf519ff17340696d94e435b710da61502204281f2d469bae015ff0bdb86d6b36fb02acf1b686281d76efb6c2ac84399a71b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220356f2985899529b7495f141c558373414b15e565771f883f2309fdde8f57ffde022039f993cdd57a00c0e67428bd815efc6c6169f6ee204dc62b533d1fe285e4bc5b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -16,8 +16,8 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2007-0885
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.0093
|
||||
epss-percentile: 0.82973
|
||||
epss-score: 0.03529
|
||||
epss-percentile: 0.87213
|
||||
cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -44,4 +44,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100d4fd86b114dd20a6cad3c05ed8d6c4466de36e6b243ae9a3734a35c4d06dd38502200cf0ef63629f6a4cfcd848fa4a53f6c7c2eea9f96344eddc2c2749f3f00b4d9b:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402200293441ac871824246114c58a709dab200a052a03059f6b4253a4e8d9120042a02200912fd1f018c7cde1767f72502cae3b7bf9313d0e60f4faa255f7f9f7ec4b7e5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -13,6 +13,8 @@ info:
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
|
||||
cvss-score: 7.2
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.89189
|
||||
epss-percentile: 0.99515
|
||||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
@@ -41,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402207aa82e86e579971f8779ff21649e34c827eb21246f5e6ab750b8ed8ee2b252f202202f87ae291c8a27943b32aacd491275a0cf58a6fa530d278108abf696b11ed75e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450221009b7ce2019233a1a4dab78f26dfa982683e34e9343e5149b17c4c7aeecb0e3c20022022448fad5fe11b5054733f026bf42e3ddcfcda5a781695de364556a9e2e4cb29:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 10
|
||||
cve-id: CVE-2007-3010
|
||||
cwe-id: CWE-20
|
||||
epss-score: 0.97313
|
||||
epss-percentile: 0.99874
|
||||
epss-score: 0.94065
|
||||
epss-percentile: 0.99890
|
||||
cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -59,4 +59,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100bc6bf7bc469cbfbb969011b189a73d3729050f8f20017734caba7654a0b3e3c10221009a1901431d7cb8bb270b5c7e2d1407d9ee6a6615e1559b1c8f27f3cfb61d8afd:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022100e049d9b1ddd06ff9d586414191f3665d44e3b3f29a4913cd653bbb0ba421867102203a976db1a2bc56b625c5d3b935986718a09b7b5f8daa714df1930eca654e96d7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2007-4504
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02171
|
||||
epss-percentile: 0.89338
|
||||
epss-score: 0.00063
|
||||
epss-percentile: 0.19921
|
||||
cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100deeb4b915224e53d71b53fe9dfa45937fa95b10548167b9f7332303964ba8d94022100a4e0ec1855de9b3a881f2933c730faef2d924307336ded59ee647145a2285aa3:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100e3cb5319977a6a9d76783a9fd6f4dceaedd3048dcd4fbc4df1b05d074ba63609022100d7df5632a9677a5221468b759e0e976b30942f574994ce636e97bf3d7a3b76f7:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2007-4556
|
||||
cwe-id: NVD-CWE-Other
|
||||
epss-score: 0.21361
|
||||
epss-percentile: 0.96419
|
||||
epss-score: 0.02359
|
||||
epss-percentile: 0.84290
|
||||
cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402204b9c4d327d7a3c9a1dda2e01bd500a0ada5bef92cb938adaebae0a549c99afcd02203c6a764134ebf6feb0921172e788606af62c4dbc97f28a58fdaae4908c6a7bc8:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022006c91965807aad6244bd4fcfc839f8bba5283535f477a5027f1c2b7463c233a0022100fa9ae87402f2d18c6d046cd6d311f8b367a299d1758c3f4ae2995162459a663f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2007-5728
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.0153
|
||||
epss-percentile: 0.87042
|
||||
epss-score: 0.00282
|
||||
epss-percentile: 0.51310
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -57,4 +57,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4b0a00483046022100df6acade92007acb47ffb1f65acdf8b1fea41cf7371cb94edf0d4efe7d91d125022100e07f26119926e8ad002a9c40e43aeb2a3441f64273dc2a271906e49042e6a82e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022029b04d7527b85b77f305198f89b79b67231232e1f15d63e0123b7670955a8b04022100b05129b789e371c3992e80ecd582b120ab1bce2e0b682ee885907f0837fef3c0:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2008-1059
|
||||
cwe-id: CWE-94
|
||||
epss-score: 0.01493
|
||||
epss-percentile: 0.86573
|
||||
epss-score: 0.00265
|
||||
epss-percentile: 0.49988
|
||||
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022013b337065b80985ac0751b8c173af5a5a871e504f8380a96ba5c959416c01c6b022100e77a854d6d88a1759053ea5b2393e56d19648ab396389c02295bdb58c7526416:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220094de0786719e62c94a9a80e9f7be780c8977383de319f67758a1b15fe4e1106022035064b1d996905b9fe260f6e055ce5107620a2896d1ede8375d7c331901cac0a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-1061
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00663
|
||||
epss-percentile: 0.7961
|
||||
epss-score: 0.00155
|
||||
epss-percentile: 0.37282
|
||||
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -62,4 +62,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221009f949f57ce4bdcac136171e3ce41e5b0872a054942373c303ba78fa83738df8802205567d97f66053b5da6c80dec513145247f2732d01c3b635a258b4747632bac8c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a00473045022066c7ebde1d72dabd468a9ccbd5bd958aaadac53f7618c21a7f26797d5ad21824022100d42720fdc45af712520c580bebe65c7d47eb63e63b57a100776a47b0d6ecd4ce:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-1547
|
||||
cwe-id: CWE-601
|
||||
epss-score: 0.03875
|
||||
epss-percentile: 0.9108
|
||||
epss-score: 0.65006
|
||||
epss-percentile: 0.98376
|
||||
cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
part: header
|
||||
regex:
|
||||
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
|
||||
# digest: 490a00463044022045ba34a1c0d8ff714d084b5ca3b820694483e6bc3b4cc7c95816fb1b91b2036602202a994e6879669ce8e55c4c027ad22f39f2bf6592be0afe58a66a58224d7499aa:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100ccc8fdd101d8bef238ebb2f62c88d0d4de78514e38dc68b973054d88901a6534022100a8ed6a5a0085277e51c3492fd9d06758866d857d159f2d3a9c83de5b40a778f5:922c64590222798bb761d5b6d8e72950
|
||||
@@ -18,8 +18,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-2398
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00329
|
||||
epss-percentile: 0.67909
|
||||
epss-score: 0.00831
|
||||
epss-percentile: 0.73651
|
||||
cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -47,4 +47,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a0046304402205134864368ccb4cab676cc16b45f8c3cabb0dbc97510d6abc4512e8673e1be5d02202e0b5e1cf07df7fb1a2a6a56c4d9219ce1a1e1d0f270e4775a3aeb2bcfcbfb1c:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022036afde93383e45ddae2d39d1c8493aa45346c0fc49397ec75e0fca7016051fbe022071edecdf81f559646264142636cfbb6d67e1848306dd44d211a1efb08db7d39f:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2008-2650
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.06344
|
||||
epss-percentile: 0.93486
|
||||
epss-score: 0.03520
|
||||
epss-percentile: 0.87196
|
||||
cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -48,4 +48,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a004730450221008e6e5ba0093aee9fb1c4858af106352cbc43209ef29a5ebb1ba17b10709e20450220451306c8bd198917a02bbf5d6fdd4227bc4477b18ec11fedc962ef339aabd429:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502203ee4722b9bc3f86d13f492fe8f28c7e9240cff0e9254d3c44bc584772ebfe3a6022100c4a3dbd47dcb2edd116be32239f4f0846e7aa1e6ed546863ee6d1112d1d1498b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 9
|
||||
cve-id: CVE-2008-4668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01018
|
||||
epss-percentile: 0.83418
|
||||
epss-score: 0.00276
|
||||
epss-percentile: 0.50824
|
||||
cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -43,4 +43,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022023207d03c1bfaa267c692d1b97386f7447db4d95240ce037c24f1e1d90628a14022031aa4b71484a35dc80ad1fdcbebac65df2bade5f50478d95b438b068cc2a85c1:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220552fc4231924e143d1c6017e328fe5867c9cf8cd112849abc81079797a27df51022100f5572d7e467882078a33cb8324fc369c5f08f8af804b5b468726c544c1729967:922c64590222798bb761d5b6d8e72950
|
||||
@@ -17,8 +17,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2008-4764
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02135
|
||||
epss-percentile: 0.89239
|
||||
epss-score: 0.01921
|
||||
epss-percentile: 0.82565
|
||||
cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -40,4 +40,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100f543c4ecb59a4c3b4e13353456dd59b40bceeda774c32375ec2b20fd66bcd46e02207cac7010096fdc36bf50eced5bd1677451b45840e000be2efaee198786c61f1e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502202c7dfde9238ba3921fcc254103a3528df363b34324bb2228ff8d5d5a79171e910221009ad65c06e5e6ff2342d140a15ae3f7a957b3be8bbadddab04016dcdfdb530830:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-5587
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.02331
|
||||
epss-percentile: 0.89734
|
||||
epss-score: 0.01986
|
||||
epss-percentile: 0.82836
|
||||
cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -49,4 +49,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502204781c8800591e9787600b870e853a3a3f1f9c44d1297eca92366abc8afa57539022100dbeced77523d56c73470bd09fefb789f02e4e4ff466f14b30947255ce1d4b95e:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a00463044022041a0ad27e61970e7f6b1b81417087ee830e4f986ed52f64d292f24b5f07a0a3c022047363055a1033ac84c40dcdd314e1818475d91954468639b211c23c48a4c840b:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2008-6080
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.03314
|
||||
epss-percentile: 0.9132
|
||||
epss-score: 0.06300
|
||||
epss-percentile: 0.90534
|
||||
cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a00473045022100e60b52403ca968b56428fbf8ae02f3d2df0abe3cb1a5056fcbaa333403ecd6130220127944d011764ec50f3922364fdac9f45144dd249bba7916880f318f3f7d9f34:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a0047304502207cab7f188986068ae71ebe05bdd580aa7607d10c89d214bde7f41f92805b1466022100f913822c3f037833c41d0114859f633f2cfeb08440ab0d1494035a7f691ee048:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 6.8
|
||||
cve-id: CVE-2008-6172
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.00509
|
||||
epss-percentile: 0.76498
|
||||
epss-score: 0.07294
|
||||
epss-percentile: 0.91241
|
||||
cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502201427c50730d5f7e468b09a197b9b9dab426b9d520110f9b213f74a15bad6ac49022100978c5f0b956a361fde327573305912ca40e887e403acfae5661c88cdc7ecd3ba:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a004630440220461d60ebf43e50e3eded78bde69d2bdba9ee79fd4983ffa09b100b45272c29b602204188ce7b86a6d907e6aeb9c738f2cf9a8a1368e0411a10f546f86c773bc9b272:922c64590222798bb761d5b6d8e72950
|
||||
@@ -19,8 +19,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2008-6222
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.01302
|
||||
epss-percentile: 0.85861
|
||||
epss-score: 0.01954
|
||||
epss-percentile: 0.82681
|
||||
cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 1
|
||||
@@ -42,4 +42,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 4a0a0047304502210093dcb40a80d53b03279b539272f9c7b157fbe5b9f981720380651400c8d41f61022070a434b9bfdae7bdbc4f079b6a613192b217986ddab6f4db126b4dd9e1889ab0:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402203d956ac5c3c7b38c803d4b254b97f948f0aca8881d9455716bfb24cd79d459ec022056546cffa9dca77d3c60a3e68d3a5288d07c9b1ce756435aa99eff2ef55089b8:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-6465
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00421
|
||||
epss-percentile: 0.73765
|
||||
epss-score: 0.00946
|
||||
epss-percentile: 0.75387
|
||||
cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -63,4 +63,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a004630440220041fa6e65ba93d4c903226608d1c88929ab956d857417cbda6c9b45c35d05ccf02201fe8ae665b1de3153e8a3c65c65aba3105db58d34cfafc313c88e4af4afa0a24:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4b0a00483046022100a8ddacfdb460740bcabd58529a78bc158aeabeff9c8ef5fd2db0d66963578e14022100993afa3340dd4699cdbfc50fcfa058be309cdd1ad10e82e82b4667b14bd21d63:922c64590222798bb761d5b6d8e72950
|
||||
@@ -20,8 +20,8 @@ info:
|
||||
cvss-score: 5
|
||||
cve-id: CVE-2008-6668
|
||||
cwe-id: CWE-22
|
||||
epss-score: 0.00359
|
||||
epss-percentile: 0.72128
|
||||
epss-score: 0.01077
|
||||
epss-percentile: 0.76883
|
||||
cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
@@ -45,4 +45,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
# digest: 490a00463044022002401e6d2cfcf6e927c6ab012b66855586ad7b69aa6bea72e4d18763fa607c6802205b62802a0fc065d6ffc20195b84ac858105f9013c98d6cd41fe3f7eb82731247:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 4a0a004730450220412646da5bed4f185caf54c76862664813ef7050af776de0a1f48f34ed1e2743022100ed90d7f1c9c2709fd80b2ce39ec40aae39ba04224f28f08edb7845e2444a160a:922c64590222798bb761d5b6d8e72950
|
||||
@@ -21,8 +21,8 @@ info:
|
||||
cvss-score: 4.3
|
||||
cve-id: CVE-2008-6982
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.0038
|
||||
epss-percentile: 0.72879
|
||||
epss-score: 0.08587
|
||||
epss-percentile: 0.92008
|
||||
cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
@@ -51,4 +51,4 @@ http:
|
||||
- type: status
|
||||
status:
|
||||
- 500
|
||||
# digest: 490a00463044022100f35f66f91c673b84f97e34434b390db4e91629ddc7b6763aa3a908d372825bce021f493825bdc2bb46323b987edfda7d67019d483fb3f099b5c05bb7633929d794:922c64590222798bb761d5b6d8e72950
|
||||
# digest: 490a0046304402206a9f02976209fbe090ae4e87ec5f161f64586ea36a039abfed5dc6dec87950ed0220232dafd659f6ede238994a04556b4befe462ce926e0e0618d12183e962cd26f4:922c64590222798bb761d5b6d8e72950
|
||||
Loaded 100 of 3454 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user