Compare commits

...
43 Commits
Author SHA1 Message Date
Prince Chaddha cd067d2813 Enhance YSoft SafeQ panel template with improved metadata
- Add comprehensive description explaining the print management solution
- Include impact and remediation sections for better security context
- Add verified metadata and max-request count
- Enhance tags with exposure and misconfig for better categorization
- Add ZoomEye search queries for broader coverage
- Improve template name to be more descriptive
2025-07-12 09:59:15 +00:00
Matej SmyckaandChris 3cccee9b60 Apply suggestions from code review
Co-authored-by: Chris <[email protected]>
2025-07-11 21:05:52 +02:00
Matej Smycka 10150fbf11 feat: add YSoft SafeQ panel exposure template 2025-07-11 15:42:47 +02:00
ghost 8444715a5c chore: update WordPress Plugins 🤖 2025-07-04 00:26:58 +00:00
ghost d7c7419537 chore: sign templates 🤖 2025-07-03 11:52:37 +00:00
ghost 9c3a31c906 chore: generate templates checksum 🤖 2025-07-03 11:52:32 +00:00
Prince Chaddha 4896303394 Update google-adk-api-exposed.yaml 2025-07-03 17:22:10 +05:30
ghost af86d3eb72 chore: sign templates 🤖 2025-07-03 11:50:41 +00:00
Prince Chaddha 1d6de9d67f Update google-adk-api-exposed.yaml 2025-07-03 17:20:13 +05:30
ghost 104bcc47e0 chore: generate new addition list 🤖 2025-07-03 11:45:20 +00:00
ghost e85e6cce88 chore: sign templates 🤖 2025-07-03 11:45:16 +00:00
ghost 8e6ac95791 chore: generate templates checksum 🤖 2025-07-03 11:45:09 +00:00
Prince Chaddha ae5da84c00 Merge pull request #12536 from projectdiscovery/princechaddha-patch-8
Exposed Google Agent Development Kit (ADK)
2025-07-03 17:14:50 +05:30
Prince Chaddha 1e3aeea1e6 added adk API 2025-07-03 16:59:52 +05:30
Prince Chaddha 2bf1db70dc Update google-adk-webui-exposed.yaml 2025-07-03 16:41:25 +05:30
Prince Chaddha 721f5e9c09 Create google-adk-webui-exposed.yaml 2025-07-03 16:38:34 +05:30
ghost d3b492bf9e chore: sign templates 🤖 2025-07-03 08:27:23 +00:00
ghost b04ae9716a chore: generate templates checksum 🤖 2025-07-03 08:27:20 +00:00
Prince Chaddha f58d77dcd6 Merge pull request #12526 from projectdiscovery/epss-update
EPSS score update for all CVE templates
2025-07-03 13:56:56 +05:30
ghost d736c5529e chore: update WordPress Plugins 🤖 2025-07-03 00:27:08 +00:00
ghost d51a93f171 chore: generate templates checksum 🤖 2025-07-02 21:00:42 +00:00
ghost b3b5acbb26 chore: sign templates 🤖 2025-07-02 21:00:40 +00:00
Dhiyaneshwaran 6b17394a2d Merge pull request #12520 from projectdiscovery/FN-CVE-2023-5561
Fix FN CVE-2023-5561.yaml
2025-07-03 02:30:12 +05:30
ghost 5a114fa018 chore: generate new addition list 🤖 2025-07-02 10:52:19 +00:00
ghost e5a0a56867 chore: sign templates 🤖 2025-07-02 10:52:13 +00:00
ghost 99f018ab3f chore: generate templates checksum 🤖 2025-07-02 10:52:08 +00:00
sandeep b301202050 Updated author to ensue vuln discovery source is visible! 2025-07-02 17:51:45 +07:00
Prince Chaddha 5db656f405 EPSS Update 2025-07-02 14:13:14 +05:30
ghost c7cdf0425b chore: generate templates checksum 🤖 2025-07-02 06:25:13 +00:00
ghost f542f6b962 chore: sign templates 🤖 2025-07-02 06:25:10 +00:00
Prince Chaddha 23c4575b19 Merge pull request #12523 from projectdiscovery/kev-cves-tag-update
Updated missing KEV tags
2025-07-02 11:54:43 +05:30
Prince Chaddha 8a85dd865c Updated KEV tags 2025-07-02 11:37:49 +05:30
Ritik Chaddha c7d682d224 Fix FN CVE-2023-5561.yaml 2025-07-02 09:40:53 +05:30
ghost 367689f393 chore: update WordPress Plugins 🤖 2025-07-02 00:26:54 +00:00
ghost 54baa546d2 chore: sign templates 🤖 2025-07-01 20:14:20 +00:00
ghost 205b995a18 chore: generate templates checksum 🤖 2025-07-01 20:14:06 +00:00
sandeep 7d2f919ffe make the matcher more strict 2025-07-02 03:13:42 +07:00
ghost 92b5022b12 chore: generate new addition list 🤖 2025-07-01 19:46:58 +00:00
ghost 8c9cc94e7f chore: sign templates 🤖 2025-07-01 19:46:54 +00:00
ghost c0184f884b chore: generate CVEs metadata 🤖 2025-07-01 19:46:39 +00:00
Sheikh Mohammad Hasanandsandeep 994477b741 Add CVE-2025-47812.yaml (#12518)
* Add CVE-2025-47812.yaml

* Update CVE-2025-47812.yaml

* simplified template + matcher

also removed manual uid extractor as nuclei default to pass session to next request.

* Added panel detection for Wing FTP Server

* Added template for CVE-2025-47813

---------

Co-authored-by: sandeep <[email protected]>
2025-07-02 02:46:24 +07:00
ghost ebd70279b0 docs: update README 🤖 2025-07-01 12:05:38 +00:00
ghost 11ea58a365 chore: generate templates stats 🤖 2025-07-01 12:04:52 +00:00
3454 changed files with 20312 additions and 19571 deletions

No files matched your search

+11 -67
View File
@@ -1,67 +1,11 @@
cloud/kubernetes/kubernetes-exposing-docker-socket-hostpath.yaml
cloud/kubernetes/rbac/k8s-role-pod-create.yaml
code/cves/2019/CVE-2019-0604.yaml
code/cves/2020/CVE-2020-0646.yaml
dns/fbi-seized-nameserver.yaml
http/cves/2018/CVE-2018-11686.yaml
http/cves/2018/CVE-2018-14933.yaml
http/cves/2018/CVE-2018-19207.yaml
http/cves/2019/CVE-2019-17564.yaml
http/cves/2019/CVE-2019-7194.yaml
http/cves/2019/CVE-2019-9194.yaml
http/cves/2020/CVE-2020-11984.yaml
http/cves/2020/CVE-2020-36333.yaml
http/cves/2021/CVE-2021-33045.yaml
http/cves/2023/CVE-2023-48022.yaml
http/cves/2023/CVE-2023-7116.yaml
http/cves/2024/CVE-2024-3272.yaml
http/cves/2024/CVE-2024-4325.yaml
http/cves/2024/CVE-2024-51977.yaml
http/cves/2024/CVE-2024-51978.yaml
http/cves/2025/CVE-2025-30220.yaml
http/cves/2025/CVE-2025-34031.yaml
http/cves/2025/CVE-2025-34032.yaml
http/cves/2025/CVE-2025-3415.yaml
http/cves/2025/CVE-2025-44148.yaml
http/cves/2025/CVE-2025-45854.yaml
http/cves/2025/CVE-2025-45985.yaml
http/cves/2025/CVE-2025-47423.yaml
http/cves/2025/CVE-2025-47646.yaml
http/cves/2025/CVE-2025-49132.yaml
http/cves/2025/CVE-2025-5287.yaml
http/cves/2025/CVE-2025-5569.yaml
http/default-logins/activemq/activemq-artemis-default-login.yaml
http/default-logins/apache/airflow-v3-default-login.yaml
http/default-logins/hp/hp-printer-default-login.yaml
http/default-logins/ibm/ibm-security-verify-default-login.yaml
http/default-logins/nuuo-nvr-default-login.yaml
http/default-logins/opensearch-default-login.yaml
http/default-logins/photoprism-default-login.yaml
http/exposed-panels/beyondtrust-remotesupport-panel.yaml
http/exposed-panels/brother-printer-panel.yaml
http/exposed-panels/forgerock-ig-panel.yaml
http/exposed-panels/ibm/ibm-security-verify-panel.yaml
http/exposed-panels/motive-eim-panel.yaml
http/exposed-panels/myq-panel.yaml
http/exposed-panels/opensearch-dashboard-panel.yaml
http/exposed-panels/openshift-oauth-proxy-panel.yaml
http/exposed-panels/pterodactyl-panel.yaml
http/exposed-panels/teleport-login-panel.yaml
http/exposed-panels/tools4ever-ssrpm-panel.yaml
http/exposed-panels/windows-admin-center-panel.yaml
http/exposures/configs/apache-kyuubi-config.yaml
http/exposures/configs/config-json-exposure-fuzz.yaml
http/miscellaneous/discord-invite-detect.yaml
http/misconfiguration/installer/totolink-installer.yaml
http/misconfiguration/opensearch-dashboard-unauth.yaml
http/misconfiguration/photoprism-unauth.yaml
http/takeovers/greatpages-takeover.yaml
http/technologies/apache/apache-kyuubi-detect.yaml
http/technologies/beyondtrust-remotesupport-version.yaml
http/technologies/cryptshare-detect.yaml
http/technologies/mitel-version-detect.yaml
http/vulnerabilities/dahua/dahua-icc-getclassvalue-rce.yaml
http/vulnerabilities/totolink-boaform-rce.yaml
http/vulnerabilities/totolink-n150rt-password-exposure.yaml
http/vulnerabilities/ueditor-arbitrary-file-upload.yaml
network/cves/2020/CVE-2020-0796.yaml
http/cves/2025/CVE-2025-47812.yaml
http/cves/2025/CVE-2025-47813.yaml
http/exposed-panels/google-adk-api-exposed.yaml
http/exposed-panels/google-adk-webui-exposed.yaml
http/exposed-panels/wingftp-panel.yaml
http/technologies/wordpress/plugins/blocksy-companion.yaml
http/technologies/wordpress/plugins/gosmtp.yaml
http/technologies/wordpress/plugins/honeypot.yaml
http/technologies/wordpress/plugins/pagelayer.yaml
http/technologies/wordpress/plugins/siteseo.yaml
http/technologies/wordpress/plugins/unlimited-elements-for-elementor.yaml
+2 -2
View File
@@ -44,8 +44,8 @@ An overview of the nuclei template project, including statistics on unique tags,
|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
| cve | 3225 | dhiyaneshdk | 1866 | http | 8825 | info | 4118 | file | 435 |
| panel | 1327 | daffainfo | 868 | cloud | 657 | high | 2423 | dns | 26 |
| xss | 1246 | princechaddha | 806 | file | 435 | medium | 2339 | | |
| wordpress | 1168 | dwisiswant0 | 806 | dast | 255 | critical | 1391 | | |
| xss | 1246 | dwisiswant0 | 806 | file | 435 | medium | 2339 | | |
| wordpress | 1168 | princechaddha | 806 | dast | 255 | critical | 1391 | | |
| exposure | 1094 | ritikchaddha | 633 | workflows | 202 | low | 318 | | |
| wp-plugin | 1023 | pussycat0x | 519 | code | 174 | unknown | 54 | | |
| osint | 810 | pikpikcu | 352 | network | 141 | | | | |
+1 -1
View File
@@ -1 +1 @@
{"tags":[{"name":"cve","count":3225},{"name":"panel","count":1327},{"name":"xss","count":1246},{"name":"wordpress","count":1168},{"name":"exposure","count":1094},{"name":"wp-plugin","count":1023},{"name":"osint","count":810},{"name":"tech","count":782},{"name":"lfi","count":772},{"name":"rce","count":770},{"name":"misconfig","count":747},{"name":"devops","count":738},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":573},{"name":"packetstorm","count":552},{"name":"wpscan","count":534},{"name":"cve2021","count":513},{"name":"cve2022","count":512},{"name":"cve2023","count":488},{"name":"detect","count":486},{"name":"sqli","count":484},{"name":"cve2024","count":462},{"name":"login","count":446},{"name":"unauth","count":431},{"name":"authenticated","count":422},{"name":"kev","count":405},{"name":"intrusive","count":398},{"name":"file","count":377},{"name":"oast","count":276},{"name":"default-login","count":275},{"name":"cve2020","count":274},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":216},{"name":"malware","count":213},{"name":"token","count":211},{"name":"azure","count":210},{"name":"osint-social","count":210},{"name":"","count":204},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"auth-bypass","count":183},{"name":"cve2019","count":182},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"code","count":157},{"name":"redirect","count":156},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":139},{"name":"security","count":133},{"name":"router","count":130},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"cve2025","count":94},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":83},{"name":"local","count":81},{"name":"privesc","count":81},{"name":"takeover","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":78},{"name":"js","count":75},{"name":"windows","count":74},{"name":"cisco","count":73},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"windows-audit","count":70},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"cve2015","count":61},{"name":"alibaba","count":61},{"name":"cve2016","count":60},{"name":"atlassian","count":59},{"name":"detection","count":59},{"name":"file-upload","count":59},{"name":"google","count":57},{"name":"vmware","count":57},{"name":"c2","count":57},{"name":"audit","count":55},{"name":"deserialization","count":53},{"name":"dast","count":51},{"name":"cve2014","count":50},{"name":"php","count":50},{"name":"logs","count":50},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"ssh","count":47},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"vulhub","count":46},{"name":"aem","count":46},{"name":"misc","count":46},{"name":"cnvd","count":46},{"name":"ssti","count":46},{"name":"osint-gaming","count":45},{"name":"injection","count":45},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"plugin","count":44},{"name":"ssl","count":43},{"name":"oa","count":43},{"name":"springboot","count":43},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"osint-porn","count":42},{"name":"osint-hobby","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"postgresql","count":39},{"name":"miscellaneous","count":39},{"name":"info-leak","count":39},{"name":"dlink","count":39},{"name":"sap","count":38},{"name":"k8s-cluster-security","count":37},{"name":"api","count":37},{"name":"jira","count":37},{"name":"cti","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"devsecops","count":34},{"name":"networking","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":33},{"name":"fuzz","count":33},{"name":"dns","count":32},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"printer","count":31},{"name":"vpc","count":31},{"name":"ec2","count":30},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"prestashop","count":29},{"name":"gke","count":29},{"name":"admin","count":29},{"name":"yonyou","count":28},{"name":"manageengine","count":28Line truncated
{"tags":[{"name":"cve","count":3225},{"name":"panel","count":1327},{"name":"xss","count":1246},{"name":"wordpress","count":1168},{"name":"exposure","count":1094},{"name":"wp-plugin","count":1023},{"name":"osint","count":810},{"name":"tech","count":782},{"name":"lfi","count":772},{"name":"rce","count":770},{"name":"misconfig","count":747},{"name":"devops","count":738},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":573},{"name":"packetstorm","count":552},{"name":"wpscan","count":534},{"name":"cve2021","count":513},{"name":"cve2022","count":512},{"name":"cve2023","count":488},{"name":"detect","count":486},{"name":"sqli","count":484},{"name":"cve2024","count":462},{"name":"login","count":446},{"name":"unauth","count":431},{"name":"authenticated","count":422},{"name":"kev","count":405},{"name":"intrusive","count":398},{"name":"file","count":377},{"name":"oast","count":276},{"name":"default-login","count":275},{"name":"cve2020","count":274},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":238},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":216},{"name":"malware","count":213},{"name":"token","count":211},{"name":"osint-social","count":210},{"name":"azure","count":210},{"name":"csp-bypass","count":204},{"name":"","count":204},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"iot","count":184},{"name":"cve2018","count":184},{"name":"auth-bypass","count":183},{"name":"cve2019","count":182},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"code","count":157},{"name":"keys","count":156},{"name":"redirect","count":156},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"ssrf","count":144},{"name":"tcp","count":139},{"name":"security","count":133},{"name":"router","count":130},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":119},{"name":"phishing","count":117},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"cve2025","count":94},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":83},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"local","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":78},{"name":"js","count":75},{"name":"windows","count":74},{"name":"cisco","count":73},{"name":"enum","count":72},{"name":"k8s","count":71},{"name":"windows-audit","count":70},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"cve2016","count":60},{"name":"file-upload","count":59},{"name":"detection","count":59},{"name":"atlassian","count":59},{"name":"google","count":57},{"name":"c2","count":57},{"name":"vmware","count":57},{"name":"audit","count":55},{"name":"deserialization","count":53},{"name":"dast","count":51},{"name":"cve2014","count":50},{"name":"php","count":50},{"name":"logs","count":50},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"ssh","count":47},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"vulhub","count":46},{"name":"misc","count":46},{"name":"ssti","count":46},{"name":"cnvd","count":46},{"name":"aem","count":46},{"name":"osint-gaming","count":45},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"jndi","count":44},{"name":"plugin","count":44},{"name":"ssl","count":43},{"name":"springboot","count":43},{"name":"oa","count":43},{"name":"osint-porn","count":42},{"name":"osint-hobby","count":42},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":40},{"name":"miscellaneous","count":39},{"name":"dlink","count":39},{"name":"info-leak","count":39},{"name":"postgresql","count":39},{"name":"sap","count":38},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"cti","count":37},{"name":"api","count":37},{"name":"wp-theme","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"networking","count":34},{"name":"devsecops","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":33},{"name":"fuzz","count":33},{"name":"dns","count":32},{"name":"nginx","count":31},{"name":"vpc","count":31},{"name":"printer","count":31},{"name":"osint-tech","count":31},{"name":"osint-coding","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"ec2","count":30},{"name":"admin","count":29},{"name":"gke","count":29},{"name":"prestashop","count":29},{"name":"tomcat","count":28},{"name":"proxy","count":28},{"namLine truncated
+6676 -6676
View File
File diff suppressed because it is too large. Load diff
+2 -2
View File
@@ -2,8 +2,8 @@
|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
| cve | 3225 | dhiyaneshdk | 1866 | http | 8825 | info | 4118 | file | 435 |
| panel | 1327 | daffainfo | 868 | cloud | 657 | high | 2423 | dns | 26 |
| xss | 1246 | princechaddha | 806 | file | 435 | medium | 2339 | | |
| wordpress | 1168 | dwisiswant0 | 806 | dast | 255 | critical | 1391 | | |
| xss | 1246 | dwisiswant0 | 806 | file | 435 | medium | 2339 | | |
| wordpress | 1168 | princechaddha | 806 | dast | 255 | critical | 1391 | | |
| exposure | 1094 | ritikchaddha | 633 | workflows | 202 | low | 318 | | |
| wp-plugin | 1023 | pussycat0x | 519 | code | 174 | unknown | 54 | | |
| osint | 810 | pikpikcu | 352 | network | 141 | | | | |
+2 -2
View File
@@ -10,7 +10,7 @@ info:
- https://github.com/vulhub/vulhub/tree/master/openssl/CVE-2014-0160
metadata:
verified: true
tags: cve,cve2014,openssl,heartbleed,code
tags: cve,cve2014,openssl,heartbleed,code,kev
variables:
url: "{{RootURL}}"
@@ -135,4 +135,4 @@ code:
- type: dsl
dsl:
- "contains(response,'server is vulnerable')"
# digest: 4a0a00473045022100dbbea58d04f9d75d0256102028ede5d7bf09a90175cb7dfcc7a394a9cb017e4c02205fdba48a22acce8f57cc53b0e6e2a79711a5f7d8515c4bce365d17d7b5048d56:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100ed75e4d98947fd01fbc7873eeb6436b559a749bb88a5a85f71fef8c2f83f9e48022100cb170dc3f8592781394acbba1560953c29e7b0b1d36c191aee134aa6d178aa74:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -15,8 +15,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2017-1000353
cwe-id: CWE-502
epss-score: 0.97201
epss-percentile: 0.99862
epss-score: 0.94421
epss-percentile: 0.99980
cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
metadata:
vendor: jenkins
@@ -104,4 +104,4 @@ code:
dsl:
- 'contains(interactsh_protocol, "dns")'
condition: and
# digest: 4a0a00473045022003497add318e43154d20f752633565cadb8c406ddac3e6661b034e20594acfc1022100d947b1c765918742118b4ec4c926376292eb19715157a299d04aa01aab3fa1d6:922c64590222798bb761d5b6d8e72950
# digest: 4a0a004730450221008ad7ac179e8f3a0e00ba3b55bbcd325bc227198722b23a0dbe8a67a6612064aa02205d4644f6641fec1f795b5e8798530e4fda4a73f321b2e9d982bcc104a3218ae5:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -17,6 +17,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2019-0604
cwe-id: CWE-20
epss-score: 0.94411
epss-percentile: 0.99974
metadata:
verified: true
vendor: microsoft
@@ -152,4 +154,4 @@ code:
- 'contains(interactsh_protocol, "dns")'
- 'contains(interactsh_request, hex_encode(marker))'
condition: and
# digest: 490a00463044022069d81fdb4bdb4d4192e579e3a0a916d6b87e2b353568c031b5c72108768c76ee02202d626dd9675124c44d8ef28ef448734a9425c32f2eaacf7623a23747d14c330a:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022022019f9c11593b4c5a1f55755d532f6a64858d80153beb783f2c2d61684e0439022100fd41aa3e2ae1ad5d411c2c569383a2498ebf4a48cb1a9cf01f89748879c446c7:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 8.8
cve-id: CVE-2019-14287
cwe-id: CWE-755
epss-score: 0.30814
epss-percentile: 0.96854
epss-score: 0.84563
epss-percentile: 0.99279
cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
metadata:
verified: true
@@ -47,4 +47,4 @@ code:
- '!contains(code_1_response, "root")'
- 'contains(code_2_response, "root")'
condition: and
# digest: 490a00463044022100b66bc431046c222bdbdf17c5c6b5c9743d91f902f877967c4434d46ff44bf79c021f498f3f2a5efedc922b9a142b06d7578ca7f5c9413b964c46a676b14d2f4dfa:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402203ef02b5bc66bde9a84033a2d0eb02c7b2e73e3277c34377c90de755624be9ba6022055e7503686510f19241007aa2443ba097120831bbe89ba7526451d5f3aa95896:922c64590222798bb761d5b6d8e72950
+2 -2
View File
@@ -16,7 +16,7 @@ info:
cve-id: CVE-2020-0646
cwe-id: CWE-91
epss-score: 0.92775
epss-percentile: 0.99747
epss-percentile: 0.99755
cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
metadata:
verified: true
@@ -102,4 +102,4 @@ code:
- 'contains(content_type, "text/xml")'
- 'status_code == 200'
condition: and
# digest: 4a0a00473045022100b6c2748a74cf076796ab726f2c2026ed63f45760043398ddb8f5b684499bca0f02201adbb3e5bedc567548b48547ac54d9a1e59c2f55ca2cb8bc107511bb8f798f2b:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100a9c7370f5d64f484afc46075695941e15917d5a0687dd077ae6699501475bc1c02207a3961cc5b43a81ff13243b2dbb044a37081cf76fead5b7be2c772e481685c5c:922c64590222798bb761d5b6d8e72950
+2
View File
@@ -10,6 +10,8 @@ info:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss-score: 7.5
cve-id: CVE-2020-13935
epss-score: 0.91885
epss-percentile: 0.99681
reference:
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 7.8
cve-id: CVE-2021-3156
cwe-id: CWE-193
epss-score: 0.97085
epss-percentile: 0.99757
epss-score: 0.92019
epss-percentile: 0.99693
cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
metadata:
verified: true
@@ -40,4 +40,4 @@ code:
- "malloc(): memory corruption"
- "Aborted (core dumped)"
condition: and
# digest: 490a00463044022003e9a47a2c4c44efd51b49bbac2f179b9affcc5acfca59cac2b0b120cef766ba0220690376c3929640e6e24b046b094bc38eb63e08f4c2914c732e04919353394a1f:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502203288bc289d0cc0f4e06e605006f21fa1933c3a8a43067f2e9217000a34b340ae022100eb4c9a1fad050dd80783cfcff25e73bc958d1ad84a2f6f09fcbf1c0deebe680c:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 7.8
cve-id: CVE-2023-2640
cwe-id: CWE-863
epss-score: 0.00232
epss-percentile: 0.60636
epss-score: 0.91874
epss-percentile: 0.99680
cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
metadata:
verified: true
@@ -55,4 +55,4 @@ code:
- '!contains(code_1_response, "(root)")'
- 'contains(code_2_response, "(root)")'
condition: and
# digest: 4a0a00473045022100af1ce9e558408f86de2a92c299f2c032d05d4c87ca0b3b94e5372325c57a6247022018cc3e6806b89d0ab44dd51123fc94309a65fcb8b07605f505d528c67faa4862:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502202809a713e4b7f0f60945476a6178a11001fed63e5a210c5f7d1e3051d0f2d532022100c48469b0082d1264875fcb51ece29a27c1a5ecc9513ccca86afd183931ae3472:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2023-49105
cwe-id: CWE-287
epss-score: 0.18166
epss-percentile: 0.96172
epss-score: 0.86872
epss-percentile: 0.99395
cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
metadata:
max-request: 2
@@ -90,4 +90,4 @@ http:
- type: dsl
dsl:
- '"Username => "+ username'
# digest: 4b0a0048304602210097de106f56df20d4649d793b15fa2d3f84941e9ce92c24229d036e6b293a3d3a022100d810cbc181ba167025440b9de7b86d072c009e244ce2abd4e4aed6ab1599d1ce:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402204b1fb18af3e1a3a93ddf533a7112f566b1c32c20d54fce52634df059c876cd060220684fd961920c7f143e93d510a7e4219626c8ef2291c908ffecbb8a92171f9185:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 7.8
cve-id: CVE-2023-4911
cwe-id: CWE-787,CWE-122
epss-score: 0.0171
epss-percentile: 0.87439
epss-score: 0.66736
epss-percentile: 0.98452
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -39,4 +39,4 @@ code:
- type: word
words:
- "139" # Segmentation Fault Exit Code
# digest: 4b0a004830460221009b0b0cfac42037ebc60fb784afe5b4b70d62670e925e5b173d8e9e1e88fdc163022100edfb6d5010a063cfdbe507710c75ef7c530b946d363571fad08d504e9e519505:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502207a6e5753b4c34b6c6a6b114a627b1024aea6e7ffaf398b1a92eb895c3a0449b9022100e7d7bde1dcc8c8248fa38491377b58370af797f1769f84f3be87a1fa8e672445:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 7.8
cve-id: CVE-2023-6246
cwe-id: CWE-787,CWE-122
epss-score: 0.0077
epss-percentile: 0.80859
epss-score: 0.22699
epss-percentile: 0.95613
cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -39,4 +39,4 @@ code:
- type: word
words:
- "127" # Segmentation Fault Exit Code
# digest: 490a00463044022067d33f4da6f38d0bbdd03910db3f757750cd7d17e8865d79a7f6dc3b68b2367702207a1573a717bd2ecba367dfdee834be3861b73053905b847e9199345d993f7acd:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220435fc0f1f42662dd77393d370309115320794f7957843c0ff1ef4c0e68d5566402200e729fedbc5915a5e9a5c33cd70ccff6646981ea2ae405bb1341c83e0b228b08:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -13,8 +13,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2024-10443
cwe-id: CWE-77
epss-score: 0.02427
epss-percentile: 0.84387
epss-score: 0.69629
epss-percentile: 0.98573
cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
metadata:
verified: true
@@ -54,4 +54,4 @@ code:
part: interactsh_protocol # Confirms the HTTP Interaction
words:
- "dns"
# digest: 4a0a00473045022100f541247d987a9e0240988176fd4eab32d5d1bb5786cb57757b66812cc52804fa022046cdeedbf8367a55b9eea6faa7ff8bfa9a159a7c456af48d8e50e69f8e0f547c:922c64590222798bb761d5b6d8e72950
# digest: 4a0a004730450220238322406ea7b36d09adcd8d11555a98663066124719295b82627c0c6aa649c602210097fd42ed176237bd31b1b6fe4b675eb74f378636c66888f6578c5f20d49e8af4:922c64590222798bb761d5b6d8e72950
+4 -2
View File
@@ -13,12 +13,14 @@ info:
cvss-score: 9.8
cve-id: CVE-2024-12356
cwe-id: CWE-77
epss-score: 0.93590
epss-percentile: 0.99831
cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
metadata:
vendor: beyondtrust
product: privileged_remote_access
verified: true
tags: cve,cve2024,beyondtrust,rce,remote-support,privileged-remote-access
tags: cve,cve2024,beyondtrust,rce,remote-support,privileged-remote-access,kev
code:
- engine:
@@ -35,4 +37,4 @@ code:
words:
- "0 success"
- "1 try again later"
# digest: 4b0a004830460221009b992dc11657502934210c647c8a324000984f2ced04da26d5afb3e8cc3a2f9d02210098f750c74fcb8749b28d18e1077b38d9d1a8c6ca6d00b10155f987033cee4171:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100be13ba221189875a5c3c181eb1e6c5d7c4806c31798dc6f540657279fac5b029022031676609cf3da0030625ce6aac0a33787770a4d084ec52ac9f58d0faa903025f:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 9.1
cve-id: CVE-2024-22120
cwe-id: CWE-20
epss-score: 0.00043
epss-percentile: 0.09568
epss-score: 0.93881
epss-percentile: 0.99865
metadata:
max-request: 1
vendor: zabbix
@@ -71,4 +71,4 @@ code:
- type: word
words:
- "Vulnerable to CVE-2024-22120"
# digest: 490a004630440220373630574dc675bb0fb8395e3ba509866bb2524b66ba5af917e1c88af91ec0aa022072b103b17bfeb7f48ed7ba168e35269ee51e499398be47a1c2f98f07cb4cd689:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022057371395d4fb23fb810c20049a9d700a8284af6c1bc84864c23f1b4470dc4583022100f4d401098a82c09507f92f49757fb5d6085c9739a37aabc3f9ba8dcd894bdfa8:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 10
cve-id: CVE-2024-3094
cwe-id: CWE-506
epss-score: 0.00079
epss-percentile: 0.32887
epss-score: 0.84011
epss-percentile: 0.99254
cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
metadata:
verified: true
@@ -59,4 +59,4 @@ code:
- type: dsl
dsl:
- response
# digest: 4a0a004730450221009abe47857ffdb332e0e64304eac070593121f5ed53dddca447b831feceb14de10220054bdf467470183f86c9da127ed80e2e19154c35e6fd7f0e9da3cbb4d5e4b866:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100f7234c73aae801d78da251277aec0c21a4952b8b344944b3892eee84ec5891ae0221008d992982b582811cdd8173176149ef196cc6f7b672fcf16d10c05aab8badd9db:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -10,6 +10,8 @@ info:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss-score: 7.5
cve-id: CVE-2024-4340
epss-score: 0.15598
epss-percentile: 0.94407
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2024-4340
tags: cve,cve2024,py,code,dos,python,sqlparse
@@ -27,4 +29,4 @@ code:
part: stderr
words:
- "RecursionError: maximum recursion depth exceeded"
# digest: 490a0046304402201ac09f592d24f7e3d3087a1f7fbdb85b68416f74d0550fe9d9d9d41898a7b27b02206111d2729c3a07e5e63866a2ec73d167b64e612581728883cb8966797b137cf3:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402204fca66bc1127003bf7091c3ef4aa8c9a979c22405fb23f6e34ed6ef18a8b0daa0220188f7df879246724eac3b609b7bba222ff83e2a839029e7a0ef168c88260941c:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -20,6 +20,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2024-45409
cwe-id: CWE-347
epss-score: 0.16139
epss-percentile: 0.94531
metadata:
verified: true
shodan-query: http.title:"GitLab"
@@ -121,4 +123,4 @@ http:
- type: kval
kval:
- _gitlab_session
# digest: 4a0a0047304502200ca1bbbc60fa2debbed3a416665eacb5232cea3b028b9da309258483b69822d6022100b0184d0a81fb72e2e32d58323bb81aa53d24b1c5fcd038771a71f8ff000e3ee6:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402201e63c308fefaaa4d4ba99b5a7c2ea3d7dcdf5544dc8d4a1ae1a0fbd532d7241702207232eaea82be593da580ba735e84de2153ee1708552ae08603c4c7237f2e1112:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -17,6 +17,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2024-55556
cwe-id: CWE-502
epss-score: 0.80857
epss-percentile: 0.99096
metadata:
verified: true
max-request: 2
@@ -191,4 +193,4 @@ http:
- type: status
status:
- 500
# digest: 490a0046304402204698451453cf480c6f4c8e276ddf0d9380a61c999a65ec0d29c5ed8490864e9e02205439af80b227f33a6378587084d8d95d7a50df8523a6d8f338a2561adf63ebc1:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100e75d786df30fc6d158bb38bc2b13a5af3c2e27174c1617fe01b419f3a5d69b57022100840b6aaccec646d85c578e77492eda810bfb731287ba8520e5d657e92f883297:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -21,6 +21,8 @@ info:
cvss-score: 6.8
cve-id: CVE-2024-56331
cwe-id: CWE-22
epss-score: 0.41406
epss-percentile: 0.97262
metadata:
verified: true
shodan-query: http.title:"Uptime Kuma"
@@ -122,4 +124,4 @@ code:
- type: word
words:
- "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
# digest: 4a0a00473045022100df7d5d216b87880a14cc83c6a75207c8abe35918c11518caf6cc303812f77d7102202822e8fce807e7f5e5015788df46b6ecf677ff6ff2dcb6e1e3da8d3976b3ad45:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220767c6864cb0310b6d63e766a5284e127185a790ded13671c3b33ee3ae955d86a02202e855684ba68b62411f6e36c7e6c472bfbd78ce3f6729980b57f92116bca9a5c:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 9.3
cve-id: CVE-2025-25291
cwe-id: CWE-347
epss-score: 0.00655
epss-percentile: 0.6872
epss-score: 0.01703
epss-percentile: 0.81527
metadata:
verified: true
vendor: gitlab
@@ -78,4 +78,4 @@ http:
- type: kval
kval:
- _gitlab_session
# digest: 490a00463044022004b71e49683e8e0fb5555bb3dd0c9f36c4b0804a6cd6e14e8c4c2664f14980df022061a0dd50918227101dcabe92ec86d4c56b40bdc98d8c9ffb396562bfc9e90887:922c64590222798bb761d5b6d8e72950
# digest: 490a00463044022100be3b0643c89a1ddcd15aa06afc686f3efb80fa245984ce21ca1b4275c74d42a2021f4b0e28ee37a26ab75834991f37b275727fac03c60f0170a2e59e232ae078d8:922c64590222798bb761d5b6d8e72950
+4 -4
View File
@@ -20,13 +20,13 @@ info:
cvss-score: 10
cve-id: CVE-2025-32433
cwe-id: CWE-306
epss-score: 0.00386
epss-percentile: 0.58724
epss-score: 0.55376
epss-percentile: 0.97930
metadata:
verified: true
max-request: 1
shodan-query: "Erlang OTP"
tags: cve,cve2025,erlang,otp,ssh,rce,oast
tags: cve,cve2025,erlang,otp,ssh,rce,oast,kev
variables:
OAST: "{{interactsh-url}}"
@@ -172,4 +172,4 @@ code:
dsl:
- 'contains(interactsh_protocol, "dns")'
condition: and
# digest: 4b0a00483046022100b8ef2c0e0e8c218076ba845e8b0334ee9a4bbe5430eb84597a96d40c403073ad022100d73b311fc1bb3404a0aea728f335bbe94e624e7a5e82a8d156f740510d82042c:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502207edfd6f617b697c540c8375a5278b5c1016c928b22d041e1dc19ddfdad65d43b022100a4785eb798107b1413fd119e65a851be94361018e5eb785f393d26feed858cc1:922c64590222798bb761d5b6d8e72950
+2
View File
@@ -3103,6 +3103,8 @@
{"ID":"CVE-2025-47423","Info":{"Name":"Personal Weather Station Dashboard 12 - Directory Traversal","Severity":"high","Description":"Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.\n","Classification":{"CVSSScore":"5.8"}},"file_path":"http/cves/2025/CVE-2025-47423.yaml"}
{"ID":"CVE-2025-47539","Info":{"Name":"Eventin \u003c= 4.0.26 - Privilege Escalation","Severity":"critical","Description":"The Eventin WordPress plugin before 4.0.27 suffers from an unauthenticated privilege escalation vulnerability. Due to a missing permission check in the a REST API endpoint, unauthenticated attackers can import users with arbitrary roles, including administrator, leading to full site compromise.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-47539.yaml"}
{"ID":"CVE-2025-47646","Info":{"Name":"PSW Front-end Login \u0026 Registration 1.13 - Weak Password Recovery","Severity":"critical","Description":"PSW Front-end Login \u0026 Registration plugin for WordPress contains a weak password recovery mechanism that can be exploited by unauthenticated attackers. This vulnerability affects versions through 1.13 and allows attackers to potentially gain unauthorized access.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-47646.yaml"}
{"ID":"CVE-2025-47812","Info":{"Name":"Wing FTP Server \u003c= 7.4.3 - Remote Code Execution","Severity":"critical","Description":"Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution (RCE) flaw (CVE-2025-47812).\nThe vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection\ninto session files. These injected session files are executed when accessing authenticated endpoints such as /dir.html, resulting\nin arbitrary command execution with elevated privileges. This attack is possible only when anonymous login is enabled on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-47812.yaml"}
{"ID":"CVE-2025-47813","Info":{"Name":"Wing FTP Server \u003c= 7.4.3 - Path Disclosure via Overlong UID Cookie","Severity":"medium","Description":"Wing FTP Server versions prior to 7.4.4 are vulnerable to an authenticated information disclosure vulnerability (CVE-2025-47813).\nThe vulnerability occurs due to improper validation of the 'UID' session cookie in the /loginok.html endpoint. Supplying an\noverlong UID value causes the server to respond with an error that includes the full local filesystem path. This can aid in further\nexploitation (e.g., CVE-2025-47812) by revealing the application’s file system layout.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-47813.yaml"}
{"ID":"CVE-2025-47916","Info":{"Name":"Invision Community \u003c=5.0.6 Unauthenticated RCE via Template Injection","Severity":"critical","Description":"Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller (/applications/core/modules/front/system/themeeditor.php), where a protected method named customCss can be invoked by unauthenticated users. This method passes the value of the content parameter to the Theme::makeProcessFunction() method, which is evaluated by the template engine. Accordingly, unauthenticated attackers can inject and execute arbitrary PHP code by providing crafted template strings.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-47916.yaml"}
{"ID":"CVE-2025-48828","Info":{"Name":"vBulletin replaceAdTemplate - Remote Code Execution","Severity":"critical","Description":"vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution (RCE) vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted \u003cvb:if\u003e conditional that executes arbitrary PHP code via passthru($_POST[\u003cparam\u003e]), and triggering it with a second request to ajax/render/ad_\u003clocation\u003e, attackers can run arbitrary commands on the server as the webserver user.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-48828.yaml"}
{"ID":"CVE-2025-49113","Info":{"Name":"Roundcube Webmail - Remote Code Execution","Severity":"critical","Description":"Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-49113.yaml"}
+1 -1
View File
@@ -1 +1 @@
707c432e3bcbd75c3ea29b5e2c389c0c
f49818993b002ec6c2bd227c0a16b3f4
+3 -1
View File
@@ -16,6 +16,8 @@ info:
cvss-score: 7.5
cve-id: CVE-2018-19518
cwe-id: CWE-88
epss-score: 0.93964
epss-percentile: 0.99875
metadata:
max-request: 1
confidence: tenative
@@ -47,4 +49,4 @@ http:
part: interactsh_request
words:
- "User-Agent: curl"
# digest: 4b0a004830460221008543f7f2f49f049446873dd3c5bc4fb5a4a615e4633405b40698ddf599348551022100ea2a4180689633d4ed52d2be2b916ed056f3a39bdca0a8511dce2dfb572efe27:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100f49d06537ed8ad00c2c83083d49e4676200bf096d2312f819280bbb90c7d7950022041ed93b924325ee5bec6087d2ad160b10fe25b492fc0cbcbd0bc5d52457548fe:922c64590222798bb761d5b6d8e72950
+4 -2
View File
@@ -16,10 +16,12 @@ info:
cvss-score: 9
cve-id: CVE-2021-45046
cwe-id: CWE-502
epss-score: 0.94340
epss-percentile: 0.99946
metadata:
max-request: 1
confidence: tenative
tags: cve,cve2021,rce,oast,log4j,injection,dast
tags: cve,cve2021,rce,oast,log4j,injection,dast,kev
http:
- pre-condition:
@@ -60,4 +62,4 @@ http:
group: 1
regex:
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
# digest: 4b0a00483046022100ca8099b9b7303f2c34f8b7d2247e672dcdd92a64154deb9077154caea26f48500221009cd27f47753dc8386aee743ad51c6af60dbfad1a6cdf8c824e6cd21292b409f9:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100a8939bb9bc6ccb1b77d9f06e06ca0db8116d5c0b73361a660d9f9a7b3e104f20022100df3e7994cdfd47bb085887aab47b53e80f0fc32a8589e337462d83aa015db1c9:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2022-22965
cwe-id: CWE-94
epss-score: 0.97483
epss-percentile: 0.99971
epss-score: 0.94460
epss-percentile: 0.99992
cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -55,4 +55,4 @@ http:
words:
- "User-Agent: Java"
case-insensitive: true
# digest: 4a0a00473045022100d3db8bbbe0510ee216ae27652bf3f525d711497be0e6081b59f614e469c9e0c60220241efddbb889520b5d9ab9461c2c38205bf09157df2bb490ff7b22635313159b:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100915d17fb5a8d51b02db38fbe465d2de61ea80000397a7e86ebc49a4a9889412b022100820d081fc544c8aa867d04cfa1d0878008729d0459f08a166c459d7d16234099:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -16,6 +16,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2022-34265
cwe-id: CWE-89
epss-score: 0.92493
epss-percentile: 0.99731
tags: sqli,dast,vulhub,cve,cve2022,django
variables:
@@ -44,4 +46,4 @@ http:
- type: status
status:
- 500
# digest: 4a0a00473045022100f6bab24a5adea777e32c36b72485c0c608dbd991b9fb2c3fb4cdb52ad7fad6ae022076c4a91e8602b76617f44c2e3386f66d5e97a998ea4ea225a59fba922208f5c8:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220765d0b95605f033abc16dd45dbd789eab737ca6bd0c261eb914b8fcf1fc7f9e902202d55d0d730a667ad2683e84023cdea5e2896a20b863a8cf0a2865d081aaf575b:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -18,6 +18,8 @@ info:
cvss-score: 9.8
cve-id: CVE-2022-42889
cwe-id: CWE-94
epss-score: 0.94161
epss-percentile: 0.99906
metadata:
max-request: 1
confidence: tenative
@@ -66,4 +68,4 @@ http:
group: 1
regex:
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
# digest: 4b0a00483046022100b4b0c092617fb0da67a9ba1daba6fb05e46310943778a0100e477801d9d43ebe0221009ccfccf8b16a26ec3f4150c837ef6ed7f3daa564fcfdb6ff5e60165b82bc9913:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402200a540e28e8b29b0e815636f1bdf25ada03bef96b3a227f8db6984189302ef18f02200a3c13ec4b34fe4baf8cff6dec664f57ad70981271b2a7a601987ec1820de86d:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -18,8 +18,8 @@ info:
cvss-score: 7.3
cve-id: CVE-2024-2961
cwe-id: CWE-787
epss-score: 0.00046
epss-percentile: 0.17937
epss-score: 0.91735
epss-percentile: 0.99668
tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast
flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
- type: regex
regex:
- "root:x:0:0"
# digest: 4a0a00473045022005ac06f3907c82aa128062a389b80cc85af23809ac157a8bc32e9b33d24b0d0a022100cb8111c68f3945d3705e3633e48d3f5993f0222aeef990481d3b29e8c61e4929:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100f5fcacc5989901a485f707e1e046c0bb430448747aa9d1753933a28c4d863e75022100bf1a25c7f01875384e8ce50fdb752faf2f3d5336ede7c0491f8f74852d678a7d:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -23,4 +23,4 @@ dns:
- type: regex
regex:
- "v=BIMI1(.+)"
# digest: 4a0a00473045022054ea2995dedcce4cce31c27496f86b13955ca559d9e115fe76222ac64cc4621302210085481af2ecb00b994938c61f5fc950fd08803472e03648ba194640829db146bc:922c64590222798bb761d5b6d8e72950
# digest: 490a00463044021f3dec084b1d2c1f40d94cb514cd6098ab498130c1b40bd1030a95fbe476432f022100a42be26e7d98c478e4a0a97209ddea0a09b1c6e4b39cfabb29584fbdea08555a:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -35,4 +35,4 @@ dns:
group: 1
regex:
- "IN\\tNS\\t(.+)"
# digest: 4b0a00483046022100fbcff8f1b623f0e3447aa76e0b490f9121ca29aeeb51f1d29c8d8d975f94ba39022100c8c446adec58f2c573f0f34a58555f77dc5d8cfe402804268aa92e153d981363:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502210096d75201441ef6df04dab28e29fd600ddfbc601b470ffbc62fb71ec3d963e120022068d2ae1a12e41c4d3f9da888719af2b8bc21e72ad2f997f3fdeb43c3bb448387:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -81,4 +81,4 @@ dns:
name: "edge-cast"
words:
- "edgecastdns.net"
# digest: 4a0a00473045022100959a5dd7337d298c4966aa97031bdd934769ac61f8ac53ee93501a0180d186e6022042d6ee89b0e9da8cb771efa82fa86dc5a6897b405e59b26050b7d19bea303c5e:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022007358f350401a1b58f1ec32f847a4bdfb18e50d31b8fab1828c2b0c3fdf4f947022100c25b7a4d20d8a46b610a870f9ddbea4f3f12f526e57db0e00a73f45337dbfbdf:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -23,4 +23,4 @@ dns:
- type: regex
regex:
- "v=spf1(.+)"
# digest: 490a0046304402202689cb3ecdf3fb7f1991196610e0ddfb0ad6db7e40ae91ca63fdd012a8269f45022059caf7c9005fcedc7361e12cc2002fb09588e883b5e0ce2d74cd6ee271a54618:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502204c01508a4252bce667206d754ffed70a8d0cf3eb514703fe5842f02d5720c534022100b987bd973849478d4c59058624576c9806976d4b6e7514b352833b5369f7ebc1:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -218,4 +218,4 @@ dns:
name: "whimsical"
words:
- "whimsical"
# digest: 4a0a00473045022100d128ab17ee8d02b57c8a2f1c118775f6b70a347217e4db9b81c7ccca1aba0f93022029b717d888e8d7e3a761c0dc784c8518df862afb63e0e8c940e2a8d1061ecff7:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402200dae5dc0e8e008f0074bdc8fbe55d26fb5c96ae58f43710893555efbcb2724c302200e12c144c858b2c53080d8cade5eba414e6a7951d394c087429dd8922c3c4831:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -22,4 +22,4 @@ file:
- 'InvalidOperationException'
- 'UnauthorizedAccessException'
- 'NotFound'
# digest: 4a0a0047304502205a6f4bf294076b378a5bd3e65557c8ba155a7f0e9e76109fec0ec0e50e12d238022100e62246615353b646881ab54a982fb06dcb2cc6f8edc388df1fbd3ea7cf70973d:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100dec910af6434c193c5f733ffd89c161047ffc838eb5012281a3475d94aadafe80220654b83eebe67d34d91da8a8709c1cb1bb05bd3cd23aefaecde43e664d828d0a8:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -30,4 +30,4 @@ file:
- 'BadRequestError'
- 'MongoError'
- 'SequelizeDatabaseError'
# digest: 4b0a00483046022100adc26a7699b34f00e8ffd7d5c3ea4942936d68155b83dd1bc9c4bbabd7068dbd022100b7c61be76b3109175a1ae20d4ea5164e26cfcca6a8fd0ab1fcb60295df950685:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022053f139b0c7ac98002bb2f98cbf81064c0e83f458257755e346e366fbc8f2972b02210083d3f8e7e1fd0a73074abfee15d5aee0262a11bb3cc7604de8bd1d9926915b62:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -31,4 +31,4 @@ headless:
- type: status
status:
- 200
# digest: 4a0a0047304502204dcc39405b045a1b9d8171ef6380077c0cf615813abc1f81f5faaebb15511bcc022100d83f548a895b0795b67ea05abe4e1f966d8b80a4d133dddb458731443bfeef2e:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402203dd51450e01d8640405d801116b427f5707bf2d2ebd001511ec5f300ab5d7f1302205276f447a2b383ba799a55f8786e86be7874c45a6a6635477bc427eb5d2f8789:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2018-25031
cwe-id: CWE-20
epss-score: 0.00265
epss-percentile: 0.65516
epss-score: 0.81869
epss-percentile: 0.99147
cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
metadata:
verified: true
@@ -54,4 +54,4 @@ headless:
words:
- "swagger"
case-insensitive: true
# digest: 4a0a004730450220562625cf9d0b39525c5dea0c5f836c056faf8eaf4af1167015f8ecd599dda471022100ff45c3d91cd24bcb60b6dc6b97ba00415f73dec7cec12a2290e62d0c4e289b8a:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100a2f7e5ac70597ad87663ef0c9ad4bee161a599d2e03938161ace1128046c9b20022046775d61a5e4cae1d9c124ef010c9e100dcf6f7b6b078485fc0fe735de5c59d6:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
cvss-score: 6.1
cve-id: CVE-2022-29455
cwe-id: CWE-79
epss-score: 0.0019
epss-percentile: 0.56534
epss-score: 0.69783
epss-percentile: 0.98579
cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
metadata:
verified: true
@@ -52,4 +52,4 @@ headless:
words:
- "elementor"
case-insensitive: true
# digest: 490a004630440220602c65b98033eb217f85849d2f2f124d75439e00178c3544bdb4774eea850caf02203bb0d3421c9df657e3bc20ecded48468db5bc3cb91424bb28d5abc6ca6d3b7b6:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100c2fd9fc4a0789a1c7b95d4c984fecbd1f75987a198917b15db7b62868a38a083022100a5eeeed98eceab08457e1389b8147321f4b7e66ffc77684f3a4ddcfa533defd7:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -14,8 +14,8 @@ info:
cvss-score: 7.2
cve-id: CVE-2024-29882
cwe-id: CWE-79
epss-score: 0.00043
epss-percentile: 0.09568
epss-score: 0.02012
epss-percentile: 0.82957
metadata:
verified: true
max-request: 1
@@ -46,4 +46,4 @@ headless:
- "ConnectSRS</a>"
condition: or
case-insensitive: true
# digest: 4a0a00473045022100910e5ce652f76d349702c7adc5d5b6b479e14b984978fa2f86a47498f11167d2022000daa49aed583b6da8b47060d9389e38c4d7046e2304d059377360d1d199f89e:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402206cddf49edf926f4a2fc79e6bc3d44c28d92452607fab4a78c546667823eea63e022078814f733d0906b711afdbd5826bb664f3171ae8c38e5d175d567d52c877d89c:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
cvss-score: 7.2
cve-id: CVE-2024-38526
epss-score: 0.00045
epss-percentile: 0.16001
epss-score: 0.66721
epss-percentile: 0.98451
tags: cve,cve2024,supply-chain,polyfill
headless:
- steps:
@@ -60,4 +60,4 @@ headless:
- "union.macoms.la"
- "newcrbpc.com"
part: urls
# digest: 4a0a00473045022100ab5c8f20bf119770c476bcf509788840cc4b8027283c225e8e9c77229e207bc5022011da301a71875b08f2ef2e11457cb76b757c8e53122e82b859b747db224ec683:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100db8ee4bad1a3f649738173744c0b13228813c8f6149eed8ce1b9428955372d7a0221009d6fdcfee495e43dc703fb4ae3f9b8928359673160b77f0da6b553db315ad3d0:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -16,8 +16,8 @@ info:
cvss-score: 4.4
cve-id: CVE-2025-25062
cwe-id: CWE-79
epss-score: 0.04
epss-percentile: 11.4
epss-score: 0.38601
epss-percentile: 0.97094
cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
metadata:
max-request: 7
@@ -186,4 +186,4 @@ headless:
dsl:
- reflected_text_xss_type
- reflected_text_xss_message
# digest: 4a0a0047304502202a21d134e954969443587f1c8f07043ff530af431ecf2c68b90e6f73501d012802210087447ccb9fb5bd47c55c968e1bacdc968d0bdaa9f77b4f3f35aa412e751ed42f:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100a5afa1435b236d15615599536490803e61d1c57bd159c9b2a6d7c074e3204e3302207728ec9bdeffa792d62a6f7de273d13f778a88f935ffbeefb406321f35b0d011:922c64590222798bb761d5b6d8e72950
@@ -15,6 +15,8 @@ info:
cvss-score: 9.1
cve-id: CVE-2025-29927
cwe-id: CWE-285
epss-score: 0.93584
epss-percentile: 0.99830
metadata:
vendor: vercel
product: Next.js
@@ -53,4 +55,4 @@ headless:
- "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
- "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
condition: or
# digest: 4a0a00473045022100e7ef01315b5c9dff2e5567ad1421f5cf95ccaa62554a094e5faada3fe08261a10220611dab02751e9a58d17176f3632bd8a638191fc08abc6b7453a34abb9de3a5a0:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100ac16c24521b6360ac31bb606cdd5d22561a0167e15754eaaeec4787f65c638ba02206be9686219a9c2c21158e2e62acd2880dd2cbe0e89fba4180e1d9a9c1504d7c1:922c64590222798bb761d5b6d8e72950
+1 -1
View File
@@ -1 +1 @@
2.8.3
2.8.4
+1 -1
View File
@@ -1 +1 @@
4.4.27
4.4.28
+1 -1
View File
@@ -1 +1 @@
3.29.2
3.30.0
@@ -1 +1 @@
6.1.20
6.2.0
@@ -1 +1 @@
3.0.0
3.1.0
+1 -1
View File
@@ -1 +1 @@
21.0.0
21.1.0
@@ -1 +1 @@
2.4.2
2.4.3
+1 -1
View File
@@ -1 +1 @@
3.0.41
3.0.42
@@ -1 +1 @@
2.2.8
2.2.9
+1 -1
View File
@@ -1 +1 @@
14.7
14.8
+1 -1
View File
@@ -1 +1 @@
3.5.11
3.5.12
+1 -1
View File
@@ -1 +1 @@
5.12.8
5.12.9
+1 -1
View File
@@ -1 +1 @@
4.0.0
4.0.1
+1 -1
View File
@@ -1 +1 @@
11.0.0.3
11.0.0.4
@@ -1 +1 @@
4.11.15
4.11.17
@@ -1 +1 @@
1.0.247
1.0.248
@@ -1 +1 @@
6.13.2.1
6.14.0
@@ -1 +1 @@
9.5.0
9.6.0
@@ -1 +1 @@
3.0.6
3.0.7
+1 -1
View File
@@ -1 +1 @@
25.3.1
25.4
@@ -1 +1 @@
0.9.116
0.9.117
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 5
cve-id: CVE-2000-0114
cwe-id: NVD-CWE-Other
epss-score: 0.15958
epss-percentile: 0.95958
epss-score: 0.02800
epss-percentile: 0.85545
cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -44,4 +44,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a004730450221008f54c203a4eb6b4e7d422bab31617ee0c8f6a94b680752ed17616e6b0711a3130220044a58143970b8a3d2f602d3422de3c3471131cc8fa1e930cc18520d7e1962c1:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100f3a5e5052ec9628797b4a0195dc7dfdc41d8d4add40fcf444f5dd76289e248f60220663ea447f80771112856ef24f2e881f00c892440d3dbd1f627336ac9f72dd5b3:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 9.3
cve-id: CVE-2001-0537
cwe-id: CWE-287
epss-score: 0.87683
epss-percentile: 0.98644
epss-score: 0.93454
epss-percentile: 0.99813
cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
metadata:
verified: true
@@ -53,4 +53,4 @@ http:
- type: status
status:
- 200
# digest: 4b0a00483046022100afc7c731afad2248970b453f590c74a1550743ad33c733ec8cdb1280c40bc0b3022100f939193bb518fd589d14865a23945417345c4f11c7d35a38515bce88fce27849:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502203f8c7e914277bfd017e2f385cf283baaaf71711ca717a0e0d4f68aeb6a408d11022100e495a25d1e4c3df3d6a3d301feaa85ac14725231ba7258eaf8c7739885a292fd:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 7.5
cve-id: CVE-2002-1131
cwe-id: CWE-80
epss-score: 0.04774
epss-percentile: 0.92677
epss-score: 0.02453
epss-percentile: 0.84582
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
metadata:
max-request: 5
@@ -60,4 +60,4 @@ http:
- type: status
status:
- 200
# digest: 490a0046304402204c7dc475bf2191dc7d4205f7d9ac8692591bfc3309ce83cbaff50582d4ef4ed102205435d5f587fed8871b48937e85562a7cda2442ff61014d895e51badb33537114:922c64590222798bb761d5b6d8e72950
# digest: 490a00463044022061f41506e3a106d34ba9f5ead492c534de5628c45baa4b098997a3ae11da15dd022047c3a0ef5fe2e3702d467d576cacb456121430e471a65406a6025092bd097c58:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 6.8
cve-id: CVE-2004-0519
cwe-id: NVD-CWE-Other
epss-score: 0.02285
epss-percentile: 0.89406
epss-score: 0.00186
epss-percentile: 0.40980
cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -48,4 +48,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a00473045022100f78a8d897aa28c0c47112280df68043e3ff141b97b1a05aca36af43e614a114c02206f9ef394ee110452db0e12dd95668fd175fb2a7d5f152ebf8b194cab0eebaf9a:922c64590222798bb761d5b6d8e72950
# digest: 4b0a0048304602210088c29bd8341924dee96550f25c070c64b3ffbcdd4263658f6bedb37286c495e0022100bbaa969fc39a95abbf72a528b6fa73666362ac3af1d7ed94a39f972065c2edd7:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2004-1965
cwe-id: NVD-CWE-Other
epss-score: 0.0113
epss-percentile: 0.84626
epss-score: 0.00265
epss-percentile: 0.49964
cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -40,4 +40,4 @@ http:
part: header
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
# digest: 4a0a00473045022100f84083d58b2d871781c6d265978ee74b2e70991dd5399c50e9cfeb9444f2da47022047102d30874a358ee865967c889f1473e1a6406fd77db9b2c0be7c4cba0ffa79:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220598e404cc4d7910c237c51aa833b2e9da68ba17f2988b7fe82386439f87ec6fa0220460478ba743f5c90985861aa78158a71fc7dc344636fc79afbc273f914ac4584:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 5
cve-id: CVE-2005-2428
cwe-id: CWE-200
epss-score: 0.01188
epss-percentile: 0.85053
epss-score: 0.07654
epss-percentile: 0.91483
cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -44,4 +44,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a0047304502204db7cb4cd73bf68475be2974c1a99b836fa6c1ece81d597a27c5029b853819970221008b73212d2c8d95890c30830bbfc5c6fa83bf5b91d1f0fc0af048371991cda24c:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100886ef721c95f20e2e899cabd7a5d1f28af25ad28f3e5b127ac105501debc964802200fb26d3c4ca946bcba55ad4cad10fa0b537a7c4a6bef1414002696a4dd71e120:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 10
cve-id: CVE-2005-3344
cwe-id: NVD-CWE-Other
epss-score: 0.01539
epss-percentile: 0.87085
epss-score: 0.10150
epss-percentile: 0.92789
cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
metadata:
max-request: 2
@@ -47,4 +47,4 @@ http:
- type: status
status:
- 200
# digest: 4b0a004830460221008dde134d2f0e499b2402de324f72f11091b3ff11255327e250d55a98ea7e00b2022100de155d52a688e88e372b890e33d6f1ed734ae068664f6ce1fbb092bfe26cab93:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100eba37eb777f79438aa34370ec751417489fbdc27c9875b321dde0806ee141c3c022100e4b5f28d965fe4a0ab5489be0f19ba8552ee0a0c57405cea8348b327540bafdb:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -22,8 +22,8 @@ info:
cvss-score: 5
cve-id: CVE-2005-3634
cwe-id: NVD-CWE-Other
epss-score: 0.02843
epss-percentile: 0.90695
epss-score: 0.02140
epss-percentile: 0.83500
cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -45,4 +45,4 @@ http:
part: header
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
# digest: 4a0a00473045022100c119b14935460ddd5eed1e46576940d17658c5acdbd9def8ac5912024a4a86bc022014357b4898f46615291fa724d19fe5aaf92fc15a72c521f9322382730a302ed1:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402200a71076886733b957fe5ec2af43ca20c0bfcc4ef985474b7ac410b79ca19484c02206e7e5345f20a65009ae13dfddbf68937b6ff4503819bf72dc92b83bd25ddf504:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2005-4385
cwe-id: NVD-CWE-Other
epss-score: 0.00294
epss-percentile: 0.68633
epss-score: 0.00220
epss-percentile: 0.44836
cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -43,4 +43,4 @@ http:
- type: status
status:
- 200
# digest: 490a0046304402201dc377fe9eb8d660ca84d628ecff56a00bfbbd4d2886390f148aab88ad14ca6502206d477bd2d0a93c3a6c5e465edd8c63c764ba917f0b72f65c6a4651c78b1defc6:922c64590222798bb761d5b6d8e72950
# digest: 490a00463044022024de6f73185416c516398c724d12c4d7c3a27a26eafeda6c7c0a6e8f9db7709b02200bc9af502bb74e5ea36d4be547983c9714da9047b734277bee72b8d8d48fc2e0:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2006-1681
cwe-id: NVD-CWE-Other
epss-score: 0.01015
epss-percentile: 0.82067
epss-score: 0.00286
epss-percentile: 0.51865
cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -62,4 +62,4 @@ http:
- type: status
status:
- 200
# digest: 4b0a0048304602210099220370851d360dcc2112b19968336872b31286e6b36fdfb10bd789677e7d26022100b55e13e750cf697c662dc5d1f39be91ef4ef435640fd54fbd268286c0384e83d:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402205471b1ff22c7477bc6882f670e3ee625eb410ca2b066e93fc40b9a49fc0fbfda02204a356c53b1a7bfcc6700a3f245431d9577c670848200e57d520e0dda6c8527db:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 7.5
cve-id: CVE-2006-2842
cwe-id: CWE-22
epss-score: 0.28102
epss-percentile: 0.96839
epss-score: 0.00909
epss-percentile: 0.74870
cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -48,4 +48,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a00473045022100ef713ea083410c3bed3a81966b840683baf519ff17340696d94e435b710da61502204281f2d469bae015ff0bdb86d6b36fb02acf1b686281d76efb6c2ac84399a71b:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220356f2985899529b7495f141c558373414b15e565771f883f2309fdde8f57ffde022039f993cdd57a00c0e67428bd815efc6c6169f6ee204dc62b533d1fe285e4bc5b:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -16,8 +16,8 @@ info:
cvss-score: 6.8
cve-id: CVE-2007-0885
cwe-id: NVD-CWE-Other
epss-score: 0.0093
epss-percentile: 0.82973
epss-score: 0.03529
epss-percentile: 0.87213
cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -44,4 +44,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a00473045022100d4fd86b114dd20a6cad3c05ed8d6c4466de36e6b243ae9a3734a35c4d06dd38502200cf0ef63629f6a4cfcd848fa4a53f6c7c2eea9f96344eddc2c2749f3f00b4d9b:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402200293441ac871824246114c58a709dab200a052a03059f6b4253a4e8d9120042a02200912fd1f018c7cde1767f72502cae3b7bf9313d0e60f4faa255f7f9f7ec4b7e5:922c64590222798bb761d5b6d8e72950
+3 -1
View File
@@ -13,6 +13,8 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score: 7.2
cwe-id: CWE-79
epss-score: 0.89189
epss-percentile: 0.99515
metadata:
max-request: 1
verified: true
@@ -41,4 +43,4 @@ http:
- type: status
status:
- 200
# digest: 490a0046304402207aa82e86e579971f8779ff21649e34c827eb21246f5e6ab750b8ed8ee2b252f202202f87ae291c8a27943b32aacd491275a0cf58a6fa530d278108abf696b11ed75e:922c64590222798bb761d5b6d8e72950
# digest: 4a0a004730450221009b7ce2019233a1a4dab78f26dfa982683e34e9343e5149b17c4c7aeecb0e3c20022022448fad5fe11b5054733f026bf42e3ddcfcda5a781695de364556a9e2e4cb29:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 10
cve-id: CVE-2007-3010
cwe-id: CWE-20
epss-score: 0.97313
epss-percentile: 0.99874
epss-score: 0.94065
epss-percentile: 0.99890
cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
metadata:
verified: true
@@ -59,4 +59,4 @@ http:
- type: status
status:
- 200
# digest: 4b0a00483046022100bc6bf7bc469cbfbb969011b189a73d3729050f8f20017734caba7654a0b3e3c10221009a1901431d7cb8bb270b5c7e2d1407d9ee6a6615e1559b1c8f27f3cfb61d8afd:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100e049d9b1ddd06ff9d586414191f3665d44e3b3f29a4913cd653bbb0ba421867102203a976db1a2bc56b625c5d3b935986718a09b7b5f8daa714df1930eca654e96d7:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 5
cve-id: CVE-2007-4504
cwe-id: CWE-22
epss-score: 0.02171
epss-percentile: 0.89338
epss-score: 0.00063
epss-percentile: 0.19921
cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -42,4 +42,4 @@ http:
- type: status
status:
- 200
# digest: 4b0a00483046022100deeb4b915224e53d71b53fe9dfa45937fa95b10548167b9f7332303964ba8d94022100a4e0ec1855de9b3a881f2933c730faef2d924307336ded59ee647145a2285aa3:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100e3cb5319977a6a9d76783a9fd6f4dceaedd3048dcd4fbc4df1b05d074ba63609022100d7df5632a9677a5221468b759e0e976b30942f574994ce636e97bf3d7a3b76f7:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 6.8
cve-id: CVE-2007-4556
cwe-id: NVD-CWE-Other
epss-score: 0.21361
epss-percentile: 0.96419
epss-score: 0.02359
epss-percentile: 0.84290
cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -51,4 +51,4 @@ http:
- type: status
status:
- 200
# digest: 490a0046304402204b9c4d327d7a3c9a1dda2e01bd500a0ada5bef92cb938adaebae0a549c99afcd02203c6a764134ebf6feb0921172e788606af62c4dbc97f28a58fdaae4908c6a7bc8:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022006c91965807aad6244bd4fcfc839f8bba5283535f477a5027f1c2b7463c233a0022100fa9ae87402f2d18c6d046cd6d311f8b367a299d1758c3f4ae2995162459a663f:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2007-5728
cwe-id: CWE-79
epss-score: 0.0153
epss-percentile: 0.87042
epss-score: 0.00282
epss-percentile: 0.51310
cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -57,4 +57,4 @@ http:
- type: status
status:
- 200
# digest: 4b0a00483046022100df6acade92007acb47ffb1f65acdf8b1fea41cf7371cb94edf0d4efe7d91d125022100e07f26119926e8ad002a9c40e43aeb2a3441f64273dc2a271906e49042e6a82e:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022029b04d7527b85b77f305198f89b79b67231232e1f15d63e0123b7670955a8b04022100b05129b789e371c3992e80ecd582b120ab1bce2e0b682ee885907f0837fef3c0:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 7.5
cve-id: CVE-2008-1059
cwe-id: CWE-94
epss-score: 0.01493
epss-percentile: 0.86573
epss-score: 0.00265
epss-percentile: 0.49988
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -47,4 +47,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a00473045022013b337065b80985ac0751b8c173af5a5a871e504f8380a96ba5c959416c01c6b022100e77a854d6d88a1759053ea5b2393e56d19648ab396389c02295bdb58c7526416:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220094de0786719e62c94a9a80e9f7be780c8977383de319f67758a1b15fe4e1106022035064b1d996905b9fe260f6e055ce5107620a2896d1ede8375d7c331901cac0a:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2008-1061
cwe-id: CWE-79
epss-score: 0.00663
epss-percentile: 0.7961
epss-score: 0.00155
epss-percentile: 0.37282
cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
metadata:
max-request: 2
@@ -62,4 +62,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a004730450221009f949f57ce4bdcac136171e3ce41e5b0872a054942373c303ba78fa83738df8802205567d97f66053b5da6c80dec513145247f2732d01c3b635a258b4747632bac8c:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022066c7ebde1d72dabd468a9ccbd5bd958aaadac53f7618c21a7f26797d5ad21824022100d42720fdc45af712520c580bebe65c7d47eb63e63b57a100776a47b0d6ecd4ce:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2008-1547
cwe-id: CWE-601
epss-score: 0.03875
epss-percentile: 0.9108
epss-score: 0.65006
epss-percentile: 0.98376
cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
metadata:
max-request: 2
@@ -51,4 +51,4 @@ http:
part: header
regex:
- '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
# digest: 490a00463044022045ba34a1c0d8ff714d084b5ca3b820694483e6bc3b4cc7c95816fb1b91b2036602202a994e6879669ce8e55c4c027ad22f39f2bf6592be0afe58a66a58224d7499aa:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100ccc8fdd101d8bef238ebb2f62c88d0d4de78514e38dc68b973054d88901a6534022100a8ed6a5a0085277e51c3492fd9d06758866d857d159f2d3a9c83de5b40a778f5:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -18,8 +18,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2008-2398
cwe-id: CWE-79
epss-score: 0.00329
epss-percentile: 0.67909
epss-score: 0.00831
epss-percentile: 0.73651
cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -47,4 +47,4 @@ http:
- type: status
status:
- 200
# digest: 490a0046304402205134864368ccb4cab676cc16b45f8c3cabb0dbc97510d6abc4512e8673e1be5d02202e0b5e1cf07df7fb1a2a6a56c4d9219ce1a1e1d0f270e4775a3aeb2bcfcbfb1c:922c64590222798bb761d5b6d8e72950
# digest: 490a00463044022036afde93383e45ddae2d39d1c8493aa45346c0fc49397ec75e0fca7016051fbe022071edecdf81f559646264142636cfbb6d67e1848306dd44d211a1efb08db7d39f:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 6.8
cve-id: CVE-2008-2650
cwe-id: CWE-22
epss-score: 0.06344
epss-percentile: 0.93486
epss-score: 0.03520
epss-percentile: 0.87196
cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -48,4 +48,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a004730450221008e6e5ba0093aee9fb1c4858af106352cbc43209ef29a5ebb1ba17b10709e20450220451306c8bd198917a02bbf5d6fdd4227bc4477b18ec11fedc962ef339aabd429:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502203ee4722b9bc3f86d13f492fe8f28c7e9240cff0e9254d3c44bc584772ebfe3a6022100c4a3dbd47dcb2edd116be32239f4f0846e7aa1e6ed546863ee6d1112d1d1498b:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 9
cve-id: CVE-2008-4668
cwe-id: CWE-22
epss-score: 0.01018
epss-percentile: 0.83418
epss-score: 0.00276
epss-percentile: 0.50824
cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -43,4 +43,4 @@ http:
- type: status
status:
- 200
# digest: 490a00463044022023207d03c1bfaa267c692d1b97386f7447db4d95240ce037c24f1e1d90628a14022031aa4b71484a35dc80ad1fdcbebac65df2bade5f50478d95b438b068cc2a85c1:922c64590222798bb761d5b6d8e72950
# digest: 4a0a004730450220552fc4231924e143d1c6017e328fe5867c9cf8cd112849abc81079797a27df51022100f5572d7e467882078a33cb8324fc369c5f08f8af804b5b468726c544c1729967:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -17,8 +17,8 @@ info:
cvss-score: 5
cve-id: CVE-2008-4764
cwe-id: CWE-22
epss-score: 0.02135
epss-percentile: 0.89239
epss-score: 0.01921
epss-percentile: 0.82565
cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
metadata:
max-request: 1
@@ -40,4 +40,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a00473045022100f543c4ecb59a4c3b4e13353456dd59b40bceeda774c32375ec2b20fd66bcd46e02207cac7010096fdc36bf50eced5bd1677451b45840e000be2efaee198786c61f1e:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502202c7dfde9238ba3921fcc254103a3528df363b34324bb2228ff8d5d5a79171e910221009ad65c06e5e6ff2342d140a15ae3f7a957b3be8bbadddab04016dcdfdb530830:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2008-5587
cwe-id: CWE-22
epss-score: 0.02331
epss-percentile: 0.89734
epss-score: 0.01986
epss-percentile: 0.82836
cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -49,4 +49,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a0047304502204781c8800591e9787600b870e853a3a3f1f9c44d1297eca92366abc8afa57539022100dbeced77523d56c73470bd09fefb789f02e4e4ff466f14b30947255ce1d4b95e:922c64590222798bb761d5b6d8e72950
# digest: 490a00463044022041a0ad27e61970e7f6b1b81417087ee830e4f986ed52f64d292f24b5f07a0a3c022047363055a1033ac84c40dcdd314e1818475d91954468639b211c23c48a4c840b:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 5
cve-id: CVE-2008-6080
cwe-id: CWE-22
epss-score: 0.03314
epss-percentile: 0.9132
epss-score: 0.06300
epss-percentile: 0.90534
cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -42,4 +42,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a00473045022100e60b52403ca968b56428fbf8ae02f3d2df0abe3cb1a5056fcbaa333403ecd6130220127944d011764ec50f3922364fdac9f45144dd249bba7916880f318f3f7d9f34:922c64590222798bb761d5b6d8e72950
# digest: 4a0a0047304502207cab7f188986068ae71ebe05bdd580aa7607d10c89d214bde7f41f92805b1466022100f913822c3f037833c41d0114859f633f2cfeb08440ab0d1494035a7f691ee048:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 6.8
cve-id: CVE-2008-6172
cwe-id: CWE-22
epss-score: 0.00509
epss-percentile: 0.76498
epss-score: 0.07294
epss-percentile: 0.91241
cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -42,4 +42,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a0047304502201427c50730d5f7e468b09a197b9b9dab426b9d520110f9b213f74a15bad6ac49022100978c5f0b956a361fde327573305912ca40e887e403acfae5661c88cdc7ecd3ba:922c64590222798bb761d5b6d8e72950
# digest: 490a004630440220461d60ebf43e50e3eded78bde69d2bdba9ee79fd4983ffa09b100b45272c29b602204188ce7b86a6d907e6aeb9c738f2cf9a8a1368e0411a10f546f86c773bc9b272:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -19,8 +19,8 @@ info:
cvss-score: 5
cve-id: CVE-2008-6222
cwe-id: CWE-22
epss-score: 0.01302
epss-percentile: 0.85861
epss-score: 0.01954
epss-percentile: 0.82681
cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
metadata:
max-request: 1
@@ -42,4 +42,4 @@ http:
- type: status
status:
- 200
# digest: 4a0a0047304502210093dcb40a80d53b03279b539272f9c7b157fbe5b9f981720380651400c8d41f61022070a434b9bfdae7bdbc4f079b6a613192b217986ddab6f4db126b4dd9e1889ab0:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402203d956ac5c3c7b38c803d4b254b97f948f0aca8881d9455716bfb24cd79d459ec022056546cffa9dca77d3c60a3e68d3a5288d07c9b1ce756435aa99eff2ef55089b8:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2008-6465
cwe-id: CWE-79
epss-score: 0.00421
epss-percentile: 0.73765
epss-score: 0.00946
epss-percentile: 0.75387
cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
metadata:
verified: true
@@ -63,4 +63,4 @@ http:
- type: status
status:
- 200
# digest: 490a004630440220041fa6e65ba93d4c903226608d1c88929ab956d857417cbda6c9b45c35d05ccf02201fe8ae665b1de3153e8a3c65c65aba3105db58d34cfafc313c88e4af4afa0a24:922c64590222798bb761d5b6d8e72950
# digest: 4b0a00483046022100a8ddacfdb460740bcabd58529a78bc158aeabeff9c8ef5fd2db0d66963578e14022100993afa3340dd4699cdbfc50fcfa058be309cdd1ad10e82e82b4667b14bd21d63:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -20,8 +20,8 @@ info:
cvss-score: 5
cve-id: CVE-2008-6668
cwe-id: CWE-22
epss-score: 0.00359
epss-percentile: 0.72128
epss-score: 0.01077
epss-percentile: 0.76883
cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
metadata:
max-request: 2
@@ -45,4 +45,4 @@ http:
- type: status
status:
- 200
# digest: 490a00463044022002401e6d2cfcf6e927c6ab012b66855586ad7b69aa6bea72e4d18763fa607c6802205b62802a0fc065d6ffc20195b84ac858105f9013c98d6cd41fe3f7eb82731247:922c64590222798bb761d5b6d8e72950
# digest: 4a0a004730450220412646da5bed4f185caf54c76862664813ef7050af776de0a1f48f34ed1e2743022100ed90d7f1c9c2709fd80b2ce39ec40aae39ba04224f28f08edb7845e2444a160a:922c64590222798bb761d5b6d8e72950
+3 -3
View File
@@ -21,8 +21,8 @@ info:
cvss-score: 4.3
cve-id: CVE-2008-6982
cwe-id: CWE-79
epss-score: 0.0038
epss-percentile: 0.72879
epss-score: 0.08587
epss-percentile: 0.92008
cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
metadata:
verified: true
@@ -51,4 +51,4 @@ http:
- type: status
status:
- 500
# digest: 490a00463044022100f35f66f91c673b84f97e34434b390db4e91629ddc7b6763aa3a908d372825bce021f493825bdc2bb46323b987edfda7d67019d483fb3f099b5c05bb7633929d794:922c64590222798bb761d5b6d8e72950
# digest: 490a0046304402206a9f02976209fbe090ae4e87ec5f161f64586ea36a039abfed5dc6dec87950ed0220232dafd659f6ede238994a04556b4befe462ce926e0e0618d12183e962cd26f4:922c64590222798bb761d5b6d8e72950
Loaded 100 of 3454 files, more files were not shown because too many files have changed in this diff. Show more