Update DMARC validation matchers in YAML config

Create intermapper-exposure.yaml

.new-additions

@@ -1,102 +1,56 @@
-cloud/gcp/iam/gcloud-service-account-keys-rotation.yaml
-code/cves/2025/CVE-2025-68926.yaml
-dast/vulnerabilities/xss/csp-bypass/cloudinary-csp-bypass.yaml
-http/cves/2006/CVE-2006-3392.yaml
-http/cves/2011/CVE-2011-3600.yaml
-http/cves/2012/CVE-2012-10018.yaml
-http/cves/2016/CVE-2016-15041.yaml
-http/cves/2016/CVE-2016-15043.yaml
-http/cves/2017/CVE-2017-11107.yaml
-http/cves/2017/CVE-2017-20192.yaml
-http/cves/2018/CVE-2018-10245.yaml
-http/cves/2018/CVE-2018-6961.yaml
-http/cves/2018/CVE-2018-9206.yaml
-http/cves/2019/CVE-2019-11253.yaml
-http/cves/2019/CVE-2019-15823.yaml
-http/cves/2020/CVE-2020-13125.yaml
-http/cves/2021/CVE-2021-24213.yaml
-http/cves/2021/CVE-2021-28799.yaml
-http/cves/2021/CVE-2021-4448.yaml
-http/cves/2022/CVE-2022-27924.yaml
-http/cves/2022/CVE-2022-4940.yaml
-http/cves/2023/CVE-2023-27351.yaml
-http/cves/2023/CVE-2023-33193.yaml
-http/cves/2024/CVE-2024-24882.yaml
-http/cves/2024/CVE-2024-28986.yaml
-http/cves/2024/CVE-2024-29138.yaml
-http/cves/2024/CVE-2024-29792.yaml
-http/cves/2024/CVE-2024-29931.yaml
-http/cves/2024/CVE-2024-30194.yaml
-http/cves/2024/CVE-2024-3469.yaml
-http/cves/2024/CVE-2024-43971.yaml
-http/cves/2024/CVE-2024-4455.yaml
-http/cves/2024/CVE-2024-5057.yaml
-http/cves/2024/CVE-2024-6753.yaml
-http/cves/2025/CVE-2025-34291.yaml
-http/cves/2025/CVE-2025-52691.yaml
-http/cves/2025/CVE-2025-60188.yaml
-http/cves/2025/CVE-2025-62522.yaml
-http/cves/2025/CVE-2025-68645.yaml
-http/cves/2025/CVE-2025-69200.yaml
-http/cves/2025/CVE-2025-8848.yaml
-http/exposed-panels/bitbucket-panel.yaml
-http/exposed-panels/ekoapi-admin-panel.yaml
-http/exposed-panels/librechat-login-panel.yaml
-http/exposed-panels/victoriametrics-panel.yaml
-http/exposed-panels/woodpecker-ci-panel.yaml
-http/exposed-panels/xspeeder-login.yaml
-http/exposures/configs/bash-config-exposure.yaml
-http/exposures/configs/exposed-gitmodules.yaml
-http/exposures/configs/flow-config-exposure.yaml
-http/exposures/configs/grafana-metrics-exposure.yaml
-http/exposures/configs/jfrog-artifactory-build-exposure.yaml
-http/exposures/configs/keycloak-admin-console-config.yaml
-http/exposures/configs/makefile-exposure.yaml
-http/exposures/configs/mysql-config-exposure.yaml
-http/exposures/configs/prettier-ignore-disclosure.yaml
-http/exposures/configs/smtp-credentials-exposure.yaml
-http/exposures/files/jolokia-config-exposure.yaml
-http/exposures/files/kcfinder-exposure.yaml
-http/exposures/files/npmignore-disclosure.yaml
-http/exposures/files/postgres-credentials-exposure.yaml
-http/exposures/files/python-requirements-disclosure.yaml
-http/exposures/files/rails-history-exposure.yaml
-http/exposures/logs/oracle-ebs-sqllog-exposure.yaml
-http/exposures/logs/wp-enable-media-replace-log.yaml
-http/exposures/logs/wp-newsletter-log-exposure.yaml
-http/iot/flock-safety-camera-panel.yaml
-http/misconfiguration/aem/aem-jcr-exposure.yaml
-http/misconfiguration/bitrix-fpd.yaml
-http/misconfiguration/drupal-directory-listing.yaml
-http/misconfiguration/grafana-unauth-access.yaml
-http/misconfiguration/icinga-dashboard-exposure.yaml
-http/misconfiguration/imageresizer-debug-exposure.yaml
-http/misconfiguration/installer/roundcube-installer-exposure.yaml
-http/misconfiguration/jboss-jmx-console-unauth.yaml
-http/misconfiguration/joomla-fpd.yaml
-http/misconfiguration/mamp-phpinfo-exposure.yaml
-http/misconfiguration/phpmyadmin/phpmyadmin-fpd.yaml
-http/misconfiguration/renovate-config-exposure.yaml
-http/misconfiguration/wordpress/wordfence-config-disclosure.yaml
-http/misconfiguration/wordpress/wordpress-elementor-fpd.yaml
-http/misconfiguration/wordpress/wordpress-menu-image-fpd.yaml
-http/misconfiguration/wordpress/wordpress-twentynineteen-fpd.yaml
-http/misconfiguration/wordpress/wp-better-wp-security-fpd.yaml
-http/misconfiguration/wordpress/wp-custom-post-type-ui-fpd.yaml
-http/misconfiguration/wordpress/wp-elementor-pro-fpd.yaml
-http/misconfiguration/wordpress/wp-members-log-disclosure.yaml
-http/misconfiguration/wordpress/wp-nextgen-gallery-log.yaml
-http/misconfiguration/wordpress/wp-popup-maker-fpd.yaml
-http/misconfiguration/wordpress/wp-simple-custom-css-fpd.yaml
-http/misconfiguration/wordpress/wp-user-role-editor-fpd.yaml
-http/technologies/adonisjs-detect.yaml
-http/technologies/newrelic-rum-detect.yaml
-http/technologies/wordpress/wordpress-passive-detection.yaml
-http/vulnerabilities/acme-challenge-path-xss.yaml
-http/vulnerabilities/magento/magento-downloader-fpd.yaml
-http/vulnerabilities/wordpress/jetpack-gist-xss.yaml
-http/vulnerabilities/wordpress/wp-instagram-feed-xss.yaml
-http/vulnerabilities/wordpress/wp-jetpack-ssrf.yaml
-javascript/cves/2018/CVE-2018-8011.yaml
-javascript/cves/2021/CVE-2021-36754.yaml
-javascript/cves/2025/CVE-2025-14847.yaml
+dns/acme-challenge-detect.yaml
+http/cves/2018/CVE-2018-7765.yaml
+http/cves/2019/CVE-2019-14206.yaml
+http/cves/2020/CVE-2020-19363.yaml
+http/cves/2020/CVE-2020-9039.yaml
+http/cves/2021/CVE-2021-37598.yaml
+http/cves/2023/CVE-2023-33960.yaml
+http/cves/2023/CVE-2023-52163.yaml
+http/cves/2024/CVE-2024-29137.yaml
+http/cves/2024/CVE-2024-56159.yaml
+http/cves/2025/CVE-2025-25570.yaml
+http/cves/2025/CVE-2025-4210.yaml
+http/cves/2025/CVE-2025-46349.yaml
+http/cves/2025/CVE-2025-46549.yaml
+http/cves/2025/CVE-2025-46550.yaml
+http/cves/2026/CVE-2026-21858.yaml
+http/exposed-panels/dagster-webserver-ui-exposure.yaml
+http/exposed-panels/sanity-studio-panel.yaml
+http/exposures/apis/frigate-api-exposure.yaml
+http/exposures/backups/batflat-sqlite-exposure.yaml
+http/exposures/configs/netlify-headers-config-exposure.yaml
+http/exposures/configs/selenium-grid-exposure.yaml
+http/exposures/files/gcloudignore-file.yaml
+http/exposures/files/gitpod-dockerfile-exposure.yaml
+http/exposures/files/joe-deadjoe-file-exposure.yaml
+http/exposures/files/postgres-history-exposure.yaml
+http/exposures/files/vscode-mcp-json.yaml
+http/exposures/logs/cacti-log-exposure.yaml
+http/exposures/logs/magento-debug-log-exposure.yaml
+http/exposures/logs/opencart-error-log.yaml
+http/exposures/tokens/azure/azure-instrumentation-key-exposure.yaml
+http/misconfiguration/apache-spark-env.yaml
+http/misconfiguration/cacti-fpd.yaml
+http/misconfiguration/google-calendar-exposure.yaml
+http/misconfiguration/installer/fork-installer.yaml
+http/misconfiguration/intermapper-exposure.yaml
+http/misconfiguration/lightstreamer-dashboard-exposure.yaml
+http/misconfiguration/mybb-full-path-disclosure.yaml
+http/misconfiguration/ollama-improper-authorization.yaml
+http/misconfiguration/stylelint-ignore-disclosure.yaml
+http/misconfiguration/wordpress/wp-add-search-to-menu-fpd.yaml
+http/misconfiguration/wordpress/wp-advanced-iframe-fpd.yaml
+http/misconfiguration/wordpress/wp-advanced-responsive-video-embedder-fpd.yaml
+http/misconfiguration/wordpress/wp-ajax-load-more-anything-fpd.yaml
+http/misconfiguration/wordpress/wp-ajax-search-lite-fpd.yaml
+http/misconfiguration/wordpress/wp-call-now-button-fpd.yaml
+http/misconfiguration/wordpress/wp-duplicate-page-fpd.yaml
+http/misconfiguration/wordpress/wp-hostinger-fpd.yaml
+http/misconfiguration/wordpress/wp-really-simple-captcha-fpd.yaml
+http/misconfiguration/wordpress/wp-updraftplus-fpd.yaml
+http/misconfiguration/wordpress/wp-w3-total-cache-fpd.yaml
+http/misconfiguration/wordpress/wp-wpforms-lite-fpd.yaml
+http/misconfiguration/wordpress/wp-wpfront-scroll-top-fpd.yaml
+http/technologies/hotjar-rum-detect.yaml
+http/technologies/matomo-rum-detect.yaml
+http/technologies/openreplay-rum-detect.yaml

TEMPLATES-STATS.json

@@ -1 +1 @@
-{"tags":[{"name":"vuln","count":6542},{"name":"cve","count":3757},{"name":"discovery","count":3269},{"name":"vkev","count":1543},{"name":"wordpress","count":1396},{"name":"panel","count":1374},{"name":"xss","count":1308},{"name":"wp-plugin","count":1221},{"name":"exposure","count":1219},{"name":"rce","count":868},{"name":"osint","count":847},{"name":"tech","count":847},{"name":"misconfig","count":829},{"name":"lfi","count":808},{"name":"devops","count":745},{"name":"wp","count":733},{"name":"cloud","count":701},{"name":"detect","count":632},{"name":"edb","count":598},{"name":"wpscan","count":586},{"name":"cve2021","count":571},{"name":"cve2022","count":554},{"name":"packetstorm","count":552},{"name":"cve2023","count":533},{"name":"cve2024","count":529},{"name":"sqli","count":517},{"name":"unauth","count":506},{"name":"intrusive","count":488},{"name":"login","count":482},{"name":"authenticated","count":468},{"name":"kev","count":460},{"name":"file","count":389},{"name":"network","count":372},{"name":"oast","count":322},{"name":"cve2020","count":313},{"name":"default-login","count":295},{"name":"cve2025","count":284},{"name":"config","count":270},{"name":"tcp","count":269},{"name":"apache","count":260},{"name":"microsoft","count":252},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"auth-bypass","count":233},{"name":"gcp","count":232},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":226},{"name":"gcloud","count":224},{"name":"token","count":217},{"name":"cve2019","count":216},{"name":"malware","count":214},{"name":"azure","count":210},{"name":"","count":208},{"name":"cve2018","count":198},{"name":"iot","count":195},{"name":"aws","count":192},{"name":"csp-bypass","count":191},{"name":"azure-cloud-config","count":191},{"name":"time-based-sqli","count":191},{"name":"code","count":184},{"name":"amazon","count":174},{"name":"install","count":169},{"name":"redirect","count":168},{"name":"ssrf","count":165},{"name":"security","count":161},{"name":"keys","count":157},{"name":"local","count":154},{"name":"joomla","count":152},{"name":"aws-cloud-config","count":147},{"name":"linux","count":137},{"name":"ftp","count":135},{"name":"router","count":134},{"name":"files","count":129},{"name":"cms","count":127},{"name":"cve2017","count":127},{"name":"disclosure","count":123},{"name":"audit","count":122},{"name":"phishing","count":119},{"name":"kubernetes","count":116},{"name":"cve2010","count":115},{"name":"js","count":103},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"file-upload","count":96},{"name":"windows-audit","count":90},{"name":"oss","count":89},{"name":"oracle","count":89},{"name":"seclists","count":88},{"name":"privesc","count":86},{"name":"debug","count":85},{"name":"passive","count":85},{"name":"takeover","count":82},{"name":"cisco","count":81},{"name":"enum","count":81},{"name":"windows","count":78},{"name":"fileupload","count":77},{"name":"k8s","count":75},{"name":"adobe","count":73},{"name":"fpd","count":69},{"name":"detection","count":66},{"name":"cve2015","count":66},{"name":"deserialization","count":65},{"name":"huntr","count":64},{"name":"vmware","count":64},{"name":"ir","count":63},{"name":"cve2016","count":62},{"name":"alibaba","count":61},{"name":"c2","count":61},{"name":"atlassian","count":61},{"name":"google","count":60},{"name":"cve2014","count":55},{"name":"logs","count":55},{"name":"traversal","count":55},{"name":"dast","count":55},{"name":"ssh","count":54},{"name":"php","count":54},{"name":"aem","count":52},{"name":"misc","count":52},{"name":"ssti","count":50},{"name":"api","count":50},{"name":"osint-gaming","count":49},{"name":"generic","count":49},{"name":"injection","count":48},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"plugin","count":48},{"name":"ibm","count":48},{"name":"tenable","count":48},{"name":"fortinet","count":47},{"name":"cnvd","count":46},{"name":"oob","count":46},{"name":"vulhub","count":46},{"name":"aliyun","count":45},{"name":"jndi","count":44},{"name":"wp-theme","count":44},{"name":"kisa","count":44},{"name":"firewall","count":43},{"name":"info-leak","count":43},{"name":"ssl","count":43},{"name":"miscellaneous","count":43},{"name":"springboot","count":43},{"name":"oa","count":43},{"name":"osint-hobby","count":42},{"name":"listing","count":42},{"name":"osint-porn","count":42},{"name":"k8s-cluster-security","count":41},{"name":"tls","count":41},{"name":"xxe","count":41},{"name":"postgresql","count":41},{"name":"sap","count":40},{"name":"jira","count":39},{"name":"dlink","count":39},{"name":"dns","count":38},{"name":"devsecops","count":38},{"name":"cti","count":38},{"name":"osint-coding","count":36},{"name":"google-cloud-sql","count":36},{"name":"graphql","count":36},{"name":"osint-misc","count":35},{"name":"fuzz","count":35},{"name":"gitlab","count":35},{"name":"xwiki","count":35},{"name":"dashboard","count":35},{"name":"printer","count":34},{"name":"yonyou","count":34},{"name":"neLine truncated
+{"tags":[{"name":"vuln","count":6552},{"name":"cve","count":3799},{"name":"discovery","count":3278},{"name":"vkev","count":1579},{"name":"wordpress","count":1434},{"name":"panel","count":1381},{"name":"xss","count":1324},{"name":"wp-plugin","count":1256},{"name":"exposure","count":1253},{"name":"rce","count":874},{"name":"tech","count":850},{"name":"osint","count":847},{"name":"misconfig","count":843},{"name":"lfi","count":810},{"name":"wp","count":758},{"name":"devops","count":748},{"name":"cloud","count":702},{"name":"detect","count":635},{"name":"edb","count":598},{"name":"wpscan","count":587},{"name":"cve2021","count":575},{"name":"cve2022","count":556},{"name":"packetstorm","count":552},{"name":"cve2024","count":540},{"name":"cve2023","count":535},{"name":"sqli","count":518},{"name":"unauth","count":511},{"name":"intrusive","count":494},{"name":"login","count":486},{"name":"authenticated","count":479},{"name":"kev","count":466},{"name":"file","count":389},{"name":"network","count":373},{"name":"oast","count":323},{"name":"cve2020","count":314},{"name":"default-login","count":295},{"name":"cve2025","count":293},{"name":"config","count":286},{"name":"tcp","count":269},{"name":"apache","count":262},{"name":"microsoft","count":252},{"name":"token-spray","count":247},{"name":"auth-bypass","count":236},{"name":"top-200","count":235},{"name":"gcp","count":233},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":227},{"name":"gcloud","count":225},{"name":"cve2019","count":218},{"name":"token","count":217},{"name":"malware","count":214},{"name":"azure","count":210},{"name":"","count":208},{"name":"cve2018","count":202},{"name":"iot","count":196},{"name":"aws","count":192},{"name":"csp-bypass","count":192},{"name":"time-based-sqli","count":191},{"name":"azure-cloud-config","count":191},{"name":"code","count":185},{"name":"amazon","count":174},{"name":"install","count":169},{"name":"redirect","count":168},{"name":"ssrf","count":166},{"name":"security","count":162},{"name":"keys","count":157},{"name":"local","count":154},{"name":"joomla","count":153},{"name":"aws-cloud-config","count":147},{"name":"linux","count":137},{"name":"ftp","count":135},{"name":"router","count":135},{"name":"disclosure","count":130},{"name":"cve2017","count":129},{"name":"files","count":129},{"name":"cms","count":128},{"name":"audit","count":122},{"name":"phishing","count":119},{"name":"kubernetes","count":117},{"name":"cve2010","count":115},{"name":"js","count":106},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"file-upload","count":100},{"name":"debug","count":92},{"name":"windows-audit","count":90},{"name":"oracle","count":90},{"name":"oss","count":90},{"name":"seclists","count":88},{"name":"passive","count":87},{"name":"privesc","count":86},{"name":"fpd","count":83},{"name":"takeover","count":82},{"name":"enum","count":82},{"name":"cisco","count":81},{"name":"windows","count":78},{"name":"fileupload","count":77},{"name":"k8s","count":76},{"name":"adobe","count":74},{"name":"cve2015","count":66},{"name":"deserialization","count":66},{"name":"detection","count":66},{"name":"vmware","count":65},{"name":"huntr","count":64},{"name":"cve2016","count":64},{"name":"ir","count":63},{"name":"c2","count":61},{"name":"alibaba","count":61},{"name":"atlassian","count":61},{"name":"google","count":60},{"name":"dast","count":57},{"name":"logs","count":57},{"name":"traversal","count":56},{"name":"cve2014","count":55},{"name":"php","count":55},{"name":"ssh","count":54},{"name":"aem","count":53},{"name":"misc","count":52},{"name":"api","count":50},{"name":"ssti","count":50},{"name":"plugin","count":49},{"name":"osint-gaming","count":49},{"name":"injection","count":49},{"name":"generic","count":49},{"name":"hackerone","count":48},{"name":"log4j","count":48},{"name":"tenable","count":48},{"name":"ibm","count":48},{"name":"fortinet","count":47},{"name":"vulhub","count":46},{"name":"oob","count":46},{"name":"cnvd","count":46},{"name":"wp-theme","count":45},{"name":"aliyun","count":45},{"name":"kisa","count":44},{"name":"jndi","count":44},{"name":"ssl","count":43},{"name":"miscellaneous","count":43},{"name":"springboot","count":43},{"name":"firewall","count":43},{"name":"info-leak","count":43},{"name":"oa","count":43},{"name":"osint-porn","count":42},{"name":"listing","count":42},{"name":"osint-hobby","count":42},{"name":"xxe","count":42},{"name":"postgresql","count":41},{"name":"tls","count":41},{"name":"k8s-cluster-security","count":41},{"name":"sap","count":40},{"name":"dns","count":39},{"name":"dlink","count":39},{"name":"jira","count":39},{"name":"devsecops","count":38},{"name":"cti","count":38},{"name":"google-cloud-sql","count":36},{"name":"graphql","count":36},{"name":"dashboard","count":36},{"name":"osint-coding","count":36},{"name":"fuzz","count":35},{"name":"xwiki","count":35},{"name":"osint-misc","count":35},{"name":"gitlab","count":35},{"name":"printer","count":34},{"name":"networking","count":34},{"nameLine truncated

TOP-10.md

@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| vuln      |  6542 | dhiyaneshdk   |  1954 | http       |  9631 | info     |  4438 | file |   445 |
-| cve       |  3757 | daffainfo     |   927 | cloud      |   661 | high     |  2639 | dns  |    28 |
-| discovery |  3269 | princechaddha |   862 | file       |   445 | medium   |  2548 |      |       |
-| vkev      |  1543 | dwisiswant0   |   806 | network    |   277 | critical |  1628 |      |       |
-| wordpress |  1396 | ritikchaddha  |   718 | code       |   275 | low      |   413 |      |       |
-| panel     |  1374 | pussycat0x    |   710 | dast       |   246 | unknown  |    56 |      |       |
-| xss       |  1308 | pikpikcu      |   352 | workflows  |   206 |          |       |      |       |
-| wp-plugin |  1221 | pdteam        |   316 | javascript |   100 |          |       |      |       |
-| exposure  |  1219 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
-| rce       |   868 | iamnoooob     |   263 | dns        |    25 |          |       |      |       |
+| vuln      |  6552 | dhiyaneshdk   |  1967 | http       |  9725 | info     |  4451 | file |   445 |
+| cve       |  3799 | daffainfo     |   937 | cloud      |   662 | high     |  2666 | dns  |    28 |
+| discovery |  3278 | princechaddha |   863 | file       |   445 | medium   |  2575 |      |       |
+| vkev      |  1579 | dwisiswant0   |   806 | network    |   277 | critical |  1639 |      |       |
+| wordpress |  1434 | ritikchaddha  |   726 | code       |   276 | low      |   437 |      |       |
+| panel     |  1381 | pussycat0x    |   721 | dast       |   249 | unknown  |    56 |      |       |
+| xss       |  1324 | pikpikcu      |   352 | workflows  |   206 |          |       |      |       |
+| wp-plugin |  1256 | pdteam        |   316 | javascript |   103 |          |       |      |       |
+| exposure  |  1253 | pdresearch    |   275 | ssl        |    38 |          |       |      |       |
+| rce       |   874 | 0x_akoko      |   274 | dns        |    25 |          |       |      |       |

code/cves/2016/CVE-2016-8735.yaml

@@ -17,8 +17,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2016-8735
-    epss-score: 0.93875
-    epss-percentile: 0.99861
+    epss-score: 0.93967
+    epss-percentile: 0.99877
     cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
   metadata:
     shodan-query: product:"tomcat"

code/cves/2019/CVE-2019-14287.yaml

@@ -51,4 +51,4 @@ code:
           - '!contains(code_1_response, "root")'
           - 'contains(code_2_response, "root")'
         condition: and
-# digest: 4a0a00473045022100c03ad6f1fe56bc6aea9dfbe1b9d9fb46570cc7adfbd2e8851639aa9c1462a6e0022077fdf855b5daf19ab59dc4e9ab4fa65b15a4b29fa50ae8c2890514e1954f1413:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205a1532426ed19347b452225a0f3488667f1fcc3b8a77ab0a198e1c9ab948864b02202941ac1caf800281019c229052467f74d03640a1dd9402e8222cd875a20143a7:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-13935.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2020-13935
     epss-score: 0.92155
-    epss-percentile: 0.99693
+    epss-percentile: 0.99694
   reference:
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html

code/cves/2021/CVE-2021-3156.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2021-3156
     cwe-id: CWE-193
     epss-score: 0.9246
-    epss-percentile: 0.99715
+    epss-percentile: 0.99717
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -44,4 +44,4 @@ code:
           - "malloc(): memory corruption"
           - "Aborted (core dumped)"
         condition: and
-# digest: 4b0a00483046022100f621f931f96503014c3d3937aefaa32d00de6b949e8004f75957e49ff6e26d66022100d8b0c458b7566a959b922d3c07f3061abc066cd2950c47de2c0fb63d73b47618:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cf68bef267bf874af8eaf6585cf3edbd4abb727e174d71e6efa53ab8dec0cc33022100ce13c81d06a4a44c284daf7d8c381abc80db7b80f4cabda7fec16bb3286824fe:922c64590222798bb761d5b6d8e72950

code/cves/2022/CVE-2022-42475.yaml

@@ -24,8 +24,8 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2022-42475
     cwe-id: CWE-197,CWE-787
-    epss-score: 0.94062
-    epss-percentile: 0.99896
+    epss-score: 0.94005
+    epss-percentile: 0.99885
     cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -199,4 +199,4 @@ code:
       - type: word
         words:
           - "Target appears to be VULNERABLE"
-# digest: 4b0a00483046022100fcac8559b4e8853a08053abbb475733ccab09d01279dddf62d94cdcb2431ec34022100abe0b2270abf9d568724527536101445ab909a4b9a9240f0e36d9a16476e3edb:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b1d6c98e5bfe8e9c1148cabd2c587c079c78e2cf5620290daab2d53e25b8e0f5022100d760d713e1f2de8512fdf6ab34a7d804ef54c0e90502d01810e8a770ad20a98b:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-2986
     epss-score: 0.92255
-    epss-percentile: 0.99702
+    epss-percentile: 0.99704
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -630,4 +630,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4a0a00473045022100863aad28a4a645bb277bbeb0d2d9aa99818ee6a7c8155ee7de8051b0dddcd7c9022043609ef9238e330a7f9103b560fa61e39dc9de0e1de4d887438fb3a8ac7616d8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b8334143d2737742b1246dfd20e66ce67eda5e71c7e0b83465151be2f5298da702202b2f0920c4ee7aee513db1e58027f5ce51b45c12a7b9cddf0e149f9e45033ac5:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
     epss-score: 0.69791
-    epss-percentile: 0.98606
+    epss-percentile: 0.98608
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 4b0a00483046022100ee3111144fea4bee7848cc1727d6e66a97bcb09b227bceac989ad86b667a77c302210095e17ded1fe432929f3c836f8482631b4447f5d4c22af6312e40045eda6427e0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220692d91239d4d8d90398523ed32a09e20eaadb1a26b3c8b627c23f324ea17238b022100c283b35e540a3c1071d51c5d39983e4d97c63cf6549f73fee8e056fbf64d0faf:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
     epss-score: 0.24316
-    epss-percentile: 0.95909
+    epss-percentile: 0.95911
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 4b0a00483046022100b91d184bb191901e0cdbb919fd5d52c23bde4750aa67120809661f08c396c022022100d08819985f5799245903fdef076ee9698481a3529f4215e98a1b9022c63c232b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d47d39332ccbb47f3af344287706f98f7ff668b94581efa73778623827c7cf1a022100ace85668470d93aa510c25544cd66dff09df8f2b4af581eecf1c7d0c869e27e5:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
     epss-score: 0.70846
-    epss-percentile: 0.98647
+    epss-percentile: 0.98649
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
     verified: true
@@ -58,4 +58,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 4a0a00473045022100e4ecd92af69cac9050a7766c704bdcf2a15297b73d32f600a34c7c67187621900220673cd072a34789c4dcc9c1649b46a2ab2b559b3407a3897862a92121fa969460:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d10464d4e2151dbfa2d289f623d4d1ec505347ac08da3a7655daced02b23b9e4022028d51e5ca6a059d57d2d24ba619c409dbe388d21eb39e7625e9ef4970250566b:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-12356.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-12356
     cwe-id: CWE-77
     epss-score: 0.93687
-    epss-percentile: 0.99835
+    epss-percentile: 0.99836
     cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
   metadata:
     vendor: beyondtrust
@@ -41,4 +41,4 @@ code:
         words:
           - "0 success"
           - "1 try again later"
-# digest: 4a0a00473045022100e44eb040c59b1e287496e2f16ce334e3a9ff578e48fe42b5d23af85014a3acb50220028e6c1e6329fd985ab5ac40c77493a5aaa1068ff1a8c5c1406032bc2b836d3f:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e56e930f8a6a5608d5b7ebbcd2cbe5304b5d434a2dc99dfa1a05a0f590569bae02204fc7f2b18bee44e3409d2ae3965f7bdca24195849b8c502e19bec2e2274b0ee4:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-22120.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-22120
     cwe-id: CWE-20
     epss-score: 0.93259
-    epss-percentile: 0.99791
+    epss-percentile: 0.99792
   metadata:
     max-request: 1
     vendor: zabbix
@@ -73,4 +73,4 @@ code:
       - type: word
         words:
           - "Vulnerable to CVE-2024-22120"
-# digest: 4a0a0047304502207500a89fb14d322dd4a8975637dcd5226dc0836fb2abc77ed8570d37683d61ab0221009d3953cd4f4868c1cc81ed703247d427f62e0af2e67825cd5190060492c7f709:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220718d5807505f6031d8b84168dcfe7cc45843b11233283c1405307e2731058c020221008c26a2fad1990c712b921a8ed6ef3b3f9f1637e3948f2e37a307e97e20c3d401:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-3094.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-3094
     cwe-id: CWE-506
     epss-score: 0.85995
-    epss-percentile: 0.99362
+    epss-percentile: 0.99363
     cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a0047304502206bcc44f384b6a2e99c4c8db8c2b6d8a002efd8346e051ec857a886e74d78399d0221009ad1a3a153b43269756a117ccb40b41eaeb7cd39c16cca38b2d9103ebe351e7f:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022011ba130597272a1f01d40059e63d8a16b46bc06e24e6f9d0629e6e0803a3470202205b579761d35007cd3c1874341fed58f8cb1fcfa1ead7f276e21b9b47731fc542:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-4340.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2024-4340
     epss-score: 0.17039
-    epss-percentile: 0.94764
+    epss-percentile: 0.94765
   reference:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
   tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
         part: stderr
         words:
           - "RecursionError: maximum recursion depth exceeded"
-# digest: 4a0a00473045022065463a8e380f105304513b0d5e73fe7278037ad53a9eb8092169c376f6bda1cf022100993bfdacf161d2a1ab0f4cc095b8184674cd4eaa16909ab6bf4ec18012043dec:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022020eb35ee5730cf8da3c8050ef1581e0970a3ca4ef807e7eec49175cd65a42193022100ce53acfb0b86e9f329590ce4d0f0c4b7f8fd63d3b35aac95adede7e80f7921b9:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
     epss-score: 0.4139
-    epss-percentile: 0.97273
+    epss-percentile: 0.97279
   metadata:
     verified: true
     shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4b0a00483046022100edbfd1326ccd964108d60576c46ed7eb269bbf583ee4ec97209ba7daa2ef49cc022100b0e3c754053d2126331bff7607da49e1e6466b3baeb552f2792f408163b26cec:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201e26dada23f83f5dcb1b94d5b11872f8eda958368abf1a31cfe07b7d8601fab002206e7b6941151407aa59bad47d954962658e10dd3bfeb052af4751a0189d48eb63:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
     epss-score: 0.8111
-    epss-percentile: 0.99121
+    epss-percentile: 0.99117
   metadata:
     verified: true
     max-request: 2
@@ -195,4 +195,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4b0a00483046022100ddd29d6d6fdfea1bb131916687b03b8dc644080e23b2334ed6fc27b204fe554b022100d19e07ff2dbeec3582ef189069f45c1682ccba606dbcc58f4667331688f97a23:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f9ca193531db5fb80cf8eebc4024385a95d53372a9c33c28718eba5be33876460220635671b10ea921eaa0addf3bd4b5be4cf15dd71dbf8f69e53cb8472928fa6507:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-56331.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-56331
     cwe-id: CWE-22
     epss-score: 0.41406
-    epss-percentile: 0.97275
+    epss-percentile: 0.97281
   metadata:
     verified: true
     shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
       - type: word
         words:
           - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4a0a00473045022100ba0185bc694a5b8edb63045a5c6a008481286dbfef69819530162a4c5a481ca30220307902077c885e129c8ec9805d2ecc527cdf81609c526bee19376ca8b410db57:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009d8591a5d286b028df98dfae288025e119c1aaadcd24cdb3ee71a669c317a763022100c6a416ddcfd2fc4ec9415a2776effa4cd62bf0f6a1556ab1258d6aba9e4cd8eb:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -15,7 +15,7 @@ info:
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
     epss-score: 0.55491
-    epss-percentile: 0.97982
+    epss-percentile: 0.97986
   metadata:
     verified: true
     shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 490a004630440220145c2736aed9ab058b7a5cce9ef22e1d82d8114f169936e8a1662bc77565818e02201e12abf0c2d7faeb8c8ccff762b446e2e3f3ca5374c750ca20fc8d3601df4f14:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c9a879a1a167eb3a1ea51a072419dceb330da8ff1b29e5e3a27c7e1604beb55002201f6fde90532e3c1af85ecd3bf2aae5bea3e15a9e01d41ff355942faee2992a9a:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-1550.yaml

@@ -16,7 +16,7 @@ info:
     - https://towerofhanoi.it/writeups/cve-2025-1550/
   classification:
     epss-score: 0.04785
-    epss-percentile: 0.89144
+    epss-percentile: 0.89146
   metadata:
     max-request: 1
   tags: cve,cve2025,code,keras,rce,ml
@@ -77,4 +77,4 @@ code:
         part: response
         regex:
           - "root:.*:0:0:"
-# digest: 4a0a00473045022100fcf02d71afe8ad9d8bf010aa3aa8b1ff2738d1854608e59c3957b13a09523fa00220383cd0ee439038574e9cc81d2a98b3d70a4ccc993975b34157326bdc2988f895:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206e81b2b03f782d9e88ce8c02448592e64d45da006c1b5e27d9b91a1b74510a57022100f31c6ac7bb8df4745d0c8aac5942f8797e1eca36c7051a1cc3163869206486b7:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-22457.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-22457
     cwe-id: CWE-121,CWE-787
     epss-score: 0.49132
-    epss-percentile: 0.97674
+    epss-percentile: 0.97677
     cpe: cpe:2.3:a:ivanti:connect_secure:*:-:*:*:*:*:*:*
   metadata:
     vendor: ivanti
@@ -128,4 +128,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 490a00463044022023518ac211b2c8670970a85a8c4455790dfc993fa951ad75d76618a1d412d680022041d34be6c020fedf29b601f4e96628575d83a7880706e92564ad7b79023b25f2:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022069acae54b99c91cfaeab8fb82cae5f57d728e964fd2fe8effa698476329c17a4022003ff3779091aaa6401059fc5c3fcac3ee13ea937f45f641aa9302be032574919:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
     epss-score: 0.13848
-    epss-percentile: 0.94079
+    epss-percentile: 0.94082
   metadata:
     verified: true
     vendor: gitlab
@@ -80,4 +80,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a0047304502206cf6de1ce8be1ea8c63786666e2b6e77e54a88bc45da32e43920ae8b03ee7ca20221008213d7897f459bde952774b41eb49b0fa837941ee2be1bc72288254c0e900e92:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100da7671ed91ea1bc5fb04f262e95116df31243319410921fd226fac65e5965a2002207dae994b259b2e7632380ef6472614f8f2b871f6b87c2a973145ae0b7fa4d82f:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32433.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2025-32433
     cwe-id: CWE-306
     epss-score: 0.43921
-    epss-percentile: 0.97411
+    epss-percentile: 0.97417
   metadata:
     verified: true
     max-request: 1
@@ -174,4 +174,4 @@ code:
         dsl:
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 490a0046304402202d71bdb45b0a70d1c12fd37132a66155db0444116fc14ffc410c443b22338cae02205aa4c8dab2e7a854a5a56920c4b8849ed56ab83ee4c9f905aaf4319e432bec2a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e527b9ad3b3bc403be44a96258595d391da0b9a2167b9be04d7b4390d6e98d23022100ed8a6ad801506593f10d87408f5bd81f21d6cb75383ddadeabb9ee598a17abd8:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-54309.yaml

@@ -17,8 +17,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-54309
-    epss-score: 0.72172
-    epss-percentile: 0.98699
+    epss-score: 0.63875
+    epss-percentile: 0.98357
     cwe-id: CWE-287,CWE-362
     cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*
   metadata:
@@ -200,4 +200,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 4a0a0047304502203b8b948463192e088a4cf02266c1587d9417a4b5d2ba7d0a255a9ab2bca9b0aa0221008101b74547fbfa655d7bd6e2981e68ca96f1cb253dcf16c185175a827e59bc45:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100eb3f5959125a305830d65c6bf563bec0c2bc81e14ab8a9181f74a3f679fbb5f9022100ec7ca9512961e8e0171d8326e2fe46cf1f33784f2674ecdecd0961b84110bc60:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -16,7 +16,7 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
     epss-score: 0.33256
-    epss-percentile: 0.9676
+    epss-percentile: 0.96767
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 490a004630440220188495e78ca517672685680486673868f22c4a56d99863bfb06e41ec24fc04610220204b648c58da20571df61810d46af31f309c4e8b196529a7f2db245d99421e18:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008589014638c7b15e0d8d9596a1c15c312d5eadb644547f41f85ba2c11233cc47022008364a7eb0e54abc9bc3897d171a14130f966d292fcf6ccd898798f5649cb16e:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-68926.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-68926
     epss-score: 0.03135
-    epss-percentile: 0.86479
+    epss-percentile: 0.8648
     cwe-id: CWE-798
   metadata:
     verified: true

code/cves/2025/CVE-2025-9242.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-9242
     cwe-id: CWE-787,CWE-362
     epss-score: 0.73453
-    epss-percentile: 0.98757
+    epss-percentile: 0.98758
     cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -552,4 +552,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a00473045022024b45756de62ff9b0c4f9712a9cda31171362c62f6a4c7a616cf7f92a49393de022100f4e941d5d7a8d60517d83c4752aa17c3412bfdbb1e3b459a46acc9a9efc6548a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100db08810d9f2ba81fced39c731e6f870293e0876ef95671568a59efd95ef2223702206b3ead0a6a79563257a97a65722666c0d85c1ad8257a7f40cdd8311bda5d573a:922c64590222798bb761d5b6d8e72950

cves.json

@@ -377,6 +377,7 @@
 {"ID":"CVE-2016-10973","Info":{"Name":"Brafton WordPress Plugin \u003c 3.4.8 - Cross-Site Scripting","Severity":"medium","Description":"The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2016/CVE-2016-10973.yaml"}
 {"ID":"CVE-2016-10976","Info":{"Name":"Safe Editor Plugin \u003c 1.2 - CSS/JS-injection","Severity":"medium","Description":"The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2016/CVE-2016-10976.yaml"}
 {"ID":"CVE-2016-10993","Info":{"Name":"ScoreMe Theme - Cross-Site Scripting","Severity":"medium","Description":"WordPress ScoreMe theme through 2016-04-01 contains a reflected cross-site scripting vulnerability via the s parameter which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2016/CVE-2016-10993.yaml"}
+{"ID":"CVE-2016-15041","Info":{"Name":"MainWP Dashboard \u003c= 3.1.2 - Stored Cross-Site Scripting","Severity":"high","Description":"MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress versions up to 3.1.2 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in 'mwp_setup_purchase_username' parameter, letting unauthenticated attackers inject and execute arbitrary scripts when users access affected pages.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2016/CVE-2016-15041.yaml"}
 {"ID":"CVE-2016-15042","Info":{"Name":"WordPress Frontend File Manager \u003c 4.0 \u0026 N-Media Post Frontend \u003c 1.1 - Arbitrary File Upload","Severity":"critical","Description":"The Frontend File Manager plugin (\u003c4.0) and N-Media Post Front-end Form plugin (\u003c1.1) for WordPress were vulnerable to arbitrary file uploads due to missing file type validation. This allowed unauthenticated attackers to upload arbitrary files and potentially achieve remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2016/CVE-2016-15042.yaml"}
 {"ID":"CVE-2016-15043","Info":{"Name":"WP Mobile Detector \u003c= 3.5 - Unrestricted File Upload","Severity":"critical","Description":"WP Mobile Detector plugin for WordPress \u003c= 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2016/CVE-2016-15043.yaml"}
 {"ID":"CVE-2016-1555","Info":{"Name":"NETGEAR WNAP320 Access Point Firmware - Remote Command Injection","Severity":"critical","Description":"NETGEAR WNAP320 Access Point Firmware version 2.0.3 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2016/CVE-2016-1555.yaml"}
@@ -704,6 +705,7 @@
 {"ID":"CVE-2018-7662","Info":{"Name":"CouchCMS \u003c= 2.0 - Path Disclosure","Severity":"medium","Description":"CouchCMS \u003c= 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php.","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2018/CVE-2018-7662.yaml"}
 {"ID":"CVE-2018-7700","Info":{"Name":"DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution","Severity":"high","Description":"DedeCMS 5.7SP2 is susceptible to cross-site request forgery with a corresponding impact of arbitrary code execution because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2018/CVE-2018-7700.yaml"}
 {"ID":"CVE-2018-7719","Info":{"Name":"Acrolinx Server \u003c5.2.5 - Local File Inclusion","Severity":"high","Description":"Acrolinx Server prior to 5.2.5 suffers from a local file inclusion vulnerability.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2018/CVE-2018-7719.yaml"}
+{"ID":"CVE-2018-7765","Info":{"Name":"Schneider Electric U.motion Builder - SQL Injection","Severity":"high","Description":"The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2018/CVE-2018-7765.yaml"}
 {"ID":"CVE-2018-7841","Info":{"Name":"Schneider Electric U.motion Builder - Remote Code Execution","Severity":"critical","Description":"U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2018/CVE-2018-7841.yaml"}
 {"ID":"CVE-2018-8006","Info":{"Name":"Apache ActiveMQ \u003c=5.15.5 - Cross-Site Scripting","Severity":"medium","Description":"Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2018/CVE-2018-8006.yaml"}
 {"ID":"CVE-2018-8024","Info":{"Name":"Apache Spark UI - Cross-Site Scripting","Severity":"medium","Description":"Apache Spark UI before 2.3.2 is vulnerable to XSS via unsanitized query string parameters in the /jobs/ endpoint.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2018/CVE-2018-8024.yaml"}
@@ -767,6 +769,7 @@
 {"ID":"CVE-2019-13396","Info":{"Name":"FlightPath - Local File Inclusion","Severity":"medium","Description":"FlightPath versions prior to 4.8.2 and 5.0-rc2 are vulnerable to local file inclusion.","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2019/CVE-2019-13396.yaml"}
 {"ID":"CVE-2019-13462","Info":{"Name":"Lansweeper Unauthenticated SQL Injection","Severity":"critical","Description":"Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2019/CVE-2019-13462.yaml"}
 {"ID":"CVE-2019-14205","Info":{"Name":"WordPress Nevma Adaptive Images \u003c0.6.67 - Local File Inclusion","Severity":"high","Description":"WordPress Nevma Adaptive Images plugin before 0.6.67 allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['source_file'] parameter in adaptive-images-script.php.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2019/CVE-2019-14205.yaml"}
+{"ID":"CVE-2019-14206","Info":{"Name":"Nevma Adaptive Images - Arbitrary File Deletion","Severity":"high","Description":"Nevma Adaptive Images plugin before 0.6.67 for WordPress contains an arbitrary file deletion caused by unsanitized input in adaptive-images-script.php, letting remote attackers delete arbitrary files, exploit requires sending specific request parameters.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2019/CVE-2019-14206.yaml"}
 {"ID":"CVE-2019-14223","Info":{"Name":"Alfresco Share - Open Redirect","Severity":"medium","Description":"Alfresco Share before 5.2.6, 6.0.N and 6.1.N contains an open redirect vulnerability via a crafted POST request. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2019/CVE-2019-14223.yaml"}
 {"ID":"CVE-2019-14251","Info":{"Name":"T24 Web Server - Local File Inclusion","Severity":"high","Description":"T24 web server is vulnerable to unauthenticated local file inclusion that permits an attacker to exfiltrate data directly from server.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2019/CVE-2019-14251.yaml"}
 {"ID":"CVE-2019-14312","Info":{"Name":"Aptana Jaxer 1.0.3.4547 - Local File inclusion","Severity":"medium","Description":"Aptana Jaxer 1.0.3.4547 is vulnerable to local file inclusion in the wikilite source code viewer. An attacker can read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2019/CVE-2019-14312.yaml"}
@@ -1039,6 +1042,7 @@
 {"ID":"CVE-2020-19283","Info":{"Name":"Jeesns 1.4.2 - Cross-Site Scripting","Severity":"medium","Description":"Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /newVersion component and allows attackers to execute arbitrary web scripts or HTML.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2020/CVE-2020-19283.yaml"}
 {"ID":"CVE-2020-19295","Info":{"Name":"Jeesns 1.4.2 - Cross-Site Scripting","Severity":"medium","Description":"Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2020/CVE-2020-19295.yaml"}
 {"ID":"CVE-2020-19360","Info":{"Name":"FHEM 6.0 - Local File Inclusion","Severity":"high","Description":"FHEM version 6.0 suffers from a local file inclusion vulnerability.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2020/CVE-2020-19360.yaml"}
+{"ID":"CVE-2020-19363","Info":{"Name":"Vtiger CRM v7.2.0 - Directory Listing","Severity":"medium","Description":"Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2020/CVE-2020-19363.yaml"}
 {"ID":"CVE-2020-1943","Info":{"Name":"Apache OFBiz \u003c=16.11.07 - Cross-Site Scripting","Severity":"medium","Description":"Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with contentId to /control/stream is not sanitized.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2020/CVE-2020-1943.yaml"}
 {"ID":"CVE-2020-19515","Info":{"Name":"qdPM 9.1 - Cross-site Scripting","Severity":"medium","Description":"qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\\install\\modules\\database_config.php.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2020/CVE-2020-19515.yaml"}
 {"ID":"CVE-2020-1956","Info":{"Name":"Apache Kylin 3.0.1 - Command Injection Vulnerability","Severity":"high","Description":"Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2020/CVE-2020-1956.yaml"}
@@ -1219,6 +1223,7 @@
 {"ID":"CVE-2020-8813","Info":{"Name":"Cacti v1.2.8 - Remote Code Execution","Severity":"high","Description":"Cacti v1.2.8 is susceptible to remote code execution. This vulnerability could be exploited without authentication if \"Guest Realtime Graphs\" privileges are enabled.","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2020/CVE-2020-8813.yaml"}
 {"ID":"CVE-2020-8982","Info":{"Name":"Citrix ShareFile StorageZones \u003c=5.10.x - Arbitrary File Read","Severity":"high","Description":"Citrix ShareFile StorageZones (aka storage zones) Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2020/CVE-2020-8982.yaml"}
 {"ID":"CVE-2020-9036","Info":{"Name":"Jeedom \u003c=4.0.38 - Cross-Site Scripting","Severity":"medium","Description":"Jeedom through 4.0.38 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2020/CVE-2020-9036.yaml"}
+{"ID":"CVE-2020-9039","Info":{"Name":"Couchbase Server - Broken Access Control","Severity":"critical","Description":"Couchbase Server versions 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0-4.6.5, 5.0.0, 5.1.1, 5.5.0, and 5.5.1 contain insecure permissions for the projector and indexer REST endpoints caused by unauthenticated access, letting attackers access administrative APIs without authentication, exploit requires no special conditions.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2020/CVE-2020-9039.yaml"}
 {"ID":"CVE-2020-9043","Info":{"Name":"WordPress wpCentral \u003c1.5.1 - Information Disclosure","Severity":"high","Description":"WordPress wpCentral plugin before 1.5.1 is susceptible to information disclosure. An attacker can access the  connection key for WordPress Admin account and thus potentially obtain sensitive information, modify data, and/or execute unauthorized operations.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2020/CVE-2020-9043.yaml"}
 {"ID":"CVE-2020-9047","Info":{"Name":"exacqVision Web Service - Remote Code Execution","Severity":"high","Description":"exacqVision Web Service is susceptible to remote code execution which could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentiallydownload and run a malicious executable that could allow OS command injection on the system.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2020/CVE-2020-9047.yaml"}
 {"ID":"CVE-2020-9054","Info":{"Name":"Zyxel NAS Firmware 5.21- Remote Code Execution","Severity":"critical","Description":"Multiple Zyxel network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using the weblogin.cgi CGI executable. This program fails to properly sanitize the username parameter that is passed to it. If the username parameter contains certain characters, it can allow command injection with the privileges of the web server that runs on the Zyxel device. Although the web server does not run as the root user, Zyyxel devices include a setuid utility that can be leveraged to run any command with root privileges. As such, it should be assumed that exploitation of this vulnerability can lead to remote code execution with root privileges. By sending a specially-crafted HTTP POST or GET request to a vulnerable Zyyxel device, a remote, unauthenticated attacker may be able to execute arbitrary code on the device. This may happen by directly connecting to a device if it is directly exposed to an attacker.   However, there are ways to trigger such crafted requests even if an attacker does not have direct connectivity to a vulnerable devices. For example, simply visiting a website can result in the compromise of any Zyyxel device that is reachable from the client system. Affected products include: NAS326 before firmware V5.21(AAZF.7)C0 NAS520 before firmware V5.21(AASZ.3)C0 NAS540 before firmware V5.21(AATB.4)C0 NAS542 before firmware V5.21(ABAG.4)C0 Zyyxel has made firmware updates available for NAS326, NAS520, NAS540, and NAS542 devices. Affected models that are end-of-support: NSA210, NSA220, NSA220+, NSA221, NSA310, NSA310S, NSA320, NSA320S, NSA325 and NSA325v2.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2020/CVE-2020-9054.yaml"}
@@ -1599,6 +1604,7 @@
 {"ID":"CVE-2021-37573","Info":{"Name":"Tiny Java Web Server - Cross-Site Scripting","Severity":"medium","Description":"A reflected cross-site scripting vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) \u003c=1.115 allows an adversary to inject malicious code on the server's \"404 Page not Found\" error page.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-37573.yaml"}
 {"ID":"CVE-2021-37580","Info":{"Name":"Apache ShenYu Admin JWT - Authentication Bypass","Severity":"critical","Description":"Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication.","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2021/CVE-2021-37580.yaml"}
 {"ID":"CVE-2021-37589","Info":{"Name":"Virtua Software Cobranca \u003c12R - Blind SQL Injection","Severity":"high","Description":"Virtua Cobranca before 12R allows blind SQL injection on the login page.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-37589.yaml"}
+{"ID":"CVE-2021-37598","Info":{"Name":"WP Cerber \u003c 8.9.3 - Broken Access Control","Severity":"medium","Description":"WP Cerber \u003c 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2021/CVE-2021-37598.yaml"}
 {"ID":"CVE-2021-37704","Info":{"Name":"phpfastcache - phpinfo Resource Exposure","Severity":"medium","Description":"phpinfo() is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache.","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2021/CVE-2021-37704.yaml"}
 {"ID":"CVE-2021-37833","Info":{"Name":"Hotel Druid 3.0.2 - Cross-Site Scripting","Severity":"medium","Description":"Hotel Druid 3.0.2 contains a cross-site scripting vulnerability in multiple pages which allows for arbitrary execution of JavaScript commands.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2021/CVE-2021-37833.yaml"}
 {"ID":"CVE-2021-38146","Info":{"Name":"Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download","Severity":"high","Description":"The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2021/CVE-2021-38146.yaml"}
@@ -2164,6 +2170,7 @@
 {"ID":"CVE-2022-37299","Info":{"Name":"Shirne CMS 1.2.0 - Local File Inclusion","Severity":"medium","Description":"Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php.","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2022/CVE-2022-37299.yaml"}
 {"ID":"CVE-2022-3766","Info":{"Name":"phpMyFAQ \u003c 3.1.8 - Cross-Site Scripting","Severity":"medium","Description":"phpMyFAQ versions prior to 3.1.8 contain a reflected cross-site scripting vulnerability in the search functionality. The application fails to properly sanitize user input in the search parameter, allowing attackers to inject and execute malicious JavaScript code in the context of other users' browsers.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2022/CVE-2022-3766.yaml"}
 {"ID":"CVE-2022-3768","Info":{"Name":"WordPress WPSmartContracts \u003c1.3.12 - SQL Injection","Severity":"high","Description":"WordPress WPSmartContracts plugin before 1.3.12 contains a SQL injection vulnerability. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement. An attacker with a role as low as author can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2022/CVE-2022-3768.yaml"}
+{"ID":"CVE-2022-37932","Info":{"Name":"HP Switch - Authentication Bypass","Severity":"high","Description":"A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions- Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2022/CVE-2022-37932.yaml"}
 {"ID":"CVE-2022-3800","Info":{"Name":"IBAX - SQL Injection","Severity":"high","Description":"IBAX go-ibax functionality is susceptible to SQL injection via the file /api/v2/open/rowsInfo. The manipulation of the argument table_name leads to SQL injection, and the attack may be launched remotely. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2022/CVE-2022-3800.yaml"}
 {"ID":"CVE-2022-3805","Info":{"Name":"Jeg Elementor Kit \u003c 2.5.7 - Unauthenticated Settings Update","Severity":"high","Description":"The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the MailChimp API key, global styles, 404 page settings, and enabled elements.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2022/CVE-2022-3805.yaml"}
 {"ID":"CVE-2022-38130","Info":{"Name":"KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution","Severity":"critical","Description":"The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\\\\u003cattacker-host\u003e\\sms\\\u003cattacker-db.zip\u003e), effectively controlling the content of the database to be restored.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2022/CVE-2022-38130.yaml"}
@@ -2494,7 +2501,7 @@
 {"ID":"CVE-2023-30210","Info":{"Name":"OURPHP \u003c= 7.2.0 - Cross Site Scripting","Severity":"medium","Description":"OURPHP \u003c= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via /client/manage/ourphp_tz.php.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-30210.yaml"}
 {"ID":"CVE-2023-30212","Info":{"Name":"OURPHP \u003c= 7.2.0 - Cross Site Scripting","Severity":"medium","Description":"OURPHP \u003c= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-30212.yaml"}
 {"ID":"CVE-2023-30256","Info":{"Name":"Webkul QloApps 1.5.2 - Cross-site Scripting","Severity":"medium","Description":"Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-30256.yaml"}
-{"ID":"CVE-2023-30258","Info":{"Name":"MagnusBilling - Unauthenticated Remote Code Execution","Severity":"critical","Description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-30258.yaml"}
+{"ID":"CVE-2023-30258","Info":{"Name":"MagnusBilling - Remote Code Execution","Severity":"critical","Description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-30258.yaml"}
 {"ID":"CVE-2023-30534","Info":{"Name":"Cacti \u003c 1.2.25 Insecure Deserialization","Severity":"medium","Description":"Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2023/CVE-2023-30534.yaml"}
 {"ID":"CVE-2023-30625","Info":{"Name":"Rudder Server \u003c 1.3.0-rc.1 - SQL Injection","Severity":"high","Description":"Rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution (RCE) due to the `rudder` role in PostgresSQL having superuser permissions by default. Version 1.3.0-rc.1 contains patches for this issue.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2023/CVE-2023-30625.yaml"}
 {"ID":"CVE-2023-3077","Info":{"Name":"MStore API \u003c 3.9.8 - SQL Injection","Severity":"critical","Description":"The MStore API WordPress plugin before 3.9.8 is vulnerable to Blind SQL injection via the product_id parameter.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-3077.yaml"}
@@ -2532,6 +2539,7 @@
 {"ID":"CVE-2023-3380","Info":{"Name":"WAVLINK WN579X3 - Remote Command Execution","Severity":"critical","Description":"Remote Command Execution vulnerability in WAVLINK WN579X3 routers via pingIp parameter in /cgi-bin/adm.cgi.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-3380.yaml"}
 {"ID":"CVE-2023-33831","Info":{"Name":"FUXA - Unauthenticated Remote Code Execution","Severity":"critical","Description":"A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-33831.yaml"}
 {"ID":"CVE-2023-3388","Info":{"Name":"Beautiful Cookie Consent Banner \u003c 2.10.2 - Cross-Site Scripting","Severity":"high","Description":"The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A partial patch was made available in 2.10.1 and the issue was fully patched in 2.10.2.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2023/CVE-2023-3388.yaml"}
+{"ID":"CVE-2023-33960","Info":{"Name":"OpenProject \u003c 12.5.4 - Project Identifiers Exposure","Severity":"medium","Description":"OpenProject versions before 12.5.6 generate a publicly accessible robots.txt file revealing project identifiers, even if the instance is set to 'Login required', letting attackers gather project info, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2023/CVE-2023-33960.yaml"}
 {"ID":"CVE-2023-34020","Info":{"Name":"Uncanny Toolkit for LearnDash - Open Redirection","Severity":"medium","Description":"A vulnerability in the WordPress Uncanny Toolkit for LearnDash Plugin allowed malicious actors to redirect users, posing a potential risk of phishing incidents. The issue has been resolved in version 3.6.4.4, and users are urged to update for security.\n","Classification":{"CVSSScore":"4.7"}},"file_path":"http/cves/2023/CVE-2023-34020.yaml"}
 {"ID":"CVE-2023-34048","Info":{"Name":"VMware vCenter Server - Out-of-Bounds Write","Severity":"critical","Description":"vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-34048.yaml"}
 {"ID":"CVE-2023-34105","Info":{"Name":"SRS - Command Injection","Severity":"high","Description":"SRS's v5.0.137~v5.0.156, v6.0.18~v6.0.47 api-server server is vulnerable to a drive-by command injection.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2023/CVE-2023-34105.yaml"}
@@ -2778,6 +2786,7 @@
 {"ID":"CVE-2023-51449","Info":{"Name":"Gradio Hugging Face - Local File Inclusion","Severity":"high","Description":"Gradio LFI when auth is not enabled, affects versions 4.0 - 4.10, also works against Gradio \u003c 3.33\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2023/CVE-2023-51449.yaml"}
 {"ID":"CVE-2023-51467","Info":{"Name":"Apache OFBiz \u003c 18.12.11 - Remote Code Execution","Severity":"critical","Description":"The vulnerability allows attackers to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF)\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-51467.yaml"}
 {"ID":"CVE-2023-52085","Info":{"Name":"Winter CMS Local File Inclusion - (LFI)","Severity":"medium","Description":"Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be included without further processing in the compilation of custom stylesheets via LESS. This had the potential to lead to a Local File Inclusion vulnerability. This issue has been patched in v1.2.4.\n","Classification":{"CVSSScore":"5.4"}},"file_path":"http/cves/2023/CVE-2023-52085.yaml"}
+{"ID":"CVE-2023-52163","Info":{"Name":"Digiever DS-2105 Pro - Command Injection","Severity":"high","Description":"Digiever DS-2105 Pro 3.1.0.71-11 contains a command injection caused by unsanitized input in time_tzsetup.cgi, letting attackers execute arbitrary commands remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2023/CVE-2023-52163.yaml"}
 {"ID":"CVE-2023-5222","Info":{"Name":"Viessmann Vitogate 300 - Hardcoded Password","Severity":"critical","Description":"A critical vulnerability in Viessmann Vitogate 300 up to 2.1.3.0 allows attackers to authenticate using hardcoded credentials in the Web Management Interface.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2023/CVE-2023-5222.yaml"}
 {"ID":"CVE-2023-52251","Info":{"Name":"Kafka UI 0.7.1 Command Injection","Severity":"high","Description":"An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2023/CVE-2023-52251.yaml"}
 {"ID":"CVE-2023-5244","Info":{"Name":"Microweber \u003c V.2.0 - Cross-Site Scripting","Severity":"medium","Description":"Reflected Cross-Site Scripting Vulnerability in types GET parameter on the /editor_tools/rte_image_editor endpoint.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2023/CVE-2023-5244.yaml"}
@@ -2988,6 +2997,7 @@
 {"ID":"CVE-2024-29029","Info":{"Name":"Memos 0.13.2 - Cross-Site Scripting \u0026 SSRF","Severity":"medium","Description":"An SSRF vulnerability exists at the `/o/get/image` that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-29029.yaml"}
 {"ID":"CVE-2024-29030","Info":{"Name":"Memos 0.13.2 - Server-Side Request Forgery","Severity":"medium","Description":"An SSRF vulnerability exists at the `/api/resource` that allows authenticated users to enumerate the internal network.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-29030.yaml"}
 {"ID":"CVE-2024-29059","Info":{"Name":".NET Framework - Leaking ObjRefs via HTTP .NET Remoting","Severity":"high","Description":".NET Framework Information Disclosure Vulnerability","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-29059.yaml"}
+{"ID":"CVE-2024-29137","Info":{"Name":"WordPress Tourfic Plugin \u003c= 2.11.7 - Cross-Site Scripting","Severity":"high","Description":"The Tourfic plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to and including 2.11.7 due to insufficient input sanitization and output escaping in the 'place' parameter.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2024/CVE-2024-29137.yaml"}
 {"ID":"CVE-2024-29138","Info":{"Name":"WordPress Restrict User Access \u003c= 2.5 - Cross-Site Scripting","Severity":"medium","Description":"WordPress Restrict User Access – Membership Plugin with Force versions before 2.6 is vulnerable to Reflected Cross-Site Scripting via the '_rua_section' parameter in the admin level edit page.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2024/CVE-2024-29138.yaml"}
 {"ID":"CVE-2024-29198","Info":{"Name":"GeoServer Demo Request Endpoint - Server Side Request Forgery","Severity":"high","Description":"It is possible to achieve Server Side Request Forgery (SSRF) via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to sensitive data.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2024/CVE-2024-29198.yaml"}
 {"ID":"CVE-2024-29269","Info":{"Name":"Telesquare TLR-2005KSH - Remote Command Execution","Severity":"critical","Description":"Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from South Korea's Telesquare company.Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 have an unauthorized remote command execution vulnerability. An attacker can exploit this vulnerability to execute system commands without authorization through the Cmd parameter and obtain server permissions.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-29269.yaml"}
@@ -3236,6 +3246,7 @@
 {"ID":"CVE-2024-55591","Info":{"Name":"Fortinet - Authentication Bypass","Severity":"critical","Description":"Fortinet FortiOS is vulnerable to an information disclosure via service-worker.js that could allow an attacker to access sensitive information.This vulnerability affects FortiOS and could potentially lead to unauthorized access to the system.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-55591.yaml"}
 {"ID":"CVE-2024-55956","Info":{"Name":"Cleo Harmony \u003c 5.8.0.24 - File Upload Vulnerability","Severity":"critical","Description":"In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-55956.yaml"}
 {"ID":"CVE-2024-56145","Info":{"Name":"Craft CMS - Remote Code Execution via Template Path Manipulation","Severity":"critical","Description":"This template identifies a critical Remote Code Execution (RCE) vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9.\nThe vulnerability exists due to improper handling of the `--templatesPath` query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig templates.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2024/CVE-2024-56145.yaml"}
+{"ID":"CVE-2024-56159","Info":{"Name":"Astro - Information Disclosure","Severity":"medium","Description":"Astro versions v5.0.3 through v5.0.7 and Astro v4.16.17 or older with sourcemaps enabled contain a source code disclosure caused by sourcemap files being publicly accessible in the build output folder, letting unauthenticated users read server source code, exploit requires sourcemaps to be enabled.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2024/CVE-2024-56159.yaml"}
 {"ID":"CVE-2024-56325","Info":{"Name":"Apache Pinot \u003c 1.3.0 - Authentication Bypass","Severity":"critical","Description":"This vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot. Authentication is not required to exploit this vulnerability.The specific flaw exists within the AuthenticationFilter class. The issue results from insufficient neutralization of special characters in a URI. An attacker can leverage this vulnerability to bypass authentication on the system.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-56325.yaml"}
 {"ID":"CVE-2024-56512","Info":{"Name":"Apache NiFi - Information Disclosure","Severity":"medium","Description":"Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases where the Process Group did not reference any Parameter values, the framework did not check user authorization for the bound Parameter Context. Missing authorization for a bound Parameter Context enabled clients to download non-sensitive Parameter values after creating the Process Group.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-56512.yaml"}
 {"ID":"CVE-2024-57045","Info":{"Name":"D-Link DIR-859 - Information Disclosure","Severity":"critical","Description":"A critical information disclosure vulnerability exists in D-Link devices where sensitive device account information including credentials can be retrieved by sending an unauthenticated request to `/getcfg.php` endpoint with the parameter `SERVICES=DEVICE.ACCOUNT`. This could allow attackers to obtain administrative credentials and gain full control of the affected device.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-57045.yaml"}
@@ -3405,6 +3416,7 @@
 {"ID":"CVE-2025-25231","Info":{"Name":"Omnissa Workspace ONE UEM - Path Traversal","Severity":"high","Description":"Omnissa Workspace ONE UEM contains a path traversal caused by crafted GET requests to restricted API endpoints, letting malicious actors access sensitive information, exploit requires sending crafted requests.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-25231.yaml"}
 {"ID":"CVE-2025-25257","Info":{"Name":"Fortinet FortiWeb - SQL Injection","Severity":"critical","Description":"An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-25257.yaml"}
 {"ID":"CVE-2025-2539","Info":{"Name":"File Away \u003c= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read","Severity":"high","Description":"The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers, leveraging the use of a reversible weak algorithm,  to read the contents of arbitrary files on the server, which can contain sensitive information.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-2539.yaml"}
+{"ID":"CVE-2025-25570","Info":{"Name":"Vue Vben Admin - Default Credentials","Severity":"critical","Description":"Vue Vben Admin 2.10.1 contains a broken authentication caused by hardcoded credentials in the backend, letting attackers log in without proper authorization, exploit requires access to the login interface.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-25570.yaml"}
 {"ID":"CVE-2025-2563","Info":{"Name":"User Registration \u0026 Membership \u003c= 4.1.1 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The User Registration \u0026 Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 4.1.1. This is due to insufficient restrictions on role type in the 'prepare_members_data()' function. This makes it possible for unauthenticated attackers to create newuser accounts with the 'administrator' role, allowing complete control over the affected WordPress site.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-2563.yaml"}
 {"ID":"CVE-2025-2609","Info":{"Name":"MagnusBilling Login Logs - Cross-Site Scripting","Severity":"high","Description":"Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read\" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php.This issue affects MagnusBilling- through 7.3.0.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-2609.yaml"}
 {"ID":"CVE-2025-2610","Info":{"Name":"MagnusBilling Alarm Module - Cross-Site Scripting","Severity":"high","Description":"Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php.This issue affects MagnusBilling- through 7.3.0.\n","Classification":{"CVSSScore":"7.6"}},"file_path":"http/cves/2025/CVE-2025-2610.yaml"}
@@ -3485,7 +3497,7 @@
 {"ID":"CVE-2025-3515","Info":{"Name":"Contact Form 7 Drag and Drop Multiple File Upload - Arbitrary File Upload","Severity":"high","Description":"The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and upload .phar or other dangerous file types on the affected site's server, which may make remote code execution possible on the servers that are configured to handle .phar files as executable PHP scripts, particularly in default Apache+mod_php configurations where the file extension is not strictly validated before being passed to the PHP interpreter.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2025/CVE-2025-3515.yaml"}
 {"ID":"CVE-2025-3605","Info":{"Name":"WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation","Severity":"critical","Description":"Privilege escalation vulnerability exists in the Frontend Login and Registration Blocks plugin for WordPress (versions \u003c= 1.0.7). An unauthenticated attacker can exploit the AJAX endpoint flr_blocks_user_settings_handle_ajax_callback() to change the administrator's email address. Subsequently, the attacker can use the \"Forgot Password\" feature to reset the administrator's password, thereby gaining unauthorized access to the admin account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-3605.yaml"}
 {"ID":"CVE-2025-36604","Info":{"Name":"Dell UnityVSA \u003c 5.5 - Remote Command Injection","Severity":"critical","Description":"Dell Unity, version(s) 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-36604.yaml"}
-{"ID":"CVE-2025-37164","Info":{"Name":"HPE OneView - Remote Code Execution","Severity":"critical","Description":"HPE OneView contains a remote code execution vulnerability, letting remote attackers execute arbitrary code, exploit requires unspecified conditions.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-37164.yaml"}
+{"ID":"CVE-2025-37164","Info":{"Name":"HPE OneView - Remote Code Execution","Severity":"critical","Description":"HPE OneView contains a remote code execution vulnerability, letting remote attackers execute arbitrary code.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-37164.yaml"}
 {"ID":"CVE-2025-4008","Info":{"Name":"MeteoBridge \u003c= 6.1 - Remote Code Execution","Severity":"high","Description":"The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-4008.yaml"}
 {"ID":"CVE-2025-4009","Info":{"Name":"Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection","Severity":"critical","Description":"The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz.This web interface has two endpoints that are vulnerable to arbitrary command injection and the authentication mechanism has a flaw leading to authentication bypass.Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2025/CVE-2025-4009.yaml"}
 {"ID":"CVE-2025-40630","Info":{"Name":"IceWarp Mail Server ≤11.4.0 - Open Redirect","Severity":"medium","Description":"IceWarp Mail Server version 11.4.0 and below contains an open redirect vulnerability that allows attackers to redirect users to arbitrary external domains through malicious URLs.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-40630.yaml"}
@@ -3493,6 +3505,7 @@
 {"ID":"CVE-2025-41243","Info":{"Name":"Spring Cloud Gateway Server Webflux - Broken Access Control","Severity":"critical","Description":"Spring Cloud Gateway Server Webflux contains a vulnerability caused by unsecured and exposed actuator endpoints allowing modification of Spring Environment properties, letting attackers modify configuration, exploit requires unsecured actuator endpoints exposure.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2025/CVE-2025-41243.yaml"}
 {"ID":"CVE-2025-41393","Info":{"Name":"Ricoh Web Image Monitor - Reflected XSS","Severity":"medium","Description":"A reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-41393.yaml"}
 {"ID":"CVE-2025-41646","Info":{"Name":"RevPi Webstatus \u003c= v2.4.5 - Authentication Bypass","Severity":"critical","Description":"An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-41646.yaml"}
+{"ID":"CVE-2025-4210","Info":{"Name":"Casdoor - Authorization Bypass","Severity":"high","Description":"Casdoor up to 1.811.0 contains an authorization bypass caused by manipulation in HandleScim function in controllers/scim.go, letting remote attackers bypass authorization, exploit requires remote access.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2025/CVE-2025-4210.yaml"}
 {"ID":"CVE-2025-4302","Info":{"Name":"Stop User Enumeration WordPress plugin - Authentication Bypass","Severity":"medium","Description":"Stop User Enumeration WordPress plugin \u003c 1.7.3 contains an authentication bypass caused by URL-encoding the REST API path /wp-json/wp/v2/users/, letting attackers bypass user enumeration restrictions, exploit requires crafted URL encoding.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-4302.yaml"}
 {"ID":"CVE-2025-4322","Info":{"Name":"Motors \u003c= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover","Severity":"critical","Description":"The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4322.yaml"}
 {"ID":"CVE-2025-4334","Info":{"Name":"Simple User Registration \u003c= 6.3 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4334.yaml"}
@@ -3507,6 +3520,9 @@
 {"ID":"CVE-2025-45854","Info":{"Name":"JEHC-BPM - Remote Code Execute","Severity":"critical","Description":"A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM \u003c= v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-45854.yaml"}
 {"ID":"CVE-2025-45985","Info":{"Name":"Blink Router - Command Injection","Severity":"critical","Description":"Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide function.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-45985.yaml"}
 {"ID":"CVE-2025-4632","Info":{"Name":"Samsung MagicINFO 9 Server - File Upload \u0026 Remote Code Execution","Severity":"critical","Description":"Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-4632.yaml"}
+{"ID":"CVE-2025-46349","Info":{"Name":"YesWiki Reflected XSS via File Upload","Severity":"high","Description":"YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file upload form. This vulnerability allows any malicious unauthenticated user to create a link that can be clicked on by the victim to perform arbitrary actions. This issue has been patched in version 4.5.4.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2025/CVE-2025-46349.yaml"}
+{"ID":"CVE-2025-46549","Info":{"Name":"YesWiki \u003c= 4.5.1 - Cross-Site Scripting","Severity":"medium","Description":"YesWiki \u003c= 4.5.1 contains a reflected cross-site scripting caused by insufficient sanitization in user input, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-46549.yaml"}
+{"ID":"CVE-2025-46550","Info":{"Name":"YesWiki \u003c 4.5.4 - Cross-Site Scripting","Severity":"medium","Description":"YesWiki \u003c 4.5.4 contains a reflected cross-site scripting caused by unsanitized `idformulaire` parameter in `/?BazaR` endpoint, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-46550.yaml"}
 {"ID":"CVE-2025-46554","Info":{"Name":"XWiki REST API - Attachments Disclosure","Severity":"high","Description":"A vulnerability in XWiki's REST API allows unauthenticated users to access attachments list and metadata through the attachments endpoint. This could lead to disclosure of sensitive information stored in attachments metadata.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-46554.yaml"}
 {"ID":"CVE-2025-46822","Info":{"Name":"Java-springboot-codebase 1.1 - Arbitrary File Read","Severity":"high","Description":"OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-46822.yaml"}
 {"ID":"CVE-2025-47204","Info":{"Name":"Bootstrap Multiselect \u003c= 1.1.2 - Cross-Site Scripting","Severity":"medium","Description":"A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF).\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-47204.yaml"}
@@ -3621,6 +3637,7 @@
 {"ID":"CVE-2025-9744","Info":{"Name":"Loan Management System 1.0 - SQL Injection","Severity":"critical","Description":"Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2025/CVE-2025-9744.yaml"}
 {"ID":"CVE-2025-9808","Info":{"Name":"The Events Calendar \u003c= 6.15.2 - Information Disclosure","Severity":"medium","Description":"The Events Calendar WordPress plugin \u003c= 6.15.2 contains an information disclosure vulnerability caused by REST endpoint exposure, letting unauthenticated attackers extract data about password-protected vendors or venues, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9808.yaml"}
 {"ID":"CVE-2025-9985","Info":{"Name":"Featured Image from URL (FIFU) \u003c= 5.2.7 - Unauthenticated Information Exposure via Log File","Severity":"medium","Description":"The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-9985.yaml"}
+{"ID":"CVE-2026-21858","Info":{"Name":"n8n Webhooks - Remote Code Execution","Severity":"critical","Description":"n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-21858.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
 {"ID":"CVE-2004-0437","Info":{"Name":"Titan FTP Server 3.01 - DoS via LIST Command Disconnection","Severity":"medium","Description":"Titan FTP Server version 3.01 build 163 (and possibly other older versions) contains a vulnerability where disconnecting during a LIST -L command may crash the daemon. Remote attackers can cause denial of service by initiating a LIST -L command and then abruptly disconnecting, leading to server instability.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0437.yaml"}
 {"ID":"CVE-2004-0656","Info":{"Name":"Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion","Severity":"medium","Description":"Pure-FTPd versions ≤ 1.0.18 are vulnerable to denial of service through connection limit exhaustion. The vulnerability occurs in the accept_client function when the maximum number of connections is exceeded, potentially causing the server to become unresponsive or crash.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0656.yaml"}
@@ -3667,7 +3684,6 @@
 {"ID":"CVE-2022-0543","Info":{"Name":"Redis Sandbox Escape - Remote Code Execution","Severity":"critical","Description":"This template exploits CVE-2022-0543, a Lua-based Redis sandbox escape. The\nvulnerability was introduced by Debian and Ubuntu Redis packages that\ninsufficiently sanitized the Lua environment. The maintainers failed to\ndisable the package interface, allowing attackers to load arbitrary libraries.\n","Classification":{"CVSSScore":"10"}},"file_path":"network/cves/2022/CVE-2022-0543.yaml"}
 {"ID":"CVE-2022-24706","Info":{"Name":"CouchDB Erlang Distribution - Remote Command Execution","Severity":"critical","Description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2022/CVE-2022-24706.yaml"}
 {"ID":"CVE-2022-31793","Info":{"Name":"muhttpd \u003c=1.1.5 - Local Inclusion","Severity":"high","Description":"muhttpd 1.1.5 and before are vulnerable to unauthenticated local file inclusion. The vulnerability allows retrieval of files from the file system.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2022/CVE-2022-31793.yaml"}
-{"ID":"CVE-2022-37932","Info":{"Name":"HP Switch - Authentication Bypass","Severity":"high","Description":"A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions- Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;\n","Classification":{"CVSSScore":"8.8"}},"file_path":"network/cves/2022/CVE-2022-37932.yaml"}
 {"ID":"CVE-2023-22629","Info":{"Name":"TitanFTP move-file Function ≤ 1.94.1205 - Path Traversal","Severity":"high","Description":"TitanFTP versions up to 1.94.1205 contain a path traversal vulnerability in the move-file function where the newPath parameter is improperly validated. An authenticated user can upload a file and then move it to any location on the server filesystem, potentially allowing arbitrary file placement and system compromise.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"network/cves/2023/CVE-2023-22629.yaml"}
 {"ID":"CVE-2023-33246","Info":{"Name":"RocketMQ \u003c= 5.1.0 - Remote Code Execution","Severity":"critical","Description":"For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content. To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2023/CVE-2023-33246.yaml"}
 {"ID":"CVE-2023-37582","Info":{"Name":"Apache RocketMQ - Remote Command Execution","Severity":"critical","Description":"The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function on the NameServer component to execute commands as the system users that RocketMQ is running as. It is recommended for users to upgrade their NameServer version to 5.1.2 or above for RocketMQ 5.x or 4.9.7 or above for RocketMQ 4.x to prevent these attacks.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"network/cves/2023/CVE-2023-37582.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-8ce8439a513d625134eac84f0fa95032
+a8b801f33074a9e04262f936c387f799

dast/cves/2020/CVE-2020-9402.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2020-9402
     cwe-id: CWE-89
     epss-score: 0.81181
-    epss-percentile: 0.99127
+    epss-percentile: 0.99124
     cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
   metadata:
     vendor: djangoproject
@@ -54,4 +54,4 @@ http:
           - "ORA-06512:"
           - "Request Method:"
         condition: and
-# digest: 4b0a004830460221008c23557e640a5505702e52407322cf81c243850e275da1e74d24afce204a336c022100877ec3a155433b617b6ed1c5bb179e7e151af1b3a4675774bf365be1731b5765:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220744772b1adca90468aaee2a07671941970b7e5c61e20c355c6cc783d5f3a0337022100fbe3cb55ab904fd44b1987947cd2b9aaaedbe01ba2d24816be1df3f3bba8e50c:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-35042.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2021-35042
     cwe-id: CWE-89
     epss-score: 0.35237
-    epss-percentile: 0.96899
+    epss-percentile: 0.96903
   metadata:
     verified: true
     fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -65,4 +65,4 @@ http:
           - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
           - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
           - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 490a004630440220309a25b4e63e1dc1eb9813f1e503ce5edfb60d23e615c501b7513c11f08bff8102200b1ff92f57a7780a693c60fbf66162879adb4f7120443b71275d954284f5d93f:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220781966c6bb2d374e0cfac62875f9c135d90e57506dc8e7c9fbc3a276b04965df02202b2160f1e1c22b03456a8a6845af95bc087859eaa77576dbec8aab5ebcaaaddb:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-42889.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2022-42889
     cwe-id: CWE-94
     epss-score: 0.94161
-    epss-percentile: 0.99909
+    epss-percentile: 0.99911
   metadata:
     max-request: 1
     confidence: tenative
@@ -70,4 +70,4 @@ http:
         group: 1
         regex:
           - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4a0a00473045022100f037341831272ac8b09bb4478f4810b12f7d726e176bade327b7c07e5c849846022015a2ec76814f0ffedef1a1bed72dd5cc58b693df6d981e68950a429b7eb2bd99:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c5e1819e229f86036e266c7a37c416d98714425aef2e6b8512efb04e4108ea16022100b690e6840b6d5fb82897acb4140f478b5997d0aa67d38fef85406b6051354411:922c64590222798bb761d5b6d8e72950

dns/acme-challenge-detect.yaml

@@ -0,0 +1,30 @@
+id: acme-challenge-detect
+
+info:
+  name: ACME DNS Challenge - Detect
+  author: rxerium
+  severity: info
+  description: |
+    Detects ACME (Automated Certificate Management Environment) DNS-01 challenge records used by Let's Encrypt and other certificate authorities.
+  reference:
+    - https://www.rfc-editor.org/rfc/rfc8555
+    - https://letsencrypt.org/docs/challenge-types/
+  metadata:
+    max-request: 1
+  tags: dns,acme,letsencrypt,certificate,discovery
+
+dns:
+  - name: "_acme-challenge.{{FQDN}}"
+    type: TXT
+
+    matchers:
+      - type: regex
+        regex:
+          - "IN\tTXT"
+          - "[A-Za-z0-9_-]{43}"
+
+    extractors:
+      - type: regex
+        regex:
+          - 'TXT\s+"([^"]+)"'
+# digest: 490a0046304402202b8780aa7f0a3f0bbef9582c4b50b02624b7f5a03d893db2d24af28ad08e9c11022035e990db7544711f554a9e13bd4c9f5f22f1903fab31269aff5bfe52f2d5f389:922c64590222798bb761d5b6d8e72950

dns/dmarc-validation.yaml

@@ -0,0 +1,31 @@
+id: dmarc-validation
+
+info:
+  name: DMARC - Validation
+  author: theamanrawat
+  severity: info
+  description: |
+    Checked for the presence of a DMARC TXT record and validates its basic syntax and the policy.
+  reference:
+    - https://mxtoolbox.com/dmarc/details/dmarc-tags/dmarc-policy-options
+  tags: dns,dmarc,config,email,security
+
+dns:
+  - name: "_dmarc.{{FQDN}}"
+  
+    type: TXT
+    class: inet
+
+    recursion: true
+    retries: 3
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "v=DKIM1"
+        case-insensitive: true
+
+      - type: regex
+        regex:
+          - "p=none"

file/keys/credentials.yaml

@@ -17,7 +17,5 @@ file:
     extractors:
       - type: regex
         regex:
-          - "[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s]"
-
-# Enhanced by md on 2023/05/04
-# digest: 4a0a00473045022100adab349203f3598a0410c8f3c1001334e81f7234bdc2a08b635ac94e1235f58b022058d28c28d56d9c932f402b4e1b8eb2288a650b28dcdf417ca5e93efae90b402e:922c64590222798bb761d5b6d8e72950
+          - "(http|https|ftp)://[a-zA-Z0-9][^/\\s:@]{2,19}:[^/\\s:@]{3,50}@[a-zA-Z0-9.-]{3,100}(:[0-9]{2,5})?(/|$)[\"'\\s]"
+# digest: 4a0a00473045022100ed45636930eea463c9a324e1560f6b99c93be5752fa24a0f8043fb766c8264df022014c96d397124545cef351ead324b62f04992680e8a196a0fdbc712a4062f8754:922c64590222798bb761d5b6d8e72950

file/logs/aspnet-framework-exceptions.yaml

@@ -22,4 +22,4 @@ file:
           - 'InvalidOperationException'
           - 'UnauthorizedAccessException'
           - 'NotFound'
-# digest: 4a0a00473045022100a710164f0f1ca4848036a3dd6dfd7841e18e2a66a446d1b4858fb1bd111a744c0220471024a849f2c15f6f2da913a1ced9995f392f208ddca612ba023038763639df:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ec9eafe62e5fa1a1c01ec2f4e61bfa06b7174cc25cd44f801590da632bd3b02c022100c9acfe32ab0684636985176ee5d0b14943208057411f63b1158ee3707a7a371f:922c64590222798bb761d5b6d8e72950

file/logs/nodejs-framework-exceptions.yaml

@@ -30,4 +30,4 @@ file:
           - 'BadRequestError'
           - 'MongoError'
           - 'SequelizeDatabaseError'
-# digest: 4b0a00483046022100b20c60e55ba1d87630b65811c4e83395a55c5e5486d6fae2a9fb2a1319f2103e022100c9ed8172bcd82e526ed003a504133af5897588c2e6b13e6bb896fc598a32b03e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022012d6c4c593669d407b42300b00ce9fc3b6172d336fc3a17321cfd2885a3b9901022100d4164311f1cdfefe53d3aed4f02b610491c99f35dae51dc797ee334d78bd4223:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
     epss-score: 0.83676
-    epss-percentile: 0.99258
+    epss-percentile: 0.9926
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -56,4 +56,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 490a0046304402202739ae60e433eab5ead64854efe65a597eb85b5e5cad40b4dfaf0957e6921ca602202ca3c3d5b62b43ce53179e205fe8650cf03cb4b9ad85d8b730504bf6df797547:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220683fefaee8ad9550a26c1ff99ae93774240c46d59db97462c42588fc32018f7c0221008f14edc016893976035340f97eff9a687b7f727ea80153f76f6732885cd6019a:922c64590222798bb761d5b6d8e72950

headless/cves/2022/CVE-2022-29455-headless.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2022-29455
     cwe-id: CWE-79
     epss-score: 0.48769
-    epss-percentile: 0.97657
+    epss-percentile: 0.9766
     cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -52,4 +52,4 @@ headless:
         words:
           - "elementor"
         case-insensitive: true
-# digest: 4a0a0047304502204748e3c62fdbb4df9d634392982d69808fdf4cfef3ab3a4d0508c852317759eb022100d02d7ba241565098633148f19e81799c2b42de8608c7372be2495315653be052:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100acc631b36c0b4f6ea2aa9ddeeffc1ebdf48677fa442443b88e66ef5bf1f8e49702206c5dfd0b03468f189a4187161bfa0c4ef2a795c7e0644fb38fd65cca9dfdae87:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -18,8 +18,8 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
-    epss-score: 0.07702
-    epss-percentile: 0.91638
+    epss-score: 0.07333
+    epss-percentile: 0.91422
   metadata:
     verified: true
     max-request: 1
@@ -50,4 +50,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 4a0a004730450221009c599878a151a638cb466988bc4a9e5d60df7725d4a3a00542042c6ec39371810220413ac877f0095edffd43561a650fc542c5812cefc82b7caf85f5bec74ec37b3a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b9d00271dbdb45c40709afe3375e37facd87134a648f1f5c5c3269a87649839d022100d458d9d9031bc151e9377fe603d4003a983588698488bea2a23f166def5f62a6:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-38526
     epss-score: 0.82064
-    epss-percentile: 0.99172
+    epss-percentile: 0.99171
   tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
   - steps:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 490a0046304402201dcdba00cbeb8c13e8cc9df70aa680d95091afeabda78b3be5959e1cd6c273ae022010b1a439349c0213d2ecc20f9cdda658055b71e8ad30f0dd66b35ed12ccb7b80:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b24933829b396c5b64e649692369bea17dd6989b2be1156c0e9019ce195e4b6e022031a58bbd2dcdd3948115461f2fa6f139fd1ebda41893968cac88f67ec707872b:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -15,8 +15,8 @@ info:
     - https://patchstack.com/articles/reflected-xss-patched-in-essential-addons-for-elementor-affecting-2-million-sites/
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
   classification:
-    epss-score: 0.03281
-    epss-percentile: 0.86818
+    epss-score: 0.03042
+    epss-percentile: 0.86271
   metadata:
     verified: true
     max-request: 1
@@ -46,4 +46,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4a0a0047304502202e022a69c3ba021ef4d0b37bcfd03c9aecaec3209f01ced08332cce5019b8970022100deb923c2a344f273af99e9389ad8e3e1d1196152835949b477a75dbf9a781e1b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205b2f3e05324d0407c5a7a4d7938f382b579fee6de61699956fef75ccc2d836c1022015ede1f2fb87bcbb17ab9f2ed7ccec735ac05881dbabb7283f51ae88bfd628e7:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
     epss-score: 0.34064
-    epss-percentile: 0.96829
+    epss-percentile: 0.96834
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
     max-request: 7
@@ -190,4 +190,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 4a0a00473045022017f37dcaa90c7e0701019338fbd9ee3bb48dcc8eb26d531dcb10407949b3b644022100df07774b1ea9f26c2c699c9f06ab50471ceb5986a19b730f2d57acfc1e7a62b7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022049368eac638d19d2d1c4f3378269763002ad58cb5a179405270e862d1937fbc1022100edd5425b0200b063a118b9560c4884c23a8070507910d27c2b6e1fae9c50fa68:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-29927-HEADLESS.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2025-29927
     cwe-id: CWE-285
     epss-score: 0.92896
-    epss-percentile: 0.99758
+    epss-percentile: 0.9976
   metadata:
     vendor: vercel
     product: Next.js
@@ -59,4 +59,4 @@ headless:
           - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
           - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
         condition: or
-# digest: 4a0a00473045022100b1cae2aef7a295285b86963213cb4670bb95060dca6ef5da6df66dc1f9bfa587022073f667d475ef8c3914186a6c411dfe388caa4c843a4724814173d58de6e0c39f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210089c51e9cf021e6dddb3d06594a3203e755603bcffc75da78d57cf0fe3d523657022100ec6cd89ab622b3a92780317c83b20f933f6c6f0fd95dd71abf127413378c9270:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-8191
     cwe-id: CWE-79
     epss-score: 0.01065
-    epss-percentile: 0.77213
+    epss-percentile: 0.77218
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -69,4 +69,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 490a004630440220304c79547b708e2c6d1cc5b3aa8bdd5270a06f9b30819ff6aeb3f1cd0782e12402206668d56417fdf3240b38acc0903d99b175e477060d9d35302764490d2d5bdc38:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c1efc08c65cf7dd58a535a0c088a660260d248a0e00f844ff434016fc05931f40221008ebe729562cd61dc0f213ad58ef6e612ceac60cc5a4816385bdcee00bd5dbf00:922c64590222798bb761d5b6d8e72950

headless/mozilla-pdfjs-content-spoofing.yaml

@@ -2,7 +2,7 @@ id: pdfjs-content-spoofing
 
 info:
   name: Mozilla PDF.js - Content Spoofing
-  author: 0x_Akoko
+  author: 0x_Akoko,s4e-io
   severity: medium
   description: |
     Detected PDF.js viewer loads and renders external PDF files without proper origin validation. Versions < v1.3.91 are vulnerable to content spoofing attacks.
@@ -44,7 +44,9 @@ headless:
       - type: word
         part: body
         words:
-          - "pdf.js"
+          - "viewerContainer"
+          - "pdfViewer"
+        condition: and
 
       - type: word
         part: body
@@ -54,4 +56,4 @@ headless:
           - "blocked"
           - "Not Found"
         condition: or
-# digest: 490a0046304402207dc1eb1cfd5bc25039d729f591a15f5a9a37667ed6ad50d1c1c73fe20004b9a8022071080c75bcced708e51b213a2d9887954d7145d3666a5b1de77a04eb08905a67:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202ddea783b4abe6926b8be434dc4f47d1e827789e5f58c85cc9300b01f70f34ab02210088e36c82f3b5709d75ab0180d99481228d55d25453b1dce9a1f84f154e06a186:922c64590222798bb761d5b6d8e72950

helpers/wordlists/mysql-passwords.txt

@@ -16,4 +16,5 @@ eLaStIx.asteriskuser.2oo7
 raspberry
 openauditrootuserpassword
 vagrant
-123qweASD#
+123qweASD#
+test

helpers/wordlists/mysql-users.txt

@@ -4,4 +4,6 @@ cloudera
 moves
 mcUser
 dbuser
-asteriskuser
+asteriskuser
+mysql
+test

http/cves/2000/CVE-2000-0114.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5.3
     cve-id: CVE-2000-0114
     epss-score: 0.05458
-    epss-percentile: 0.899
+    epss-percentile: 0.89904
     cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
         group: 1
         regex:
           - 'version:([0-9.]+)'
-# digest: 4a0a0047304502205e9a4273d8e3cfac5758a358fd2b5df29512c4924febb9b6909bc663c4a8bc12022100da5dea035d1fab5b789957d3b131b3402d376fc648b76fc665e213bd99a15f39:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c9b6b0b86c2c2395fc95039ef61c619fe3848a8ac438e22a463547f674a0b8de022031e69c37326e623e928483b1e786c1b31c1b71e64070503e6ef5183f66a0c633:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2000-0760
     epss-score: 0.38569
-    epss-percentile: 0.97108
+    epss-percentile: 0.97113
     cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c0ecd7c36ec0c811d17ed56c414bbccaf615435e3db4e7ed398f3e197217727a022010676e21a00bde81e6106cccf76908b9b1406303944f48fb30c34a3f8065519d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b904092cef7009bc41d505fab1c76d0ed226632b87bf920c3af0a0e42c889c0f022100a79fa2eeaaf9264a89aecd69c8cbb965e450248962e721e6c89549bb0f036413:922c64590222798bb761d5b6d8e72950

http/cves/2001/CVE-2001-0537.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2001-0537
     cwe-id: CWE-287
     epss-score: 0.93696
-    epss-percentile: 0.99834
+    epss-percentile: 0.99836
     cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -53,4 +53,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f6b3c5c30db8ae2c2bde3701c7cf2cafa4318ba9872523b798b12e6def3eaf3a02204d857a0256a5ffb6212f0526f4c467a9aadfb2fad39f0a4bd7560230680d83b2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204b8d6d11b46b3044397edeebad0620ddeea9c09a01c92f35f75c030c7093da72022100af64bdf0cc7d8c060b41af000bc4337ec10d8a8afbd53750bbe685e355249d78:922c64590222798bb761d5b6d8e72950

http/cves/2002/CVE-2002-1131.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2002-1131
     cwe-id: CWE-80
     epss-score: 0.03877
-    epss-percentile: 0.87891
+    epss-percentile: 0.87895
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 5
@@ -60,4 +60,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022017475c4bd48f2c2c92f53d85ab43567c2e0626272e55f60d6d17dabbc60a084b022100eabcea2489e97ccc425224f6b91eb996fa104141d4d629ed15d1150d489b5cce:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c587232957ba736c22af222707911d24f6b53fc8acd21123de14bfb0dea5f9ce02203d8a42efb1ce30144ad46d0dd6384103bdc7d66a2d141ea91fed8eacf7c30424:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
     epss-score: 0.00124
-    epss-percentile: 0.32417
+    epss-percentile: 0.32345
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203d567b5c9d5e7093d256403977006368a8b5c02aed1f4033776a9114dfc27c22022100be5a8d12b7bd03a9e6277a751b0b86189c13536f17a65c9e4d36dad2b0ad421b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a0e3f30eaa7b0379b888c86b4f96da42da8e3dbb65e9cfcc6421e8ea3b48a7d402201f442d977342c5210892a1e45f37ebcbe40f9dcbbf77718eaf7e7dd7169516b9:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-1965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2004-1965
     cwe-id: NVD-CWE-Other
     epss-score: 0.00265
-    epss-percentile: 0.49768
+    epss-percentile: 0.49731
     cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4b0a00483046022100d9ab2521c038028fb3dbd57fab9dc68bf76e48d018877a7da254a72423eba341022100e9ee177a9f6226834fd2ecb467e4ca454bc88ed09fe2d86bad8ee395163254f1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203c1c76a6abaf4a771d582390dfc5c43867ede5e60b63377f9b6c941fcb6945e50221008986217f5ef2563c6a3fca4e25b4bcc8046b91441f586cad8d6a3455729af089:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
     epss-score: 0.08605
-    epss-percentile: 0.92149
+    epss-percentile: 0.92157
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502203c81dc9a718654e7eb749e729e58cb6dbdb6c93ecc03a65d416409cfebc819f302210088cf76918ac1e3ace46a284fad4d14802625a1aef2de1ebe2d6c6d4b9caf7fcf:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f4b5b08ab3d847d6541097b5e22436b548ee6adcdc46ec67992896df0b3276aa022100dab4809a80136dd992cf6d013ae2ea73be737782e2ec67d2b88909de17281066:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3128.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5.4
     cve-id: CVE-2005-3128
     epss-score: 0.01733
-    epss-percentile: 0.81998
+    epss-percentile: 0.82007
     cwe-id: CWE-80
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
         part: header
         words:
           - "text/html"
-# digest: 4b0a00483046022100e754ee1cce494e2d00ae254dd43cb045cc846965861389fd179127cb67860bc4022100d24a013f89ed47b061819e77497722f66f788d7508d04f0b3605d594d7d72519:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207c23342bcb70df1c51ff4a05bb23ea59e1046b25bd9a897161afe1bdb530087002205b61118a90d386ae84b130483e5e4f08fe2aca44775054ee5faae86a6c93578c:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
     epss-score: 0.1015
-    epss-percentile: 0.92877
+    epss-percentile: 0.92881
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100a70637f89a79f5d87bd97a029bdb0afccba3f237a13a3e14f9bc2d8adaabfd8a02201117dba93c943b0ee3c2faa4f7eec38288900186b381cbded626bd8574611307:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b5b13e578f1214fdd4882dbea483bc4b15feeda57308844aa250b471071d82580221008e612b03bbde8bc9eaf3ad97802765bb3efb05281bad85a456aada2e100381c1:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
     epss-score: 0.01653
-    epss-percentile: 0.81581
+    epss-percentile: 0.81588
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a00473045022067d917640668a1b8ebc11c0fb68dbe9415d65b31e4af809d3535a52cd4d6f15d022100ad8af7de21e2aaa59d59c1eab364b8dd64e1138df31fa0b874343adfb4407efc:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022073cc7e2646e65913ae0eee69ab03acdd63dd92cb05ab98c2df6c2fcee2a6d463022100fb8a588cc1c2087b2784c91fb44662bac2e9055085a6d5fa0c3145d24b54e128:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
     epss-score: 0.00373
-    epss-percentile: 0.5848
+    epss-percentile: 0.58456
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022075a017ae6772b5cd94cbad0fc3e1e13e7b89bbc1f50c1c3855654b5977f2e4f102202a49afb5b221fd47a07c49d99ad1ffb051efc958c0afa7f1e4c73a6ee0337700:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022072c220ff7c8d1e6603c2e07f3bdc506d5ab4f60eb8a7c12f1ad8884fa9d0a477022100ffe3cf16fcf318b2496d693c148e0fcf9667d724bad875e409830f414f5e096e:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-1681.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2006-1681
     cwe-id: NVD-CWE-Other
     epss-score: 0.00299
-    epss-percentile: 0.52852
+    epss-percentile: 0.52812
     cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502206f616dee88bbf1b8478c8388d5402c77b1814f9ae41c67619d134a7afb0a1886022100ef40e99ff63a565f10f3a407233b8a68ba34e58bca23292aef6a534b96ba0cdf:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e72d79302e1f8fe4e86d254b8cfe644de5eae03acfaac88e268cd91961caa8f5022029fb0d6aebc65ef11ef8eb2475a2372b29d66b2f6530731aa3e27c57ef037798:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100de30e9b7eae15daf88be5039f5f9ed30570077b88ed030aadebbf2d8b295e7d202202d4b825fb1f6775741231dcdcdd8d656fc802a311aaaeeb246582c1d473eab41:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100eea00f78da1901595a2d5e7bfb629f987f584de7c1927ef1e1af12f1f072149b022100ecc787b78ea10d0fe57392e763c1e251b1ea0c72b0d2ac64eaf260f79c37b5ef:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-3392.yaml

@@ -17,8 +17,8 @@ info:
     cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
     cvss-score: 5.0
     cve-id: CVE-2006-3392
-    epss-score: 0.78348
-    epss-percentile: 0.98982
+    epss-score: 0.79497
+    epss-percentile: 0.9904
     cwe-id: CWE-22
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210085264de963baaffab327741a157f27076948467fcfad2bb8a4465dd8b6371cc80220528ac7b99accca17f8104386b5a19af405cf58e784ae3c14c62134c682b0c477:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202610da2417bd5e4fd138729a0520b5fc934f62eaa8f2a411f1fc675b8045f975022100872d87b45e773396f592f15c459b27e93094af6479a217bc38d8829f4d88c127:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-0885.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2007-0885
     cwe-id: NVD-CWE-Other
     epss-score: 0.02133
-    epss-percentile: 0.83716
+    epss-percentile: 0.83728
     cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220497974c2f7d58847e58b426158e884b7fe79635b4222a6c11e94f2fb93a7651f022100d7d3063a3b445ab78593e4b932255271ca6c3c4ab5e17bc0a161066952ff1f26:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220553d5ca9be0f85cbb89479b707b4321ee21e2a82cd81788c1530e8ded1d8252d022048e469b3d7655cc9a936ccecda6c3c9991fe69c52cddf838b23e363f8aaf508d:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.2
     cwe-id: CWE-79
     epss-score: 0.80643
-    epss-percentile: 0.99099
+    epss-percentile: 0.99095
   metadata:
     max-request: 1
     verified: true
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022058d110aefbeea1c11fbd4f2c39e1c0bb48108421bca4bf804668d0e0a6923180022100e72b854ea661f6bd631740c762efa15ffc45933ff04b1cb96607d7295c7c2b40:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f8d3126cb7a1414366a002be0662f6d580e1cfa8d66072bef47a1dcc38aaa0c2022100b887bad2f8c843d684e0d2414ae10e54d0b9f0547c0aa3d228cdf369cf4e1b30:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-3010.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-3010
     cwe-id: CWE-20
     epss-score: 0.94007
-    epss-percentile: 0.99885
+    epss-percentile: 0.99887
     cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022025babfd357a67d29798021d1dac613b5c1a74312d8717aa1ca795ece4d22885d022100f92ee8e0b769260cf2c599b2a32a5994f274651bbda90c44c317836db0629d93:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009b116fa0cff7f00935b077b655a1ad5f3aabc3c1d565f70f6929869a7f93a058022100af565988e17ba339ccc23f8fcaeb0bd438f76634b2464a64ba4fffe9fea4f1b9:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
     epss-score: 0.00177
-    epss-percentile: 0.39607
+    epss-percentile: 0.39567
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100a11e14967f90bedd2d63b2570df0306436d177e829d192c51cce4d1633784e21022100b66674fd588103809574650c81b4044ec6d13e391c5671b240b0ea5ce9cdb9b2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c32bd9db6c20e381abf2a5cdc552988a16f113960585843149aaccaf8b6611ed022033595a0706122d75b899010a8e4c7738eb184a1fa42a1269e431b83929136e69:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4556.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-4556
     cwe-id: NVD-CWE-Other
     epss-score: 0.02359
-    epss-percentile: 0.8449
+    epss-percentile: 0.84502
     cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022018b8861e3e9da774fa17bfc416eff3d46bd3dc0771c317e0cdb869d517e2f52f022059069ae922cd39b3acc121ec72d6a2d9fb49cd439341430e8712a9493b04a2e8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e980a93cb33e8469be938118930fba62f8d9e23df7e38764e2397351532c4f1702207d9fa10ef4668e8342a36be7592016497f3bde7a58e884d2ae37d49663351ea2:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
     epss-score: 0.00523
-    epss-percentile: 0.66313
+    epss-percentile: 0.66319
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d1d9789bfc95fc23a5583f9d319277ccd8002bd5928863cfbd0fd6935c3a3d2602204ed5400e1c8daec41bbb217c412532db641da8fb22b46493beae781be11b4409:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b81f80c6672b7bbfa90bda0cdf80c7809761ee600275fe7e708db3e172baf8d202207d1fedabfc203078727ea415f58eeefb6662dfbed91889205cac22bd46442325:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1059.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1059
     cwe-id: CWE-94
     epss-score: 0.00265
-    epss-percentile: 0.49795
+    epss-percentile: 0.4976
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100e74a4f4c4787df215938a0f9ef18a88f56564f2441caafabbd723b2544fa7ab6022100b915d84cc67152b3747dc01697ee5952d670ecd4f7bd6e853487e52fed5b53ea:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207d384b1a1e017321a1621c0a61d77d816c4ac04aa197f94ca684ed9a96fc5b57022033057d1458bc7ce7bd42e9584094a5f1f412df7113de7286dc0840ed61cfb111:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1061.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1061
     cwe-id: CWE-79
     epss-score: 0.00158
-    epss-percentile: 0.37199
+    epss-percentile: 0.37152
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f72e61dcbb4ac41ebed77a3c401d2825cd3d69f1ed01bb3cdad3847e9534fe8402207709d2f7864c4925fb540d45d6f8897d71166b3b8375ff5b0809a96c529446a4:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022003d4cf5635a9a027316ae0d2850aa43d1f9e2bdda1d8c9e6f0dd2f337413f181022017e883735467cc0427e59398644dff4b44df7a54fa51dce1e9b3178dcee88ff8:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
     epss-score: 0.00437
-    epss-percentile: 0.62528
+    epss-percentile: 0.62521
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100a413f1227265df50e8d5f5d0877ab9468626cfa811d72b87a1c3334c0e36525d022100dde8daada077d93d6d846fdebbc285959607728d01bf3bdb40f596126b53b4b4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e6c6d3b1980342829b86e0ad78341beb7c66bd0f2af977a54fdc33333e3cca3002201c15ab13c9fd39838f052b5be785f1a5faa5ae20787ef1568657199737c7506b:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
     epss-score: 0.01643
-    epss-percentile: 0.81519
+    epss-percentile: 0.81524
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b1ec2f957bba70a75e5e6372cdfca1dc87a1c7676407296c5fdb44c6e88138fe022068d4eff0e47941a907cefa4455ed999ec4fd9edc52efc1763f082f1c5d4f3ed3:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bbc0f73d7dfaa2880a79a6ab08cbafb4e9b6d375e44ae54e9809aa2287508bb4022100fe1ff7e958208ad15dbd0b1338b12f58389e5fad8594eb515310c8f9d03953c3:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
     epss-score: 0.00144
-    epss-percentile: 0.35254
+    epss-percentile: 0.35202
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210099b6eeb9205678c545e04e5009fcb31e6b84d9f53c2d2c5ad81a6cb9e8c42f57022100eff399d771772ee16d45510f645e92fc4c91380c59888024bbd6b8fbbcccf027:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d199b33630ce7aa1d1346972d5c79e3453cb3152602fa428b42d321fbc6ab7c002202ce47a32877cc0129b24dd93fd4efaafe6e961d8493c31be3cf1564b86dfb358:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4764.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-4764
     cwe-id: CWE-22
     epss-score: 0.01041
-    epss-percentile: 0.76972
+    epss-percentile: 0.76973
     cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502206fe9c23214b51b3459845c9c5da75f051750d6d9bc328b62c8aa4567a02f8fd0022100f758d9cd6352427683818df7e8c4c3c6291ab1017342bf3cc77335b590c888f2:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220087c916956feb645b6ef37bce82aaac779e49fe6251ae6dc6af18b8ac457c7b502205110487d3b59ddc51cc6fd1b99134f90b25370bc5866252cb5ef2a1f9bfe46b3:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-5587.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-5587
     cwe-id: CWE-22
     epss-score: 0.01986
-    epss-percentile: 0.83157
+    epss-percentile: 0.83165
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -49,4 +49,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d580da5966a8b347eb4506a9c22c6a3f2d3f627ef0b9739e6de8b6221ce89d830220337aaaf8ae0a4a3b8e4de71a0b2863f9c975531f9b668908a89a77fa90ba9a90:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cee8f2be5165f3508b2d928e08399f5d7e681b2ccb4fc4d46f3ef0511652f970022100fd373c58ea868bd78a82ab21250c9a898f2713f73993dbe0ff33340cda636a12:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
     epss-score: 0.06734
-    epss-percentile: 0.91002
+    epss-percentile: 0.91007
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d60ba1297d5183275b18efca7cdd61afec56363c449b1fbb77f9123a17ac6217022005be7fd180fae6a5cd7a2af23a0337944684861391ae2e2bbd673aec16e358dd:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200d86130ef73ca0f9bd2b44078a96e6b39f6a9bd45e649b63261c7b07ffdbc3f102200f7dfa2bb33f45bc94cb0c0f24ca4ec0d8d8347072186da05d8213d145aa3d33:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6172.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6172
     cwe-id: CWE-22
     epss-score: 0.05386
-    epss-percentile: 0.89823
+    epss-percentile: 0.89825
     cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502204cd836cfafeef122612a39d1ba46b505a5ec9d3423fb21c490620865c8271c3f022100d995e4c941952a83e6806ebb2ca69710b561e11644e17655ee8cd23220352672:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008bc7319e6f5ace106050e2c83c63d90f65da2359829f29042fefc62f12534a5502204b3548f993646ba37f628dfda8e70d166f00ac36fc532683be7a61f2a899107f:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502200456990ffff04d9c5c4063fcdd3fa9297e9eac0e7874d6924f47600c656cdd59022100db2a3c169ef91e941b4e17fd10984ecc5b9d6d48a1a1da5821eb4128cc82c92b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ee82ab05a858434c624c98655701554c628de532031f30cb26315316d79f696602206999d4e66caaacb94c6bb971a5b28acdb1364294cd63b17cdba7146d5e0e8487:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
     epss-score: 0.01157
-    epss-percentile: 0.7811
+    epss-percentile: 0.78108
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e14e419597ff7a0d29a246cf9ca71dfcfce533d7ac2e62a998bf03940e7f8b12022033f327e64a947df2f82fc48a522944ade95e9a350434a297ffa82dd259eea374:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204f1313c0d0fc02b2b88e65e2205c59a7019f3985506008836db96c2bf101b49302201d1f7bcc769a5c4a320ca4a8302595d43a70bada655ae5d58e7af609bf58a156:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-6668
     cwe-id: CWE-22
     epss-score: 0.00573
-    epss-percentile: 0.68047
+    epss-percentile: 0.68066
     cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -45,4 +45,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022071001b7cfb8b50b2afafd99b0f94b4f913c316b247d9cb2733596a648a343031022100d23122f1946318384703ef21a803aa3b747fd9ab053b6bcf2c0a9a6908a1ddf4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022073a82abc162090280a1a6a64f2a459afbf2a0f4a91fcd9393b9fe83275971f610221009953c93df658c540e504fa9865b794592aee58e0e824002771a91ced6f284357:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6982.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6982
     cwe-id: CWE-79
     epss-score: 0.08587
-    epss-percentile: 0.9214
+    epss-percentile: 0.92146
     cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4b0a00483046022100f1f7a4dd301f84e9440f574e459a104b176d4405753449c70b1fa706c08c8ab7022100f4479e68dc2e1858433f0bc4b74a6666c5f592d559f73769559ed38eea89279e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f4753441f051d667e946c325ac87b7b2e2f0e524d40153c9975e1062ab6026d9022100b15999b68d102a16a8e3ca878e841266976f68394bcfe998cdd6d0b3d112d3ca:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-7269.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-7269
     cwe-id: CWE-20
     epss-score: 0.04298
-    epss-percentile: 0.88518
+    epss-percentile: 0.88519
     cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
   metadata:
     verified: "true"
@@ -43,4 +43,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a004730450221008ac7631d45d97a30c257bc2c8da3701dabfd36793f7ef8fd6e87f81852dcc4ef02203dae2b5dd6c1824d9a531ed63ca53f69631af5ae04ad37332ade6858601f360d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022054310a22ab60853a707d289be66bef985fdbcaf28a129f12b3f3c635be27ff04022100c660b8eb7c593d9259aa422c2cea13c56c025c31e72978d42d4a8d56607c270e:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
     epss-score: 0.03639
-    epss-percentile: 0.87485
+    epss-percentile: 0.87489
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502207390a617e4a4ad2389dc0c3e26c3b7288b3fb8ccdb1f4e0cb4b915daf7b3b15f022100fbb4804351887643fe5ebd27bbc1b3631c1d3e32a64c8911d1a718dd30a5f669:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022041c003cd7dd0950c4ba45a1d95ebf990967c24019768a647cd86539762fe79b702207af500d081922a844e77c2e26f615bd6008234b5b1ba8294e1720e92ec037640:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221009360625a0c62e9c5f823796fd097d48f6e54f53b111196a3e77a9da72a6d4732022100dbd3994d46853d1bdf20cc379a9e764c45e6db5f19cee61d5923af00993804c1:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200bfe958f1555d149c53f037d44e1c0c074a375ebce511ce35e44d96dc16084230220313afab3817449b57308ccdb0040085e5f6e8ccf4c684b1464642290097634de:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1151.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1151
     cwe-id: CWE-94
     epss-score: 0.92956
-    epss-percentile: 0.99763
+    epss-percentile: 0.99765
     cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -58,4 +58,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022069055e52e64b0874150fd81d4350b95190b25f1a39fb366f9d267dab1ccd9f7302210084a0dc2a5d03ff75213d73e347fbde6a9a34c48d4dd4b89faf2db7d1ac63fe91:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220539298220a42bf0ff3e7c0cb777b330cdaeaf7671e0591897d1a6ff364e79df7022100edc027fb32d49b98a217a331bd2f9623efe8a6dc904f8dfc52db21728bc0b660:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1496.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-1496
     cwe-id: CWE-22
     epss-score: 0.01909
-    epss-percentile: 0.82821
+    epss-percentile: 0.82828
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402206fb54b7560e916142641f682bcf04fadb3d11cbc25470ee8e7aef624cb8716a4022044c400bd56fffe943b27a9c53a589e96a2e215b31ec016ed41823635d640aebf:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200da36523a3a6e833daa84fdf70de711257a4cd3b2bfa8bb43c051567b192ef7e0220013869981588a320d42cc4ec4368b7dbddf5763fd7f5ef321be7fa8fed0194e5:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1558.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1558
     cwe-id: CWE-22
     epss-score: 0.09101
-    epss-percentile: 0.92405
+    epss-percentile: 0.92411
     cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c0d668e8c064633dddd67bbc1aa8d819db6b01bebfa82cf4019c06a7cca1a26f02205598610ecf278af5496422d1fac733763061a9b50836e5c30af3e6a1088fe7e7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009c7f62ce52440a68ef2f2c4382d338003a07745d867a39f305cabde3dde6f267022020c2ff2ffb9684139c81d1ffa20e8ad7b7d84d1e51ca917ce4a7215810f6a316:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
     epss-score: 0.08673
-    epss-percentile: 0.92186
+    epss-percentile: 0.92193
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d951cbf265c3671e892d80803fa3d19c69f1b270ebd33b70106449857bf31916022061d9c43bea565f7c063ffd9317dc8e03235a2fcee6a84f6afe12504ef4240ecc:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008ee73ac3151f4942996e65ecbea9543e3a89a745a18830db230d89346a098806022072b90b6f4f48cdfc73258d7c30a6526523bdc16ac143ada13c7c4cf7862c5d18:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2015.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-2015
     cwe-id: CWE-22
     epss-score: 0.02124
-    epss-percentile: 0.83687
+    epss-percentile: 0.83699
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100a3c6fa74cb50c5fed98c5ee7b3704562505cee8a29c9eadf4903a59d971f295902203fb1ee2f3b87cecf9f105769d60bfdc05e4135edcdd2c01c8c25a2cc0bd3ae33:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fd80d15bc547b2d4a1140ddbae15583af0b19cab9ab21b833336282b22688211022100859eacae874f54f1c5798fa27e148bde5bd663db26a52fe5249d8d6ee6c496b4:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2100.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2009-2100
     cwe-id: CWE-22
     epss-score: 0.01858
-    epss-percentile: 0.82579
+    epss-percentile: 0.82586
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022031b77c6d72b03e7cfd9075e5a1c5fa67921ea56040d7b374b4c68abff466c08c022076423434e7d708a9f3cb2fae3cc473a9095ab0cdda2f1e3e4a8f08786b079c49:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009d283735f80dd53d86ef9013292a100ed31346ed5e21c25b4f6f4550381931eb022100c370a92ffd8a85ca89bb31d7518059ee1d4e7911e76e019da6013e7bf2ccef05:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3053.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-3053
     cwe-id: CWE-22
     epss-score: 0.01573
-    epss-percentile: 0.81103
+    epss-percentile: 0.81106
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210081f8a2da824c7639a58669269f9b322d587163bba3e42f2b35368ad65c46321902202a1cd56154bc0c23545edb0df12b0e16b2d742ab150f2ef23c1d113727d662a9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022048e307a769535e8c7fc683a031edd806f71743b9a950daaec844ea4d8cd2db98022100c73ab2c0f662fd0498495999ef6c9277c47d612ff231789e8930b246a601e084:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3318.yaml

@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d0b05e5bd5026be20fa51fa6a9d514a08b80682be13920cf48c879024efe83570220641ee190a7b06d309ca27cee8aa69aa1aa036a508185f47075e7c30522532eed:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206a9541cd615138af7cdb28d271b8453addc7d9fce19a169141391c76b8320d0b02203dbe38d1bc89814a07e4add761762ed2189e2455ef91e7140f1a3fcadac02a38:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4202.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4202
     cwe-id: CWE-22
     epss-score: 0.04613
-    epss-percentile: 0.88924
+    epss-percentile: 0.88923
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022020dcab4afe1c944ce0a6edd05da2c10f9b2ec1845eb4361de2bec206bb1f37c502204e280d97011f949f379a27d2b787c85d96fbcbc65c22463a07f424bfa4157eac:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022022cc80cdf207e0a43a25d8de29db97d17b7602fc0e3be7746a06d0adac8ec97c0220638f77b9b91b54da79ee697256ddc3c126d460702dbfb0785dd4caf4435e3a26:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4223.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4223
     cwe-id: CWE-94
     epss-score: 0.04261
-    epss-percentile: 0.88469
+    epss-percentile: 0.88472
     cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221009a353dc07600492c896e2a6724562fa4579739feabc5a78151ffb06711b91f71022100effd645066f835813c6a4a2b0195de5ae173ec81de5448c3cf6e5fa327bc028d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022078105dda6a8aad36aeae2e9ea6436f19e75d00a4d343662070e8138e55742a1b022027da2fc4e37ee4ad9e98a96cbbc155fbd290c315f94f10ce0b937585d586a23c:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4679.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4679
     cwe-id: CWE-22
     epss-score: 0.23302
-    epss-percentile: 0.95764
+    epss-percentile: 0.95768
     cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022008748df875a22347550720c7ea4c6e507c541964ff101ff88cbdaf1b97d7a71f02204db3d54305ac2ac22792a48566025404038adae860b82746121f7166c92941ae:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022069381fe994d1e3a85f0a26ae80250e7337c25ee9ecde3c53b1b8f3a6ec12d7f7022100d5901e415e1acebd5e7348b1304ba662778af6d602ec772d9d002700bc71024e:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5020.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2009-5020
     cwe-id: CWE-20
     epss-score: 0.01473
-    epss-percentile: 0.80517
+    epss-percentile: 0.8052
     cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -39,4 +39,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4b0a00483046022100cd3336900535cac3d93d79422deec72ba66af832f613aa372d866ff008dfffed022100c2056856fec120e035b102532fc8384f7c74eba45ae5fdeec786762af9b7a445:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203574c6772389c2736de9214a4c7968b6b7d6127df0e7792c201bed997a37122c02205f102b8c5eeccc1a13f206356dbf2da943f3f8623ae7dbafc42c8dd971956097:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5114.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-5114
     cwe-id: CWE-22
     epss-score: 0.08663
-    epss-percentile: 0.92181
+    epss-percentile: 0.92187
     cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402207af65bc66a6314b0c5013112671178a3b552213387c01bed7a88db5bdd5df8ce02201378263618e23151467f37997210aeafd51cac9078c27e935582d7f685cc5ecf:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a4e2d5c985215e6dba01fcd6d0f7e4736e6fc41dc40d3b4cbc41667ed7a43be702201a435474508ecfe73547b8a9b78510e6db465b1aadd72361eac142002092c7d4:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0157.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2010-0157
     cwe-id: CWE-22
     epss-score: 0.06394
-    epss-percentile: 0.90726
+    epss-percentile: 0.9073
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210097b2b1ea5bc1db854e6ad84f9666b7bad6adfbf7c97f34c6026636c22b118d57022025da8931533dbd94461eca3d7db7111cafa2540b86802509a6e26d0c8376653d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100866b6b40117459bed635a6a1ceeb6e58e17ffeb30d3e41dfc6daeaa6963afd670221009ed1a3d97aff9b91de4e58e16724bc9709fdb2d1b58dc585efd5a90d6523473a:922c64590222798bb761d5b6d8e72950