Updated haproxy

2026-11-08 10:10:28 -10:00 · 2026-07-09 12:52:25 +04:00
3827 changed files with 11909 additions and 12660 deletions
@@ -3,23 +3,16 @@ http/cves/2026/CVE-2026-10823.yaml
 http/cves/2026/CVE-2026-13731.yaml
 http/cves/2026/CVE-2026-1890.yaml
 http/cves/2026/CVE-2026-22778.yaml
-http/cves/2026/CVE-2026-24207.yaml
 http/cves/2026/CVE-2026-28496.yaml
 http/cves/2026/CVE-2026-30958.yaml
-http/cves/2026/CVE-2026-3326.yaml
 http/cves/2026/CVE-2026-34413.yaml
-http/cves/2026/CVE-2026-46339.yaml
 http/cves/2026/CVE-2026-48282.yaml
 http/cves/2026/CVE-2026-48313.yaml
 http/cves/2026/CVE-2026-48611.yaml
-http/cves/2026/CVE-2026-50229.yaml
-http/cves/2026/CVE-2026-52774.yaml
 http/cves/2026/CVE-2026-52815.yaml
 http/cves/2026/CVE-2026-56782.yaml
-http/cves/2026/CVE-2026-59801.yaml
 http/cves/2026/CVE-2026-8037.yaml
 http/cves/2026/CVE-2026-8383.yaml
-http/cves/2026/CVE-2026-8386.yaml
 http/cves/2026/cve-2026-44381.yaml
 http/default-logins/dahua/dahua-icc-default-login.yaml
 http/exposed-panels/array-networks-ssl-vpn-panel.yaml
@@ -37,14 +30,11 @@ http/exposed-panels/fortinet-fortianalyzer-panel.yaml
 http/exposed-panels/headscale-panel.yaml
 http/exposed-panels/hillstone-ssl-vpn-panel.yaml
 http/exposed-panels/jotty-page-login-panel.yaml
-http/exposed-panels/kestra-panel.yaml
-http/exposed-panels/maxkb-panel.yaml
 http/exposed-panels/netgate-pfsenseplus-panel.yaml
 http/exposed-panels/netsweeper-webadmin-panel.yaml
 http/exposed-panels/nuage-networks-vsp-panel.yaml
 http/exposed-panels/ocserv-panel.yaml
 http/exposed-panels/peplink-incontrol-panel.yaml
-http/exposed-panels/qualys-cloud-platform-login.yaml
 http/exposed-panels/sangfor-iam-panel.yaml
 http/exposed-panels/sangfor-ngaf-panel.yaml
 http/exposed-panels/silver-peak-edgeconnect-panel.yaml
@@ -62,9 +52,7 @@ http/exposed-panels/zywall-usg-panel.yaml
 http/iot/openremote-detect.yaml
 http/misconfiguration/installer/ctrlpanel-installer.yaml
 http/misconfiguration/marimo-auth-bypass.yaml
-http/misconfiguration/seaweedfs-unauth.yaml
 http/takeovers/godaddy-parked-domain.yaml
-http/technologies/apache/bitnami-apache-solr.yaml
 http/technologies/google-iap-detect.yaml
 http/technologies/tibco-businessworks-detect.yaml
 http/vulnerabilities/weaver/ecology/ecology-execforstr-rce.yaml
@@ -19,8 +19,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2017-1000353
    cwe-id: CWE-502
-    epss-score: 0.99679
-    epss-percentile: 0.9995
+    epss-score: 0.99686
+    epss-percentile: 0.99948
    cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
  metadata:
    vendor: jenkins
@@ -108,4 +108,4 @@ code:
        dsl:
          - 'contains(interactsh_protocol, "dns")'
        condition: and
-# digest: 4a0a00473045022100acb6e3a0983c53a0bfd56e18f97dfc891bbbd3d4c6cc8a18c1420df13eff43810220250f211d2d55e02e789d0a793a4a6b01f54ff2c8b5434fbe0949590ec4ce3a76:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008910bc02234abc45ab9b1fb4439f3ef5af5db60c5d977de5770944115be930df022100d1f71932410d529654794405ec53fb4a9c0f45414571741a73b6e03adeefc82a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2019-0604
    cwe-id: CWE-20
    epss-score: 0.99913
-    epss-percentile: 0.99968
+    epss-percentile: 0.99966
  metadata:
    verified: true
    vendor: microsoft
@@ -156,4 +156,4 @@ code:
          - 'contains(interactsh_protocol, "dns")'
          - 'contains(interactsh_request, hex_encode(marker))'
        condition: and
-# digest: 4a0a0047304502200fe38d0c06eeb9047d5a40f16c766dc388e43a6354a855a64103a83d2982bdca022100a37aed00b6278cdfd2d55d66bac12537bfb426cd0e5c3a029b36d352c24e6419:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c74a382266e9dfdb3d03b6cc09a7cf9ddad7fd5c1fcc3427e624e70f2114eac7022053fa76d4023747107597a44ebb2e2530e2d8d8b913d65d7551c328c33fa2ebb1:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2019-14287
    cwe-id: CWE-755
    epss-score: 0.63917
-    epss-percentile: 0.99131
+    epss-percentile: 0.99123
    cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -51,4 +51,4 @@ code:
          - '!contains(code_1_response, "root")'
          - 'contains(code_2_response, "root")'
        condition: and
-# digest: 4a0a00473045022046d4b314cdec2f65fc2be8a728d5531a9019c1cdade3cb534e838f003746d6b2022100802e43fcc351d0610c1bb8ed3c6599172c71be7a3c906edc15592ce39034630c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009f95a64653539c27c17d96b8dec42d6a4c345813e34945aec95c8303977ab697022027b0914a15a733ce01ccdace0c37a6e651b2c686144d929736ad3d2254f8e04d:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2020-0646
    cwe-id: CWE-91
-    epss-score: 0.99222
-    epss-percentile: 0.99931
+    epss-score: 0.99193
+    epss-percentile: 0.99929
    cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
  metadata:
    verified: true
@@ -106,4 +106,4 @@ code:
          - 'contains(content_type, "text/xml")'
          - 'status_code == 200'
        condition: and
-# digest: 4a0a00473045022100cf2dfc153a34f4110bafc3c5d944c7198590e64b9ec8faeaecfddc83bb9549a302204231fe2a3f337117091bada19f86603b9ee90b212a8ae5d59e80df451a792ba9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207162f761e3d8ddc260f7d3f67120120f8b615d0a94070bd2fad50ba2d30da7c9022100bac50b9c69fbd7c5dad760e65dd37125ee8d8586bdca7fa75f1b0bafd1912d38:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2020-13935
    epss-score: 0.87553
-    epss-percentile: 0.99738
+    epss-percentile: 0.99736
  reference:
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -25,7 +25,7 @@ info:
    cve-id: CVE-2022-42475
    cwe-id: CWE-197,CWE-787
    epss-score: 0.99474
-    epss-percentile: 0.9994
+    epss-percentile: 0.99938
    cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -287,4 +287,4 @@ code:
      - type: word
        words:
          - "Target appears to be VULNERABLE"
-# digest: 4a0a004730450221008d60f494975c2f365a47491ce27477bf513b0d4f6b71a7fd4e9f82f7c198b11202204104a2dc75be320e2c0f4c39496fb8bf3af3e1e6893fb752b48496479b69180d:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203a594ca86728ad75290e4473c074d814b8eef20d8dae6a0d74a8e34835d9b8ed02202277f1b2746b99d80032baca203562d0d4116d9dd34f0ddf7a6de61ea66dfb0c:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-2640
    cwe-id: CWE-863
    epss-score: 0.15783
-    epss-percentile: 0.96497
+    epss-percentile: 0.96475
    cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ code:
          - '!contains(code_1_response, "(root)")'
          - 'contains(code_2_response, "(root)")'
        condition: and
-# digest: 4a0a0047304502207917728442a34adcf10730b5bb34cff4c0fb684afd602a0392c638252803cc6b022100eba7353ec66e7266065937b65a38a34941b5910586479dff6627d8dea71df096:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206db6fef55e0ea3720c171e24875022bc0c0b28fa1e8929bdb072f45c0ad3e787022100dedf028ad02b954b6ff47a920377b8a14bf24d77342839802e179f408530a0a0:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2023-2986
    epss-score: 0.41077
-    epss-percentile: 0.98505
+    epss-percentile: 0.98492
    cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -630,4 +630,4 @@ http:
      - type: status
        status:
          - 302
-# digest: 4b0a0048304602210087ab040ed949f60ecbac016192aed5b03959776151fc5e894245dfdce2ea870f022100ed5405f120742116ef4340de802f1a55fe3a683347995c108e14bd69d4479311:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204d23bc6ccef12b3347fdbd3ddff22740de748e8fe21616207c13d46631915f94022044d6027dd10783cec3bfa982a825a050cb7c0f93c2bed2d5eb4e8af1e3a432ba:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-49105
    cwe-id: CWE-287
    epss-score: 0.11074
-    epss-percentile: 0.95425
+    epss-percentile: 0.95394
    cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -94,4 +94,4 @@ http:
      - type: dsl
        dsl:
          - '"Username => "+ username'
-# digest: 490a00463044022077a8891ef5b28dbc80a1b7c5eec69c06ad92e725d979c412ed2df4ab0fdfab0e02202e5e1047f88aafe9d6a240a1a8e9bdfd88559c85d95126f3e1a92ea0e5ef6f36:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022042a5d3d6ba444a5d13ebc2b14e726017a1a1628d159defe06f1fd784754adf4002207eaaf24acd794eef00b23fc181eed45312960ea935f5c00f5783b5675079f80e:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-4911
    cwe-id: CWE-787,CWE-122
    epss-score: 0.81422
-    epss-percentile: 0.99597
+    epss-percentile: 0.99594
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ code:
      - type: word
        words:
          - "139"     # Segmentation Fault Exit Code
-# digest: 4b0a00483046022100974a972aeab957e821d4f35de435d4036eea81defcb7c21aa1893b14b26cde87022100ec00d93a0b2330e01e1671a9e0ac7e30d5be1f932dca28f8b2e973ba95b25205:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100eebfe3b3bef10d31b6567c5d98fe4ff8a29196ae0bb28b40997cb38a0ac6750202202102070abe91d318e863d75b536aeb56a24ce2adfa23f0e2170cb9a4fad316e4:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2023-6246
    cwe-id: CWE-787,CWE-122
    epss-score: 0.04794
-    epss-percentile: 0.90927
+    epss-percentile: 0.9087
    cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ code:
      - type: word
        words:
          - "127"     # Segmentation Fault Exit Code
-# digest: 4a0a0047304502204ac6349a62f2aceee66e1f2d45ffc75b9356668dd58af58a01c058100711277c022100d078a4663c7adfcdb2814490ecdef638b84064482f1fbdce6ce638ede1023374:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220159eaaa8ffa7ab7226c8015d7e96ddb3267c41b3e684a1ee2d99321f3182fbf9022100e0597ce6c9a0432c3168a1210aefa6b239b053a6b3e6a764e11e7ed807026e7d:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-10443
    cwe-id: CWE-77
    epss-score: 0.2838
-    epss-percentile: 0.97905
+    epss-percentile: 0.97889
    cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
  metadata:
    verified: true
@@ -58,4 +58,4 @@ code:
        part: interactsh_protocol # Confirms the HTTP Interaction
        words:
          - "dns"
-# digest: 490a0046304402206cc273c523fa15e69a2e23885599e0989c13f38d9c4d1d9347bbb536ec76572502206d1beba48186b6e5d641be4eb98a383404e21d2a8f01dde8273cecdbd1d0f4f4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207859036fd3efae7fa01fa07b35bf51d43362e12a6a70c185927e3b4751f9375e022100e79b6014d8afb56f5d2a7270963654a1992cfdc281dba772364157f3fd93b60c:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2024-12356
    cwe-id: CWE-77
    epss-score: 0.87991
-    epss-percentile: 0.99748
+    epss-percentile: 0.99746
    cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
  metadata:
    vendor: beyondtrust
@@ -41,4 +41,4 @@ code:
        words:
          - "0 success"
          - "1 try again later"
-# digest: 4a0a0047304502207335bc6bd15d8befe228d11c549779189b35eebabf16248e107d94bd258a1ef4022100d28326b05d91a4a7203cca47398c7cc319ee6234d02affae082bdf34d2f4cbc1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210083c79d1d50a22879901fd6304689af4b01f5e9189138c99116c68b6810bb64ee022100b7f44a0aa7ad267068a405202a4842632130902be81b54fb4517952b052035ec:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-22120
    cwe-id: CWE-20
    epss-score: 0.76618
-    epss-percentile: 0.99489
+    epss-percentile: 0.99487
  metadata:
    max-request: 1
    vendor: zabbix
@@ -73,4 +73,4 @@ code:
      - type: word
        words:
          - "Vulnerable to CVE-2024-22120"
-# digest: 4b0a004830460221008b29a9fe30690717466ffc00a0b0d66fe6f3709499465ad80fe5c69eb9e1b826022100e3098b4a6bb531081117f18cd052fa31f0a9f216333d63f14318e36602376ab8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c902d7f86bee439e59b7b2480e16fbbf6240b8134c9edd1880769ffd79e23e43022100c956593926cefeeaeecb478bb0b1428fbc47c4b2d6ac5e036a9e34db5f029dcc:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2024-3094
    cwe-id: CWE-506
    epss-score: 0.85974
-    epss-percentile: 0.99706
+    epss-percentile: 0.99702
    cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -63,4 +63,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 490a00463044022030ced0c402beffcc85a5fbba72b73f5b9b3583703ff0c16759f7db3998616900022015a33b9a27245f0880b81138743b1f2caff07655dfe812b0627cc92fb531fe0b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ffc100ac65c04f91487e3a92e982153a428d575f636e7847511d7c569e2d5d0a022001e1eaa3c0b5a529a7d2c6987c22c324b74c07e410a64fffc0a85f5150dd0a3b:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2024-4340
    epss-score: 0.0321
-    epss-percentile: 0.86729
+    epss-percentile: 0.86643
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
  tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
        part: stderr
        words:
          - "RecursionError: maximum recursion depth exceeded"
-# digest: 4a0a00473045022100fed0673a1f3b50903e113b8716e0b6fe34c4ffc20cd723ee0ea819d0ec3372ca022079710c0ccfb53ecd4d6c5c506a4ebe20567171ec7e858dc5bb3a0686c558ea83:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d25e4a13b66e18a70793db50686b8963280b7dc7e988a3480bea6d5700ed191e022032a5a86d1d784015c036d4cc9c56755d26cfdbd5ba7223124c81d91aa37f3d30:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2024-45409
    cwe-id: CWE-347
    epss-score: 0.10684
-    epss-percentile: 0.95307
+    epss-percentile: 0.95276
  metadata:
    verified: true
    shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 4a0a00473045022100d164516562ef91aa565202f3c8a739bb3405a70b56d81d8f9aec8310e9b6753d022069e0be3440798ac9da1c9d4e448785ee648d095dc529890a3f1c95085d910833:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206fa8f842163f2c409cca1ad291289aca760f9c937aa5f71b1bef63d521082192022100e5a05953d273f8d6e701f1334125461737f1656477e849d32109115c11f4c577:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2024-55556
    cwe-id: CWE-502
-    epss-score: 0.44126
-    epss-percentile: 0.98613
+    epss-score: 0.4356
+    epss-percentile: 0.98582
  metadata:
    verified: true
    max-request: 2
@@ -195,4 +195,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 490a0046304402200f72f328022c4fe2a068f01cce325b0953ad27ec809aa6c8968eab23eb6f1cd8022027ce3d53e6fc01b452911d3c2e003fea9dea3f16bc5422e5dcf485f34bf0d8c7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207a771388c0c447bd8a872e34fdcb4c20f7a2e794dd7e3f21eee486acb68449e7022100c62bfe32aedec00d572eaf40222eea80573c4718a6b72b3c944e29de1d0449f3:922c64590222798bb761d5b6d8e72950
@@ -21,8 +21,8 @@ info:
    cvss-score: 6.8
    cve-id: CVE-2024-56331
    cwe-id: CWE-22
-    epss-score: 0.01829
-    epss-percentile: 0.76403
+    epss-score: 0.01793
+    epss-percentile: 0.75773
  metadata:
    verified: true
    shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
      - type: word
        words:
          - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4a0a00473045022017c244d0686a5fd3913cea09bd5e260dd05b2078feac1794fdc194959ca0b947022100e62a7070c0d628a5c990becf8bc8cd87fe7f3bb8a1d5ef4d7a0c56e01012ca14:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022058dd549617610fd70c3bef78c51b60e727f9ba8a96482936f4d5eb44d3ad3ce2022072257ae6937461320bf62848f0e8885bc06e2add58fb576e39cfabda45b5fad5:922c64590222798bb761d5b6d8e72950
@@ -15,7 +15,7 @@ info:
    - https://github.com/advisories/GHSA-g83h-4727-5rpv
  classification:
    epss-score: 0.22443
-    epss-percentile: 0.97428
+    epss-percentile: 0.97411
  metadata:
    verified: true
    shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
      - type: kval
        kval:
          - user_session
-# digest: 480a00453043021f669f13616ae3df10c79ef7d0b4a9109c27719c2dde61c1d73616e82248a980022008ff9e9535c09b6344aafa583a72fc08fbb3f29c59f84a843d617c6ea8adaac2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202e72afd0230955ea7101f82008388d9b886b3c2fb3dc41ec592f3e3f14d0a83a02210096e9bd166ef3522b5cc8c16b9820ddb639cf66363c22c7811aaccb30687e75eb:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    - https://towerofhanoi.it/writeups/cve-2025-1550/
  classification:
    epss-score: 0.02803
-    epss-percentile: 0.84871
+    epss-percentile: 0.84774
  metadata:
    max-request: 1
  tags: cve,cve2025,code,keras,rce,ml
@@ -77,4 +77,4 @@ code:
        part: response
        regex:
          - "root:.*:0:0:"
-# digest: 490a0046304402207665559feb56d5eac167136e6bd4e5871b2131f043e42c612a7c2128789d914e02202dcb32d86638177c6a3fcd7e8f440e75910fffd8f89a5ab0cb94c003fe236048:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220397b16b7852b80eff0d9833cb912c5f17137b1ca151ef9e330a544b5df96bfab0220474718d09cac82ed59bb2e36d23e7d638f5f87813fe2e52bd44c5e0c2526472c:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2025-25291
    cwe-id: CWE-347
    epss-score: 0.19506
-    epss-percentile: 0.97063
+    epss-percentile: 0.97043
  metadata:
    verified: true
    vendor: gitlab
@@ -80,4 +80,4 @@ http:
      - type: kval
        kval:
          - _gitlab_session
-# digest: 4b0a00483046022100a3d98846ef0c01a57b20a106d7ebf99219b3b6a2ed50668f80714b85c5532bbe022100e1a8a9d50236aed98f938cbd637155eee48ddbc3de3e31fdad4e95fdbbfe8963:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e2c601dd7e8539fb1cd1a8d57d50bf4220717095b09e8f5129be02d8af437b69022045bb134b59416d6d526a7d108e5741aae74c2b9a5259c6dbf3b550a003fa84ee:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
  classification:
    cve-id: CVE-2025-32463
    epss-score: 0.47467
-    epss-percentile: 0.98707
+    epss-percentile: 0.98699
    cvss-score: 9.3
    cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    cwe-id: CWE-426
@@ -64,4 +64,4 @@ code:
          - "!contains(tolower(response), 'password')"
          - "!contains(tolower(response), 'a password is required')"
          - "!contains(tolower(response), 'is not in the sudoers file')"
-# digest: 4a0a0047304502202f12fa31ba7e9283f202786f843993d7ad38c466eb090e9ad19784d6ec54ba71022100ed446ac775b42ca9b14cc51a55418c6533d4fbcb7b18afa4c24544c98c1c8dea:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220136e0b750d94d77ac44ebd9c17cc4b63caefb98466cd8cfaf60285a02339b91c0220283634be0c9a783f5ed4b917983d4e860fc588e568f3b876e4cc5832c75e337c:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-54309
    epss-score: 0.92034
-    epss-percentile: 0.99809
+    epss-percentile: 0.99807
    cwe-id: CWE-287,CWE-362
    cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*
  metadata:
@@ -200,4 +200,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4b0a00483046022100ad7626f7f3d0af34e1c610704ebcecf3b30c2a6561249961a60148e4c14e462f02210091af242d9de6ba75eb651934b2e242fe41516eb96f9df643d688fd79bb247993:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e8682f6eb18cc49cd7ed9946e1e0df3225844789666f622234e0b55ce31f1ded022100fc067931b6b02b90f0d072f19a5e3a400dfb0a842bdedb8cd71da31370ce3cc1:922c64590222798bb761d5b6d8e72950
@@ -15,8 +15,8 @@ info:
    - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
    - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
  classification:
-    epss-score: 0.3072
-    epss-percentile: 0.98038
+    epss-score: 0.29434
+    epss-percentile: 0.97955
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
      - type: dsl  # type of the extractor
        dsl:
          - '"Reset URL: " + code_response'
-# digest: 4a0a00473045022100e53410dad0cba28b1583615ec4cfae67d59f6734808d3dc4587912fde6edec19022070eef21b3e242d3b0e5f17b1b9d64bef410c16570eb4a943972cd82f3cb81d30:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009563513650966d7597d5c8a5a46d49fcc84fef8e698e57b330209c7771a59eb2022100d88d01c549b914a0710335ce592d29c7af52323cd856699f6780c90afc140b37:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 9.8
    cve-id: CVE-2025-68926
    epss-score: 0.2903
-    epss-percentile: 0.97945
+    epss-percentile: 0.9793
    cwe-id: CWE-798
  metadata:
    verified: true
@@ -19,7 +19,7 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2025-6984
    epss-score: 0.01531
-    epss-percentile: 0.71894
+    epss-percentile: 0.71736
    cwe-id: CWE-200
  metadata:
    verified: true
@@ -64,4 +64,4 @@ code:
          - "bin:"
          - "daemon:"
        condition: or
-# digest: 4a0a00473045022100b7c40b69efdee2b33105857ac4795f9eeb0104f195814899661033df8ad021da02202a1066a0a337decfd516539e85ac9a573564cb1e3638b8066664723d38370992:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b09735eee11bf2f17bfa345f0063b39ae6aa19e66bf2bc5fb1daefffced2bcd3022100a9c2a04c4d2d7a5beee4a942bcf043c172b2c2f2a5b4fb55dc326a0ee36dcd98:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2025-9242
    cwe-id: CWE-787,CWE-362
    epss-score: 0.8637
-    epss-percentile: 0.99714
+    epss-percentile: 0.99709
    cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -552,4 +552,4 @@ code:
      - type: dsl
        dsl:
          - response
-# digest: 4a0a00473045022100e006a600b522ba537af0cf6a56fbf6a099f19be3b271bf18210533879ea5b1f00220330aaa943d142c5536a60a4ecc869f22a9ace716733a916552de4aafe594f569:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207c5ec28507f297a730ae76ad5a6b684be07faadc08f975366ca089b08c207a630221008561c1d8f9122d261eb8d36e7a7343f7a89fb8881769d1027bb4ea62bc10cea7:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 8.1
    cve-id: CVE-2026-10795
    epss-score: 0.03578
-    epss-percentile: 0.88076
+    epss-percentile: 0.88
    cwe-id: CWE-347
  metadata:
    max-request: 2
@@ -85,4 +85,4 @@ http:
          - 'status_code == 200'
          - 'contains(body, "\"udrpc_message\":\"")'
        condition: and
-# digest: 4b0a00483046022100cc298397aef14a0fdbd604bfe4ba78603668947469e6816e9b571b398863679e022100b011f7c87d881bebd33cd8b8ddd8b2376196e5694ef035e5c5992d3e8bd602c9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a881b582fed632f80412c76035e841db6494221b4f102f999bad2faddc3da3fb02204c4daa0834d7e0f354be0bab3c44eceafe0a2bd76d77e86fa6fcdd94188ae214:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    cvss-score: 10.0
    cve-id: CVE-2026-20182
-    epss-score: 0.88496
-    epss-percentile: 0.99755
+    epss-score: 0.87693
+    epss-percentile: 0.99738
    cwe-id: CWE-287
    cpe: cpe:2.3:a:cisco:catalyst_sd-wan_controller:*:*:*:*:*:*:*:*
  metadata:
@@ -272,4 +272,4 @@ code:
      - type: word
        words:
          - "VULNERABLE:"
-# digest: 4a0a00473045022100921b322c70633fc12acb7c4bc197c0bed939729051dc08d802529db60f8e3fa4022070d8fdc38f5e30daaf82e9552358e7fc214b987cf8061ff265d8c9b28d680b23:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220127e8b7b1bd730a8383479424cc229fed8fac958ae28c20c10d456bf9d083e38022100c4851e5ca05359bac2cd2824c20fb649a60295365f456fb3b4bbd7025a24d7b4:922c64590222798bb761d5b6d8e72950
@@ -398,6 +398,7 @@
 {"ID":"CVE-2016-7834","Info":{"Name":"Sony IPELA Engine IP Camera - Hardcoded Account","Severity":"high","Description":"Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2016/CVE-2016-7834.yaml"}
 {"ID":"CVE-2016-7981","Info":{"Name":"SPIP \u003c3.1.2 - Cross-Site Scripting","Severity":"medium","Description":"SPIP 3.1.2 and earlier contains a cross-site scripting vulnerability in valider_xml.php which allows remote attackers to inject arbitrary web script or HTML via the var_url parameter in a valider_xml action.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2016/CVE-2016-7981.yaml"}
 {"ID":"CVE-2016-8527","Info":{"Name":"Aruba Airwave \u003c8.2.3.1 - Cross-Site Scripting","Severity":"medium","Description":"Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting.","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2016/CVE-2016-8527.yaml"}
+{"ID":"CVE-2016-9299","Info":{"Name":"Jenkins CLI - HTTP Java Deserialization","Severity":"critical","Description":"The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2016/CVE-2016-9299.yaml"}
 {"ID":"CVE-2017-0929","Info":{"Name":"DotNetNuke (DNN) ImageHandler \u003c9.2.0 - Server-Side Request Forgery","Severity":"high","Description":"DotNetNuke (aka DNN) before 9.2.0 suffers from a server-side request forgery vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-0929.yaml"}
 {"ID":"CVE-2017-1000028","Info":{"Name":"Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion","Severity":"high","Description":"Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-1000028.yaml"}
 {"ID":"CVE-2017-1000029","Info":{"Name":"Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion","Severity":"high","Description":"Oracle GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server.","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2017/CVE-2017-1000029.yaml"}
@@ -3927,7 +3928,6 @@
 {"ID":"CVE-2026-1314","Info":{"Name":"WordPress 3D FlipBook \u003c= 1.16.17 - Information Disclosure","Severity":"medium","Description":"WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions \u003c= 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3d_send_posts_in, fb3d_send_post_pages, fb3d_send_posts_in_pages, fb3d_send_posts_in_first_page, and fb3d_send_post_first_page handlers are registered with wp_ajax_nopriv hooks but fail to verify the post status of requested flipbook entries. This allows unauthenticated attackers to retrieve full metadata, PDF URLs, and configuration data of private, draft, and password-protected flipbook posts.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-1314.yaml"}
 {"ID":"CVE-2026-1357","Info":{"Name":"WPvivid Backup \u0026 Migration \u003c= 0.9.123 - Arbitrary File Upload","Severity":"critical","Description":"WPvivid Backup \u0026 Migration plugin for WordPress \u003c= 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code execution via wpvivid_action=send_to_site parameter.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-1357.yaml"}
 {"ID":"CVE-2026-1368","Info":{"Name":"Video Conferencing with Zoom API \u003c 4.6.6 - Unauthenticated SDK Signature Generation","Severity":"high","Description":"Zoom WordPress plugin \u003c 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-1368.yaml"}
-{"ID":"CVE-2026-13731","Info":{"Name":"WPBot \u003c= 8.4.9 - Cross-Site Scripting","Severity":"high","Description":"WPBot \u003c= 8.4.9 is vulnerable to stored cross-site scripting via the conversation parameter in the qcld_wb_chatbot_conversation_save AJAX action. The AJAX nonce (qcsecretbotnonceval123qc) is publicly emitted on every frontend page via wp_localize_script under the ajax_nonce key, making it freely obtainable by unauthenticated visitors. The conversation parameter is saved to the database without sanitization and rendered unsanitized in the admin chat session view, causing stored XSS that executes when an administrator views saved chat sessions.\n","Classification":{"CVSSScore":"7.2"}},"file_path":"http/cves/2026/CVE-2026-13731.yaml"}
 {"ID":"CVE-2026-1405","Info":{"Name":"WordPress Slider Future \u003c= 1.0.5 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"Slider Future WordPress plugin \u003c= 1.0.5 contains an unrestricted file upload vulnerability caused by missing file type validation in 'slider_future_handle_image_upload', letting unauthenticated attackers upload arbitrary files, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-1405.yaml"}
 {"ID":"CVE-2026-1492","Info":{"Name":"WordPress User Registration \u0026 Membership \u003c= 5.1.2 - Unauthenticated Privilege Escalation","Severity":"critical","Description":"User Registration \u0026 Membership WordPress plugin \u003c= 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-1492.yaml"}
 {"ID":"CVE-2026-1557","Info":{"Name":"WP Responsive Images \u003c= 1.0 - Arbitrary File Read","Severity":"high","Description":"WP Responsive Images plugin for WordPress \u003c= 1.0 contains a path traversal caused by improper sanitization of the 'src' parameter, letting unauthenticated attackers read arbitrary files on the server.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-1557.yaml"}
@@ -3959,7 +3959,6 @@
 {"ID":"CVE-2026-24128","Info":{"Name":"XWiki Platform Distribution Flavor Main - Cross-Site Scripting","Severity":"medium","Description":"XWiki Platform Distribution Flavor Main versions prior to 17.6.0 are vulnerable to reflected cross-site scripting (XSS) due to improper sanitization of user-supplied input in the extensionId parameter. An attacker can exploit this issue by injecting malicious JavaScript, which will be executed in the context of the victim's browser, potentially leading to session hijacking or other attacks.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-24128.yaml"}
 {"ID":"CVE-2026-2413","Info":{"Name":"Ally – Web Accessibility \u0026 Usability \u003c= 4.0.3 - SQL Injection","Severity":"high","Description":"The Ally – Web Accessibility \u0026 Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user-supplied URL parameter in the `get_global_remediations()` method, where it is directly concatenated into an SQL JOIN clause without proper sanitization for SQL context. While `esc_url_raw()` is applied for URL safety, it does not prevent SQL metacharacters (single quotes, parentheses) from being injected. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via time-based blind SQL injection techniques. The Remediation module must be active, which requires the plugin to be connected to an Elementor account.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-2413.yaml"}
 {"ID":"CVE-2026-2416","Info":{"Name":"Geo Mashup \u003c= 1.13.17 - SQL Injection","Severity":"high","Description":"Geo Mashup WordPress plugin \u003c= 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-2416.yaml"}
-{"ID":"CVE-2026-24207","Info":{"Name":"NVIDIA Triton Inference Server \u003c= 26.02 - Authentication Bypass","Severity":"critical","Description":"NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-24207.yaml"}
 {"ID":"CVE-2026-24423","Info":{"Name":"SmarterMail - Remote Code Execution","Severity":"critical","Description":"SmarterTools SmarterMail \u003c build 9511 contains an unauthenticated remote code execution caused by malicious OS command execution via ConnectToHub API method, letting remote attackers execute arbitrary commands, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-24423.yaml"}
 {"ID":"CVE-2026-24477","Info":{"Name":"AnythingLLM - Information Disclosure","Severity":"high","Description":"AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticated users via the `/api/setup-complete` endpoint. Leakage of QdrantApiKey allows an unauthenticated attacker full read/write access to the Qdrant vector database instance used by AnythingLLM. Since Qdrant often stores the core knowledge base for RAG in AnythingLLM, this can lead to complete compromise of the semantic search / retrieval functionality and indirect leakage of confidential uploaded documents. Version 1.10.0 patches the issue.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-24477.yaml"}
 {"ID":"CVE-2026-25512","Info":{"Name":"Group-Office \u003c 26.0.5 - Remote Code Execution","Severity":"critical","Description":"Group-Office before versions 6.8.150, 25.0.82, and 26.0.5 is vulnerable to remote code execution via OS command injection. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmp_file into an exec() call. By injecting shell metacharacters into tmp_file, an authenticated attacker can execute arbitrary system commands on the server.\n","Classification":{"CVSSScore":"9.9"}},"file_path":"http/cves/2026/CVE-2026-25512.yaml"}
@@ -4007,7 +4006,6 @@
 {"ID":"CVE-2026-33017","Info":{"Name":"Langflow \u003c 1.9.0 - Remote Code Execution","Severity":"critical","Description":"Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution (RCE) via the build_public_tmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-33017.yaml"}
 {"ID":"CVE-2026-33032","Info":{"Name":"Nginx UI - Broken Access Control","Severity":"critical","Description":"Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-33032.yaml"}
 {"ID":"CVE-2026-33057","Info":{"Name":"Mesop AI Sandbox \u003c= 1.2.2 - Remote Code Execution","Severity":"critical","Description":"Mesop \u003c= 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-33057.yaml"}
-{"ID":"CVE-2026-3326","Info":{"Name":"XStore Theme \u003c 9.7.3 - SQL Injection","Severity":"high","Description":"The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-3326.yaml"}
 {"ID":"CVE-2026-33340","Info":{"Name":"LoLLMs WEBUI - Server-Side Request Forgery","Severity":"critical","Description":"LoLLMs WEBUI contains a server-side request forgery caused by unauthenticated access to the /api/proxy endpoint, letting attackers force the server to make arbitrary GET requests, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2026/CVE-2026-33340.yaml"}
 {"ID":"CVE-2026-33439","Info":{"Name":"OpenAM \u003c= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization","Severity":"critical","Description":"Open Access Management (OpenAM) is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution (RCE) via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypasses the WhitelistObjectInputStream mitigation that was applied to the jato.pageSession parameter after CVE-2021-35464.  This vulnerability is fixed in 16.0.6.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-33439.yaml"}
 {"ID":"CVE-2026-33476","Info":{"Name":"SiYuan \u003c= v3.6.1 - Path Traversal","Severity":"high","Description":"SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under `/appearance/*filepath.` Due to improper path sanitization, attackers can perform directory traversal and read arbitrary files accessible to the server process. Authentication checks explicitly exclude this endpoint, allowing exploitation without valid credentials. Version 3.6.2 fixes this issue.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-33476.yaml"}
@@ -4065,7 +4063,6 @@
 {"ID":"CVE-2026-45298","Info":{"Name":"Dozzle - Server Side Request Forgery","Severity":"high","Description":"Dozzle prior to 10.5.2 contains a server-side request forgery caused by unauthenticated access to POST /api/notifications/test-webhook forwarding attacker-controlled URLs, letting remote attackers send arbitrary HTTP POST requests and receive response data, exploit requires no authentication.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-45298.yaml"}
 {"ID":"CVE-2026-45397","Info":{"Name":"Open WebUI \u003c 0.9.5 - Information Disclosure","Severity":"medium","Description":"Open WebUI \u003c 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-45397.yaml"}
 {"ID":"CVE-2026-4631","Info":{"Name":"Cockpit Web Console \u003c 360 - Remote Code Execution","Severity":"critical","Description":"Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH options or shell commands, achieving code execution on the Cockpit host without valid credentials. The injection occurs during the authentication flow before any credential verification takes place, meaning no login is required to exploit the vulnerability.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-4631.yaml"}
-{"ID":"CVE-2026-46339","Info":{"Name":"9Router \u003c= 0.4.36 - Unauthenticated RCE","Severity":"critical","Description":"9Router \u003c= 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/* and /api/mcp/* entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, then GET /api/mcp/{name}/sse to trigger spawn() with the stored command resulting in unauthenticated remote code execution.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-46339.yaml"}
 {"ID":"CVE-2026-46364","Info":{"Name":"phpMyFAQ \u003c= 4.1.1 - SQL Injection","Severity":"critical","Description":"phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent headers into DELETE and INSERT queries. Unauthenticated attackers can exploit the public GET /api/captcha endpoint by crafting malicious User-Agent headers to perform time-based blind SQL injection, extracting sensitive data including user credentials, admin tokens, and SMTP credentials from the database.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-46364.yaml"}
 {"ID":"CVE-2026-46372","Info":{"Name":"SillyTavern - Server-Side Request Forgery","Severity":"high","Description":"SillyTavern versions up to and including 1.17.0 expose the /api/search/searxng endpoint, which accepts an attacker-controlled baseUrl parameter and uses it directly to build outbound server-side fetch requests. An authenticated low-privilege user can point baseUrl at an internal or loopback HTTP service and receive the full response body, enabling read access to internal services, cloud metadata endpoints, and private network resources.\n","Classification":{"CVSSScore":"8.5"}},"file_path":"http/cves/2026/CVE-2026-46372.yaml"}
 {"ID":"CVE-2026-46670","Info":{"Name":"YesWiki \u003c 4.6.4 - Unauthenticated SQL Injection","Severity":"critical","Description":"YesWiki before version 4.6.4 contains an unauthenticated SQL injection vulnerability in the Bazar form-import path. The bn_id_nature parameter in FormManager::create() is concatenated into an INSERT statement without sanitization, allowing unauthenticated attackers to inject arbitrary SQL and read the full database including password hashes.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-46670.yaml"}
@@ -4080,12 +4077,10 @@
 {"ID":"CVE-2026-48710","Info":{"Name":"Starlette - Improper Validation of Unsafe Equivalence in Input","Severity":"critical","Description":"A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on request.url for validation could be bypassed, potentially allowing unauthorized access or actions.\n","Classification":{"CVSSScore":"6.5"}},"file_path":"http/cves/2026/CVE-2026-48710.yaml"}
 {"ID":"CVE-2026-48907","Info":{"Name":"Joomla! JCE extension \u003c 2.9.99.5 unauthenticated RCE","Severity":"critical","Description":"Joomla JCE editor extension contains an unrestricted file upload vulnerability caused by allowing unauthenticated users to create new editor profiles, letting attackers upload and execute PHP code remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-48907.yaml"}
 {"ID":"CVE-2026-49777","Info":{"Name":"WordPress Product Slider Pro for WooCommerce \u003c 3.5.4 - Supply Chain Backdoor RCE","Severity":"critical","Description":"Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-49777.yaml"}
-{"ID":"CVE-2026-50229","Info":{"Name":"Apache Tomcat - Cross-Site Scripting","Severity":"medium","Description":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-50229.yaml"}
 {"ID":"CVE-2026-50230","Info":{"Name":"Lyrion Music Server \u003c= 9.2.0 - Cross-Site Scripting","Severity":"medium","Description":"Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-50230.yaml"}
 {"ID":"CVE-2026-5027","Info":{"Name":"Langflow \u003c= 1.8.4 - Path Traversal to RCE via File Upload","Severity":"high","Description":"The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-5027.yaml"}
 {"ID":"CVE-2026-5073","Info":{"Name":"WordPress ARMember Premium \u003c= 7.3.1 - Unauthenticated SQL Injection","Severity":"critical","Description":"The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' and 'orderby' parameters and the lack of sufficient preparation on the existing SQL query in the `arm_get_directory_members()` function.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-5073.yaml"}
 {"ID":"CVE-2026-50751","Info":{"Name":"Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass","Severity":"critical","Description":"IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecated IKEv1.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-50751.yaml"}
-{"ID":"CVE-2026-52774","Info":{"Name":"YesWiki Bazar Widget - Reflected XSS via 'id' Parameter","Severity":"medium","Description":"YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using strip_tags() only. strip_tags() does not escape double quotes, allowing an attacker to break out of the data-formid attribute and inject arbitrary event handlers.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-52774.yaml"}
 {"ID":"CVE-2026-52815","Info":{"Name":"Gogs \u003c 0.14.3 - Unauthenticated Organization Teams Disclosure","Severity":"low","Description":"Gogs before version 0.14.3 contains an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint returns all teams for any organization without requiring authentication. The route group lacks the reqToken() middleware, exposing team IDs, names, descriptions, and permission levels to any unauthenticated caller.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-52815.yaml"}
 {"ID":"CVE-2026-53787","Info":{"Name":"Magento 2 Amasty Order Attributes \u003c 4.0.0 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"Amasty Order Attributes for Magento 2 \u003c 4.0.0 contains an unrestricted file upload vulnerability caused by lack of authentication and validation in the upload endpoint, letting unauthenticated attackers upload arbitrary files including PHP, enabling remote code execution or malware hosting.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-53787.yaml"}
 {"ID":"CVE-2026-54066","Info":{"Name":"SiYuan \u003c= 3.6.5 - Unauthenticated Path Traversal","Severity":"high","Description":"SiYuan \u003c= 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route (publish mode port 6808), allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-54066.yaml"}
@@ -4096,7 +4091,6 @@
 {"ID":"CVE-2026-5615","Info":{"Name":"VvvebJs \u003c= 2.0.5 - Cross-Site Scripting","Severity":"medium","Description":"Givanz Vvvebjs \u003c= 2.0.5 contains a stored XSS caused by manipulation of the \"uploadAllowExtensions\" argument in upload.php File Upload Endpoint, letting remote attackers execute scripts, exploit requires crafted input.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-5615.yaml"}
 {"ID":"CVE-2026-56782","Info":{"Name":"Gorse \u003c 0.5.10 - Unauthenticated Database Dump","Severity":"critical","Description":"Gorse \u003c 0.5.10 contains an authentication bypass caused by empty admin_api_key in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty admin_api_key configuration.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-56782.yaml"}
 {"ID":"CVE-2026-5718","Info":{"Name":"Drag and Drop Multiple File Upload - CF7 \u003c= 1.3.9.6 - Remote Code Execution","Severity":"critical","Description":"Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin \u003c= 1.3.9.6 contains an unrestricted file upload caused by insufficient file type validation and bypass of filename sanitization with non-ASCII characters, letting unauthenticated attackers upload arbitrary files and achieve remote code execution.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-5718.yaml"}
-{"ID":"CVE-2026-59801","Info":{"Name":"9Router - Unauthenticated LLM Provider API Exposure","Severity":"critical","Description":"9Router through version 0.4.41 contains an unauthenticated access vulnerability caused by missing authentication middleware in Next.js API routes under src/app/api/providers/*, letting remote attackers enumerate, create, modify, or delete provider connections, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-59801.yaml"}
 {"ID":"CVE-2026-6118","Info":{"Name":"AstrBot \u003c= 4.22.1 - Command Injection","Severity":"high","Description":"AstrBot versions up to and including 4.22.1 contain a command injection vulnerability in the MCP server configuration endpoint. The /api/tools/mcp/add endpoint accepts arbitrary command and args fields that are passed directly to subprocess execution during the connection test, without any validation or allowlist enforcement. An attacker with dashboard access can execute arbitrary system commands with AstrBot process privileges.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-6118.yaml"}
 {"ID":"CVE-2026-6203","Info":{"Name":"User Registration \u0026 Membership WordPress plugin - Open Redirect","Severity":"medium","Description":"User Registration \u0026 Membership WordPress plugin \u003c= 5.1.4 contains an open redirect caused by insufficient validation of 'redirect_to_on_logout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-6203.yaml"}
 {"ID":"CVE-2026-6433","Info":{"Name":"FlipperCode Custom CSS, JS \u0026 PHP \u003c= 2.0.7 - Remote Code Execution","Severity":"critical","Description":"Custom css-js-php WordPress plugin through 2.0.7 contains a command injection caused by unsanitized user input used in SQL query and passed to eval(), letting unauthenticated attackers execute arbitrary PHP code on the server.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-6433.yaml"}
@@ -4105,7 +4099,6 @@
 {"ID":"CVE-2026-8054","Info":{"Name":"dotCMS Core Publish Audit API - Unauthenticated SQL Injection","Severity":"critical","Description":"dotCMS Core 25.11.04-1 through 26.04.28-02 contains an SQL injection caused by unsanitized input in Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll), letting remote unauthenticated attackers read, modify, or destroy arbitrary database content, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-8054.yaml"}
 {"ID":"CVE-2026-8181","Info":{"Name":"WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass","Severity":"critical","Description":"Burst Statistics – Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in is_mainwp_authenticated() function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrator username.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-8181.yaml"}
 {"ID":"CVE-2026-8383","Info":{"Name":"LearnPress \u003c 4.3.7 - Information Disclosure","Severity":"medium","Description":"LearnPress WordPress plugin \u003c 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8383.yaml"}
-{"ID":"CVE-2026-8386","Info":{"Name":"WP Go Maps \u003c 10.0.10 - Unauthenticated Marker Information Disclosure","Severity":"medium","Description":"WP Go Maps WordPress plugin \u003c10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8386.yaml"}
 {"ID":"CVE-2026-8679","Info":{"Name":"WordPress AudioIgniter \u003c= 2.0.2 - Unauthenticated IDOR","Severity":"high","Description":"The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. The handle_playlist_endpoint() function accepted a user-controlled playlist ID and returned track data without authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-8679.yaml"}
 {"ID":"CVE-2026-8839","Info":{"Name":"WordPress MapPress Maps \u003c= 2.96.6 - Unauthenticated IDOR","Severity":"medium","Description":"MapPress Maps for WordPress \u003c= 2.96.6 contains an authorization bypass caused by missing ownership verification in REST API routes, letting unauthenticated attackers read any map data and authenticated contributors modify any map, exploit requires crafted API requests\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8839.yaml"}
 {"ID":"CVE-2026-9082","Info":{"Name":"Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query","Severity":"critical","Description":"Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9082.yaml"}
@@ -1 +1 @@
-8a51d2d2350203634ce41b90d767e249
+f41fb6aca06836485c29dcab0865f337
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2020-9402
    cwe-id: CWE-89
    epss-score: 0.22513
-    epss-percentile: 0.97441
+    epss-percentile: 0.97426
    cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
  metadata:
    vendor: djangoproject
@@ -54,4 +54,4 @@ http:
          - "ORA-06512:"
          - "Request Method:"
        condition: and
-# digest: 4a0a00473045022100f1742de550f76544e4c88a0bf96522d6a140c905afdd3c6b02d5489328f3692b02201b13b24f3b194260188e1e5191eff5de005001d4288f19b85cd05e765fa3fc89:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100caef44b2bae34bcce37ebeb77449f1b27ed74c5eacd107b4b28ac8ed5881bb700221009c4fd705cc2013bbce0ed193812e36132de56f6f0f58334fcec15e90686b66db:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2021-35042
    cwe-id: CWE-89
    epss-score: 0.44369
-    epss-percentile: 0.98621
+    epss-percentile: 0.98609
  metadata:
    verified: true
    fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -66,4 +66,4 @@ http:
          - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
          - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
          - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 4b0a00483046022100b05d474ee6fdce65709bd487dc34f931e305352c4aa5b7f42136a31118504c210221009899e80e15840d9e2c18487fee1349f7fb9bc4bb2e0af3494bfaaa0aa4862472:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204705d74ad6dcf0f5a9bb1ebf85e259abc97cfc30f3736c4e2799799501b510dd022076e17848bfaadabb2fa7e887138324f19c90a713231b5fc9ee5b6060b394abdf:922c64590222798bb761d5b6d8e72950
@@ -66,4 +66,4 @@ http:
        group: 1
        regex:
          - '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+'   # Print extracted ${hostName} in output
-# digest: 4a0a00473045022100e5093be4912d483c919c23546a1875047d25ff08c5cf73dbdc5eb35d714d83c102203bbac94cc7ce10058b6b58896d653b563bf41d4c84e79451034e980d75b1513b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201b3762cd94d7077d3e322fe61c1045a80e07c1d111cc71a6075fc9ba1f184595022100dc2be6f8ae39f6801a84e41f77c752fa19f3a3fb1a10e9c1a7badada488b2474:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2022-34265
    cwe-id: CWE-89
    epss-score: 0.73274
-    epss-percentile: 0.99397
+    epss-percentile: 0.99392
  tags: sqli,dast,vulhub,cve,cve2022,django,vuln

 variables:
@@ -50,4 +50,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 4a0a00473045022100827f352bcbca8e734cae070fba587cd384490cdc36d5684e6dd1112cc88ffb13022078d3f9a482dbc899e69764f410ad105c9770b4690173d0387f8d294135da50db:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022001b30a141ee254aaa0acb94b35d33ee77adf4ee135a209ce5975b7aafff87e9a022100f1eac2430af11fc8d61bbd426155540f71ff9f49037d6b881ee7989301fa2ea3:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2024-2961
    cwe-id: CWE-787
    epss-score: 0.8833
-    epss-percentile: 0.99753
+    epss-percentile: 0.99752
  tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln

 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
      - type: regex
        regex:
          - "root:x:0:0"
-# digest: 4a0a00473045022100b18fe4ff6718edcd7c478ea3c1bdbdf355ff0d0f07df44626946fe10f836d04d02202135c3ce60a5c3fd1ac0001ca577adea2df189f12b1b59c320b30d4f892fcf11:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008529646911e2aa9a9839746fad41ccbb4d173feb699adac86508097e50175ac302202fba7504078148bd0b1f297bafbfcd156a23065edbf63dd892560c4c986a43e1:922c64590222798bb761d5b6d8e72950
@@ -29,116 +29,6 @@ dns:
        - dkim
        - mail
        - email
-        - class
-        - smtpapi
-        - bfi
-        - spop
-        - spop1024
-        - beta
-        - domk
-        - dk
-        - ei
-        - smtpout
-        - sm
-        - authsmtp
-        - alpha
-        - mesmtp
-        - cm
-        - prod
-        - pm
-        - gamma
-        - dkrnt
-        - dkimrnt
-        - private
-        - gmmailerd
-        - pmta
-        - x
-        - selector
-        - qcdkim
-        - postfix
-        - mikd
-        - main
-        - m
-        - dk20050327
-        - delta
-        - yibm
-        - wesmail
-        - test
-        - stigmate
-        - squaremail
-        - sitemail
-        - sasl
-        - sailthru
-        - responsys
-        - publickey
-        - proddkim
-        - mail-in
-        - key
-        - ED-DKIM
-        - ebmailerd
-        - Corporate
-        - care
-        - 0xdeadbeef
-        - yousendit
-        - www
-        - tilprivate
-        - testdk
-        - snowcrash
-        - smtpcomcustomers
-        - smtpauth
-        - smtp
-        - sl
-        - sharedpool
-        - ses
-        - server
-        - scooby
-        - scarlet
-        - safe
-        - s
-        - pvt
-        - primus
-        - primary
-        - postfix.private
-        - outbound
-        - originating
-        - one
-        - neomailout
-        - mx
-        - msa
-        - monkey
-        - mkt
-        - mimi
-        - mdaemon
-        - mailrelay
-        - mailjet
-        - mail-dkim
-        - mailo
-        - mandrill
-        - lists
-        - iweb
-        - iport
-        - id
-        - hubris
-        - googleapps
-        - global
-        - gears
-        - exim4u
-        - exim
-        - et
-        - dyn
-        - duh
-        - dksel
-        - dkimmail
-        - corp
-        - centralsmtp
-        - ca
-        - bfi
-        - auth
-        - allselector
-        - zendesk1
-        - dkim
-        - proddkim
-        - testdkim

    matchers-condition: and
    matchers:
@@ -156,4 +46,4 @@ dns:
      - type: regex
        regex:
          - "v=DKIM1(.+)"
-# digest: 4a0a00473045022003cb8121b2cdd05984997bf21e4f8f65b0ff0f39c9ecbd2c60d08ddd2f6bb998022100b058c1170a760e1848bf27babc5c410c2f7955b29c84d28cc86425f22ddc9845:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203b26233c356e1d25b66e4391b61e29c7547624bd7457bdff47b216b4ce142d31022015cf8bf03c1bb50fe65beec8f1f178707487fe245f7d03862d397e2210aaf8a1:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2018-25031
    cwe-id: CWE-20
    epss-score: 0.42326
-    epss-percentile: 0.98546
+    epss-percentile: 0.98531
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -56,4 +56,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a0047304502202144fc11cc044cb4e1d5adc7a1c0f58b36974e1a85c7513e485680cca480d8e9022100f1d58f8449a65761ee74071f517a8b268a82b6d1f7c6f47572a917a6f55de982:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210094b32ed7df72877ae337883d352f07b1d97b6e472246fdee73b51d3dad2a77fd022100f5ffa3da6a71b8233b6d2b18fcbe8cdf5a13c021f075b1d280932e88157066d9:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2022-29455
    cwe-id: CWE-79
    epss-score: 0.2318
-    epss-percentile: 0.97508
+    epss-percentile: 0.97494
    cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
  metadata:
    verified: true
@@ -52,4 +52,4 @@ headless:
        words:
          - "elementor"
        case-insensitive: true
-# digest: 4a0a004730450221009c3113abc67e8ecde9e4182305510755c1eaaaafc31304ac3ecfda587996e6640220565c39dad40850a6cc420a462eb595b22b00c4e0c56263f01ad41327d9c5819d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ef1d84d54435992ba893c6cf6ef53d49b20b410599e6ef1587a26d20db15c32e02204baa2f559c05238fa3cc39adfec07d29c5b0000342c3f2371b2dfb669122f517:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2024-29882
    cwe-id: CWE-79
    epss-score: 0.01086
-    epss-percentile: 0.61476
+    epss-percentile: 0.61251
  metadata:
    verified: true
    max-request: 1
@@ -50,4 +50,4 @@ headless:
          - "ConnectSRS</a>"
        condition: or
        case-insensitive: true
-# digest: 490a0046304402202456c1de7aabeb963a32a0647069fa48a1f02e0cd041e91046bead87a827546f0220555ff76c1beb8c270d4ef9c51cc130da88a80f4e128dd90cf31136fb5c91e4e4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b7f15d97b25aec5c8c228d2256e65eb5bb43b40f62069dae1330e78355883edd02204620cc8899a1c2c003ad265460f4daf6d6a52a3ba1ac83a42cb2a475f55bc0b1:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cvss-score: 7.2
    cve-id: CVE-2024-38526
    epss-score: 0.03832
-    epss-percentile: 0.88905
+    epss-percentile: 0.88834
  tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
  - steps:
@@ -60,4 +60,4 @@ headless:
          - "union.macoms.la"
          - "newcrbpc.com"
        part: urls
-# digest: 4a0a004730450221008df9971e92dcc9289b98879c81d2989f7019e695f18d8e0c2ae4c84e0802b68302201decb70c82d5f765edd72cd68d788536387faea32ea1e20b447a17dbfcf5eaa2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200ba3aa5180fecb970b1cdee0a358dc0a8dfb5d596a1f2a5ca7c45b8366a130e7022100f5fe9fc79bda2d1c60e748fde0154c1214246adfa67575edbde1ed065920d151:922c64590222798bb761d5b6d8e72950
@@ -16,7 +16,7 @@ info:
    - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
  classification:
    epss-score: 0.01183
-    epss-percentile: 0.64219
+    epss-percentile: 0.64012
  metadata:
    verified: true
    max-request: 1
@@ -46,4 +46,4 @@ headless:
        words:
          - "{{random_int}}"
        case-insensitive: true
-# digest: 4a0a00473045022100dc26061f171ef1709501bf1228e6ae4470868f453bf830407ca44f0455b5d87a02205b7d1628ce7808edda375a08c3f7f7576c61a854202ea5d9e076933821d32245:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100eabc6bf2008ea46999428fac0408f3342d02c0c05bc2db50859e058b6bc3d46002201154058b890b5c8e91d84da8ff9a2e6cd5fd618354973d8f03bf73bcc1c5276a:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2025-25062
    cwe-id: CWE-79
    epss-score: 0.01659
-    epss-percentile: 0.73974
+    epss-percentile: 0.73818
    cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
  metadata:
    max-request: 7
@@ -190,4 +190,4 @@ headless:
        dsl:
          - reflected_text_xss_type
          - reflected_text_xss_message
-# digest: 4a0a0047304502206e52f32a4029661534d0b13b286a40aa016169ede585dbe11838e6adc1c7fb8f022100e9a891d62d0f80e476e113740a2e2c93f4d8e939cf9f02d3547e7419bb199e16:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022077cbe8e6069bb6b3d88e802b33dd0d2808a26b4437e3764fc1af3f9f23536e0202200e2b1f4c8af23c731841b155e72499b937c0003c6534a460e0098e06bb6b45c7:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 9.1
    cve-id: CVE-2025-29927
    cwe-id: CWE-285
-    epss-score: 0.99301
-    epss-percentile: 0.99934
+    epss-score: 0.99621
+    epss-percentile: 0.99946
  metadata:
    vendor: vercel
    product: Next.js
@@ -59,4 +59,4 @@ headless:
          - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
          - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
        condition: or
-# digest: 4b0a00483046022100e49a73b9055fce9ffefa65052239bd97e6e2c8a5e0cff6f8210ba7095e51149a022100cc6662618fd4788e7c0afa90812773cb999f874c9166029585777d201530f718:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201d9f64ea6fe54975c8136ae2281e8a2d123b84a99d58c8926e4ac2ad8ceb12b7022100e4bed2873689aa7157e2595a30e541a7517173b57dfbd503479802c0b13aa9c2:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2025-8191
    cwe-id: CWE-79
    epss-score: 0.01646
-    epss-percentile: 0.73777
+    epss-percentile: 0.73623
    cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -69,4 +69,4 @@ headless:
        words:
          - "swagger"
        case-insensitive: true
-# digest: 4a0a0047304502203e44bc8a9f7c8279d129dfdb3f8c5ff8ac79c76682fa09090d2ab62d9fc6b0d40221008ba1d77b1fe2ae4a511626502e3577d19b2f191ca3af0416d7c53c4887c68f1c:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022014e16d27f81c960d8980a50cddf168d71f59e36fe2efbbe844ba0d1ae201c56f0220370dac0ec4c85dec80fae08f727bbe4f69200dfde8d5f629ca3c9e674158225b:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 5.3
    cve-id: CVE-2000-0114
    epss-score: 0.47595
-    epss-percentile: 0.9871
+    epss-percentile: 0.98701
    cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
        group: 1
        regex:
          - 'version:([0-9.]+)'
-# digest: 4a0a0047304502207d2403f73898d2dcd58d44d3f4d5c325d5386c2118fc7394ca83608970f5289e022100d30cee3928c9e2bd2ef6c1a20ed139b71a71b2370ecd58f74ec1a1c2a3d4e938:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c110c8b0ac821b798a2c4328b1870d54b7f36b7d4c5e80785dff9abe02064ec7022100e22d0023b29dd937c29aac191672c42dbb8ab7a0d4ab1bba6b33746f72bd66f3:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 6.4
    cve-id: CVE-2000-0760
    epss-score: 0.62496
-    epss-percentile: 0.99093
+    epss-percentile: 0.99084
    cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -55,4 +55,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022034da18d7cbfda36825180ad7907523bce321739de6639f5eac72c27870d7e70a02202d410ac470b183fbff269171d0c15cb44ad6a6452f406a57c3856643510b1fff:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210095b1c0370925cd7dfe3ef71b41cd77061ce29b6c318ea36739fd99dedcb56d6c02210090a6ef73695850017875ec251f12b95e7662095f9ce439e60fab575c7d89103a:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2001-0537
    cwe-id: CWE-287
    epss-score: 0.6845
-    epss-percentile: 0.99256
+    epss-percentile: 0.99248
    cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -53,4 +53,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201c3cb2fad080d0c5a0f99230d97afbe706a2f25bddcce4c430e01a1d3cb0379b022100fecf386c05578c59c248451a023a0e7b8f1205249f5e1ed1f0e6eeedcf6a6649:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b4451668c945e5baec77fd51a3e8e26b9a44e26abd0858ff94bf7b55b21ee22502202e8bd604e5d2988ccde51c0370c76d7bd3134eaa085b4b7b81833841148c07d6:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2002-1131
    cwe-id: CWE-80
    epss-score: 0.25754
-    epss-percentile: 0.97732
+    epss-percentile: 0.97717
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 5
@@ -52,4 +52,4 @@ http:
          - 'contains(content_type, "text/html")'
          - 'status_code == 200'
        condition: and
-# digest: 490a004630440220421edf278009e82bf2d159fcd1080fbf7dc15c6d86c0b384062db63849f78d4e02200addb896f512d335d4e3d18d05924cf3172789698b1410c7b2722bde5d0840bd:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201ea89a357407c145fecedd4088eff53dc2c7a23a5ade23d0223d56475a5434e8022100caa3bbeef7e056dc4d956252058f33ea7ced1bd62013ad2e145b7996b32a5992:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2004-0519
    cwe-id: NVD-CWE-Other
    epss-score: 0.22528
-    epss-percentile: 0.97443
+    epss-percentile: 0.97428
    cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402202689fb28c3001e0cc2e2398708e589093148d2b6c082606075bb1ffbaf9e8024022052dffc8ddbca281da0a5ecddec363e053ed4aa5b73ef2f2012f408cfa0236b51:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207e185c445c27a808bcd72fdc391210daa529554836659e4a6616ddb368ec464602201be4c0406b8e721b37373d9ee3ec56747904fa3151ccf3e4cb59b2248ba337d6:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2004-1965
    cwe-id: NVD-CWE-Other
    epss-score: 0.08442
-    epss-percentile: 0.94381
+    epss-percentile: 0.94347
    cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 490a004630440220777c4cc9590b6358639cd1e5ccdfe5aeab601fee7c71492a1d1046327220f80302205e24176f4897b8f713c5a00b9c56a37c9ff3a8b2ee0c891a413844c2e0f11c48:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b4b1a34ee71af6c08a24d8e5a65a084e3b8e684eec7d84790d8f2156d7a672b9022100cf051834825b58d9f9301420975d7e1d2449fff400f2b1cd65c9550291dc0a68:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2005-2428
    cwe-id: CWE-200
    epss-score: 0.73635
-    epss-percentile: 0.99411
+    epss-percentile: 0.99406
    cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220428ed1ece9234ec79a7405b00ed536cd82cec8fbc045761c8dd6ca6f903f479602201f389dbaccca07d7f46ce20f58844794fa02d3be2b1386c42c62aa23275c4721:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bff880d9882873e8644c6cf551a189786fec54a9beb32a48275ac173c468d0c1022100b012d3eca88ee43ba31114c591e6e1aa9c12f4df7fb552f5ad817a7beafe2fef:922c64590222798bb761d5b6d8e72950
@@ -17,7 +17,7 @@ info:
    cvss-score: 5.4
    cve-id: CVE-2005-3128
    epss-score: 0.03436
-    epss-percentile: 0.87614
+    epss-percentile: 0.87535
    cwe-id: CWE-80
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
        part: header
        words:
          - "text/html"
-# digest: 4b0a00483046022100a74f3f855d2c20bbbf0ffffc0a1689d3fa9e08890aa5e7a1fd4307e47be04f73022100b178fba21a0db506ac594517cade07bf759a2a531f9898703d2ccd1ed88a9a9d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009876c0538d53645c3d393a02cafaa5433b350ca5b71cefcf714f525b3de3172e0220086f3babe1f7a7948fedd879d718f2d233767618a1fa8f7e7394d0baa1b63135:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2005-3344
    cwe-id: NVD-CWE-Other
    epss-score: 0.07986
-    epss-percentile: 0.941
+    epss-percentile: 0.94063
    cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502205373aab5f96ec008ec907f63fefa696b50f248113befca7b43627adcee1e347c022100b2c30f6c161abe84e0e043a489c0d106be4520b045a13e98fef7de328f997c0b:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220058cbe13832302235134f541bf4487a935ca5ebbf2ce35c3d43053e980afb326022066d8fa94fff9a6016440a3aa6ab6bdd8fdc82ef39570de09230b4736c4a2397a:922c64590222798bb761d5b6d8e72950
@@ -23,7 +23,7 @@ info:
    cve-id: CVE-2005-3634
    cwe-id: NVD-CWE-Other
    epss-score: 0.19378
-    epss-percentile: 0.97041
+    epss-percentile: 0.97021
    cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -45,4 +45,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a00473045022100cf94cb11a5353e01e5e8c6bb53174a6e517089a0fe117423473317dc49d485d00220382778bec42d9e3caabafda15206d7eb21a22a820aacbe90f535529531494eb9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207931f4ab674f1cc09b0122997338e948965390feee8b1daedaf0cf7995800c35022100a223815e4f83255dda13692ad6983e504b17a56022814fa5ba6eb289c1b8a454:922c64590222798bb761d5b6d8e72950
@@ -19,8 +19,8 @@ info:
    cvss-score: 4.3
    cve-id: CVE-2005-4385
    cwe-id: NVD-CWE-Other
-    epss-score: 0.08836
-    epss-percentile: 0.94604
+    epss-score: 0.08011
+    epss-percentile: 0.94075
    cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100ea4998bf88195e8b35108f48c6b6c36e8f08c4f7504e15bb6996497afa3d9617022100fc2f11f92df61e6f4ec637084cd02a150e31a4e236dbfb75e9fc364b3076c70c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cafdedc4e77201ff3323569fd452f714d198780075e67e30ebecca10257be50b0220640afbc1ed8cfcba22a8d4ff6023e0d43841be13a3cd2a756a29781e73786075:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2006-1681
    cwe-id: NVD-CWE-Other
    epss-score: 0.06643
-    epss-percentile: 0.93108
+    epss-percentile: 0.93072
    cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502206de8d43078c40eb4d459600810cc3dc9f41e0fa1e54ee5cef7aa211607d83391022100847b0a74444f684fc84ace8acbb30a3bf008739c8ce1df722e27aa17e1655722:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e063b9666e14016b6eb25342242ba76dc08f6644ea5f4f8d6b61145a57d0099002210087f6240284f0e8dc4595ffb34c061435ec9b37331796427ab9b04202188c0a0e:922c64590222798bb761d5b6d8e72950
@@ -20,8 +20,8 @@ info:
    cvss-score: 7.5
    cve-id: CVE-2006-2842
    cwe-id: CWE-22
-    epss-score: 0.44016
-    epss-percentile: 0.98609
+    epss-score: 0.47196
+    epss-percentile: 0.98694
    cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220381d85711687a5e45f6073cac7c75ebb2b3812d9c57ef20937a73d1d3555c1fc02203e74161f47b4d57012bc7ac927b988d1f0b5be4f7a326c99bf6c8818be7a9bc6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100da46606ee7d35b8d037c542a29876ed168a76827d59c5e46f766b5365b375e52022100fe79670b5235cddf59f0dda789cf8a8fdeef539b011bbc5683cd42d6b066e1b0:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 5.0
    cve-id: CVE-2006-3392
    epss-score: 0.77953
-    epss-percentile: 0.99524
+    epss-percentile: 0.99519
    cwe-id: CWE-22
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a0048304602210083d0d16daeb73fc7812fbeba3e82d5f26d1946e7308ba10e57fc13a7e37c65180221009cf10c3f048f375a345d6f722bfe724c668695f209c7568c119e279ea2068725:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202a92454082b1d73ceceddd239fbba4d845b25ee330109085ebca235f469f35ea022014061aff80353e588eb178e0f1838bc0c66f624e9e68135a0f82e1cbf6fee4f6:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2007-0885
    cwe-id: NVD-CWE-Other
    epss-score: 0.05472
-    epss-percentile: 0.9185
+    epss-percentile: 0.918
    cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100d6fd204a8165b290009ca46661550ae92e037ea1d8764eb20902ea2b0038e29e02206ce34ea201753592bb56f91830679a92a9072095e23e9bbb027271b78a2b929d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d9652153ee066d3fd38871099bec6ac1d01a0a6bf8a65fedb3bebe28d4c7b648022100a542f0b035a91699f84e5904afa798b581071f83ba943e57d73aba138c760e21:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cvss-score: 7.2
    cwe-id: CWE-79
    epss-score: 0.77376
-    epss-percentile: 0.99506
+    epss-percentile: 0.99502
  metadata:
    max-request: 1
    verified: true
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402202786db195729fadcdfd26127863c07cf6936fb26b1e15f945bcf75dd03d548ec022034209b8c671bf70336f9bc794d35f0ed9c8ac832dd3115c180bbb72c22536c3b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502200b39d49af128f6f7af7dbd821655f1ca498afefbdcdca41afc9bd6b0b7af6dcb02210093322aa2c9d81aa5384f027597edf746baa4c768f425181d5c99cb2a90993f3a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2007-4504
    cwe-id: CWE-22
    epss-score: 0.09491
-    epss-percentile: 0.94884
+    epss-percentile: 0.9485
    cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502201819aefd9237b71e010f099be7d08732e9f92f83285a947571bfe9c14ff278510221009846306e97fcb8a0045d6686da14a0ad28c1e6b0defa29bae94510cf883a1bbc:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c3cb6d76296c860c46b1e0241b03faf1c3d13890492684682d453a4f91b08d9902210087313ee91dfad05d6d30ab105c819ea000e2e4ba9981234d9f5d8d4cfd1012ae:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2007-4556
    cwe-id: NVD-CWE-Other
    epss-score: 0.25749
-    epss-percentile: 0.97731
+    epss-percentile: 0.97716
    cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220044a006626e324c4f76b824e43d8f584e10b85baeae66f76b8e2103f16c97411022100be51630b531b0b93e40c19aeb166016600f59037908886bbc6acf3322587be0b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100866de5d5c845abc8d44cffe80cc62c3ca07f7e0930126b48dfb01daf5030139a0220290adef89f500fd716a88a8750affe57b1fa8a031a2c7f63d5edfb12e753792b:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2007-5728
    cwe-id: CWE-79
    epss-score: 0.14639
-    epss-percentile: 0.96264
+    epss-percentile: 0.96247
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -57,4 +57,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100cc80fc8ee6ca3d258e4afe134c59830286af410124ae4ff75ccb4956fa6fd81c02207e110f7e3ba0558d0056dda063618f4de68f954664b97b2c8b151e17e69479f4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022002d51759e3238bb1e0b99ce69e79898539b301ac8f77fb37edc5b3d7b098f095022100b1d997d3155aabdd89cba104f15ffa45fdc95f6aa0e8fed77cf628602e4bb6a3:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1059
    cwe-id: CWE-94
    epss-score: 0.48329
-    epss-percentile: 0.98729
+    epss-percentile: 0.98719
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022008bdf54dfe218313d7aab34ec2f64666553c640a21d52f8e8295c7e88d8bbbae022100cc3307d25d732e5d86c54451e48c5c6f6e666f4d2489882be822f3429a226f55:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210097799edba5fe48dd9308290ce8ba90289b18eca9795ade4c556758e5cfbcc09d022061ba6e57c6031c23d097d7e9cddd757fd80ae8af7e24a10b0e5a168161ad89bd:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1061
    cwe-id: CWE-79
    epss-score: 0.074
-    epss-percentile: 0.93731
+    epss-percentile: 0.93693
    cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -62,4 +62,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100aedb7906d03d0058f5656942b65907b943980adee2763bc7cb0e089e20b7ef85022027ac7a1373577ff524e55902ab5dae447f7e252f60ade9a313987aab65da9864:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202a85d360df9d2bc2469a203bf864d62906731974da7da42fd47d9375f44a477a02202c88afdc9e364b85b7833d0d759cce240d343781c340e3fd78de629da64fa139:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-1547
    cwe-id: CWE-601
    epss-score: 0.45927
-    epss-percentile: 0.98668
+    epss-percentile: 0.98658
    cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -51,4 +51,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502204fc54df30c7ac4126ad7dba575f75e13d3ba2797c25bc90a042547f904f247cf022100ef43c409e7f3769b23ccd031d7fe804c3cca4c82c351c3d66fe24b6e5f6e180a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dc1fd2617ac8c505cac9a401af69f19ab929ae4d947f857d210457cad4cf053c022100cc09d742c2bd85c7dff5df7457eb5eb0a9f7c3475ba103433f095a027cf90945:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cvss-score: 6.1
    cve-id: CVE-2008-2052
    epss-score: 0.01568
-    epss-percentile: 0.7254
+    epss-percentile: 0.72378
    cwe-id: CWE-601
  metadata:
    max-request: 14
@@ -63,4 +63,4 @@ http:
        status:
          - 302
          - 301
-# digest: 490a0046304402201d0c86edf8e981402942ddcca59e515164925f79bdff23463a1a5b1a7b896532022045eecbd13625d5041f11cbeea873b08d10360dd1dd5d9c98fb2098845337f24c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e46885fe135081ce2d7c765c7a1b536de683c91e406b4addef7583bf54f9bda2022100afd9efcb999fe7e2f20285b26e290f914a368ff6d6450deef45e5efc1b6dd306:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2008-2398
    cwe-id: CWE-79
    epss-score: 0.06232
-    epss-percentile: 0.92737
+    epss-percentile: 0.92695
    cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -47,4 +47,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220527ef2b92e2b45e73553ca52e9956b2943a0948661b8b98a4b4dfa29e7f9b09d022100905b698940229fe4158e3f826912ca9c2234c77f5d4ed9f61d9aff4d1088b45f:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205e11e3095ca0eb9fef9ddfdbfef763f64ed67109a5996a6560d2d62b41489a3f02204d87789fb78d21978bdb4420d831adc45cbe6b4ded37998de195f9ff3e783a08:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-2650
    cwe-id: CWE-22
    epss-score: 0.18809
-    epss-percentile: 0.9696
+    epss-percentile: 0.96941
    cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502210097cb1ac3237db07fb54f2b1c31e694b7c03b73555294fd89424a39b0f317d227022030b19c4062a531e8c832f3199eb9077f1e5ef780061166d037b6961ec7503a4c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204239b3860793714e2cb3809a3aab1b145511a307277270aa3aeff6b69018cb33022100e4197132731f783f94aacf5c5a73cb577c2fe1466d4fa82b15304af856bb2ce8:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-4668
    cwe-id: CWE-22
    epss-score: 0.21476
-    epss-percentile: 0.97332
+    epss-percentile: 0.97313
    cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a9bb50ad18104567976faa57d0956589bbffc46ccff07aa833345d369d3949bb022100e56697bc35b2d912b4b353d826cfb26909a70b774a275df8f595912bab3a092d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202f526d35d8edca058b959c7ac959f0d8620ee64cb036253bd2d7b42390c0cc3f02210090759897297e18ff6f0824f43764920bc09712b47c9da52650ee7d70d5ee5e7a:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-4764
    cwe-id: CWE-22
    epss-score: 0.16505
-    epss-percentile: 0.96632
+    epss-percentile: 0.9661
    cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100e392e47dff24b633408cf65d010498aa1b151847e4569aa6cbd363d8c919a89602207073e3012b2d678c8e01e71f877f4f1e1d65ab57a131f0b4f4f01b0590f79ec5:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fcacda47d935e92dcdd29372e11ab88f53b80cfd3cedd1cd241d20b044c00aa3022100f700d0b93fb8eb40c2d080cba7ee14bd90b895cc867a2cc52c7a5699c97882d0:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-5587
    cwe-id: CWE-22
    epss-score: 0.12865
-    epss-percentile: 0.95856
+    epss-percentile: 0.9583
    cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -49,4 +49,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100c96889cc2c78a69fc0bb5a52ff8bde1a5124fde71a381869eaa94ec92276cbe7022044e94af1c0f0d5dda2033fefdb1823fcb3d5a9e3340e549aea15685b102cdd33:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203c58a9c60a0f256da9abb2e0e0c0b58b20e7ae34b860c8d9d13b618b1abd0c7c02201be1eeb44a2a19e23c41aa5b4c2de275a87485795da1da2f79c0337f015e7eb8:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6080
    cwe-id: CWE-22
    epss-score: 0.10637
-    epss-percentile: 0.95287
+    epss-percentile: 0.95255
    cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100afb6902563065264c962ba1baefabdc54258260c66b9a68f73af5e640629afb502203a5ae64ecf19886fff3386271a2e87585be6954e489b2330c41cd55c7f7e117b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c403d09501585395ab2b662e7593cf1e0c1be76dc008b444f256c83eb258ca240221009373221390c6c16d054e7650c6d84dce2b5c9b02997d039762bd3a9478c23210:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6172
    cwe-id: CWE-22
    epss-score: 0.12284
-    epss-percentile: 0.95727
+    epss-percentile: 0.95702
    cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100b3f85b462019c1e60311aea4750117c003078f5a3e82782b763e96ff6328308d0220685bb2ff49609e75f84ebae1df218e2c7a38e503fb7df91c6a719157df9c0c20:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008b00fbc266e34d74c3f9df226a644cd0079413396a93bcd0636bc30b1b88c627022100f1cac6b20187af005e2c1b6d6c26ab6b0d3ebeaad6ee010ca4f64d8aa2399ae7:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-6222
    cwe-id: CWE-22
    epss-score: 0.11497
-    epss-percentile: 0.95533
+    epss-percentile: 0.95502
    cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220290594c8068fb2bcafe5a456b8a38ec7939ed3a6fd9f093fafc76aeea6291026022066a259cc626cd7ec4ff8e92d212bf651ecd1e14ba5d7ee2f22ee0e3932fadd6f:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206a46ac86bb9e82b04fe11aeeb007bd647de6e70a83fcb11410c07ec2a51cc812022027c8546e93d4c9fccb79b45d04669f15ac3c6b3f6fba2db1ad1944c8ee68c784:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-6465
    cwe-id: CWE-79
    epss-score: 0.05114
-    epss-percentile: 0.91419
+    epss-percentile: 0.91365
    cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
  metadata:
    verified: true
@@ -63,4 +63,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502205d9df911a18f15f1fcef814e6ff03502a276e8df35bb29c0f232c2a12e099e6a022100a8731638d61654349badfe706355e17aba1dc5eb0711dce0322eec7b889a6cfd:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220294e7e09ffeccd60c978d830a0a44593e12b1de6c4d5da934503900bb0e884a3022028ccd91a107124eb6c1495a18e6a3d95f9054568f1be60a924d594155e150dac:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2008-6668
    cwe-id: CWE-22
    epss-score: 0.15346
-    epss-percentile: 0.96402
+    epss-percentile: 0.96384
    cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -45,4 +45,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220244b47d503aba80747638d2af7aaac6fd462c8c8eaeccd7befb37ad18a6b95b2022100d2eb6f1fa8806f98942b217cf06a858f52bec5132f9c060b892793deda7281a9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202edac95b4cd4349eb5f4db0e0cb2accb695409c016590c195ad8f7f994ac8d3f022100e26ae5d467ba0ba36472af6f8aa64d69aaf3459f049afb19a782cd98d83b78ab:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2008-6982
    cwe-id: CWE-79
    epss-score: 0.05735
-    epss-percentile: 0.92193
+    epss-percentile: 0.9215
    cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -51,4 +51,4 @@ http:
      - type: status
        status:
          - 500
-# digest: 490a0046304402206e00269ac4cf86ead094ddab7f3af49f66721ad5c045b60e21706abba610fbb602204a19fca77c66d5dd45b699ed8e74501d80d3c0e68f7b4a37f5b157131cc22c18:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205ceb4c8ad639ea8c6a5d5d048dc8dd5eac50b50755f14f76c14579a5ac94578b02207b34f3fc49bc4241e1f2a92ed74171ec5daf8aabf7e7d1ba06d6af5ad2589eb1:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2008-7269
    cwe-id: CWE-20
    epss-score: 0.09254
-    epss-percentile: 0.94789
+    epss-percentile: 0.94754
    cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
  metadata:
    verified: "true"
@@ -43,4 +43,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a004730450221008817ee17b282dd826a521c1fdfeed71a9df3ff3ad51f49c782e9d68b4ea072e502201cc71b0dbc1d1d266ccd7b41f1bc32d04b73c304100d1127d23341444bbdca6c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a95bdd0a1820c682e2cc139b238bacbdfdcb0410cc7ffa2bb72665c78c0b89dd022007d68c72047685c4ac1fd62cd4280be58b6ffb43903fd2074f0b350555520e63:922c64590222798bb761d5b6d8e72950
@@ -22,7 +22,7 @@ info:
    cve-id: CVE-2009-0347
    cwe-id: CWE-59
    epss-score: 0.10257
-    epss-percentile: 0.9516
+    epss-percentile: 0.95128
    cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -40,4 +40,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4b0a00483046022100f99393158472da8329010b627bb04c3d13217dc10d096e3e673b888a19e50f3b022100dc56bdf5ca100ca1237ecbe970da151708c464965257964184c7fc2429bfea86:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220011631e5f026f954f26abd2aeb00543ff2e1e2e67a887f90f016b7e9260a9a42022100f2b38dc2bc839de9d4a088be8e94813f194aa251bff66d7363f3fa8d5c7c9b14:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-0932
    cwe-id: CWE-22
    epss-score: 0.41263
-    epss-percentile: 0.98512
+    epss-percentile: 0.98499
    cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100bf6660748daf5edf229744fa8f1149e325156df96c574acc30c31a153e8843fe02210089170c9086af9a7747d59d419a0e909e4e9bf6750bcee7ff8cf2ae5512e2c9d4:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220446b9b25593652ee26093d76ab3f04f88c41ac481db4da40f516bec34d07bd3f022016116e657b11fec2f76bbd98e7597a0f2c297ada34c26bde76a02f7acc3757aa:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-1496
    cwe-id: CWE-22
    epss-score: 0.07183
-    epss-percentile: 0.93585
+    epss-percentile: 0.93547
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022025e065cbfd5c63d9e72866ae34a249e1dd0c341a5ffbea991cf3e52e0b6903da02206dfae68cbe30ea86164fdefc7e91ebb2704ab833962d8710e4f184cd312f8788:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022008609c5d872acb77355db2072f556474c97f05b3084518a27bf1face8c03994002204419ff6536d66944108f0b548f903e4bc2c8abc7e098dd3fcd4c8c2f8d5f132d:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1558
    cwe-id: CWE-22
    epss-score: 0.28806
-    epss-percentile: 0.97929
+    epss-percentile: 0.97914
    cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100cd29d393c01fde6109a3d8ed53a951defc9ed51ed14f5eadf1bf83c83f67bc31022100efa8acbf89f47a40566934ec70ebae9eb10d26cfa9a6954ae3c35f61ba99fbaf:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a096544c368062a85448ada240a84aff9a860cccd4772a4e96f8769733da9e3b02202e7d6e6e50804220a3daa632f92538f0180b331f8e84bb8590f0ec15f6b789b3:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-1872
    cwe-id: CWE-79
    epss-score: 0.1614
-    epss-percentile: 0.96564
+    epss-percentile: 0.96543
    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
  metadata:
    verified: true
@@ -65,4 +65,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402202720159a431d511e1eb2748eb27ee69989a7d078650bdd586f375f8d7bcc6eb302204bc2c0c5150334c31de396ad79f96a551be8e937e68539ca3bcd1c0da7265d9d:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210083a92d5c931144601ee6a69690240a682e917f0a0a956fd762839efa204e70d40221009481ba20d415f8b1dd9e840c7bd1a425712785012f65bf673830ad458aa86fce:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-2015
    cwe-id: CWE-22
    epss-score: 0.06507
-    epss-percentile: 0.92996
+    epss-percentile: 0.92955
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220665cb79d10547a957b70badcf8895d1d11fa421d7289e0f696b403fce6c4c5f50220161730b6b216739f705203f1b5adda490b4f7910c2e315902dfaad069b6db063:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022071b51d7746c50a12f13b219bb855447aaadca7dd6c5541af1bb2000b250ccc1102201301de19344dc07a5eea9b1caba4a1d432770608c437cd567551405f434137d3:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2009-2100
    cwe-id: CWE-22
    epss-score: 0.08229
-    epss-percentile: 0.9425
+    epss-percentile: 0.94216
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -41,4 +41,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a0047304502207ea078adf6927125e6d6b81d2ccf168c47de138984f136771842df368b37257702210089735cd33d06b9c290d330f627ccb392feb55b096cc08399381b86769f9653b1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221009013851270b9811c4d2a978766325c60af5f1703ffc7c8de168192efa442b3e0022100b312c857422a1f624a8098266613096040b73a3f347efc76a9d4b85066fe8961:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-3053
    cwe-id: CWE-22
    epss-score: 0.05925
-    epss-percentile: 0.92413
+    epss-percentile: 0.92371
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a004730450220303eb443bd74a142bb867eba7ee95d5aef93fe44c4733d1dc3b99b427f87f220022100a9e4ce0ee9bf569fa0e89860b36e5db85dc698683705aa9f3fe1b27d806819f6:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203c2e7645bfa7bda74e4d852706a3488c04bd31c0168b709c3d4444dcd046e2360220673f025089735c95d1e35ef7565d55e92d571915fa8afa3fb651793ee5cd1d31:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-3318
    cwe-id: CWE-22
    epss-score: 0.06455
-    epss-percentile: 0.92953
+    epss-percentile: 0.92911
    cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100a663c16e12e59fbb642bf41b986b5e82d10af5f11e13d26ead39455fef38f302022100b92206071bbcb297b6bd087112079a76fcaaa5bbfebcf94f8a9713de2ec8d38b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210094b56e8c51eea57e04550c81ef83a80ae227e2e17c2cc2b65c8ea39bc8f9498502206e1f4cc5e6c4b995d35d04bf7f05c58bb0231843daf417e4a65df1869cae65cc:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4202
    cwe-id: CWE-22
    epss-score: 0.08109
-    epss-percentile: 0.9418
+    epss-percentile: 0.94146
    cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -48,4 +48,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100d9891c93894295d06d7c3a64beecbdc0800a3db1dda8d9a4e1f0944d06632dce022043e3c0210d38d17225a628172018f71f344ab97392a85d7f5dabc5a44d22ca17:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a364054ca5179fb87f25998fedd0201c58c081f25e8792c7d3ff8a33f5b0acea022042caf1fadc1bebb89d7065b3f20dc462c0088a40a6065a6bd8d5cef9acbab384:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4223
    cwe-id: CWE-94
    epss-score: 0.55507
-    epss-percentile: 0.98924
+    epss-percentile: 0.98916
    cpe: cpe:2.3:a:gianni_tommasi:kr-php_web_content_server:*:beta_2:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -44,4 +44,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a0046304402203d67c515e24fb2c065f5748f29f4d0c2772cd3407c0b914289e3fe17e743084302201f11d5941e3856724f53ef635c107aa2fcc80adc0bdce90e3359080b09bc6e64:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022058c46c00bbde00df935f3d7a11c5493d857217511a9f2b45f9a3752146db0e1f022100d93cbabb6c504433f6dad4b26e69831e8e4eedd831b982832baa7d078271a104:922c64590222798bb761d5b6d8e72950
@@ -21,7 +21,7 @@ info:
    cve-id: CVE-2009-4679
    cwe-id: CWE-22
    epss-score: 0.07866
-    epss-percentile: 0.94027
+    epss-percentile: 0.93991
    cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -43,4 +43,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022100cf8fc79aca2af22990d05b4b1f7572a6e5848ee7c68b6fdd1952b8650e94591f02200f016b26dee9a76ce5bddad1144fb6c00a351e8e13f0b90e15907e169dd74c83:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220358e0d3ccdfa7a839525fc1caa6d2c977043febef7caabcda45df96749aa13630221008d9fbbdb6a2ccf4412c09a4d4b56a8a91a83bbf49d057981dddb55f09d828fa6:922c64590222798bb761d5b6d8e72950
@@ -18,7 +18,7 @@ info:
    cve-id: CVE-2009-5020
    cwe-id: CWE-20
    epss-score: 0.03488
-    epss-percentile: 0.87802
+    epss-percentile: 0.87725
    cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
@@ -39,4 +39,4 @@ http:
        part: header
        regex:
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 4a0a00473045022100ded4926287a96a507e2d0884bb8c8d7fa460ebbd14a00a3b2074f1d5c4737f4d02201cf1d4855acb554784edbce2bbc84929b06b590d7df60c6a503e4e1cc1cb8851:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220512fe884266012d49f26cd35a12f054421ad73c09b37fa038c4ba565d974d817022100f03d469d26f5ce5ed2e51bb0a4eb7655b7c2a273e4e46810bf668f32f28869b3:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2009-5114
    cwe-id: CWE-22
    epss-score: 0.13653
-    epss-percentile: 0.96051
+    epss-percentile: 0.96028
    cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a00463044022072581a5022fe6f1a34512eb2915d685b3366ce1acdcea435de92d250eea0ce9302204eb62393fe15c642177dc7c52e0215c298430d215203fc13d6a8287dc64892b4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022015a825fcd0df362948631c9c1fcf1914f92fc8a5bd0522ec58c15b443b5893a5022100a6b65a7e8458cfcbe9e6b8ebdf4d899215808db56083ec0b6d380e3a05ef94a4:922c64590222798bb761d5b6d8e72950
@@ -19,7 +19,7 @@ info:
    cve-id: CVE-2010-0157
    cwe-id: CWE-22
    epss-score: 0.12969
-    epss-percentile: 0.95877
+    epss-percentile: 0.95852
    cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -46,4 +46,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 490a004630440220545cd6c78f55f27de68fd834cc5fba66e25ada068f4a490403b51a03741357d602205f4afa8c2217efdc14cc0755e48964aa59b7a64e5a6e62bb0c0bd34b97f47dc1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ffd3a8ab2de934f4206d5fae1dea6b4a90d2330e814d34615df0b48a9d1a7a5c0220559efaeb7477f49e8e417e847328fbe551e43ca273982e5ad337fbbb78c76b55:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0467
    cwe-id: CWE-22
    epss-score: 0.43296
-    epss-percentile: 0.98582
+    epss-percentile: 0.98569
    cpe: cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a0048304602210095aefa8e8152fb9c1250f9aa3e5f69b38c60e8e825ab47b826c1a527ab5e6fea022100866cf23bc4fc4e4c17a01f84b84b65e8d5775da8426820ffe0b987eccbb99d93:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205aba1b12276bac8d327e2cfffd1c574102cdc7120358bda64ddf65f10e8d6ec302200bc36bac2b64fc2f93ba9b56927c218630f9255ead060c70000af4a4914ec260:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0696
    cwe-id: CWE-22
    epss-score: 0.28222
-    epss-percentile: 0.97894
+    epss-percentile: 0.97879
    cpe: cpe:2.3:a:joomlaworks:jw_allvideos:3.0:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4b0a00483046022100e1af85b23319d114c7fe590183bd0fc84605b1f0f9e5be60a78751531ae0f4f9022100a1d65eaf09f75ee2c05d507034ee65661ae2e9ec4acb1c217226f43fda94e825:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f99d1250a7d6a92453e27d263ee65180967b17366b865e5ae63cd35d18ac07cb022100924c3c93883bffecdec003c0d79a81b8b06deac9669c21fdeee4bc2ec91fb5c2:922c64590222798bb761d5b6d8e72950
@@ -20,7 +20,7 @@ info:
    cve-id: CVE-2010-0759
    cwe-id: CWE-22
    epss-score: 0.15242
-    epss-percentile: 0.96386
+    epss-percentile: 0.96367
    cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
@@ -42,4 +42,4 @@ http:
      - type: status
        status:
          - 200
-# digest: 4a0a00473045022027acdd74a14642104152126b39f6787cd2170d21c085661708131ff1c631eded0221009a4856d2eaa7be0bf117a8d3f6c44b121aae32b114ee46f784b72533d60c1f63:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cf4f19910a038528d6553c3c4be51d5e362fae74d0950a6ae6016e83d229fd2c02210088850409bc1aabfe8ee4de1022d801d28d695c91d2b3284c3e90da3b70590271:922c64590222798bb761d5b6d8e72950