Add Fixed The template was uploading big size MD per host

* Fixed CVE-2025-54988 Apache Tika XXE template

Replace the version-agnostic echo matcher with an active XFA XXE
file-read proof gated by a vulnerable version check, eliminating
false positives on patched and non-vulnerable Tika instances.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

* Update CVE-2025-54988.yaml

* Update CVE-2025-54988.yaml

---------

Co-authored-by: Claude Opus 4.8 <[email protected]>
Co-authored-by: Ritik Chaddha <[email protected]>

.new-additions

@@ -1,68 +1,7 @@
-http/cves/2010/CVE-2010-0738.yaml
-http/cves/2022/CVE-2022-27925.yaml
-http/cves/2022/CVE-2022-28108.yaml
-http/cves/2026/CVE-2026-103956.yaml
-http/cves/2026/CVE-2026-104935.yaml
-http/cves/2026/CVE-2026-105133.yaml
-http/cves/2026/CVE-2026-10818.yaml
-http/cves/2026/CVE-2026-108578.yaml
-http/cves/2026/CVE-2026-109618.yaml
-http/cves/2026/CVE-2026-110372.yaml
-http/cves/2026/CVE-2026-12609.yaml
-http/cves/2026/CVE-2026-12741.yaml
-http/cves/2026/CVE-2026-12800.yaml
-http/cves/2026/CVE-2026-14870.yaml
-http/cves/2026/CVE-2026-15015.yaml
-http/cves/2026/CVE-2026-18143.yaml
-http/cves/2026/CVE-2026-18315.yaml
-http/cves/2026/CVE-2026-18937.yaml
-http/cves/2026/CVE-2026-19089.yaml
-http/cves/2026/CVE-2026-21589.yaml
-http/cves/2026/CVE-2026-26077.yaml
-http/cves/2026/CVE-2026-27604.yaml
-http/cves/2026/CVE-2026-27934.yaml
-http/cves/2026/CVE-2026-33425.yaml
-http/cves/2026/CVE-2026-42564.yaml
-http/cves/2026/CVE-2026-4883.yaml
-http/cves/2026/CVE-2026-49772.yaml
-http/cves/2026/CVE-2026-52715.yaml
-http/cves/2026/CVE-2026-54617.yaml
-http/cves/2026/CVE-2026-56070.yaml
-http/cves/2026/CVE-2026-6279.yaml
-http/cves/2026/CVE-2026-63358.yaml
-http/cves/2026/CVE-2026-6377.yaml
-http/cves/2026/CVE-2026-6495.yaml
-http/cves/2026/CVE-2026-66914.yaml
-http/cves/2026/CVE-2026-69137.yaml
-http/cves/2026/CVE-2026-72867.yaml
-http/cves/2026/CVE-2026-76268.yaml
-http/cves/2026/CVE-2026-76460.yaml
-http/cves/2026/CVE-2026-80462.yaml
-http/cves/2026/CVE-2026-8089.yaml
-http/cves/2026/CVE-2026-82186.yaml
-http/cves/2026/CVE-2026-85097.yaml
-http/cves/2026/CVE-2026-85714.yaml
-http/cves/2026/CVE-2026-86242.yaml
-http/cves/2026/CVE-2026-90774.yaml
-http/cves/2026/CVE-2026-90817.yaml
-http/cves/2026/CVE-2026-90898.yaml
-http/cves/2026/CVE-2026-91136.yaml
-http/cves/2026/CVE-2026-93616.yaml
-http/cves/2026/CVE-2026-93674.yaml
-http/cves/2026/CVE-2026-94169.yaml
-http/cves/2026/CVE-2026-9833.yaml
-http/default-logins/apache/apache-skywalking-default-login.yaml
-http/default-logins/caldera/caldera-default-login.yaml
-http/exposed-panels/hermes-agent-panel.yaml
-http/exposures/configs/apache-skywalking-horizon-ui-config.yaml
-http/technologies/apache/apache-skywalking-horizon-ui-detect.yaml
-http/technologies/astro-detect.yaml
-http/technologies/paperclip-detect.yaml
-http/technologies/ruoyi-detect.yaml
-http/technologies/wowza-streaming-engine-detect.yaml
-http/vulnerabilities/glpi/glpi-planning-user-enum.yaml
-javascript/detection/gost-socks5-detect.yaml
-javascript/detection/gost-ssh-detect.yaml
-network/cves/2024/CVE-2024-54772.yaml
-network/detection/mikrotik-routeros-winbox.yaml
-ssl/emudhra-compromised-ca.yaml
+http/cves/2010/CVE-2010-1428.yaml
+http/cves/2026/CVE-2026-16535.yaml
+http/cves/2026/CVE-2026-18110.yaml
+http/cves/2026/CVE-2026-56062.yaml
+http/cves/2026/CVE-2026-82901.yaml
+http/cves/2026/CVE-2026-89026.yaml
+http/cves/2026/CVE-2026-89079.yaml

TEMPLATES-STATS.json

@@ -1 +1 @@
-{"tags":[{"name":"vuln","count":7174},{"name":"cve","count":4550},{"name":"discovery","count":3882},{"name":"vkev","count":1969},{"name":"wordpress","count":1728},{"name":"panel","count":1636},{"name":"wp-plugin","count":1533},{"name":"exposure","count":1509},{"name":"xss","count":1425},{"name":"tech","count":1215},{"name":"osint","count":1131},{"name":"detect","count":1068},{"name":"rce","count":1062},{"name":"misconfig","count":1008},{"name":"wp","count":962},{"name":"lfi","count":891},{"name":"unauth","count":783},{"name":"devops","count":755},{"name":"cloud","count":720},{"name":"cve2024","count":627},{"name":"intrusive","count":623},{"name":"sqli","count":611},{"name":"edb","count":597},{"name":"wpscan","count":596},{"name":"cve2021","count":592},{"name":"cve2023","count":571},{"name":"cve2022","count":569},{"name":"authenticated","count":568},{"name":"kev","count":564},{"name":"login","count":561},{"name":"packetstorm","count":551},{"name":"cve2025","count":435},{"name":"cve2026","count":430},{"name":"phishing","count":402},{"name":"network","count":401},{"name":"file","count":392},{"name":"oast","count":384},{"name":"default-login","count":345},{"name":"config","count":330},{"name":"auth-bypass","count":329},{"name":"cve2020","count":328},{"name":"apache","count":289},{"name":"tcp","count":275},{"name":"microsoft","count":260},{"name":"iot","count":248},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"gcp","count":234},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":227},{"name":"token","count":227},{"name":"cve2019","count":226},{"name":"gcloud","count":226},{"name":"","count":220},{"name":"malware","count":214},{"name":"ssrf","count":213},{"name":"azure","count":213},{"name":"cve2018","count":203},{"name":"aws","count":198},{"name":"time-based-sqli","count":194},{"name":"csp-bypass","count":192},{"name":"code","count":192},{"name":"azure-cloud-config","count":191},{"name":"redirect","count":185},{"name":"install","count":183},{"name":"amazon","count":176},{"name":"ai","count":167},{"name":"disclosure","count":167},{"name":"security","count":166},{"name":"joomla","count":163},{"name":"keys","count":159},{"name":"cms","count":156},{"name":"local","count":155},{"name":"linux","count":155},{"name":"aws-cloud-config","count":147},{"name":"router","count":146},{"name":"ftp","count":138},{"name":"audit","count":136},{"name":"files","count":136},{"name":"file-upload","count":136},{"name":"cve2017","count":133},{"name":"kubernetes","count":122},{"name":"js","count":119},{"name":"cve2010","count":115},{"name":"passive","count":111},{"name":"fpd","count":108},{"name":"oss","count":103},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"debug","count":99},{"name":"windows-audit","count":95},{"name":"privesc","count":92},{"name":"oracle","count":92},{"name":"traversal","count":90},{"name":"enum","count":90},{"name":"cisco","count":89},{"name":"seclists","count":88},{"name":"windows","count":86},{"name":"takeover","count":84},{"name":"deserialization","count":82},{"name":"adobe","count":77},{"name":"ics","count":77},{"name":"fileupload","count":77},{"name":"k8s","count":77},{"name":"detection","count":72},{"name":"google","count":68},{"name":"vmware","count":68},{"name":"cve2015","count":67},{"name":"logs","count":67},{"name":"oob","count":66},{"name":"php","count":66},{"name":"atlassian","count":65},{"name":"api","count":65},{"name":"cve2016","count":64},{"name":"alibaba","count":64},{"name":"huntr","count":64},{"name":"vpn","count":63},{"name":"ir","count":63},{"name":"c2","count":61},{"name":"dast","count":59},{"name":"ssh","count":58},{"name":"cve2014","count":55},{"name":"ssti","count":54},{"name":"fortinet","count":54},{"name":"injection","count":54},{"name":"firewall","count":54},{"name":"sap","count":53},{"name":"llm","count":53},{"name":"aem","count":53},{"name":"ibm","count":52},{"name":"misc","count":52},{"name":"plugin","count":52},{"name":"generic","count":50},{"name":"ecommerce","count":50},{"name":"wp-theme","count":49},{"name":"tenable","count":49},{"name":"osint-gaming","count":49},{"name":"xxe","count":49},{"name":"log4j","count":48},{"name":"dns","count":48},{"name":"vulhub","count":47},{"name":"info-leak","count":47},{"name":"jndi","count":46},{"name":"springboot","count":46},{"name":"cnvd","count":46},{"name":"hackerone","count":46},{"name":"postgresql","count":45},{"name":"aliyun","count":45},{"name":"dashboard","count":45},{"name":"kisa","count":44},{"name":"listing","count":44},{"name":"ssl","count":44},{"name":"oa","count":43},{"name":"scada","count":43},{"name":"miscellaneous","count":43},{"name":"osint-porn","count":42},{"name":"tls","count":42},{"name":"k8s-cluster-security","count":42},{"name":"osint-hobby","count":42},{"name":"bank","count":42},{"name":"dlink","count":40},{"name":"jira","count":39},{"name":"gitlab","count":39},{"name":"devsecops","count":39},{"name":"backup","count":39},{"name":"xwiki","count":38},Line truncated
+{"tags":[{"name":"vuln","count":7178},{"name":"cve","count":4605},{"name":"discovery","count":3887},{"name":"vkev","count":2006},{"name":"wordpress","count":1750},{"name":"panel","count":1637},{"name":"wp-plugin","count":1555},{"name":"exposure","count":1513},{"name":"xss","count":1429},{"name":"tech","count":1219},{"name":"osint","count":1131},{"name":"rce","count":1078},{"name":"detect","count":1076},{"name":"misconfig","count":1010},{"name":"wp","count":966},{"name":"lfi","count":898},{"name":"unauth","count":809},{"name":"devops","count":755},{"name":"cloud","count":720},{"name":"intrusive","count":639},{"name":"cve2024","count":628},{"name":"sqli","count":617},{"name":"edb","count":597},{"name":"wpscan","count":596},{"name":"cve2021","count":592},{"name":"authenticated","count":576},{"name":"kev","count":573},{"name":"cve2022","count":571},{"name":"cve2023","count":570},{"name":"login","count":562},{"name":"packetstorm","count":551},{"name":"cve2026","count":482},{"name":"cve2025","count":435},{"name":"network","count":404},{"name":"phishing","count":402},{"name":"file","count":392},{"name":"oast","count":388},{"name":"default-login","count":348},{"name":"auth-bypass","count":337},{"name":"config","count":331},{"name":"cve2020","count":328},{"name":"apache","count":292},{"name":"tcp","count":279},{"name":"microsoft","count":260},{"name":"iot","count":249},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"gcp","count":234},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":227},{"name":"token","count":227},{"name":"gcloud","count":226},{"name":"cve2019","count":226},{"name":"","count":219},{"name":"ssrf","count":215},{"name":"malware","count":214},{"name":"azure","count":213},{"name":"cve2018","count":203},{"name":"aws","count":199},{"name":"time-based-sqli","count":199},{"name":"code","count":193},{"name":"csp-bypass","count":192},{"name":"azure-cloud-config","count":191},{"name":"redirect","count":185},{"name":"install","count":183},{"name":"amazon","count":176},{"name":"ai","count":170},{"name":"disclosure","count":168},{"name":"security","count":166},{"name":"joomla","count":164},{"name":"keys","count":159},{"name":"cms","count":156},{"name":"linux","count":155},{"name":"local","count":155},{"name":"aws-cloud-config","count":147},{"name":"router","count":146},{"name":"file-upload","count":139},{"name":"ftp","count":138},{"name":"audit","count":136},{"name":"files","count":136},{"name":"cve2017","count":133},{"name":"kubernetes","count":122},{"name":"js","count":119},{"name":"cve2010","count":116},{"name":"passive","count":113},{"name":"fpd","count":108},{"name":"oss","count":103},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"debug","count":99},{"name":"windows-audit","count":95},{"name":"privesc","count":93},{"name":"traversal","count":93},{"name":"oracle","count":92},{"name":"enum","count":91},{"name":"cisco","count":90},{"name":"seclists","count":88},{"name":"windows","count":86},{"name":"takeover","count":84},{"name":"deserialization","count":82},{"name":"fileupload","count":80},{"name":"ics","count":78},{"name":"adobe","count":77},{"name":"k8s","count":77},{"name":"detection","count":73},{"name":"google","count":68},{"name":"vmware","count":68},{"name":"oob","count":67},{"name":"cve2015","count":67},{"name":"php","count":67},{"name":"logs","count":67},{"name":"atlassian","count":66},{"name":"api","count":66},{"name":"huntr","count":64},{"name":"cve2016","count":64},{"name":"vpn","count":64},{"name":"alibaba","count":64},{"name":"ir","count":63},{"name":"c2","count":63},{"name":"dast","count":59},{"name":"ssh","count":59},{"name":"injection","count":55},{"name":"cve2014","count":55},{"name":"ssti","count":54},{"name":"firewall","count":54},{"name":"llm","count":54},{"name":"fortinet","count":54},{"name":"sap","count":53},{"name":"aem","count":53},{"name":"misc","count":52},{"name":"plugin","count":52},{"name":"ibm","count":52},{"name":"generic","count":50},{"name":"ecommerce","count":50},{"name":"tenable","count":49},{"name":"osint-gaming","count":49},{"name":"wp-theme","count":49},{"name":"xxe","count":49},{"name":"dns","count":48},{"name":"log4j","count":48},{"name":"vulhub","count":47},{"name":"info-leak","count":47},{"name":"cnvd","count":46},{"name":"hackerone","count":46},{"name":"jndi","count":46},{"name":"postgresql","count":46},{"name":"springboot","count":46},{"name":"aliyun","count":45},{"name":"ssl","count":45},{"name":"dashboard","count":45},{"name":"kisa","count":44},{"name":"listing","count":44},{"name":"miscellaneous","count":43},{"name":"oa","count":43},{"name":"tls","count":43},{"name":"scada","count":43},{"name":"bank","count":42},{"name":"k8s-cluster-security","count":42},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"woocommerce","count":40},{"name":"jira","count":40},{"name":"dlink","count":40},{"name":"gitlab","count":39},{"name":"devsecops","count":39},{"name":"backup","countLine truncated

TOP-10.md

@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| vuln      |  7174 | dhiyaneshdk   |  2164 | http       | 11655 | info     |  5379 | file |   447 |
-| cve       |  4550 | rxerium       |   959 | cloud      |   663 | high     |  3025 | dns  |    34 |
-| discovery |  3882 | daffainfo     |   950 | file       |   447 | medium   |  2862 |      |       |
-| vkev      |  1969 | princechaddha |   871 | code       |   304 | critical |  1985 |      |       |
-| wordpress |  1728 | dwisiswant0   |   807 | network    |   285 | low      |   519 |      |       |
-| panel     |  1636 | pussycat0x    |   802 | dast       |   251 | unknown  |    59 |      |       |
-| wp-plugin |  1533 | ritikchaddha  |   789 | workflows  |   207 |          |       |      |       |
-| exposure  |  1509 | 0x_akoko      |   478 | javascript |   131 |          |       |      |       |
-| xss       |  1425 | theamanrawat  |   355 | ssl        |    38 |          |       |      |       |
-| tech      |  1215 | pikpikcu      |   353 | dns        |    31 |          |       |      |       |
+| vuln      |  7178 | dhiyaneshdk   |  2175 | http       | 11718 | info     |  5388 | file |   447 |
+| cve       |  4605 | rxerium       |   961 | cloud      |   663 | high     |  3044 | dns  |    34 |
+| discovery |  3887 | daffainfo     |   950 | file       |   447 | medium   |  2869 |      |       |
+| vkev      |  2006 | princechaddha |   872 | code       |   304 | critical |  2017 |      |       |
+| wordpress |  1750 | dwisiswant0   |   807 | network    |   287 | low      |   520 |      |       |
+| panel     |  1637 | pussycat0x    |   802 | dast       |   251 | unknown  |    59 |      |       |
+| wp-plugin |  1555 | ritikchaddha  |   789 | workflows  |   207 |          |       |      |       |
+| exposure  |  1513 | 0x_akoko      |   487 | javascript |   133 |          |       |      |       |
+| xss       |  1429 | theamanrawat  |   355 | ssl        |    39 |          |       |      |       |
+| tech      |  1219 | pikpikcu      |   353 | dns        |    31 |          |       |      |       |

code/cves/2019/CVE-2019-14287.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2019-14287
     cwe-id: CWE-755
     epss-score: 0.63764
-    epss-percentile: 0.99221
+    epss-percentile: 0.99223
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ code:
           - '!contains(code_1_response, "root")'
           - 'contains(code_2_response, "root")'
         condition: and
-# digest: 490a0046304402207d9ac88d7b0583740f16d2527552a9d6056f73ab7541beae6459b988af95df74022045db10e2528c82c95c5515ca09ac1abf6fa79fec77167919f5905f153d46be34:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d43150efab8565cc4b9d13a9651e814d0299b5402b4972091f76f243955ffd2702201724686c91a1aa62692394d13654ee3490070472064d53acef62e9a28c348377:922c64590222798bb761d5b6d8e72950

code/cves/2022/CVE-2022-42475.yaml

@@ -25,7 +25,7 @@ info:
     cve-id: CVE-2022-42475
     cwe-id: CWE-197,CWE-787
     epss-score: 0.99474
-    epss-percentile: 0.99943
+    epss-percentile: 0.99945
     cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -287,4 +287,4 @@ code:
       - type: word
         words:
           - "Target appears to be VULNERABLE"
-# digest: 4b0a00483046022100dfbe86bd7a719509a323fded256309d024ad6d8eba05462763d2b01227ac087d022100f55e4f1d37ce92c851240917aceb710ccd24a9317a8333ef212ee8903165e483:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cfb70ed8062d152949531c1debe86f08c3515be829d8be8475affd90f38671c00220465b7abad597acf9708ec9dbc82fb2be1c576e13f919e99ee1a51932cf02d869:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2640.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-2640
     cwe-id: CWE-863
     epss-score: 0.15199
-    epss-percentile: 0.9675
+    epss-percentile: 0.96755
     cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ code:
           - '!contains(code_1_response, "(root)")'
           - 'contains(code_2_response, "(root)")'
         condition: and
-# digest: 4a0a00473045022100c7fa785943c715cdb5012e9ed08b7f5a64618aebe9af5133139109d8674fd58a022066f19aa2e4d56f01b7bd1c1ef32d568e7e0421525e7351d10dedb488bdd73ae5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b25aaf453cd8a7dded0f69de7d7da35f6de8e8364eb7aa1caa26a4f7066dfd4e0220473f4d175c9e2fbc0cb8c96d7fac3af1862bcb19e05afc6d267a9bd5d11d14a7:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-2986
     epss-score: 0.42544
-    epss-percentile: 0.98707
+    epss-percentile: 0.98709
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -630,4 +630,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4a0a00473045022100f7b2ae8cfb3893a3cfa69f4e301b735fbd0207d655219d0d2839c16d5d722e3d02202b4c865f38340dbe2faa64af6a7c960fbf52485eb846348905c9a4f3d410ca1a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202e78899d55258ca0f320b05c0d560b0c4d9a016757e38fcebef5ce23a7c2d7c8022100cb01d838501a7a3548d814a53639effbac19601f59cd7388385dc44a6fa62a42:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-49105.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-49105
     cwe-id: CWE-287
     epss-score: 0.4319
-    epss-percentile: 0.98724
+    epss-percentile: 0.98726
     cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -94,4 +94,4 @@ http:
       - type: dsl
         dsl:
           - '"Username => "+ username'
-# digest: 4b0a004830460221008b653c18b929f0f131b5631e41387f39e8ec2c3cc1c7e8866fca97274282fcdb022100f0525abbe3a1a6a2e56de412c2ab8a3fd4f7c8baad386950567fd1d586a4b8f4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d23b43dad5e9ba13f2d407a4ac6440b4c2fb143ca80e3a1efe07c110e6ef934402200c7fee5680626041a0285db0cf12c0b2d389fee59018457bca6bc88c1817afb3:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
     epss-score: 0.63769
-    epss-percentile: 0.99222
+    epss-percentile: 0.99224
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 490a0046304402206487801b3d3ef3e4c6b06df4982c0f2a49faa22e4fa3f8a39922d2895e87786d02201159e53b4a7be00b5230c787b5da5f023e7e04109f455e00b6e74e1e14a3ff1c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e27b7d0abcedc24ce862d8e31a7dc2f5925ecd4c632723f11a097e0d9336be67022100e6b692d6b663c543a46cec123e0ac71160b3583a1bcd180a770f4dad2aa8cd63:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
     epss-score: 0.04794
-    epss-percentile: 0.91903
+    epss-percentile: 0.91918
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 4b0a00483046022100ef3c3176975e76a21c43218c782629892bc1d0e0f4ff6808b026a4f6c641886f022100e30ae132196f1cc78353618662e10c7eaf3ed10ffffd0885cdd0ba399ac8ea05:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200397699ad2c9fe3198a021cedd977e5ca87d5acb6a7bc2484af618ef751eb63902204a36089f55c3fc0bf591b2e2df4ad74eeefbf240ed609d575e343b0634129cde:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
     epss-score: 0.28006
-    epss-percentile: 0.98105
+    epss-percentile: 0.98109
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
     verified: true
@@ -58,4 +58,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 490a00463044022078d42981b8f2c1d20562dc89b4fda3232b7148aa7e2bddfcf8578a28e7100ac602200b4b08e0abc204f88b7b06b0caa1a7b3f8a2992b38d8204dcbd3d7d991af985b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009e047e7557f4c03f4c961e6704b0bdb11cc24dc47a3b747414892fdaa29424c302202f39ffed3853583781dbc92c2bbebc404bf7a0d18503398b6f5b02b0b7093048:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-22120.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-22120
     cwe-id: CWE-20
     epss-score: 0.76618
-    epss-percentile: 0.99544
+    epss-percentile: 0.99546
   metadata:
     max-request: 1
     vendor: zabbix
@@ -73,4 +73,4 @@ code:
       - type: word
         words:
           - "Vulnerable to CVE-2024-22120"
-# digest: 490a0046304402200188726aa23c6548da632e03af3adab6e35ae74ae035942b7df0fe644611a6d5022022179ff4bcf328c2ee8b85182e31d3507f21bb7bc29d8b62c86ea8ff6212f341:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210096d5d9392c80e5c47b384cbf709d86099f38f92c81249ef68daac601808f9abc0220636dd94bbe9f61386c9aa415b84f69d9ab958d3c243bed5b1ab96b21447f0b66:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-4340.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2024-4340
     epss-score: 0.03237
-    epss-percentile: 0.88194
+    epss-percentile: 0.88216
   reference:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
   tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
         part: stderr
         words:
           - "RecursionError: maximum recursion depth exceeded"
-# digest: 490a00463044022007444faaf6dafc6bf16e808de6e69e688c879ba529f3c04655679345d9e239e802204515c158649db064e69ef2f7e67c6528970429b5f093c40d6732c1443adc982e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203d9af76eac52d56d91fffb9c0968bae2803af545becd499ef0bbef4a8922192d022100ff2dc63835c0ad8357ad8beee0afe2ed5c25dc870382d7877c65643f16e74900:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
     epss-score: 0.10684
-    epss-percentile: 0.95806
+    epss-percentile: 0.95814
   metadata:
     verified: true
     shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a00473045022009123adbe5713b6b7e3cee380eddcf58f595d5ba7be637ece7ed47144170884a022100e083beacfa91756ea6ef43a9fc5cecce4c764821b91aa0fb6386314d69d0ee2b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b418fec92cd1b32013171095eb8aefa9b23ff5189921ca8a2a1bb3bfb228a927022100ca388dec1c480e7bb1643febbd46f81ae61a4abb04d0ca21bc887dc11d54bc9d:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
     epss-score: 0.43906
-    epss-percentile: 0.98748
+    epss-percentile: 0.9875
   metadata:
     verified: true
     max-request: 2
@@ -195,4 +195,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a00473045022100fe92df6f1e1a36037ecc96b005f3dbb29c6418026ae220d202c14e4a3abf989d022028f01433db8e94984c83f488d26aa8a48312084fcd21fe93335d4e28ecb5b9dd:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402205c9c03af95ad20d3df0a71cb40649662a26957433339106459b5a9b9770764670220721727141f13a731e8d0732e779fd695405e564a6b95f34009a57adfea9d361e:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-56331.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-56331
     cwe-id: CWE-22
     epss-score: 0.01845
-    epss-percentile: 0.78879
+    epss-percentile: 0.78914
   metadata:
     verified: true
     shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
       - type: word
         words:
           - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4b0a004830460221009ff6eb49fcbca6685fc911f4bcbc93a4c0a5bbebc0875d1eae696b9f59f66ef3022100f2e2fd3ae8b918ea7a538f9b9effced2d7b825f1df9b27d91c32afa6da7bd818:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100dc534ad7b1de5ef98d8933538111d4b8c6444ffbc8530609cf919b70bd144c6f02206a6889fa30e0ef71018153e4180b357160d5911ed610bf024e61be87d8512f5f:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -15,7 +15,7 @@ info:
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
     epss-score: 0.25607
-    epss-percentile: 0.97957
+    epss-percentile: 0.97963
   metadata:
     verified: true
     shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 4b0a00483046022100a8797584aaed823e3f149b223429a25e6bdf60c511112900b346062d0ee9198e022100b3b4e61ad93f5f91112bcef9db2d4b3fbe988fa11dde9afbf22465d89cb8cfae:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022006e2bfb7a6f5d7947d777952b1ab9650eefc2ab489d8dce655c885dff102eaca02207fcec119930a6619471b733a579d3516039c736ae151bb4dd948a8dc215a4da2:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-1550.yaml

@@ -16,7 +16,7 @@ info:
     - https://towerofhanoi.it/writeups/cve-2025-1550/
   classification:
     epss-score: 0.02626
-    epss-percentile: 0.85369
+    epss-percentile: 0.85395
   metadata:
     max-request: 1
   tags: cve,cve2025,code,keras,rce,ml,vuln
@@ -77,4 +77,4 @@ code:
         part: response
         regex:
           - "root:.*:0:0:"
-# digest: 490a00463044022051b19a3a257c1ec31e39a43c417e4ce5150fe839d24d72efab3a3fd8d44172be02205d837db34c71a063a4dc7d2702f4335d7e0c56dbfa6d9bcfd5b9a89fe0ac85ab:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e6180288382949ebbcbee934ee3b5bde8e4f4bb7b57291a9bd05b9f61c0bc2900220793cb7d6430cb7b50413172034d17506ad4cf5162839eff1ac59018d9f2bc7c5:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
     epss-score: 0.20965
-    epss-percentile: 0.9756
+    epss-percentile: 0.97564
   metadata:
     verified: true
     vendor: gitlab
@@ -80,4 +80,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a00473045022017a6ea22ce8c140080181adfd9b4f1a6ee996606ddff0efedf9f70b3ae72089f022100ae98709337fdfa6cb20b00eb4b32df527f35f2b89bab03e48aae12c7f40a88a6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100afb9f0484647c06f33e7cd35093911420e961f13fd4cf42b1877cb11d4e8bba50220040789d02d4dea92108c690c9ac9731f0e0b748669feae842e82b81d03636e87:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32463.yaml

@@ -19,7 +19,7 @@ info:
   classification:
     cve-id: CVE-2025-32463
     epss-score: 0.55498
-    epss-percentile: 0.99036
+    epss-percentile: 0.99038
     cvss-score: 9.3
     cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cwe-id: CWE-426
@@ -65,4 +65,4 @@ code:
           - "!contains(tolower(response), 'password')"
           - "!contains(tolower(response), 'a password is required')"
           - "!contains(tolower(response), 'is not in the sudoers file')"
-# digest: 4a0a00473045022100810a39680127631d620907ff2c2873358ce9b1e4a946891f9520e81d7634fe0d0220786ddda55ffce449edbfb8ed4510e3575586c53295b696fa0d2e87c1f0d8c885:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100da7abafdf1114ad7df51b74440786ee17db75ee50310d428e55811aba2f6aad9022003c94b187dbeeb553eb952208d3b6a530f17d322f2dff2a7961e9850aedfe146:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -16,7 +16,7 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
     epss-score: 0.47775
-    epss-percentile: 0.9885
+    epss-percentile: 0.98852
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 490a00463044022077e1204ce820aecd0052bc27fab984993313b231fb9bc4b26f3c91f3c8941c16022028435b1cf0836104f3b18f34567915426931602b8526148c0bc7180c7d1592d6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cf0ab46d109d979afbaa2d5bfc7718f0649c3c107d78ec7f93d85d27da0ba959022020eca60a87dd3fccc2c83ebb4805a416ce69cdcf3e8d399595ee894ddea42936:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-68926.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-68926
     epss-score: 0.3185
-    epss-percentile: 0.98304
+    epss-percentile: 0.98306
     cwe-id: CWE-798
   metadata:
     verified: true
@@ -87,4 +87,4 @@ code:
         name: version
         regex:
           - "(\\d+\\.\\d+\\.\\d+-alpha\\.\\d+|grpc-auth-bypass)"
-# digest: 4b0a00483046022100a555f8521975cde1ba588f6f5c13e7f1ba76d6e39f1f73469e350e2825be5436022100eb2df8c9cc612dad8ed7a471a4d935f38d4b7115e78a499423f1accd3d694133:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204f84db61797ba025b4a90046b33708510e47b8d01a47e0d44dc9fdfc0d9afbf502203dfa69b5e548e2cd791fea246c998395c6c500da7bc8003dcdc5a975a623d972:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6984.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2025-6984
     epss-score: 0.01647
-    epss-percentile: 0.76279
+    epss-percentile: 0.76321
     cwe-id: CWE-200
   metadata:
     verified: true
@@ -64,4 +64,4 @@ code:
           - "bin:"
           - "daemon:"
         condition: or
-# digest: 4b0a00483046022100d6e29bae3f099b00d0f889c5736e7c7e22d39e4143675bc29059a29707d711710221009e1b9a62ecd952877309660773fbdb40a3e92a7b6c169a8a83914825de6779c7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206d6b1776f2182f15fe3cdfcac7c407f8fe3a5d6b122b47aed3f05df714a5980f022100e6be76954bfa708786097cf2a9850dab1bd4056d3b58e8ebfab504ee78f4677a:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-10795.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 8.1
     cve-id: CVE-2026-10795
     epss-score: 0.03635
-    epss-percentile: 0.89499
+    epss-percentile: 0.89519
     cwe-id: CWE-347
   metadata:
     max-request: 2
@@ -85,4 +85,4 @@ http:
           - 'status_code == 200'
           - 'contains(body, "\"udrpc_message\":\"")'
         condition: and
-# digest: 4b0a00483046022100e074679a81bb3f1f8af78c8cad3f862663c4b34bd0f80f4d742b4efc97aa839e0221008d0915a57c2ebb8a41b137393d0a3e142a361705a40a332972d2c27c9b19668b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203e26683dde5f5536c0595acc73a199b5f52e16f4c1f28a58b8360d6f94bf8e5b022100af915e6cc33957d3e6278ddbc53abae8a0ffe0d643ab7f50f2f8b3e967bd57ff:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-31431.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 7.8
     cve-id: CVE-2026-31431
     epss-score: 0.03437
-    epss-percentile: 0.88901
+    epss-percentile: 0.88923
     cwe-id: CWE-787
     cpe: cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   metadata:
@@ -139,4 +139,4 @@ code:
         part: response
         regex:
           - 'VULNERABLE:.*'
-# digest: 4b0a0048304602210097c9db58e8335dd8fa21d591b77b05fa0b8a00ac9a10e56d2b89d1ad541d3a6b022100aaae284fbdeb6a594296518b9d1d0937026e8e845516931f508ab58426f5c016:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e99539e10adbc5f6e1a218e5d0755373f45c581d3cf4a319e39865f24c44c8a1022100825454b36a63443f42b424a9872b0b709d76e14826da664cab5b54ccdb840cbb:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-8467.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2026-8467
     epss-score: 0.02059
-    epss-percentile: 0.81156
+    epss-percentile: 0.81188
     cwe-id: CWE-94
   metadata:
     verified: true
@@ -276,4 +276,4 @@ code:
         group: 1
         regex:
           - "Output: (.*)"
-# digest: 4b0a00483046022100c9de10202aa67284a565650332adbec808dcefc08378f052edeecc42fedc4c4b0221009d492f1db6adcd89298874633b8ebaa7eabe2173ffa25fc1ef92179308e99f02:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b8436a75498d4ff53af535fe81384afd965ba4740e3ac992adec8fdc2998a7e8022042b8bcaaf165671497bdd9b57031e03a42166574e439aee36a1f0f73b42afe75:922c64590222798bb761d5b6d8e72950

cves.json

@@ -81,6 +81,7 @@
 {"ID":"CVE-2010-1352","Info":{"Name":"Joomla! Component Juke Box 1.7 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1352.yaml"}
 {"ID":"CVE-2010-1353","Info":{"Name":"Joomla! Component LoginBox - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1353.yaml"}
 {"ID":"CVE-2010-1354","Info":{"Name":"Joomla! Component VJDEO 1.0 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1354.yaml"}
+{"ID":"CVE-2010-1428","Info":{"Name":"Red Hat JBoss - Web/JMX Console Access","Severity":"high","Description":"Red Hat JBoss Enterprise Application Platform (EAP) can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-1428.yaml"}
 {"ID":"CVE-2010-1429","Info":{"Name":"Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure","Severity":"medium","Description":"Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about \"deployed web contexts\" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.\n","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1429.yaml"}
 {"ID":"CVE-2010-1461","Info":{"Name":"Joomla! Component Photo Battle 1.0.1 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1461.yaml"}
 {"ID":"CVE-2010-1469","Info":{"Name":"Joomla! Component JProject Manager 1.0 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"6.8"}},"file_path":"http/cves/2010/CVE-2010-1469.yaml"}
@@ -3861,7 +3862,7 @@
 {"ID":"CVE-2025-58226","Info":{"Name":"WordPress 3D FlipBook Plugin \u003c= 1.16.17 - Sensitive Information Exposure","Severity":"medium","Description":"The 3D FlipBook WordPress plugin (≤ v1.16.17) has a vulnerability where an unauthenticated AJAX action (fb3d_send_posts) exposes sensitive data. Attackers can access all flipbook posts—including password-protected content, metadata, PDF URLs, and plugin settings—without authorization.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-58226.yaml"}
 {"ID":"CVE-2025-58360","Info":{"Name":"GeoServer - XML External Entity Injection","Severity":"high","Description":"GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity (XXE) injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-58360.yaml"}
 {"ID":"CVE-2025-58434","Info":{"Name":"Flowise \u003c= 3.0.5 - Account Takeover","Severity":"critical","Description":"Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-58434.yaml"}
-{"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c= 1.5.10.1673 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
+{"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c 1.5.10.1693 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
 {"ID":"CVE-2025-58751","Info":{"Name":"Vite Dev Server - Path Traversal","Severity":"low","Description":"Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-58751.yaml"}
 {"ID":"CVE-2025-59049","Info":{"Name":"Mockoon \u003c 9.2.0 - Path Traversal","Severity":"high","Description":"Mockoon before 9.2.0 contains a path traversal and local file inclusion caused by unsafe templating of server filenames from user input, letting attackers read arbitrary files on the mock server filesystem, exploit requires crafted request.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-59049.yaml"}
 {"ID":"CVE-2025-59136","Info":{"Name":"WordPress Gerencianet Oficial \u003c= 3.1.3 - Unauthenticated Order Status Disclosure","Severity":"medium","Description":"Efí Bank Gerencianet Oficial \u003c= 3.1.3 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve embedded sensitive data, exploit requires crafted requests.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-59136.yaml"}
@@ -3999,10 +4000,12 @@
 {"ID":"CVE-2026-15826","Info":{"Name":"User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass","Severity":"critical","Description":"The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wp_insert_user() through absint() before testing it with is_wp_error(), so the error check runs against the already-coerced integer. A registration submitted with a 61-70 character username passes the plugin's own validation but is rejected by WordPress core, because the user_login column is VARCHAR(60), and wp_insert_user() returns a WP_Error object. absint() coerces that object to the integer 1, is_wp_error(1) is false, and the plugin binds a transient-backed autologin nonce to user ID 1. Consuming that nonce calls wp_set_auth_cookie(1) and logs the unauthenticated attacker in as the site's Administrator.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-15826.yaml"}
 {"ID":"CVE-2026-1603","Info":{"Name":"Ivanti Endpoint Manager - Authentication Bypass","Severity":"high","Description":"Ivanti Endpoint Manager \u003c 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-1603.yaml"}
 {"ID":"CVE-2026-16268","Info":{"Name":"Newsletters \u003c 4.16 - Unauthenticated SSRF via SNS Bounce Handler","Severity":"medium","Description":"Newsletters WordPress plugin \u003c 4.16 contains a server-side request forgery caused by lack of authentication and validation in bounce-processing requests, letting unauthenticated attackers make arbitrary requests to internal or external hosts.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-16268.yaml"}
+{"ID":"CVE-2026-16535","Info":{"Name":"WordPress Link Library \u003c 7.9.4 - Cross-Site Scripting","Severity":"medium","Description":"Link Library WordPress plugin \u003c 7.9.4 contains a reflected XSS caused by unsanitised and unescaped parameter reflected in response, letting unauthenticated attackers execute scripts via user interaction.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-16535.yaml"}
 {"ID":"CVE-2026-17505","Info":{"Name":"WordPress TranslatePress \u003c 3.2.6 - Cross-Site Scripting","Severity":"medium","Description":"TranslatePress plugin \u003c 3.2.6 for WordPress contains a reflected cross-site scripting vulnerability in the translation marker processing feature, letting attackers inject and execute arbitrary JavaScript code, exploit requires no authentication or privileges.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-17505.yaml"}
 {"ID":"CVE-2026-17532","Info":{"Name":"Seraphinite Accelerator \u003c= 2.29.18 - Cross-Site Scripting","Severity":"medium","Description":"The Seraphinite Accelerator plugin for WordPress up to and including 2.29.18 was vulnerable to reflected cross-site scripting through the seraph_accel_prep parameter. CacheExtractPreparePageParams() compared the expected HMAC against the JSON-decoded nonce with PHP's loose != operator, so a JSON boolean true satisfied the comparison and bypassed the signature check, and _CbContentFinishSkip() then concatenated the attacker-controlled selfTest field straight into the response body, letting unauthenticated attackers inject arbitrary scripts.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-17532.yaml"}
 {"ID":"CVE-2026-17594","Info":{"Name":"Sonatype Nexus Repository \u003c 3.95.0 - Privilege Escalation via Repository Format Mismatch","Severity":"high","Description":"Nexus Repository 3 CE/Pro 3.0.0 through 3.94.x contains an incorrect authorization vulnerability caused by inconsistent authorization checks in the repository-creation UI, letting delegated repository-admin users create unauthorized repository formats, exploit requires delegated repository-admin privilege.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2026/CVE-2026-17594.yaml"}
 {"ID":"CVE-2026-18072","Info":{"Name":"Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass","Severity":"critical","Description":"The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the `_wplogin` parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This template only inspects the redirect and session-cookie response and does not perform any administrative action.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-18072.yaml"}
+{"ID":"CVE-2026-18110","Info":{"Name":"Concrete CMS - User Enumeration","Severity":"high","Description":"Concrete CMS versions 9.0.0 through 9.5.2 are vulnerable to unauthenticated user enumeration via a missing authorization check in the \"Preview As User\" panel (concrete/controllers/panel/page/preview_as_user.php).\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-18110.yaml"}
 {"ID":"CVE-2026-18143","Info":{"Name":"Request Quote for WooCommerce \u003c= 2.9.2 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"Request a Quote for WooCommerce plugin for WordPress \u003c= 2.9.2 contains an unrestricted file upload vulnerability caused by missing file extension and MIME type validation in afrfq_submit_quote_via_popup(), letting unauthenticated attackers upload executable files, exploit requires enabled public quote rule with multi-page popup flow.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-18143.yaml"}
 {"ID":"CVE-2026-1830","Info":{"Name":"Quick Playground \u003c= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The Quick Playground plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.3.1.\nThe plugin exposes a blueprint REST API endpoint (permission_callback: __return_true) that leaks the sync code, and an upload_image endpoint that accepts file uploads with path traversal in the filename parameter without sufficient authorization checks, which can be chained into arbitrary PHP file upload and RCE.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-1830.yaml"}
 {"ID":"CVE-2026-18315","Info":{"Name":"TrueBooker \u003c= 1.2.6 - Unauthenticated Authorization Bypass","Severity":"critical","Description":"TrueBooker – Appointment Booking and Scheduler System WordPress plugin \u003c= 1.2.6 contains an authorization bypass through user-controlled key caused by lack of authentication in admin_user_create_cus AJAX handler, letting unauthenticated attackers take over any user account by overwriting email and using lost-password flow, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-18315.yaml"}
@@ -4284,6 +4287,7 @@
 {"ID":"CVE-2026-55552","Info":{"Name":"Yamcs \u003c=5.11.12 - Arbitrary File Read","Severity":"high","Description":"Yamcs through 5.11.12 serves static web resources through a handler that resolves the requested path against the configured web root without rejecting absolute paths. A request path that begins with a double slash is resolved as an absolute filesystem path, discarding the web root, and the handler returns the referenced file from the underlying host, letting unauthenticated attackers read any non-hidden file readable by the Yamcs service account whose path contains no dot segment.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-55552.yaml"}
 {"ID":"CVE-2026-55592","Info":{"Name":"Dashy \u003c= 4.3.6 - Reflected XSS via Workspace","Severity":"medium","Description":"Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the context of the Dashy origin.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-55592.yaml"}
 {"ID":"CVE-2026-5562","Info":{"Name":"Provectus kafka-ui \u003c=0.7.2 - Remote Code Execution","Severity":"critical","Description":"Provectus kafka-ui versions 0.7.0 through 0.7.2 are vulnerable to code injection in the `/api/smartfilters/testexecutions` endpoint. The `filterCode` parameter is evaluated as a Groovy expression without sandboxing, allowing an unauthenticated attacker to execute arbitrary code and operating-system commands on the host.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-5562.yaml"}
+{"ID":"CVE-2026-56062","Info":{"Name":"Quotes llama \u003c= 3.1.5 - SQL Injection","Severity":"critical","Description":"Quotes llama 3.1.5 and earlier contains a time-based blind SQL injection vulnerability caused by improper control of a SQL identifier. The select_search() AJAX handler (registered for guests via wp_ajax_nopriv_select_search) reads the attacker-controlled 'sc' parameter from $_POST and substitutes it into the query through the malformed wpdb placeholder '%1s'.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-56062.yaml"}
 {"ID":"CVE-2026-56070","Info":{"Name":"Advance Product Search \u003c= 1.4.4 - Unauthenticated Time-Based Blind SQL Injection","Severity":"critical","Description":"Advance Product Search 1.4.4 and earlier is vulnerable to unauthenticated time-based blind SQL injection. The plugin rebuilds the WordPress search SQL by hand and uses $wpdb-\u003eesc_like() which escapes LIKE wildcards but not single quotes, allowing injection through the ?s= parameter.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-56070.yaml"}
 {"ID":"CVE-2026-5615","Info":{"Name":"VvvebJs \u003c= 2.0.5 - Cross-Site Scripting","Severity":"medium","Description":"Givanz Vvvebjs \u003c= 2.0.5 contains a stored XSS caused by manipulation of the \"uploadAllowExtensions\" argument in upload.php File Upload Endpoint, letting remote attackers execute scripts, exploit requires crafted input.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-5615.yaml"}
 {"ID":"CVE-2026-56265","Info":{"Name":"Crawl4AI \u003c 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass","Severity":"critical","Description":"Crawl4AI Docker API server versions before 0.8.7 ship with a hardcoded default JWT signing key (\"mysecret\") used to sign and verify HS256 authentication tokens. Because the key is identical across every deployment where SECRET_KEY has not been overridden, an unauthenticated attacker can forge a valid Bearer token and use it to access every JWT-protected API endpoint (/md, /html, /screenshot, /pdf, /execute_js, /crawl, /ask).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-56265.yaml"}
@@ -4365,6 +4369,7 @@
 {"ID":"CVE-2026-8236","Info":{"Name":"Concrete CMS \u003c9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure","Severity":"medium","Description":"Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/{fID} accepts an integer file ID in the URL and returns internal site structure data (page IDs, versions, URL paths) to anyone who sends a GET request.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8236.yaml"}
 {"ID":"CVE-2026-8237","Info":{"Name":"Concrete CMS \u003c= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)","Severity":"medium","Description":"Concrete CMS \u003c= 9.5.0 contains an IDOR caused by insufficient access control in /ccm/frontend/conversations/message_detail endpoint, letting unauthenticated attackers enumerate conversation messages and attachments.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8237.yaml"}
 {"ID":"CVE-2026-82456","Info":{"Name":"argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access","Severity":"critical","Description":"argocd-mcp before 0.9.0 binds its MCP HTTP listener to all interfaces without requiring authentication. A remote unauthenticated attacker can initialize an MCP session, complete the handshake, and enumerate or invoke the full Argo CD tool surface using the operator's stored API token.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-82456.yaml"}
+{"ID":"CVE-2026-82901","Info":{"Name":"Ultimate Addons for Contact Form 7 \u003c= 3.5.50 - Arbitrary File Upload","Severity":"high","Description":"Ultimate Addons for Contact Form 7 (UACF7) \u003c= 3.5.50 copies every file submitted through a Contact Form 7 [uacf7_signature] field into wp-content/uploads/uacf7-uploads/ with no file-type or extension validation when the PDF Generator module is enabled on the form. An unauthenticated attacker can POST to the public CF7 REST feedback endpoint and write an arbitrary file of any extension into the webroot (CWE-434). The written file is directly retrievable without authentication. The copy sink is addons/pdf-generator/pdf-generator.php, which stores the file as \"{time()}-{field_name}-{sanitize_file_name(basename)}\". Fixed in 3.5.51, which adds uacf7_is_safe_uploaded_file() with a MIME/extension allowlist.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-82901.yaml"}
 {"ID":"CVE-2026-8383","Info":{"Name":"LearnPress \u003c 4.3.7 - Information Disclosure","Severity":"medium","Description":"LearnPress WordPress plugin \u003c 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8383.yaml"}
 {"ID":"CVE-2026-8385","Info":{"Name":"WordPress WP Go Maps \u003c 10.0.10 - Unauthenticated Marker Data Disclosure","Severity":"medium","Description":"WP Go Maps WordPress plugin \u003c 10.0.10 contains an information disclosure vulnerability caused by improper enforcement of marker approval filter in admin-ajax fallback for datatables route, letting unauthenticated visitors retrieve unapproved marker records.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8385.yaml"}
 {"ID":"CVE-2026-8386","Info":{"Name":"WP Go Maps \u003c 10.0.10 - Unauthenticated Marker Information Disclosure","Severity":"medium","Description":"WP Go Maps WordPress plugin \u003c10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8386.yaml"}
@@ -4388,7 +4393,9 @@
 {"ID":"CVE-2026-8839","Info":{"Name":"WordPress MapPress Maps \u003c= 2.96.6 - Unauthenticated IDOR","Severity":"medium","Description":"MapPress Maps for WordPress \u003c= 2.96.6 contains an authorization bypass caused by missing ownership verification in REST API routes, letting unauthenticated attackers read any map data and authenticated contributors modify any map, exploit requires crafted API requests\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8839.yaml"}
 {"ID":"CVE-2026-8857","Info":{"Name":"MediaWiki EasyTimeline - Code Injection RCE","Severity":"high","Description":"MediaWiki EasyTimeline (Timeline) extension versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9 contain a code injection vulnerability caused by insufficient neutralization of newlines in TextData text attributes in EasyTimeline.pl / Timeline.php. A crafted \u003ctimeline\u003e block can inject ploticus '#proc getdata' and 'command:' directives, which execute via /bin/sh because EasyTimeline invokes ploticus without the -noshell flag. Exploitation requires the ability to submit timeline markup for rendering — low-privileged edit access, or anonymous access on wikis that allow anonymous editing and API use. This template's parse-based check needs API read access; optional username/password inputs can be supplied for private wikis that deny anonymous read.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-8857.yaml"}
 {"ID":"CVE-2026-89013","Info":{"Name":"Dolibarr \u003c 24.0.0 - Authorization Bypass via hashp Parameter","Severity":"high","Description":"Dolibarr ERP/CRM versions 23.0.4 through 24.0.0 contain an authorization bypass vulnerability in document.php and viewimage.php. The public share-link feature forces NOLOGIN when hashp is present, but the value 'shared' skips token resolution while the override still fires for any non-empty hashp value. This bypass allows unauthenticated remote attackers to read arbitrary files from all Dolibarr managed directories including logs, SQL database backups, invoices, contracts, user vcards, and custom module sources.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-89013.yaml"}
+{"ID":"CVE-2026-89026","Info":{"Name":"Issabel Framework - Hard-Coded PBX API JWT Key","Severity":"critical","Description":"Issabel Framework before commit b97dbaf uses a shared HS256 key for PBX API bearer tokens. This template uses the read-only AMI ExtensionState action to check whether the PBX API accepts a short-lived token signed with either the vulnerable upstream-source key or the key in the 5.0.0-2 RPM, after rejecting an unrelated key.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-89026.yaml"}
 {"ID":"CVE-2026-89063","Info":{"Name":"Bookly \u003c=28.1 - IDOR Unauthenticated Sensitive Data Access","Severity":"high","Description":"Bookly WordPress plugin \u003c= 28.1 contains an insecure direct object reference caused by missing validation on 'conversation_id' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2026/CVE-2026-89063.yaml"}
+{"ID":"CVE-2026-89079","Info":{"Name":"Theme My Login \u003c= 7.2.1 - Privilege Escalation","Severity":"critical","Description":"Theme My Login (TML) \u003c= 7.2.1 for WordPress is vulnerable to unauthenticated account takeover on multisite installations. The multisite-only filter tml_ms_filter_pre_insert_user_data(), hooked on wp_pre_insert_user_data, hashes and injects $_POST['user_pass1'] into the user record whenever the tml_user_passwords network option is enabled, WITHOUT checking the $update flag. During a lost password request (wp-login.php?action=lostpassword -\u003e retrieve_password() -\u003e wp_update_user()), this filter fires on the EXISTING target user, overwriting their password with an attacker-chosen value. An unauthenticated attacker can therefore take over any account, including a network administrator, by sending user_pass1 in the lost-password POST. Fixed in 7.2.2 (changeset 3696081 / commit 06b76231) by adding the $update guard and only applying the password during activation.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-89079.yaml"}
 {"ID":"CVE-2026-90774","Info":{"Name":"rustypaste \u003c 0.18.1 - Filename Header Path Traversal","Severity":"high","Description":"rustypaste before 0.18.1 contains a path traversal caused by improper validation of the custom filename HTTP header, letting attackers write files outside the upload directory.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-90774.yaml"}
 {"ID":"CVE-2026-90817","Info":{"Name":"REDCap \u003e= 13.3.0 - Unauthenticated Remote Code Execution via Survey Passthru","Severity":"critical","Description":"REDCap versions 13.3.0 through 16.0.48 LTS, 17.3.9 LTS, and 17.4.3 Standard contain an unauthenticated remote code execution vulnerability. The application is vulnerable to an authentication bypass via a double-URL-decoded __passthru parameter (%2569ndex.php -\u003e index.php) on public survey endpoints, which routes requests to internal authenticated controllers. An unauthenticated attacker can abuse this routing flaw combined with PHP filter chains to inject and execute arbitrary code through the Laravel Blade template cache.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-90817.yaml"}
 {"ID":"CVE-2026-9082","Info":{"Name":"Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query","Severity":"critical","Description":"Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9082.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-b5288d9972ad15f1c281d8d0c1299bc1
+57b381aca9f998553b0510fab472b031

dast/cves/2020/CVE-2020-9402.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2020-9402
     cwe-id: CWE-89
     epss-score: 0.22513
-    epss-percentile: 0.97706
+    epss-percentile: 0.9771
     cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
   metadata:
     vendor: djangoproject
@@ -54,4 +54,4 @@ http:
           - "ORA-06512:"
           - "Request Method:"
         condition: and
-# digest: 4a0a004730450220558d562f2622cc39f4f2d7bfb3c9fba735dac717992bd1beecc3336e2787f49c022100a944ccfa686160006f8f8fe55665b3039bb3da12a58d13f17755bff052ee1f66:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cac52a9cdb482eb54988d83684d1d4ca52283b80d8c43e9f0ada63c1fa3e134a02201fc1d4fee0c4ab6cf3032f8e1458c4eb54ad6785aa4afe8ed2b1080cee0aeb1e:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-35042.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2021-35042
     cwe-id: CWE-89
     epss-score: 0.44369
-    epss-percentile: 0.9876
+    epss-percentile: 0.98762
   metadata:
     verified: true
     fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -66,4 +66,4 @@ http:
           - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
           - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
           - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 4a0a0047304502204ef7bf7165b626dc4fac93d47c94f2ca5c4c4ff10db34f7e20d0156a1867d237022100ae183c210d25dc842109d285b4b6657acb4c78fcbc14c928981e78971ebe4d94:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206950be3a2f6f2e525097c01e7a437b83656acb6f587eed2b7315c531f4c337d902206c97d0fc730f095c8073a5770605f177ccc5dd78be104cf1c87d1ae98562773c:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
     epss-score: 0.42326
-    epss-percentile: 0.987
+    epss-percentile: 0.98701
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -56,4 +56,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a00473045022100ecfd42437704999bec88cb7ee42d17f342b59e75db78ec7ace24dd4b168f130a02205745b94db930cea2cb535befa55c870d392ba3720b0eb6f9260e8bbaca44fe8c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d6bc3a9947128e351c7dd0f317fa42f678cc4b7fed9cfb37bff23bf515352c5c02204904808789adc0f36e6256cdbe83425d76116d721228f57abe5c6e6c99e410d9:922c64590222798bb761d5b6d8e72950

headless/cves/2022/CVE-2022-29455-headless.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2022-29455
     cwe-id: CWE-79
     epss-score: 0.23678
-    epss-percentile: 0.97815
+    epss-percentile: 0.9782
     cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -52,4 +52,4 @@ headless:
         words:
           - "elementor"
         case-insensitive: true
-# digest: 4b0a0048304602210094d84b8f299d5b31cbd067b32dad9c6c35db82dfa2f6f4a20403417158409cf6022100d8d14fefcc2449a02f9344d0db1b4b22c5199ca201396b6b51abbec2f93a9623:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022036d2508b4bc21eae3360805ed2c6a4bf28580dd7565141db5e4279781c66ebc0022064ed4b907fb0c82b987f473cbe7607f663f005eb1e6aa503046f34ac30cc610e:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
     epss-score: 0.01086
-    epss-percentile: 0.64987
+    epss-percentile: 0.65038
   metadata:
     verified: true
     max-request: 1
@@ -50,4 +50,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 4a0a00473045022100ea8ce63581922e0fc9182a815ec4b8ffb0fd8391618c9d397133cc5e0cd16618022034941496552ac72b0b462137267bd2a9e56420e9671b4d2d315a2d00b709b848:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402200de22481ed9fbc2a14c34c4ad6fabdad36fd02ae728f91284a1f26f60ecdae05022005daf3145d039090e92747c5861487130c55db9b8a68e1b74dbdc2d79d7d4ef7:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-38526
     epss-score: 0.03832
-    epss-percentile: 0.90049
+    epss-percentile: 0.90067
   tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
   - steps:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 490a0046304402205d56469588ac77b354d3790760d80d69378b604c6957489a8879efc248a6172902205dc4368c8606b009edf7e68dcfeecfea396a315c42d9d2f15595380b12519f94:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022064df4ebcefe5647ac5ebfd2bc1eb2a8e87e04f544a26e80bec1e62300db32521022061e3162cb030a864c1a8fbc4f050bccf8f699696362eae164884036d006b4d1b:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -16,7 +16,7 @@ info:
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
   classification:
     epss-score: 0.01233
-    epss-percentile: 0.68771
+    epss-percentile: 0.68821
   metadata:
     verified: true
     max-request: 1
@@ -46,4 +46,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4a0a00473045022100da2b47fbb4e42af61bb27368f343d9673bebf4b8faeae9d3a933ebd62d8a8c0c022054ea6c6e80ad3664352ac02552949e6681f66a3ffe3159d8f28dc93eba24702e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b1b09a6570a94140098495f26165f4291efd11ce583fdfd4eeb8eeb3e48c58bb0221008eddd204aaec4e529621964589c285f4b121db474241be0c8d46c842a7c5f8ea:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
     epss-score: 0.01721
-    epss-percentile: 0.77293
+    epss-percentile: 0.77335
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
     max-request: 7
@@ -190,4 +190,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 4a0a004730450220423858c142b44eca40a09bdf9c6420228197ada5dfcd8c5b87fd46913c497b72022100e38ccc8501466b87a2e869f06ab0555bf212f86f3a6798d5ff2d3f2d72a720b0:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022007ddada95b186a8c8afacd2ae6a23e2c2dea497c1ab1bd3473f6cd6aefa3a16302200464990756d32564f299b4f3987cdfce3e51083b9a4854a0b94a1924f49a402c:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-8191
     cwe-id: CWE-79
     epss-score: 0.01791
-    epss-percentile: 0.78204
+    epss-percentile: 0.78242
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -69,4 +69,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4b0a00483046022100c3ec7171957c0c6c4a3d29a0913942381edfd0386af82fcfd408cb9f16c4b48b02210099c7a03b6c97f8b818d7c99692e2348cd90b36fc150a5b21c5bdc5cfba209336:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210091dea449e985b417bde39920d9a26021f4c208557b9bcf6df9008318dc3863d10220078ebaf1110bb0c72d8d3dfd911ed1bb2a5669730b68f5b6bd789bba2c587f98:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2000-0760
     epss-score: 0.62496
-    epss-percentile: 0.99189
+    epss-percentile: 0.99192
     cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100bb0c872cb7c4d839259e0b27de25feadf5374e99f1c098980e32a3f45dda20320221008065d27d772a564399e4da9fe81a0805c44d274e361c9901d5a0dd9aeb8d49e9:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022004b70e70d38666b7f55fd247d057af8099c3b26055f9070f27b33ac9643d1efc02202412c98e1b41e6d8935d89c8117d3041084e45bac4682e953363eca51497ac39:922c64590222798bb761d5b6d8e72950

http/cves/2001/CVE-2001-0537.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2001-0537
     cwe-id: CWE-287
     epss-score: 0.6845
-    epss-percentile: 0.99335
+    epss-percentile: 0.99336
     cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -53,4 +53,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 480a00453043021f59bb17dc4dc3dfcffe83665889a0b87fb3a5deb552bf5bc0cda45dda146cb70220596d1ab3d9b3c4ab1e96289f9646684dc8aedacda4407ec3e1140f895c9a1e1b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205bfca5b51aed921abee8b42fa021049660c12178273c0f4ec1b6dc0a0b93bafd022100bef64548f00276b39791d763b0bbfd2d2df6934fd818c29e43cfca2b54635684:922c64590222798bb761d5b6d8e72950

http/cves/2002/CVE-2002-1131.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2002-1131
     cwe-id: CWE-80
     epss-score: 0.25754
-    epss-percentile: 0.97969
+    epss-percentile: 0.97973
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 5
@@ -52,4 +52,4 @@ http:
           - 'contains(content_type, "text/html")'
           - 'status_code == 200'
         condition: and
-# digest: 490a0046304402206779dfe60be79ad04e4d11c44b9ea0f8da5020bd186373893172c75642aae3e40220514054a41a058b35c4509c93f964c2e4b8f20298e9b324009416913ce4254a4f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d6dcc911b8e5658f61d7c9dc2411819c1e52865659ecc7d74d889e44f13e0bfe022100c7de8b9a2d8356dc2b8d83ea7bd88b20ba6de69dca9651a0c1c00c1268b7b295:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
     epss-score: 0.22528
-    epss-percentile: 0.97706
+    epss-percentile: 0.97711
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220582345c295d7f68e67cc921a7df7d063c18558eca6d46746e3fdd4bc8ff7b2c60221009ae08f190dca42dd5ab0ed330407a460427ddaebc0ba681bcbbec819ad983a03:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022054a5cefcbe553b2b6f8fd8f68bbfd230e35436c4304ed563e81341073f7e8a83022100cbe9353e143a561d5c0c5b2c8b4275fb5696f246000053911e7d1b9379eec17d:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-1965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2004-1965
     cwe-id: NVD-CWE-Other
     epss-score: 0.09001
-    epss-percentile: 0.95265
+    epss-percentile: 0.95273
     cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4b0a00483046022100d90b85391dcb0d57e2323fbddff94670299472ef9f77428e6ad03ad3474dabd3022100abdf688b773420a3d9bc27db6e0b6380b85fe7ba798d086778de666af2f8a1f8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b1f4d7166d02e84e7e8226f12a1014ea03c01d2a058c5174692a8ac50c2c4afe022100b6b5adb663d862dc1648dff518d59cec26888e9d5f4399a2f16cd783415c365e:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
     epss-score: 0.73028
-    epss-percentile: 0.99457
+    epss-percentile: 0.99458
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502201fdcb1d7afbd3c712eb48d23eb532e119c58e2303979acc6c2cf64673514738202210092dae2df1a73d3ca616b38ff9df14ab383e354d085548e68347d37f54977a922:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e21b457abc88ae3d5cd0242bbda932bd913d41f04b5bd8fbe624cab750c5705802201713e1198a0dc30022d3503cb2d90773dff4bc9a72b5661095e4be5c21051b9b:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3128.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5.4
     cve-id: CVE-2005-3128
     epss-score: 0.03436
-    epss-percentile: 0.88898
+    epss-percentile: 0.8892
     cwe-id: CWE-80
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
         part: header
         words:
           - "text/html"
-# digest: 4a0a00473045022100c15b0080286173d0eaee3a9d36b8c4c84510c168b2dcaf6e71d420fdeb40c2890220503de0dbb998ca4cb379c71a9cadb33e84323da4076570e16df0df7352bf0a9c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ac555c6d72a1a2a9547444ba27965db32650cb9a8eee5732dc88dab5038d6603022100d9bf92ce82a03bddff51be621f544602a4fc500f5c02682f5c3bd6a513876972:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
     epss-score: 0.07986
-    epss-percentile: 0.94747
+    epss-percentile: 0.94758
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100890002fe9965ddbd485dece2527bf2287650a19fac08800ee4fc37b2764c472d02202f617256243ccd300155aac337c80261783e636f9bfbe19fd1df9ec432409a09:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502203d8bed7252d8954ca8fbf325162f92adedb4ef7819058c77f2e7a0bff9eade0a022100d7e9927cbf3ad1a09c4d2801ae24ed5a7e021b59719d41b4954c7155440bd5cf:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
     epss-score: 0.17757
-    epss-percentile: 0.97158
+    epss-percentile: 0.97163
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a004730450220186e3ac47bf6f8443122daba3e89aedb8f1ad70938bd9a7d528751eca3f800d9022100ab6f756116a1f7057e9af047eb8fed97202edcf05aa7ef67da2a7f4fdb3b9d5b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201a1aa75848e12d71e014301b01df45b042763613283f49148550dd78ec0085fb022100b1a0fe7becc998393b9814800125a65628dcc1f0d2fb49a7e2fa2ad9a5e42c39:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
     epss-score: 0.08836
-    epss-percentile: 0.95192
+    epss-percentile: 0.95201
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022002aa987319b50fde72b07d751ebcb1b88f3e79aa525b0bfcfe9a1f4cd270be1f022100e25eb89830179c92f216732f7cacc3264bf6a6f038c26890cc9a9e3ba174b108:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b667608ce11213d351f36e27fcf3029e17ecea0190dc50569a33229644341eb1022028590203524cb88f9728d162e3cd310ec0eec4ec6b4842129cb869dde3ade0e9:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-1681.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2006-1681
     cwe-id: NVD-CWE-Other
     epss-score: 0.06798
-    epss-percentile: 0.93988
+    epss-percentile: 0.94
     cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022042f5891bc32044bd1acae3c6909654d09361ffe9dffafbcf0cb610ba5aa81c82022100bf016d91b3c84ea8f055bced1b7a5c85a50d3ee0c2f47851b0ac1040d5c9c1d1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009a258e5d8377f94913665f45f1535db3ecce8d03c35c70f60701f87c4ebe7659022065a249e134b010f75f40870807109ce34f852d3771b7fa5814529eb0ebd32609:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2006-2842
     cwe-id: CWE-22
     epss-score: 0.47196
-    epss-percentile: 0.98836
+    epss-percentile: 0.98838
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022049b4d7e1124608e0aa29a6b4e77767b08e3732289de864e3cb9f80377e3bf38202206affd51e9050a06308afd31729fb7f06a8147a1aef05c21a52f0af340e9167b2:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022004ccf977cfefe3bca81fe899a7b47f46b75f7f9e50aef4cc4ed182c804685fe402200c437ae4bf60f761475694c179f3ef604ec05969c93767cf9be0f84e2c91ec9d:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-3392.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 5.0
     cve-id: CVE-2006-3392
     epss-score: 0.79489
-    epss-percentile: 0.99604
+    epss-percentile: 0.99606
     cwe-id: CWE-22
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b5eec5df3ded37e8b28d169a190d95bc40b8cc07f842b6e152af27ec4821fe950221008844ae99374659783d059513e64eca44a4977470b868594abfc5b7ab83e95b19:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a0b50e9161b5b8732dae2011406e5ad092f574340bd2d821faeecd136a0af0dc022100c2266738dc7c281a2e77b2eab2297aaede032524875c477e41945b1216145904:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-0885.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2007-0885
     cwe-id: NVD-CWE-Other
     epss-score: 0.05746
-    epss-percentile: 0.93039
+    epss-percentile: 0.93053
     cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100a011cb2bd44752e5419a4153e3e73ecf32556ed1ecce70b7da4414f277668c1502207b3c14471db6cd5674ff9f597cda73f978710ff8b44493b91380345888259e74:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100f67f1e7650f9e197c99247125ac7e1575d21b89ceb5dde188b89ecdc9c6dd80e022100f4e58326aa9507d6ea51b8962a41af51f050863b7ae6793ffd12be777cc44d05:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.2
     cwe-id: CWE-79
     epss-score: 0.77376
-    epss-percentile: 0.99558
+    epss-percentile: 0.9956
   metadata:
     max-request: 1
     verified: true
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ac7c13c88ada5019d32e1302811a356bc44e7e0e757141ff0ca9641fd3a78b7f0220124264930972126757485012565e9dab2df38660e4b942569cdce3e97d7c19ca:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100903c3328f2a2db525c4c84d798dc651269485469a1078fc2b6d24e8407928434022100ac3bf68e8c5635b9e9425dc661efaa9b9b2560456d917e073785686af76e3092:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-3010.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-3010
     cwe-id: CWE-20
     epss-score: 0.97385
-    epss-percentile: 0.99899
+    epss-percentile: 0.99901
     cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022045b62a89cb2c701d70a4f4ba30bfb31d174e6ec357dfb778bcf7e3a3613c02900221009b32dcffe269bd0654333c4a32733b7aadb33f25872b32bc3f886424691cf5a4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204536b39945562715b6aeb068e12201c4344462e70b6ff8ae0a787a41c3d218b7022100dafd3fbf1ddbf6c6e458b2ba4a93331c01fb1d236fe5b770fd54253130ef3745:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
     epss-score: 0.09491
-    epss-percentile: 0.95435
+    epss-percentile: 0.95443
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100fc9d65cbd465e3f1b71e9b1e3c97d2f6e70c246608412543c53cd44bd77a167e022100ef5765063d56b1a684c392ee7e6db9df1d3d943dbe1265daf74cd9bf23148d53:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022068e3a48d4b0992511802e01f445557867d5d93c8267c44d2ca3a47c34ffb667802204cbc175a01851faa85496ceaa983129f559873c19017022a2820c25656f1c9cf:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4556.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-4556
     cwe-id: NVD-CWE-Other
     epss-score: 0.25749
-    epss-percentile: 0.97967
+    epss-percentile: 0.97972
     cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100c0b47089c82d0e9840e12b1c570cc43a6c7ba56b5688dbbd389b592db2155a98022100ace028e81e4fc68a65f096aa9af1f9b1764b3ff2863301d0bcb2b1830bc12668:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022055d3834d4b150806f8a273fa033aab3dc8b15205335d49e880ee2e2c2ea7f46e022100f047a37e0443a7f3c9809fd202a8d38c273d3dfcc376811e319b580a7976df46:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
     epss-score: 0.14639
-    epss-percentile: 0.96656
+    epss-percentile: 0.96662
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f43c6f26bb38f8c1ea0de0842ffbcf7cc3d5a468bbc2298d5b5d679d7b09b8d3022073121019ec9a6381106f83e11d725e773cd8cfaef9bfc82e983554059f24a8ea:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203136c61ff12e1adccf6490e73d7b4af17203f86241bbde2a78b2bf51616fca21022045757f8e16f0caecab1aa4717921c51c3d1903fa0efb503b28122dfbf3077037:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1059.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1059
     cwe-id: CWE-94
     epss-score: 0.48329
-    epss-percentile: 0.98864
+    epss-percentile: 0.98865
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402203551a12f9704078cc19fb4e56396bfca3f5381cca03a6bd1876285888ec01fa5022046b9872b2375f6a20a566b015952db2dace2004c2dcd62daaa5903577b31eb5c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100901a892fcbec120824f5507eda6196a498262914164d64270075280ccc0e1945022075ca2a1732b2ce2b3e7da182214369c1bb591350d458d747acd8d136a4e14648:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1061.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1061
     cwe-id: CWE-79
     epss-score: 0.074
-    epss-percentile: 0.9442
+    epss-percentile: 0.94432
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c5d2ad5652066c2160dee87e136e5f1daa05b67d907112b4e5a8c861f4fed36802200ea75e39b41e26d692352e126819334cf4ea9ae55bf846ee53170aa401aba76c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207dc6542bd990eddb81222f2cd016c47bcb4bad495dd5cb331f3bd5a053cfd0ae022100a4ef3d90bebd09fa29e227bbbd5eb4e675c5e9fbc2a168c10f5d8f262fdb08ce:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1547.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1547
     cwe-id: CWE-601
     epss-score: 0.48137
-    epss-percentile: 0.98859
+    epss-percentile: 0.9886
     cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -51,4 +51,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402201230153f013d0d38595a554cc1aad31d6a1fd1ac3389f46029256a301d5c266b022024469af74ee069df2745adfae45ac6507fb77adfdc44c3c17357ac4c7dde8c5a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b2cd6371f06c2c14f1d30bf7bb07806b8f8830155b9a90f7de25f1bb0da9b972022100bf2f485ba4e82bc38850be2c53756ba69a14d76e6c88b44201b8d7e08ca41265:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2052.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2008-2052
     epss-score: 0.01568
-    epss-percentile: 0.75143
+    epss-percentile: 0.75185
     cwe-id: CWE-601
     cpe: cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*
   metadata:
@@ -65,4 +65,4 @@ http:
         status:
           - 302
           - 301
-# digest: 490a0046304402203e604dbbaaa3d1cbce68b7030f1d5caabd5b4e5beef4b069f8fc063b3d539f060220156fce573c7299b90d32a67fb338e20c2c5c50028f0bcce8ac9f29e23480537e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a0fda9e73d1164b066b1e3387163f43c80c0502d6a4e644e0ff790d34e96ea85022018aa1aab809799de4bc6777f356b5f5f1b4f57405bd33f4a07bc54ef36b9a5b5:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
     epss-score: 0.06232
-    epss-percentile: 0.93522
+    epss-percentile: 0.93535
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e61f23832b3b11ccc49912391bb43fdabc393ae436cb688a27f3db0b731245040220120e0fd9e2bba79091c6833af90bab1aedc61c8aca953094a8cb94fe9ac0b219:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d32f4514a6a16f9478b6323575265ab3862e02a68162e2ecc83550413c7a1b4e0221009fe62e209cb1746000a4c8747cab228edc5661872cc27027c567c850a8a9bb7c:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
     epss-score: 0.18809
-    epss-percentile: 0.97277
+    epss-percentile: 0.97282
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e18a2b3b2c8ddb3d076940263943e2ed20c63ca5ff2ffa3ad93239ef57a47819022030faeed15ab85b4f2aa6cd0562b68416955924d737ec2085bc9192d83a131852:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220765fea450b854e20e51490e7d88be9065343c3718ce1da1af175f1e832c13b0b02200ad7d6e9c4b423323843b4e718f85c38c4daf5e1918bb2cae3cd1009eec0fa1a:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
     epss-score: 0.21476
-    epss-percentile: 0.97612
+    epss-percentile: 0.97616
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022022db702eb32ec8a53612a94f7ff3237eaa7a68a9384df7c42d6d0b742b8f9aef02207bc1c53ac6467509c694db9c4655c018ef9b83a70eb703b28b3555294f9f93fb:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201f64ab8fc7599e11b876eab28637ab366923e5af95e1cb9f9ff69db057bdcd40022067ae79ddb147cbc3e4a0a35235a0404de14fa65bd9d7291631af190dc2bea7de:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4764.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-4764
     cwe-id: CWE-22
     epss-score: 0.16505
-    epss-percentile: 0.96988
+    epss-percentile: 0.96994
     cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502207ff0cbf78b6cab5205a95dda5a6f1ce27e86e987b4fe9539b44740c510e8d2a902210081556de1aa712826fec42ec5b3f3bdbb1fc541f59d71f094095c8ac551244b1d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d2aa898f937fa9dba043ea8b578e061d6981a3c947b17906bdd893c5398ab5ac0220655470f96b6d9a3c988b5fdd8beeb607301a32b806440350f44e1b084ca4bdbd:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-5587.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-5587
     cwe-id: CWE-22
     epss-score: 0.12865
-    epss-percentile: 0.96296
+    epss-percentile: 0.96302
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -49,4 +49,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210090aeb43993131b09e726f3eb848c406634739e3e0aaefc734b85cccfac6f0556022046d993582f7e1f51df8664c58bbdeb6a8b46191bb37a8ab105e8db24ece83196:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ebeeefe50576118951e12a0660f8916202032bdc10d27348bdf0208c2a59d1c7022100c6236f3e0d0c557cfccc65dab3d7037ddf908756f5e9ff36bd010641b6f228ae:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
     epss-score: 0.10637
-    epss-percentile: 0.95792
+    epss-percentile: 0.958
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221008d44327c8bce9bfae9f74a1b3fbf930f40744f35d00d62225781d2a21e4bf5f802210092c451677e93d05ee1d58fc4409bd734a7cfbb5546b9bb5c68673a521654098a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204619d76a302743603395b127b0909704569489186875b2e66764bf32ed1c483a022100fec5689089e79475e59dce3ae01bfc8a61cfe8ff3452be108791b3e61641f409:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6172.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6172
     cwe-id: CWE-22
     epss-score: 0.12284
-    epss-percentile: 0.9618
+    epss-percentile: 0.96187
     cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220587b19dae92f2b11551d7baaf29f26b8af7695e649e84ded10d14c04a1cde3ec0220299b3d26795ddab1890ea0eaca68904baf7573b3aab1211fe06f15c84115992c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402203d72e0283bdf883a91ec303971ab9607c5b2d2a559253ec5e7d465988ed4bfff022056de5c57ddd72c5e82051fb58f4eeb9896f3d68daaed41eb397a78cadce666f3:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6222
     cwe-id: CWE-22
     epss-score: 0.11497
-    epss-percentile: 0.96017
+    epss-percentile: 0.96023
     cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d6613382ca20860fd3641e0514000e94676ceaa35bbd6da896e67fe7fec970b002200f1d6f6eee1d778ec4133eb7d89a82718eb4981b175cd9f2bdc2443906d6684e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e0000e0e423569fb1aa53e01eda5e1b6ad3283fa304d0bf7e3730b45a0ec848302201b605d3341b35b66d301c03ee604361875522beefbb35c5b12668186903cb6b1:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
     epss-score: 0.05114
-    epss-percentile: 0.92348
+    epss-percentile: 0.92363
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402202ecb24e655723e5383f8cc69a76178a6693fce86edc3b931db7b9fb7c600adbe022001d49832285bf9d2bc8c0bdc9a6782479ebaba81d220880a84e549b1b58569c2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a0cc51ed65389874a968c1d01fc0939c701ca3d1b846db462103d936cb6d6541022078cc8909bca16d2139b2b1545f2daac71bb839a72e8e9b43af5cd8980517b0a6:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-6668
     cwe-id: CWE-22
     epss-score: 0.14041
-    epss-percentile: 0.96554
+    epss-percentile: 0.96561
     cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -45,4 +45,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100a2a8045a1c6a15052471ade84258e46750e320c4665479b933b96b2a4ff6e721022100f7c32a5f183ff7f5436f9654a97d5bbc0b3726fc19555afc0e13d7ea28e40821:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220081ebc4d2c1a9a2d15bc8e424d695fc135cf7a61d6aa05c075b5b4f7bfb4260f022100dceab20451fad2bb781ecd5ca6452c09a724e440b2a97293b0bc71ea222ddaeb:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6982.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6982
     cwe-id: CWE-79
     epss-score: 0.05782
-    epss-percentile: 0.93071
+    epss-percentile: 0.93085
     cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 490a00463044022065cddf45248f0e4eb4ecd7fa84b293bb510842bf58f4393f42d1121784014f1702206117f5edd9bba2af357acaf4b203336547a495322b019ba47eaf58c3e03e2515:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e8d3d09a3f94668eb7a7cc147dc454c408f3b5863cdad7ed15d6c1c3946d0fb2022100c252e1be02f71b36598ce356d1492c9a052dcfca32a4ec09bfaf59e9c0544fc6:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-7269.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-7269
     cwe-id: CWE-20
     epss-score: 0.08234
-    epss-percentile: 0.94884
+    epss-percentile: 0.94894
     cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
   metadata:
     verified: "true"
@@ -43,4 +43,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502205642096bd523b48aec83dba5367bc01b21e1922a4dbfc55b9e6e3fa6fff3ef07022100818d1f39871249e62b16c9194f5410f6ee8ad55294df875d959e37fbbcb7ff66:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220475e16a732810c1e043b3e33e22dbef27c0f420621a17e5eb7795bc5e51fc1ad022100c7342c0c909fa95ac059a14e54421f6c1e5362cc6d0e78d0d45d213cbf4ccfc2:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
     epss-score: 0.10932
-    epss-percentile: 0.95879
+    epss-percentile: 0.95887
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402200b597088d5c183691f7e8190e1863dea95f77be0afb68eea57497caa01c17b75022013d6bab8ad9f33f2309a6400fe85c56845fa7a06e7e58f765f16faaa3be70cf6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a692409089a448a3cef79d5637539f217f355769d07b4b3ca58a187f5afa169e02205fab3b7f5db51ee0841e4cf9432116f7b4ca28427a1c2f36997edc38d618df23:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2009-0932
     cwe-id: CWE-22
-    epss-score: 0.45764
-    epss-percentile: 0.98798
+    epss-score: 0.47871
+    epss-percentile: 0.98854
     cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b87e99b115f9a626990c5f85c06464e2b32da5376936e4ab5064a9a918db957502202d7fabbd73c871260670afaf7665be82c2f40c102e9b5ee4b3c7cc9f9bf80bdb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204e7c48c2e51750f9081965ef1819d238a7c604cf2d6b3207ada6305faeae7240022100bd7a57e94cb3120f059307865cdb6f0bbb4d4705e19b9d6ae36c4a338e5c9995:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1496.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-1496
     cwe-id: CWE-22
     epss-score: 0.07183
-    epss-percentile: 0.94286
+    epss-percentile: 0.94298
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b91ce3c1d50d6d8398e92659c6fc71810ec3d146315854601de34cc26e1c1af40221009cfc7ac176f10dd95f3e4f70faf19b339c8822f4e34b8cff685cc5c69428fe5d:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022042bac59e226d88dae96a6284622ac10d10dce64ddbd523675cc0f94691c84c6202203236c3274c7be86357ce451e17138837fecc8ae93d5c9c93d9826291cc1cece8:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1558.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1558
     cwe-id: CWE-22
     epss-score: 0.29821
-    epss-percentile: 0.98203
+    epss-percentile: 0.98206
     cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d5bb7a58fa8bda38d27f121b952635fdb16e2c94e87956635c9400b9f5437a700220451a3687e0f54f9bcf24a5830ddeb93479bdae961c7df9974b79becf9579ea52:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e574499a18c1741c47a71ed729be9373f4946eddad24521d5c2614fa26857d2b022100a8f631f46a672591489e89e0e49d40a475b969c92ad3fac8f310a54be1d0eae3:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
     epss-score: 0.16083
-    epss-percentile: 0.96916
+    epss-percentile: 0.96922
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -65,4 +65,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402204f5d82f73da1c6ab00313aabc647d0748ff6f3528c81ea51a4d3afec9cf3f6300220018cc132666ea55c89dac784fe65ca812f1a51205d3dd0a69ca7a6a47a94f3f4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201310c1db0cfee42894f78b96e7fc2772b24a166a85c9b283938e8fa082e08417022100b2576eae0502b2bfbf94dcf75f9a1e13da805485d1db275761e6801da4643cb7:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2015.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-2015
     cwe-id: CWE-22
     epss-score: 0.06507
-    epss-percentile: 0.93754
+    epss-percentile: 0.93766
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022062252c0f8e91e309b8af20edd0f3f71a5cd24c8a6d527d75c69449cb779305390221008f26e7fb4b71342daddf35cb56db2666d41d2b678876f467944bb08e7bddc49b:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220681eb4c17ed7b43faa90325408d62c5348c106ad9435d5e0a7a58b7d440de4ee02206bbd21775dabb92617e4129d61764c230644ae86a32f37c5522a7a742261256f:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-2100.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2009-2100
     cwe-id: CWE-22
     epss-score: 0.08229
-    epss-percentile: 0.94882
+    epss-percentile: 0.94892
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100efbbeaaceba1d0b6cf65ba6b52d0d450256e00001fb21a40edffb7b493835033022100d1acc975ef0c3a3d5d4ee6aacf03e9ab392a187aea14974d4c7e8c0122e9d583:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d20229c7f7d6302648d8a722c3c570e0669a8a2f9b988e44bd5b21ed529727870220788021c7383b5eb94223dc28287b47c2af0ce7df649132cac6ae5634c2c9d668:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3053.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-3053
     cwe-id: CWE-22
     epss-score: 0.05925
-    epss-percentile: 0.93226
+    epss-percentile: 0.9324
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100a5cdd7b9b9a6ffebbee0e1bd04bf3fa257e03f6e782950cdccf2a54de6faa8bb022100fecbf72010e9e05a54e259d424f57782927a592e4c51b22b9278f3cb935ed060:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f358935ef2e19ea9634f36d9947891d998293c7e5154b96e9577d3c194c52e9502206638dd311d13efdf73c212e0bb7706b787fa89b48317432066f2a328870b08fb:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-3318.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-3318
     cwe-id: CWE-22
     epss-score: 0.06455
-    epss-percentile: 0.93714
+    epss-percentile: 0.93726
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100922814f16991e8e55198e9914751cdf26c6ef9a1104519075593a01c5417adde022100881ec49b0b36e4e253abde8bbd992d421eb83b08ebed225af8e386b41180762b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a73cdd19882cde1d1cab2147ab1ffb8fb903ed636dac350ef83a180686c772f102202ff1496cc06fdc12c3131b5ee288563120579d76f9e889734f9f41249312d0cb:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4202.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4202
     cwe-id: CWE-22
     epss-score: 0.08109
-    epss-percentile: 0.9482
+    epss-percentile: 0.9483
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502207c497b0fe972d05a0285e5946122251015fe5bfa8017a523574fd5fa951e7ca9022100de5d508f0d7deb21eac3bc892976ba8924becaed2527122e376cca9ab7815dbc:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d54b8d38db240be9990b4b3cf163187e89dd0b2d04c1290204402be098d2e7c8022100cef79403aabefbc4682ec769e2a90b9a0e5479e45e653a0cb714d49e6569a1e7:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-4679.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-4679
     cwe-id: CWE-22
     epss-score: 0.07866
-    epss-percentile: 0.94688
+    epss-percentile: 0.94699
     cpe: cpe:2.3:a:inertialfate:com_if_nexus:1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022051655701e2c80c62b11531b1a80530d66a404ba405656a192f484d72e8d0dd3b02202551454d0b2a111188682e3e7bfd5567802df12c47addd6773b7f74f91a188b1:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201bf35949ee8858de7dfff0e623b1c0a27a80274f0e306832cb0812e0b6686141022100c70ed957c514c0da74a9421fa9fa6ad9d2992ac273c24e92b10baec3e9c418aa:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5020.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2009-5020
     cwe-id: CWE-20
     epss-score: 0.03488
-    epss-percentile: 0.89073
+    epss-percentile: 0.89094
     cpe: cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -39,4 +39,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
-# digest: 490a004630440220547aa7e816e42a82e2f8ba6b1682ea759254f4250304a67d5de6748ecd0852d202203271bb611330aa582445deb8495121679109d11587a3545d836d01a14d45bb48:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ed90d7027bb5d87575b9b231cf437a4feff672e11376ff8a3d2e5538e1c1cbc3022100cd8d67613ff058aaeb0ed8b19c06852c3e84ce81489b4f5f2c2165b09486ff07:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-5114.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-5114
     cwe-id: CWE-22
     epss-score: 0.13298
-    epss-percentile: 0.96388
+    epss-percentile: 0.96395
     cpe: cpe:2.3:a:iwork:webglimpse:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402205f8c1165dd5fe10651af8a434573c483fee1b5c52e046a45a3b4d1b79c251ceb022045baac9a82579048d3f87c6ba664139eec0a277844318af47d0553fdb63eb154:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210086ffd10e1d5d252e1d238e2bf61187a72b55968f8f7e2ade3e36cb94d20f5ceb02203815b8f7b36701eac500956ce20b294fb0e828c2866ef46ba3a9150ee2fdfbce:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0157.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2010-0157
     cwe-id: CWE-22
     epss-score: 0.12969
-    epss-percentile: 0.96317
+    epss-percentile: 0.96323
     cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402206e322fd301f9f12bee36812196eabe25d6ccf6a177e2086a48dc063913516392022071ab7f233b40a31abf954bd07ed87f52741803766fb94cb9c82b1a6a201768e4:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ba1f9ad26f3d05ed519d53e7586eca4958d988f73767bf49b6ecfb2f7bd3a4f6022100fe6550e95fd4c856dce604e32951ac974d8a66620122c4210a5d6049cc9e742d:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0467.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0467
     cwe-id: CWE-22
     epss-score: 0.43296
-    epss-percentile: 0.98726
+    epss-percentile: 0.98728
     cpe: cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100cb7ad3f3bcde2f3cf3c645c6630b2d4cb180d2c181b99b4dc84e26d6709c3bd6022100bb02cdaa48c365e70fb6c53e476f18e3bf6429edcef279c5af37234aef522f6c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210087d90d1912332eb8565c514c261bbd715f7bb7515173537c61491d81be20d413022003bbfad32775739cfa22efe911192cc55111c946880752de85718d178c753453:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0696.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0696
     cwe-id: CWE-22
     epss-score: 0.28222
-    epss-percentile: 0.98114
+    epss-percentile: 0.98118
     cpe: cpe:2.3:a:joomlaworks:jw_allvideos:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b0dec6f3346426300bbcdfca178099bc334d41372ee630a3f30d84293aea3fd30220453d145b1e4407bf2bdd68bea68edc9afdbeb4467fe99a80be4407ef213bc5f7:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d63ab644cbfb775ac079cec24ebb1c789159ae013a422eac01c5279db4f3c482022100e60600ae5ac86baa4f3e8894bd79d23cd8774994c260e91274d301fbd1cd891c:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0738.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2010-0738
     epss-score: 0.74722
-    epss-percentile: 0.99504
+    epss-percentile: 0.99506
     cwe-id: CWE-288
   metadata:
     verified: true
@@ -111,4 +111,4 @@ http:
       - type: dsl
         dsl:
           - "'web-console verb-tampering: HEAD=' + to_string(status_code_1) + ' GET=' + to_string(status_code_2)"
-# digest: 4a0a00473045022100e45e397121a0032673e7ffa517aca1d1994b8cf84777fb54e3fd8d127d57c90a022051368c24b5242e0c7a23af334fc0a73af494e986bb186b7b266f323dbb1baed9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220372a7131f18eb41f90baa40c377947f7e1bc4679f4cdf9532cb9ed1ca77c49ad022100fe36c38d82a5967ad32fe3223b5c374e0e7782657f60c276bace4b1b2c4f7446:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0759.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0759
     cwe-id: CWE-22
     epss-score: 0.15242
-    epss-percentile: 0.96759
+    epss-percentile: 0.96764
     cpe: cpe:2.3:a:greatjoomla:scriptegrator_plugin:1.4.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402200e2f8e6f572dfe49f5b2cc88eeb8acf8122a4efb2bf7da57729462a8370693370220025746ba7bcee80484fba818b1e45206a1fcd865b251267326745a6fd9d5b254:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202e718aa289877c747d0dbc2d939c978c0cb98a0e5d9be21df14ca075598e93790220159679e8eb08749a79cf338ab051feaf33398e4a32e6e787d29259fe8180f6e5:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0942.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0942
     cwe-id: CWE-22
     epss-score: 0.0724
-    epss-percentile: 0.94318
+    epss-percentile: 0.9433
     cpe: cpe:2.3:a:jvideodirect:com_jvideodirect:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100de22d9516c0e8e000c45ed86120f4e421ce52f6480101e29b970a38ad162cf2202202f3abd695d806b1070d7849d429cbfefba16f306906ff4d2ea09205bc3eb7cad:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f808e35be394eeeaaad06bc6ff1a00b5a5fab3d17764f1ed8b2c9dd3f7f37c9d02203861f0f44a340010d4ef736f575ae5ad48ea3b4248d73bb069bf93275bc3a902:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0943.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0943
     cwe-id: CWE-22
     epss-score: 0.15936
-    epss-percentile: 0.96892
+    epss-percentile: 0.96898
     cpe: cpe:2.3:a:joomlart:com_jashowcase:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210097a43cbe746da5c395001ca89e9c94d7b1396c5b5e183b2c85ef0a2912bcc44a022100a5c2f40372acb0536c929e3e09afd07cdd685c848b3cb4d77d1dc15e935542ff:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022100979d38c280e4acb676c9c876f52d7265e49c23db9cafed6b3175224aa1ee9c40021f63941fdfaaf467e73daa1d73a76835f4ce69f0823f95425ce5279d7bd39f20:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0944.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0944
     cwe-id: CWE-22
     epss-score: 0.14041
-    epss-percentile: 0.96555
+    epss-percentile: 0.96561
     cpe: cpe:2.3:a:thorsten_riess:com_jcollection:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220544ecdfd5ffe39a0ff5e59a186ee9436fc5b96874c26ac6db76a470abd127efe022100fadeb71132b85a83fb81ff59fe3a09a92833f3561fa27089d9faf4f54ec3548e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e8233c52dca9f83952b06ce47c50df31738cfaccb4a74c30f76e9f1a51082f60022100abf06a219c4ba2494ece429333e2210f27fe3b49c84fb7390e7eaab983b896c7:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0972.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0972
     cwe-id: CWE-22
     epss-score: 0.13504
-    epss-percentile: 0.96441
+    epss-percentile: 0.96447
     cpe: cpe:2.3:a:g4j.laoneo:com_gcalendar:2.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b7b670a4a0b376d2f0d05cdf3616f1fb3cb0a2f3f22fe7ead968740953e5e4cf022100d845d103f7555443e3ef3167803f5a7226794fd612590502a9927ac39cd6b09c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100b89d3e820b5bcb632c6d3ff3d39f9780b67f0b63567f7b03f9c49776a2a3327702205073b8d3aaebe6df59ad7f13746edf686e8e87aaac23d04c6dc1bb923dc60ea8:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0982.yaml

@@ -17,7 +17,7 @@ info:
     cve-id: CVE-2010-0982
     cwe-id: CWE-22
     epss-score: 0.06829
-    epss-percentile: 0.9401
+    epss-percentile: 0.94021
     cpe: cpe:2.3:a:joomlamo:com_cartweberp:1.56.75:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -39,4 +39,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450221008b9818f44e6d9ae179be2cbc085689225fd2ff47c45eb7c65381dbd0d67a926002204d5f0ffa880636bc991f09f24e1ff716935b3a1941ec44520a9d60cd82fb8d79:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502201fdf490c5850bd41454e525a86990d96bc82f922718f320f87977bb6fcb9d6fe022100b326b2d3532ac046025e1906216bccfbfb6e33358664dcb26485af1c9622bfb3:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-0985.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-0985
     cwe-id: CWE-22
     epss-score: 0.13339
-    epss-percentile: 0.964
+    epss-percentile: 0.96407
     cpe: cpe:2.3:a:chris_simon:com_abbrev:1.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220529391f794db27f230c0f9018543700ec9148a057a531125947b15682b433ea1022100d2b135dbc052bfbd4fffebeea10652648531813703215f693ad05bf7ecffbddc:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207c2217565304dc1d4cf2e42ba051f65e1b4fe64b86a47659ceecae5976608961022011e250fd9add8f845ba375476d5449ae4e0aaf65736a064ed064703bc6738d0e:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1056.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-1056
     cwe-id: CWE-22
     epss-score: 0.11414
-    epss-percentile: 0.95997
+    epss-percentile: 0.96003
     cpe: cpe:2.3:a:rockettheme:com_rokdownloads:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402204444a79e9d7868377af6140a9cca21307bd31424db46609ffc95b50dad2edb1b022055ba75fd19b811ab0620a0b667aa1262d288a8c14c512ed4a7d3958e9b7557b5:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202c6a7c0eb40d8ac376f4b86194868789da84c5926367e51395ec325d964c11b802200bbbb4b64b8751f64b6a15cebceb3c652859c318915ab6d8694f6178b7f2fe36:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1081.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2010-1081
     cwe-id: CWE-22
     epss-score: 0.14597
-    epss-percentile: 0.96649
+    epss-percentile: 0.96655
     cpe: cpe:2.3:a:corejoomla:com_communitypolls:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -41,4 +41,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100eaf32abb3d191c00420c6451e4894e8aec98bcf22299e31949c571e4134855a3022100cb2975ea3d1169dfd3fd04d6c743b82a538aea628dbf48cd3b3b0367c62fa699:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502202625694d2e6f9db1f09b3c97267122ff9f76dc63f1a300a9142ecd760b9ea316022100a55ebb20d4d16371a2925df2f536ebe507a5ec07404f654b8f146dc270cebc2f:922c64590222798bb761d5b6d8e72950

http/cves/2010/CVE-2010-1217.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2010-1217
     cwe-id: CWE-22
     epss-score: 0.06377
-    epss-percentile: 0.9364
+    epss-percentile: 0.93652
     cpe: cpe:2.3:a:je_form_creator:je_form_creator:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a0048304602210085c686e371cf05cfde0f14b718187710ba13068aeeaf0ff28e5ba6dcddb2e3b4022100d035d8f14a7ac3560cf1c603b01ef18b232da659878dbb8aaa5aa24b1bf41abd:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022070ee6a5e15d3ddead108bb4de35a5ebdf97452e7db0a077a70f32de53381d3b702206393bf9e96efe89a22e25cc139e7140b0211645d0e7dbdd6cb5075bc62cc15cd:922c64590222798bb761d5b6d8e72950