Declare PHP2Shell request body memory budget

Added CVE-2026-10525 - NEX-Forms Unauthenticated Stored XSS Template

.new-additions

@@ -1,68 +1,25 @@
-http/cves/2010/CVE-2010-0738.yaml
-http/cves/2022/CVE-2022-27925.yaml
-http/cves/2022/CVE-2022-28108.yaml
-http/cves/2026/CVE-2026-103956.yaml
-http/cves/2026/CVE-2026-104935.yaml
-http/cves/2026/CVE-2026-105133.yaml
-http/cves/2026/CVE-2026-10818.yaml
-http/cves/2026/CVE-2026-108578.yaml
-http/cves/2026/CVE-2026-109618.yaml
-http/cves/2026/CVE-2026-110372.yaml
-http/cves/2026/CVE-2026-12609.yaml
-http/cves/2026/CVE-2026-12741.yaml
-http/cves/2026/CVE-2026-12800.yaml
-http/cves/2026/CVE-2026-14870.yaml
-http/cves/2026/CVE-2026-15015.yaml
-http/cves/2026/CVE-2026-18143.yaml
-http/cves/2026/CVE-2026-18315.yaml
-http/cves/2026/CVE-2026-18937.yaml
-http/cves/2026/CVE-2026-19089.yaml
-http/cves/2026/CVE-2026-21589.yaml
-http/cves/2026/CVE-2026-26077.yaml
-http/cves/2026/CVE-2026-27604.yaml
-http/cves/2026/CVE-2026-27934.yaml
-http/cves/2026/CVE-2026-33425.yaml
-http/cves/2026/CVE-2026-42564.yaml
-http/cves/2026/CVE-2026-4883.yaml
-http/cves/2026/CVE-2026-49772.yaml
-http/cves/2026/CVE-2026-52715.yaml
-http/cves/2026/CVE-2026-54617.yaml
-http/cves/2026/CVE-2026-56070.yaml
-http/cves/2026/CVE-2026-6279.yaml
-http/cves/2026/CVE-2026-63358.yaml
-http/cves/2026/CVE-2026-6377.yaml
-http/cves/2026/CVE-2026-6495.yaml
-http/cves/2026/CVE-2026-66914.yaml
-http/cves/2026/CVE-2026-69137.yaml
-http/cves/2026/CVE-2026-72867.yaml
-http/cves/2026/CVE-2026-76268.yaml
-http/cves/2026/CVE-2026-76460.yaml
-http/cves/2026/CVE-2026-80462.yaml
-http/cves/2026/CVE-2026-8089.yaml
-http/cves/2026/CVE-2026-82186.yaml
-http/cves/2026/CVE-2026-85097.yaml
-http/cves/2026/CVE-2026-85714.yaml
-http/cves/2026/CVE-2026-86242.yaml
-http/cves/2026/CVE-2026-90774.yaml
-http/cves/2026/CVE-2026-90817.yaml
-http/cves/2026/CVE-2026-90898.yaml
-http/cves/2026/CVE-2026-91136.yaml
-http/cves/2026/CVE-2026-93616.yaml
-http/cves/2026/CVE-2026-93674.yaml
-http/cves/2026/CVE-2026-94169.yaml
-http/cves/2026/CVE-2026-9833.yaml
-http/default-logins/apache/apache-skywalking-default-login.yaml
-http/default-logins/caldera/caldera-default-login.yaml
-http/exposed-panels/hermes-agent-panel.yaml
-http/exposures/configs/apache-skywalking-horizon-ui-config.yaml
-http/technologies/apache/apache-skywalking-horizon-ui-detect.yaml
-http/technologies/astro-detect.yaml
-http/technologies/paperclip-detect.yaml
-http/technologies/ruoyi-detect.yaml
-http/technologies/wowza-streaming-engine-detect.yaml
-http/vulnerabilities/glpi/glpi-planning-user-enum.yaml
-javascript/detection/gost-socks5-detect.yaml
-javascript/detection/gost-ssh-detect.yaml
-network/cves/2024/CVE-2024-54772.yaml
-network/detection/mikrotik-routeros-winbox.yaml
-ssl/emudhra-compromised-ca.yaml
+http/cves/2010/CVE-2010-1428.yaml
+http/cves/2024/CVE-2024-56829.yaml
+http/cves/2026/CVE-2026-102782.yaml
+http/cves/2026/CVE-2026-102878.yaml
+http/cves/2026/CVE-2026-10525.yaml
+http/cves/2026/CVE-2026-11565.yaml
+http/cves/2026/CVE-2026-116006.yaml
+http/cves/2026/CVE-2026-116067.yaml
+http/cves/2026/CVE-2026-16535.yaml
+http/cves/2026/CVE-2026-16959.yaml
+http/cves/2026/CVE-2026-17540.yaml
+http/cves/2026/CVE-2026-18110.yaml
+http/cves/2026/CVE-2026-56062.yaml
+http/cves/2026/CVE-2026-59707.yaml
+http/cves/2026/CVE-2026-82901.yaml
+http/cves/2026/CVE-2026-89026.yaml
+http/cves/2026/CVE-2026-89079.yaml
+http/cves/2026/CVE-2026-9062.yaml
+http/cves/2026/CVE-2026-93485.yaml
+http/cves/2026/CVE-2026-97359.yaml
+http/cves/2026/CVE-2026-9848.yaml
+http/exposed-panels/danfoss-ak-sm-800a-panel.yaml
+http/javascript/cves/2026/CVE-2026-111497.yaml
+http/technologies/opencloud-detect.yaml
+http/vulnerabilities/wordpress/jetpack-reader-xss.yaml

TEMPLATES-STATS.json

@@ -1 +1 @@
-{"tags":[{"name":"vuln","count":7174},{"name":"cve","count":4550},{"name":"discovery","count":3882},{"name":"vkev","count":1969},{"name":"wordpress","count":1728},{"name":"panel","count":1636},{"name":"wp-plugin","count":1533},{"name":"exposure","count":1509},{"name":"xss","count":1425},{"name":"tech","count":1215},{"name":"osint","count":1131},{"name":"detect","count":1068},{"name":"rce","count":1062},{"name":"misconfig","count":1008},{"name":"wp","count":962},{"name":"lfi","count":891},{"name":"unauth","count":783},{"name":"devops","count":755},{"name":"cloud","count":720},{"name":"cve2024","count":627},{"name":"intrusive","count":623},{"name":"sqli","count":611},{"name":"edb","count":597},{"name":"wpscan","count":596},{"name":"cve2021","count":592},{"name":"cve2023","count":571},{"name":"cve2022","count":569},{"name":"authenticated","count":568},{"name":"kev","count":564},{"name":"login","count":561},{"name":"packetstorm","count":551},{"name":"cve2025","count":435},{"name":"cve2026","count":430},{"name":"phishing","count":402},{"name":"network","count":401},{"name":"file","count":392},{"name":"oast","count":384},{"name":"default-login","count":345},{"name":"config","count":330},{"name":"auth-bypass","count":329},{"name":"cve2020","count":328},{"name":"apache","count":289},{"name":"tcp","count":275},{"name":"microsoft","count":260},{"name":"iot","count":248},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"gcp","count":234},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":227},{"name":"token","count":227},{"name":"cve2019","count":226},{"name":"gcloud","count":226},{"name":"","count":220},{"name":"malware","count":214},{"name":"ssrf","count":213},{"name":"azure","count":213},{"name":"cve2018","count":203},{"name":"aws","count":198},{"name":"time-based-sqli","count":194},{"name":"csp-bypass","count":192},{"name":"code","count":192},{"name":"azure-cloud-config","count":191},{"name":"redirect","count":185},{"name":"install","count":183},{"name":"amazon","count":176},{"name":"ai","count":167},{"name":"disclosure","count":167},{"name":"security","count":166},{"name":"joomla","count":163},{"name":"keys","count":159},{"name":"cms","count":156},{"name":"local","count":155},{"name":"linux","count":155},{"name":"aws-cloud-config","count":147},{"name":"router","count":146},{"name":"ftp","count":138},{"name":"audit","count":136},{"name":"files","count":136},{"name":"file-upload","count":136},{"name":"cve2017","count":133},{"name":"kubernetes","count":122},{"name":"js","count":119},{"name":"cve2010","count":115},{"name":"passive","count":111},{"name":"fpd","count":108},{"name":"oss","count":103},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"debug","count":99},{"name":"windows-audit","count":95},{"name":"privesc","count":92},{"name":"oracle","count":92},{"name":"traversal","count":90},{"name":"enum","count":90},{"name":"cisco","count":89},{"name":"seclists","count":88},{"name":"windows","count":86},{"name":"takeover","count":84},{"name":"deserialization","count":82},{"name":"adobe","count":77},{"name":"ics","count":77},{"name":"fileupload","count":77},{"name":"k8s","count":77},{"name":"detection","count":72},{"name":"google","count":68},{"name":"vmware","count":68},{"name":"cve2015","count":67},{"name":"logs","count":67},{"name":"oob","count":66},{"name":"php","count":66},{"name":"atlassian","count":65},{"name":"api","count":65},{"name":"cve2016","count":64},{"name":"alibaba","count":64},{"name":"huntr","count":64},{"name":"vpn","count":63},{"name":"ir","count":63},{"name":"c2","count":61},{"name":"dast","count":59},{"name":"ssh","count":58},{"name":"cve2014","count":55},{"name":"ssti","count":54},{"name":"fortinet","count":54},{"name":"injection","count":54},{"name":"firewall","count":54},{"name":"sap","count":53},{"name":"llm","count":53},{"name":"aem","count":53},{"name":"ibm","count":52},{"name":"misc","count":52},{"name":"plugin","count":52},{"name":"generic","count":50},{"name":"ecommerce","count":50},{"name":"wp-theme","count":49},{"name":"tenable","count":49},{"name":"osint-gaming","count":49},{"name":"xxe","count":49},{"name":"log4j","count":48},{"name":"dns","count":48},{"name":"vulhub","count":47},{"name":"info-leak","count":47},{"name":"jndi","count":46},{"name":"springboot","count":46},{"name":"cnvd","count":46},{"name":"hackerone","count":46},{"name":"postgresql","count":45},{"name":"aliyun","count":45},{"name":"dashboard","count":45},{"name":"kisa","count":44},{"name":"listing","count":44},{"name":"ssl","count":44},{"name":"oa","count":43},{"name":"scada","count":43},{"name":"miscellaneous","count":43},{"name":"osint-porn","count":42},{"name":"tls","count":42},{"name":"k8s-cluster-security","count":42},{"name":"osint-hobby","count":42},{"name":"bank","count":42},{"name":"dlink","count":40},{"name":"jira","count":39},{"name":"gitlab","count":39},{"name":"devsecops","count":39},{"name":"backup","count":39},{"name":"xwiki","count":38},Line truncated
+{"tags":[{"name":"vuln","count":7178},{"name":"cve","count":4605},{"name":"discovery","count":3887},{"name":"vkev","count":2006},{"name":"wordpress","count":1750},{"name":"panel","count":1637},{"name":"wp-plugin","count":1555},{"name":"exposure","count":1513},{"name":"xss","count":1429},{"name":"tech","count":1219},{"name":"osint","count":1131},{"name":"rce","count":1078},{"name":"detect","count":1076},{"name":"misconfig","count":1010},{"name":"wp","count":966},{"name":"lfi","count":898},{"name":"unauth","count":809},{"name":"devops","count":755},{"name":"cloud","count":720},{"name":"intrusive","count":639},{"name":"cve2024","count":628},{"name":"sqli","count":617},{"name":"edb","count":597},{"name":"wpscan","count":596},{"name":"cve2021","count":592},{"name":"authenticated","count":576},{"name":"kev","count":573},{"name":"cve2022","count":571},{"name":"cve2023","count":570},{"name":"login","count":562},{"name":"packetstorm","count":551},{"name":"cve2026","count":482},{"name":"cve2025","count":435},{"name":"network","count":404},{"name":"phishing","count":402},{"name":"file","count":392},{"name":"oast","count":388},{"name":"default-login","count":348},{"name":"auth-bypass","count":337},{"name":"config","count":331},{"name":"cve2020","count":328},{"name":"apache","count":292},{"name":"tcp","count":279},{"name":"microsoft","count":260},{"name":"iot","count":249},{"name":"token-spray","count":247},{"name":"top-200","count":235},{"name":"gcp","count":234},{"name":"osint-social","count":231},{"name":"gcp-cloud-config","count":227},{"name":"token","count":227},{"name":"gcloud","count":226},{"name":"cve2019","count":226},{"name":"","count":219},{"name":"ssrf","count":215},{"name":"malware","count":214},{"name":"azure","count":213},{"name":"cve2018","count":203},{"name":"aws","count":199},{"name":"time-based-sqli","count":199},{"name":"code","count":193},{"name":"csp-bypass","count":192},{"name":"azure-cloud-config","count":191},{"name":"redirect","count":185},{"name":"install","count":183},{"name":"amazon","count":176},{"name":"ai","count":170},{"name":"disclosure","count":168},{"name":"security","count":166},{"name":"joomla","count":164},{"name":"keys","count":159},{"name":"cms","count":156},{"name":"linux","count":155},{"name":"local","count":155},{"name":"aws-cloud-config","count":147},{"name":"router","count":146},{"name":"file-upload","count":139},{"name":"ftp","count":138},{"name":"audit","count":136},{"name":"files","count":136},{"name":"cve2017","count":133},{"name":"kubernetes","count":122},{"name":"js","count":119},{"name":"cve2010","count":116},{"name":"passive","count":113},{"name":"fpd","count":108},{"name":"oss","count":103},{"name":"tokens","count":102},{"name":"top-100","count":100},{"name":"debug","count":99},{"name":"windows-audit","count":95},{"name":"privesc","count":93},{"name":"traversal","count":93},{"name":"oracle","count":92},{"name":"enum","count":91},{"name":"cisco","count":90},{"name":"seclists","count":88},{"name":"windows","count":86},{"name":"takeover","count":84},{"name":"deserialization","count":82},{"name":"fileupload","count":80},{"name":"ics","count":78},{"name":"adobe","count":77},{"name":"k8s","count":77},{"name":"detection","count":73},{"name":"google","count":68},{"name":"vmware","count":68},{"name":"oob","count":67},{"name":"cve2015","count":67},{"name":"php","count":67},{"name":"logs","count":67},{"name":"atlassian","count":66},{"name":"api","count":66},{"name":"huntr","count":64},{"name":"cve2016","count":64},{"name":"vpn","count":64},{"name":"alibaba","count":64},{"name":"ir","count":63},{"name":"c2","count":63},{"name":"dast","count":59},{"name":"ssh","count":59},{"name":"injection","count":55},{"name":"cve2014","count":55},{"name":"ssti","count":54},{"name":"firewall","count":54},{"name":"llm","count":54},{"name":"fortinet","count":54},{"name":"sap","count":53},{"name":"aem","count":53},{"name":"misc","count":52},{"name":"plugin","count":52},{"name":"ibm","count":52},{"name":"generic","count":50},{"name":"ecommerce","count":50},{"name":"tenable","count":49},{"name":"osint-gaming","count":49},{"name":"wp-theme","count":49},{"name":"xxe","count":49},{"name":"dns","count":48},{"name":"log4j","count":48},{"name":"vulhub","count":47},{"name":"info-leak","count":47},{"name":"cnvd","count":46},{"name":"hackerone","count":46},{"name":"jndi","count":46},{"name":"postgresql","count":46},{"name":"springboot","count":46},{"name":"aliyun","count":45},{"name":"ssl","count":45},{"name":"dashboard","count":45},{"name":"kisa","count":44},{"name":"listing","count":44},{"name":"miscellaneous","count":43},{"name":"oa","count":43},{"name":"tls","count":43},{"name":"scada","count":43},{"name":"bank","count":42},{"name":"k8s-cluster-security","count":42},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"woocommerce","count":40},{"name":"jira","count":40},{"name":"dlink","count":40},{"name":"gitlab","count":39},{"name":"devsecops","count":39},{"name":"backup","countLine truncated

TOP-10.md

@@ -1,12 +1,12 @@
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| vuln      |  7174 | dhiyaneshdk   |  2164 | http       | 11655 | info     |  5379 | file |   447 |
-| cve       |  4550 | rxerium       |   959 | cloud      |   663 | high     |  3025 | dns  |    34 |
-| discovery |  3882 | daffainfo     |   950 | file       |   447 | medium   |  2862 |      |       |
-| vkev      |  1969 | princechaddha |   871 | code       |   304 | critical |  1985 |      |       |
-| wordpress |  1728 | dwisiswant0   |   807 | network    |   285 | low      |   519 |      |       |
-| panel     |  1636 | pussycat0x    |   802 | dast       |   251 | unknown  |    59 |      |       |
-| wp-plugin |  1533 | ritikchaddha  |   789 | workflows  |   207 |          |       |      |       |
-| exposure  |  1509 | 0x_akoko      |   478 | javascript |   131 |          |       |      |       |
-| xss       |  1425 | theamanrawat  |   355 | ssl        |    38 |          |       |      |       |
-| tech      |  1215 | pikpikcu      |   353 | dns        |    31 |          |       |      |       |
+| vuln      |  7178 | dhiyaneshdk   |  2175 | http       | 11718 | info     |  5388 | file |   447 |
+| cve       |  4605 | rxerium       |   961 | cloud      |   663 | high     |  3044 | dns  |    34 |
+| discovery |  3887 | daffainfo     |   950 | file       |   447 | medium   |  2869 |      |       |
+| vkev      |  2006 | princechaddha |   872 | code       |   304 | critical |  2017 |      |       |
+| wordpress |  1750 | dwisiswant0   |   807 | network    |   287 | low      |   520 |      |       |
+| panel     |  1637 | pussycat0x    |   802 | dast       |   251 | unknown  |    59 |      |       |
+| wp-plugin |  1555 | ritikchaddha  |   789 | workflows  |   207 |          |       |      |       |
+| exposure  |  1513 | 0x_akoko      |   487 | javascript |   133 |          |       |      |       |
+| xss       |  1429 | theamanrawat  |   355 | ssl        |    39 |          |       |      |       |
+| tech      |  1219 | pikpikcu      |   353 | dns        |    31 |          |       |      |       |

cloud/aws/aws-code-env.yaml

@@ -9,7 +9,7 @@ info:
     - https://aws.amazon.com/cli/
   metadata:
     max-request: 2
-  tags: cloud,devops,aws,amazone,aws-cloud-config
+  tags: cloud,devops,aws,amazon,aws-cloud-config
 
 variables:
   region: "us-east-1"
@@ -52,4 +52,4 @@ code:
       - type: dsl
         dsl:
           - '"AWS CLI is properly configured for account \"" + account + "\" and all the necessary tools required are installed"'
-# digest: 4a0a00473045022052484996550fb7281548c8303d5073f5afe21282edd02f6b44327849754db470022100e00b95fbe7c0069c51b67f29380e776144f64464de6aa670a8bcf248722b0e69:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202d1c1289391a00e7c7e4717dc091d105bb40020c400002f44af89fa67ff431d202200a64b98e6e7320777442ace34db91831c6f055b4ca0cc6ccf7d0a4952075c75b:922c64590222798bb761d5b6d8e72950

code/cves/2016/CVE-2016-8735.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2016-8735
     epss-score: 0.90338
-    epss-percentile: 0.99801
+    epss-percentile: 0.99796
     cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
   metadata:
     shodan-query: product:"tomcat"
@@ -83,4 +83,4 @@ code:
           - 'contains(response,"43726564656e7469616c732073686f756c6420626520537472696e675b5d20696e7374656164206f66206a6176612e7574696c2e486173684d61707572")'
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 4a0a00473045022100ef9428ba79994f345aabece1692855a116a50045df5c0ce3810f2bec82ac76be02207089c9eb785248268c10b87ca18a6b931ba57d2c51c4449cad9e1e685e948c3a:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220615c58e2f5301c05fd387592ae50deac160a000ec4ce6f527e3c63e53c341b7d02203071d241fd149f438615aee0cbc8ead49b213475202449c50cad493f44d15b74:922c64590222798bb761d5b6d8e72950

code/cves/2016/CVE-2016-9299.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2016-9299
     cwe-id: CWE-90
     epss-score: 0.96943
-    epss-percentile: 0.9989
+    epss-percentile: 0.99888
     cpe: cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
   metadata:
     max-request: 1
@@ -126,4 +126,4 @@ code:
           - "contains(response,'hudson.remoting.UserRequest')"
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 4a0a00473045022100ff8dfb1c560f0c2b28bf52bf5c0482cc02682bb5993159d176b9dd58d8da87c702205d78a3948c355b3eb5e7b01037340329c333c0accb4baeabb3bc54490a7fd05b:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220121ede394661642f08d284cffc6110695207502d120cc3ae452aeb611948a0bb0220240708e264c43a29b967444d33bade1534c0a07db12d4db979afca0aa56f28e6:922c64590222798bb761d5b6d8e72950

code/cves/2019/CVE-2019-14287.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2019-14287
     cwe-id: CWE-755
     epss-score: 0.63764
-    epss-percentile: 0.99221
+    epss-percentile: 0.99214
     cpe: cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ code:
           - '!contains(code_1_response, "root")'
           - 'contains(code_2_response, "root")'
         condition: and
-# digest: 490a0046304402207d9ac88d7b0583740f16d2527552a9d6056f73ab7541beae6459b988af95df74022045db10e2528c82c95c5515ca09ac1abf6fa79fec77167919f5905f153d46be34:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b139da030f5998da4ff9fbb8cdaf05964e8ecd0406cf5c83d076f1a057ef8efe022100adaaa3689ed36f8adac2349d15eac57317b91d6867c6fe72e52383ae703d5f61:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-0646.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2020-0646
     cwe-id: CWE-91
     epss-score: 0.99222
-    epss-percentile: 0.99936
+    epss-percentile: 0.99935
     cpe: cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
   metadata:
     verified: true
@@ -106,4 +106,4 @@ code:
           - 'contains(content_type, "text/xml")'
           - 'status_code == 200'
         condition: and
-# digest: 4b0a0048304602210088e7f330f7a4aa1074299139f1332a5e71f7e6d6400a07a92aa71e1fc12f57fa022100c596ad0dd2b83ca4918b69d0ef2506eeeb65b02184631286d4eada3a3bc7cdfa:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206987d50162e5094e8395d966e0c9994bcc274759874a0abfbdbd63eac17971d40221008a5f294f8a7fe9c8119213710c3a31344aaab72da3a5317059d7ef5047e3b591:922c64590222798bb761d5b6d8e72950

code/cves/2020/CVE-2020-13935.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2020-13935
     epss-score: 0.86608
-    epss-percentile: 0.99741
+    epss-percentile: 0.99737
   reference:
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
     - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
@@ -281,4 +281,4 @@ code:
       - type: dsl
         dsl:
           - "contains_all(stderr, 'read tcp', 'i/o timeout') && !contains(stderr, 'websocket: close 1002 (protocol error): An invalid WebSocket frame was received - the most significant bit of a 64-bit payload was illegally set')"
-# digest: 490a0046304402201ead4a7f31296aa8a800e0392068e68cd6c5867318c75edec7e2371a07b7d67c0220347d99eae812b50b478e3222ff514ff26b28cdd42d31e15f2cafb19183b4007a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100aae1337781595b0ef69df3d5155ad911f38ba16a9e490d06f1d3c70df3c420b402200c9a306193ea0f67838e397e458de411a743464fcb99d60e1e48aca53fdc9ce1:922c64590222798bb761d5b6d8e72950

code/cves/2022/CVE-2022-42475.yaml

@@ -287,4 +287,4 @@ code:
       - type: word
         words:
           - "Target appears to be VULNERABLE"
-# digest: 4b0a00483046022100dfbe86bd7a719509a323fded256309d024ad6d8eba05462763d2b01227ac087d022100f55e4f1d37ce92c851240917aceb710ccd24a9317a8333ef212ee8903165e483:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100af126e9a8b6b757375e6185a23419aef0a8b883b7965b2b8e49d75ee05b0e3ac022042cf546c1c7b4ca8593a08084b26b732a22651e379618b6afa1670ab022f08ab:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2640.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-2640
     cwe-id: CWE-863
     epss-score: 0.15199
-    epss-percentile: 0.9675
+    epss-percentile: 0.96728
     cpe: cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ code:
           - '!contains(code_1_response, "(root)")'
           - 'contains(code_2_response, "(root)")'
         condition: and
-# digest: 4a0a00473045022100c7fa785943c715cdb5012e9ed08b7f5a64618aebe9af5133139109d8674fd58a022066f19aa2e4d56f01b7bd1c1ef32d568e7e0421525e7351d10dedb488bdd73ae5:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c708d0e83ed241ad23ddc2be957635f6893880b247aa3970b639b92f6bd231e1022100d37192f6e2f655473008ee01ea777e601a9c69f507ed38bdf09ec600514450c3:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-2986.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2023-2986
     epss-score: 0.42544
-    epss-percentile: 0.98707
+    epss-percentile: 0.98698
     cpe: cpe:2.3:a:tychesoftwares:abandoned_cart_lite_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -630,4 +630,4 @@ http:
       - type: status
         status:
           - 302
-# digest: 4a0a00473045022100f7b2ae8cfb3893a3cfa69f4e301b735fbd0207d655219d0d2839c16d5d722e3d02202b4c865f38340dbe2faa64af6a7c960fbf52485eb846348905c9a4f3d410ca1a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b6e30e9fd117a4fc07c7480cf300fd422e868939493eb5b78e0278b84246d740022100be81aa0c2989471652a65f54d5cb63a0a5c72502944bb990e747593ecd707e4e:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-49105.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-49105
     cwe-id: CWE-287
     epss-score: 0.4319
-    epss-percentile: 0.98724
+    epss-percentile: 0.98716
     cpe: cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -94,4 +94,4 @@ http:
       - type: dsl
         dsl:
           - '"Username => "+ username'
-# digest: 4b0a004830460221008b653c18b929f0f131b5631e41387f39e8ec2c3cc1c7e8866fca97274282fcdb022100f0525abbe3a1a6a2e56de412c2ab8a3fd4f7c8baad386950567fd1d586a4b8f4:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100e12fe9f8de1e1bfaf8d0eea3ee8eac7f16d50150c808ae185913b2088e4bf0c7022100fc40b4769f32315ea84c709730e83310683d0d2ca3c40c488e03f42f3b9c8562:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-4911.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-4911
     cwe-id: CWE-787,CWE-122
     epss-score: 0.63769
-    epss-percentile: 0.99222
+    epss-percentile: 0.99215
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "139"     # Segmentation Fault Exit Code
-# digest: 490a0046304402206487801b3d3ef3e4c6b06df4982c0f2a49faa22e4fa3f8a39922d2895e87786d02201159e53b4a7be00b5230c787b5da5f023e7e04109f455e00b6e74e1e14a3ff1c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100d3fd759ba5a9fb1b9fc2838bd8e4d641f4574be41d6b0b54dc966d6940c38d1e02207bd794d332c5b26797ef28172de675a43a24c14f0de6fb25296c5cf1609dd828:922c64590222798bb761d5b6d8e72950

code/cves/2023/CVE-2023-6246.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2023-6246
     cwe-id: CWE-787,CWE-122
     epss-score: 0.04794
-    epss-percentile: 0.91903
+    epss-percentile: 0.91875
     cpe: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ code:
       - type: word
         words:
           - "127"     # Segmentation Fault Exit Code
-# digest: 4b0a00483046022100ef3c3176975e76a21c43218c782629892bc1d0e0f4ff6808b026a4f6c641886f022100e30ae132196f1cc78353618662e10c7eaf3ed10ffffd0885cdd0ba399ac8ea05:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207e1312cc8513492d949d661ccb329025ca8288d49c7799e225da77a8fc5479f0022100a0680ab9b736cd66a07a77a1ceaeb78922c72503476fb7adc4fdd778a738f0d3:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-10443.yaml

@@ -17,8 +17,8 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2024-10443
     cwe-id: CWE-77
-    epss-score: 0.28006
-    epss-percentile: 0.98105
+    epss-score: 0.28525
+    epss-percentile: 0.98117
     cpe: cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*
   metadata:
     verified: true
@@ -58,4 +58,4 @@ code:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "dns"
-# digest: 490a00463044022078d42981b8f2c1d20562dc89b4fda3232b7148aa7e2bddfcf8578a28e7100ac602200b4b08e0abc204f88b7b06b0caa1a7b3f8a2992b38d8204dcbd3d7d991af985b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201e093c774e6c6df4f35c886cde6126c47dbdb08f59b828beea24461726988de702204578b67fafeb7f377f946b3de7fe791ede72f2a9dae6115128b727464f3803c2:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-12356.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2024-12356
     cwe-id: CWE-77
     epss-score: 0.87258
-    epss-percentile: 0.99753
+    epss-percentile: 0.99749
     cpe: cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*
   metadata:
     vendor: beyondtrust
@@ -41,4 +41,4 @@ code:
         words:
           - "0 success"
           - "1 try again later"
-# digest: 4b0a00483046022100eda2b358af77feb4189ad97c95b404731d5047afbaf6828aa1e53558ac95ae8f0221008e72d16fb349ce31faa8ef1776871ed841d0b26c38e48e5f8143033ed25df268:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022067e15beb8fce23fdd76cee85ee495f8de908ada80455b8020c069d44e67f59df022100d0b8018df822348a191715e5d0c46e8a94d2a668295c33faecf15fdb8a280b73:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-22120.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-22120
     cwe-id: CWE-20
     epss-score: 0.76618
-    epss-percentile: 0.99544
+    epss-percentile: 0.99539
   metadata:
     max-request: 1
     vendor: zabbix
@@ -73,4 +73,4 @@ code:
       - type: word
         words:
           - "Vulnerable to CVE-2024-22120"
-# digest: 490a0046304402200188726aa23c6548da632e03af3adab6e35ae74ae035942b7df0fe644611a6d5022022179ff4bcf328c2ee8b85182e31d3507f21bb7bc29d8b62c86ea8ff6212f341:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402202f286ef7d8437bfa545865f51c399fc8651c59ebaa14f2caeae7bf19a04fcd1e022001a351d50d9db901ebe7162f65d4c2ab1f27d32292df787d18c174f364339b1b:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-3094.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-3094
     cwe-id: CWE-506
     epss-score: 0.909
-    epss-percentile: 0.99809
+    epss-percentile: 0.99804
     cpe: cpe:2.3:a:tukaani:xz:5.6.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4b0a00483046022100cac1a6bb22a4e4d39a2a8eacd49999138916fa9208d1a8eec942a154e24df3c2022100882aa6f8e60a9a61bb8d3208eed312043d0d0217a4381d8ace1bf5506e0d710b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ab686e2c0108b9c0428eeee9c5545a6c9b2d0292319b9250f3784c9121e7bf2f022100846efd5ee90d6d35410b546fc067e48c6374c2316433518419eae7253eebd859:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-4340.yaml

@@ -15,7 +15,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2024-4340
     epss-score: 0.03237
-    epss-percentile: 0.88194
+    epss-percentile: 0.88192
   reference:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-4340
   tags: cve,cve2024,py,code,dos,python,sqlparse,vuln
@@ -33,4 +33,4 @@ code:
         part: stderr
         words:
           - "RecursionError: maximum recursion depth exceeded"
-# digest: 490a00463044022007444faaf6dafc6bf16e808de6e69e688c879ba529f3c04655679345d9e239e802204515c158649db064e69ef2f7e67c6528970429b5f093c40d6732c1443adc982e:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220108bafbb29cd6a01fcf31937302d24c3be1b62395adedf684fd9e1fc99ed678a0220596b555efd8f5652dde8ef760d7727718a2465c670a468f0a82862153421aaf8:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-45409.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2024-45409
     cwe-id: CWE-347
     epss-score: 0.10684
-    epss-percentile: 0.95806
+    epss-percentile: 0.95777
   metadata:
     verified: true
     shodan-query: http.title:"GitLab"
@@ -123,4 +123,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a00473045022009123adbe5713b6b7e3cee380eddcf58f595d5ba7be637ece7ed47144170884a022100e083beacfa91756ea6ef43a9fc5cecce4c764821b91aa0fb6386314d69d0ee2b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100935f3f224d9bacedfd3c7a2729e662f8f9d63237f7ca40405834315e018ce93b02202f368fcaca783d232c78ca301dd372c749d9460d633db4e524495509574e2ddd:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-47575.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-47575
     cwe-id: CWE-306
     epss-score: 0.94766
-    epss-percentile: 0.9986
+    epss-percentile: 0.99858
     cpe: cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
   tags: cve,cve2024,fortinet,fortimanager,kev,rce,vkev,vuln
 
@@ -147,4 +147,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4a0a0047304502210086c275a093141c0af24f7b0cbe7e86476ea2141e396297292700b1b16e292800022034f588a962ede3c3f63e26b12e1912a6fb8c6548667caba9616d46386b43878c:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201150d0cdf8e0c6115fd901df3db1b0cd52d433797b5d413d3997a729e9c5632c02205000e87d91f5691fbfd8d123e3a8b8db1064e68f53753ec71d56390b852f8d1e:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-55556.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2024-55556
     cwe-id: CWE-502
     epss-score: 0.43906
-    epss-percentile: 0.98748
+    epss-percentile: 0.9874
   metadata:
     verified: true
     max-request: 2
@@ -195,4 +195,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a00473045022100fe92df6f1e1a36037ecc96b005f3dbb29c6418026ae220d202c14e4a3abf989d022028f01433db8e94984c83f488d26aa8a48312084fcd21fe93335d4e28ecb5b9dd:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ff85c7adc2a7dc4a2a5d28c2de70fa72e8c33a22bdac525d58af1150d3d494ec022100b4e8150d87cf3892db112ef131cdd2c797269c1e80952a8768edde5e8c4507d5:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-56331.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2024-56331
     cwe-id: CWE-22
     epss-score: 0.01845
-    epss-percentile: 0.78879
+    epss-percentile: 0.78895
   metadata:
     verified: true
     shodan-query: http.title:"Uptime Kuma"
@@ -124,4 +124,4 @@ code:
       - type: word
         words:
           - "/etc/passwd: {'ok': True, 'msg': 'successAdded'"
-# digest: 4b0a004830460221009ff6eb49fcbca6685fc911f4bcbc93a4c0a5bbebc0875d1eae696b9f59f66ef3022100f2e2fd3ae8b918ea7a538f9b9effced2d7b825f1df9b27d91c32afa6da7bd818:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ad277dd418e00656cbf870c2e843d9a551d2d475ffe48e79eeea50279b80637902202af242ec807b81526f1fd7b8e3f73b6cf9ae6fd14cfcdb5ee80561c1497a3776:922c64590222798bb761d5b6d8e72950

code/cves/2024/CVE-2024-9487.yaml

@@ -15,7 +15,7 @@ info:
     - https://github.com/advisories/GHSA-g83h-4727-5rpv
   classification:
     epss-score: 0.25607
-    epss-percentile: 0.97957
+    epss-percentile: 0.97944
   metadata:
     verified: true
     shodan-query: title:"GitHub Enterprise"
@@ -192,4 +192,4 @@ http:
       - type: kval
         kval:
           - user_session
-# digest: 4b0a00483046022100a8797584aaed823e3f149b223429a25e6bdf60c511112900b346062d0ee9198e022100b3b4e61ad93f5f91112bcef9db2d4b3fbe988fa11dde9afbf22465d89cb8cfae:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c0d2b0e37c8394767372f664a932ac82b69070c3d042d99ac7c14943e6b249f9022100fad195cb2f87dd93561e65125738edcb989af13cf92bd329a578de77d0f934ce:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-1550.yaml

@@ -16,7 +16,7 @@ info:
     - https://towerofhanoi.it/writeups/cve-2025-1550/
   classification:
     epss-score: 0.02626
-    epss-percentile: 0.85369
+    epss-percentile: 0.85372
   metadata:
     max-request: 1
   tags: cve,cve2025,code,keras,rce,ml,vuln
@@ -77,4 +77,4 @@ code:
         part: response
         regex:
           - "root:.*:0:0:"
-# digest: 490a00463044022051b19a3a257c1ec31e39a43c417e4ce5150fe839d24d72efab3a3fd8d44172be02205d837db34c71a063a4dc7d2702f4335d7e0c56dbfa6d9bcfd5b9a89fe0ac85ab:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402206b66692f49fdbb3c84ed9644affed947bc9b1c680e0b41aaf4ef04876a5bd67b02205f2015fa7b8cfa06fb8c3727dcf3f47cd25c8200a224fe57d17cce63a1f031cc:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-25291.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2025-25291
     cwe-id: CWE-347
     epss-score: 0.20965
-    epss-percentile: 0.9756
+    epss-percentile: 0.97544
   metadata:
     verified: true
     vendor: gitlab
@@ -80,4 +80,4 @@ http:
       - type: kval
         kval:
           - _gitlab_session
-# digest: 4a0a00473045022017a6ea22ce8c140080181adfd9b4f1a6ee996606ddff0efedf9f70b3ae72089f022100ae98709337fdfa6cb20b00eb4b32df527f35f2b89bab03e48aae12c7f40a88a6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206b08437cb8c10a28079ad7bfa2c7ff6029bab624d03bef5a3259de765f8889c8022100f4c3b129d298a804e1b3f92aeefa6ba44e36910d5f35db6d2381d47201fd3c91:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32433.yaml

@@ -22,8 +22,8 @@ info:
     cvss-score: 10
     cve-id: CVE-2025-32433
     cwe-id: CWE-306
-    epss-score: 0.98786
-    epss-percentile: 0.99926
+    epss-score: 0.98924
+    epss-percentile: 0.99927
   metadata:
     verified: true
     max-request: 1
@@ -174,4 +174,4 @@ code:
         dsl:
           - 'contains(interactsh_protocol, "dns")'
         condition: and
-# digest: 490a00463044022016d15ade8496476922be0df6ffd605dabefe217b38b93adc51eab0ceb41b30d60220350afb4f0b1ae14c5659ed2f09507dfc40681b37d1b159ba049efafe53f7f24a:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f73c5941c82d36fefc97f9070af94ea8949936ed1e457dcc37802f53b6f7f38b02204d6d48f5bbb62eac0d1c08d00b6614ab37771f36c8776548061a05d1e41f99bb:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-32463.yaml

@@ -19,7 +19,7 @@ info:
   classification:
     cve-id: CVE-2025-32463
     epss-score: 0.55498
-    epss-percentile: 0.99036
+    epss-percentile: 0.99029
     cvss-score: 9.3
     cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
     cwe-id: CWE-426
@@ -65,4 +65,4 @@ code:
           - "!contains(tolower(response), 'password')"
           - "!contains(tolower(response), 'a password is required')"
           - "!contains(tolower(response), 'is not in the sudoers file')"
-# digest: 4a0a00473045022100810a39680127631d620907ff2c2873358ce9b1e4a946891f9520e81d7634fe0d0220786ddda55ffce449edbfb8ed4510e3575586c53295b696fa0d2e87c1f0d8c885:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100fbf8996f067da9c86553862995fe6e1c041dabd87f5880c9b288282799d30c0002207af44cb4e5039f1b874632713d3b668e5f7fac271bee2e97058dd31550c2b081:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-54309.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-54309
     epss-score: 0.93473
-    epss-percentile: 0.99841
+    epss-percentile: 0.99838
     cwe-id: CWE-287,CWE-362
     cpe: cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*
   metadata:
@@ -200,4 +200,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 4a0a00473045022100cf3a3ec863e202f99c98bc2fe0aab2db34e29784e94810915ebaa2e1fd838f4102201d538fe4d9382d942154648703d1d7d93f082dfea6cf47b2850d27a85212cb60:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502205f38729af5963de59fd877df72dcfabe98813839c575e7b1a5af64926614f9340221009b484346f6caf90503b2ee7ddc8e57f01686d6275deecc08e1e1dd02af05a5b7:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6216.yaml

@@ -16,7 +16,7 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2025-6216
   classification:
     epss-score: 0.47775
-    epss-percentile: 0.9885
+    epss-percentile: 0.98842
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2025-6216
@@ -115,4 +115,4 @@ code:
       - type: dsl  # type of the extractor
         dsl:
           - '"Reset URL: " + code_response'
-# digest: 490a00463044022077e1204ce820aecd0052bc27fab984993313b231fb9bc4b26f3c91f3c8941c16022028435b1cf0836104f3b18f34567915426931602b8526148c0bc7180c7d1592d6:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100de5f38718dae5b72b045ac3562688667e3f39ca7e611ce9d7849c4bf15fa5e9c022100a07c910018b7183b94f8cf89438105a75cf71788817ee3c1c33ee8c1a46b9c2b:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-68926.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 9.8
     cve-id: CVE-2025-68926
     epss-score: 0.3185
-    epss-percentile: 0.98304
+    epss-percentile: 0.98289
     cwe-id: CWE-798
   metadata:
     verified: true
@@ -87,4 +87,4 @@ code:
         name: version
         regex:
           - "(\\d+\\.\\d+\\.\\d+-alpha\\.\\d+|grpc-auth-bypass)"
-# digest: 4b0a00483046022100a555f8521975cde1ba588f6f5c13e7f1ba76d6e39f1f73469e350e2825be5436022100eb2df8c9cc612dad8ed7a471a4d935f38d4b7115e78a499423f1accd3d694133:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022033d4920e54dbf59374f09d3f428c8487d4b6ffde389524195e785452970819f902202657b942206e411e34f53162b295185ef629bf233e2237f060701b19cc706b2c:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-6984.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 7.5
     cve-id: CVE-2025-6984
     epss-score: 0.01647
-    epss-percentile: 0.76279
+    epss-percentile: 0.76296
     cwe-id: CWE-200
   metadata:
     verified: true
@@ -64,4 +64,4 @@ code:
           - "bin:"
           - "daemon:"
         condition: or
-# digest: 4b0a00483046022100d6e29bae3f099b00d0f889c5736e7c7e22d39e4143675bc29059a29707d711710221009e1b9a62ecd952877309660773fbdb40a3e92a7b6c169a8a83914825de6779c7:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210094e968c56057b475398c378ca693ed58f13fb5a1baf33d7bf0f19d259ce3b72802201e71e115bfc9c9e277f5b2c4bcdd35312610c2410bf7115786b8c735f506e7c8:922c64590222798bb761d5b6d8e72950

code/cves/2025/CVE-2025-9242.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-9242
     cwe-id: CWE-787,CWE-362
     epss-score: 0.91804
-    epss-percentile: 0.99817
+    epss-percentile: 0.99815
     cpe: cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -552,4 +552,4 @@ code:
       - type: dsl
         dsl:
           - response
-# digest: 4b0a004830460221009637c003eb65679a2b126ed39da66d233be48146d6d2bfaf90aa191a4763eaab022100aa4dfa822c892ec6294bd7ee9e913bbf3e842dc8fa47b5fb087042260964ea8e:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a2d4963fb5a2c59df8da429c374cec85cb19e08d54c6b086dc9ce041c8d1d9c202210085dcb6730c86257a3a4a54ad30029bb30a915a97428a6d4d9aaf3e4b663ea8c2:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-10795.yaml

@@ -18,8 +18,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 8.1
     cve-id: CVE-2026-10795
-    epss-score: 0.03635
-    epss-percentile: 0.89499
+    epss-score: 0.04308
+    epss-percentile: 0.91084
     cwe-id: CWE-347
   metadata:
     max-request: 2
@@ -85,4 +85,4 @@ http:
           - 'status_code == 200'
           - 'contains(body, "\"udrpc_message\":\"")'
         condition: and
-# digest: 4b0a00483046022100e074679a81bb3f1f8af78c8cad3f862663c4b34bd0f80f4d742b4efc97aa839e0221008d0915a57c2ebb8a41b137393d0a3e142a361705a40a332972d2c27c9b19668b:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a0048304602210097d999ee547a861535f0450c166b1e5718d48cf3b56bd8330946d40df06ad428022100df7072af5332b13eb3b33b7d357f7a4826dfd8f19f3d08240a9f6d388154cb0f:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-20182.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 10.0
     cve-id: CVE-2026-20182
     epss-score: 0.91817
-    epss-percentile: 0.99818
+    epss-percentile: 0.99815
     cwe-id: CWE-287
     cpe: cpe:2.3:a:cisco:catalyst_sd-wan_controller:*:*:*:*:*:*:*:*
   metadata:
@@ -272,4 +272,4 @@ code:
       - type: word
         words:
           - "VULNERABLE:"
-# digest: 4b0a00483046022100fff144670a04b5400ea11b07ae772b066207e5bac0056096cb0541b615688e96022100eb4b479792151f99674172f70fd649dee7652652059249bcac4184e1ffbca334:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022005f9c65a9e5a02d43ecad3e6ca8d2774297337001b6326a84bac1e9d0a5ca5af02206390d5f4784d32b5069b72e0d6c470325771445265f01fc44003457353318456:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-24061.yaml

@@ -18,7 +18,7 @@ info:
     cve-id: CVE-2026-24061
     cwe-id: CWE-88
     epss-score: 0.98984
-    epss-percentile: 0.99931
+    epss-percentile: 0.99929
   metadata:
     verified: true
     max-request: 1
@@ -49,4 +49,4 @@ code:
           - "Last login"
           - "Debian"
         condition: and
-# digest: 490a0046304402205cf199b80b9b8b539271c4f58015b649a2d6dfb3d8d5790a48807b9b771b061b022043e5558f189b1e9fc6ab3dd7876fa8c3ce4943e5e87e419cabd7468e7aaec4b5:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022065a94097ca7c40bb8bef866c1a6e607a8da23a564d3a75cdadfc656450c05cf10221008d8e4289091ce101df13ad402a376da2a88393b478c7857c13fe194ae343e537:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-31431.yaml

@@ -19,8 +19,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 7.8
     cve-id: CVE-2026-31431
-    epss-score: 0.03437
-    epss-percentile: 0.88901
+    epss-score: 0.98114
+    epss-percentile: 0.99911
     cwe-id: CWE-787
     cpe: cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   metadata:
@@ -139,4 +139,4 @@ code:
         part: response
         regex:
           - 'VULNERABLE:.*'
-# digest: 4b0a0048304602210097c9db58e8335dd8fa21d591b77b05fa0b8a00ac9a10e56d2b89d1ad541d3a6b022100aaae284fbdeb6a594296518b9d1d0937026e8e845516931f508ab58426f5c016:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022051713b8fee9c8af61e7d430677309dbfe206f3b94f712ade50fe676b31b4de0302201bc5a3b9b15d079c56cd4c486fd470f4d2d7050d8218206ac027456019598695:922c64590222798bb761d5b6d8e72950

code/cves/2026/CVE-2026-8467.yaml

@@ -18,8 +18,8 @@ info:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
     cve-id: CVE-2026-8467
-    epss-score: 0.02059
-    epss-percentile: 0.81156
+    epss-score: 0.02111
+    epss-percentile: 0.81669
     cwe-id: CWE-94
   metadata:
     verified: true
@@ -276,4 +276,4 @@ code:
         group: 1
         regex:
           - "Output: (.*)"
-# digest: 4b0a00483046022100c9de10202aa67284a565650332adbec808dcefc08378f052edeecc42fedc4c4b0221009d492f1db6adcd89298874633b8ebaa7eabe2173ffa25fc1ef92179308e99f02:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100cacbd393e0514a9c67de05bb74c98b9c311d2dffd81f0f75e493fa6b0249eabd022100db0806c63c97bd406e6ba1b0827829bee71e7b32e555455216b6587ead5c5a6e:922c64590222798bb761d5b6d8e72950

cves.json

@@ -81,6 +81,7 @@
 {"ID":"CVE-2010-1352","Info":{"Name":"Joomla! Component Juke Box 1.7 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1352.yaml"}
 {"ID":"CVE-2010-1353","Info":{"Name":"Joomla! Component LoginBox - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1353.yaml"}
 {"ID":"CVE-2010-1354","Info":{"Name":"Joomla! Component VJDEO 1.0 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1354.yaml"}
+{"ID":"CVE-2010-1428","Info":{"Name":"Red Hat JBoss - Web/JMX Console Access","Severity":"high","Description":"Red Hat JBoss Enterprise Application Platform (EAP) can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2010/CVE-2010-1428.yaml"}
 {"ID":"CVE-2010-1429","Info":{"Name":"Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure","Severity":"medium","Description":"Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about \"deployed web contexts\" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.\n","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1429.yaml"}
 {"ID":"CVE-2010-1461","Info":{"Name":"Joomla! Component Photo Battle 1.0.1 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php.","Classification":{"CVSSScore":"5"}},"file_path":"http/cves/2010/CVE-2010-1461.yaml"}
 {"ID":"CVE-2010-1469","Info":{"Name":"Joomla! Component JProject Manager 1.0 - Local File Inclusion","Severity":"medium","Description":"A directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.","Classification":{"CVSSScore":"6.8"}},"file_path":"http/cves/2010/CVE-2010-1469.yaml"}
@@ -3402,6 +3403,7 @@
 {"ID":"CVE-2024-56325","Info":{"Name":"Apache Pinot \u003c 1.3.0 - Authentication Bypass","Severity":"critical","Description":"This vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot. Authentication is not required to exploit this vulnerability.The specific flaw exists within the AuthenticationFilter class. The issue results from insufficient neutralization of special characters in a URI. An attacker can leverage this vulnerability to bypass authentication on the system.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-56325.yaml"}
 {"ID":"CVE-2024-56511","Info":{"Name":"DataEase \u003c 2.10.4 - Authentication Bypass via Whitelist Path Traversal","Severity":"critical","Description":"DataEase versions up to and including 2.10.3 contain an authentication bypass in `io.dataease.auth.filter.TokenFilter`. The filter passes the raw, unnormalized request URI to `WhitelistUtils.match()`, which only checks for whitelisted prefixes such as `/geo/`, `/customGeo/`, `/map/`, `/oauth2/`, and `/websocket` without resolving `..` segments. By prepending a whitelisted prefix and traversing back into the configured `server.servlet.context-path`, an attacker bypasses the filter while Tomcat still routes the request to the genuine, protected controller. This collapses the entire `/de2api` surface (user management, datasources, dashboards, exports) into unauthenticated access.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-56511.yaml"}
 {"ID":"CVE-2024-56512","Info":{"Name":"Apache NiFi - Information Disclosure","Severity":"medium","Description":"Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases where the Process Group did not reference any Parameter values, the framework did not check user authorization for the bound Parameter Context. Missing authorization for a bound Parameter Context enabled clients to download non-sensitive Parameter values after creating the Process Group.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2024/CVE-2024-56512.yaml"}
+{"ID":"CVE-2024-56829","Info":{"Name":"Huang Yaoshi Pharmaceutical Management Software - Unrestricted File Upload","Severity":"critical","Description":"Huang Yaoshi Pharmaceutical Management Software up to 16.0 contains an unrestricted file upload caused by accepting .asp filenames in the UploadFile element of a SOAP request to /XSDService.asmx, letting attackers upload arbitrary files, exploit requires sending a crafted SOAP request.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2024/CVE-2024-56829.yaml"}
 {"ID":"CVE-2024-57045","Info":{"Name":"D-Link DIR-859 - Information Disclosure","Severity":"critical","Description":"A critical information disclosure vulnerability exists in D-Link devices where sensitive device account information including credentials can be retrieved by sending an unauthenticated request to `/getcfg.php` endpoint with the parameter `SERVICES=DEVICE.ACCOUNT`. This could allow attackers to obtain administrative credentials and gain full control of the affected device.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-57045.yaml"}
 {"ID":"CVE-2024-57046","Info":{"Name":"Netgear DGN2200 - Improper Authentication","Severity":"high","Description":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the requested url, it will be recognized as passing the authentication.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2024/CVE-2024-57046.yaml"}
 {"ID":"CVE-2024-57049","Info":{"Name":"TP-Link Archer C20 - Authentication Bypass","Severity":"critical","Description":"A vulnerability in the TP-Link Archer C20 router with firmware version V6.6_230412 and earlier permits unauthorized individuals to bypass authentication on interfaces under the /cgi directory. When adding a Referer header with value \"http://tplinkwifi.net\" to requests, the router will recognize the request as passing authentication, allowing access to protected administration interfaces.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2024/CVE-2024-57049.yaml"}
@@ -3861,7 +3863,7 @@
 {"ID":"CVE-2025-58226","Info":{"Name":"WordPress 3D FlipBook Plugin \u003c= 1.16.17 - Sensitive Information Exposure","Severity":"medium","Description":"The 3D FlipBook WordPress plugin (≤ v1.16.17) has a vulnerability where an unauthenticated AJAX action (fb3d_send_posts) exposes sensitive data. Attackers can access all flipbook posts—including password-protected content, metadata, PDF URLs, and plugin settings—without authorization.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-58226.yaml"}
 {"ID":"CVE-2025-58360","Info":{"Name":"GeoServer - XML External Entity Injection","Severity":"high","Description":"GeoServer 2.26.0 to 2.26.2 and 2.25.6 contains an XML External Entity (XXE) injection caused by insufficient sanitization of XML input in /geoserver/wms GetMap operation, letting attackers disclose files or cause DoS, exploit requires crafted XML input.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2025/CVE-2025-58360.yaml"}
 {"ID":"CVE-2025-58434","Info":{"Name":"Flowise \u003c= 3.0.5 - Account Takeover","Severity":"critical","Description":"Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2025/CVE-2025-58434.yaml"}
-{"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c= 1.5.10.1673 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
+{"ID":"CVE-2025-58443","Info":{"Name":"FOGProject \u003c 1.5.10.1693 - Authentication Bypass","Severity":"critical","Description":"FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.\n","Classification":{"CVSSScore":"9.1"}},"file_path":"http/cves/2025/CVE-2025-58443.yaml"}
 {"ID":"CVE-2025-58751","Info":{"Name":"Vite Dev Server - Path Traversal","Severity":"low","Description":"Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2025/CVE-2025-58751.yaml"}
 {"ID":"CVE-2025-59049","Info":{"Name":"Mockoon \u003c 9.2.0 - Path Traversal","Severity":"high","Description":"Mockoon before 9.2.0 contains a path traversal and local file inclusion caused by unsafe templating of server filenames from user input, letting attackers read arbitrary files on the mock server filesystem, exploit requires crafted request.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2025/CVE-2025-59049.yaml"}
 {"ID":"CVE-2025-59136","Info":{"Name":"WordPress Gerencianet Oficial \u003c= 3.1.3 - Unauthenticated Order Status Disclosure","Severity":"medium","Description":"Efí Bank Gerencianet Oficial \u003c= 3.1.3 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve embedded sensitive data, exploit requires crafted requests.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2025/CVE-2025-59136.yaml"}
@@ -3953,10 +3955,13 @@
 {"ID":"CVE-2026-0770","Info":{"Name":"Langflow \u003c 1.3.0 - Remote Code Execution via validate_code() exec()","Severity":"critical","Description":"Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the exec_globals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-0770.yaml"}
 {"ID":"CVE-2026-0829","Info":{"Name":"Frontend File Manager Plugin \u003c= 23.5 - Unauthenticated Arbitrary Email Sending","Severity":"high","Description":"Frontend File Manager Plugin WordPress plugin through 23.5 contains an open relay and unauthorized file access vulnerability caused by lack of authentication and security checks, letting unauthenticated attackers send emails and access files, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-0829.yaml"}
 {"ID":"CVE-2026-0926","Info":{"Name":"Prodigy Commerce \u003c= 3.3.0 - Local File Inclusion","Severity":"critical","Description":"Prodigy Commerce WordPress plugin \u003c= 3.2.9 contains a local file inclusion caused by improper sanitization of 'parameters[template_name]' parameter, letting unauthenticated attackers include and execute arbitrary files remotely.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-0926.yaml"}
+{"ID":"CVE-2026-102782","Info":{"Name":"OrdaSoft Simple Membership \u003c 7.4.0 - SQL Injection","Severity":"critical","Description":"OrdaSoft Simple Membership (com_simplemembership) for Joomla before 7.4.0 is vulnerable to unauthenticated SQL injection via the 'login' parameter of the checkLoginPass task (site/simplemembership.php). The handler passes the value through Joomla's generic input filter, which strips HTML but leaves quotes and SQL syntax intact, and concatenates it directly into the SQL query with no escaping or parameter binding. Error-based injection via extractvalue() lets unauthenticated attackers exfiltrate database contents.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-102782.yaml"}
+{"ID":"CVE-2026-102878","Info":{"Name":"mcp-chrome-bridge (hangwin/mcp-chrome) \u003c= 1.0.31 - CORS Origin Bypass (CSWSH)","Severity":"high","Description":"mcp-chrome-bridge \u003c=1.0.31 uses origin.startsWith for CORS, so origins like http://127.0.0.1.evil.com are wrongly allowed, letting attackers bypass CORS and access the local server.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-102878.yaml"}
 {"ID":"CVE-2026-103956","Info":{"Name":"Loom for AWS \u003c 1.6.1 - Unauthenticated Super-Admin Access","Severity":"critical","Description":"Loom for AWS \u003c 1.6.1 contains a broken authentication caused by missing authentication for critical functions in the authentication dependency, letting remote actors obtain super-admin authority over the agent control plane, exploit requires no identity provider configured.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-103956.yaml"}
 {"ID":"CVE-2026-104935","Info":{"Name":"Ivanti Connect Secure \u003c= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header","Severity":"critical","Description":"Ivanti Connect Secure VPN appliances contain an authentication bypass vulnerability in how the appliance routes requests from front- and back-end processes to CGI script handlers. The URL path is used to determine whether a request is allowed (welcome.cgi is public), while the X-DSCGI-PATH header determines the actual destination of the request. An attacker can send a request to the unauthenticated welcome.cgi endpoint with an X-DSCGI-PATH header pointing to an authenticated CGI script such as wu.cgi, bypassing authentication entirely. This vulnerability is chained with a file write race condition in wu.cgi and a privilege escalation via dsinvoked DSCache trust to achieve unauthenticated root-level remote code execution.\n","Classification":{"CVSSScore":"10.0"}},"file_path":"http/cves/2026/CVE-2026-104935.yaml"}
 {"ID":"CVE-2026-105133","Info":{"Name":"AhsayCBS - JSON API Authentication Bypass","Severity":"medium","Description":"Ahsay AhsayCBS \u003c= 10.3.2 contains an authentication bypass caused by manipulation of the \"random\" argument in checkSysPwd function of API component, letting remote attackers bypass authentication, exploit requires crafted argument manipulation.\n","Classification":{"CVSSScore":"7.3"}},"file_path":"http/cves/2026/CVE-2026-105133.yaml"}
 {"ID":"CVE-2026-10520","Info":{"Name":"Ivanti Sentry - OS Command Injection","Severity":"critical","Description":"An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-10520.yaml"}
+{"ID":"CVE-2026-10525","Info":{"Name":"NEX-Forms Express WP Form Builder \u003c 9.2.3 - Unauthenticated Stored XSS","Severity":"high","Description":"NEX-Forms Express WP Form Builder plugin for WordPress before 9.2.3 is vulnerable to unauthenticated stored Cross-Site Scripting. The plugin registers a wp_ajax_nopriv_submit_nex_form handler for form submissions. Array-type field values are processed through rest_sanitize_array(), which only reindexes the array and performs no HTML sanitization, so markup is stored verbatim. When an administrator views the submitted entries, the stored payload renders without esc_html() escaping and executes arbitrary JavaScript in the admin's browser. Scalar fields are not affected (they are passed through strip_tags()).\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-10525.yaml"}
 {"ID":"CVE-2026-10580","Info":{"Name":"Hippoo Mobile App for WooCommerce \u003c= 1.9.4 - Authentication Bypass to Admin Account Takeover","Severity":"critical","Description":"Hippoo Mobile App for WooCommerce WordPress plugin \u003c= 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-10580.yaml"}
 {"ID":"CVE-2026-10768","Info":{"Name":"Drupal LocalGov Workflows \u003c 1.6.0 - Information Disclosure","Severity":"high","Description":"Drupal LocalGov Workflows \u003c 1.6.0 contains a broken access control vulnerability caused by missing authorization checks, letting attackers perform forceful browsing to access unauthorized resources, exploit requires no special privileges.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-10768.yaml"}
 {"ID":"CVE-2026-10818","Info":{"Name":"WPForms Pro \u003c= 1.10.1.1 - Unauthenticated Arbitrary File Upload","Severity":"high","Description":"WPForms Pro for WordPress up to and including 1.10.1.1 allows unauthenticated arbitrary file upload. The wpforms_upload_chunk_init, wpforms_upload_chunk and wpforms_file_chunks_uploaded AJAX actions are registered for unauthenticated visitors without a nonce check, and raw chunk bytes are written under wp-content/uploads/wpforms/tmp/ before file extension and MIME type validation happens, so a rejected upload never removes the already written file. An unauthenticated attacker can plant arbitrary files and, depending on server configuration, achieve remote code execution.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-10818.yaml"}
@@ -3966,6 +3971,9 @@
 {"ID":"CVE-2026-110372","Info":{"Name":"WordPress OttoKit Plugin \u003c= 1.1.40 - Unauthenticated Privilege Escalation via connection-denied Token","Severity":"critical","Description":"OttoKit (formerly SureTriggers) WordPress plugin \u003c= 1.1.40 unauthenticated privilege escalation. When an admin denies the OttoKit SaaS connection, the plugin stores the fixed public string 'connection-denied' as the site API secret. The RestController::autheticate_user permission callback reads the 'st_authorization' request header, strips a 'Bearer ' prefix via sscanf($token,'Bearer %s'), then hash_equals() it against the stored secret. An attacker who sends 'st-authorization: Bearer connection-denied' is authenticated to the automation REST API and can create administrator accounts. Fixed in 1.1.41.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-110372.yaml"}
 {"ID":"CVE-2026-1115","Info":{"Name":"parisneo/lollms \u003c 2.2.0 - Authenticated Stored XSS","Severity":"high","Description":"parisneo/lollms \u003c 2.2.0 contains a stored XSS caused by unsanitized user input in create_post function in backend/routers/social/__init__.py, letting attackers inject malicious scripts executed in user browsers, exploit requires crafted post submission.\n","Classification":{"CVSSScore":"9.0"}},"file_path":"http/cves/2026/CVE-2026-1115.yaml"}
 {"ID":"CVE-2026-11387","Info":{"Name":"SMS Alert – SMS \u0026 OTP for WooCommerce - Privilege Escalation","Severity":"critical","Description":"The SMS Alert – SMS \u0026 OTP for WooCommerce, Order Notifications \u0026 Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updating their details like reset the password of any user account, including administrators, and gain full access to those accounts. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. This is only vulnerable on sites with OTP verification for password resets enabled, and where the administrator (or other user) has set a phone number for OTP verification.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-11387.yaml"}
+{"ID":"CVE-2026-11565","Info":{"Name":"WordPress Advanced File Manager \u003c 5.4.13 - Arbitrary File Read","Severity":"high","Description":"The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access (as low as Subscriber) to read arbitrary files on the server.\n","Classification":{"CVSSScore":"8.5"}},"file_path":"http/cves/2026/CVE-2026-11565.yaml"}
+{"ID":"CVE-2026-116006","Info":{"Name":"Ruoyi-Vue-Pro - Unauthenticated Admin Takeover via Predictable SMS Code","Severity":"critical","Description":"ruoyi-vue-pro (Yudao) ships base configuration yudao.sms-code.begin-code=end-code=9999, so every generated SMS verification code is the constant \"9999\" in all profiles. The anonymous SMS-login flow therefore grants an access token to any account whose mobile number is known: send-sms-code followed by sms-login with code 9999 issues a full token, including for the seeded super administrator account (mobile 18818260272 in the shipped SQL). No CAPTCHA hook exists for scene=21 in any profile.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-116006.yaml"}
+{"ID":"CVE-2026-116067","Info":{"Name":"Paisa \u003c 0.7.8 - Unauthenticated Path Traversal","Severity":"high","Description":"Paisa \u003c 0.7.8 contains a path traversal vulnerability caused by improper sanitization of file names in GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers, letting unauthenticated attackers read arbitrary files and delete backups via ../ sequences.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-116067.yaml"}
 {"ID":"CVE-2026-11801","Info":{"Name":"WPAdverts \u003c= 2.3.2 - Information Disclosure","Severity":"high","Description":"WPAdverts – Classifieds Plugin for WordPress \u003c= 2.3.2 contains an authorization bypass caused by improper user authorization verification in classifieds-types REST endpoint, letting unauthenticated attackers retrieve internal site configuration data, exploit requires no authentication.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-11801.yaml"}
 {"ID":"CVE-2026-1207","Info":{"Name":"Django RasterField - SQL Injection","Severity":"high","Description":"Django \u003c 6.0.2, \u003c 5.2.11, and \u003c 4.2.28 contains a SQL injection caused by improper sanitization of the band index parameter in RasterField on PostGIS, letting remote attackers inject SQL, exploit requires crafted input.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-1207.yaml"}
 {"ID":"CVE-2026-12227","Info":{"Name":"Visual Composer \u003c= 45.16.0 - Unauthenticated LFI","Severity":"critical","Description":"Visual Composer Website Builder for WordPress \u003c= 45.16.0 contains a local file inclusion vulnerability caused by improper validation of the vcv-template parameter, letting unauthenticated attackers include and execute arbitrary files, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-12227.yaml"}
@@ -3999,10 +4007,14 @@
 {"ID":"CVE-2026-15826","Info":{"Name":"User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass","Severity":"critical","Description":"The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wp_insert_user() through absint() before testing it with is_wp_error(), so the error check runs against the already-coerced integer. A registration submitted with a 61-70 character username passes the plugin's own validation but is rejected by WordPress core, because the user_login column is VARCHAR(60), and wp_insert_user() returns a WP_Error object. absint() coerces that object to the integer 1, is_wp_error(1) is false, and the plugin binds a transient-backed autologin nonce to user ID 1. Consuming that nonce calls wp_set_auth_cookie(1) and logs the unauthenticated attacker in as the site's Administrator.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-15826.yaml"}
 {"ID":"CVE-2026-1603","Info":{"Name":"Ivanti Endpoint Manager - Authentication Bypass","Severity":"high","Description":"Ivanti Endpoint Manager \u003c 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges.\n","Classification":{"CVSSScore":"8.6"}},"file_path":"http/cves/2026/CVE-2026-1603.yaml"}
 {"ID":"CVE-2026-16268","Info":{"Name":"Newsletters \u003c 4.16 - Unauthenticated SSRF via SNS Bounce Handler","Severity":"medium","Description":"Newsletters WordPress plugin \u003c 4.16 contains a server-side request forgery caused by lack of authentication and validation in bounce-processing requests, letting unauthenticated attackers make arbitrary requests to internal or external hosts.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-16268.yaml"}
+{"ID":"CVE-2026-16535","Info":{"Name":"WordPress Link Library \u003c 7.9.4 - Cross-Site Scripting","Severity":"medium","Description":"Link Library WordPress plugin \u003c 7.9.4 contains a reflected XSS caused by unsanitised and unescaped parameter reflected in response, letting unauthenticated attackers execute scripts via user interaction.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-16535.yaml"}
+{"ID":"CVE-2026-16959","Info":{"Name":"WordPress Media Library Assistant \u003c 3.40 - SQL Injection","Severity":"medium","Description":"The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role and above to perform SQL injection.\n","Classification":{"CVSSScore":"6.8"}},"file_path":"http/cves/2026/CVE-2026-16959.yaml"}
 {"ID":"CVE-2026-17505","Info":{"Name":"WordPress TranslatePress \u003c 3.2.6 - Cross-Site Scripting","Severity":"medium","Description":"TranslatePress plugin \u003c 3.2.6 for WordPress contains a reflected cross-site scripting vulnerability in the translation marker processing feature, letting attackers inject and execute arbitrary JavaScript code, exploit requires no authentication or privileges.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-17505.yaml"}
 {"ID":"CVE-2026-17532","Info":{"Name":"Seraphinite Accelerator \u003c= 2.29.18 - Cross-Site Scripting","Severity":"medium","Description":"The Seraphinite Accelerator plugin for WordPress up to and including 2.29.18 was vulnerable to reflected cross-site scripting through the seraph_accel_prep parameter. CacheExtractPreparePageParams() compared the expected HMAC against the JSON-decoded nonce with PHP's loose != operator, so a JSON boolean true satisfied the comparison and bypassed the signature check, and _CbContentFinishSkip() then concatenated the attacker-controlled selfTest field straight into the response body, letting unauthenticated attackers inject arbitrary scripts.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-17532.yaml"}
+{"ID":"CVE-2026-17540","Info":{"Name":"WordPress Bit File Manager \u003c 6.9.1 - Arbitrary File Read","Severity":"high","Description":"The Bit File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-17540.yaml"}
 {"ID":"CVE-2026-17594","Info":{"Name":"Sonatype Nexus Repository \u003c 3.95.0 - Privilege Escalation via Repository Format Mismatch","Severity":"high","Description":"Nexus Repository 3 CE/Pro 3.0.0 through 3.94.x contains an incorrect authorization vulnerability caused by inconsistent authorization checks in the repository-creation UI, letting delegated repository-admin users create unauthorized repository formats, exploit requires delegated repository-admin privilege.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2026/CVE-2026-17594.yaml"}
 {"ID":"CVE-2026-18072","Info":{"Name":"Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass","Severity":"critical","Description":"The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the `_wplogin` parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This template only inspects the redirect and session-cookie response and does not perform any administrative action.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-18072.yaml"}
+{"ID":"CVE-2026-18110","Info":{"Name":"Concrete CMS - User Enumeration","Severity":"high","Description":"Concrete CMS versions 9.0.0 through 9.5.2 are vulnerable to unauthenticated user enumeration via a missing authorization check in the \"Preview As User\" panel (concrete/controllers/panel/page/preview_as_user.php).\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-18110.yaml"}
 {"ID":"CVE-2026-18143","Info":{"Name":"Request Quote for WooCommerce \u003c= 2.9.2 - Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"Request a Quote for WooCommerce plugin for WordPress \u003c= 2.9.2 contains an unrestricted file upload vulnerability caused by missing file extension and MIME type validation in afrfq_submit_quote_via_popup(), letting unauthenticated attackers upload executable files, exploit requires enabled public quote rule with multi-page popup flow.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-18143.yaml"}
 {"ID":"CVE-2026-1830","Info":{"Name":"Quick Playground \u003c= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload","Severity":"critical","Description":"The Quick Playground plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.3.1.\nThe plugin exposes a blueprint REST API endpoint (permission_callback: __return_true) that leaks the sync code, and an upload_image endpoint that accepts file uploads with path traversal in the filename parameter without sufficient authorization checks, which can be chained into arbitrary PHP file upload and RCE.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-1830.yaml"}
 {"ID":"CVE-2026-18315","Info":{"Name":"TrueBooker \u003c= 1.2.6 - Unauthenticated Authorization Bypass","Severity":"critical","Description":"TrueBooker – Appointment Booking and Scheduler System WordPress plugin \u003c= 1.2.6 contains an authorization bypass through user-controlled key caused by lack of authentication in admin_user_create_cus AJAX handler, letting unauthenticated attackers take over any user account by overwriting email and using lost-password flow, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-18315.yaml"}
@@ -4284,6 +4296,7 @@
 {"ID":"CVE-2026-55552","Info":{"Name":"Yamcs \u003c=5.11.12 - Arbitrary File Read","Severity":"high","Description":"Yamcs through 5.11.12 serves static web resources through a handler that resolves the requested path against the configured web root without rejecting absolute paths. A request path that begins with a double slash is resolved as an absolute filesystem path, discarding the web root, and the handler returns the referenced file from the underlying host, letting unauthenticated attackers read any non-hidden file readable by the Yamcs service account whose path contains no dot segment.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-55552.yaml"}
 {"ID":"CVE-2026-55592","Info":{"Name":"Dashy \u003c= 4.3.6 - Reflected XSS via Workspace","Severity":"medium","Description":"Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the context of the Dashy origin.\n","Classification":{"CVSSScore":"6.1"}},"file_path":"http/cves/2026/CVE-2026-55592.yaml"}
 {"ID":"CVE-2026-5562","Info":{"Name":"Provectus kafka-ui \u003c=0.7.2 - Remote Code Execution","Severity":"critical","Description":"Provectus kafka-ui versions 0.7.0 through 0.7.2 are vulnerable to code injection in the `/api/smartfilters/testexecutions` endpoint. The `filterCode` parameter is evaluated as a Groovy expression without sandboxing, allowing an unauthenticated attacker to execute arbitrary code and operating-system commands on the host.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-5562.yaml"}
+{"ID":"CVE-2026-56062","Info":{"Name":"Quotes llama \u003c= 3.1.5 - SQL Injection","Severity":"critical","Description":"Quotes llama 3.1.5 and earlier contains a time-based blind SQL injection vulnerability caused by improper control of a SQL identifier. The select_search() AJAX handler (registered for guests via wp_ajax_nopriv_select_search) reads the attacker-controlled 'sc' parameter from $_POST and substitutes it into the query through the malformed wpdb placeholder '%1s'.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-56062.yaml"}
 {"ID":"CVE-2026-56070","Info":{"Name":"Advance Product Search \u003c= 1.4.4 - Unauthenticated Time-Based Blind SQL Injection","Severity":"critical","Description":"Advance Product Search 1.4.4 and earlier is vulnerable to unauthenticated time-based blind SQL injection. The plugin rebuilds the WordPress search SQL by hand and uses $wpdb-\u003eesc_like() which escapes LIKE wildcards but not single quotes, allowing injection through the ?s= parameter.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-56070.yaml"}
 {"ID":"CVE-2026-5615","Info":{"Name":"VvvebJs \u003c= 2.0.5 - Cross-Site Scripting","Severity":"medium","Description":"Givanz Vvvebjs \u003c= 2.0.5 contains a stored XSS caused by manipulation of the \"uploadAllowExtensions\" argument in upload.php File Upload Endpoint, letting remote attackers execute scripts, exploit requires crafted input.\n","Classification":{"CVSSScore":"4.3"}},"file_path":"http/cves/2026/CVE-2026-5615.yaml"}
 {"ID":"CVE-2026-56265","Info":{"Name":"Crawl4AI \u003c 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass","Severity":"critical","Description":"Crawl4AI Docker API server versions before 0.8.7 ship with a hardcoded default JWT signing key (\"mysecret\") used to sign and verify HS256 authentication tokens. Because the key is identical across every deployment where SECRET_KEY has not been overridden, an unauthenticated attacker can forge a valid Bearer token and use it to access every JWT-protected API endpoint (/md, /html, /screenshot, /pdf, /execute_js, /crawl, /ask).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-56265.yaml"}
@@ -4305,6 +4318,7 @@
 {"ID":"CVE-2026-58644","Info":{"Name":"Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE","Severity":"critical","Description":"Microsoft SharePoint Server (2016, 2019, Subscription Edition \u003c= 2026.3.1) contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint (/_trust/default.aspx). The SharePoint authentication module (SPFederationAuthenticationModuleV2) uses a deflate-only DeflateCookieTransform (no MAC/signature check) to decode and BinaryFormatter to deserialize the SecurityContextToken Cookie value in the wresult parameter without type restrictions. An unauthenticated attacker can send a crafted WS-Federation token containing a BinaryFormatter gadget chain (DataSet + LosFormatter + XamlAssemblyLoadFromFile) to execute arbitrary code in the context of the IIS application pool identity (w3wp.exe). The fix (KB5002882, July 2026 CU) replaces the DeflateCookieTransform with\nNotSupportedCookieTransform, making ReadToken() throw before deserialization.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-58644.yaml"}
 {"ID":"CVE-2026-59177","Info":{"Name":"ESPHome Device Builder \u003c1.0.10 - Unauthenticated Dashboard Access","Severity":"high","Description":"ESPHome Device Builder versions before 1.0.10 bind the trusted Home Assistant ingress site to all interfaces. A client that can reach the ingress port can therefore access the dashboard without the Supervisor's authentication proxy.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-59177.yaml"}
 {"ID":"CVE-2026-59509","Info":{"Name":"cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection","Severity":"critical","Description":"cve-search versions 4.0 through 6.0.0 expose an unauthenticated DataTables endpoint that accepts attacker-controlled MongoDB collection, projection, filtering, and pagination parameters. This detector uses a harmless invalid projection field against the intended cves collection; version 6.0.1 rejects that field.\n","Classification":{"CVSSScore":"9.2"}},"file_path":"http/cves/2026/CVE-2026-59509.yaml"}
+{"ID":"CVE-2026-59707","Info":{"Name":"LocalAI \u003c 4.6.0 - Server-Side Request Forgery","Severity":"critical","Description":"LocalAI before 4.6.0 is affected by an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint. The gallery `url` field is passed to the gallery config fetcher without validation, allowing an unauthenticated attacker to make the server issue HTTP requests to arbitrary internal, loopback, link-local, and cloud-metadata addresses. The outcome of the server-side fetch is reflected in the model-apply job status.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-59707.yaml"}
 {"ID":"CVE-2026-59726","Info":{"Name":"ruflo MCP Bridge - Unauthenticated RCE via terminal_execute","Severity":"critical","Description":"ruflo MCP bridge (\u003c 3.16.3) in its default docker-compose deployment exposes POST /mcp with no authentication and binds to all interfaces (0.0.0.0:3001). The executeTool() function has no server-side deny list for dangerous tools, allowing an unauthenticated attacker to invoke tools/call with ruflo__terminal_execute, which runs execSync(command) on attacker-supplied input. This yields arbitrary command execution as the node user (uid 1000) inside the bridge container. The blocklist (AUTOPILOT_BLOCKED_PATTERNS + isBlockedTool()) is enforced only in the autopilot SSE handler; POST /mcp and POST /mcp/:group bypass it entirely.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-59726.yaml"}
 {"ID":"CVE-2026-59774","Info":{"Name":"Gitea 1.22.1-1.27.0 - Unauthenticated Arbitrary File Read","Severity":"critical","Description":"Gitea versions 1.22.1 through 1.27.0 initialize the go-org markup renderer without replacing its default ReadFile callback. An unauthenticated attacker can submit Org-mode markup containing an #+INCLUDE directive with an absolute path to the repository markup endpoint of any public repository, causing the server to read and render arbitrary files accessible to the Gitea service user.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-59774.yaml"}
 {"ID":"CVE-2026-59801","Info":{"Name":"9Router - Unauthenticated LLM Provider API Exposure","Severity":"critical","Description":"9Router through version 0.4.41 contains an unauthenticated access vulnerability caused by missing authentication middleware in Next.js API routes under src/app/api/providers/*, letting remote attackers enumerate, create, modify, or delete provider connections, exploit requires no authentication.\n","Classification":{"CVSSScore":"N/A"}},"file_path":"http/cves/2026/CVE-2026-59801.yaml"}
@@ -4365,6 +4379,7 @@
 {"ID":"CVE-2026-8236","Info":{"Name":"Concrete CMS \u003c9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure","Severity":"medium","Description":"Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/{fID} accepts an integer file ID in the URL and returns internal site structure data (page IDs, versions, URL paths) to anyone who sends a GET request.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8236.yaml"}
 {"ID":"CVE-2026-8237","Info":{"Name":"Concrete CMS \u003c= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)","Severity":"medium","Description":"Concrete CMS \u003c= 9.5.0 contains an IDOR caused by insufficient access control in /ccm/frontend/conversations/message_detail endpoint, letting unauthenticated attackers enumerate conversation messages and attachments.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8237.yaml"}
 {"ID":"CVE-2026-82456","Info":{"Name":"argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access","Severity":"critical","Description":"argocd-mcp before 0.9.0 binds its MCP HTTP listener to all interfaces without requiring authentication. A remote unauthenticated attacker can initialize an MCP session, complete the handshake, and enumerate or invoke the full Argo CD tool surface using the operator's stored API token.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-82456.yaml"}
+{"ID":"CVE-2026-82901","Info":{"Name":"Ultimate Addons for Contact Form 7 \u003c= 3.5.50 - Arbitrary File Upload","Severity":"high","Description":"Ultimate Addons for Contact Form 7 (UACF7) \u003c= 3.5.50 copies every file submitted through a Contact Form 7 [uacf7_signature] field into wp-content/uploads/uacf7-uploads/ with no file-type or extension validation when the PDF Generator module is enabled on the form. An unauthenticated attacker can POST to the public CF7 REST feedback endpoint and write an arbitrary file of any extension into the webroot (CWE-434). The written file is directly retrievable without authentication. The copy sink is addons/pdf-generator/pdf-generator.php, which stores the file as \"{time()}-{field_name}-{sanitize_file_name(basename)}\". Fixed in 3.5.51, which adds uacf7_is_safe_uploaded_file() with a MIME/extension allowlist.\n","Classification":{"CVSSScore":"8.1"}},"file_path":"http/cves/2026/CVE-2026-82901.yaml"}
 {"ID":"CVE-2026-8383","Info":{"Name":"LearnPress \u003c 4.3.7 - Information Disclosure","Severity":"medium","Description":"LearnPress WordPress plugin \u003c 4.3.7 contains an information disclosure vulnerability caused by missing capability checks on a REST endpoint, letting unauthenticated visitors retrieve sensitive user role and capability data via crafted requests.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8383.yaml"}
 {"ID":"CVE-2026-8385","Info":{"Name":"WordPress WP Go Maps \u003c 10.0.10 - Unauthenticated Marker Data Disclosure","Severity":"medium","Description":"WP Go Maps WordPress plugin \u003c 10.0.10 contains an information disclosure vulnerability caused by improper enforcement of marker approval filter in admin-ajax fallback for datatables route, letting unauthenticated visitors retrieve unapproved marker records.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8385.yaml"}
 {"ID":"CVE-2026-8386","Info":{"Name":"WP Go Maps \u003c 10.0.10 - Unauthenticated Marker Information Disclosure","Severity":"medium","Description":"WP Go Maps WordPress plugin \u003c10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no authentication.\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8386.yaml"}
@@ -4388,7 +4403,10 @@
 {"ID":"CVE-2026-8839","Info":{"Name":"WordPress MapPress Maps \u003c= 2.96.6 - Unauthenticated IDOR","Severity":"medium","Description":"MapPress Maps for WordPress \u003c= 2.96.6 contains an authorization bypass caused by missing ownership verification in REST API routes, letting unauthenticated attackers read any map data and authenticated contributors modify any map, exploit requires crafted API requests\n","Classification":{"CVSSScore":"5.3"}},"file_path":"http/cves/2026/CVE-2026-8839.yaml"}
 {"ID":"CVE-2026-8857","Info":{"Name":"MediaWiki EasyTimeline - Code Injection RCE","Severity":"high","Description":"MediaWiki EasyTimeline (Timeline) extension versions before 1.46.0, 1.45.4, 1.44.6, and 1.43.9 contain a code injection vulnerability caused by insufficient neutralization of newlines in TextData text attributes in EasyTimeline.pl / Timeline.php. A crafted \u003ctimeline\u003e block can inject ploticus '#proc getdata' and 'command:' directives, which execute via /bin/sh because EasyTimeline invokes ploticus without the -noshell flag. Exploitation requires the ability to submit timeline markup for rendering — low-privileged edit access, or anonymous access on wikis that allow anonymous editing and API use. This template's parse-based check needs API read access; optional username/password inputs can be supplied for private wikis that deny anonymous read.\n","Classification":{"CVSSScore":"8.8"}},"file_path":"http/cves/2026/CVE-2026-8857.yaml"}
 {"ID":"CVE-2026-89013","Info":{"Name":"Dolibarr \u003c 24.0.0 - Authorization Bypass via hashp Parameter","Severity":"high","Description":"Dolibarr ERP/CRM versions 23.0.4 through 24.0.0 contain an authorization bypass vulnerability in document.php and viewimage.php. The public share-link feature forces NOLOGIN when hashp is present, but the value 'shared' skips token resolution while the override still fires for any non-empty hashp value. This bypass allows unauthenticated remote attackers to read arbitrary files from all Dolibarr managed directories including logs, SQL database backups, invoices, contracts, user vcards, and custom module sources.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-89013.yaml"}
+{"ID":"CVE-2026-89026","Info":{"Name":"Issabel Framework - Hard-Coded PBX API JWT Key","Severity":"critical","Description":"Issabel Framework before commit b97dbaf uses a shared HS256 key for PBX API bearer tokens. This template uses the read-only AMI ExtensionState action to check whether the PBX API accepts a short-lived token signed with either the vulnerable upstream-source key or the key in the 5.0.0-2 RPM, after rejecting an unrelated key.\n","Classification":{"CVSSScore":"9.3"}},"file_path":"http/cves/2026/CVE-2026-89026.yaml"}
 {"ID":"CVE-2026-89063","Info":{"Name":"Bookly \u003c=28.1 - IDOR Unauthenticated Sensitive Data Access","Severity":"high","Description":"Bookly WordPress plugin \u003c= 28.1 contains an insecure direct object reference caused by missing validation on 'conversation_id' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication.\n","Classification":{"CVSSScore":"8.2"}},"file_path":"http/cves/2026/CVE-2026-89063.yaml"}
+{"ID":"CVE-2026-89079","Info":{"Name":"Theme My Login \u003c= 7.2.1 - Privilege Escalation","Severity":"critical","Description":"Theme My Login (TML) \u003c= 7.2.1 for WordPress is vulnerable to unauthenticated account takeover on multisite installations. The multisite-only filter tml_ms_filter_pre_insert_user_data(), hooked on wp_pre_insert_user_data, hashes and injects $_POST['user_pass1'] into the user record whenever the tml_user_passwords network option is enabled, WITHOUT checking the $update flag. During a lost password request (wp-login.php?action=lostpassword -\u003e retrieve_password() -\u003e wp_update_user()), this filter fires on the EXISTING target user, overwriting their password with an attacker-chosen value. An unauthenticated attacker can therefore take over any account, including a network administrator, by sending user_pass1 in the lost-password POST. Fixed in 7.2.2 (changeset 3696081 / commit 06b76231) by adding the $update guard and only applying the password during activation.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-89079.yaml"}
+{"ID":"CVE-2026-9062","Info":{"Name":"WordPress Agile Store Locator \u003c 1.6.9 - Arbitrary File Read","Severity":"low","Description":"The Agile Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary .php files from the server.\n","Classification":{"CVSSScore":"3.4"}},"file_path":"http/cves/2026/CVE-2026-9062.yaml"}
 {"ID":"CVE-2026-90774","Info":{"Name":"rustypaste \u003c 0.18.1 - Filename Header Path Traversal","Severity":"high","Description":"rustypaste before 0.18.1 contains a path traversal caused by improper validation of the custom filename HTTP header, letting attackers write files outside the upload directory.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-90774.yaml"}
 {"ID":"CVE-2026-90817","Info":{"Name":"REDCap \u003e= 13.3.0 - Unauthenticated Remote Code Execution via Survey Passthru","Severity":"critical","Description":"REDCap versions 13.3.0 through 16.0.48 LTS, 17.3.9 LTS, and 17.4.3 Standard contain an unauthenticated remote code execution vulnerability. The application is vulnerable to an authentication bypass via a double-URL-decoded __passthru parameter (%2569ndex.php -\u003e index.php) on public survey endpoints, which routes requests to internal authenticated controllers. An unauthenticated attacker can abuse this routing flaw combined with PHP filter chains to inject and execute arbitrary code through the Laravel Blade template cache.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-90817.yaml"}
 {"ID":"CVE-2026-9082","Info":{"Name":"Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query","Severity":"critical","Description":"Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9082.yaml"}
@@ -4399,12 +4417,15 @@
 {"ID":"CVE-2026-9198","Info":{"Name":"IBM Langflow - Remote Code Execution","Severity":"critical","Description":"IBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution caused by chaining /api/v1/auto_login and /api/v1/validate/code endpoints, letting unauthenticated attackers execute arbitrary code remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9198.yaml"}
 {"ID":"CVE-2026-9282","Info":{"Name":"W3 Total Cache \u003c= 2.9.4 - Unauthenticated Arbitrary File Read","Severity":"high","Description":"W3 Total Cache WordPress plugin \u003c= 2.9.4 contains a directory traversal caused by improper handling in setupSources function, letting unauthenticated attackers read arbitrary files, exploit requires manual minify mode enabled with specific filename.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-9282.yaml"}
 {"ID":"CVE-2026-9290","Info":{"Name":"WP User Manager – User Profile Builder \u0026 Membership - Local File Inclusion","Severity":"high","Description":"WP User Manager – User Profile Builder \u0026 Membership plugin for WordPress \u003c= 2.9.17 contains a local file inclusion caused by improper handling in the profile template scope function, letting unauthenticated attackers execute arbitrary PHP code, exploit requires ability to upload or control PHP files.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-9290.yaml"}
+{"ID":"CVE-2026-93485","Info":{"Name":"WordPress Core \u003c 7.1.1 - Unauthenticated Stored XSS via Comment (Comment2Shell)","Severity":"high","Description":"WordPress core before 7.1.1 is vulnerable to unauthenticated stored XSS via crafted blockquote comments. wp_kses_post accepts a \u003cblockquote\u003e with a literal newline in the cite attribute, wpautop's non-quote-aware regex injects a \u003cp\u003e inside the cite value, and wptexturize leaves the attribute open so onfocus/autofocus land on \u003ccode\u003e as real HTML attributes, giving zero-click stored XSS. Only triggers when comments are open and auto-approved.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-93485.yaml"}
 {"ID":"CVE-2026-93616","Info":{"Name":"Check Point Security Management - Unauthenticated Directory Traversal to RCE","Severity":"critical","Description":"Check Point Management Server contains a directory traversal and unrestricted file upload vulnerability allowing unauthenticated attackers to upload and execute arbitrary scripts remotely, exploit requires no authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-93616.yaml"}
 {"ID":"CVE-2026-93674","Info":{"Name":"Langflow OSS \u003c=1.12.2 - Unauthenticated RCE via Import Code Execution","Severity":"critical","Description":"Langflow OSS 1.0.0 through 1.12.2 is vulnerable to unauthenticated remote code execution via the POST /api/v1/validate/code endpoint, which calls importlib.import_module() on user-supplied import statements, executing module top-level code instead of merely validating syntax.\nCombined with the default LANGFLOW_AUTO_LOGIN=true configuration (which issues a superuser JWT from GET /api/v1/auto_login with no credentials) and the custom_component exec() sink (POST /api/v1/custom_component, which can plant arbitrary Python modules into site-packages), a remote unauthenticated attacker achieves arbitrary OS command execution.\nFixed in 1.12.3 by replacing importlib.import_module() with importlib.util.find_spec() (commit 461506ac2f).\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-93674.yaml"}
 {"ID":"CVE-2026-94169","Info":{"Name":"The Grid \u003c= 2.8.1 - Unauthenticated Code Injection","Severity":"critical","Description":"Theme-one The Grid \u003c= 2.8.1 contains a command injection caused by improper control of code generation, letting attackers execute arbitrary commands remotely, exploit requires crafted input.\n","Classification":{"CVSSScore":"10"}},"file_path":"http/cves/2026/CVE-2026-94169.yaml"}
 {"ID":"CVE-2026-9506","Info":{"Name":"Bagisto \u003c= 2.4.1 - Unauthenticated Arbitrary File Read","Severity":"high","Description":"Bagisto through 2.4.1 is vulnerable to unauthenticated path traversal in the ImageCache controller. The `original` image-cache route (/cache/original/{filename}) passes the user-supplied filename to getImagePath() without any '..' filtering or realpath containment, allowing a remote unauthenticated attacker to read files outside the intended public image directories (upload/images) - for example the application's composer.json, artisan and other source files.\n","Classification":{"CVSSScore":"8.7"}},"file_path":"http/cves/2026/CVE-2026-9506.yaml"}
 {"ID":"CVE-2026-9586","Info":{"Name":"Sangoma Switchvox \u003c 8.4.0.2 - Unauthenticated SQL Injection","Severity":"critical","Description":"Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint (PhoneAppsHandler.pm). The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An attacker can break out of the single-quoted SQL string context and leverage PostgreSQL COPY TO PROGRAM to execute arbitrary operating system commands without authentication.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-9586.yaml"}
+{"ID":"CVE-2026-97359","Info":{"Name":"Rejetto HTTP File Server 2.4.x - Template Injection","Severity":"critical","Description":"Rejetto HTTP File Server (HFS) 2.4.x inserts the multipart upload filename into the server-side template symbol map as %item-resource% without escaping. A filename containing the literal %item-resource% is substituted a second time by the sequential global replacement in xtpl(), allowing a :} sequence to terminate the quoting region so a following {.exec|...} macro is executed as an operating-system command. An unauthenticated attacker achieves remote code execution with a single request.\n","Classification":{"CVSSScore":"9.8"}},"file_path":"http/cves/2026/CVE-2026-97359.yaml"}
 {"ID":"CVE-2026-9833","Info":{"Name":"WordPress Tag Groups \u003c 2.2.0 - Reflected Cross-Site Scripting","Severity":"high","Description":"The Tag Groups WordPress plugin \u003c 2.2.0 contains a stored XSS caused by improper escaping of an AJAX parameter reflected in an HTML response, letting unauthenticated attackers execute arbitrary JavaScript in browsers of logged-in users with edit_pages capability, exploit requires victim interaction.\n","Classification":{"CVSSScore":"7.1"}},"file_path":"http/cves/2026/CVE-2026-9833.yaml"}
+{"ID":"CVE-2026-9848","Info":{"Name":"WP Ticket \u003c= 6.0.4 - SQL Injection","Severity":"high","Description":"WP Ticket (wp-ticket) for WordPress through 6.0.4 allows unauthenticated SQL injection via front-end search due to unsanitized use of the \"s\" parameter in emd_author_search_results(). Exploitation requires at least one guest ticket. Fixed in 6.0.5.\n","Classification":{"CVSSScore":"7.5"}},"file_path":"http/cves/2026/CVE-2026-9848.yaml"}
 {"ID":"CVE-2001-1473","Info":{"Name":"Deprecated SSHv1 Protocol Detection","Severity":"high","Description":"SSHv1 is deprecated and has known cryptographic issues.","Classification":{"CVSSScore":"7.5"}},"file_path":"network/cves/2001/CVE-2001-1473.yaml"}
 {"ID":"CVE-2004-0437","Info":{"Name":"Titan FTP Server 3.01 - DoS via LIST Command Disconnection","Severity":"medium","Description":"Titan FTP Server version 3.01 build 163 (and possibly other older versions) contains a vulnerability where disconnecting during a LIST -L command may crash the daemon. Remote attackers can cause denial of service by initiating a LIST -L command and then abruptly disconnecting, leading to server instability.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0437.yaml"}
 {"ID":"CVE-2004-0656","Info":{"Name":"Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion","Severity":"medium","Description":"Pure-FTPd versions ≤ 1.0.18 are vulnerable to denial of service through connection limit exhaustion. The vulnerability occurs in the accept_client function when the maximum number of connections is exceeded, potentially causing the server to become unresponsive or crash.\n","Classification":{"CVSSScore":"5"}},"file_path":"network/cves/2004/CVE-2004-0656.yaml"}

cves.json-checksum.txt

@@ -1 +1 @@
-b5288d9972ad15f1c281d8d0c1299bc1
+c340c079583d38dcce4bb33b8be7ff87

dast/cves/2018/CVE-2018-19518.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2018-19518
     cwe-id: CWE-88
     epss-score: 0.96107
-    epss-percentile: 0.9988
+    epss-percentile: 0.99876
   metadata:
     max-request: 1
     confidence: tenative
@@ -53,4 +53,4 @@ http:
         part: interactsh_request
         words:
           - "User-Agent: curl"
-# digest: 4a0a00473045022100df2d46f9076b26aa37790240e0a8f746e70807f189e8f859e99e6175b6e6461e022055ac1443daea83df4b8675c51736d3f904d6a7e4d37f5631dbfcabd7bab47e47:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204c6a1f7230137dbca7d453336d6f7b762944f1edff6ef8d3e5e0ccf24563ab0602206de4f1f4ea114e6bf02150d5b0b645c4860dfe7086e05f7bddd4ef6099f16bdb:922c64590222798bb761d5b6d8e72950

dast/cves/2020/CVE-2020-9402.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2020-9402
     cwe-id: CWE-89
     epss-score: 0.22513
-    epss-percentile: 0.97706
+    epss-percentile: 0.97691
     cpe: cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*
   metadata:
     vendor: djangoproject
@@ -54,4 +54,4 @@ http:
           - "ORA-06512:"
           - "Request Method:"
         condition: and
-# digest: 4a0a004730450220558d562f2622cc39f4f2d7bfb3c9fba735dac717992bd1beecc3336e2787f49c022100a944ccfa686160006f8f8fe55665b3039bb3da12a58d13f17755bff052ee1f66:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100829d5aa8a6848a348a263f84ec827033d8bd144262a9dd727f517462e5f7088902200d378b0aaa57bd45dda1946c5421a576391fcf7404798508f104e0c2e5811009:922c64590222798bb761d5b6d8e72950

dast/cves/2021/CVE-2021-35042.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2021-35042
     cwe-id: CWE-89
     epss-score: 0.44369
-    epss-percentile: 0.9876
+    epss-percentile: 0.98753
   metadata:
     verified: true
     fofa-query: body="ProgrammingError" && body="ORDER BY"
@@ -66,4 +66,4 @@ http:
           - 'FROM\s+`([a-zA-Z_][a-zA-Z0-9_]*)`'
           - 'relation\s+([a-zA-Z_][a-zA-Z0-9_]*)'
           - "Table\\s+'[^']*\\.([a-zA-Z_][a-zA-Z0-9_]*)'"
-# digest: 4a0a0047304502204ef7bf7165b626dc4fac93d47c94f2ca5c4c4ff10db34f7e20d0156a1867d237022100ae183c210d25dc842109d285b4b6657acb4c78fcbc14c928981e78971ebe4d94:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c14438618fe0bfe8b9c9f6b4989a74edff15562ae91d7ef0bd6a748f3f0dff17022045ff24eb4a506918aadf4d282d2391cab18340a5aa6be207d7d92f80936848ef:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-22965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2022-22965
     cwe-id: CWE-94
     epss-score: 0.99638
-    epss-percentile: 0.9995
+    epss-percentile: 0.99949
     cpe: cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -59,4 +59,4 @@ http:
         words:
           - "User-Agent: Java"
         case-insensitive: true
-# digest: 4a0a00473045022100ebf89e35e871badf11099d541be73b73d37a41c52b2a114bb2b6cd0fb5ae6e240220417cfc4f4e2d0eb28f996ef475cde1c23798e6ad135285913e36721500a74841:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022055a9f46097f397abe531268b18149e76d635e7f72af193ad2925527f5fcce9910220120171533a1b4082d539b3ea366989134dd3afe2a0c9e3ac52e242ca3ae06280:922c64590222798bb761d5b6d8e72950

dast/cves/2022/CVE-2022-34265.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2022-34265
     cwe-id: CWE-89
     epss-score: 0.73607
-    epss-percentile: 0.99472
+    epss-percentile: 0.99465
   tags: sqli,dast,vulhub,cve,cve2022,django,vuln
 
 variables:
@@ -50,4 +50,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 4a0a0047304502204787df98b9ed1b3a8f1d16b4f1a1b41c10611f3c97ac060fed6a63f49b17148702210092ff1adc8a7518fd801c877501d46cd3f4aa5989f0420bdc4de5de0ac48db408:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100982e4824d1e3eb419ce25d09c1303fc86b7ea36c5f9961b0cfbfa61635a7895b022100b053c1424f69042d82b91bd92449a278be3f14e14866a62668ca70bc4319c0a7:922c64590222798bb761d5b6d8e72950

dast/cves/2024/CVE-2024-2961.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-2961
     cwe-id: CWE-787
     epss-score: 0.8833
-    epss-percentile: 0.99772
+    epss-percentile: 0.99768
   tags: cve,cve2024,php,iconv,glibc,lfr,rce,dast,vkev,vuln
 
 flow: http(1) && http(2)
@@ -57,4 +57,4 @@ http:
       - type: regex
         regex:
           - "root:x:0:0"
-# digest: 4b0a00483046022100b1b3336e22307f4327fcc0cd2b9fce3c5c00fd69b8bd08679268529c96da97be022100921297ff55cf2978537738bb996d23e7ea37f364c4a48b506e2f3a82959d293a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100dc393a5f9a76d85825f937a5869f5cd4bfd72878f55484bde22af0ab957a280e02210091278c3438e5d5dbc1b71403b6478733da938aa9268db5660af4f2a6ac024312:922c64590222798bb761d5b6d8e72950

dast/vulnerabilities/redirect/open-redirect-bypass.yaml

@@ -37,6 +37,7 @@ http:
         - '%5coast.me/%2f%2e%2e'
         - '%5c{{RootURL}}oast.me/%2f%2e%2e'
         - '../oast.me'
+        - '/..//oast.me'
         - '.oast.me'
         - '/%5coast.me'
         - '////\;@oast.me'
@@ -290,4 +291,4 @@ http:
           - 301
           - 302
           - 307
-# digest: 4b0a00483046022100c1c842975b79e69dd34cb16e60db37aca091680acecc0f0d97f67178e7913977022100a1fb4830db8fb610c73b9e71c5b72e629baf6d5ea3ae289dc3c51cd715103700:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022003ede4debd8cf83546e8debad1d919bab1d2003890c35b4c61d133e1f1e58871022100aae983ead62d5befcdec4a8788ffe391a5cda4aea6c17a6c603d91127523d12c:922c64590222798bb761d5b6d8e72950

headless/cves/2018/CVE-2018-25031.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2018-25031
     cwe-id: CWE-20
     epss-score: 0.42326
-    epss-percentile: 0.987
+    epss-percentile: 0.98692
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -56,4 +56,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4a0a00473045022100ecfd42437704999bec88cb7ee42d17f342b59e75db78ec7ace24dd4b168f130a02205745b94db930cea2cb535befa55c870d392ba3720b0eb6f9260e8bbaca44fe8c:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022055e5f0c37faa7a7ee8ec67c11c4f32c00b103d381957175c3d2a49fe8bf68b55022067fb6e02ec2587190e4fc19204817f87232ba249aa794ba2c33a5342e2ebbe97:922c64590222798bb761d5b6d8e72950

headless/cves/2022/CVE-2022-29455-headless.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2022-29455
     cwe-id: CWE-79
     epss-score: 0.23678
-    epss-percentile: 0.97815
+    epss-percentile: 0.97801
     cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
   metadata:
     verified: true
@@ -52,4 +52,4 @@ headless:
         words:
           - "elementor"
         case-insensitive: true
-# digest: 4b0a0048304602210094d84b8f299d5b31cbd067b32dad9c6c35db82dfa2f6f4a20403417158409cf6022100d8d14fefcc2449a02f9344d0db1b4b22c5199ca201396b6b51abbec2f93a9623:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221009bc95a8526a363a77c3cd94b2fa52aceb709dbe5e245380dac9d3a35ec2b2f4702206a5ae374040fe4df5127bbcf88ea89dfb8e523a5861e69c47bc05be5c3eb6b9a:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-29882.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2024-29882
     cwe-id: CWE-79
     epss-score: 0.01086
-    epss-percentile: 0.64987
+    epss-percentile: 0.65031
   metadata:
     verified: true
     max-request: 1
@@ -50,4 +50,4 @@ headless:
           - "ConnectSRS</a>"
         condition: or
         case-insensitive: true
-# digest: 4a0a00473045022100ea8ce63581922e0fc9182a815ec4b8ffb0fd8391618c9d397133cc5e0cd16618022034941496552ac72b0b462137267bd2a9e56420e9671b4d2d315a2d00b709b848:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b116ea5e64bbf24670e86692dbb656b4e10701550eba2dac2feb53c4855920660221008623e6a244fe854035fc6e16acdf8c7ecac185dd1cf297aa0fcbee6a7448480b:922c64590222798bb761d5b6d8e72950

headless/cves/2024/CVE-2024-38526.yaml

@@ -21,7 +21,7 @@ info:
     cvss-score: 7.2
     cve-id: CVE-2024-38526
     epss-score: 0.03832
-    epss-percentile: 0.90049
+    epss-percentile: 0.90017
   tags: cve,cve2024,supply-chain,polyfill,vkev,vuln
 headless:
   - steps:
@@ -60,4 +60,4 @@ headless:
           - "union.macoms.la"
           - "newcrbpc.com"
         part: urls
-# digest: 490a0046304402205d56469588ac77b354d3790760d80d69378b604c6957489a8879efc248a6172902205dc4368c8606b009edf7e68dcfeecfea396a315c42d9d2f15595380b12519f94:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e2b0d9cc45e96e7059d570789af41562d1be8e7ebbeb5df7a404fe68d27db67b02203984c723cc0a3015a4f84542b52f3acea10d38d95c8e151d0b953726fd6d841a:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-24752.yaml

@@ -16,7 +16,7 @@ info:
     - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc/blob/main/poc.py
   classification:
     epss-score: 0.01233
-    epss-percentile: 0.68771
+    epss-percentile: 0.68792
   metadata:
     verified: true
     max-request: 1
@@ -46,4 +46,4 @@ headless:
         words:
           - "{{random_int}}"
         case-insensitive: true
-# digest: 4a0a00473045022100da2b47fbb4e42af61bb27368f343d9673bebf4b8faeae9d3a933ebd62d8a8c0c022054ea6c6e80ad3664352ac02552949e6681f66a3ffe3159d8f28dc93eba24702e:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022017cec6f1527e07b4c44cdb2a16741c963b6411541d859256d0aeffce8ca2c3830220567af3726c0cc9bbb9ee3ef02733b2bcfe1be010c47d128df7d4beb7f6d5a8c0:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-25062.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2025-25062
     cwe-id: CWE-79
     epss-score: 0.01721
-    epss-percentile: 0.77293
+    epss-percentile: 0.7731
     cpe: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
   metadata:
     max-request: 7
@@ -190,4 +190,4 @@ headless:
         dsl:
           - reflected_text_xss_type
           - reflected_text_xss_message
-# digest: 4a0a004730450220423858c142b44eca40a09bdf9c6420228197ada5dfcd8c5b87fd46913c497b72022100e38ccc8501466b87a2e869f06ab0555bf212f86f3a6798d5ff2d3f2d72a720b0:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100c2320863ff4329518df16acb3049951c9ac911a0909e9952cd58c5f987692e9f02203b21676cd9ff6b9ea15a593e7ef9c0c624ae6993ba928b45f3b0b709eab75e57:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-29927-HEADLESS.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2025-29927
     cwe-id: CWE-285
     epss-score: 0.99225
-    epss-percentile: 0.99936
+    epss-percentile: 0.99935
   metadata:
     vendor: vercel
     product: Next.js
@@ -59,4 +59,4 @@ headless:
           - "compare_versions(nextjs_version, '> 14.0.0', '< 14.2.25')"
           - "compare_versions(nextjs_version, '> 15.0.0', '< 15.2.3')"
         condition: or
-# digest: 4b0a004830460221008698521cae475ce738b391b33c65e1074a253707a5b2f1d2a25501a92b34ceb6022100a412eebe38881eb96939bb925e95d8e6594975e2f1727bfb7bc4b2c1e74972a8:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207eb179498b68ed5e4b201699819a0db22a76863e85d97b3eba62ab669a08acfb022100d87cbc2d9395f488bb38aed222853b2d02acd2c0a79b4a4b3201422cb8b4e400:922c64590222798bb761d5b6d8e72950

headless/cves/2025/CVE-2025-8191.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2025-8191
     cwe-id: CWE-79
     epss-score: 0.01791
-    epss-percentile: 0.78204
+    epss-percentile: 0.78217
     cpe: cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -69,4 +69,4 @@ headless:
         words:
           - "swagger"
         case-insensitive: true
-# digest: 4b0a00483046022100c3ec7171957c0c6c4a3d29a0913942381edfd0386af82fcfd408cb9f16c4b48b02210099c7a03b6c97f8b818d7c99692e2348cd90b36fc150a5b21c5bdc5cfba209336:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100cab00e2a3e652fa15dd71114eb96ee4added663cec582c2e6091a7d3c572f7930220296970391aa78973acaecb7fc72858a1bdf0b1fe5774b3d2e04d82b6e2a30c48:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0114.yaml

@@ -19,7 +19,7 @@ info:
     cvss-score: 5.3
     cve-id: CVE-2000-0114
     epss-score: 0.47595
-    epss-percentile: 0.98845
+    epss-percentile: 0.98836
     cpe: cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
         group: 1
         regex:
           - 'version:([0-9.]+)'
-# digest: 490a00463044022018873bbb813222c340785bf61b8907e659c1a21e8fcf4c769c7786b72dc3adf70220631229e405dc2144f3e5f456b2386863f61224b483d7b2109699a0f0d6c75623:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022015f423320ef664de2f5956aad277c56e998605cf7e3790481756fbd9cb7df426022100ca4504609103dbd6a70a3c0f87df34d13c2f10160028439b16013bd5e378ffc9:922c64590222798bb761d5b6d8e72950

http/cves/2000/CVE-2000-0760.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2000-0760
     epss-score: 0.62496
-    epss-percentile: 0.99189
+    epss-percentile: 0.99182
     cpe: cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -55,4 +55,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100bb0c872cb7c4d839259e0b27de25feadf5374e99f1c098980e32a3f45dda20320221008065d27d772a564399e4da9fe81a0805c44d274e361c9901d5a0dd9aeb8d49e9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f0802fe3519e8ee606152caa985f1998604f96a0b7433108aa9d157852bc521f02200ecc7cac6844b7876e155f2f648715dd43392ba764f19afa2e69145b0768df9f:922c64590222798bb761d5b6d8e72950

http/cves/2001/CVE-2001-0537.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2001-0537
     cwe-id: CWE-287
     epss-score: 0.6845
-    epss-percentile: 0.99335
+    epss-percentile: 0.9933
     cpe: cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -53,4 +53,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 480a00453043021f59bb17dc4dc3dfcffe83665889a0b87fb3a5deb552bf5bc0cda45dda146cb70220596d1ab3d9b3c4ab1e96289f9646684dc8aedacda4407ec3e1140f895c9a1e1b:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100a6e087ee1a2942ab68bc2c24832ca3ef1cf1b39f775d4d6367a401b9537802a602202540a344d6762b84a11d2bce9588d03a03b380987e059d6ed1957c8f796ed4cf:922c64590222798bb761d5b6d8e72950

http/cves/2002/CVE-2002-1131.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2002-1131
     cwe-id: CWE-80
     epss-score: 0.25754
-    epss-percentile: 0.97969
+    epss-percentile: 0.97954
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 5
@@ -52,4 +52,4 @@ http:
           - 'contains(content_type, "text/html")'
           - 'status_code == 200'
         condition: and
-# digest: 490a0046304402206779dfe60be79ad04e4d11c44b9ea0f8da5020bd186373893172c75642aae3e40220514054a41a058b35c4509c93f964c2e4b8f20298e9b324009416913ce4254a4f:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a004830460221008a85410853ca757d495ad605b8fa71a4b2c792913da8641087114616fa41c39c022100a26f9ca3be1dec3f78ac4f1494caa069346f171c80a37d4be6aed4628b47fc01:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-0519.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2004-0519
     cwe-id: NVD-CWE-Other
     epss-score: 0.22528
-    epss-percentile: 0.97706
+    epss-percentile: 0.97692
     cpe: cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a004730450220582345c295d7f68e67cc921a7df7d063c18558eca6d46746e3fdd4bc8ff7b2c60221009ae08f190dca42dd5ab0ed330407a460427ddaebc0ba681bcbbec819ad983a03:922c64590222798bb761d5b6d8e72950
+# digest: 490a004630440220469fa088265f20642dd988e2c1f22092645567420f38de37e96a1914468235cf02207da84dc4eef21ef4108e1f5203ff19b946e72c765f0af6f7767f081216b4610f:922c64590222798bb761d5b6d8e72950

http/cves/2004/CVE-2004-1965.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2004-1965
     cwe-id: NVD-CWE-Other
     epss-score: 0.09001
-    epss-percentile: 0.95265
+    epss-percentile: 0.95234
     cpe: cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4b0a00483046022100d90b85391dcb0d57e2323fbddff94670299472ef9f77428e6ad03ad3474dabd3022100abdf688b773420a3d9bc27db6e0b6380b85fe7ba798d086778de666af2f8a1f8:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100c8ec608400531d04e31f1cf58c368267754bb884fb00961c865495d330a35f32022100e2ed326934e531f19c54006961aa678aec650bc2514427e035cf542fd9b436a9:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-2428.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-2428
     cwe-id: CWE-200
     epss-score: 0.73028
-    epss-percentile: 0.99457
+    epss-percentile: 0.9945
     cpe: cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502201fdcb1d7afbd3c712eb48d23eb532e119c58e2303979acc6c2cf64673514738202210092dae2df1a73d3ca616b38ff9df14ab383e354d085548e68347d37f54977a922:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b91eed5d4e29093d7edbf7584fc38cc2562e2c925e7017ac4fd844de7fd5f0ef022100fa313eb6b87c69d9634d0016b1ab27301e64ce8eb168250bbe83f8d90024c845:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3128.yaml

@@ -17,7 +17,7 @@ info:
     cvss-score: 5.4
     cve-id: CVE-2005-3128
     epss-score: 0.03436
-    epss-percentile: 0.88898
+    epss-percentile: 0.88874
     cwe-id: CWE-80
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
         part: header
         words:
           - "text/html"
-# digest: 4a0a00473045022100c15b0080286173d0eaee3a9d36b8c4c84510c168b2dcaf6e71d420fdeb40c2890220503de0dbb998ca4cb379c71a9cadb33e84323da4076570e16df0df7352bf0a9c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204a23db9eea4113517d27651b1a2e409b0d9c4a63392d0d03af5e98119ec17262022100db8fe532cd15c22762327a236bee9dda675db04b9b4851c0defa983de405316b:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3344.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2005-3344
     cwe-id: NVD-CWE-Other
     epss-score: 0.07986
-    epss-percentile: 0.94747
+    epss-percentile: 0.94717
     cpe: cpe:2.3:a:horde:horde:3.0.4:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100890002fe9965ddbd485dece2527bf2287650a19fac08800ee4fc37b2764c472d02202f617256243ccd300155aac337c80261783e636f9bfbe19fd1df9ec432409a09:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207599137b715e037098836c111ea3ff7aa76e05e119351818126ebd90e3c9ee21022100ee90af7c8b28d81db74055dd8dc6ff1e32d18033f73619c4477eaa6d63145058:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-3634.yaml

@@ -23,7 +23,7 @@ info:
     cve-id: CVE-2005-3634
     cwe-id: NVD-CWE-Other
     epss-score: 0.17757
-    epss-percentile: 0.97158
+    epss-percentile: 0.97141
     cpe: cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -45,4 +45,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'
-# digest: 4a0a004730450220186e3ac47bf6f8443122daba3e89aedb8f1ad70938bd9a7d528751eca3f800d9022100ab6f756116a1f7057e9af047eb8fed97202edcf05aa7ef67da2a7f4fdb3b9d5b:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204afb219233f4e7b9f5633741373170ff443dbbd29d3539808f0d845c67c71e74022019122dc3e828b87ba66db424ce02142649d2839d07c776f36e7792b5125d906c:922c64590222798bb761d5b6d8e72950

http/cves/2005/CVE-2005-4385.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2005-4385
     cwe-id: NVD-CWE-Other
     epss-score: 0.08836
-    epss-percentile: 0.95192
+    epss-percentile: 0.9516
     cpe: cpe:2.3:a:cofax:cofax:1.9.9c:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022002aa987319b50fde72b07d751ebcb1b88f3e79aa525b0bfcfe9a1f4cd270be1f022100e25eb89830179c92f216732f7cacc3264bf6a6f038c26890cc9a9e3ba174b108:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022078f1b7dfa89d167ac7642c5881d0c68614a3f4148fe996ef819bc772be7199f7022100929bc72c4c20a988507bff4e4d201261e86f11074827cb7298e2cc60812f606f:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-1681.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2006-1681
     cwe-id: NVD-CWE-Other
     epss-score: 0.06798
-    epss-percentile: 0.93988
+    epss-percentile: 0.93956
     cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022042f5891bc32044bd1acae3c6909654d09361ffe9dffafbcf0cb610ba5aa81c82022100bf016d91b3c84ea8f055bced1b7a5c85a50d3ee0c2f47851b0ac1040d5c9c1d1:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b7b108d01d06e51006f91a6343c4c6ecfad196cb87d82a08244164d929373bb6022100f8ec02988dd7596d1dc4478cc861e422d3647df8c267c070e1b38ae2e94edcb0:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-2842.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2006-2842
     cwe-id: CWE-22
     epss-score: 0.47196
-    epss-percentile: 0.98836
+    epss-percentile: 0.98828
     cpe: cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022049b4d7e1124608e0aa29a6b4e77767b08e3732289de864e3cb9f80377e3bf38202206affd51e9050a06308afd31729fb7f06a8147a1aef05c21a52f0af340e9167b2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502207fc517bd148c3f0b87c76a2d2a15002c8765ed77f4050612b079b48ac48d7cb6022100e44cfb5e57a9d7d04386ad1ea635e364cca4d53d822d329f7e205b14170070d2:922c64590222798bb761d5b6d8e72950

http/cves/2006/CVE-2006-3392.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 5.0
     cve-id: CVE-2006-3392
     epss-score: 0.79489
-    epss-percentile: 0.99604
+    epss-percentile: 0.996
     cwe-id: CWE-22
   metadata:
     max-request: 1
@@ -44,4 +44,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b5eec5df3ded37e8b28d169a190d95bc40b8cc07f842b6e152af27ec4821fe950221008844ae99374659783d059513e64eca44a4977470b868594abfc5b7ab83e95b19:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022029e0da0cd36588279f64845a3e306576472c2ea3582e3cc54316af0052058f190220103fa379fd415ea0e57dd1d5f606c5c7fb754c365c0182a6e4e822802bcbc57e:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-0885.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2007-0885
     cwe-id: NVD-CWE-Other
     epss-score: 0.05746
-    epss-percentile: 0.93039
+    epss-percentile: 0.9301
     cpe: cpe:2.3:a:rainbow_portal:rainbow.zen:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -46,4 +46,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100a011cb2bd44752e5419a4153e3e73ecf32556ed1ecce70b7da4414f277668c1502207b3c14471db6cd5674ff9f597cda73f978710ff8b44493b91380345888259e74:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022029c701d3f51378681dbdcafc808417dd562bbce08d083eb31ec9e4158abd1e4b022033dcaad51063c0f205ae4c79cf201fcebbc07ac49eda05ce56ddf09ba7dc8699:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-2449.yaml

@@ -18,7 +18,7 @@ info:
     cvss-score: 7.2
     cwe-id: CWE-79
     epss-score: 0.77376
-    epss-percentile: 0.99558
+    epss-percentile: 0.99553
   metadata:
     max-request: 1
     verified: true
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100ac7c13c88ada5019d32e1302811a356bc44e7e0e757141ff0ca9641fd3a78b7f0220124264930972126757485012565e9dab2df38660e4b942569cdce3e97d7c19ca:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402207d1afd5579176505cf19e242c79dd8a17bd5bdd81123aeef74c0f573decf6fac02204abc0f9224d46c22181a574b9f2151089ba2ef08eca44ed7c44b9c4c0099f8c5:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-3010.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-3010
     cwe-id: CWE-20
     epss-score: 0.97385
-    epss-percentile: 0.99899
+    epss-percentile: 0.99897
     cpe: cpe:2.3:a:alcatel-lucent:omnipcx:7.1:*:enterprise:*:*:*:*:*
   metadata:
     verified: true
@@ -59,4 +59,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022045b62a89cb2c701d70a4f4ba30bfb31d174e6ec357dfb778bcf7e3a3613c02900221009b32dcffe269bd0654333c4a32733b7aadb33f25872b32bc3f886424691cf5a4:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100806eba841ba03ffaf7908eaedf6161b5ae287b411057a66e84e79c1793e5f2aa022028c6c7bd71b20affa3a58cd445e3ec9c35a764c731725cc20c804f9229496ef4:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4504.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2007-4504
     cwe-id: CWE-22
     epss-score: 0.09491
-    epss-percentile: 0.95435
+    epss-percentile: 0.95405
     cpe: cpe:2.3:a:joomla:rsfiles:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100fc9d65cbd465e3f1b71e9b1e3c97d2f6e70c246608412543c53cd44bd77a167e022100ef5765063d56b1a684c392ee7e6db9df1d3d943dbe1265daf74cd9bf23148d53:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022035c7a3db5aa71c75653428fcac3af35ad3bf3b9556609b0512c36e71aa0a33cc022100ac1937585d9954fb50bb1c931b0c52e810d0c6851a0f374565dd4dad6db1cddf:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-4556.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2007-4556
     cwe-id: NVD-CWE-Other
     epss-score: 0.25749
-    epss-percentile: 0.97967
+    epss-percentile: 0.97954
     cpe: cpe:2.3:a:opensymphony:xwork:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100c0b47089c82d0e9840e12b1c570cc43a6c7ba56b5688dbbd389b592db2155a98022100ace028e81e4fc68a65f096aa9af1f9b1764b3ff2863301d0bcb2b1830bc12668:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022051babad24a267f89980111b7f929a13af4012ad4deff9b2d40859bd8ec24ffbf022100e02c480047529b484ff01da176ca9341ca51ee8b0be4e3265fea86e6909abeaf:922c64590222798bb761d5b6d8e72950

http/cves/2007/CVE-2007-5728.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2007-5728
     cwe-id: CWE-79
     epss-score: 0.14639
-    epss-percentile: 0.96656
+    epss-percentile: 0.96633
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f43c6f26bb38f8c1ea0de0842ffbcf7cc3d5a468bbc2298d5b5d679d7b09b8d3022073121019ec9a6381106f83e11d725e773cd8cfaef9bfc82e983554059f24a8ea:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022036ea61b759185b6353a5af3c80da56b4623cc19c367786fa6b935d1ae06ad380022100be292b49487e30c6c884070a7c1f2dcaeb7837fb8e221b205011abbf98b21a9f:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1059.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1059
     cwe-id: CWE-94
     epss-score: 0.48329
-    epss-percentile: 0.98864
+    epss-percentile: 0.98856
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402203551a12f9704078cc19fb4e56396bfca3f5381cca03a6bd1876285888ec01fa5022046b9872b2375f6a20a566b015952db2dace2004c2dcd62daaa5903577b31eb5c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100d58d9f6089adc98547345d31ed348e25567cd5984676a7629c7d7864d8229500022100a328ba18f735e84f8ec0d67f25ffb8dde7230210190626a37aafa20cb432ac77:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1061.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1061
     cwe-id: CWE-79
     epss-score: 0.074
-    epss-percentile: 0.9442
+    epss-percentile: 0.9439
     cpe: cpe:2.3:a:wordpress:sniplets_plugin:1.1.2:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -62,4 +62,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100c5d2ad5652066c2160dee87e136e5f1daa05b67d907112b4e5a8c861f4fed36802200ea75e39b41e26d692352e126819334cf4ea9ae55bf846ee53170aa401aba76c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100fe6eec6165a8c071ed3b31efc5f04d03fb4f3ac023a259e7b6884fb91de179df022100df1c0010ef625340f1105df4c159340fa34ca77ad7f7cee8d8c52f8fb31b179e:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-1547.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-1547
     cwe-id: CWE-601
     epss-score: 0.48137
-    epss-percentile: 0.98859
+    epss-percentile: 0.9885
     cpe: cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -51,4 +51,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402201230153f013d0d38595a554cc1aad31d6a1fd1ac3389f46029256a301d5c266b022024469af74ee069df2745adfae45ac6507fb77adfdc44c3c17357ac4c7dde8c5a:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022006ebc7bed1913776ec9ce370ff189cf291460edd6af5fbf483b2b994cfee8a690220404ed5048d433e143a33817864b1f0464a69b80c49ece9062536b2226e7b9212:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2052.yaml

@@ -20,7 +20,7 @@ info:
     cvss-score: 6.1
     cve-id: CVE-2008-2052
     epss-score: 0.01568
-    epss-percentile: 0.75143
+    epss-percentile: 0.7516
     cwe-id: CWE-601
     cpe: cpe:2.3:a:bitrix24:bitrix_site_manager:6.5:*:*:*:*:*:*:*
   metadata:
@@ -65,4 +65,4 @@ http:
         status:
           - 302
           - 301
-# digest: 490a0046304402203e604dbbaaa3d1cbce68b7030f1d5caabd5b4e5beef4b069f8fc063b3d539f060220156fce573c7299b90d32a67fb338e20c2c5c50028f0bcce8ac9f29e23480537e:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022041eace418b328c1aa4a12d6022f16962850ca9c8fa68583d567379366ff4aafb022100e46d225bb3acfda40e4694246a9059e814b6b135a5a85249ed8e20bb633b4bbe:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2398.yaml

@@ -19,7 +19,7 @@ info:
     cve-id: CVE-2008-2398
     cwe-id: CWE-79
     epss-score: 0.06232
-    epss-percentile: 0.93522
+    epss-percentile: 0.93492
     cpe: cpe:2.3:a:appserv_open_project:appserv:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -47,4 +47,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e61f23832b3b11ccc49912391bb43fdabc393ae436cb688a27f3db0b731245040220120e0fd9e2bba79091c6833af90bab1aedc61c8aca953094a8cb94fe9ac0b219:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450221008d96fbb5f6ae973d44b17cfb57ab5830822952311bd57d365bb4c130242da34a022020a1a0fac227c0d5d1ecbe5a74bda66b9845fc5cc0327a60a8d725996794a4d5:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-2650.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-2650
     cwe-id: CWE-22
     epss-score: 0.18809
-    epss-percentile: 0.97277
+    epss-percentile: 0.9726
     cpe: cpe:2.3:a:cmsimple:cmsimple:3.1:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -48,4 +48,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100e18a2b3b2c8ddb3d076940263943e2ed20c63ca5ff2ffa3ad93239ef57a47819022030faeed15ab85b4f2aa6cd0562b68416955924d737ec2085bc9192d83a131852:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022019b544be013373b785e390fb939eeda8cba967e40999dcc9fe2aa19783c3136c022100fcb622a3d514b8c5800bb5b89deab540c51a034daf654f411742c3fbb72feb47:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-4668
     cwe-id: CWE-22
     epss-score: 0.21476
-    epss-percentile: 0.97612
+    epss-percentile: 0.97597
     cpe: cpe:2.3:a:joomla:com_imagebrowser:0.1.5:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a00463044022022db702eb32ec8a53612a94f7ff3237eaa7a68a9384df7c42d6d0b742b8f9aef02207bc1c53ac6467509c694db9c4655c018ef9b83a70eb703b28b3555294f9f93fb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100bba3baf730c9644051f2eebcb8b0282cb42edb5d623a57115d7c522fd03697480220051229a81c094f1173602d5d13999acf74ba0a7cb955a8535937cbb99e923e0a:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-4764.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-4764
     cwe-id: CWE-22
     epss-score: 0.16505
-    epss-percentile: 0.96988
+    epss-percentile: 0.96969
     cpe: cpe:2.3:a:extplorer:com_extplorer:*:rc2:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502207ff0cbf78b6cab5205a95dda5a6f1ce27e86e987b4fe9539b44740c510e8d2a902210081556de1aa712826fec42ec5b3f3bdbb1fc541f59d71f094095c8ac551244b1d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022041e66931451bf901ab8d7fd188ac2a1997d129f030b4434888b0696c5370f4c2022100a43fa5bdaacaca07cc4eb5581179afbeb4095e5d4cc423cae00a4e5ade2ee193:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-5587.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-5587
     cwe-id: CWE-22
     epss-score: 0.12865
-    epss-percentile: 0.96296
+    epss-percentile: 0.96269
     cpe: cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -49,4 +49,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210090aeb43993131b09e726f3eb848c406634739e3e0aaefc734b85cccfac6f0556022046d993582f7e1f51df8664c58bbdeb6a8b46191bb37a8ab105e8db24ece83196:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e00356a592299bc0ce4f07c8969fcc6da3927533fed8e564c39a73206723f908022074b95dee398814b99878cab12c76e070c75e9be1cc30fbc8487d11d33b9fe297:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6080.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6080
     cwe-id: CWE-22
     epss-score: 0.10637
-    epss-percentile: 0.95792
+    epss-percentile: 0.95763
     cpe: cpe:2.3:a:codecall:com_ionfiles:4.4.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a004830460221008d44327c8bce9bfae9f74a1b3fbf930f40744f35d00d62225781d2a21e4bf5f802210092c451677e93d05ee1d58fc4409bd734a7cfbb5546b9bb5c68673a521654098a:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100bf511a9c5d622e634c03ea2e99057f4e9d5713666e54baffda7f9b68abd68ff8022100ec7212eec0430f2529726271044b9d93d247ff68643e85c622007c374151c383:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6172.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6172
     cwe-id: CWE-22
     epss-score: 0.12284
-    epss-percentile: 0.9618
+    epss-percentile: 0.96154
     cpe: cpe:2.3:a:weberr:rwcards:3.0.11:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a004630440220587b19dae92f2b11551d7baaf29f26b8af7695e649e84ded10d14c04a1cde3ec0220299b3d26795ddab1890ea0eaca68904baf7573b3aab1211fe06f15c84115992c:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502204714c51ba842524a45acad31429970470aa24c5e1a753b8611990f0514277c1a022100804b4aee9ba0a4f0f6e8f727e48520621701ddff93f59d5b10ca09342d289b34:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6222.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-6222
     cwe-id: CWE-22
     epss-score: 0.11497
-    epss-percentile: 0.96017
+    epss-percentile: 0.95988
     cpe: cpe:2.3:a:joomlashowroom:pro_desk_support_center:1.0:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d6613382ca20860fd3641e0514000e94676ceaa35bbd6da896e67fe7fec970b002200f1d6f6eee1d778ec4133eb7d89a82718eb4981b175cd9f2bdc2443906d6684e:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044021f792c7dc3c31c727c45629ccba29b77deb76e14a287546a1c3e32324ed41acf022100d4c207228e2898b552a9b17fdbe949bebe9af790623f229e81d7eec9f53ff665:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6465.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6465
     cwe-id: CWE-79
     epss-score: 0.05114
-    epss-percentile: 0.92348
+    epss-percentile: 0.92321
     cpe: cpe:2.3:a:parallels:h-sphere:3.0.0:p9:*:*:*:*:*:*
   metadata:
     verified: true
@@ -63,4 +63,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402202ecb24e655723e5383f8cc69a76178a6693fce86edc3b931db7b9fb7c600adbe022001d49832285bf9d2bc8c0bdc9a6782479ebaba81d220880a84e549b1b58569c2:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022044b2a18862eaba6731ce8fe9094328c124d96bcd16f0a49860f66d995c9da668022100e322b643c4ed40e33d79a9054d12f86ce8c204ae6cbc6590fdf8751b2f404495:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6668.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2008-6668
     cwe-id: CWE-22
     epss-score: 0.14041
-    epss-percentile: 0.96554
+    epss-percentile: 0.96532
     cpe: cpe:2.3:a:dirk_bartley:nweb2fax:*:*:*:*:*:*:*:*
   metadata:
     max-request: 2
@@ -45,4 +45,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100a2a8045a1c6a15052471ade84258e46750e320c4665479b933b96b2a4ff6e721022100f7c32a5f183ff7f5436f9654a97d5bbc0b3726fc19555afc0e13d7ea28e40821:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100e46549260ef6818f03216f21aa045d8bae8c648faa95292d38e68a7c5cbfd18a022034e700b638a642c2bd14160f7d83806d788b804c642dea4dde1178be68eea4bf:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-6982.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2008-6982
     cwe-id: CWE-79
     epss-score: 0.05782
-    epss-percentile: 0.93071
+    epss-percentile: 0.93042
     cpe: cpe:2.3:a:devalcms:devalcms:1.4a:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 500
-# digest: 490a00463044022065cddf45248f0e4eb4ecd7fa84b293bb510842bf58f4393f42d1121784014f1702206117f5edd9bba2af357acaf4b203336547a495322b019ba47eaf58c3e03e2515:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100ee184d77c2efcfa4097a4263aa1090c8b9742fc8bfc3a5843629ab72aee40a2f02202bd5de2c066b23894668e9b350f810bbb7a93924744fdf74635927b06fefc6a5:922c64590222798bb761d5b6d8e72950

http/cves/2008/CVE-2008-7269.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2008-7269
     cwe-id: CWE-20
     epss-score: 0.08234
-    epss-percentile: 0.94884
+    epss-percentile: 0.94855
     cpe: cpe:2.3:a:boka:siteengine:5.0:*:*:*:*:*:*:*
   metadata:
     verified: "true"
@@ -43,4 +43,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 4a0a0047304502205642096bd523b48aec83dba5367bc01b21e1922a4dbfc55b9e6e3fa6fff3ef07022100818d1f39871249e62b16c9194f5410f6ee8ad55294df875d959e37fbbcb7ff66:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100ccd1f8b22630c0fa76588329697c23202181ee0d66fff8c2ac9cb3efa02b9e8a022100bd5fa71e932e0f8ede3646891308026da48d7ad819d8a6221806cb18296f6848:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0347.yaml

@@ -22,7 +22,7 @@ info:
     cve-id: CVE-2009-0347
     cwe-id: CWE-59
     epss-score: 0.10932
-    epss-percentile: 0.95879
+    epss-percentile: 0.95852
     cpe: cpe:2.3:a:autonomy:ultraseek:_nil_:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -40,4 +40,4 @@ http:
         part: header
         regex:
           - '(?m)^(?:Location\s*?:\s*?)(?:http?://|//)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh.*$'
-# digest: 490a0046304402200b597088d5c183691f7e8190e1863dea95f77be0afb68eea57497caa01c17b75022013d6bab8ad9f33f2309a6400fe85c56845fa7a06e7e58f765f16faaa3be70cf6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502210091eebcf485263b6b8a222436f8e31f2ef61963840ceba41daf457a3f7771ec4e02204b9d04863b21bf414a1e6b8b81fe8015bdad8853feac58a38fc6488795511d32:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0545.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-0545
     cwe-id: CWE-20
     epss-score: 0.90386
-    epss-percentile: 0.99802
+    epss-percentile: 0.99798
     cpe: cpe:2.3:a:zeroshell:zeroshell:1.0:beta1:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
         part: body
         regex:
           - "root:.*:0:0:"
-# digest: 490a004630440220287d46cac879eb20ea4101770e324fdf4a9219896e0bfb53f6e0c17b005d41b502204d845427f23dc4e756ae73f31ea122b2019907404237977dc42fd54f5edcfdb9:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a0047304502206c422c5c19a0fb2af2b7b1ff2f6ef8864e2099bba34548fcc9fb7ee3bd23dc5e022100b3e1f653efb4362e1ef2c8191d4e6748e0b3cec050973ce4caa3e58fc1739faf:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-0932.yaml

@@ -20,8 +20,8 @@ info:
     cvss-score: 6.4
     cve-id: CVE-2009-0932
     cwe-id: CWE-22
-    epss-score: 0.45764
-    epss-percentile: 0.98798
+    epss-score: 0.47871
+    epss-percentile: 0.98844
     cpe: cpe:2.3:a:debian:horde:3.2:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100b87e99b115f9a626990c5f85c06464e2b32da5376936e4ab5064a9a918db957502202d7fabbd73c871260670afaf7665be82c2f40c102e9b5ee4b3c7cc9f9bf80bdb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022044818a1011c58b38b789477b7a002576aeec27ad5ab0b08e725e4afa4648f9fe022100dc067587e1eb4bee2626508080c38d321ddfe00cbac2f3b954061b61becd0427:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1151.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1151
     cwe-id: CWE-94
     epss-score: 0.96565
-    epss-percentile: 0.99884
+    epss-percentile: 0.99882
     cpe: cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -58,4 +58,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022075965ca4fd10665f98449e9748615bf927b503f84be0851067cf4da824f53b97022100a8b4abea4c23ef1dd8a585e017ebdf7c41b48e4aa91575cb76184c0f6d5a1f47:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100b28aa057e22ab9e0a5a25b8ea867c96578ae643c8e6186a0678c0a15e7f36538022100dace9d6d85e92d0d5b68d26531a4e2eb8025ae7fd419c44e5fecb68b7c432185:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1496.yaml

@@ -20,7 +20,7 @@ info:
     cve-id: CVE-2009-1496
     cwe-id: CWE-22
     epss-score: 0.07183
-    epss-percentile: 0.94286
+    epss-percentile: 0.94255
     cpe: cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -42,4 +42,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100b91ce3c1d50d6d8398e92659c6fc71810ec3d146315854601de34cc26e1c1af40221009cfc7ac176f10dd95f3e4f70faf19b339c8822f4e34b8cff685cc5c69428fe5d:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022100f098e591f73324638876bc98aa3efff55a5b698c59debe221f4074b2d52d027502203defcf7572af25c6d2899863df9b6e370ddcf5f9d1a4428997575b1185425d4f:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1558.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1558
     cwe-id: CWE-22
     epss-score: 0.29821
-    epss-percentile: 0.98203
+    epss-percentile: 0.98188
     cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
   metadata:
     max-request: 1
@@ -43,4 +43,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100d5bb7a58fa8bda38d27f121b952635fdb16e2c94e87956635c9400b9f5437a700220451a3687e0f54f9bcf24a5830ddeb93479bdae961c7df9974b79becf9579ea52:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402201af2c03da5af7e51c1aa4e0983a61f08a3c8c16d361686cdc17c21217314724402205a66d58e218ad4c58f156d07e87a351a0fb88bbb824a0a2bf12578938e879265:922c64590222798bb761d5b6d8e72950

http/cves/2009/CVE-2009-1872.yaml

@@ -21,7 +21,7 @@ info:
     cve-id: CVE-2009-1872
     cwe-id: CWE-79
     epss-score: 0.16083
-    epss-percentile: 0.96916
+    epss-percentile: 0.96896
     cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
   metadata:
     verified: true
@@ -65,4 +65,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 490a0046304402204f5d82f73da1c6ab00313aabc647d0748ff6f3528c81ea51a4d3afec9cf3f6300220018cc132666ea55c89dac784fe65ca812f1a51205d3dd0a69ca7a6a47a94f3f4:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022018e705fd0caec686da1176aab0d4937013dfc38fc844dd958b149fdfc49bfa0d022063f8c7a818cdf6bc1299a31216819ff031ffdb7ed502e17eeb9fda78de1e0009:922c64590222798bb761d5b6d8e72950