Auto Generated New Template Addition List [Fri Mar 10 12:30:46 UTC 2023] 🤖

cisco-cloudcenter-suite-log4j-rce

.github/auto_assign.yml

@@ -0,0 +1,30 @@
+# Set to true to add reviewers to pull requests
+addReviewers: true
+
+# Set to true to add assignees to pull requests
+addAssignees: true
+
+# A list of reviewers to be added to pull requests (GitHub user name)
+reviewers:
+  - ritikchaddha
+  - DhiyaneshGeek
+  - pussycat0x
+
+# A number of reviewers added to the pull request
+# Set 0 to add all the reviewers (default: 0)
+numberOfReviewers: 1
+
+ # A list of assignees, overrides reviewers if set
+assignees:
+  - DhiyaneshGeek
+  - pussycat0x
+  - ritikchaddha
+
+# A number of assignees to add to the pull request
+# Set to 0 to add all of the assignees.
+# Uses numberOfReviewers if unset.
+numberOfAssignees: 1
+
+# A list of keywords to be skipped the process that add reviewers if pull requests include it
+# skipKeywords:
+#   - wip

.github/dependabot.yml

@@ -0,0 +1,19 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    target-branch: "main"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    labels:
+      - "Type: Maintenance"

.github/scripts/wordpress-plugins-update-requirements.txt

@@ -0,0 +1,10 @@
+beautifulsoup4==4.11.1
+bs4==0.0.1
+certifi==2022.9.24
+charset-normalizer==2.1.1
+idna==3.4
+Markdown==3.4.1
+requests==2.28.1
+soupsieve==2.3.2.post1
+termcolor==2.1.1
+urllib3==1.26.13

.github/scripts/wordpress-plugins-update.py

@@ -0,0 +1,185 @@
+#!/usr/bin/env python3
+
+'''
+This script reads the URL https://wordpress.org/plugins/browse/popular/ until page 10, extract each plugin name and namespace,
+then in http://plugins.svn.wordpress.org/ website, looks for the "Stable tag" inside the readme.txt and extract the last version
+number from trunk branch. Finally generates a template and a payload file with last version number to be used during scan that
+compares the detect version with the payload version.
+
+The generated template also includes the tags top-100 and top-200 allowing filtering.
+
+e.g.
+nuclei -t technologies/wordpress/plugins -tags top-100 -u https://www.example.com
+'''
+
+__author__ = "ricardomaia"
+
+from time import sleep
+from bs4 import BeautifulSoup
+import requests
+import re
+from markdown import markdown
+import os
+from termcolor import colored, cprint
+
+# Regex to extract the name of th plugin from the URL
+regex = r"https://wordpress.org/plugins/(\w.+)/"
+
+ranking = 1
+
+# Top 200 Wordpress Plugins
+for page_number in range(1, 11):
+
+    html = requests.get(url=f"https://wordpress.org/plugins/browse/popular/page/{page_number}", headers={
+        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36",
+        "Accept-Language": "en-US,en;q=0.9",
+        "Accept-Encoding": "gzip, deflate",
+        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9",
+        "Connection": "keep-alive",
+        "Upgrade-Insecure-Requests": "1",
+        "Cache-Control": "max-age=0",
+        "Pragma": "no-cache",
+    }).content
+
+    # Parse HTML
+    soup = BeautifulSoup(html, 'html.parser')
+    results = soup.find(id="main")
+    articles = results.find_all("article", class_="plugin-card")
+
+    # Setting the top tag
+    top_tag = "top-100,top-200" if page_number <= 5 else "top-200"
+
+    # Get each plugin in the page
+    for article in articles:
+
+        full_title = article.find("h3", class_="entry-title").get_text()
+        regex_remove_quotes = r"[\"`:]"
+        subst_remove_quotes = "'"
+        title = re.sub(regex_remove_quotes, subst_remove_quotes, full_title)
+
+        link = article.find("a").get("href")
+        name = re.search(regex, link).group(1)
+
+        cprint(f"Title: {title}", "cyan")
+        cprint(f"Link: {link}", "yellow")
+        cprint(f"Name: {name} - Ranking: {ranking}", "green")
+        print(f"Page Number: {page_number}")
+        print(f"Top Tag: {top_tag}")
+        print(f"http://plugins.svn.wordpress.org/{name}/trunk/readme.txt")
+        ranking += 1
+
+        sleep(0.2)
+
+        # Get the readme.txt file from SVN
+        readme = requests.get(
+            url=f"http://plugins.svn.wordpress.org/{name}/trunk/readme.txt",
+            headers={
+                "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36",
+                "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9",
+                "Accept-Encoding": "gzip, deflate",
+                "Accept-Language": "pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7,es;q=0.6",
+                "Cache-Control": "no-cache",
+                "Connection": "keep-alive",
+                "Host": "plugins.svn.wordpress.org",
+                "Pragma": "no-cache",
+                "Upgrade-Insecure-Requests": "1",
+                "Referer": "http://plugins.svn.wordpress.org/{name}/trunk/"}).content
+
+        # Extract the plugin version
+        try:
+            version = re.search(r"(?i)Stable.tag:\s+([\w.]+)",
+                                readme.decode("utf-8")).group(1)
+        except:
+            version = "N/A"
+
+        # Extract the plugin description
+        try:
+            description_markdown = re.search(
+                r"(?i)==.Description.==\W+\n?(.*)", readme.decode("utf-8")).group(1)
+            html = markdown(description_markdown)
+            full_description = BeautifulSoup(html, 'html.parser').get_text()
+            regex_max_length = r"(\b.{80}\b)"
+            subst_max_lenght = "\\g<1>\\n    "
+            description = re.sub(
+                regex_max_length, subst_max_lenght, full_description, 0, re.MULTILINE)
+        except:
+            description = "N/A"
+
+        print(f"Version: {version}")
+        print(f"Description: {description}")
+
+        # Write the plugin template to file
+        template = f'''id: wordpress-{name}
+
+info:
+  name: {title} Detection
+  author: ricardomaia
+  severity: info
+  reference:
+    - https://wordpress.org/plugins/{name}/
+  metadata:
+    plugin_namespace: {name}
+    wpscan: https://wpscan.com/plugin/{name}
+  tags: tech,wordpress,wp-plugin,{top_tag}
+
+requests:
+  - method: GET
+
+    path:
+      - "{{{{BaseURL}}}}/wp-content/plugins/{name}/readme.txt"
+
+    payloads:
+      last_version: helpers/wordpress/plugins/{name}.txt
+
+    extractors:
+      - type: regex
+        part: body
+        internal: true
+        name: internal_detected_version
+        group: 1
+        regex:
+          - '(?i)Stable.tag:\s?([\w.]+)'
+
+      - type: regex
+        part: body
+        name: detected_version
+        group: 1
+        regex:
+          - '(?i)Stable.tag:\s?([\w.]+)'
+
+    matchers-condition: or
+    matchers:
+      - type: dsl
+        name: "outdated_version"
+        dsl:
+          - compare_versions(internal_detected_version, concat("< ", last_version))
+
+      - type: regex
+        part: body
+        regex:
+          - '(?i)Stable.tag:\s?([\w.]+)'
+'''
+
+        work_dir = os.getcwd()
+        print(f"Current working directory: {work_dir}")
+        helper_dir = f"{work_dir}/helpers/wordpress/plugins"
+        template_dir = f"{work_dir}/technologies/wordpress/plugins"
+
+        if not os.path.exists(helper_dir):
+            os.makedirs(helper_dir)
+
+        if not os.path.exists(template_dir):
+            os.makedirs(template_dir)
+
+        helper_path = f"helpers/wordpress/plugins/{name}.txt"
+        version_file = open(helper_path, "w")
+        version_file.write(version)
+        version_file.close()
+
+        template_path = f"technologies/wordpress/plugins/{name}.yaml"
+        template_file = open(template_path, "w")  # Dev environment
+        template_file.write(template)
+        template_file.close()
+
+        print("--------------------------------------------")
+        print("\n")

.github/scripts/yaml2json.go

@@ -0,0 +1,93 @@
+package main
+
+import (
+	"encoding/json"
+	"fmt"
+	"io/ioutil"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"gopkg.in/yaml.v3"
+)
+
+type Classification struct {
+	CVSSScore string `yaml:"cvss-score,omitempty"`
+}
+
+type Info struct {
+	Name        string         `yaml:"name"`
+	Severity    string         `yaml:"severity"`
+	Description string         `yaml:"description"`
+	Classification Classification `yaml:"classification,omitempty"`
+}
+
+type Data struct {
+	ID          string `yaml:"id"`
+	Info        Info   `yaml:"info"`
+	FilePath    string `json:"file_path"`
+}
+
+func main() {
+	if len(os.Args) != 3 {
+		fmt.Println("Usage: go run main.go <directory> <output_file>")
+		os.Exit(1)
+	}
+
+	directory := os.Args[1]
+	outputFile := os.Args[2]
+
+	var data []Data
+
+	err := filepath.Walk(directory, func(path string, info os.FileInfo, err error) error {
+		if strings.HasSuffix(path, ".yaml") || strings.HasSuffix(path, ".yml") {
+			yamlFile, err := ioutil.ReadFile(path)
+                if err != nil {
+                    fmt.Printf("Error reading YAML file %s: %v\n", path, err)
+                    return err
+                }
+    
+                var d Data
+                err = yaml.Unmarshal(yamlFile, &d)
+                if err != nil {
+                    fmt.Printf("Error unmarshalling YAML file %s: %v\n", path, err)
+                    return err
+                }
+                if d.Info.Classification.CVSSScore == "" {
+                    d.Info.Classification.CVSSScore = "N/A"
+                }
+                if d.Info.Classification == (Classification{}) {
+                    d.Info.Classification.CVSSScore = "N/A"
+                }
+		fpath := strings.Replace(path, "/home/runner/work/nuclei-templates/nuclei-templates/", "", 1)
+                d.FilePath = fpath
+    
+                data = append(data, d)
+            }
+            return nil
+        })
+    
+        if err != nil {
+            fmt.Printf("Error reading directory: %v\n", err)
+            os.Exit(1)
+        }
+    
+        var jsonData []byte
+        for _, d := range data {
+            temp, err := json.Marshal(d)
+            if err != nil {
+                fmt.Printf("Error marshalling JSON: %v\n", err)
+                os.Exit(1)
+            }
+            jsonData = append(jsonData, temp...)
+            jsonData = append(jsonData, byte('\n'))
+        }
+        err = ioutil.WriteFile(outputFile, jsonData, 0644)
+        if err != nil {
+            fmt.Printf("Error writing JSON data to file: %v\n", err)
+            os.Exit(1)
+        }
+    
+        fmt.Println("JSON data written to", outputFile)
+    }
+    

.github/workflows/cve-annotate.yml

@@ -3,28 +3,26 @@ name: ✍🏻 CVE Annotate
 on:
   push:
     branches:
-      - master
+      - main
+    paths:
+      - 'cves/**.yaml'
   workflow_dispatch:
 
 jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+        with: 
+          fetch-depth: 0
 
-      - name: Get Github tag
-        id: meta
-        run: |
-          curl --silent "https://api.github.com/repos/projectdiscovery/nuclei/releases/latest" | jq -r .tag_name | xargs -I {} echo TAG={} >> $GITHUB_OUTPUT
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
 
-      - name: Setup CVE annotate
-        if: steps.meta.outputs.TAG != ''
-        env:
-          VERSION: ${{ steps.meta.outputs.TAG }}
-        run: |
-          wget -q https://github.com/projectdiscovery/nuclei/releases/download/${VERSION}/cve-annotate.zip
-          sudo unzip cve-annotate.zip -d /usr/local/bin
-        working-directory: /tmp
+      - name: cve-annotate install
+        run: go install -v github.com/projectdiscovery/nuclei/v2/cmd/cve-annotate@latest
 
       - name: Generate CVE Annotations
         id: cve-annotate

.github/workflows/cve2json.yml

@@ -0,0 +1,38 @@
+name: Generate JSON Metadata of CVE Templates 
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'cves/**'
+
+jobs:
+  cve2json:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+          check-latest: true
+          
+      - name: run yaml2json.go to generate cves.json
+        run: |
+           go env -w GO111MODULE=off
+           go get gopkg.in/yaml.v3
+           go run .github/scripts/yaml2json.go $GITHUB_WORKSPACE/cves/ cves.json
+          
+      - name: Commit files
+        run: |
+          git pull
+          git add cves.json
+          git config --local user.email "[email protected]"
+          git config --local user.name "GitHub Action"
+          git commit -m "Auto Generated cves.json [$(date)] :robot:" -a
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/new-templates.yml

@@ -3,7 +3,9 @@ name: 🥳 New Template List
 on:
   push:
     branches:
-      - master
+      - main
+    paths:
+      - '**.yaml'
   workflow_dispatch:
 
 jobs:

.github/workflows/readme-update.yml

@@ -22,7 +22,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v4
         with:
           python-version: "3.8"
 

.github/workflows/syntax-checking.yml

@@ -1,6 +1,10 @@
 name: ❄️ YAML Lint
 
-on: [push, pull_request]
+on:
+  pull_request:
+    paths:
+      - '**.yaml'
+  workflow_dispatch:
 
 jobs:
   build:
@@ -8,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@v2
       - name: Yamllint
-        uses: karancode/yamllint-github-action@master
+        uses: karancode/yamllint-github-action@v2.0.0
         with:
           yamllint_config_filepath: .yamllint
           yamllint_strict: false

.github/workflows/template-checksum.yml

@@ -0,0 +1,41 @@
+name: 📝 Template Checksum
+
+on:
+  push:
+    tags:
+      - '*'
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+          check-latest: true
+          cache: true
+
+      - name: install checksum generator
+        run: |
+          go install -v github.com/projectdiscovery/nuclei/v2/cmd/generate-checksum@dev
+
+      - name: generate checksum
+        run: |
+          generate-checksum /home/runner/work/nuclei-templates/nuclei-templates/ templates-checksum.txt
+
+      - name: Commit files
+        run: |
+          git pull
+          git add templates-checksum.txt
+          git config --local user.email "[email protected]"
+          git config --local user.name "GitHub Action"
+          git commit -m "Auto Generated Templates Checksum [$(date)] :robot:" -a
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: master

.github/workflows/template-db-indexer.yml

@@ -3,18 +3,21 @@ name: 📑 Template-DB Indexer
 on:
   push:
     branches:
-      - master
+      - main
+    paths:
+      - '**.yaml'
   workflow_dispatch:
 
 jobs:
   index:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v2
+      - name: Set up Go
+        uses: actions/setup-go@v3
         with:
-          go-version: 1.17
+          go-version: 1.19
 
-      - name: Intalling Indexer
+      - name: Installing Indexer
         run: |
           git config --global url."https://${{ secrets.ACCESS_TOKEN }}@github".insteadOf https://github
           git clone https://github.com/projectdiscovery/nucleish-api.git
@@ -26,4 +29,4 @@ jobs:
           AWS_ACCESS_KEY: ${{ secrets.AWS_ACCESS_KEY }}
           AWS_SECRET_KEY: ${{ secrets.AWS_SECRET_KEY }}
         run: |
-          generate-index -mode templates
+          generate-index -mode templates

.github/workflows/template-validate.yml

@@ -1,26 +1,26 @@
 name: 🛠 Template Validate
 
-on: [ push, pull_request ]
+on:
+  pull_request:
+    paths:
+      - '**.yaml'
+  workflow_dispatch:
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+        with: 
+          fetch-depth: 0
 
-      - name: Get Github tag
-        id: meta
-        run: |
-          curl --silent "https://api.github.com/repos/projectdiscovery/nuclei/releases/latest" | jq -r .tag_name | xargs -I {} echo TAG={} >> $GITHUB_OUTPUT
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
 
-      - name: Setup Nuclei
-        if: steps.meta.outputs.TAG != ''
-        env:
-          VERSION: ${{ steps.meta.outputs.TAG }}
-        run: |
-          wget -q https://github.com/projectdiscovery/nuclei/releases/download/${VERSION}/nuclei_${VERSION:1}_linux_amd64.zip
-          sudo unzip nuclei*.zip -d /usr/local/bin
-        working-directory: /tmp
+      - name: nuclei install
+        run: go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest
 
       - name: Template Validation
         run: |

.github/workflows/templates-stats.yml

@@ -10,10 +10,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@master
-      - uses: actions/setup-go@v2
+      - uses: actions/checkout@v3
         with: 
-          go-version: 1.18
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
 
       - name: Installing Template Stats
         run: |
@@ -51,5 +55,4 @@ jobs:
       - name: Push changes
         uses: ad-m/github-push-action@master
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: master
+          github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/wordpress-plugins-update.yml

@@ -0,0 +1,45 @@
+name: ✨ WordPress Plugins - Update
+
+on:
+  schedule:
+    - cron: "0 4 * * *" # every day at 4am UTC
+  workflow_dispatch:
+
+jobs:
+  Update:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v3
+        with:
+          persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
+          fetch-depth: 0 # otherwise, you will failed to push refs to dest repo
+
+      - name: Install Python3
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+      - run: |
+          python -m pip install --upgrade pip
+          pip install -r .github/scripts/wordpress-plugins-update-requirements.txt
+
+      - name: Update Templates
+        id: update-templates
+        run: |
+          python3 .github/scripts/wordpress-plugins-update.py
+          git status -s | wc -l | xargs -I {} echo CHANGES={} >> $GITHUB_OUTPUT
+
+      - name: Commit files
+        if: steps.update-templates.outputs.CHANGES > 0
+        run: |
+          git config --local user.email "[email protected]"
+          git config --local user.name "GitHub Action"
+          git add --all
+          git commit -m "Auto WordPress Plugins Update [$(date)] :robot:"
+
+      - name: Push changes
+        if: steps.update-templates.outputs.CHANGES > 0
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ github.ref }}

.new-additions

@@ -1,70 +1,61 @@
-cves/2012/CVE-2012-0394.yaml
-cves/2020/CVE-2020-26248.yaml
-cves/2021/CVE-2021-3110.yaml
-cves/2021/CVE-2021-43421.yaml
-cves/2022/CVE-2022-1883.yaml
-cves/2022/CVE-2022-1916.yaml
-cves/2022/CVE-2022-1933.yaml
-cves/2022/CVE-2022-2034.yaml
-cves/2022/CVE-2022-25481.yaml
-cves/2022/CVE-2022-3506.yaml
-cves/2022/CVE-2022-45933.yaml
-default-logins/nsicg/nsicg-default-login.yaml
-default-logins/versa/versa-flexvnf-default-login.yaml
-exposed-panels/asus-router-panel.yaml
-exposed-panels/backpack/backpack-admin-panel.yaml
-exposed-panels/cisco/cisco-webvpn-detect.yaml
-exposed-panels/cudatel-panel.yaml
-exposed-panels/dqs-superadmin-panel.yaml
-exposed-panels/dradis-pro-panel.yaml
-exposed-panels/exolis-engage-panel.yaml
-exposed-panels/fastpanel-hosting-control-panel.yaml
-exposed-panels/flahscookie-superadmin-panel.yaml
-exposed-panels/locklizard-webviewer-panel.yaml
-exposed-panels/mach-proweb-login.yaml
-exposed-panels/mikrotik/mikrotik-routeros-old.yaml
-exposed-panels/nuxeo-platform-panel.yaml
-exposed-panels/opencart-panel.yaml
-exposed-panels/pega-web-panel.yaml
-exposed-panels/persis-panel.yaml
-exposed-panels/riseup-panel.yaml
-exposed-panels/superadmin-ui-panel.yaml
-exposed-panels/versa/versa-director-login.yaml
-exposed-panels/versa/versa-flexvnf-panel.yaml
-exposed-panels/vodafone-voxui-panel.yaml
-exposed-panels/zyxel-router-panel.yaml
-exposures/configs/sftp-config-exposure.yaml
-exposures/configs/sftp-deployment-config.yaml
-exposures/files/dbeaver-database-connections.yaml
-exposures/files/jetbrains-webservers.yaml
-exposures/files/npmrc-authtoken.yaml
-exposures/files/openstack-user-secrets.yaml
-exposures/logs/ffserver-status.yaml
-misconfiguration/collectd-exporter-metrics.yaml
-misconfiguration/installer/oxid-eshop-installer.yaml
-misconfiguration/libvirt-exporter-metrics.yaml
-misconfiguration/lvm-exporter-metrics.yaml
-misconfiguration/mysqld-exporter-metrics.yaml
-misconfiguration/namedprocess-exporter-metrics.yaml
-misconfiguration/postgres-exporter-metrics.yaml
-misconfiguration/rabbitmq-exporter-metrics.yaml
-misconfiguration/s3-torrent.yaml
-misconfiguration/symfony-fosjrouting-bundle.yaml
-misconfiguration/unauth-etherpad.yaml
-network/default-login/ldap-anonymous-login.yaml
-network/detection/dropbear-cbc-ciphers.yaml
-network/misconfig/dropbear-weakalgo.yaml
-network/misconfig/dropbear-weakmac.yaml
-takeovers/meteor-takeover.yaml
-technologies/aerocms-detect.yaml
-technologies/goliath-detect.yaml
-technologies/oracle-httpserver12c.yaml
-technologies/payara-micro-server-detect.yaml
-technologies/vbulletin-detect.yaml
-technologies/versa-flexvnf-server.yaml
-technologies/versa/versa-director-api.yaml
-technologies/versa/versa-networks-detect.yaml
-technologies/workerman-websocket-detect.yaml
-token-spray/api-giphy.yaml
-vulnerabilities/other/inspur-clusterengine-rce.yaml
-vulnerabilities/wordpress/wptouch-xss.yaml
+cves/2015/CVE-2015-2755.yaml
+cves/2015/CVE-2015-4062.yaml
+cves/2015/CVE-2015-4063.yaml
+cves/2015/CVE-2015-9312.yaml
+cves/2017/CVE-2017-14622.yaml
+cves/2018/CVE-2018-16159.yaml
+cves/2019/CVE-2019-5434.yaml
+cves/2021/CVE-2021-24145.yaml
+cves/2021/CVE-2021-24155.yaml
+cves/2021/CVE-2021-24169.yaml
+cves/2021/CVE-2021-24287.yaml
+cves/2021/CVE-2021-24347.yaml
+cves/2021/CVE-2021-24554.yaml
+cves/2021/CVE-2021-24875.yaml
+cves/2021/CVE-2021-24931.yaml
+cves/2021/CVE-2021-25067.yaml
+cves/2021/CVE-2021-27520.yaml
+cves/2022/CVE-2022-0693.yaml
+cves/2022/CVE-2022-0760.yaml
+cves/2022/CVE-2022-0949.yaml
+cves/2022/CVE-2022-1013.yaml
+cves/2022/CVE-2022-3934.yaml
+cves/2022/CVE-2022-4060.yaml
+cves/2022/CVE-2022-4063.yaml
+cves/2022/CVE-2022-4301.yaml
+cves/2022/CVE-2022-4306.yaml
+cves/2022/CVE-2022-45805.yaml
+cves/2022/CVE-2022-46888.yaml
+cves/2022/CVE-2022-48165.yaml
+cves/2022/CVE-2022-4897.yaml
+cves/2023/CVE-2023-23492.yaml
+exposed-panels/axway-securetransport-panel.yaml
+exposed-panels/axway-securetransport-webclient.yaml
+exposed-panels/dynatrace-panel.yaml
+exposed-panels/gnu-mailman.yaml
+exposed-panels/kubeview-dashboard.yaml
+exposed-panels/sensu-panel.yaml
+exposed-panels/signet-explorer-dashboard.yaml
+exposed-panels/wmw-enterprise-panel.yaml
+file/audit/pfsense/known-default-account.yaml
+misconfiguration/kubernetes/kube-state-metrics.yaml
+network/cves/2011/CVE-2011-2523.yaml
+osint/cal.yaml
+osint/ctflearn.yaml
+osint/npmjs.yaml
+osint/platzi.yaml
+osint/polywork.yaml
+osint/postnews.yaml
+osint/skillshare.yaml
+osint/tmdb.yaml
+osint/tryhackme.yaml
+ssl/mismatched-ssl-certificate.yaml
+technologies/ambassador-edge-stack-detect.yaml
+technologies/limesurvey-detect.yaml
+technologies/nimplant-c2.yaml
+technologies/wordpress/plugins/wpvivid-backuprestore.yaml
+vulnerabilities/cisco/cisco-cloudcenter-suite-rce.yaml
+vulnerabilities/discuz-downremoteimg-ssrf.yaml
+vulnerabilities/skywalking/skywalking-log4j-rce.yaml
+vulnerabilities/wordpress/3d-print-lite-xss.yaml
+vulnerabilities/wordpress/wp-touch-redirect.yaml

.nuclei-ignore

@@ -36,3 +36,4 @@ files:
   - vulnerabilities/generic/basic-xss-prober.yaml
   - vulnerabilities/oracle/oracle-ebs-xss.yaml
   - vulnerabilities/other/nginx-module-vts-xss.yaml
+  - exposures/files/svn-wc-db.yaml

.yamllint

@@ -3,7 +3,9 @@ extends: default
 
 ignore: |
   .pre-commit-config.yml
-  .github/workflows/*.yml
+  .github/
+  .git/
+  *.yml
 
 rules:
   document-start: disable
@@ -14,4 +16,6 @@ rules:
   comments:
     require-starting-space: true
     ignore-shebangs: true
-    min-spaces-from-content: 1
+    min-spaces-from-content: 1
+  empty-lines:
+    max: 5

README.md

@@ -40,20 +40,20 @@ An overview of the nuclei template project, including statistics on unique tags,
 
 ## Nuclei Templates Top 10 statistics
 
-|    TAG    | COUNT |    AUTHOR     | COUNT |    DIRECTORY     | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
-|-----------|-------|---------------|-------|------------------|-------|----------|-------|---------|-------|
-| cve       |  1538 | dhiyaneshdk   |   692 | cves             |  1516 | info     |  1631 | http    |  4257 |
-| panel     |   755 | daffainfo     |   662 | exposed-panels   |   757 | high     |  1141 | file    |    78 |
-| edb       |   578 | pikpikcu      |   340 | vulnerabilities  |   518 | medium   |   829 | network |    73 |
-| xss       |   537 | pdteam        |   274 | misconfiguration |   350 | critical |   546 | dns     |    17 |
-| exposure  |   536 | geeknik       |   197 | technologies     |   311 | low      |   269 |         |       |
-| lfi       |   519 | dwisiswant0   |   171 | exposures        |   301 | unknown  |    25 |         |       |
-| wordpress |   465 | 0x_akoko      |   170 | token-spray      |   235 |          |       |         |       |
-| cve2021   |   366 | pussycat0x    |   168 | workflows        |   190 |          |       |         |       |
-| wp-plugin |   360 | ritikchaddha  |   161 | default-logins   |   114 |          |       |         |       |
-| tech      |   349 | princechaddha |   153 | file             |    78 |          |       |         |       |
+|    TAG    | COUNT |    AUTHOR    | COUNT |    DIRECTORY     | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
+|-----------|-------|--------------|-------|------------------|-------|----------|-------|---------|-------|
+| cve       |  1617 | dwisiswant0  |   793 | cves             |  1597 | info     |  2673 | http    |  5422 |
+| panel     |   853 | dhiyaneshdk  |   731 | exposed-panels   |   842 | high     |  1176 | network |    86 |
+| wordpress |   695 | daffainfo    |   662 | osint            |   620 | medium   |   911 | file    |    84 |
+| osint     |   624 | pikpikcu     |   350 | technologies     |   549 | critical |   595 | dns     |    18 |
+| exposure  |   603 | pdteam       |   275 | vulnerabilities  |   538 | low      |   248 |         |       |
+| wp-plugin |   589 | geeknik      |   221 | misconfiguration |   414 | unknown  |    25 |         |       |
+| edb       |   588 | ricardomaia  |   212 | exposures        |   334 |          |       |         |       |
+| tech      |   586 | pussycat0x   |   211 | token-spray      |   239 |          |       |         |       |
+| xss       |   567 | ritikchaddha |   194 | workflows        |   190 |          |       |         |       |
+| lfi       |   526 | 0x_akoko     |   176 | default-logins   |   125 |          |       |         |       |
 
-**314 directories, 4660 files**.
+**344 directories, 6051 files**.
 
 </td>
 </tr>

TEMPLATES-STATS.json

@@ -1 +1 @@
-{"tags":[{"name":"cve","count":1538},{"name":"panel","count":755},{"name":"edb","count":578},{"name":"xss","count":537},{"name":"exposure","count":536},{"name":"lfi","count":519},{"name":"wordpress","count":465},{"name":"cve2021","count":366},{"name":"wp-plugin","count":360},{"name":"tech","count":349},{"name":"rce","count":345},{"name":"packetstorm","count":291},{"name":"cve2022","count":262},{"name":"wpscan","count":252},{"name":"token-spray","count":235},{"name":"misconfig","count":221},{"name":"cve2020","count":221},{"name":"","count":195},{"name":"unauth","count":194},{"name":"wp","count":182},{"name":"kev","count":167},{"name":"config","count":163},{"name":"cve2018","count":145},{"name":"cve2019","count":137},{"name":"joomla","count":135},{"name":"default-login","count":130},{"name":"oast","count":127},{"name":"apache","count":126},{"name":"iot","count":123},{"name":"authenticated","count":118},{"name":"sqli","count":115},{"name":"cve2010","count":111},{"name":"redirect","count":90},{"name":"router","count":90},{"name":"files","count":89},{"name":"login","count":88},{"name":"network","count":76},{"name":"devops","count":75},{"name":"takeover","count":74},{"name":"token","count":74},{"name":"ssrf","count":72},{"name":"cve2017","count":70},{"name":"cms","count":67},{"name":"auth-bypass","count":65},{"name":"file","count":65},{"name":"oracle","count":62},{"name":"intrusive","count":59},{"name":"install","count":58},{"name":"seclists","count":57},{"name":"disclosure","count":56},{"name":"oss","count":51},{"name":"cisco","count":49},{"name":"cve2016","count":49},{"name":"google","count":48},{"name":"fileupload","count":47},{"name":"cve2015","count":47},{"name":"adobe","count":45},{"name":"aem","count":42},{"name":"plugin","count":41},{"name":"cve2014","count":41},{"name":"vulhub","count":38},{"name":"atlassian","count":38},{"name":"vmware","count":38},{"name":"logs","count":37},{"name":"traversal","count":35},{"name":"springboot","count":35},{"name":"tenable","count":35},{"name":"hackerone","count":34},{"name":"injection","count":33},{"name":"jira","count":32},{"name":"listing","count":31},{"name":"debug","count":30},{"name":"kubernetes","count":29},{"name":"huntr","count":29},{"name":"generic","count":28},{"name":"dns","count":27},{"name":"log4j","count":26},{"name":"sap","count":25},{"name":"microsoft","count":25},{"name":"cnvd","count":25},{"name":"jndi","count":23},{"name":"proxy","count":23},{"name":"misc","count":23},{"name":"aws","count":22},{"name":"php","count":22},{"name":"fuzz","count":21},{"name":"zoho","count":21},{"name":"wp-theme","count":21},{"name":"manageengine","count":21},{"name":"cloud","count":20},{"name":"cve2012","count":20},{"name":"weblogic","count":20},{"name":"ibm","count":19},{"name":"tomcat","count":19},{"name":"camera","count":19},{"name":"cicd","count":19},{"name":"k8s","count":19},{"name":"api","count":19},{"name":"deserialization","count":19},{"name":"dlink","count":18},{"name":"gitlab","count":18},{"name":"service","count":17},{"name":"firewall","count":17},{"name":"wavlink","count":17},{"name":"jenkins","count":17},{"name":"struts","count":16},{"name":"printer","count":16},{"name":"ftp","count":16},{"name":"cve2011","count":15},{"name":"xxe","count":15},{"name":"cve2009","count":15},{"name":"nginx","count":15},{"name":"fortinet","count":14},{"name":"java","count":14},{"name":"hp","count":14},{"name":"android","count":14},{"name":"domainmod","count":14},{"name":"msf","count":13},{"name":"lfr","count":13},{"name":"magento","count":13},{"name":"amazon","count":13},{"name":"cve2013","count":13},{"name":"abstractapi","count":13},{"name":"woocommerce","count":13},{"name":"confluence","count":13},{"name":"status","count":13},{"name":"netsweeper","count":12},{"name":"drupal","count":12},{"name":"rails","count":12},{"name":"ruijie","count":12},{"name":"graphql","count":12},{"name":"netgear","count":12},{"name":"backup","count":12},{"name":"microweber","count":12},{"name":"cve2008","count":12},{"name":"github","count":12},{"name":"ssl","count":11},{"name":"airflow","count":11},{"name":"cisa","count":11},{"name":"azure","count":11},{"name":"vpn","count":11},{"name":"mail","count":11},{"name":"backdoor","count":11},{"name":"webserver","count":11},{"name":"fortigate","count":11},{"name":"cnvd2021","count":11},{"name":"glpi","count":10},{"name":"grafana","count":10},{"name":"git","count":10},{"name":"laravel","count":10},{"name":"ruby","count":10},{"name":"coldfusion","count":10},{"name":"zyxel","count":10},{"name":"django","count":10},{"name":"jolokia","count":10},{"name":"spring","count":10},{"name":"dell","count":10},{"name":"iis","count":9},{"name":"zimbra","count":9},{"name":"fastjson","count":9},{"name":"wso2","count":9},{"name":"kube","count":9},{"name":"prometheus","count":9},{"name":"phpmyadmin","count":9},{"name":"dedecms","count":9},{"name":"ssti","count":9},{"name":"windows","count":9},{"name":"zabbix","count":9},{"name":"vcenter","count":9},{"name":"sonicwall","count":9}Line truncated
+{"tags":[{"name":"cve","count":1617},{"name":"panel","count":853},{"name":"wordpress","count":695},{"name":"osint","count":624},{"name":"exposure","count":603},{"name":"wp-plugin","count":589},{"name":"edb","count":588},{"name":"tech","count":586},{"name":"xss","count":567},{"name":"lfi","count":526},{"name":"cve2021","count":383},{"name":"rce","count":364},{"name":"packetstorm","count":307},{"name":"cve2022","count":302},{"name":"wpscan","count":275},{"name":"misconfig","count":272},{"name":"token-spray","count":239},{"name":"cve2020","count":226},{"name":"unauth","count":220},{"name":"wp","count":208},{"name":"top-200","count":202},{"name":"","count":195},{"name":"osint-social","count":194},{"name":"config","count":179},{"name":"kev","count":178},{"name":"cve2018","count":149},{"name":"iot","count":145},{"name":"default-login","count":142},{"name":"cve2019","count":138},{"name":"joomla","count":136},{"name":"oast","count":136},{"name":"apache","count":135},{"name":"authenticated","count":133},{"name":"sqli","count":131},{"name":"cve2010","count":112},{"name":"login","count":104},{"name":"files","count":101},{"name":"top-100","count":100},{"name":"redirect","count":96},{"name":"router","count":96},{"name":"network","count":90},{"name":"token","count":83},{"name":"ssrf","count":78},{"name":"devops","count":76},{"name":"takeover","count":74},{"name":"file","count":73},{"name":"cve2017","count":73},{"name":"cms","count":73},{"name":"auth-bypass","count":69},{"name":"install","count":68},{"name":"oracle","count":64},{"name":"disclosure","count":63},{"name":"intrusive","count":62},{"name":"seclists","count":59},{"name":"oss","count":52},{"name":"cisco","count":50},{"name":"cve2016","count":49},{"name":"google","count":49},{"name":"fileupload","count":48},{"name":"cve2015","count":48},{"name":"adobe","count":46},{"name":"osint-gaming","count":45},{"name":"logs","count":44},{"name":"aem","count":43},{"name":"hackerone","count":42},{"name":"osint-hobby","count":42},{"name":"osint-porn","count":42},{"name":"vmware","count":41},{"name":"plugin","count":41},{"name":"cve2014","count":41},{"name":"debug","count":40},{"name":"atlassian","count":40},{"name":"tenable","count":39},{"name":"vulhub","count":38},{"name":"traversal","count":36},{"name":"springboot","count":36},{"name":"injection","count":35},{"name":"osint-misc","count":35},{"name":"generic","count":34},{"name":"jira","count":33},{"name":"listing","count":32},{"name":"huntr","count":32},{"name":"kubernetes","count":31},{"name":"osint-tech","count":28},{"name":"dns","count":28},{"name":"sap","count":27},{"name":"osint-coding","count":27},{"name":"aws","count":26},{"name":"log4j","count":26},{"name":"cnvd","count":25},{"name":"misc","count":25},{"name":"microsoft","count":25},{"name":"osint-images","count":24},{"name":"osint-shopping","count":24},{"name":"osint-finance","count":24},{"name":"proxy","count":24},{"name":"jndi","count":23},{"name":"osint-business","count":23},{"name":"zoho","count":23},{"name":"manageengine","count":23},{"name":"php","count":23},{"name":"fuzz","count":22},{"name":"cloud","count":21},{"name":"wp-theme","count":21},{"name":"cve2012","count":21},{"name":"api","count":21},{"name":"weblogic","count":20},{"name":"tomcat","count":20},{"name":"cicd","count":20},{"name":"ibm","count":20},{"name":"deserialization","count":20},{"name":"k8s","count":20},{"name":"msf","count":19},{"name":"struts","count":19},{"name":"dlink","count":19},{"name":"gitlab","count":19},{"name":"camera","count":19},{"name":"osint-music","count":18},{"name":"fortinet","count":18},{"name":"wavlink","count":17},{"name":"firewall","count":17},{"name":"service","count":17},{"name":"jenkins","count":17},{"name":"ftp","count":17},{"name":"osint-blog","count":16},{"name":"amazon","count":16},{"name":"printer","count":16},{"name":"admin","count":16},{"name":"cve2011","count":15},{"name":"lfr","count":15},{"name":"status","count":15},{"name":"xxe","count":15},{"name":"backup","count":15},{"name":"android","count":15},{"name":"cve2009","count":15},{"name":"nginx","count":15},{"name":"hp","count":14},{"name":"osint-health","count":14},{"name":"domainmod","count":14},{"name":"osint-art","count":14},{"name":"github","count":14},{"name":"jboss","count":14},{"name":"java","count":14},{"name":"confluence","count":13},{"name":"abstractapi","count":13},{"name":"magento","count":13},{"name":"cve2008","count":13},{"name":"osint-dating","count":13},{"name":"osint-political","count":13},{"name":"woocommerce","count":13},{"name":"fortigate","count":13},{"name":"cve2013","count":13},{"name":"rails","count":12},{"name":"drupal","count":12},{"name":"mail","count":12},{"name":"netsweeper","count":12},{"name":"microweber","count":12},{"name":"zyxel","count":12},{"name":"vpn","count":12},{"name":"netgear","count":12},{"name":"webserver","count":12},{"name":"ruijie","count":12},{"name":"graphql","count":12},{"name":"setup","count":11},{"name":"cnvd2021","count":11},{"name":"airflow","count":11},{"Line truncated

TOP-10.md

@@ -1,12 +1,12 @@
-|    TAG    | COUNT |    AUTHOR     | COUNT |    DIRECTORY     | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
-|-----------|-------|---------------|-------|------------------|-------|----------|-------|---------|-------|
-| cve       |  1538 | dhiyaneshdk   |   692 | cves             |  1516 | info     |  1631 | http    |  4257 |
-| panel     |   755 | daffainfo     |   662 | exposed-panels   |   757 | high     |  1141 | file    |    78 |
-| edb       |   578 | pikpikcu      |   340 | vulnerabilities  |   518 | medium   |   829 | network |    73 |
-| xss       |   537 | pdteam        |   274 | misconfiguration |   350 | critical |   546 | dns     |    17 |
-| exposure  |   536 | geeknik       |   197 | technologies     |   311 | low      |   269 |         |       |
-| lfi       |   519 | dwisiswant0   |   171 | exposures        |   301 | unknown  |    25 |         |       |
-| wordpress |   465 | 0x_akoko      |   170 | token-spray      |   235 |          |       |         |       |
-| cve2021   |   366 | pussycat0x    |   168 | workflows        |   190 |          |       |         |       |
-| wp-plugin |   360 | ritikchaddha  |   161 | default-logins   |   114 |          |       |         |       |
-| tech      |   349 | princechaddha |   153 | file             |    78 |          |       |         |       |
+|    TAG    | COUNT |    AUTHOR    | COUNT |    DIRECTORY     | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
+|-----------|-------|--------------|-------|------------------|-------|----------|-------|---------|-------|
+| cve       |  1617 | dwisiswant0  |   793 | cves             |  1597 | info     |  2673 | http    |  5422 |
+| panel     |   853 | dhiyaneshdk  |   731 | exposed-panels   |   842 | high     |  1176 | network |    86 |
+| wordpress |   695 | daffainfo    |   662 | osint            |   620 | medium   |   911 | file    |    84 |
+| osint     |   624 | pikpikcu     |   350 | technologies     |   549 | critical |   595 | dns     |    18 |
+| exposure  |   603 | pdteam       |   275 | vulnerabilities  |   538 | low      |   248 |         |       |
+| wp-plugin |   589 | geeknik      |   221 | misconfiguration |   414 | unknown  |    25 |         |       |
+| edb       |   588 | ricardomaia  |   212 | exposures        |   334 |          |       |         |       |
+| tech      |   586 | pussycat0x   |   211 | token-spray      |   239 |          |       |         |       |
+| xss       |   567 | ritikchaddha |   194 | workflows        |   190 |          |       |         |       |
+| lfi       |   526 | 0x_akoko     |   176 | default-logins   |   125 |          |       |         |       |

cnvd/2022/CNVD-2022-03672.yaml

@@ -34,7 +34,7 @@ requests:
         internal: true
         group: 1
         regex:
-          - '"verify_string":"(.*)"'
+          - '"verify_string":"(.*?)"'
 
     req-condition: true
     matchers:

cves/2007/CVE-2007-4504.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! RSfiles 1.0.2 and earlier is susceptible to local file inclusion in index.php in the RSfiles component (com_rsfiles). This could allow remote attackers to arbitrarily read files via a .. (dot dot) in the path parameter in a files.display action.
   reference:
     - https://www.exploit-db.com/exploits/4307
-    - https://www.cvedetails.com/cve/CVE-2007-4504
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/36222
     - https://nvd.nist.gov/vuln/detail/CVE-2007-4504
   classification:

cves/2008/CVE-2008-4668.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! Image Browser 0.1.5 rc2 is susceptible to local file inclusion via com_imagebrowser which could allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/6618
-    - https://www.cvedetails.com/cve/CVE-2008-4668
     - http://web.archive.org/web/20210121183742/https://www.securityfocus.com/bid/31458/
     - http://securityreason.com/securityalert/4464
     - https://nvd.nist.gov/vuln/detail/CVE-2008-4668

cves/2008/CVE-2008-4764.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! 2.0.0 RC2 and earlier are susceptible to local file inclusion in the eXtplorer module (com_extplorer) that allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter in a show_error action.
   reference:
     - https://www.exploit-db.com/exploits/5435
-    - https://www.cvedetails.com/cve/CVE-2008-4764
     - http://web.archive.org/web/20210121181347/https://www.securityfocus.com/bid/28764/
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/41873
     - https://nvd.nist.gov/vuln/detail/CVE-2008-4764

cves/2008/CVE-2008-6080.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! ionFiles 4.4.2 is susceptible to local file inclusion in download.php in the ionFiles (com_ionfiles) that allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
   reference:
     - https://www.exploit-db.com/exploits/6809
-    - https://www.cvedetails.com/cve/CVE-2008-6080
     - http://web.archive.org/web/20140804231654/http://secunia.com/advisories/32377/
     - http://web.archive.org/web/20210121184101/https://www.securityfocus.com/bid/31877/
     - https://nvd.nist.gov/vuln/detail/CVE-2008-6080

cves/2008/CVE-2008-6172.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla! when magic_quotes_gpc is disabled allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.
   reference:
     - https://www.exploit-db.com/exploits/6817
-    - https://www.cvedetails.com/cve/CVE-2008-6172
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-6172
     - http://web.archive.org/web/20140804232841/http://secunia.com/advisories/32367/
     - http://web.archive.org/web/20210121184108/https://www.securityfocus.com/bid/31892/
   classification:

cves/2008/CVE-2008-6222.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/6980
-    - https://www.cvedetails.com/cve/CVE-2008-6222
     - http://web.archive.org/web/20111223225601/http://secunia.com/advisories/32523/
     - http://web.archive.org/web/20210121184244/https://www.securityfocus.com/bid/32113/
     - https://nvd.nist.gov/vuln/detail/CVE-2008-6222

cves/2008/CVE-2008-6465.yaml

@@ -1,18 +1,21 @@
 id: CVE-2008-6465
 
 info:
-  name: Parallels H-Sphere - Cross Site Scripting
+  name: Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting
   author: edoardottt
   severity: medium
   description: |
-    Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters.
+    Parallels H-Sphere 3.0.0 P9 and 3.1 P1 contains multiple cross-site scripting vulnerabilities in login.php in webshell4. An attacker can inject arbitrary web script or HTML via the err, errorcode, and login parameters, thus allowing theft of cookie-based authentication credentials and launch of other attacks.
   reference:
     - http://www.xssing.com/index.php?x=3&y=65
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/45254
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/45252
     - https://nvd.nist.gov/vuln/detail/CVE-2008-6465
   classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 5.4
     cve-id: CVE-2008-6465
+    cwe-id: CWE-80
   metadata:
     verified: true
     shodan-query: title:"Parallels H-Sphere
@@ -40,3 +43,5 @@ requests:
       - type: status
         status:
           - 200
+
+# Enhanced by md on 2022/12/08

cves/2009/CVE-2009-2015.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! Ideal MooFAQ 1.0 via com_moofaq allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter (local file inclusion).
   reference:
     - https://www.exploit-db.com/exploits/8898
-    - https://www.cvedetails.com/cve/CVE-2009-2015
     - http://web.archive.org/web/20210121191105/https://www.securityfocus.com/bid/35259/
     - http://www.vupen.com/english/advisories/2009/1530
     - https://nvd.nist.gov/vuln/detail/CVE-2009-2015

cves/2009/CVE-2009-2100.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! JoomlaPraise Projectfork (com_projectfork) 2.0.10 allows remote attackers to read arbitrary files via local file inclusion in the section parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/8946
-    - https://www.cvedetails.com/cve/CVE-2009-2100
     - http://web.archive.org/web/20210121191226/https://www.securityfocus.com/bid/35378/
     - https://nvd.nist.gov/vuln/detail/CVE-2009-2100
 

cves/2009/CVE-2009-3053.yaml

@@ -7,7 +7,6 @@ info:
   description: Joomla! Agora 3.0.0b (com_agora) allows remote attackers to include and execute arbitrary local files via local file inclusion in the action parameter to the avatars page, reachable through index.php.
   reference:
     - https://www.exploit-db.com/exploits/9564
-    - https://www.cvedetails.com/cve/CVE-2009-3053
     - https://web.archive.org/web/20210120183330/https://www.securityfocus.com/bid/36207/
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/52964
     - https://nvd.nist.gov/vuln/detail/CVE-2009-3053

cves/2009/CVE-2009-3318.yaml

@@ -7,9 +7,9 @@ info:
   description: Joomla! Roland Breedveld Album 1.14 (com_album) is susceptible to local file inclusion because it allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/9706
-    - https://www.cvedetails.com/cve/CVE-2009-3318
     - https://nvd.nist.gov/vuln/detail/CVE-2009-3318
     - https://web.archive.org/web/20210121192413/https://www.securityfocus.com/bid/36441/
+    - http://www.exploit-db.com/exploits/9706
   classification:
     cve-id: CVE-2009-3318
   tags: joomla,lfi,edb,cve,cve2009

cves/2009/CVE-2009-4679.yaml

@@ -8,9 +8,9 @@ info:
     Joomla! Portfolio Nexus 1.5 contains a remote file inclusion vulnerability in the inertialFATE iF (com_if_nexus) component that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/33440
-    - https://www.cvedetails.com/cve/CVE-2009-4679
     - https://nvd.nist.gov/vuln/detail/CVE-2009-4679
     - http://web.archive.org/web/20140722130146/http://secunia.com/advisories/37760/
+    - http://www.exploit-db.com/exploits/10754
   classification:
     cve-id: CVE-2009-4679
   tags: cve,cve2009,joomla,lfi,nexus,edb

cves/2009/CVE-2009-5020.yaml

@@ -26,6 +26,6 @@ requests:
       - type: regex
         part: header
         regex:
-          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$'  # https://regex101.com/r/ZDYhFh/1
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1
 
 # Enhanced by mp on 2022/02/13

cves/2009/CVE-2009-5114.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter.
   reference:
     - https://www.exploit-db.com/exploits/36994
-    - https://www.cvedetails.com/cve/CVE-2009-5114
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-5114
     - http://websecurity.com.ua/2628/
     - https://exchange.xforce.ibmcloud.com/vulnerabilities/74321
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-0157.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter in a studieslist action to index.php.
   reference:
     - https://www.exploit-db.com/exploits/10943
-    - https://www.cvedetails.com/cve/CVE-2010-0157
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0157
     - http://web.archive.org/web/20151023032409/http://secunia.com/advisories/37896/
     - http://packetstormsecurity.org/1001-exploits/joomlabiblestudy-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-0467.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11282
-    - https://www.cvedetails.com/cve/CVE-2010-0467
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0467
     - http://web.archive.org/web/20210121194037/https://www.securityfocus.com/bid/37987/
     - http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html
   remediation: Apply all relevant security patches and upgrades.

cves/2010/CVE-2010-0696.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.
   reference:
     - https://www.exploit-db.com/exploits/11447
-    - https://www.cvedetails.com/cve/CVE-2010-0696
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0696
     - http://web.archive.org/web/20140805102632/http://secunia.com/advisories/38587/
     - http://www.joomlaworks.gr/content/view/77/34/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-0759.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter.
   reference:
     - https://www.exploit-db.com/exploits/11498
-    - https://www.cvedetails.com/cve/CVE-2010-0759
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0759
     - http://web.archive.org/web/20151104183037/http://secunia.com/advisories/38637/
     - http://web.archive.org/web/20210121194344/https://www.securityfocus.com/bid/38296/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-0942.yaml

@@ -7,7 +7,7 @@ info:
   description: Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11089
-    - https://www.cvedetails.com/cve/CVE-2010-0942
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0942
     - http://packetstormsecurity.org/1001-exploits/joomlajvideodirect-traversal.txt
   remediation: Apply all relevant security patches and product upgrades.
   classification:

cves/2010/CVE-2010-0943.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11090
-    - https://www.cvedetails.com/cve/CVE-2010-0943
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0943
     - http://web.archive.org/web/20210121193737/https://www.securityfocus.com/bid/37692/
     - http://web.archive.org/web/20140724215426/http://secunia.com/advisories/33486/
   classification:

cves/2010/CVE-2010-0944.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11088
-    - https://www.cvedetails.com/cve/CVE-2010-0944
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0944
     - http://packetstormsecurity.org/1001-exploits/joomlajcollection-traversal.txt
     - http://www.exploit-db.com/exploits/11088
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-0972.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11738
-    - https://www.cvedetails.com/cve/CVE-2010-0972
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0972
     - http://web.archive.org/web/20140804152652/http://secunia.com/advisories/38925/
     - http://www.exploit-db.com/exploits/11738
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-0982.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/10942
-    - https://www.cvedetails.com/cve/CVE-2010-0982
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0982
     - http://web.archive.org/web/20210121193625/https://www.securityfocus.com/bid/37581/
     - http://web.archive.org/web/20151104182451/http://secunia.com/advisories/37917/
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-0985.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/10948
-    - https://www.cvedetails.com/cve/CVE-2010-0985
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0985
     - http://web.archive.org/web/20210623092041/https://www.securityfocus.com/bid/37560
     - http://www.exploit-db.com/exploits/10948
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-1056.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11760
-    - https://www.cvedetails.com/cve/CVE-2010-1056
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1056
     - http://web.archive.org/web/20210121194803/https://www.securityfocus.com/bid/38741/
     - http://web.archive.org/web/20151023104850/http://secunia.com/advisories/38982/
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-1081.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11511
-    - https://www.cvedetails.com/cve/CVE-2010-1081
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1081
     - http://www.corejoomla.com/component/content/article/1-corejoomla-updates/40-community-polls-v153-security-release.html
   remediation: Apply all relevant security patches and product upgrades.
   classification:

cves/2010/CVE-2010-1217.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the affected product is JE Tooltip, not Form Creator; however, the exploit URL suggests that Form Creator is affected.
   reference:
     - https://www.exploit-db.com/exploits/11814
-    - https://www.cvedetails.com/cve/CVE-2010-1217
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1217
     - http://www.packetstormsecurity.org/1003-exploits/joomlajetooltip-lfi.txt
     - http://web.archive.org/web/20210624111408/https://www.securityfocus.com/bid/38866
   remediation: Apply all relevant security patches and product upgrades.

cves/2010/CVE-2010-1219.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11757
-    - https://www.cvedetails.com/cve/CVE-2010-1219
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1219
     - http://web.archive.org/web/20161009134632/http://secunia.com/advisories/38952
     - http://web.archive.org/web/20210617075625/https://www.securityfocus.com/bid/38746
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1302.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11978
-    - https://www.cvedetails.com/cve/CVE-2010-1302
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1302
     - http://web.archive.org/web/20210121195144/https://www.securityfocus.com/bid/39108/
     - http://web.archive.org/web/20140805062036/http://secunia.com/advisories/39200/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1304.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11998
-    - https://www.cvedetails.com/cve/CVE-2010-1304
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1304
     - http://web.archive.org/web/20210518080735/https://www.securityfocus.com/bid/39174
     - http://www.exploit-db.com/exploits/11998
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1305.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12065
-    - https://www.cvedetails.com/cve/CVE-2010-1305
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1305
     - http://extensions.joomla.org/extensions/e-commerce/shopping-cart/7951
     - http://web.archive.org/web/20140806165126/http://secunia.com/advisories/39351/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1306.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12058
-    - https://www.cvedetails.com/cve/CVE-2010-1306
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1306
     - http://web.archive.org/web/20140805134149/http://secunia.com/advisories/39338/
     - http://web.archive.org/web/20210121195240/https://www.securityfocus.com/bid/39200/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1307.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12070
-    - https://www.cvedetails.com/cve/CVE-2010-1307
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1307
     - http://web.archive.org/web/20140806154402/http://secunia.com/advisories/39348/
     - http://www.vupen.com/english/advisories/2010/0806
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1308.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12066
-    - https://www.cvedetails.com/cve/CVE-2010-1308
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1308
     - http://www.vupen.com/english/advisories/2010/0809
   remediation: Upgrade to a supported version.
   classification:

cves/2010/CVE-2010-1312.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12077
-    - https://www.cvedetails.com/cve/CVE-2010-1312
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1312
     - http://web.archive.org/web/20140724200344/http://secunia.com/advisories/39289/
     - http://packetstormsecurity.org/1004-exploits/joomlanewportal-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1313.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12082
-    - https://www.cvedetails.com/cve/CVE-2010-1313
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1313
     - http://web.archive.org/web/20210121195302/https://www.securityfocus.com/bid/39237/
     - http://www.exploit-db.com/exploits/12082
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1314.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12086
-    - https://www.cvedetails.com/cve/CVE-2010-1314
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1314
     - http://web.archive.org/web/20140724203458/http://secunia.com/advisories/39359/
     - http://packetstormsecurity.org/1004-exploits/joomlahsconfig-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1315.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1.x before 1.06.02 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/11999
-    - https://www.cvedetails.com/cve/CVE-2010-1315
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1315
     - http://web.archive.org/web/20140801092842/http://secunia.com/advisories/39209/
     - http://packetstormsecurity.org/1004-exploits/joomlaweberpcustomer-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1340.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/33797
-    - https://www.cvedetails.com/cve/CVE-2010-1340
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1340
     - http://web.archive.org/web/20210121195000/https://www.securityfocus.com/bid/38917/
     - http://packetstormsecurity.org/1003-exploits/joomlajresearch-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1345.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/15453
-    - https://www.cvedetails.com/cve/CVE-2010-1345
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1345
     - http://www.exploit-db.com/exploits/11785
   remediation: Upgrade to a supported version.
   classification:

cves/2010/CVE-2010-1352.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12084
-    - https://www.cvedetails.com/cve/CVE-2010-1352
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1352
     - http://web.archive.org/web/20140724194110/http://secunia.com/advisories/39357/
     - http://packetstormsecurity.org/1004-exploits/joomlajukebox-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1353.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12068
-    - https://www.cvedetails.com/cve/CVE-2010-1353
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1353
     - http://web.archive.org/web/20210121195246/https://www.securityfocus.com/bid/39212/
     - http://www.vupen.com/english/advisories/2010/0808
   classification:

cves/2010/CVE-2010-1354.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12102
-    - https://www.cvedetails.com/cve/CVE-2010-1354
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1354
     - http://packetstormsecurity.org/1004-exploits/joomlavjdeo-lfi.txt
     - http://web.archive.org/web/20140724190841/http://secunia.com/advisories/39296/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1429.yaml

@@ -0,0 +1,41 @@
+id: CVE-2010-1429
+
+info:
+  name: Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure
+  author: R12W4N
+  severity: medium
+  description: |
+    Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string. NOTE: this issue exists because of a CVE-2008-3273 regression.
+  reference:
+    - https://rhn.redhat.com/errata/RHSA-2010-0377.html
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1429
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-3273
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
+    cvss-score: 5.3
+    cve-id: CVE-2010-1429
+    cwe-id: CWE-200
+  metadata:
+    shodan-query: title:"JBoss"
+    verified: "true"
+  tags: cve,cve2010,jboss,eap,tomcat,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/status?full=true"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "JVM"
+          - "memory"
+          - "localhost/"
+        condition: and
+
+      - type: status
+        status:
+          - 200
+
+# Enhanced by md on 2023/01/30

cves/2010/CVE-2010-1461.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12232
-    - https://www.cvedetails.com/cve/CVE-2010-1461
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1461
     - http://web.archive.org/web/20210518110953/https://www.securityfocus.com/bid/39504
     - http://www.exploit-db.com/exploits/12232
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1469.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12146
-    - https://www.cvedetails.com/cve/CVE-2010-1469
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1469
     - http://packetstormsecurity.org/1004-exploits/joomlajprojectmanager-lfi.txt
     - http://www.exploit-db.com/exploits/12146
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1470.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and have possibly other unspecified impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12166
-    - https://www.cvedetails.com/cve/CVE-2010-1470
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1470
     - http://web.archive.org/web/20140723205548/http://secunia.com/advisories/39405/
     - http://www.exploit-db.com/exploits/12166
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1471.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12170
-    - https://www.cvedetails.com/cve/CVE-2010-1471
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1471
     - http://www.vupen.com/english/advisories/2010/0862
   classification:
     cve-id: CVE-2010-1471

cves/2010/CVE-2010-1472.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12167
-    - https://www.cvedetails.com/cve/CVE-2010-1472
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1472
     - http://web.archive.org/web/20140723200143/http://secunia.com/advisories/39406/
     - http://www.exploit-db.com/exploits/12167
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1473.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12171
-    - https://www.cvedetails.com/cve/CVE-2010-1473
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1473
     - http://packetstormsecurity.org/1004-exploits/joomlaeasyadbanner-lfi.txt
     - http://web.archive.org/web/20140723213338/http://secunia.com/advisories/39410/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1474.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12182
-    - https://www.cvedetails.com/cve/CVE-2010-1474
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1474
     - http://web.archive.org/web/20140723205926/http://secunia.com/advisories/39388/
     - http://www.exploit-db.com/exploits/12182
   classification:

cves/2010/CVE-2010-1475.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12147
-    - https://www.cvedetails.com/cve/CVE-2010-1475
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1475
     - http://web.archive.org/web/20140723203010/http://secunia.com/advisories/39285/
     - http://www.exploit-db.com/exploits/12147
   classification:

cves/2010/CVE-2010-1476.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the view parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12150
-    - https://www.cvedetails.com/cve/CVE-2010-1476
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1476
     - http://packetstormsecurity.org/1004-exploits/joomlaalphauserpoints-lfi.txt
     - http://www.alphaplug.com/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1478.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12145
-    - https://www.cvedetails.com/cve/CVE-2010-1478
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1478
     - http://web.archive.org/web/20140723205157/http://secunia.com/advisories/39262/
     - http://web.archive.org/web/20210121195422/https://www.securityfocus.com/bid/39390/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1491.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12318
-    - https://www.cvedetails.com/cve/CVE-2010-1491
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1491
     - http://packetstormsecurity.org/1004-exploits/joomlammsblog-lfi.txt
     - http://web.archive.org/web/20140724060325/http://secunia.com/advisories/39533/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1494.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12113
-    - https://www.cvedetails.com/cve/CVE-2010-1494
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1494
     - http://www.exploit-db.com/exploits/12113
   remediation: Upgrade to a supported version.
   classification:

cves/2010/CVE-2010-1495.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12286
-    - https://www.cvedetails.com/cve/CVE-2010-1495
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1495
     - http://www.vupen.com/english/advisories/2010/0929
     - http://packetstormsecurity.org/1004-exploits/joomlamatamko-lfi.txt
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1531.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12054
-    - https://www.cvedetails.com/cve/CVE-2010-1531
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1531
     - http://packetstormsecurity.org/1004-exploits/joomlaredshop-lfi.txt
   remediation: Upgrade to a supported version.
   classification:

cves/2010/CVE-2010-1532.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12118
-    - https://www.cvedetails.com/cve/CVE-2010-1532
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1532
     - http://packetstormsecurity.org/1004-exploits/joomlapowermail-lfi.txt
     - http://web.archive.org/web/20210127202836/https://www.securityfocus.com/bid/39348/
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1533.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12142
-    - https://www.cvedetails.com/cve/CVE-2010-1533
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1533
     - http://web.archive.org/web/20140723212810/http://secunia.com/advisories/39258/
     - http://www.exploit-db.com/exploits/12142
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1534.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12067
-    - https://www.cvedetails.com/cve/CVE-2010-1534
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1534
     - http://web.archive.org/web/20210121195246/https://www.securityfocus.com/bid/39213/
     - http://web.archive.org/web/20140724182459/http://secunia.com/advisories/39352/
   remediation: Upgrade to a supported version

cves/2010/CVE-2010-1535.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12151
-    - https://www.cvedetails.com/cve/CVE-2010-1535
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1535
     - http://web.archive.org/web/20140725030342/http://secunia.com/advisories/39254/
     - http://www.exploit-db.com/exploits/12151
   classification:

cves/2010/CVE-2010-1540.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in index.php in the MyBlog (com_myblog) component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the task parameter.
   reference:
     - https://www.exploit-db.com/exploits/11625
-    - https://www.cvedetails.com/cve/CVE-2010-1540
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1540
     - http://web.archive.org/web/20140721042709/http://secunia.com/advisories/38777/
     - http://web.archive.org/web/20210121194559/https://www.securityfocus.com/bid/38530/
   classification:

cves/2010/CVE-2010-1601.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12236
-    - https://www.cvedetails.com/cve/CVE-2010-1601
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1601
     - http://web.archive.org/web/20140803084823/http://secunia.com/advisories/39472/
     - http://packetstormsecurity.org/1004-exploits/joomlajacomment-lfi.txt
   classification:

cves/2010/CVE-2010-1602.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12283
-    - https://www.cvedetails.com/cve/CVE-2010-1602
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1602
     - http://packetstormsecurity.org/1004-exploits/joomlazimbcomment-lfi.txt
   classification:
     cve-id: CVE-2010-1602

cves/2010/CVE-2010-1603.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12284
-    - https://www.cvedetails.com/cve/CVE-2010-1603
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1603
     - http://web.archive.org/web/20210518112730/https://www.securityfocus.com/bid/39546
     - http://www.vupen.com/english/advisories/2010/0931
   remediation: Upgrade to a supported version.

cves/2010/CVE-2010-1607.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12316
-    - https://www.cvedetails.com/cve/CVE-2010-1607
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1607
     - http://web.archive.org/web/20210121195713/https://www.securityfocus.com/bid/39608/
     - http://web.archive.org/web/20111227231442/http://secunia.com/advisories/39539/
   classification:

cves/2010/CVE-2010-1653.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12430
-    - https://www.cvedetails.com/cve/CVE-2010-1653
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1653
     - http://packetstormsecurity.org/1004-exploits/joomlagraphics-lfi.txt
     - http://web.archive.org/web/20210121195909/https://www.securityfocus.com/bid/39743/
   classification:

cves/2010/CVE-2010-1658.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12427
-    - https://www.cvedetails.com/cve/CVE-2010-1658
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1658
     - http://www.vupen.com/english/advisories/2010/1007
   classification:
     cve-id: CVE-2010-1658

cves/2010/CVE-2010-1714.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12168
-    - https://www.cvedetails.com/cve/CVE-2010-1714
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1714
     - http://packetstormsecurity.org/1004-exploits/joomlaarcadegames-lfi.txt
     - http://web.archive.org/web/20140723192327/http://secunia.com/advisories/39413/
   classification:

cves/2010/CVE-2010-1715.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12174
-    - https://www.cvedetails.com/cve/CVE-2010-1715
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1715
     - http://packetstormsecurity.org/1004-exploits/joomlaonlineexam-lfi.txt
   classification:
     cve-id: CVE-2010-1715

cves/2010/CVE-2010-1717.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12291
-    - https://www.cvedetails.com/cve/CVE-2010-1717
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1717
     - http://web.archive.org/web/20140805095004/http://secunia.com/advisories/39526/
     - http://www.vupen.com/english/advisories/2010/0924
   classification:

cves/2010/CVE-2010-1718.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12282
-    - https://www.cvedetails.com/cve/CVE-2010-1718
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1718
     - http://web.archive.org/web/20140805094212/http://secunia.com/advisories/39521/
     - http://web.archive.org/web/20210121195621/https://www.securityfocus.com/bid/39545/
   classification:

cves/2010/CVE-2010-1719.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12233
-    - https://www.cvedetails.com/cve/CVE-2010-1719
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1719
     - http://www.exploit-db.com/exploits/12233
   classification:
     cve-id: CVE-2010-1719

cves/2010/CVE-2010-1722.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12177
-    - https://www.cvedetails.com/cve/CVE-2010-1722
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1722
     - http://web.archive.org/web/20140723201810/http://secunia.com/advisories/39409/
     - http://www.exploit-db.com/exploits/12177
   classification:

cves/2010/CVE-2010-1723.yaml

@@ -7,7 +7,7 @@ info:
   description: A directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
   reference:
     - https://www.exploit-db.com/exploits/12289
-    - https://www.cvedetails.com/cve/CVE-2010-1723
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-1723
     - http://web.archive.org/web/20140805101847/http://secunia.com/advisories/39524/
     - http://www.exploit-db.com/exploits/12289
   classification: