fix minor issue

fix issue from yamllint.
patch-1
toufik-airane 2020-08-27 18:19:24 +02:00
parent 58d0e08739
commit 0896fc82f9
No known key found for this signature in database
GPG Key ID: AE64332177735A5F
4 changed files with 6 additions and 9 deletions

View File

@ -4,10 +4,7 @@ info:
name: Oracle Content Server XSS
author: madrobot
severity: medium
description:
The vulnerability can be used to include
HTML- or JavaScript code to the affected web page. The code is executed
in the browser of users if they visit the manipulated site.
description: The vulnerability can be used to include HTML or JavaScript code to the affected web page. The code is executed in the browser of users if they visit the manipulated site.
requests:
- method: GET

View File

@ -3,7 +3,7 @@ info:
author: "Random Robbie"
name: "Struts2 RCE "
severity: critical
description: Struts is vulnerable to remote command injection attacks through incorrectly parsing an attackers invalid Content-Type HTTP header. The Struts vulnerability allows these commands to be executed under the privileges of the Web server.
description: Struts is vulnerable to remote command injection attacks through incorrectly parsing an attackers invalid Content-Type HTTP header. The Struts vulnerability allows these commands to be executed under the privileges of the Web server.
# This template supports the detection part only.
# Do not test any website without permission

View File

@ -4,7 +4,7 @@ info:
name: Nuxeo Authentication Bypass Remote Code Execution
author: madrobot
severity: high
description: Nuxeo Authentication Bypass Remote Code Execution < 103 using a SSTI
description: Nuxeo Authentication Bypass Remote Code Execution < 103 using a SSTI
requests:
- method: GET
path:

View File

@ -15,9 +15,9 @@ info:
requests:
- payloads:
command:
- "systeminfo" # Windows
- "lsb_release -a" # Linux
- "sysctl kern.ostype" # macOS
- "systeminfo" # Windows
- "lsb_release -a" # Linux
- "sysctl kern.ostype" # macOS
port:
- "80"
- "443"