Merge pull request #9189 from projectdiscovery/mass-cpe-add

Add mass vendor and product details to exposed-panel templates
2024-02-28 22:03:34 +05:30 · 2024-02-28 22:03:34 +05:30 · 28f7eb0db1
parent aebb9e678b e3985e8dbd
commit 28f7eb0db1
478 changed files with 1124 additions and 295 deletions
--- a/http/exposed-panels/3cx-phone-management-panel.yaml
+++ b/http/exposed-panels/3cx-phone-management-panel.yaml
@ -14,6 +14,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: 3cx
+    product: 3cx
    max-request: 1
    shodan-query:
      - http.title:"3CX Phone System Management Console"
--- a/http/exposed-panels/3cx-phone-webclient-management-panel.yaml
+++ b/http/exposed-panels/3cx-phone-webclient-management-panel.yaml
@ -14,6 +14,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: 3cx
+    product: 3cx
    max-request: 1
    shodan-query: http.title:"3CX Webclient"
    google-query: intitle:"3CX Webclient"
--- a/http/exposed-panels/acemanager-login.yaml
+++ b/http/exposed-panels/acemanager-login.yaml
@ -8,6 +8,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: sierrawireless
+    product: airlink_mobility_manager
    max-request: 1
    fofa-query: app="ACEmanager"
  tags: panel,login,tech,acemanager
--- a/http/exposed-panels/active-admin-exposure.yaml
+++ b/http/exposed-panels/active-admin-exposure.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: activeadmin
+    product: activeadmin
    max-request: 1
  tags: panel,activeadmin

--- a/http/exposed-panels/activemq-panel.yaml
+++ b/http/exposed-panels/activemq-panel.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: apache
+    product: activemq
    max-request: 1
  tags: panel,activemq,apache

--- a/http/exposed-panels/adiscon-loganalyzer.yaml
+++ b/http/exposed-panels/adiscon-loganalyzer.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 7.5
    cwe-id: CWE-200
  metadata:
+    vendor: adiscon
+    product: loganalyzer
    max-request: 1
  tags: adiscon,loganalyzer,syslog,exposure,panel

--- a/http/exposed-panels/adminer-panel-detect.yaml
+++ b/http/exposed-panels/adminer-panel-detect.yaml
@ -16,6 +16,8 @@ info:
  # Most versions have some kind of SSRF usability
  # Is generally handy if you find SQL creds
  metadata:
+    vendor: adminer
+    product: adminer
    max-request: 741
  tags: panel,bruteforce,adminer,login,sqli

--- a/http/exposed-panels/adminer-panel.yaml
+++ b/http/exposed-panels/adminer-panel.yaml
@ -10,11 +10,11 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: adminer
+    product: adminer
    verified: true
    max-request: 8
    shodan-query: title:"Login - Adminer"
-    vendor: adminer
-    product: adminer
  tags: panel,adminer

 http:
--- a/http/exposed-panels/adobe/adobe-component-login.yaml
+++ b/http/exposed-panels/adobe/adobe-component-login.yaml
@ -10,10 +10,10 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
-    max-request: 2
-    shodan-query: http.component:"Adobe ColdFusion"
    vendor: adobe
    product: coldfusion
+    max-request: 2
+    shodan-query: http.component:"Adobe ColdFusion"
  tags: panel,adobe,coldfusion,edb

 http:
--- a/http/exposed-panels/adobe/adobe-connect-central-login.yaml
+++ b/http/exposed-panels/adobe/adobe-connect-central-login.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: adobe
+    product: connect
    max-request: 1
  tags: adobe,panel,connect-central

--- a/http/exposed-panels/adobe/adobe-experience-manager-login.yaml
+++ b/http/exposed-panels/adobe/adobe-experience-manager-login.yaml
@ -10,10 +10,10 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
-    max-request: 1
-    shodan-query: http.title:"AEM Sign In"
    vendor: adobe
    product: experience_manager
+    max-request: 1
+    shodan-query: http.title:"AEM Sign In"
  tags: panel,aem,adobe

 http:
--- a/http/exposed-panels/adobe/aem-crx-package-manager.yaml
+++ b/http/exposed-panels/adobe/aem-crx-package-manager.yaml
@ -12,12 +12,12 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: adobe
+    product: experience_manager
    max-request: 1
    shodan-query:
      - http.title:"AEM Sign In"
      - http.component:"Adobe Experience Manager"
-    vendor: adobe
-    product: experience_manager
  tags: panel,aem,adobe

 http:
--- a/http/exposed-panels/adobe/aem-sling-login.yaml
+++ b/http/exposed-panels/adobe/aem-sling-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: adobe
+    product: experience_manager
    max-request: 1
    shodan-query:
      - http.title:"AEM Sign In"
--- a/http/exposed-panels/afterlogic-webmail-login.yaml
+++ b/http/exposed-panels/afterlogic-webmail-login.yaml
@ -10,10 +10,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
-    max-request: 1
-    fofa-query: "X-Server: AfterlogicDAVServer"
    vendor: afterlogic
    product: aurora
+    max-request: 1
+    fofa-query: "X-Server: AfterlogicDAVServer"
  tags: panel,afterlogic,login,detect

 http:
--- a/http/exposed-panels/airflow-panel.yaml
+++ b/http/exposed-panels/airflow-panel.yaml
@ -12,10 +12,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-668
  metadata:
-    max-request: 2
-    shodan-query: title:"Sign In - Airflow"
    vendor: apache
    product: airflow
+    max-request: 2
+    shodan-query: title:"Sign In - Airflow"
  tags: panel,apache,airflow,admin

 http:
--- a/http/exposed-panels/akamai-cloudtest.yaml
+++ b/http/exposed-panels/akamai-cloudtest.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: akamai
+    product: cloudtest
    max-request: 1
  tags: panel,akamai

--- a/http/exposed-panels/alfresco-detect.yaml
+++ b/http/exposed-panels/alfresco-detect.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: alfresco
+    product: alfresco
    max-request: 1
  tags: alfresco,tech,panel

--- a/http/exposed-panels/allied-telesis-exposure.yaml
+++ b/http/exposed-panels/allied-telesis-exposure.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: allied_telesis
+    product: device_gui
    verified: true
    max-request: 1
    shodan-query: title:"Allied Telesis Device GUI"
--- a/http/exposed-panels/ambari-exposure.yaml
+++ b/http/exposed-panels/ambari-exposure.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-668
  metadata:
+    vendor: apache
+    product: ambari
    max-request: 1
  tags: panel,apache,ambari,exposure

--- a/http/exposed-panels/amcrest-login.yaml
+++ b/http/exposed-panels/amcrest-login.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: amcrest
+    product: ip2m-853ew
    max-request: 1
    shodan-query: html:"amcrest"
    google-query: intext:"amcrest" "LDAP User"
--- a/http/exposed-panels/ametys-admin-login.yaml
+++ b/http/exposed-panels/ametys-admin-login.yaml
@ -8,6 +8,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: ametys
+    product: ametys
    max-request: 1
  tags: panel,ametys,cms

--- a/http/exposed-panels/amp-application-panel.yaml
+++ b/http/exposed-panels/amp-application-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cubecoders
+    product: amp
    verified: true
    max-request: 1
    shodan-query: title:"AMP - Application Management Panel"
--- a/http/exposed-panels/ampache-panel.yaml
+++ b/http/exposed-panels/ampache-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: ampache
+    product: ampache
    verified: true
    max-request: 3
    shodan-query: http.title:"For the Love of Music"
--- a/http/exposed-panels/ansible-tower-exposure.yaml
+++ b/http/exposed-panels/ansible-tower-exposure.yaml
@ -13,6 +13,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: redhat
+    product: ansible_tower
    max-request: 1
    shodan-query: title:"Ansible Tower"
    google-query: intitle:"Ansible Tower"
--- a/http/exposed-panels/apache-jmeter-dashboard.yaml
+++ b/http/exposed-panels/apache-jmeter-dashboard.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: apache
+    product: jmeter
    verified: true
    max-request: 1
    shodan-query: title:"Apache JMeter Dashboard"
--- a/http/exposed-panels/apache/apache-apisix-panel.yaml
+++ b/http/exposed-panels/apache/apache-apisix-panel.yaml
@ -8,10 +8,10 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
-    max-request: 1
-    fofa-query: title="Apache APISIX Dashboard"
    vendor: apache
    product: apisix
+    max-request: 1
+    fofa-query: title="Apache APISIX Dashboard"
  tags: apache,apisix,panel

 http:
--- a/http/exposed-panels/apache/apache-mesos-panel.yaml
+++ b/http/exposed-panels/apache/apache-mesos-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: apache
+    product: mesos
    verified: true
    max-request: 2
    shodan-query: http.title:"Mesos"
--- a/http/exposed-panels/apache/public-tomcat-manager.yaml
+++ b/http/exposed-panels/apache/public-tomcat-manager.yaml
@ -10,10 +10,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
-    max-request: 2
-    shodan-query: title:"Apache Tomcat"
    vendor: apache
    product: tomcat
+    max-request: 2
+    shodan-query: title:"Apache Tomcat"
  tags: panel,tomcat,apache

 http:
--- a/http/exposed-panels/appsmith-web-login.yaml
+++ b/http/exposed-panels/appsmith-web-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: appsmith
+    product: appsmith
    verified: true
    max-request: 1
    shodan-query: http.title:"appsmith"
--- a/http/exposed-panels/appspace-panel.yaml
+++ b/http/exposed-panels/appspace-panel.yaml
@ -8,11 +8,11 @@ info:
  reference:
    - https://www.appspace.com/
  metadata:
+    vendor: appspace
+    product: appspace
    verified: true
    max-request: 3
    shodan-query: title:"Appspace"
-    vendor: appspace
-    product: appspace
  tags: appspace,panel,detect

 http:
--- a/http/exposed-panels/appsuite-panel.yaml
+++ b/http/exposed-panels/appsuite-panel.yaml
@ -5,11 +5,11 @@ info:
  author: DhiyaneshDK
  severity: info
  metadata:
+    vendor: open-xchange
+    product: open-xchange_appsuite
    verified: true
    max-request: 1
    shodan-query: html:"Appsuite"
-    vendor: open-xchange
-    product: open-xchange_appsuite
  tags: panel,appsuite,detect

 http:
--- a/http/exposed-panels/appwrite-panel.yaml
+++ b/http/exposed-panels/appwrite-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: appwrite
+    product: appwrite
    verified: true
    max-request: 2
    shodan-query: http.favicon.hash:-633108100
--- a/http/exposed-panels/arangodb-web-Interface.yaml
+++ b/http/exposed-panels/arangodb-web-Interface.yaml
@ -9,6 +9,8 @@ info:
  reference:
    - https://www.arangodb.com/docs/stable/
  metadata:
+    vendor: arangodb
+    product: arangodb
    verified: "true"
    max-request: 1
    shodan-query: http.title:"ArangoDB Web Interface"
--- a/http/exposed-panels/arcgis/arcgis-panel.yaml
+++ b/http/exposed-panels/arcgis/arcgis-panel.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: esri
+    product: arcgis_enterprise
    max-request: 1
  tags: docs,arcgis,cms,panel

--- a/http/exposed-panels/arcgis/arcgis-rest-api.yaml
+++ b/http/exposed-panels/arcgis/arcgis-rest-api.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: esri
+    product: arcgis_engine
    max-request: 1
  tags: api,arcgis,cms,panel

--- a/http/exposed-panels/arcgis/arcgis-services.yaml
+++ b/http/exposed-panels/arcgis/arcgis-services.yaml
@ -8,6 +8,8 @@ info:
  reference:
    - https://enterprise.arcgis.com/en/
  metadata:
+    vendor: esri
+    product: arcgis_server
    verified: true
    max-request: 1
    shodan-query: title:"ArcGIS"
--- a/http/exposed-panels/arcgis/arcgis-tokens.yaml
+++ b/http/exposed-panels/arcgis/arcgis-tokens.yaml
@ -8,6 +8,8 @@ info:
  reference:
    - https://enterprise.arcgis.com/en/
  metadata:
+    vendor: esri
+    product: arcgis_server
    verified: true
    max-request: 1
    shodan-query: title:"ArcGIS"
--- a/http/exposed-panels/archibus-webcentral-panel.yaml
+++ b/http/exposed-panels/archibus-webcentral-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: archibus
+    product: web_central
    verified: true
    max-request: 3
    shodan-query: http.favicon.hash:889652940
--- a/http/exposed-panels/arcserve-panel.yaml
+++ b/http/exposed-panels/arcserve-panel.yaml
@ -8,6 +8,8 @@ info:
    - https://twitter.com/HunterMapping/status/1674267368359444480
    - https://github.com/mdsecactivebreach/CVE-2023-26258-ArcServe
  metadata:
+    vendor: arcserve
+    product: udp
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:-1889244460
--- a/http/exposed-panels/arris-modem-detect.yaml
+++ b/http/exposed-panels/arris-modem-detect.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: commscope
+    product: dg3450
    verified: true
    max-request: 1
    shodan-query: html:"phy.htm"
--- a/http/exposed-panels/atlantis-detect.yaml
+++ b/http/exposed-panels/atlantis-detect.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: runatlantis
+    product: atlantis
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:-1706783005
--- a/http/exposed-panels/atlassian-crowd-panel.yaml
+++ b/http/exposed-panels/atlassian-crowd-panel.yaml
@ -10,9 +10,9 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
-    max-request: 1
    vendor: atlassian
    product: crowd
+    max-request: 1
    category: sso
  tags: panel,atlassian

--- a/http/exposed-panels/avantfax-panel.yaml
+++ b/http/exposed-panels/avantfax-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-668
  metadata:
+    vendor: avantfax
+    product: avantfax
    max-request: 1
    shodan-query: http.title:"AvantFAX - Login"
  tags: panel,avantfax,login
--- a/http/exposed-panels/avaya/avayaaura-cm-panel.yaml
+++ b/http/exposed-panels/avaya/avayaaura-cm-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: avaya
+    product: aura_communication_manager
    max-request: 1
  tags: panel,avaya

--- a/http/exposed-panels/avaya/avayaaura-system-manager-panel.yaml
+++ b/http/exposed-panels/avaya/avayaaura-system-manager-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: avaya
+    product: aura_system_manager
    max-request: 1
  tags: panel,avaya

--- a/http/exposed-panels/aviatrix-panel.yaml
+++ b/http/exposed-panels/aviatrix-panel.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: aviatrix
+    product: controller
    max-request: 1
    shodan-query: http.title:"Aviatrix Cloud Controller"
  tags: panel,aviatrix
--- a/http/exposed-panels/avigilon-panel.yaml
+++ b/http/exposed-panels/avigilon-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: avigilon
+    product: avigilon_control_center
    verified: true
    max-request: 1
    shodan-query: http.title:"Login - Avigilon Control Center"
--- a/http/exposed-panels/aws-opensearch-login.yaml
+++ b/http/exposed-panels/aws-opensearch-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: amazon
+    product: opensearch
    max-request: 1
  tags: panel,opensearch,aws

--- a/http/exposed-panels/axway-securetransport-panel.yaml
+++ b/http/exposed-panels/axway-securetransport-panel.yaml
@ -13,6 +13,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: axway
+    product: securetransport
    verified: true
    max-request: 1
    shodan-query: http.title:"SecureTransport" || http.favicon.hash:1330269434
--- a/http/exposed-panels/axway-securetransport-webclient.yaml
+++ b/http/exposed-panels/axway-securetransport-webclient.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: axway
+    product: securetransport
    verified: true
    max-request: 1
    google-query: intitle:"ST Web Client"
--- a/http/exposed-panels/axxon-client-panel.yaml
+++ b/http/exposed-panels/axxon-client-panel.yaml
@ -11,6 +11,8 @@ info:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
+    vendor: axxonsoft
+    product: axxon_next
    verified: true
    max-request: 1
    shodan-query: title:"Axxon Next client"
--- a/http/exposed-panels/bedita-panel.yaml
+++ b/http/exposed-panels/bedita-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: bedita
+    product: bedita
    max-request: 1
    shodan-query: http.title:"BEdita"
  tags: panel,bedita
--- a/http/exposed-panels/beego-admin-dashboard.yaml
+++ b/http/exposed-panels/beego-admin-dashboard.yaml
@ -13,6 +13,8 @@ info:
    cvss-score: 5.3
    cwe-id: CWE-200
  metadata:
+    vendor: beego
+    product: beego
    verified: true
    max-request: 1
    shodan-query: html:"Beego Admin Dashboard"
--- a/http/exposed-panels/bigbluebutton-login.yaml
+++ b/http/exposed-panels/bigbluebutton-login.yaml
@ -10,6 +10,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: bigbluebutton
+    product: greenlight
    max-request: 1
  tags: panel,bigbluebutton

--- a/http/exposed-panels/bigip-rest-panel.yaml
+++ b/http/exposed-panels/bigip-rest-panel.yaml
@ -15,10 +15,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
-    max-request: 1
-    shodan-query: http.title:"BIG-IP&reg;-+Redirect" +"Server"
    vendor: f5
    product: big-ip_access_policy_manager
+    max-request: 1
+    shodan-query: http.title:"BIG-IP&reg;-+Redirect" +"Server"
  tags: panel,bigip,f5

 http:
--- a/http/exposed-panels/bitdefender-gravityzone.yaml
+++ b/http/exposed-panels/bitdefender-gravityzone.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: bitdefender
+    product: gravityzone
    verified: true
    max-request: 1
    shodan-query: title:"Bitdefender GravityZone"
--- a/http/exposed-panels/bitrix-panel.yaml
+++ b/http/exposed-panels/bitrix-panel.yaml
@ -8,6 +8,8 @@ info:
  classification:
    cwe-id: CWE-200
  metadata:
+    vendor: bitrix
+    product: bitrix24
    max-request: 1
  tags: panel,bitrix,login

--- a/http/exposed-panels/bitwarden-vault-panel.yaml
+++ b/http/exposed-panels/bitwarden-vault-panel.yaml
@ -7,6 +7,8 @@ info:
  reference:
    - https://bitwarden.com/?utm_source=google&utm_medium=cpc&utm_campaign=AW_ALL_NU_CL_Bitwarden_en_GSN_DTMB_Brand-Login_KW:Brand-Login_Consolidated&utm_content=646427936792&utm_term=bitwarden%20vault%20login|kwd-826827349840&hsa_acc=2567950947&hsa_cam=19621984700&hsa_grp=145977914135&hsa_ad=646427936792&hsa_src=g&hsa_tgt=kwd-826827349840&hsa_kw=bitwarden%20vault%20login&hsa_mt=e&hsa_net=adwords&hsa_ver=3&gad=1&gclid=Cj0KCQjwpompBhDZARIsAFD_Fp-07Mni-xzuKd5Ewi6I7qzRTdZOYSxMsMVvKVWhGm5qg2KUiY2Z7SQaAvSIEALw_wcB
  metadata:
+    vendor: bitwarden
+    product: bitwarden
    verified: true
    max-request: 1
    shodan-query: title:"Bitwarden Web Vault"
--- a/http/exposed-panels/bloofoxcms-login-panel.yaml
+++ b/http/exposed-panels/bloofoxcms-login-panel.yaml
@ -5,11 +5,11 @@ info:
  author: theamanrawat
  severity: info
  metadata:
+    vendor: bloofox
+    product: bloofoxcms
    verified: "true"
    max-request: 2
    fofa-query: "Powered by bloofoxCMS"
-    vendor: bloofox
-    product: bloofoxcms
  tags: panel,bloofox,cms

 http:
--- a/http/exposed-panels/bolt-cms-panel.yaml
+++ b/http/exposed-panels/bolt-cms-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: boltcms
+    product: bolt
    max-request: 1
  tags: panel,bolt,cms,login

--- a/http/exposed-panels/bookstack-panel.yaml
+++ b/http/exposed-panels/bookstack-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: bookstackapp
+    product: bookstack
    max-request: 1
    shodan-query: http.title:"BookStack"
  tags: panel,bookstack
--- a/http/exposed-panels/buildbot-panel.yaml
+++ b/http/exposed-panels/buildbot-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: buildbot
+    product: buildbot
    verified: true
    max-request: 1
    shodan-query: http.title:"BuildBot"
--- a/http/exposed-panels/cacti-panel.yaml
+++ b/http/exposed-panels/cacti-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cacti
+    product: cacti
    max-request: 2
  tags: tech,cacti,login,panel

--- a/http/exposed-panels/cas-login.yaml
+++ b/http/exposed-panels/cas-login.yaml
@ -10,10 +10,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
-    max-request: 1
-    shodan-query: http.title:'CAS - Central Authentication Service'
    vendor: apereo
    product: central_authentication_service
+    max-request: 1
+    shodan-query: http.title:'CAS - Central Authentication Service'
    github: https://github.com/apereo/cas
  tags: apereo,cas,panel,login

--- a/http/exposed-panels/casdoor-login.yaml
+++ b/http/exposed-panels/casdoor-login.yaml
@ -12,10 +12,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
-    max-request: 1
-    shodan-query: http.title:"Casdoor"
    vendor: casbin
    product: casdoor
+    max-request: 1
+    shodan-query: http.title:"Casdoor"
  tags: panel,casdoor

 http:
--- a/http/exposed-panels/centreon-panel.yaml
+++ b/http/exposed-panels/centreon-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: centreon
+    product: centreon_web
    max-request: 1
    shodan-query: http.title:"Centreon"
  tags: panel,centreon,login
--- a/http/exposed-panels/checkmk/checkmk-login.yaml
+++ b/http/exposed-panels/checkmk/checkmk-login.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: tribe29
+    product: checkmk
    max-request: 1
  tags: login,tech,synology,rackstation,panel

--- a/http/exposed-panels/checkpoint/ssl-network-extender.yaml
+++ b/http/exposed-panels/checkpoint/ssl-network-extender.yaml
@ -13,6 +13,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: checkpoint
+    product: ssl_network_extender
    max-request: 1
    shodan-query: http.title:"Check Point SSL Network Extender"
    google-query: intitle:"SSL Network Extender Login"
--- a/http/exposed-panels/cisco/cisco-anyconnect-vpn.yaml
+++ b/http/exposed-panels/cisco/cisco-anyconnect-vpn.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: anyconnect_secure_mobility_client
    max-request: 1
  tags: cisco,panel,vpn

--- a/http/exposed-panels/cisco/cisco-asa-panel.yaml
+++ b/http/exposed-panels/cisco/cisco-asa-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: adaptive_security_appliance_software
    max-request: 1
  tags: cisco,panel

--- a/http/exposed-panels/cisco/cisco-edge-340.yaml
+++ b/http/exposed-panels/cisco/cisco-edge-340.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: edge_340_firmware
    max-request: 1
    shodan-query: http.title:"Cisco Edge 340"
  tags: panel,cisco
--- a/http/exposed-panels/cisco/cisco-finesse-login.yaml
+++ b/http/exposed-panels/cisco/cisco-finesse-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: finesse
    max-request: 1
  tags: panel,cisco,edb

--- a/http/exposed-panels/cisco/cisco-integrated-login.yaml
+++ b/http/exposed-panels/cisco/cisco-integrated-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: integrated_management_controller
    max-request: 1
  tags: panel,cisco,edb

--- a/http/exposed-panels/cisco/cisco-ios-xe-panel.yaml
+++ b/http/exposed-panels/cisco/cisco-ios-xe-panel.yaml
@ -12,11 +12,11 @@ info:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: ios_xe
    verified: "true"
    max-request: 2
    shodan-query: http.html_hash:1076109428
-    vendor: cisco
-    product: ios_xe
  tags: panel,cisco
 ssl:
  - address: "{{Host}}:{{Port}}"
--- a/http/exposed-panels/cisco/cisco-onprem-panel.yaml
+++ b/http/exposed-panels/cisco/cisco-onprem-panel.yaml
@ -10,6 +10,8 @@ info:
    - https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/smart-software-manager-satellite/datasheet-c78-734539.html
    - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-sql-X9MmjSYh
  metadata:
+    vendor: cisco
+    product: smart_software_manager_on-prem
    verified: true
    max-request: 2
    shodan-query: title:"On-Prem License Workspace"
--- a/http/exposed-panels/cisco/cisco-prime-infrastructure.yaml
+++ b/http/exposed-panels/cisco/cisco-prime-infrastructure.yaml
@ -11,10 +11,10 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: prime_infrastructure
    max-request: 1
    shodan-query: http.title:"prime infrastructure"
-    vendor: cisco
-    product: evolved_programmable_network_manager
  tags: panel,cisco

 http:
--- a/http/exposed-panels/cisco/cisco-sd-wan.yaml
+++ b/http/exposed-panels/cisco/cisco-sd-wan.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: sd-wan
    max-request: 1
  tags: panel,cisco

--- a/http/exposed-panels/cisco/cisco-secure-desktop.yaml
+++ b/http/exposed-panels/cisco/cisco-secure-desktop.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: secure_desktop
    max-request: 1
  tags: cisco,panel

--- a/http/exposed-panels/cisco/cisco-ucs-kvm-login.yaml
+++ b/http/exposed-panels/cisco/cisco-ucs-kvm-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cisco
+    product: unified_computing_system
    max-request: 1
    shodan-query: http.title:"Cisco UCS KVM Direct"
  tags: panel,cisco,ucs,kvm
--- a/http/exposed-panels/citrix-adc-gateway-detect.yaml
+++ b/http/exposed-panels/citrix-adc-gateway-detect.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: citrix
+    product: gateway
    max-request: 2
  tags: panel,citrix

--- a/http/exposed-panels/citrix-vpn-detect.yaml
+++ b/http/exposed-panels/citrix-vpn-detect.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: citrix
+    product: gateway
    max-request: 1
  tags: panel,citrix

--- a/http/exposed-panels/clearpass-policy-manager.yaml
+++ b/http/exposed-panels/clearpass-policy-manager.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: arubanetworks
+    product: clearpass_policy_manager
    max-request: 1
    shodan-query: http.title:"ClearPass Policy Manager"
  tags: panel,aruba
--- a/http/exposed-panels/cloudpanel-login.yaml
+++ b/http/exposed-panels/cloudpanel-login.yaml
@ -5,6 +5,8 @@ info:
  author: DhiyaneshDk
  severity: info
  metadata:
+    vendor: mgt-commerce
+    product: cloudpanel
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:151132309
--- a/http/exposed-panels/cobbler-webgui.yaml
+++ b/http/exposed-panels/cobbler-webgui.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cobblerd
+    product: cobbler
    max-request: 1
    shodan-query: http.title:"Cobbler Web Interface"
  tags: cobbler,webserver,panel
--- a/http/exposed-panels/code-server-login.yaml
+++ b/http/exposed-panels/code-server-login.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: coder
+    product: code-server
    verified: true
    max-request: 1
    shodan-query: http.title:"code-server login"
--- a/http/exposed-panels/code42-panel.yaml
+++ b/http/exposed-panels/code42-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: code42
+    product: code42
    max-request: 1
  tags: panel,code42

--- a/http/exposed-panels/codemeter-webadmin-panel.yaml
+++ b/http/exposed-panels/codemeter-webadmin-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-668
  metadata:
+    vendor: wibu
+    product: codemeter
    max-request: 1
  tags: codemeter,webadmin,panel

--- a/http/exposed-panels/coldfusion-administrator-login.yaml
+++ b/http/exposed-panels/coldfusion-administrator-login.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: adobe
+    product: coldfusion
    max-request: 1
    shodan-query: http.title:"ColdFusion Administrator Login"
  tags: panel,coldfusion,adobe
--- a/http/exposed-panels/compal-panel.yaml
+++ b/http/exposed-panels/compal-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: compal
+    product: ch7465lg_firmware
    max-request: 1
  tags: panel

--- a/http/exposed-panels/concrete5/concrete5-install.yaml
+++ b/http/exposed-panels/concrete5/concrete5-install.yaml
@ -8,6 +8,8 @@ info:
  reference:
    - https://documentation.concretecms.org/developers/introduction/installing-concrete-cms
  metadata:
+    vendor: concrete5
+    product: concrete5
    verified: true
    max-request: 2
    shodan-query: http.title:"Install concrete5"
--- a/http/exposed-panels/concrete5/concrete5-panel.yaml
+++ b/http/exposed-panels/concrete5/concrete5-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: concrete5
+    product: concrete5
    max-request: 1
    shodan-query: http.title:"concrete5"
  tags: panel,concrete5,cms
--- a/http/exposed-panels/connect-box-login.yaml
+++ b/http/exposed-panels/connect-box-login.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: upc
+    product: connect_box_eurodocsis_firmware
    verified: true
    max-request: 1
    shodan-query: 'NET-DK/1.0'
--- a/http/exposed-panels/contao-login-panel.yaml
+++ b/http/exposed-panels/contao-login-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: contao
+    product: contao
    verified: true
    max-request: 1
    shodan-query: http.html:"Contao Open Source CMS"
--- a/http/exposed-panels/corebos-panel.yaml
+++ b/http/exposed-panels/corebos-panel.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: corebos
+    product: corebos
    verified: true
    max-request: 1
    shodan-query: http.html:"corebos"
--- a/http/exposed-panels/cortex-xsoar-login.yaml
+++ b/http/exposed-panels/cortex-xsoar-login.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: paloaltonetworks
+    product: cortex_xsoar
    max-request: 1
    shodan-query: http.title:"Cortex XSOAR"
  tags: panel,soar,login
--- a/http/exposed-panels/couchdb-exposure.yaml
+++ b/http/exposed-panels/couchdb-exposure.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: apache
+    product: couchdb
    max-request: 1
  tags: panel,couchdb

--- a/http/exposed-panels/couchdb-fauxton.yaml
+++ b/http/exposed-panels/couchdb-fauxton.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: apache
+    product: couchdb
    max-request: 1
  tags: panel,apache,couchdb

--- a/http/exposed-panels/cpanel-api-codes.yaml
+++ b/http/exposed-panels/cpanel-api-codes.yaml
@ -10,6 +10,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: cpanel
+    product: cpanel
    verified: true
    max-request: 1
    shodan-query: title:"CPanel - API Codes"
--- a/http/exposed-panels/crush-ftp-login.yaml
+++ b/http/exposed-panels/crush-ftp-login.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: crushftp
+    product: crushftp
    verified: true
    max-request: 1
  tags: panel,edb,crushftp,detect
--- a/http/exposed-panels/cyberoam-ssl-vpn-panel.yaml
+++ b/http/exposed-panels/cyberoam-ssl-vpn-panel.yaml
@ -12,6 +12,8 @@ info:
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
+    vendor: sophos
+    product: cyberoam
    max-request: 1
    shodan-query: title:"Cyberoam SSL VPN Portal"
    google-query: intitle:"Cyberoam SSL VPN Portal"
--- a/Show More
+++ b/Show More