TemplateMan Update [Wed Oct 25 06:48:30 UTC 2023] 🤖

patch-1
GitHub Action 2023-10-25 06:48:30 +00:00
parent 8db68d4265
commit 4474bf62a3
7 changed files with 9 additions and 9 deletions

View File

@ -18,7 +18,7 @@ info:
cve-id: CVE-2006-1681
cwe-id: NVD-CWE-Other
epss-score: 0.01015
epss-percentile: 0.82065
epss-percentile: 0.82067
cpe: cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
metadata:
max-request: 1

View File

@ -20,7 +20,7 @@ info:
cve-id: CVE-2014-3120
cwe-id: CWE-284
epss-score: 0.55248
epss-percentile: 0.97262
epss-percentile: 0.97261
cpe: cpe:2.3:a:elasticsearch:elasticsearch:*:*:*:*:*:*:*:*
metadata:
max-request: 1

View File

@ -18,7 +18,7 @@ info:
cve-id: CVE-2021-23241
cwe-id: CWE-22
epss-score: 0.00365
epss-percentile: 0.69268
epss-percentile: 0.6927
cpe: cpe:2.3:o:mercusys:mercury_x18g_firmware:1.0.5:*:*:*:*:*:*:*
metadata:
max-request: 1

View File

@ -16,7 +16,7 @@ info:
cve-id: CVE-2021-44139
cwe-id: CWE-918
epss-score: 0.01329
epss-percentile: 0.84518
epss-percentile: 0.84527
cpe: cpe:2.3:a:hashicorp:sentinel:1.8.2:*:*:*:*:*:*:*
metadata:
max-request: 1

View File

@ -16,7 +16,7 @@ info:
cve-id: CVE-2022-2627
cwe-id: CWE-79
epss-score: 0.00078
epss-percentile: 0.32832
epss-percentile: 0.32829
cpe: cpe:2.3:a:tagdiv:newspaper:*:*:*:*:*:wordpress:*:*
metadata:
verified: true

View File

@ -18,7 +18,7 @@ info:
cve-id: CVE-2023-4547
cwe-id: CWE-79
epss-score: 0.00205
epss-percentile: 0.58153
epss-percentile: 0.58151
cpe: cpe:2.3:a:spa-cart:ecommerce_cms:1.9.0.3:*:*:*:*:*:*:*
metadata:
verified: "true"

View File

@ -10,7 +10,8 @@ info:
- https://www.wevul.com/2301.html
metadata:
verified: "true"
fofa-query: 'app="LiveBOS-框架" && body="管理控制台"'
max-request: 2
fofa-query: app="LiveBOS-框架" && body="管理控制台"
tags: livebos,lfi
http:
@ -18,7 +19,6 @@ http:
- |
GET / HTTP/1.1
Host: {{Hostname}}
- |
GET /feed/ShowImage.do;.js.jsp?type=&imgName=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1
Host: {{Hostname}}
@ -29,4 +29,4 @@ http:
- contains(body_1, "Power by LiveBOS")
- regex('root:.*:0', body_2)
- status_code_2 == 200
condition: and
condition: and