Merge pull request #2486 from projectdiscovery/fix

more strict matchers

cves/2021/CVE-2021-38751.yaml

@@ -17,17 +17,20 @@ info:
 requests:
   - method: GET
     path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
-      - "{{BaseURL}}/login/showlogin"
+
     headers:
       Host: "{{randstr}}.tld"
 
     matchers-condition: and
     matchers:
-      - type: regex
+      - type: word
-        regex:
+        words:
-          - (EXPONENT\.(?:(?:J(?:QUERY|S)_UR|URL_FUL)|YUI2_UR)L=")?https?://{{randstr}}\.tld
+          - '{{randstr}}.tld'
+          - 'EXPONENT.PATH'
+          - 'EXPONENT.URL'
         part: body
+        condition: and
 
       - type: status
         status:

network/ftp-default-credentials.yaml

@@ -1,9 +1,9 @@
 id: ftp-default-credentials
 
 info:
-  name: FTP Service with default credentials
+  name: FTP Service with anonymous Login
   author: pussycat0x
-  severity: low
+  severity: info
   tags: network,ftp,default-login
 
 network:
@@ -18,3 +18,5 @@ network:
       - type: word
         words:
           - "230"
+          - "Anonymous user logged in"
+        condition: and

vulnerabilities/wordpress/wordpress-woocommerce-sqli.yaml

@@ -21,6 +21,8 @@ requests:
         words:
           - 'sqli-test'
           - 'attribute_counts'
+          - 'price_range'
+          - 'term'
         condition: and
 
       - type: word