daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'main' into add-cpe-epss

patch-1
Ritik Chaddha 2023-05-05 00:00:13 +05:30
parent 2175d81329 eaa01134b2
commit 561b42ebe7
5854 changed files with 16869 additions and 5924 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/cve2json.yml vendored
View File

@ -23,7 +23,7 @@ jobs:
run: | run: |
go env -w GO111MODULE=off go env -w GO111MODULE=off
go get gopkg.in/yaml.v3 go get gopkg.in/yaml.v3
go run .github/scripts/yaml2json.go $GITHUB_WORKSPACE/cves/ cves.json go run .github/scripts/yaml2json.go $GITHUB_WORKSPACE/http/cves/ cves.json
md5sum cves.json | cut -d' ' -f1 > cves.json-checksum.txt md5sum cves.json | cut -d' ' -f1 > cves.json-checksum.txt
- name: Commit files - name: Commit files

2
.new-additions
View File

@ -8,9 +8,11 @@ http/cves/2023/CVE-2023-27524.yaml
http/cves/2023/CVE-2023-29489.yaml http/cves/2023/CVE-2023-29489.yaml
http/cves/2023/CVE-2023-29922.yaml http/cves/2023/CVE-2023-29922.yaml
http/default-logins/powerjob-default-login.yaml http/default-logins/powerjob-default-login.yaml
http/default-logins/umami/umami-default-login.yaml
http/exposed-panels/papercut-ng-panel.yaml http/exposed-panels/papercut-ng-panel.yaml
http/exposed-panels/proxmox-panel.yaml http/exposed-panels/proxmox-panel.yaml
http/exposed-panels/sophos-web-appliance.yaml http/exposed-panels/sophos-web-appliance.yaml
http/misconfiguration/apache/apache-zeppelin-unauth.yaml http/misconfiguration/apache/apache-zeppelin-unauth.yaml
http/osint/mail-archive.yaml http/osint/mail-archive.yaml
http/vulnerabilities/apache/apache-druid-kafka-connect-rce.yaml http/vulnerabilities/apache/apache-druid-kafka-connect-rce.yaml
http/vulnerabilities/wordpress/wpml-xss.yaml

1745
cves.json
View File

File diff suppressed because it is too large Load Diff

2
cves.json-checksum.txt
View File

@ -1 +1 @@
d41d8cd98f00b204e9800998ecf8427e 007505eab9adec1b628522c2675730ee

2
dns/azure-takeover-detection.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 7.2 cvss-score: 7.2
cwe-id: CWE-404 cwe-id: CWE-404
tags: dns,takeover,azure tags: dns,takeover,azure
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/caa-fingerprint.yaml
View File

@ -10,6 +10,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,caa tags: dns,caa
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/cname-fingerprint.yaml
View File

@ -11,6 +11,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,cname tags: dns,cname
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/cname-service.yaml
View File

@ -10,6 +10,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,service tags: dns,service
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/detect-dangling-cname.yaml
View File

@ -13,6 +13,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,takeover tags: dns,takeover
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/dmarc-detect.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 0.0 cvss-score: 0.0
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,dmarc tags: dns,dmarc
metadata:
max-request: 1
dns: dns:
- name: "_dmarc.{{FQDN}}" - name: "_dmarc.{{FQDN}}"

2
dns/dns-waf-detect.yaml
View File

@ -8,6 +8,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: tech,waf,dns tags: tech,waf,dns
metadata:
max-request: 2
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/dnssec-detection.yaml
View File

@ -11,6 +11,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,dnssec tags: dns,dnssec
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/ec2-detection.yaml
View File

@ -10,6 +10,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,ec2,aws tags: dns,ec2,aws
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

1
dns/elasticbeantalk-takeover.yaml
View File

@ -15,6 +15,7 @@ info:
cvss-score: 7.2 cvss-score: 7.2
cwe-id: CWE-404 cwe-id: CWE-404
metadata: metadata:
max-request: 1
comments: | comments: |
Only CNAMEs with region specification are hijackable. Only CNAMEs with region specification are hijackable.
You need to claim the CNAME in AWS portal (https://aws.amazon.com/) or via AWS CLI to confirm the takeover. You need to claim the CNAME in AWS portal (https://aws.amazon.com/) or via AWS CLI to confirm the takeover.

2
dns/mx-fingerprint.yaml
View File

@ -11,6 +11,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,mx tags: dns,mx
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/mx-service-detector.yaml
View File

@ -8,6 +8,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,service tags: dns,service
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/nameserver-fingerprint.yaml
View File

@ -8,6 +8,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,ns tags: dns,ns
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/ptr-fingerprint.yaml
View File

@ -8,6 +8,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,ptr tags: dns,ptr
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/servfail-refused-hosts.yaml
View File

@ -9,6 +9,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,takeover tags: dns,takeover
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/spoofable-spf-records-ptr.yaml
View File

@ -10,6 +10,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,spf tags: dns,spf
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/txt-fingerprint.yaml
View File

@ -10,6 +10,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,txt tags: dns,txt
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
dns/worksites-detection.yaml
View File

@ -10,6 +10,8 @@ info:
classification: classification:
cwe-id: CWE-200 cwe-id: CWE-200
tags: dns,service tags: dns,service
metadata:
max-request: 1
dns: dns:
- name: "{{FQDN}}" - name: "{{FQDN}}"

2
helpers/wordpress/plugins/advanced-custom-fields.txt
View File

@ -1 +1 @@
6.1.4 6.1.5

2
helpers/wordpress/plugins/all-in-one-wp-migration.txt
View File

@ -1 +1 @@
7.73 7.74

2
helpers/wordpress/plugins/elementskit-lite.txt
View File

@ -1 +1 @@
2.8.7 2.8.8

2
helpers/wordpress/plugins/facebook-for-woocommerce.txt
View File

@ -1 +1 @@
3.0.19 3.0.22

2
helpers/wordpress/plugins/formidable.txt
View File

@ -1 +1 @@
6.2.3 6.3

2
helpers/wordpress/plugins/google-analytics-dashboard-for-wp.txt
View File

@ -1 +1 @@
7.14.2 7.15.2

2
helpers/wordpress/plugins/google-listings-and-ads.txt
View File

@ -1 +1 @@
2.4.3 2.4.4

2
helpers/wordpress/plugins/gutenberg.txt
View File

@ -1 +1 @@
15.6.2 15.7.0

2
helpers/wordpress/plugins/jetpack.txt
View File

@ -1 +1 @@
12.0 12.1

2
helpers/wordpress/plugins/kadence-blocks.txt
View File

@ -1 +1 @@
3.0.36 3.0.37

2
helpers/wordpress/plugins/mailchimp-for-wp.txt
View File

@ -1 +1 @@
4.9.3 4.9.4

2
helpers/wordpress/plugins/mailpoet.txt
View File

@ -1 +1 @@
4.13.0 4.14.0

2
helpers/wordpress/plugins/ml-slider.txt
View File

@ -1 +1 @@
3.30.0 3.30.1

2
helpers/wordpress/plugins/really-simple-ssl.txt
View File

@ -1 +1 @@
6.2.4 6.2.5

2
helpers/wordpress/plugins/seo-by-rank-math.txt
View File

@ -1 +1 @@
1.0.112 1.0.114

2
helpers/wordpress/plugins/sg-security.txt
View File

@ -1 +1 @@
1.4.3 1.4.5

2
helpers/wordpress/plugins/so-widgets-bundle.txt
View File

@ -1 +1 @@
1.49.1 1.49.2

2
helpers/wordpress/plugins/woocommerce-gateway-stripe.txt
View File

@ -1 +1 @@
7.3.0 7.4.0

2
helpers/wordpress/plugins/woocommerce-payments.txt
View File

@ -1 +1 @@
5.8.0 5.8.1

2
helpers/wordpress/plugins/wp-statistics.txt
View File

@ -1 +1 @@
14.0.2 14.1

1
http/cnvd/2017/CNVD-2017-03561.yaml
View File

@ -10,6 +10,7 @@ info:
- https://gitee.com/cute-guy/Penetration_Testing_POC/blob/master/%E6%B3%9B%E5%BE%AEe-mobile%20ognl%E6%B3%A8%E5%85%A5.md - https://gitee.com/cute-guy/Penetration_Testing_POC/blob/master/%E6%B3%9B%E5%BE%AEe-mobile%20ognl%E6%B3%A8%E5%85%A5.md
- https://reconshell.com/vulnerability-research-list/ - https://reconshell.com/vulnerability-research-list/
metadata: metadata:
max-request: 2
verified: true verified: true
fofa-query: app="泛微-eMobile" fofa-query: app="泛微-eMobile"
tags: cnvd,cnvd2017,emobile,ognl,fanwei tags: cnvd,cnvd2017,emobile,ognl,fanwei

2
http/cnvd/2018/CNVD-2018-13393.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-score: 8.6 cvss-score: 8.6
cwe-id: CWE-22 cwe-id: CWE-22
tags: metinfo,cnvd,cvnd2018,lfi tags: metinfo,cnvd,cvnd2018,lfi
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cnvd/2019/CNVD-2019-01348.yaml
View File

@ -13,6 +13,8 @@ info:
cwe-id: CWE-284 cwe-id: CWE-284
remediation: Upgrade to the latest version of Xiuno BBS or switch to a supported product. remediation: Upgrade to the latest version of Xiuno BBS or switch to a supported product.
tags: xiuno,cnvd,cnvd2019 tags: xiuno,cnvd,cnvd2019
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cnvd/2019/CNVD-2019-06255.yaml
View File

@ -14,6 +14,8 @@ info:
cwe-id: CWE-77 cwe-id: CWE-77
remediation: Upgrade to CatfishCMS version 4.8.54 or later. remediation: Upgrade to CatfishCMS version 4.8.54 or later.
tags: rce,cnvd,catfishcms,cnvd2019 tags: rce,cnvd,catfishcms,cnvd2019
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cnvd/2019/CNVD-2019-19299.yaml
View File

@ -13,6 +13,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: zhiyuan,cnvd,cnvd2019,rce tags: zhiyuan,cnvd,cnvd2019,rce
metadata:
max-request: 2
http: http:
- raw: - raw:

2
http/cnvd/2019/CNVD-2019-32204.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: fanwei,cnvd,cnvd2019,rce tags: fanwei,cnvd,cnvd2019,rce
metadata:
max-request: 1
http: http:
- raw: - raw:

2
http/cnvd/2020/CNVD-2020-23735.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-score: 7.5 cvss-score: 7.5
cwe-id: CWE-22 cwe-id: CWE-22
tags: xunchi,lfi,cnvd,cnvd2020 tags: xunchi,lfi,cnvd,cnvd2020
metadata:
max-request: 1
http: http:
- method: GET - method: GET

1
http/cnvd/2020/CNVD-2020-26585.yaml
View File

@ -15,6 +15,7 @@ info:
cvss-score: 9.9 cvss-score: 9.9
cwe-id: CWE-434 cwe-id: CWE-434
metadata: metadata:
max-request: 2
verified: true verified: true
fofa-query: app="ShowDoc" fofa-query: app="ShowDoc"
tags: cnvd,cnvd2020,showdoc,fileupload tags: cnvd,cnvd2020,showdoc,fileupload

2
http/cnvd/2020/CNVD-2020-46552.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: cnvd,cnvd2020,sangfor,rce tags: cnvd,cnvd2020,sangfor,rce
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cnvd/2020/CNVD-2020-56167.yaml
View File

@ -9,6 +9,8 @@ info:
- https://www.cnvd.org.cn/flaw/show/CNVD-2020-56167 - https://www.cnvd.org.cn/flaw/show/CNVD-2020-56167
- https://securityforeveryone.com/tools/ruijie-smartweb-default-password-scanner - https://securityforeveryone.com/tools/ruijie-smartweb-default-password-scanner
tags: ruijie,default-login,cnvd,cnvd2020 tags: ruijie,default-login,cnvd,cnvd2020
metadata:
max-request: 1
http: http:
- method: POST - method: POST

2
http/cnvd/2020/CNVD-2020-62422.yaml
View File

@ -8,6 +8,8 @@ info:
reference: reference:
- https://blog.csdn.net/m0_46257936/article/details/113150699 - https://blog.csdn.net/m0_46257936/article/details/113150699
tags: lfi,cnvd,cnvd2020,seeyon tags: lfi,cnvd,cnvd2020,seeyon
metadata:
max-request: 1
http: http:
- method: GET - method: GET

1
http/cnvd/2020/CNVD-2020-67113.yaml
View File

@ -12,6 +12,7 @@ info:
cvss-score: 5.3 cvss-score: 5.3
cwe-id: CWE-425 cwe-id: CWE-425
metadata: metadata:
max-request: 2
verified: true verified: true
shodan-query: http.title:"H5S CONSOLE" shodan-query: http.title:"H5S CONSOLE"
tags: cnvd,cnvd2020,h5s,unauth,h5sconsole tags: cnvd,cnvd2020,h5s,unauth,h5sconsole

2
http/cnvd/2020/CNVD-2020-68596.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-score: 8.6 cvss-score: 8.6
cwe-id: CWE-22 cwe-id: CWE-22
tags: weiphp,lfi,cnvd,cnvd2020 tags: weiphp,lfi,cnvd,cnvd2020
metadata:
max-request: 3
http: http:
- raw: - raw:

2
http/cnvd/2021/CNVD-2021-01931.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
cvss-score: 8.6 cvss-score: 8.6
cwe-id: CWE-22 cwe-id: CWE-22
metadata:
max-request: 2
http: http:
- method: GET - method: GET

2
http/cnvd/2021/CNVD-2021-09650.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: ruijie,cnvd,cnvd2021,rce tags: ruijie,cnvd,cnvd2021,rce
metadata:
max-request: 1
http: http:
- raw: - raw:

2
http/cnvd/2021/CNVD-2021-10543.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-score: 7.5 cvss-score: 7.5
cwe-id: CWE-200 cwe-id: CWE-200
tags: config,exposure,cnvd,cnvd2021 tags: config,exposure,cnvd,cnvd2021
metadata:
max-request: 1
http: http:
- method: GET - method: GET

1
http/cnvd/2021/CNVD-2021-14536.yaml
View File

@ -12,6 +12,7 @@ info:
cvss-score: 8.3 cvss-score: 8.3
cwe-id: CWE-522 cwe-id: CWE-522
metadata: metadata:
max-request: 1
fofa-query: title="RG-UAC登录页面" fofa-query: title="RG-UAC登录页面"
tags: ruijie,cnvd,cnvd2021,disclosure tags: ruijie,cnvd,cnvd2021,disclosure

1
http/cnvd/2021/CNVD-2021-15822.yaml
View File

@ -7,6 +7,7 @@ info:
reference: reference:
- https://mp.weixin.qq.com/s/69cDWCDoVXRhehqaHPgYog - https://mp.weixin.qq.com/s/69cDWCDoVXRhehqaHPgYog
metadata: metadata:
max-request: 1
verified: true verified: true
shodan-query: title:"ShopXO企业级B2C电商系统提供商" shodan-query: title:"ShopXO企业级B2C电商系统提供商"
fofa-query: app="ShopXO企业级B2C电商系统提供商" fofa-query: app="ShopXO企业级B2C电商系统提供商"

2
http/cnvd/2021/CNVD-2021-15824.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 7.2 cvss-score: 7.2
cwe-id: CWE-79 cwe-id: CWE-79
tags: empirecms,cnvd,cnvd2021,xss,domxss tags: empirecms,cnvd,cnvd2021,xss,domxss
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cnvd/2021/CNVD-2021-17369.yaml
View File

@ -12,6 +12,8 @@ info:
cvss-score: 8.3 cvss-score: 8.3
cwe-id: CWE-522 cwe-id: CWE-522
tags: ruijie,disclosure,cnvd,cnvd2021 tags: ruijie,disclosure,cnvd,cnvd2021
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cnvd/2021/CNVD-2021-26422.yaml
View File

@ -13,6 +13,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: eyoumail,rce,cnvd,cnvd2021 tags: eyoumail,rce,cnvd,cnvd2021
metadata:
max-request: 1
http: http:
- raw: - raw:

1
http/cnvd/2021/CNVD-2021-28277.yaml
View File

@ -9,6 +9,7 @@ info:
- https://www.aisoutu.com/a/1432457 - https://www.aisoutu.com/a/1432457
- https://mp.weixin.qq.com/s/TkUZXKgfEOVqoHKBr3kNdw - https://mp.weixin.qq.com/s/TkUZXKgfEOVqoHKBr3kNdw
metadata: metadata:
max-request: 2
fofa-query: app="Landray OA system" fofa-query: app="Landray OA system"
classification: classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

2
http/cnvd/2021/CNVD-2021-30167.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: cnvd,cnvd2021,beanshell,rce,yonyou tags: cnvd,cnvd2021,beanshell,rce,yonyou
metadata:
max-request: 2
http: http:
- raw: - raw:

2
http/cnvd/2021/CNVD-2021-49104.yaml
View File

@ -14,6 +14,8 @@ info:
cwe-id: CWE-434 cwe-id: CWE-434
remediation: Pan Wei has released an update to resolve this vulnerability. remediation: Pan Wei has released an update to resolve this vulnerability.
tags: pan,micro,cnvd,cnvd2021,fileupload,intrusive tags: pan,micro,cnvd,cnvd2021,fileupload,intrusive
metadata:
max-request: 2
http: http:
- raw: - raw:

2
http/cnvd/2022/CNVD-2022-03672.yaml
View File

@ -15,6 +15,8 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-77 cwe-id: CWE-77
tags: cnvd,cnvd2020,sunflower,rce tags: cnvd,cnvd2020,sunflower,rce
metadata:
max-request: 2
http: http:
- raw: - raw:

1
http/cnvd/2022/CNVD-2022-42853.yaml
View File

@ -14,6 +14,7 @@ info:
cvss-score: 10.0 cvss-score: 10.0
cwe-id: CWE-89 cwe-id: CWE-89
metadata: metadata:
max-request: 1
verified: true verified: true
shodan-query: http.title:"zentao" shodan-query: http.title:"zentao"
fofa-query: "Zentao" fofa-query: "Zentao"

2
http/cves/2000/CVE-2000-0114.yaml
View File

@ -15,6 +15,8 @@ info:
cvss-score: 5.0 cvss-score: 5.0
remediation: Upgrade to the latest version. remediation: Upgrade to the latest version.
tags: cve,cve2000,frontpage,microsoft,edb tags: cve,cve2000,frontpage,microsoft,edb
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2002/CVE-2002-1131.yaml
View File

@ -19,6 +19,8 @@ info:
cwe-id: CWE-80 cwe-id: CWE-80
cve-id: CVE-2002-1131 cve-id: CVE-2002-1131
tags: cve2002,edb,xss,squirrelmail,cve tags: cve2002,edb,xss,squirrelmail,cve
metadata:
max-request: 5
http: http:
- method: GET - method: GET

2
http/cves/2004/CVE-2004-0519.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2004-0519 cve-id: CVE-2004-0519
cwe-id: NVD-CWE-Other cwe-id: NVD-CWE-Other
tags: squirrelmail,cve2004,cve,edb,xss tags: squirrelmail,cve2004,cve,edb,xss
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2005/CVE-2005-2428.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2005-2428 cve-id: CVE-2005-2428
cwe-id: CWE-200 cwe-id: CWE-200
tags: domino,edb,cve,cve2005 tags: domino,edb,cve,cve2005
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2005/CVE-2005-3344.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2005-3344 cve-id: CVE-2005-3344
cwe-id: NVD-CWE-Other cwe-id: NVD-CWE-Other
tags: cve,cve2005,horde,unauth tags: cve,cve2005,horde,unauth
metadata:
max-request: 2
http: http:
- method: GET - method: GET

2
http/cves/2005/CVE-2005-4385.yaml
View File

@ -15,6 +15,8 @@ info:
cve-id: CVE-2005-4385 cve-id: CVE-2005-4385
cwe-id: NVD-CWE-Other cwe-id: NVD-CWE-Other
tags: cofax,xss,cve,cve2005 tags: cofax,xss,cve,cve2005
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2006/CVE-2006-1681.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2006-1681 cve-id: CVE-2006-1681
cwe-id: NVD-CWE-Other cwe-id: NVD-CWE-Other
tags: cherokee,httpd,xss,cve,cve2006 tags: cherokee,httpd,xss,cve,cve2006
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2006/CVE-2006-2842.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2006-2842 cve-id: CVE-2006-2842
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve,cve2006,lfi,squirrelmail,edb tags: cve,cve2006,lfi,squirrelmail,edb
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2007/CVE-2007-0885.yaml
View File

@ -16,6 +16,8 @@ info:
cwe-id: NVD-CWE-Other cwe-id: NVD-CWE-Other
cvss-score: 6.8 cvss-score: 6.8
tags: cve,cve2007,jira,xss tags: cve,cve2007,jira,xss
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2007/CVE-2007-4504.yaml
View File

@ -15,6 +15,8 @@ info:
cve-id: CVE-2007-4504 cve-id: CVE-2007-4504
cwe-id: CWE-22 cwe-id: CWE-22
tags: lfi,edb,cve,cve2007,joomla tags: lfi,edb,cve,cve2007,joomla
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2007/CVE-2007-4556.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2007-4556 cve-id: CVE-2007-4556
cwe-id: NVD-CWE-Other cwe-id: NVD-CWE-Other
tags: cve,cve2007,apache,rce,struts tags: cve,cve2007,apache,rce,struts
metadata:
max-request: 1
http: http:
- method: POST - method: POST

1
http/cves/2007/CVE-2007-5728.yaml
View File

@ -17,6 +17,7 @@ info:
cve-id: CVE-2007-5728 cve-id: CVE-2007-5728
cwe-id: CWE-79 cwe-id: CWE-79
metadata: metadata:
max-request: 1
shodan-query: http.title:"phpPgAdmin" shodan-query: http.title:"phpPgAdmin"
tags: cve,cve2007,xss,pgadmin,phppgadmin,edb tags: cve,cve2007,xss,pgadmin,phppgadmin,edb

2
http/cves/2008/CVE-2008-1059.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2008-1059 cve-id: CVE-2008-1059
cwe-id: CWE-79 cwe-id: CWE-79
tags: lfi,cve,cve2008,wordpress,wp-plugin,wp,sniplets,edb,wpscan tags: lfi,cve,cve2008,wordpress,wp-plugin,wp,sniplets,edb,wpscan
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2008/CVE-2008-1061.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2008-1061 cve-id: CVE-2008-1061
cwe-id: CWE-79 cwe-id: CWE-79
tags: xss,wp-plugin,wp,edb,wpscan,cve,cve2008,wordpress,sniplets tags: xss,wp-plugin,wp,edb,wpscan,cve,cve2008,wordpress,sniplets
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2008/CVE-2008-2398.yaml
View File

@ -17,6 +17,8 @@ info:
cwe-id: CWE-79 cwe-id: CWE-79
cvss-score: 4.3 cvss-score: 4.3
tags: cve,cve2008,xss tags: cve,cve2008,xss
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2008/CVE-2008-2650.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2008-2650 cve-id: CVE-2008-2650
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve,cve2008,lfi,cmsimple tags: cve,cve2008,lfi,cmsimple
metadata:
max-request: 1
http: http:
- raw: - raw:

2
http/cves/2008/CVE-2008-4668.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2008-4668 cve-id: CVE-2008-4668
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve,cve2008,joomla,lfi,edb tags: cve,cve2008,joomla,lfi,edb
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2008/CVE-2008-4764.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2008-4764 cve-id: CVE-2008-4764
cwe-id: CWE-22 cwe-id: CWE-22
tags: edb,cve,cve2008,joomla,lfi tags: edb,cve,cve2008,joomla,lfi
metadata:
max-request: 1
http: http:
- method: GET - method: GET

1
http/cves/2008/CVE-2008-5587.yaml
View File

@ -17,6 +17,7 @@ info:
cve-id: CVE-2008-5587 cve-id: CVE-2008-5587
cwe-id: CWE-22 cwe-id: CWE-22
metadata: metadata:
max-request: 1
shodan-query: http.title:"phpPgAdmin" shodan-query: http.title:"phpPgAdmin"
tags: cve,cve2008,lfi,phppgadmin,edb tags: cve,cve2008,lfi,phppgadmin,edb

2
http/cves/2008/CVE-2008-6080.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2008-6080 cve-id: CVE-2008-6080
cwe-id: CWE-22 cwe-id: CWE-22
tags: edb,cve,cve2008,joomla,lfi tags: edb,cve,cve2008,joomla,lfi
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2008/CVE-2008-6172.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2008-6172 cve-id: CVE-2008-6172
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve2008,joomla,lfi,edb,cve tags: cve2008,joomla,lfi,edb,cve
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2008/CVE-2008-6222.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2008-6222 cve-id: CVE-2008-6222
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve2008,joomla,lfi,edb,cve tags: cve2008,joomla,lfi,edb,cve
metadata:
max-request: 1
http: http:
- method: GET - method: GET

1
http/cves/2008/CVE-2008-6465.yaml
View File

@ -17,6 +17,7 @@ info:
cve-id: CVE-2008-6465 cve-id: CVE-2008-6465
cwe-id: CWE-80 cwe-id: CWE-80
metadata: metadata:
max-request: 1
verified: true verified: true
shodan-query: title:"Parallels H-Sphere shodan-query: title:"Parallels H-Sphere
tags: cve,cve2008,xss,parallels,h-sphere tags: cve,cve2008,xss,parallels,h-sphere

2
http/cves/2008/CVE-2008-6668.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2008-6668 cve-id: CVE-2008-6668
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve2008,nweb2fax,lfi,traversal,edb,cve tags: cve2008,nweb2fax,lfi,traversal,edb,cve
metadata:
max-request: 2
http: http:
- method: GET - method: GET

1
http/cves/2008/CVE-2008-6982.yaml
View File

@ -16,6 +16,7 @@ info:
cve-id: CVE-2008-6982 cve-id: CVE-2008-6982
cwe-id: CWE-79 cwe-id: CWE-79
metadata: metadata:
max-request: 1
verified: "true" verified: "true"
tags: cve,cve2008,devalcms,xss,cms,edb tags: cve,cve2008,devalcms,xss,cms,edb

2
http/cves/2009/CVE-2009-0545.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2009-0545 cve-id: CVE-2009-0545
cwe-id: CWE-20 cwe-id: CWE-20
tags: edb,cve,cve2009,zeroshell,kerbynet,rce tags: edb,cve,cve2009,zeroshell,kerbynet,rce
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2009/CVE-2009-0932.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2009-0932 cve-id: CVE-2009-0932
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve,cve2009,horde,lfi,traversal,edb tags: cve,cve2009,horde,lfi,traversal,edb
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2009/CVE-2009-1151.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2009-1151 cve-id: CVE-2009-1151
cwe-id: CWE-77 cwe-id: CWE-77
tags: deserialization,kev,vulhub,cve,cve2009,phpmyadmin,rce tags: deserialization,kev,vulhub,cve,cve2009,phpmyadmin,rce
metadata:
max-request: 1
http: http:
- raw: - raw:

2
http/cves/2009/CVE-2009-1496.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2009-1496 cve-id: CVE-2009-1496
cwe-id: CWE-22 cwe-id: CWE-22
tags: joomla,lfi,edb,cve,cve2009 tags: joomla,lfi,edb,cve,cve2009
metadata:
max-request: 1
http: http:
- method: GET - method: GET

2
http/cves/2009/CVE-2009-1558.yaml
View File

@ -17,6 +17,8 @@ info:
cve-id: CVE-2009-1558 cve-id: CVE-2009-1558
cwe-id: CWE-22 cwe-id: CWE-22
tags: cve,iot,linksys,camera,traversal,cve2009,lfi,cisco,firmware,edb tags: cve,iot,linksys,camera,traversal,cve2009,lfi,cisco,firmware,edb
metadata:
max-request: 1
http: http:
- method: GET - method: GET

1
http/cves/2009/CVE-2009-1872.yaml
View File

@ -17,6 +17,7 @@ info:
cwe-id: CWE-79 cwe-id: CWE-79
cvss-score: 4.3 cvss-score: 4.3
metadata: metadata:
max-request: 1
shodan-query: http.component:"Adobe ColdFusion" shodan-query: http.component:"Adobe ColdFusion"
verified: "true" verified: "true"
tags: cve,cve2009,adobe,xss,coldfusion,tenable tags: cve,cve2009,adobe,xss,coldfusion,tenable

2
http/cves/2009/CVE-2009-2015.yaml
View File

@ -16,6 +16,8 @@ info:
cve-id: CVE-2009-2015 cve-id: CVE-2009-2015
cwe-id: CWE-22 cwe-id: CWE-22
tags: joomla,lfi,edb,cve,cve2009 tags: joomla,lfi,edb,cve,cve2009
metadata:
max-request: 1
http: http:
- method: GET - method: GET

Some files were not shown because too many files have changed in this diff Show More