From 58c2f1bebacd67ac6c8521e852b664dbdb607359 Mon Sep 17 00:00:00 2001
From: sullo <sullo@cirt.net>
Date: Thu, 30 Mar 2023 15:48:59 -0400
Subject: [PATCH] Some manual enhancements to avoid dashboard issues

---
 vulnerabilities/other/inspur-clusterengine-rce.yaml | 12 +++++++++++-
 vulnerabilities/other/netis-info-leak.yaml          | 11 +++++++++--
 vulnerabilities/other/nextjs-redirect.yaml          | 11 ++++++++++-
 3 files changed, 30 insertions(+), 4 deletions(-)

diff --git a/vulnerabilities/other/inspur-clusterengine-rce.yaml b/vulnerabilities/other/inspur-clusterengine-rce.yaml
index eed5f53949..df2b5413b7 100644
--- a/vulnerabilities/other/inspur-clusterengine-rce.yaml
+++ b/vulnerabilities/other/inspur-clusterengine-rce.yaml
@@ -1,11 +1,19 @@
 id: inspur-clusterengine-rce
 
 info:
-  name: Inspur Clusterengine V4 SYSshell RCE
+  name: Inspur Clusterengine V4 SYSshell - Remote Command Execution
   author: ritikchaddha
   severity: critical
+  description: Inspur Clusterengine V4 SYSshell was found and allows remote command execution by design.
   reference:
+    - https://www.inspursystems.com/
     - https://github.com/MzzdToT/ClusterEngineV4.0sysShell_rce
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-21224
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
+    cwe-id: CWE-88
+    cve-id: CVE-2020-21224
   metadata:
     fofa-query: title="TSCEV4.0"
   tags: inspur,clusterengine,rce
@@ -32,3 +40,5 @@ requests:
       - type: status
         status:
           - 200
+
+# Enhanced by cs 03/27/2023
diff --git a/vulnerabilities/other/netis-info-leak.yaml b/vulnerabilities/other/netis-info-leak.yaml
index 843fffc6d9..4cca60639b 100644
--- a/vulnerabilities/other/netis-info-leak.yaml
+++ b/vulnerabilities/other/netis-info-leak.yaml
@@ -1,12 +1,17 @@
 id: netis-info-leak
 
 info:
-  name: Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak
+  name: Netis E1+ V1.2.32533 - WiFi Password Disclosure
   author: gy741
-  severity: medium
+  severity: critical
   description: A vulnerability in Netis allows remote unauthenticated users to disclose the WiFi password of the remote device.
   reference:
     - https://www.exploit-db.com/exploits/48384
+    - https://www.netis-systems.com/
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.5
+    cwe-id: CWE-200
   tags: netis,exposure,edb
 
 requests:
@@ -34,3 +39,5 @@ requests:
         part: body
         regex:
           - "'rp_soon_password':'([A-Za-z0-9]+)'"
+
+# Enhanced by cs 03/27/2023
diff --git a/vulnerabilities/other/nextjs-redirect.yaml b/vulnerabilities/other/nextjs-redirect.yaml
index 042ed95b98..37c89ae6d3 100644
--- a/vulnerabilities/other/nextjs-redirect.yaml
+++ b/vulnerabilities/other/nextjs-redirect.yaml
@@ -1,11 +1,18 @@
 id: nextjs-redirect
 
 info:
-  name: Next.js Open Redirect on “_next/image” via Improper Path Parsing
+  name: Next.js <1.2.3 - Open Redirect
   author: DhiyaneshDk
   severity: medium
+  description: Next.js contains an open redirect via “_next/image” due to improper path parsing.
+  remediation: Upgrade to Next.js version 1.2.3 or higher.
   reference:
+    - https://github.com/netlify/netlify-ipx/security/advisories/GHSA-9jjv-524m-jm98
     - https://samcurry.net/universal-xss-on-netlifys-next-js-library/
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 6.1
+    cwe-id: CWE-601
   metadata:
     shodan-query: html:"/_next/static"
   tags: redirect,nextjs
@@ -25,3 +32,5 @@ requests:
       - type: status
         status:
           - 308
+
+# Enhanced by cs 03/27/2023