Add files via upload

http/cves/2015/CVE-2015-1635.yaml

@@ -2,7 +2,7 @@ id: CVE-2015-1635
 info:
   name: HTTP.sys Remote Code Execution Vulnerability
   author: Phillipo
-  severity: high
+  severity: critical
   description: HTTP.sys in some versions of Microsoft Windows allows remote attackers to execute arbitrary code via crafted HTTP requests.
   reference:
     - https://www.exploit-db.com/exploits/36773
@@ -14,22 +14,15 @@ info:
     cve-id: CVE-2015-1635
   tags: cve,cve2015,kev,microsoft
 
-http:
+requests:
-  - raw:
+  - method: GET
-    - |
+    path:
-        GET /welcome.png HTTP/1.1
+      - "{{BaseURL}}/"
-        Host: {{Hostname}}
+    headers:
-        Range: bytes=0-18446744073709551615
+      Range: "bytes=0-18446744073709551615"
-    - |
-        GET /robots.txt HTTP/1.1
-        Host: {{Hostname}}
-        Range: bytes=0-18446744073709551615
 
-    matchers-condition: and
     matchers:
       - type: word
         words:
-          - "Requested Range Not Satisfiable"
+          - "416"
-      - type: status
+          - "The requested range is not satisfiable"
-        status:
-        - 416