daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add description

patch-1
Noam Rathaus 2021-10-26 15:22:21 +03:00
parent 0f1a9cf2b5
commit 7d0c8669a3
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
vulnerabilities/other/maccmsv10-backdoor.yaml
View File

@ -3,6 +3,7 @@ info:
name: Maccmsv10 Backdoor
author: princechaddha
severity: critical
description: A backdoor has been found in Maccmsv10, the backdoor is accessible via the '/index.php/bbs/index/download' endpoint and the special 'getpwd' parameter value of 'WorldFilledWithLove'.
tags: maccmsv10,rce
requests:

1
vulnerabilities/other/rockmongo-xss.yaml
View File

@ -4,6 +4,7 @@ info:
name: RockMongo V1.1.8 XSS
author: pikpikcu
severity: medium
description: A vulnerability in RockMongo allows attackers to inject arbitrary javascript into the response returned by the application.
reference: https://packetstormsecurity.com/files/136658/RockMongo-1.1.8-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
tags: rockmongo,xss

1
vulnerabilities/other/ruijie-networks-lfi.yaml
View File

@ -4,6 +4,7 @@ info:
name: Ruijie Networks Switch eWeb S29_RGOS 11.4 LFI
author: pikpikcu
severity: high
description: A vulnerability in Ruijie Networks Switch allows remote unauthenticated attackers to access locally stored files and retrieve their content via the 'download.do' endpoint.
reference: https://exploit-db.com/exploits/48755
tags: ruijie,lfi