Commit Graph

598 Commits (0384b0d51d88a51a0000a20df31808045c328b92)

Author SHA1 Message Date
Ritik Chaddha 61f94b90d8
Update eatery-restaurant-open-redirect.yaml 2022-08-10 14:32:39 +05:30
Ritik Chaddha 62f10760af
Update brandfolder-open-redirect.yaml 2022-08-10 14:27:59 +05:30
Ritik Chaddha 33d108ee76
Update advanced-access-manager-lfi.yaml 2022-08-10 14:19:57 +05:30
Ritik Chaddha 4c9182c73e
Update ad-widget-lfi.yaml 2022-08-10 14:18:06 +05:30
Ritik Chaddha 88f642a48a
Update wp-woocommerce-email-verification.yaml 2022-08-10 14:00:37 +05:30
Ritik Chaddha 8377f56550
Update wp-woocommerce-file-download.yaml 2022-08-10 13:58:11 +05:30
Prince Chaddha 518d92e567
Rename vulnerabilities/wordpress/wp-install.yaml to exposed-panels/wordpress/wp-install.yaml 2022-08-09 14:39:07 -07:00
Prince Chaddha 19b9eae7fe
Merge pull request #5018 from scent2d/CVE-2020-8772
Create CVE-2020-8772.yaml
2022-08-09 12:18:44 -07:00
Prince Chaddha ef71f15309
Merge pull request #5050 from pussycat0x/master
CVE-2019-10692
2022-08-09 02:20:37 -07:00
Ritik Chaddha 3ca2ec0945
Update CVE-2019-10692.yaml 2022-08-08 19:11:01 +05:30
Ritik Chaddha 3964e22f69
Update CVE-2019-10692.yaml 2022-08-08 19:08:44 +05:30
pussycat0x 383ed21913
Add files via upload 2022-08-08 18:36:30 +05:30
Prince Chaddha 3950e8304c
Update wp-blogroll-fun-xss.yaml 2022-08-06 10:36:51 -07:00
Akincibor db12feeead Update Wordpress templates: typo, cve-id, ref & remove dupe 2022-08-06 19:19:49 +02:00
Akincibor db692605d4 Update Wordpress templates: typo, cve-id, ref & remove dupe 2022-08-06 18:54:58 +02:00
Prince Chaddha 9e4645961c
Delete wordpress-infinitewp-auth-bypass.yaml 2022-08-06 00:09:02 -07:00
MostInterestingBotInTheWorld b2e886f09b
Dashboard Content Enhancements (#5009)
Dashboard Content Enhancements
2022-08-05 09:57:51 -04:00
pussycat0x e9974fe5ad
Delete wp-revslider-release-log-detect.yaml 2022-08-05 18:46:53 +05:30
Prince Chaddha 3ef2eea48f
Merge pull request #5004 from projectdiscovery/wp-avchat-3-xss
Create wp-avchat-3-xss.yaml
2022-08-05 07:57:58 +04:00
Prince Chaddha e2d0cfed57
Update and rename wp-avchat-3-xss.yaml to avchat-video-chat-xss.yaml 2022-08-05 07:54:15 +04:00
Prince Chaddha 5538c251dd
Update and rename wp-athlon-manage-calameo-publications-xss.yaml to calameo-publications-xss.yaml 2022-08-05 07:48:41 +04:00
Dhiyaneshwaran 738df35bfc
Create wp-blogroll-fun-xss.yaml 2022-08-04 22:23:16 +05:30
Dhiyaneshwaran 9128955363
Delete wp-blogroll-fun-xss.yaml 2022-08-04 22:22:52 +05:30
Dhiyaneshwaran aa4bec9d62
Create wp-blogroll-fun-xss.yaml 2022-08-04 22:21:53 +05:30
Dhiyaneshwaran 404f1d56eb
Create wp-avchat-3-xss.yaml 2022-08-04 22:10:29 +05:30
Dhiyaneshwaran 94dcb8f006
Create wp-athlon-manage-calameo-publications-xss.yaml 2022-08-04 22:01:49 +05:30
Dhiyaneshwaran 4bc8d0fa91
Delete wp-athlon-manage-calameo-publications-xss.yaml 2022-08-04 22:01:14 +05:30
Dhiyaneshwaran a02733dcbc
Create wp-athlon-manage-calameo-publications-xss.yaml 2022-08-04 21:55:50 +05:30
Dhiyaneshwaran b103fb9ef0
Update wp-revslider-release-log-detect.yaml 2022-08-02 15:00:54 +05:30
Dhiyaneshwaran 0963069a3c
Update and rename wp-revslider-release_log-detect.yaml to wp-revslider-release-log-detect.yaml 2022-08-02 14:47:17 +05:30
pussycat0x 76a55fc884
Add files via upload 2022-08-02 11:48:19 +05:30
MostInterestingBotInTheWorld 8c3ab6c654
Dashboard Content Enhancements (#4943)
Dashboard Content Enhancements
2022-07-29 10:04:23 -04:00
Ritik Chaddha efcd51e82c
Create analytify-plugin-xss.yaml 2022-07-27 16:46:12 +05:30
Prince Chaddha 58bd909659
Create members-list-xss.yaml 2022-07-09 18:42:35 +05:30
Prince Chaddha 78304fd30b
Merge pull request #4762 from projectdiscovery/curcy-xss
Create curcy-xss.yaml
2022-07-06 16:32:05 +05:30
Prince Chaddha 68eb6586c3
Merge pull request #4764 from projectdiscovery/clearfy-cache-xss
Create clearfy-cache-xss.yaml
2022-07-06 16:31:43 +05:30
Prince Chaddha 81ef0bdbcf
Merge pull request #4765 from projectdiscovery/checkout-fields-manager-xss
Create checkout-fields-manager-xss.yaml
2022-07-06 16:31:22 +05:30
Prince Chaddha edf09d30b6
Create 404-to-301-xss.yaml 2022-07-06 16:16:17 +05:30
Prince Chaddha 11dda1d89e
Create checkout-fields-manager-xss.yaml 2022-07-06 16:12:13 +05:30
Prince Chaddha 154f19ed6d
Create clearfy-cache-xss.yaml 2022-07-06 16:04:32 +05:30
Prince Chaddha 2b1284f34c
Create curcy-xss.yaml 2022-07-06 15:52:41 +05:30
Prince Chaddha 5692419f40
Merge pull request #4760 from projectdiscovery/modula-image-gallery-xss
Create modula-image-gallery-xss.yaml
2022-07-06 15:38:05 +05:30
Prince Chaddha 7bd3b7ffec
Update shortpixel-image-optimizer-xss.yaml 2022-07-06 15:37:10 +05:30
Prince Chaddha 6adcefe3ac
Update modula-image-gallery-xss.yaml 2022-07-06 15:36:43 +05:30
Prince Chaddha 865cced275
Merge pull request #4759 from projectdiscovery/shortpixel-image-optimizer-xss
Create shortpixel-image-optimizer-xss.yaml
2022-07-06 15:35:19 +05:30
Prince Chaddha 6a0c3c9892
Create modula-image-gallery-xss.yaml 2022-07-06 15:32:14 +05:30
Prince Chaddha 0509c8c372
Update woocommerce-pdf-invoices-xss.yaml 2022-07-06 15:31:47 +05:30
Prince Chaddha 85976d219f
Update shortpixel-image-optimizer-xss.yaml 2022-07-06 15:31:26 +05:30
Prince Chaddha 067658568e
Create shortpixel-image-optimizer-xss.yaml 2022-07-06 15:26:41 +05:30
Prince Chaddha 9353c41e78
Update woocommerce-pdf-invoices-xss.yaml 2022-07-06 15:25:31 +05:30
Prince Chaddha fac95562b9
Update woocommerce-pdf-invoices-xss.yaml 2022-07-06 15:19:30 +05:30
Prince Chaddha daca40f05e
Create woocommerce-pdf-invoices-xss.yaml 2022-07-06 15:13:25 +05:30
Prince Chaddha 1dccc86c88
Create wp-insert-php-xss.yaml 2022-07-04 17:31:46 +05:30
Prince Chaddha 255b2cf91d Revert "Create wp-insert-php-xss.yaml"
This reverts commit 415ba61d73.
2022-07-04 17:30:26 +05:30
Prince Chaddha 415ba61d73
Create wp-insert-php-xss.yaml 2022-07-04 17:29:53 +05:30
Prince Chaddha 123746b30e
Update and rename sym404.yaml to wp-sym404.yaml 2022-07-02 09:22:28 +05:30
Prince Chaddha 66cb988803
Update wp-all-export-xss.yaml 2022-07-01 23:56:05 +05:30
Prince Chaddha f5fe9bd9c0
Create wp-all-export-xss.yaml 2022-07-01 23:54:26 +05:30
Prince Chaddha a55edcdca4
Create wpify-woo-czech-xss.yaml 2022-06-28 08:00:31 +05:30
Prince Chaddha 17e1643c64 Revert "Create wpify-woo-czech-xss.yaml"
This reverts commit 6d44b2ee90.
2022-06-28 07:59:11 +05:30
Prince Chaddha 6d44b2ee90
Create wpify-woo-czech-xss.yaml 2022-06-28 07:57:59 +05:30
Prince Chaddha 3f4a9f8783
Merge pull request #4667 from projectdiscovery/new-user-approve-xss
Create new-user-approve-xss.yaml
2022-06-25 14:54:51 +05:30
Prince Chaddha 0c4c64ed5c
Create new-user-approve-xss.yaml 2022-06-25 14:11:05 +05:30
Ritik Chaddha 101b139dfd
Update sym404.yaml 2022-06-25 01:02:35 +05:30
Prince Chaddha 4880b0fa67
Update sym404.yaml 2022-06-25 00:36:26 +05:30
Prince Chaddha de213e905d
Update sym404.yaml 2022-06-25 00:15:02 +05:30
Dhiyaneshwaran 5b0461286c
Update sym404.yaml 2022-06-24 15:25:56 +01:00
Dhiyaneshwaran f348eae9d1
Create sym404.yaml 2022-06-23 17:39:44 +01:00
sullo 9bb6b91ba3
Remove Links for Dead sites (#4554)
* Deleted buffalo-config-injection.yaml
Add reference from buffalo-config-injection.yaml to CVE-2021-20091.yaml

* Delete vulnerabilities/other/buffalo-config-injection.yaml

* Remove/replace links to dead sites:
* archives.neohapsis.com
* osvdb.org
* securityfocus.com
2022-06-08 02:20:59 +05:30
Prince Chaddha 7ada510859
Fixed possible FPs in open redirect templates (#4544)
* Fixed possible FPs in open redirect templates

We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results.

* updated example domain

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 16:10:15 +05:30
MostInterestingBotInTheWorld 5da580f9c2
Dashboard Content Enhancements (#4519)
Dashboard Content Enhancements
2022-06-03 15:12:31 -04:00
Prince Chaddha b2be30c340
Update ait-csv-import-export-rce.yaml 2022-05-23 14:04:27 +05:30
GwanYeong Kim aacb8f738f Create ait-csv-import-export-rce.yaml
The AIT CSV Import/Export plugin <= 3.0.3 allows unauthenticated remote attackers to upload and execute arbitrary PHP code.  The upload-handler does not require authentication, nor validates the uploaded content.

Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-22 10:12:09 +09:00
sandeep 22ab0f9d53 minor matcher update 2022-05-15 04:48:52 +05:30
Dhiyaneshwaran a3ce25a5a6
Authenticated Wordpress XSS Templates (#4398)
* Create CVE-2021-25075.yaml

* Create seo-redirection-xss.yaml
2022-05-15 04:32:53 +05:30
MostInterestingBotInTheWorld 581b7a627b
Dashboard Content Enhancements (#4381)
Dashboard Content Enhancements
2022-05-13 16:26:43 -04:00
Prince Chaddha a584def0e1
Create age-gate-open-redirect.yaml 2022-05-11 02:14:39 +05:30
Prince Chaddha f7fd0efead
Create wp-under-construction-ssrf.yaml 2022-05-10 15:00:09 +05:30
Prince Chaddha 91a4cd3fa0
Create newsletter-manager-open-redirect.yaml 2022-05-10 14:44:58 +05:30
Prince Chaddha 7003c19dda
Create wp-security-open-redirect.yaml 2022-05-10 14:33:03 +05:30
Prince Chaddha c48987d818
Update health-check-lfi.yaml 2022-05-03 01:12:36 +05:30
Dhiyaneshwaran ce8efa4f01
Create health-check-lfi.yaml 2022-05-01 15:39:20 +05:30
Muhammad Daffa 96cc1928eb
Update wp-code-snippets-xss.yaml 2022-04-29 22:01:22 +07:00
sullo c3d4dfd6ae
Tenda Template Enhancementleanup (#4257)
* Replace § markers with {{ }} pairs

* Clean up new Tenda admin panel template

* Update tenda-11n-wireless-router-login.yaml

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-29 10:34:34 +05:30
forgedhallpass 5451673368 Moved and renamed templates containing a CVE under their correct location 2022-04-22 19:25:23 +03:00
forgedhallpass 209538baa6 refactor: Description field uniformization
* info field reorder
* reference values refactored to list
* added new lines after the id and before the protocols
* removed extra new lines
* split really long descriptions to multiple lines (part 1)
* other minor fixes
2022-04-22 13:38:41 +03:00
MostInterestingBotInTheWorld 31312b1c19
Dashboard Content Enhancements (#4191)
Dashboard Content Enhancements
2022-04-21 17:16:41 -04:00
MostInterestingBotInTheWorld 3e2e842d0e
Dashboard Content Ehnancements (#4183)
* Spacing and other template cleanups
* duplicate yaml tags

Co-authored-by: sullo <sullo@cirt.net>
2022-04-18 10:00:15 -04:00
Prince Chaddha 433bc68f85
Update ninjaform-open-redirect.yaml 2022-04-18 13:47:45 +04:00
Muhammad Daffa fb17e3c779
Update ninjaform-open-redirect.yaml 2022-04-18 14:04:09 +07:00
Muhammad Daffa d8d4d30a3d
Update wp-woocommerce-email-verification.yaml (#4175) 2022-04-17 11:51:29 +05:30
MostInterestingBotInTheWorld 5730781afa
Dashboard Content Enhancements (#4157)
* Enhancement: exposures/files/joomla-file-listing.yaml by cs

* Enhancement: cves/2019/CVE-2019-5418.yaml by mp

* Enhancement: cves/2016/CVE-2016-10940.yaml by mp

* Enhancement: cves/2015/CVE-2015-4694.yaml by mp

* Enhancement: cves/2016/CVE-2016-10960.yaml by mp

* Enhancement: cves/2021/CVE-2021-20091.yaml by mp

* Enhancement: cves/2021/CVE-2021-20092.yaml by mp

* Enhancement: vulnerabilities/other/solar-log-authbypass.yaml by mp

* Enhancement: vulnerabilities/wordpress/churchope-lfi.yaml by mp

* Enhancement: vulnerabilities/other/solar-log-authbypass.yaml by mp

* Enhancement: cves/2017/CVE-2017-10075.yaml by mp

* Enhancement: cves/2021/CVE-2021-27358.yaml by mp

* Enhancement: cves/2017/CVE-2017-9833.yaml by mp

* Enhancement: vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml by mp

* Enhancement: vulnerabilities/wordpress/wp-spot-premium-lfi.yaml by mp

* Enhancement: misconfiguration/symfony-debugmode.yaml by mp

* Enhancement: cves/2016/CVE-2016-10940.yaml by mp

* Enhancement: cves/2015/CVE-2015-4694.yaml by mp

* Enhancement: cves/2016/CVE-2016-10960.yaml by mp

* Enhancement: cves/2015/CVE-2015-4694.yaml by mp

* Enhancement: vulnerabilities/wordpress/churchope-lfi.yaml by mp

* Enhancement: cves/2017/CVE-2017-10075.yaml by mp

* Enhancement: cves/2021/CVE-2021-27358.yaml by mp

* Enhancement: vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml by mp

* Enhancement: vulnerabilities/wordpress/wp-spot-premium-lfi.yaml by mp

* Enhancement: vulnerabilities/wordpress/newsletter-open-redirect.yaml by mp

* Enhancement: vulnerabilities/wordpress/newsletter-open-redirect.yaml by mp

* Enhancement: vulnerabilities/wordpress/pieregister-open-redirect.yaml by mp

* Enhancement: cves/2021/CVE-2021-25055.yaml by mp

* Enhancement: cves/2021/CVE-2021-25028.yaml by mp

* Enhancement: vulnerabilities/wordpress/noptin-open-redirect.yaml by mp

* Enhancement: vulnerabilities/wordpress/elex-woocommerce-xss.yaml by mp

* Enhancement: vulnerabilities/wordpress/my-chatbot-xss.yaml by mp

* Enhancement: vulnerabilities/wordpress/wp-adaptive-xss.yaml by mp

* Enhancement: cves/2021/CVE-2021-24947.yaml by mp

* Enhancement: cves/2021/CVE-2021-24406.yaml by mp

* Enhancement: vulnerabilities/wordpress/elementorpage-open-redirect.yaml by mp

* Enhancement: cves/2016/CVE-2016-10033.yaml by mp

* Enhancement: cves/2021/CVE-2021-31682.yaml by mp

* Enhancement: vulnerabilities/wordpress/wp-woocommerce-file-download.yaml by mp

* Enhancement: cves/2021/CVE-2021-22986.yaml by mp

* Enhancement: vulnerabilities/wordpress/newsletter-open-redirect.yaml by mp

* Enhancement: vulnerabilities/wordpress/pieregister-open-redirect.yaml by mp

* Enhancement: cves/2021/CVE-2021-25055.yaml by mp

* Enhancement: cves/2021/CVE-2021-25028.yaml by mp

* Enhancement: vulnerabilities/wordpress/noptin-open-redirect.yaml by mp

* Enhancement: vulnerabilities/wordpress/elex-woocommerce-xss.yaml by mp

* Enhancement: cves/2021/CVE-2021-24947.yaml by mp

* Enhancement: cves/2021/CVE-2021-24406.yaml by mp

* Enhancement: cves/2021/CVE-2021-22986.yaml by mp

* Enhancement: cves/2016/CVE-2016-10033.yaml by mp

* Enhancement: vulnerabilities/wordpress/elementorpage-open-redirect.yaml by mp

* Enhancement: cves/2021/CVE-2021-24406.yaml by mp

* Relocating to CVE folder

* Enhancement: cves/2017/CVE-2017-14651.yaml by mp

* Enhancement: cves/2020/CVE-2020-24589.yaml by mp

* Enhancement: vulnerabilities/confluence/confluence-ssrf-sharelinks.yaml by mp

* Enhancement: cves/2019/CVE-2019-2729.yaml by mp

* Enhancement: cves/2018/CVE-2018-2893.yaml by mp

* Enhancement: cves/2018/CVE-2018-2628.yaml by mp

* Enhancement: cves/2018/CVE-2018-3238.yaml by mp

* Enhancement: cves/2018/CVE-2018-3238.yaml by mp

* Enhancement: cves/2017/CVE-2017-3528.yaml by mp

* Enhancement: cves/2019/CVE-2019-2588.yaml by mp

* Enhancement: cves/2021/CVE-2021-31755.yaml by mp

* Enhancement: cves/2021/CVE-2021-42071.yaml by mp

* Enhancement: misconfiguration/zabbix-dashboards-access.yaml by mp

* Enhancement: cves/2017/CVE-2017-14651.yaml by mp

* Enhancement: cves/2020/CVE-2020-24589.yaml by mp

* Enhancement: vulnerabilities/confluence/confluence-ssrf-sharelinks.yaml by mp

* Enhancement: cves/2019/CVE-2019-2729.yaml by mp

* Enhancement: cves/2018/CVE-2018-2893.yaml by mp

* Enhancement: cves/2018/CVE-2018-3238.yaml by mp

* Enhancement: cves/2017/CVE-2017-3528.yaml by mp

* Enhancement: cves/2021/CVE-2021-42071.yaml by mp

* Syntax corrections
Added some cve-id fields
Removed duplicate dashboard comments

* Tag typo

Co-authored-by: sullo <sullo@cirt.net>
2022-04-15 12:39:44 -04:00
MostInterestingBotInTheWorld a24ef794b7
Dashboard Content Enhancements (#4031)
Dashboard Content Enhancements
2022-04-07 09:53:15 -04:00
Prince Chaddha 1d0be90f62
Merge pull request #4044 from Splint3r7/master
Enhancement - PR#4009
2022-04-04 18:40:48 +05:30
Hassan Khan 45b992d75d Updating Templates 2022-04-03 14:17:31 +05:00
Prince Chaddha ef807cd420
Merge pull request #4005 from daffainfo/patch-7
Create admin-word-count-column-lfi.yaml
2022-04-02 16:11:47 +05:30
Prince Chaddha 786636813e
Update admin-word-count-column-lfi.yaml 2022-04-02 16:09:39 +05:30
Prince Chaddha 58d84ce38a
Merge pull request #4004 from daffainfo/patch-6
Create amministrazione-aperta-lfi.yaml
2022-04-02 16:07:07 +05:30
Prince Chaddha 56b6ef7205
Update amministrazione-aperta-lfi.yaml 2022-04-02 16:04:50 +05:30
Prince Chaddha b09ac6b3bc
Merge pull request #4009 from Splint3r7/master
Add video-synchro-pdf & cab-fare-calculator - WordPress Plugin LFI
2022-04-02 15:32:30 +05:30