sandeep
cd37224212
Update CVE-2018–9845.yaml
2021-09-24 15:44:02 +05:30
Prince Chaddha
6cb56d3b77
Update CVE-2018–9845.yaml
2021-09-24 15:05:45 +05:30
Prince Chaddha
0614a6031c
Update CVE-2018–9845.yaml
2021-09-24 15:05:21 +05:30
Philippe Delteil
1f679d8b4e
Create CVE-2018–9845.yaml
2021-09-23 23:18:41 -03:00
GitHub Action
77215862c9
Auto Generated CVE annotations [Wed Sep 22 10:21:33 UTC 2021] 🤖
2021-09-22 10:21:33 +00:00
sandeep
a98e8defc2
misc update
2021-09-21 16:22:53 +05:30
sandeep
8fa18933e9
id update
2021-09-21 16:20:24 +05:30
sandeep
1c613882f8
Added missing cve tags
2021-09-21 16:17:16 +05:30
sandeep
7b23f4ebd4
outdated template cleanups
2021-09-21 14:34:20 +05:30
GitHub Action
fdc98d1405
Auto Generated CVE annotations [Thu Sep 16 17:39:06 UTC 2021] 🤖
2021-09-16 17:39:06 +00:00
Prince Chaddha
631005ebaa
Update CVE-2018-12998.yaml
2021-09-16 23:03:45 +05:30
PikPikcU
3a2eacf6b9
Update CVE-2018-12998.yaml
2021-09-15 11:31:34 +07:00
PikPikcU
85c32c4cd2
Create CVE-2018-12998.yaml
2021-09-15 11:00:16 +07:00
sandeep
e831dd4fe0
lint error fix
2021-09-12 20:45:49 +05:30
sandeep
35e8c3c1cf
Added complete poc
2021-09-12 19:50:30 +05:30
Ice3man543
e9f728c321
Added cve annotations + severity adjustments
2021-09-10 16:56:40 +05:30
Prince Chaddha
13ec24c2e3
Update CVE-2018-15535.yaml
2021-09-10 12:01:01 +05:30
Muhammad Daffa
02e6ccfd7e
Create CVE-2018-15535.yaml
2021-09-09 19:48:08 +07:00
sandeep
609705f676
removed extra headers not required for template
2021-09-08 17:47:19 +05:30
Sandeep Singh
0880b65284
Rename CVE-2018–14064.yaml to CVE-2018-14064.yaml
2021-09-08 13:11:41 +05:30
Prince Chaddha
ef6350bfcc
Update and rename CVE-2018–14064.yaml to cves/2018/CVE-2018–14064.yaml
2021-09-07 18:14:38 +05:30
Prince Chaddha
960a568ef8
Merge pull request #2500 from LogicalHunter/temp-4
...
Added CVE-2018-8719.yaml Template
2021-08-31 16:30:09 +05:30
Prince Chaddha
64b25c359b
Update CVE-2018-8719.yaml
2021-08-31 12:07:28 +05:30
Noam Rathaus
5b344c944c
Updated
2021-08-30 12:50:56 +03:00
Prince Chaddha
02b429fe89
Update CVE-2018-8719.yaml
2021-08-29 17:56:50 +05:30
sandeep
ac68ef0e9a
misc updates
2021-08-29 14:44:12 +05:30
Noam Rathaus
5e27e5d528
Add description
2021-08-29 09:42:18 +03:00
Noam Rathaus
3a1f7e0910
Remove |
2021-08-29 09:36:50 +03:00
Noam Rathaus
5b0a50d514
Add description and references
2021-08-29 09:24:41 +03:00
Noam Rathaus
9f9970c8e9
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-08-29 09:15:40 +03:00
LogicalHunter
40371e83cc
Added CVE-2018-8719.yaml Template
2021-08-27 11:40:18 -07:00
forgedhallpass
419a957409
Fixing errors in templates
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-27 10:43:24 +03:00
forgedhallpass
a4250b8f2f
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-26 15:04:14 +03:00
Prince Chaddha
972ba7f4c2
Update CVE-2018-12095.yaml
2021-08-25 16:55:53 +05:30
Borna Nematzadeh
2a3b20de2c
Update CVE-2018-12095.yaml
2021-08-24 12:27:07 -07:00
LogicalHunter
60e2816815
Added CVE-2018-12095.yaml Template
2021-08-24 10:29:51 -07:00
forgedhallpass
296edfc37b
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-23 14:40:33 +03:00
Sandeep Singh
04b401a8ef
Merge pull request #2456 from projectdiscovery/payloads-update
...
Payloads positional update to keep the request format uniform
2021-08-23 15:26:35 +05:30
sandeep
1a34341c1e
Update CVE-2018-6008.yaml
2021-08-23 15:20:53 +05:30
Muhammad Daffa
906d9fd5af
Create CVE-2018-6008.yaml
2021-08-23 07:03:54 +07:00
sandeep
2aa54304ee
Payloads positional update to keep the request format uniform
2021-08-22 23:39:33 +05:30
Prince Chaddha
9cc8cd3353
Update CVE-2018-15473.yaml
2021-08-21 18:52:00 +05:30
Muhammad Daffa
1447a6d3d4
Update and rename network/openssh-username-enumeration.yaml to cves/2018/CVE-2018-15473.yaml
2021-08-21 18:55:11 +07:00
forgedhallpass
77103bc629
Satisfying the linter (all errors and warnings)
...
* whitespace modifications only
2021-08-19 17:44:46 +03:00
forgedhallpass
f55d6b75e1
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:12 +03:00
forgedhallpass
7b29be739e
Merge branch 'master' into dynamic_attributes
2021-08-19 16:23:26 +03:00
forgedhallpass
ffaff64565
Changes fixes/around dynamic attributes ("additional-fields")
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:17:27 +03:00
forgedhallpass
0b432b341b
Added comments with URLs under the "references" field
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:15:35 +03:00
forgedhallpass
e68d15ab63
Fixed mistakes/typos in the templates.
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 15:30:14 +03:00
forgedhallpass
cdf9451158
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:44:27 +03:00
Muhammad Daffa
76e6fbcf8e
Create CVE-2018-16288.yaml
2021-08-12 09:41:00 +07:00
GwanYeong Kim
19517e8855
Create CVE-2018-16167.yaml
...
LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-10 14:30:22 +09:00
Noam Rathaus
14d2dcd26b
reference
2021-08-09 16:35:43 +03:00
Prince Chaddha
0b3a307294
Update CVE-2018-15517.yaml
2021-08-04 13:44:42 +05:30
Prince Chaddha
8cc213cec1
Update CVE-2018-15745.yaml
2021-08-04 13:42:14 +05:30
GwanYeong Kim
812d4faca2
Create CVE-2018-15517.yaml
...
Using a web browser or script SSRF can be initiated against internal/external systems to conduct port scans by leveraging D LINKs MailConnect component. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/port/22/secure/ URI. This can undermine accountability of where scan or connections actually came from and or bypass the FW etc. This can be automated via script or using Web Browser.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-04 14:25:54 +09:00
GwanYeong Kim
adce7d2c39
Create CVE-2018-15745.yaml
...
Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-04 14:16:24 +09:00
Prince Chaddha
41b06a2ed7
Merge pull request #2216 from pikpikcu/patch-223
...
Add Zimbra XSS
2021-08-03 13:22:42 +05:30
Prince Chaddha
c4acd62307
Update CVE-2018-14013.yaml
2021-08-03 13:13:57 +05:30
Prince Chaddha
1c83792023
Merge pull request #2314 from daffainfo/patch-126
...
Create CVE-2018-20470.yaml
2021-08-03 13:08:36 +05:30
Muhammad Daffa
6e13d833ef
Create CVE-2018-19458.yaml
2021-08-03 06:20:58 +07:00
Muhammad Daffa
02d3258f2a
Create CVE-2018-20470.yaml
2021-08-03 06:19:42 +07:00
Prince Chaddha
1939842ab6
Merge pull request #2219 from pikpikcu/patch-225
...
Add Dolibarr xss
2021-08-02 22:32:24 +05:30
Prince Chaddha
f924e58b8e
Update CVE-2018-10095.yaml
2021-08-02 22:31:01 +05:30
Prince Chaddha
dca1dd56b1
Merge pull request #2220 from pikpikcu/patch-226
...
Add Grav CMS XSS
2021-08-02 22:26:37 +05:30
Prince Chaddha
e359b030f2
Update CVE-2018-5233.yaml
2021-08-02 22:25:21 +05:30
sandeep
e896a8982d
misc updates
2021-08-02 12:53:35 +05:30
Sandeep Singh
bc48231304
Merge pull request #2192 from gy741/rule-add-v41
...
Create CVE-2018-10818.yaml
2021-07-31 22:56:26 +05:30
sandeep
620cd107c6
Update CVE-2018-10818.yaml
2021-07-31 22:55:55 +05:30
PikPikcU
ab408ccd04
Create CVE-2018-5233.yaml
2021-07-27 16:03:59 +07:00
PikPikcU
9e2de534a8
Create CVE-2018-10095.yaml
2021-07-27 15:49:19 +07:00
PikPikcU
317a63ec9c
Create CVE-2018-14013.yaml
2021-07-27 14:34:36 +07:00
GwanYeong Kim
4029278d6c
Create CVE-2018-10818.yaml
...
The vulnerability (CVE-2018-10818) is a pre-auth remote command injection vulnerability found in the majority of LG NAS devices. You cannot simply log in with any random username and password. However, there lies a command injection vulnerability in the “password” parameter.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-27 02:27:13 +09:00
sandeep
9c66387f0f
More CVEs Template
2021-07-26 22:48:45 +05:30
Sandeep Singh
5fc3ae4ef4
Merge pull request #1872 from Vladimir-Ivanov-Git/CVE-2018-2392
...
CVE-2018-2392 SAP IGS XXE
2021-07-26 20:12:08 +05:30
Sandeep Singh
0d2e18722a
Update CVE-2018-10822.yaml
2021-07-26 01:04:31 +05:30
Muhammad Daffa
9883f04092
Create CVE-2018-10822.yaml
2021-07-25 05:49:24 +07:00
sandeep
6ccc5f8792
matcher update to handle edge cases
2021-07-25 03:05:55 +05:30
Prince Chaddha
4db131a5d3
Update CVE-2018-20985.yaml
2021-07-22 19:01:00 +05:30
Muhammad Daffa
a0581944aa
Update CVE-2018-20985.yaml
2021-07-22 19:32:43 +07:00
Muhammad Daffa
7afafb1f4f
Added references
2021-07-22 15:37:50 +07:00
Muhammad Daffa
1c54875f24
Create CVE-2018-20985.yaml
2021-07-22 15:35:12 +07:00
Prince Chaddha
f2c22f66b6
Update CVE-2018-3760.yaml
2021-07-20 17:28:29 +05:30
PikPikcU
2b156573bd
Update CVE-2018-3760.yaml
2021-07-20 16:22:18 +07:00
sandeep
4dbf36813d
removing duplicate template
2021-07-20 00:43:39 +05:30
Sandeep Singh
6eee57115c
Merge pull request #2083 from projectdiscovery/fixing-xss-matchers
...
fixing-xss-matchers
2021-07-20 00:28:01 +05:30
Sandeep Singh
ae24c38370
Merge pull request #2087 from daffainfo/patch-89
...
Add CVE-2018-16059
2021-07-20 00:25:31 +05:30
Sandeep Singh
aa2c8d210b
Update CVE-2018-16059.yaml
2021-07-20 00:15:32 +05:30
Sandeep Singh
ffce401c23
Update CVE-2018-16283.yaml
2021-07-19 18:22:19 +05:30
Muhammad Daffa
68efee3702
Merge branch 'projectdiscovery:master' into master
2021-07-19 19:48:57 +07:00
Muhammad Daffa
7a99c2db48
Rename to CVE-2018-16283
2021-07-19 19:47:31 +07:00
sandeep
c22924c1ba
misc updates
2021-07-19 18:17:12 +05:30
Muhammad Daffa
5a5b5ea18e
Create CVE-2018-16059.yaml
2021-07-19 17:16:19 +07:00
Prince Chaddha
fee3b0dbba
Update CVE-2018-5316.yaml
2021-07-19 11:32:30 +05:30
Prince Chaddha
5923b1522e
Update CVE-2018-20462.yaml
2021-07-19 11:31:57 +05:30
Prince Chaddha
1453b08a1d
Update CVE-2018-11709.yaml
2021-07-19 11:31:16 +05:30
Prince Chaddha
304ab07b28
Update CVE-2018-12031.yaml
2021-07-16 17:42:00 +05:30
Prince Chaddha
110a989ff1
Update CVE-2018-12031.yaml
2021-07-16 17:36:12 +05:30
Prince Chaddha
4238febae3
Update CVE-2018-12031.yaml
2021-07-16 17:33:02 +05:30
Muhammad Daffa
134031c9aa
Update and rename cves/2020/CVE-2020-14461.yaml to cves/2018/CVE-2018-12031.yaml
2021-07-16 18:56:28 +07:00
Prince Chaddha
84223eb0b8
Merge pull request #2033 from daffainfo/patch-67
...
Create CVE-2018-11709.yaml
2021-07-16 11:07:42 +05:30
Prince Chaddha
247c964e78
Merge pull request #2034 from daffainfo/patch-68
...
Create CVE-2018-5316.yaml
2021-07-16 11:07:32 +05:30
Prince Chaddha
f977df559c
Update CVE-2018-11709.yaml
2021-07-16 11:05:11 +05:30
Prince Chaddha
da4b0d4da7
Update CVE-2018-20462.yaml
2021-07-16 11:01:29 +05:30
Muhammad Daffa
5bee8dd716
Create CVE-2018-5316.yaml
2021-07-16 00:16:27 +07:00
Muhammad Daffa
9d84281202
Create CVE-2018-11709.yaml
2021-07-16 00:14:42 +07:00
Muhammad Daffa
367f5d225d
Create CVE-2018-20462.yaml
2021-07-16 00:12:52 +07:00
Prince Chaddha
f13d61c128
Update CVE-2018-9118.yaml
2021-07-15 17:41:16 +05:30
Prince Chaddha
42fd30dfd8
Update and rename CVE-2018-9118.yaml to cves/2018/CVE-2018-9118.yaml
2021-07-15 17:40:37 +05:30
Prince Chaddha
491b6f8e2b
Update CVE-2018-2392.yaml
2021-07-08 14:41:02 +05:30
Ivanov Vladimir
05b2837a0a
Add CVE-2018-2392.yaml
2021-07-05 19:40:37 +03:00
Sandeep Singh
52e0c861a1
Merge pull request #1733 from milo2012/master
...
Added CVE-2018-1000130/ CVE-2018-2628/ CVE-2018-2628/ CVE-2019-3401/ CVE-2020-1938/ oracle-bi-default-login/ jolokia-heap-disclosure
2021-07-02 18:27:45 +05:30
sandeep
e2a0f93f79
misc updates
2021-07-02 18:24:31 +05:30
Prince Chaddha
b3c580d290
Update CVE-2018-8715.yaml
2021-06-30 15:34:58 +05:30
Keith
1afa102620
Add CVE-2018-8715.yaml - AppWeb authentication bypass
2021-06-30 16:30:56 +08:00
PikPikcU
54f40d8f2c
Update CVE-2018-13380.yaml
2021-06-29 02:17:42 +00:00
Prince Chaddha
dd98451110
Update CVE-2018-16299.yaml
2021-06-25 12:45:04 +05:30
Prince Chaddha
fca70dd2c7
Update and rename CVE-2018-16299.yaml to cves/2018/CVE-2018-16299.yaml
2021-06-25 12:43:55 +05:30
Keith
95b34330ed
Add CVE-2018-2893.yaml - Oracle WebLogic Server Deserialization RCE
2021-06-25 03:41:02 +08:00
Keith
4e888bf3e2
Add CVE-2018-2893.yaml - Oracle WebLogic Server Deserialization RCE
2021-06-25 03:38:53 +08:00
Prince Chaddha
35cf8d1378
Merge pull request #1221 from projectdiscovery/princechaddha-patch-6
...
Create CVE-2018-9995.yaml
2021-06-24 02:33:20 +05:30
Prince Chaddha
0fbbfdd364
Update CVE-2018-9995.yaml
2021-06-24 02:32:23 +05:30
Keith
6e139881ee
fix or operator
2021-06-23 00:33:06 +08:00
Keith
139aaf2ecf
Add CVE-2018-1000130.yaml - fix spaces
2021-06-22 20:35:17 +08:00
Keith
e84dc0e94c
Add CVE-2018-1000130.yaml - Jolokia Agent Proxy JNDI Code Injection
2021-06-22 20:32:30 +08:00
Prince Chaddha
be89aed331
Update CVE-2018-2628.yaml
2021-06-21 14:26:53 +05:30
Prince Chaddha
cb4d12cc8c
Moved to cves/2018
2021-06-21 14:20:20 +05:30
Prince Chaddha
1465ad8c76
Merge pull request #1740 from Akokonunes/patch-9
...
Create CVE-2018-18775.yaml
2021-06-20 16:51:09 +05:30
Prince Chaddha
a2623f5e9d
Update CVE-2018-18775.yaml
2021-06-20 16:49:24 +05:30
Prince Chaddha
b874963894
moved to cves
2021-06-20 16:47:21 +05:30
Prince Chaddha
00ad7ee3db
Moved to cves
2021-06-20 16:43:44 +05:30
Prince Chaddha
112113437c
Moved template to cves folder
2021-06-18 16:58:27 +05:30
Sandeep Singh
44a53f7090
Merge pull request #1636 from pdelteil/patch-6
...
Update CVE-2018-18069.yaml
2021-06-18 10:01:04 +05:30
Prince Chaddha
0f590a867b
Update CVE-2018-18069.yaml
2021-06-17 22:20:02 +05:30
Prince Chaddha
eeb88e4bd1
Update CVE-2018-18069.yaml
2021-06-17 22:13:32 +05:30
Prince Chaddha
36bb1fff95
Update CVE-2018-18069.yaml
2021-06-17 22:11:00 +05:30
Sandeep Singh
5c2a07d65e
Merge pull request #1684 from geeknik/patch-107
...
Create CVE-2018-16670.yaml
2021-06-16 02:01:36 +05:30
Sandeep Singh
dbee289627
Merge pull request #1683 from geeknik/patch-106
...
Create CVE-2018-16668.yaml
2021-06-16 01:59:47 +05:30
Sandeep Singh
6c48452767
Merge pull request #1682 from geeknik/patch-105
...
Create CVE-2018-16671.yaml
2021-06-16 01:58:32 +05:30
Prince Chaddha
edf4a45ee4
Update CVE-2018-1000533.yaml
2021-06-15 16:38:28 +05:30
Prince Chaddha
72d9357cf6
Update CVE-2018-1000533.yaml
2021-06-15 16:23:59 +05:30
Prince Chaddha
3cfc921b71
Update CVE-2018-1000533.yaml
2021-06-15 15:31:36 +05:30
PikPikcU
e970a09c53
Create CVE-2018-1000533.yaml
2021-06-15 07:28:10 +00:00
Geeknik Labs
e83ba1b5ec
Create CVE-2018-16670.yaml
2021-06-11 12:11:36 +00:00
Geeknik Labs
c451137ffc
Create CVE-2018-16668.yaml
2021-06-11 12:10:29 +00:00
Geeknik Labs
210465a658
Create CVE-2018-16671.yaml
2021-06-11 12:09:29 +00:00
Sandeep Singh
b17196ee18
Merge pull request #1679 from Mad-robot/master
...
Update CVE-2018-3167.yaml
2021-06-11 16:25:07 +05:30
Prince Chaddha
bc4a0d37b1
Moving template to cves folder
2021-06-11 15:58:02 +05:30
SaN ThosH
a2e740148f
Update CVE-2018-3167.yaml
2021-06-11 13:21:20 +05:30
SaN ThosH
bfed8d5200
Update CVE-2018-3167.yaml
2021-06-11 13:19:46 +05:30