Commit Graph

12108 Commits (3bc20d0d12d9d955ca22a3efa73f2e1226fb9ab0)

Author SHA1 Message Date
cckuailong 5b424fafe1
add CVE-2022-23944 (#3605)
* add CVE-2022-23944

* fix CVE-2021-23944 matcher type

* Update CVE-2022-23944.yaml

* minor updates

Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-27 15:59:26 +05:30
GitHub Action 4bd8b86a3e Auto Generated CVE annotations [Thu Jan 27 10:22:20 UTC 2022] 🤖 2022-01-27 10:22:20 +00:00
Sandeep Singh 53da8a8206
Added CVE-2021-21973 (#3615)
* Added CVE-2021-21973

* minor update
2022-01-27 15:50:44 +05:30
Prince Chaddha 17e1c5e557
Merge pull request #3613 from Akokonunes/patch-107
Create laravel-ignition-xss.yaml
2022-01-27 14:47:34 +05:30
Prince Chaddha 9e3473d55f
Update and rename laravel-ignition-xss.yaml to vulnerabilities/laravel/laravel-ignition-xss.yaml 2022-01-27 14:45:41 +05:30
Philippe Delteil f79fa33097
Update shopify-takeover.yaml (#3612) 2022-01-27 14:38:16 +05:30
Prince Chaddha fd777fd0b6
Update and rename CVE-2020-18268.yaml to cves/2020/CVE-2020-18268.yaml 2022-01-27 14:18:01 +05:30
Roberto Nunes 7ef4b84f10
Create CVE-2020-18268.yaml 2022-01-27 07:01:17 +09:00
Roberto Nunes 749f0bddcc
Create laravel-ignition-xss.yaml 2022-01-27 06:45:48 +09:00
GitHub Action 3a1d847b57 Auto Generated CVE annotations [Wed Jan 26 17:59:10 UTC 2022] 🤖 2022-01-26 17:59:10 +00:00
Smaran Chand 0babc27b75
Added elFinder filemanger exposed (#3602)
* Added elFinder filemanger exposed

* Template name / id update + more reference

* template name update

* matcher update

* Modified the matcher.

* minor updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-26 23:27:45 +05:30
MostInterestingBotInTheWorld 7b0292bbfb Enhancement: cnvd/2019/CNVD-2019-01348.yaml by mp 2022-01-26 11:56:44 -05:00
sullo 9891b971cb
Merge pull request #3604 from MostInterestingBotInTheWorld/master
Enhancement: Replace nonstandard ascii chars with chars we like better
2022-01-26 10:38:24 -05:00
Sandeep Singh 21b7bd1547
Update CVE-2017-7391.yaml 2022-01-26 17:37:19 +05:30
Prince Chaddha a4d1bdca76
Merge pull request #3606 from dadevel/typo3-detect
Add typo3-detect
2022-01-26 17:21:13 +05:30
Prince Chaddha 73cd3367e3
Update typo3-detect.yaml 2022-01-26 17:12:53 +05:30
Prince Chaddha 65ad6705dd
Merge pull request #3607 from dadevel/typo3-login
Add typo3-login
2022-01-26 17:06:31 +05:30
Prince Chaddha 17349bf1d8
Update typo3-login.yaml 2022-01-26 17:03:49 +05:30
Dhiyaneshwaran 7bd14d5cbc
OpenBMCS Info Disclosure & SSRF Unauth (#3603)
* Create gophish-login.yaml

* Create gophish-workflow.yaml

* Update gophish-workflow.yaml

* Create openbmcs-secret-disclosure.yaml

* Create openbmcs-ssrf.yaml

* Added additional matcher

* Added missing header + matcher update

Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: root <root@3gzk.l.time4vps.cloud>
2022-01-26 16:56:40 +05:30
Sandeep Singh 74dc6a6293
Added missing header + matcher update 2022-01-26 16:54:41 +05:30
Sandeep Singh 254fa1959a
Added additional matcher 2022-01-26 16:52:12 +05:30
dadevel c77a7dc417
Add typo3-detect 2022-01-26 11:59:43 +01:00
dadevel 8a7baf1941
Add typo3-login 2022-01-26 11:56:04 +01:00
Sullo c99e6415fd Properly escape a ' 2022-01-25 14:53:41 -05:00
Sullo 9a8482172d Remove:
- various nonstandard ascii chars in favor of the standard ones (mostly quotes)
 - spaces after : in some files
2022-01-25 14:38:53 -05:00
Dhiyaneshwaran 33b0868740
Create openbmcs-ssrf.yaml 2022-01-25 23:18:50 +05:30
Dhiyaneshwaran 86a21a68bc
Create openbmcs-secret-disclosure.yaml 2022-01-25 23:03:15 +05:30
root e7d42abe0b Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates 2022-01-25 19:10:17 +02:00
GitHub Action 173f0ef2d3 Auto Generated CVE annotations [Tue Jan 25 16:51:00 UTC 2022] 🤖 2022-01-25 16:51:00 +00:00
Sandeep Singh 4401b9ebe9
Merge pull request #3599 from projectdiscovery/CVE-2021-24838
Added CVE-2021-24838
2022-01-25 22:19:30 +05:30
Sandeep Singh 494a80799c
Merge pull request #3600 from MostInterestingBotInTheWorld/dashboard
Enhancement: cves/2021/CVE-2021-29156.yaml by cs
2022-01-25 22:09:27 +05:30
sandeep 8c7ec49185 lint fix 2022-01-25 22:08:01 +05:30
Prince Chaddha 97b38b98b4
Update CVE-2022-21371.yaml 2022-01-25 21:06:14 +05:30
Prince Chaddha 91d9b71864
Merge pull request #3596 from gy741/rule-add-v93
Create CVE-2021-39350.yaml
2022-01-25 17:16:12 +05:30
sandeep 47e34dba46 Added CVE-2021-24838 2022-01-25 17:14:00 +05:30
Prince Chaddha 6a2ff6f09e
Update CVE-2021-39350.yaml 2022-01-25 17:08:01 +05:30
Prince Chaddha 338bb99ec7
Merge pull request #3594 from gy741/rule-add-v91
Create gnuboard-cms-detect.yaml
2022-01-25 16:41:58 +05:30
GitHub Action 48add9c36b Auto Generated CVE annotations [Tue Jan 25 11:06:39 UTC 2022] 🤖 2022-01-25 11:06:39 +00:00
Prince Chaddha 2460dceff3
Update CVE-2022-21371.yaml 2022-01-25 16:36:10 +05:30
Prince Chaddha 8654a4a3fa
Merge pull request #3590 from myztique/patch-1
Add BigBlueButton Login Panel
2022-01-25 16:35:03 +05:30
Prince Chaddha 1a0809deb1
Update bigbluebutton-login.yaml 2022-01-25 16:33:32 +05:30
GitHub Action 5f2efaf5df Auto Generated CVE annotations [Tue Jan 25 09:56:37 UTC 2022] 🤖 2022-01-25 09:56:37 +00:00
on abfbfe29ae CVE-2022-21371.yaml 2022-01-25 12:48:56 +03:00
GitHub Action e035a797c6 Auto Generated CVE annotations [Tue Jan 25 09:41:31 UTC 2022] 🤖 2022-01-25 09:41:31 +00:00
Onurhan Erdoğdu 68cc84e8c9
Merge branch 'projectdiscovery:master' into master 2022-01-25 12:39:31 +03:00
GwanYeong Kim 67b2955d98 Create CVE-2021-39350.yaml
The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727.

Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-01-25 17:31:13 +09:00
GitHub Action a96f336f15 Auto Generated CVE annotations [Tue Jan 25 08:23:33 UTC 2022] 🤖 2022-01-25 08:23:33 +00:00
Prince Chaddha a8b57df334
Update bigbluebutton-login.yaml 2022-01-25 13:38:15 +05:30
Prince Chaddha bc382a72b2
Merge pull request #3592 from projectdiscovery/lexmark-detect
Create lexmark-detect.yaml
2022-01-25 13:04:41 +05:30
Prince Chaddha b006e12019
Update lexmark-detect.yaml 2022-01-25 13:01:40 +05:30