c317a06dd4
fixing conflict
2023-05-11 15:24:10 +05:30
480330df54
Merge pull request #7191 from projectdiscovery/nginx-shards
...
Create nginx-shards.yaml
2023-05-11 15:12:27 +05:30
627b495a89
Merge pull request #7119 from kazet/generic-env-detector
...
Generic .env detector
2023-05-11 15:04:42 +05:30
5ab6e7ec1b
Merge pull request #7106 from projectdiscovery/ssrf-via-proxy
...
Create ssrf-via-proxy.yaml
2023-05-11 14:51:15 +05:30
128d1499a8
protocol -update
2023-05-11 14:49:23 +05:30
a454fd5325
protocol -update
2023-05-11 14:47:44 +05:30
4390b5554d
updated protocol name
2023-05-11 14:34:45 +05:30
0d8aa48c87
Create CVE-2020-1956.yaml
2023-05-11 14:33:44 +05:30
cc7ec996e1
Merge branch 'main' into strobes
2023-05-11 14:33:13 +05:30
c4410d5f23
Create CVE-2016-4437.yaml
2023-05-11 14:25:04 +05:30
355d9ff724
Merge branch 'main' into princechaddha-patch-2
2023-05-11 14:04:17 +05:30
6f4b7a0ffe
lint fix
2023-05-11 13:52:19 +05:30
c1522980c3
updated matchers,info,filename
2023-05-11 13:49:49 +05:30
6ee69d03a1
Merge branch 'main' into update-log4j
2023-05-11 13:08:41 +05:30
7b035ab1eb
Update CVE-2022-22733.yaml
2023-05-11 13:54:49 +08:00
749f2b5aa3
Update CVE-2022-22733.yaml
2023-05-11 13:50:07 +08:00
f06f67f38d
Auto WordPress Plugins Update [Thu May 11 04:02:11 UTC 2023] 🤖
2023-05-11 04:02:11 +00:00
80d33d7741
Add template for CVE-2022-22733 Apache ShardingSphere ElasticJob-UI privilege escalation
2023-05-11 10:57:33 +08:00
0dcedab251
Merge pull request #7203 from david-bla/add-sophos-mobile-xxe_cve-2022-3980
...
add template for sophos mobile xxe ssrf (cve-2022-3980)
2023-05-11 07:36:04 +05:30
333b861ffc
shodan query update
2023-05-11 07:31:07 +05:30
00c8c71457
Merge pull request #7204 from projectdiscovery/parthmalhotra-cve
...
Create CVE-2023-31059.yaml
2023-05-11 07:28:37 +05:30
c6a09150a3
fix false positive
2023-05-11 01:41:34 +05:30
5acbe618fe
Update and rename miscellaneous/crypto-mining-malware.yaml to http/miscellaneous/crypto-mining-malware.yaml
2023-05-11 01:14:44 +05:30
2c8da270ce
Merge pull request #7195 from chucklesb/patch-1
...
Fix Dell EMC ECOM Default Login credentials
2023-05-11 00:54:37 +05:30
1cbcce382d
Merge pull request #7196 from projectdiscovery/CVE-2022-24716
...
CVE 2022 24716
2023-05-11 00:42:58 +05:30
2f84af20e0
Update CVE-2022-24716.yaml
2023-05-11 00:30:35 +05:30
c5c5de1c72
Update favicon-detect.yaml
2023-05-11 00:27:01 +05:30
cc88b320f9
added max-request
2023-05-11 00:21:03 +05:30
328c469772
Merge branch 'main' into main
2023-05-11 00:20:01 +05:30
4f1a7a690c
Merge pull request #7210 from daffainfo/patch-1
...
fix: fp on gemfury-takeover.yaml
2023-05-11 00:15:15 +05:30
3e349e166a
minor update
2023-05-11 00:14:51 +05:30
b4413bd369
Merge pull request #7205 from projectdiscovery/CVE-2023-25135
...
Create CVE-2023-25135.yaml
2023-05-10 20:47:40 +05:30
34cbb997e0
Update CVE-2023-25135.yaml
2023-05-10 20:46:40 +05:30
8de6c0cb81
Update CVE-2023-25135.yaml
2023-05-10 20:45:19 +05:30
36819b63eb
minor -update
2023-05-10 20:43:56 +05:30
dc3180fd24
protocol -update
2023-05-10 19:14:55 +05:30
cba7f8b5e5
changing from system to var_dump
2023-05-10 17:51:16 +05:30
2696334222
updated matcher
2023-05-10 17:42:58 +05:30
d9af7418a6
Update and rename fuzzing/ssrf-via-proxy.yaml to http/fuzzing/ssrf-via-proxy.yaml
2023-05-10 16:58:06 +05:30
6cf79c00d5
Update and rename exposures/configs/env.yaml to http/vulnerabilities/generic/generic-env.yaml
2023-05-10 16:47:21 +05:30
aaaee257b5
fix: fp on gemfury-takeover.yaml
2023-05-10 11:12:07 +07:00
68828dd492
Merge pull request #7183 from projectdiscovery/cve-templates1
...
CVE templates added
2023-05-10 01:09:21 +05:30
58f7db754f
protocol-update
2023-05-10 01:00:43 +05:30
aa90fc9036
added additional matcher to make it strict
2023-05-09 22:50:55 +05:30
b3dc6cf70a
change in query
2023-05-09 22:42:10 +05:30
f2890ae2fa
Create CVE-2023-25135.yaml
2023-05-09 22:10:11 +05:30
e27cde97f6
protocol update
2023-05-09 21:46:34 +05:30
b79431ad43
updated path and matchers
2023-05-09 21:45:10 +05:30
777f1efbc1
Update CVE-2023-31059.yaml
2023-05-09 21:42:39 +05:30
1baf108a3f
Update CVE-2023-31059.yaml
2023-05-09 21:38:13 +05:30
cdfe62741d
Create CVE-2023-31059.yaml
2023-05-09 21:35:10 +05:30
6ef29cb29e
Create CVE-2023-31059.yaml
2023-05-09 21:30:06 +05:30
68b0734657
removed matcher condition
2023-05-09 19:36:13 +05:30
bda2c2941a
Merge branch 'main' into add-sophos-mobile-xxe_cve-2022-3980
2023-05-09 15:43:27 +02:00
c59974226f
strict dsl matcher with addition check
2023-05-09 18:40:00 +05:30
aede9461c4
fix indentation
2023-05-09 15:01:33 +02:00
6addff3ac6
misc syntax fixes ( #7201 )
2023-05-09 18:13:13 +05:30
0450d1224f
Create CVE-2023-25717.yaml
2023-05-09 18:05:28 +05:30
5df70e5ddd
add template for sophos mobile xxe ssrf (cve-2022-3980)
2023-05-09 13:58:36 +02:00
68a1ea89e0
Update CVE-2023-26360.yaml
2023-05-09 16:51:33 +05:30
5c3ef6fa06
fix trail space
2023-05-09 15:07:07 +05:30
cb9fce3f99
Create CVE-2023-26360.yaml
2023-05-09 15:03:18 +05:30
76758f23a1
fix trailing space
2023-05-09 04:26:37 +05:30
70a4c7180c
description added
2023-05-08 22:56:05 +05:30
badb9b7945
Create CVE-2022-24716.yaml
2023-05-08 22:54:19 +05:30
6bbd3a0936
added cred template
2023-05-08 22:35:04 +05:30
68ec25d148
Fix Dell EMC ECOM Default Login credentials
...
It seems the default credentials were incorrectly defined.
2023-05-08 08:39:00 -06:00
49a845f496
added stop-at-first
2023-05-08 20:05:18 +05:30
72e1ffb177
Update and rename technologies/favicon-detect.yaml to http/technologies/favicon-detect.yaml
2023-05-08 20:03:48 +05:30
2cd9630abd
change to http attribute
2023-05-08 15:01:22 +05:30
064ccf7b80
Create nginx-shards.yaml
2023-05-08 15:00:15 +05:30
6a8446b887
Create platformio-ini.yaml
2023-05-08 13:38:14 +05:30
96dd98f8b7
Merge pull request #7188 from j3ssie/main
...
Path Traversal in Ghost CMS < 5.42.1
2023-05-08 13:13:42 +05:30
a4f51aca8f
updated info
2023-05-08 13:08:31 +05:30
dd953b4706
Added spm + shodan query
2023-05-08 12:58:19 +05:30
25eee3c650
Merge pull request #7169 from projectdiscovery/red-lion-panel
...
Create red-lion-panel.yaml
2023-05-08 12:50:10 +05:30
ed206e5c27
Update CVE-2023-2356 Template
2023-05-08 15:12:08 +08:00
b89dee6aae
Path Traversal in Ghost CMS < 5.42.1
2023-05-08 13:27:57 +07:00
7d521d0264
updated matcher
2023-05-08 11:36:48 +05:30
df0d7dca53
added matcher-condition and
2023-05-08 11:07:36 +05:30
f96e98052e
payload update
2023-05-08 11:07:00 +05:30
5875abf833
Merge pull request #7182 from ViCrack/CVE-2020-14883
...
Updated CVE-2020-14883
2023-05-08 11:03:41 +05:30
5c457fab94
Merge pull request #7187 from Arrnitage/main
...
change to default password
2023-05-08 10:53:16 +05:30
dcffb39e7c
Auto WordPress Plugins Update [Mon May 8 04:02:16 UTC 2023] 🤖
2023-05-08 04:02:16 +00:00
9dbcf5b78a
change to default password
2023-05-08 00:19:29 +08:00
5b88116b2e
fix xstream
2023-05-07 00:36:32 +08:00
4e638c079f
replace cat command with rand_int
2023-05-06 23:08:06 +08:00
124b2230cf
templates added
2023-05-06 17:42:20 +05:30
1732a81929
added shodan
2023-05-06 12:38:20 +05:30
cb6ebb417b
updated variable and matcher
2023-05-06 12:29:32 +05:30
df22dcc281
add support for Windows
2023-05-06 14:21:07 +08:00
b17a5d1177
Merge branch 'main' into oracle-opera-login
2023-05-06 00:01:48 +05:30
cc4a213613
Merge pull request #7158 from DhiyaneshGeek/sb-meetup
...
Sb meetup
2023-05-06 00:00:58 +05:30
1cb374b3a3
Update oracle-opera-login.yaml
2023-05-05 23:53:14 +05:30
0e09e7c289
Merge pull request #7179 from dogasantos/CVE-2021-43798.yaml
...
fixed false positive produce by the old win.ini regex
2023-05-05 23:02:26 +05:30
906a0a65e3
Update CVE-2021-43798.yaml
2023-05-05 22:56:15 +05:30
511a601dd6
Merge pull request #7175 from Co5mos/CVE-2022-40879
...
Updated CVE-2022-40879 Template
2023-05-05 22:52:41 +05:30
c585da0abe
Merge pull request #7176 from Co5mos/CVE-2022-0678
...
Updated CVE-2022-0678 Template
2023-05-05 22:52:23 +05:30
8bafd0510d
Merge branch 'main' into CVE-2021-43798.yaml
2023-05-05 22:51:45 +05:30
a82301ad7b
Merge pull request #7171 from Mys7ic/fix_CVE-2021-43798
...
fix regex for win.ini
2023-05-05 22:36:01 +05:30
8c98270a8c
typo update
2023-05-05 19:04:02 +05:30
983915d4bc
Rename CVE-2020-11547.yaml to CVE-2020-11547.yaml
2023-05-05 19:02:53 +05:30
6ea44267d5
Merge branch 'main' into main
2023-05-05 18:35:06 +05:30
4660c9abf3
lint -fix
2023-05-05 16:48:47 +05:30
872a146a25
Create waf-fuzz.yaml
2023-05-05 15:45:38 +05:30
9a11ae394b
Merge pull request #7046 from projectdiscovery/add-cpe-epss
...
Added CPE and EPSS Score to CVE Templates
2023-05-05 15:33:15 +05:30
a6c3f4f9c1
fix(false-positive): Remove trailing space 🩹
2023-05-05 08:27:56 +02:00
8c792b2911
fix(false-positive): Add removed part after rebased 🩹
...
Refs:
- https://github.com/projectdiscovery/nuclei-templates/issues/5934
- https://github.com/projectdiscovery/nuclei-templates/pull/5939
2023-05-05 08:17:35 +02:00
576c0d64d4
Merge pull request #7154 from j4vaovo/patch-33
...
Create CVE-2017-17731.yaml
2023-05-05 11:47:15 +05:30
0649a8eec8
Update and rename http/cves/CVE-2017-17731.yaml to http/cves/2017/CVE-2017-17731.yaml
2023-05-05 11:43:29 +05:30
a7b52d98a9
Merge branch 'main' into main
2023-05-05 10:38:42 +05:30
9e7fa915d9
protocol update
2023-05-05 10:35:38 +05:30
9159fde669
Update and rename cves/2021/CVE-2021-40870.yaml to http/cves/2021/CVE-2021-40870.yaml
2023-05-05 10:35:10 +05:30
8458967376
Rename cves/2020/CVE-2020-5847.yaml to http/cves/2020/CVE-2020-5847.yaml
2023-05-05 10:33:34 +05:30
adef8ce3a2
Auto WordPress Plugins Update [Fri May 5 04:02:08 UTC 2023] 🤖
2023-05-05 04:02:08 +00:00
c6c2a0d413
Update CVE-2018-13379.yaml
2023-05-05 00:05:34 +05:30
9f85fbc113
Update CVE-2019-19908.yaml
2023-05-05 00:04:56 +05:30
561b42ebe7
Merge branch 'main' into add-cpe-epss
2023-05-05 00:00:13 +05:30
dfadeb5774
fixed false positive produce by the old win.ini regex
2023-05-04 14:28:33 -03:00
c6e1cabcfe
Added CVE-2023-2356 Template
2023-05-04 20:59:25 +08:00
c76b0a862a
Updated CVE-2022-0678 Template
2023-05-04 20:37:18 +08:00
4565b0a6fe
Updated CVE-2022-40879 Template
2023-05-04 20:34:45 +08:00
b08774126b
Merge pull request #7155 from projectdiscovery/add-max-request
...
Added `max-request` counter of each template
2023-05-04 17:55:42 +05:30
f74e8bd714
Update unauth-ztp-ping.yaml
...
accidentally left a ?ref tag in a reference.
2023-05-04 10:54:09 +01:00
9ec854c91e
Create unauth-ztp-ping.yaml
...
Creates a template that can detect ZyXEL ZTP (Zero Touch Provisioning) interfaces that lack any authentication checks.
Authentication checks were added in the fixes for CVE-2023-28771
2023-05-04 10:14:16 +01:00
05eb753985
Update apache-ofbiz-log4j-rce.yaml
2023-05-04 11:05:06 +05:30
0c049e028e
updated templates
2023-05-04 00:16:17 +05:30
109d452109
Merge branch 'update-log4j' of https://github.com/projectdiscovery/nuclei-templates into update-log4j
2023-05-03 23:51:59 +05:30
82a8526978
updated templates
2023-05-03 23:51:23 +05:30
8da408f77c
name update=id
2023-05-03 23:42:07 +05:30
89185ad7fe
fix
2023-05-03 23:31:55 +05:30
b50e22b7da
updated log4j
2023-05-03 23:21:44 +05:30
daa28f13fb
eclipse-panel, CVE-2021-34427.yaml
2023-05-03 13:43:39 +00:00
e5c97d8319
fix regex for win.ini
2023-05-03 15:00:00 +02:00
3cf8d0bd94
Update All Existing Log4j Templates
2023-05-03 17:21:48 +05:30
c735ba6524
Create red-lion-panel.yaml
2023-05-03 17:13:12 +05:30
72d74b4c25
Auto WordPress Plugins Update [Wed May 3 04:02:18 UTC 2023] 🤖
2023-05-03 04:02:18 +00:00
b5772b0b37
Merge pull request #7162 from projectdiscovery/wpml-xss
...
Added WPML XSS
2023-05-02 23:25:56 +05:30
f62fe3538e
Merge branch 'projectdiscovery:main' into umami_default_login
2023-05-02 17:02:54 +02:00
2175d81329
removed duplicate key
2023-05-02 18:29:30 +05:30
ea116bde6b
moving file around
2023-05-02 18:24:56 +05:30
e5ae45127e
Merge remote-tracking branch 'origin' into add-cpe-epss
2023-05-02 18:21:24 +05:30
a470c2a150
Merge remote-tracking branch 'origin' into add-max-request
2023-05-02 17:52:27 +05:30
4858f39e1e
removed duplicate key
2023-05-02 17:51:59 +05:30
5d204637bd
Update CVE-2017-17731.yaml
2023-05-02 16:39:12 +05:30
3a0ceae738
fix
2023-05-02 16:29:15 +05:30
547bc9ee0e
Merge pull request #7144 from j4vaovo/patch-31
...
Create apache-zeppelin-unauth.yaml
2023-05-02 14:33:52 +05:30
e0190816e1
Merge branch 'patch-31' of https://github.com/j4vaovo/nuclei-templates into pr/7144
2023-05-02 14:31:07 +05:30
93ec538017
Update apache-zeppelin-unauth.yaml
2023-05-02 14:30:55 +05:30
70d2eecc92
fix matcher and header
2023-05-02 14:23:21 +05:30
a13b8eac7f
lint fixes
2023-05-02 13:02:45 +05:30
1c1bc41ea2
added metadata
2023-05-02 11:03:28 +05:30
88c25d4565
Auto WordPress Plugins Update [Tue May 2 04:02:19 UTC 2023] 🤖
2023-05-02 04:02:19 +00:00
8eb2083647
Create oracle-opera-login.yaml
2023-05-02 08:34:35 +05:30
02948cb6a6
Create umami-default-login.yaml
2023-05-01 23:12:20 +02:00
23b6a05402
updated matcher
2023-05-01 23:15:58 +05:30
e762172422
Added WPML XSS
2023-05-01 21:18:57 +05:30
59ac982c42
Create CVE-2019-3398.yaml
2023-05-01 17:54:05 +05:30
d6d8d9f4ae
Merge branch 'main' into patch-23
2023-05-01 09:07:54 +05:30
966d37b02e
updated template path and protocol name
2023-05-01 09:07:12 +05:30
2c6d6cb3c0
Update postman-key.yaml
2023-04-30 17:49:29 +05:30
f5df1a74cb
Update vmware-siterecovery-log4j-rce.yaml ( #7157 )
2023-04-30 16:03:43 +05:30
9286f2174d
Create postman-key.yaml
2023-04-30 13:53:37 +05:30
28f4302dcd
Merge branch 'main' into add-max-request
2023-04-29 13:32:16 +05:30
a34153eb9c
Dashboard Content Enhancements ( #7149 )
...
Dashboard Content Enhancements
2023-04-28 09:11:35 -04:00
392187b67e
Merge branch 'main' into CVE-2023-20864
2023-04-28 16:17:54 +05:30
27f30265bd
Merge pull request #7126 from projectdiscovery/CVE-2023-27350
...
PaperCut - Unauthenticated Remote Code Execution CVE-2023-27350
2023-04-28 16:01:47 +05:30
77ee8acc56
change to http
2023-04-28 15:32:24 +05:30
00ef22599c
Rename cves/2023/CVE-2023-27350.yaml to http/cves/2023/CVE-2023-27350.yaml
2023-04-28 15:32:02 +05:30
0f573ef4dc
Merge pull request #7120 from For3stCo1d/minio-default-login
...
Update minio-default-login.yaml
2023-04-28 15:29:36 +05:30
bb63a4aeab
Merge pull request #7116 from j4vaovo/patch-28
...
Create apache-druid-kafka-connect-rce.yaml
2023-04-28 15:27:30 +05:30
5136c8f23c
Rename vulnerabilities/apache/apache-druid-kafka-connect-rce.yaml to http/vulnerabilities/apache/apache-druid-kafka-connect-rce.yaml
2023-04-28 15:25:03 +05:30
dde0ee23dc
Merge pull request #7103 from lu4nx/mail-archive
...
Add Mail-archive OSINT
2023-04-28 15:23:10 +05:30
cbf186eb55
Update and rename osint/mail-archive.yaml to http/osint/mail-archive.yaml
2023-04-28 14:02:52 +05:30
1280b5b17b
Merge pull request #7142 from j4vaovo/patch-29
...
Create powerjob-default-login.yaml
2023-04-28 14:00:34 +05:30
1f5b1f2c47
Added max request counter of each template
2023-04-28 13:41:21 +05:30
dd2b93a095
Merge pull request #7145 from projectdiscovery/CVE-2023-29489
...
Create CVE-2023-29489.yaml
2023-04-28 13:18:18 +05:30
474f99f7c4
Rename CVE-2023-29489.yaml to CVE-2023-29489.yaml
2023-04-28 13:15:11 +05:30
d1aa1491e7
Merge branch 'main' into minio-default-login
2023-04-28 11:51:01 +05:30
78f48036db
Update and rename default-logins/minio/minio-default-login.yaml to http/default-logins/minio/minio-default-login.yaml
2023-04-28 11:39:36 +05:30
4545b9082c
Rename http/cve/CVE-2023-29489.yaml to http/cve/2023/CVE-2023-29489.yaml
2023-04-28 10:55:44 +05:30
f04bd2658b
Merge pull request #7150 from Co5mos/CVE-2023-1671
...
Added CVE-2023-1671 Template
2023-04-28 10:40:31 +05:30
ca0b9665cd
Create CVE-2017-17731.yaml
2023-04-28 08:53:23 +08:00
658575fb02
Merge pull request #5520 from edoardottt/CVE-2020-27481
...
Add CVE-2020-27481
2023-04-27 23:10:11 +05:30
38514e4bd1
Update and rename cves/2020/CVE-2020-27481.yaml to http/cves/2020/CVE-2020-27481.yaml
2023-04-27 23:06:26 +05:30
2a363a80a2
Update and rename cves/2023/CVE-2023-1671.yaml to http/cves/2023/CVE-2023-1671.yaml
2023-04-27 22:45:45 +05:30
4615f5ab9d
validate workflow fix ( #7151 )
...
* workflow fixes
* disable downloading template as we have it locally.
2023-04-27 22:04:16 +05:30
793b661255
Update and rename cves/2023/CVE-2023-20864.yaml to http/cves/2023/CVE-2023-20864.yaml
2023-04-27 21:14:42 +05:30
b72996aa42
change of protocol attribute
2023-04-27 17:54:02 +05:30
10bd0df1a3
Rename CVE-2023-29489.yaml to CVE-2023-29489.yaml
2023-04-27 17:44:38 +05:30
795999751e
Refactoring the directory structure based on protocols ( #7146 )
...
* Refactoring the directory structure based on protocols
* Update CVE-2021-30175.yaml
* lint fix
---------
Co-authored-by: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
2023-04-27 17:01:53 +05:30
ada36e744f
Refactoring the directory structure based on protocols ( #7147 )
...
* @pussycat0x Refactoring the directory structure based on protocols
* Update CVE-2023-29922.yaml
2023-04-27 17:01:18 +05:30
8d4c85bdc7
Description -update
2023-04-27 16:28:20 +05:30
53191a877a
fix the path ( #7148 )
...
* fix the path
* lint fix
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 15:55:32 +05:30
caa647f61a
format -update
2023-04-27 15:26:28 +05:30
a14e0b382e
Rename http/misconfiguration/apacheiapacheapacheapache-zeppelin-unauth.yaml to http/misconfiguration/apache/apache-zeppelin-unauth.yaml
2023-04-27 11:30:00 +05:30
4c73bc5869
Rename misconfiguration/apache-zeppelin-unauth.yaml to http/misconfiguration/apacheiapacheapacheapache-zeppelin-unauth.yaml
2023-04-27 11:29:33 +05:30
da52872ba2
moving files around
2023-04-27 10:21:55 +05:30
e0af666e1c
Refactoring the directory structure based on protocols ( #7137 )
...
* moving http templates
* updated cves.json
* moved network CVEs
* updated scripts
* updated workflows
* updated requests to http
* replaced network to tcp
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 09:58:59 +05:30
Prince Chaddha
pussycat0x
avisscr
Ritik Chaddha
Ritik Chaddha
Zer0verflow
GitHub Action
Dhiyaneshwaran
Muhammad Daffa
sandeep
Parth Malhotra
dabla
Sandeep Singh
Parth
chucklesb
Co5mos
j3ssie
Arm!tage
ViCrack
Prince Chaddha
mlec
dogasantos
dm-ct
avisscr
myztique
Barthy
j4vaovo
MostInterestingBotInTheWorld
savik