05dd3affce
Delete wp-altair-listing.yaml
2021-09-18 13:51:28 +05:30
63cc624c4a
Update luftguitar-arbitrary-file-upload.yaml
2021-09-18 12:14:32 +05:30
893f8d3bc6
Update wp-altair-listing.yaml
2021-09-18 12:01:47 +05:30
10b3bc327d
Add files via upload
2021-09-18 10:37:16 +05:30
2a1341274a
Create luftguitar-arbitrary-file-upload.yaml
2021-09-17 21:04:21 +07:00
3deb522abc
Merge pull request #2664 from Akokonunes/patch-37
...
Create ecoa-building-automation-lfd.yaml
2021-09-17 16:47:54 +05:30
df59ad5670
Update and rename ecoa-building-automation-lfd.yaml to vulnerabilities/other/ecoa-building-automation-lfd.yaml
2021-09-17 16:39:09 +05:30
b00b70c150
Merge pull request #2697 from Akokonunes/patch-39
...
Create attitude-wp-theme-open-redirect.yaml
2021-09-17 15:12:21 +05:30
5cac00bada
Merge pull request #2698 from Akokonunes/patch-40
...
Create eatery-restaurant-wp-theme-open-redirect.yaml
2021-09-17 15:12:09 +05:30
a40530d9d4
Update and rename eatery-restaurant-wp-theme-open-redirect.yaml to vulnerabilities/wordpress/eatery-restaurant-open-redirect.yaml
2021-09-17 15:10:30 +05:30
69e546ea4d
Update attitude-theme-open-redirect.yaml
2021-09-17 15:10:23 +05:30
c5ccf9d991
Update and rename attitude-wp-theme-open-redirect.yaml to vulnerabilities/wordpress/attitude-theme-open-redirect.yaml
2021-09-17 15:08:59 +05:30
2e8329b645
Update and rename weekender-newspaper-wp-theme-open-redirect.yaml to vulnerabilities/wordpress/weekender-newspaper-open-redirect.yaml
2021-09-17 15:06:13 +05:30
03a79aa0c3
Update jenkins-script.yaml
2021-09-16 15:17:15 -05:00
676b51d20c
Metadata attribute update
2021-09-16 21:24:33 +05:30
18879698fa
Update bullwark-momentum-lfi.yaml
2021-09-13 15:55:14 +05:30
e18cc14218
Update bullwark-momentum-lfi.yaml
2021-09-13 15:34:18 +05:30
546bd6a038
matcher update
2021-09-13 15:28:35 +05:30
34bba4e794
misc update
2021-09-12 17:10:52 +05:30
46b16bcfa2
Incomplete title
2021-09-12 14:16:01 +03:00
59525a5846
Working reference
2021-09-12 13:02:41 +03:00
e602575ae0
Working reference
2021-09-12 12:58:48 +03:00
fb2f89bc86
References
2021-09-12 12:58:43 +03:00
624162cca7
Working reference
2021-09-12 12:50:53 +03:00
896343be12
Clarify description
2021-09-12 12:41:33 +03:00
dde7140ff9
misc update
2021-09-11 23:46:31 +05:30
207c140c50
moving files around
2021-09-11 21:06:36 +05:30
c41f64987b
Update wordpress-db-repair.yaml
...
Solves this false positive (different encoding)
nuclei -debug -t nuclei-templates/vulnerabilities/wordpress/wordpress-db-repair.yaml -u https://try.walmart.com
<p><code>define('WP_ALLOW_REPAIR', true);
2021-09-10 17:18:15 -03:00
cf4ef2ac5a
Merge pull request #2622 from projectdiscovery/missing-tags
2021-09-10 12:32:47 +05:30
bd24dc198e
Coverage for all templates using tags
2021-09-09 19:08:13 +05:30
67766f381a
Merge pull request #2600 from Akokonunes/patch-35
...
Create phpwiki-lfi.yaml
2021-09-09 15:02:41 +05:30
6ce33e2f47
Rename phpwiki-lfi.yaml to vulnerabilities/other/phpwiki-lfi.yaml
2021-09-09 15:01:35 +05:30
576499034d
Update wordpress-rce-simplefilelist.yaml
2021-09-09 12:09:13 +05:30
08dac56385
Update simple-employee-rce.yaml
2021-09-09 12:06:24 +05:30
609705f676
removed extra headers not required for template
2021-09-08 17:47:19 +05:30
9b75486616
Rename homeautomation-v3-openredirect.yaml to vulnerabilities/other/homeautomation-v3-openredirect.yaml
2021-09-07 18:07:48 +05:30
e6a71e0e80
Merge pull request #2593 from projectdiscovery/openvpn-hhi
...
Added OpenVPN Host Header Injection
2021-09-06 18:56:27 +05:30
e31a75af04
Merge pull request #2595 from projectdiscovery/host-header-injection
...
Create host-header-injection.yaml
2021-09-06 18:56:09 +05:30
4075664390
Merge pull request #2580 from Akokonunes/patch-29
...
Create gSOAP-LFl.yaml
2021-09-06 17:36:18 +05:30
e9d5665383
Update gsoap-lfi.yaml
2021-09-06 17:34:51 +05:30
1942d13ed6
Update openvpn-hhi.yaml
2021-09-06 17:15:30 +05:30
acd4624200
Create host-header-injection.yaml
2021-09-06 17:14:27 +05:30
842f66380f
Revert "Create host-header-injection.yaml"
...
This reverts commit 6abfcd80e1
2021-09-06 17:13:48 +05:30
6abfcd80e1
Create host-header-injection.yaml
2021-09-06 17:13:20 +05:30
cec54e6d51
tags update
...
Co-Authored-By: me_dheeraj <9442273+Dheerajmadhukar@users.noreply.github.com>
2021-09-06 16:15:07 +05:30
c105e41fa4
Added OpenVPN Host Header Injection
...
Co-Authored-By: me_dheeraj <9442273+Dheerajmadhukar@users.noreply.github.com>
2021-09-06 16:13:17 +05:30
f6e52a6739
Merge pull request #2585 from sullo/master
...
Updates across many templates for clarity, spelling, and grammar.
2021-09-06 15:02:52 +05:30
7579fe98c2
Update and rename minimouse-lfi.yaml to vulnerabilities/other/minimouse-lfi.yaml
2021-09-06 14:44:39 +05:30
ef1f7c5e92
Updates across many templates for clarity, spelling, and grammar.
2021-09-05 17:13:45 -04:00
bf1d6374b2
Rename gSOAP-LFl.yaml to vulnerabilities/other/gsoap-lfi.yaml
2021-09-05 19:22:07 +05:30
90f8caf302
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates into pr/2481
2021-09-03 14:55:30 +05:30
c266084621
Added stop-at-first-match in applicable templates
2021-09-02 17:29:10 +05:30
faf111362c
Removing extra space
2021-09-01 12:37:02 +05:30
5c5c6c3974
Update processmaker-lfi.yaml
2021-08-31 14:08:11 +05:30
0b69ea80b2
Create processmaker-lfi.yaml
2021-08-31 14:03:47 +05:30
86f3c08ba6
Vendor writes it as "NETGEAR"
2021-08-29 09:39:06 +03:00
9f9970c8e9
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-08-29 09:15:40 +03:00
419a957409
Fixing errors in templates
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-27 10:43:24 +03:00
a4250b8f2f
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-26 15:04:14 +03:00
e66463d466
Merge pull request #2355 from G4L1T0/corsmisc
...
add cors-misconfig.yaml
2021-08-26 04:26:37 +05:30
1999a9b560
Enhanced CORS checks
2021-08-26 04:24:06 +05:30
05305904ef
more strict matchers
2021-08-26 02:43:53 +05:30
ed76585ed6
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-08-25 14:33:32 +02:00
c766a8454d
Fixed yaml linting errors
2021-08-25 14:09:42 +02:00
8fb3c65965
template fix
2021-08-25 01:32:14 +05:30
110f9c9ddd
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-24 20:38:11 +03:00
ee37e34f54
Update wp-woocommerce-pdf-invoice-listing.yaml
2021-08-24 17:48:31 +05:30
f66f36237b
Merge pull request #2455 from gy741/rule-add-v58
...
Create commax-biometric-access-control-system-auth-bypass.yaml
2021-08-24 17:44:13 +05:30
554c4a505f
Update and rename commax-biometric-access-control-system-auth-bypass.yaml to commax-biometric-auth-bypass.yaml
2021-08-24 17:17:43 +05:30
0a4cd456bf
Update commax-biometric-access-control-system-auth-bypass.yaml
2021-08-24 17:13:17 +05:30
ba03c2b377
Update unauth-hoteldruid-panel.yaml
2021-08-24 16:46:24 +05:30
d1065cd3fc
Create unauth-hoteldruid-panel.yaml
2021-08-24 16:42:11 +05:30
ecd6547d05
Update thinkific-redirect.yaml
2021-08-24 14:56:21 +07:00
a124e393b4
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-23 19:15:14 +03:00
647d27925a
Merge pull request #2426 from projectdiscovery/generic
...
Templates by geeknik
2021-08-23 19:55:32 +05:30
296edfc37b
Merge remote-tracking branch 'origin' into dynamic_attributes
2021-08-23 14:40:33 +03:00
04b401a8ef
Merge pull request #2456 from projectdiscovery/payloads-update
...
Payloads positional update to keep the request format uniform
2021-08-23 15:26:35 +05:30
62530eafc2
Update wp-slideshow-xss.yaml
2021-08-23 15:15:26 +05:30
2aa54304ee
Payloads positional update to keep the request format uniform
2021-08-22 23:39:33 +05:30
cad976abda
Create commax-biometric-access-control-system-auth-bypass.yaml
...
The application suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can bypass authentication and disclose sensitive information and circumvent physical controls in smart homes and buildings.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-22 18:19:34 +09:00
cbdef618f3
Update netgear-router-exposure.yaml
2021-08-21 00:38:54 +05:30
dc4cc62629
Merge remote-tracking branch 'origin/master' into dynamic_attributes
2021-08-20 15:35:17 +03:00
e160acb481
misc updates
2021-08-20 16:37:22 +05:30
0ef2106a6e
Improved template
2021-08-19 23:34:16 +05:30
0bef05c541
Merge pull request #793 from pikpikcu/patch-40
...
resin information disclosure
2021-08-19 23:15:42 +05:30
ab824564d3
minor updates
2021-08-19 23:11:29 +05:30
1247fcd993
Update vulnerabilities/other/caucho-resin-info-disclosure.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-08-19 23:09:26 +05:30
77103bc629
Satisfying the linter (all errors and warnings)
...
* whitespace modifications only
2021-08-19 17:44:46 +03:00
002e8db616
Moved the "vendor" custom attribute under reference
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 17:00:46 +03:00
97d4f8705b
Fixed mistakes/typos
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:55 +03:00
f55d6b75e1
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:59:12 +03:00
7b29be739e
Merge branch 'master' into dynamic_attributes
2021-08-19 16:23:26 +03:00
ffaff64565
Changes fixes/around dynamic attributes ("additional-fields")
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:17:27 +03:00
0b432b341b
Added comments with URLs under the "references" field
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 16:15:35 +03:00
e68d15ab63
Fixed mistakes/typos in the templates.
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-19 15:30:14 +03:00
bc1bf5d919
Create comtrend-ct5367-disclosure.yaml
2021-08-19 14:47:44 +05:30
f8a8968408
Revert "Create comtrend-ct5367-disclosure.yaml"
...
This reverts commit 33ea2d360c
2021-08-19 14:46:35 +05:30
33ea2d360c
Create comtrend-ct5367-disclosure.yaml
2021-08-19 14:45:37 +05:30
ab0750b570
minor update
2021-08-19 00:43:44 +05:30
cdf9451158
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:44:27 +03:00
dd1bbe6093
Revert "Delete netgear-router-disclosure.yaml"
...
This reverts commit 3b969e7e0d
2021-08-18 17:02:08 +05:30
3b969e7e0d
Delete netgear-router-disclosure.yaml
2021-08-18 16:59:49 +05:30
4c920b2552
Rename "references" to "reference" to match the expected template info structure
...
Related nuclei tickets:
* #259 - dynamic key-value field support for template information
* #940 - new infos in template
* #834
* RES-84
2021-08-18 14:29:20 +03:00
0a0b5c7f74
Update netgear-router-disclosure.yaml
2021-08-18 16:56:56 +05:30
d07323e0be
Create netgear-router-disclosure.yaml
2021-08-18 16:44:28 +05:30
af15e4817f
Update netgear-router-auth-bypass.yaml
2021-08-18 16:42:34 +05:30
067c9a8755
Create xmlrpc-pingback-ssrf.yaml
2021-08-18 16:39:22 +05:30
fe1e7d36fb
Merge pull request #2429 from Mad-robot/patch-3
...
Create geovision-geowebserver-lfi.yaml
2021-08-18 16:19:49 +05:30
0731a772d4
Update geovision-geowebserver-lfi.yaml
2021-08-18 16:18:12 +05:30
1db2715a06
Update geovision-geowebserver-xss.yaml
2021-08-18 14:51:23 +05:30
eeb284a7ec
Update geovision-geowebserver-xss.yaml
2021-08-18 14:48:34 +05:30
db4073d2b5
Update geovision-geowebserver-lfi.yaml
2021-08-18 03:54:30 +05:30
d5748c95fc
Create geovision-geowebserver-lfi.yaml
2021-08-18 03:50:45 +05:30
0c24cc2f74
Create geovision-geowebserver-xss.yaml
2021-08-18 03:50:39 +05:30
f60cef447b
Update generic-blind-xxe.yaml
2021-08-17 22:57:34 +05:30
727e73c5c3
Create solar-log-authbypass.yaml
2021-08-17 18:02:41 +05:30
c39f0e2077
Create generic-blind-xxe.yaml
2021-08-17 17:18:52 +05:30
59b2aeda40
Merge pull request #2420 from geeknik/patch-18
...
Update twig-php-ssti.yaml
2021-08-17 17:12:00 +05:30
c2f87671fb
strict matcher
2021-08-17 15:52:22 +05:30
03cd55a33f
severity update based on poc
...
We will update this again as per assigned CVE which is not available right now?
2021-08-17 15:02:47 +05:30
4a5137b742
more tags
2021-08-17 15:00:30 +05:30
e8c3a1f9c7
Additional matchers update
2021-08-17 15:00:05 +05:30
5072dbbcbb
Create ms-exchange-server-reflected-xss.yaml
2021-08-17 13:55:38 +05:30
3b9fb75fcb
Update twig-php-ssti.yaml
...
Another FP fix
2021-08-16 15:30:23 -05:00
d52c97c569
Update twig-php-ssti.yaml
...
False positive fix
2021-08-16 15:28:13 -05:00
970bdb3ac7
Update pmb-directory-traversal.yaml
2021-08-16 16:43:47 +05:30
d45887f9f9
Delete node-nunjucks-ssti.yaml
2021-08-16 16:41:58 +05:30
d3a379e112
Update eyelock-nano-lfd.yaml
2021-08-16 16:40:42 +05:30
af4f29ab03
Update beward-ipcamera-disclosure.yaml
2021-08-16 16:37:34 +05:30
4e498a6478
Create pmb-directory-traversal.yaml
2021-08-16 16:14:02 +05:30
451823f887
Create node-nunjucks-ssti.yaml
2021-08-16 16:13:27 +05:30
c6927262eb
Create eyelock-nano-lfd.yaml
2021-08-16 16:12:45 +05:30
232b187a40
Create beward-ipcamera-disclosure.yaml
2021-08-16 16:11:44 +05:30
3ac7a756fc
Added woocommerce-pdf-invoice-listing
2021-08-16 15:37:07 +05:30
b3d27f3d0c
Merge pull request #2407 from DhiyaneshGeek/master
...
Oracle XSS
2021-08-16 14:14:20 +05:30
610924d55b
Update oracle-siebel-xss.yaml
2021-08-16 14:12:49 +05:30
2875be2d82
Update simple-crm-sql-injection.yaml
2021-08-16 14:06:18 +05:30
bd865a0615
Update simple-crm-sql-injection.yaml
2021-08-16 14:03:41 +05:30
2a448b52db
Update simple-crm-sql-injection.yaml
2021-08-16 14:03:09 +05:30
cacb2ff684
Update simple-crm-sql-injection.yaml
2021-08-15 15:28:00 -05:00
9fb1b464b4
Create simple-crm-sql-injection.yaml
2021-08-15 15:23:38 -05:00
cceb32a88b
Create oracle-siebel-xss.yaml
2021-08-15 23:18:13 +05:30
7bce4fbb26
Update netis-info-leak.yaml
2021-08-14 16:00:00 +05:30
edffa49ca4
Update netis-info-leak.yaml
2021-08-14 15:53:30 +05:30
5b81af7ab4
Create netis-info-leak.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-13 13:34:28 +09:00
df65ba694b
Update ewebs-arbitrary-file-reading.yaml
2021-08-12 18:19:22 +05:30
65ed503022
Create ewebs-arbitrary-file-reading.yaml
2021-08-12 18:41:02 +07:00
5ca0a70f3e
Merge pull request #2372 from projectdiscovery/buffalo
...
Added CVE-2021-20090 / CVE-2021-20091 / CVE-2021-20092
2021-08-12 16:07:45 +05:30
0875847c7d
Merge pull request #2374 from gy741/rule-add-v54
...
Create sar2html-rce.yaml
2021-08-12 15:06:13 +05:30
cfc534af89
Update sar2html-rce.yaml
2021-08-12 15:03:49 +05:30
Prince Chaddha
Prince Chaddha
pussycat0x
PikPikcU
Geeknik Labs
sandeep
Noam Rathaus
Philippe Delteil
sullo
forgedhallpass
socketz
GwanYeong Kim
SaN ThosH
Sanyam Chawla
Dhiyaneshwaran