3b72f9e881
Maltrail <= v0.54 - Unauthenticated OS Command Injection
2023-08-19 22:10:28 +05:30
e6bf205cdf
Merge pull request #8009 from adrlsx/main
...
fix: templates with generic tag should not depend on specific tech
2023-08-19 13:57:28 +05:30
f2b8e85198
Merge pull request #7947 from harsh2403/main-4
...
Create CVE-2022-1756.yaml
2023-08-19 13:57:11 +05:30
e431b55d95
minor - update
2023-08-19 13:48:57 +05:30
9c264446bd
Merge pull request #8011 from ggranjus/add-defacement-template
...
Add Defacement
2023-08-19 13:44:55 +05:30
179ffbcd56
Merge pull request #8012 from ggranjus/add-redis-insight
...
Add RedisInsight
2023-08-19 13:40:32 +05:30
fc81c11a0f
Merge pull request #8003 from projectdiscovery/CVE-2022-39986
...
Create CVE-2022-39986.yaml (RaspAP 2.8.7 - RCE)
2023-08-19 13:23:12 +05:30
90c1010fa5
TemplateMan Update [Sat Aug 19 07:52:45 UTC 2023] 🤖
2023-08-19 07:52:46 +00:00
92fb456022
Create hongfan-ioffice-lfi.yaml
2023-08-19 13:12:37 +05:30
5821d7f638
spacing and id rename
2023-08-19 11:05:01 +05:30
efc7f6b021
updated metadata
2023-08-19 10:55:59 +05:30
d0a56077a8
Auto WordPress Plugins Update [Sat Aug 19 04:02:06 UTC 2023] 🤖
2023-08-19 04:02:06 +00:00
752d4ed2ec
Remove trailing space
2023-08-18 21:36:51 +02:00
343cc73ecc
Remove trailing space
2023-08-18 21:35:13 +02:00
6e48cc8273
Fix template
2023-08-18 21:22:49 +02:00
4eb40e5d26
Add Defacement Template
2023-08-18 21:12:07 +02:00
71ad10baa8
Add RedisInsight template
2023-08-18 19:20:25 +02:00
7258c81775
fix: templates with generic tag should not depend on specific tech
2023-08-18 18:23:19 +02:00
28f513f412
Rename hanta-rce.yaml to hanta-rce.yaml
2023-08-18 19:53:43 +05:30
2245b5a16d
working fix
2023-08-18 18:22:22 +05:30
800bf35e33
minor update
2023-08-18 18:14:04 +05:30
d42cbc571f
Update flir-ax8-rce.yaml
2023-08-18 18:00:58 +05:30
38eafd33a2
Modified reference format from string to list to match the remaining cve modules ( #8006 )
2023-08-18 17:48:01 +05:30
1cf8f26c6f
Create CVE-2022-39986.yaml
2023-08-18 16:01:22 +05:30
b1f7f3c3d3
Merge pull request #7999 from momika233/main
...
Hanta-Internet-behavior-management-system-RCE
2023-08-18 14:41:47 +05:30
ce68c40e50
tag - update
2023-08-18 14:10:51 +05:30
485b39a2db
TemplateMan Update [Fri Aug 18 08:29:29 UTC 2023] 🤖
2023-08-18 08:29:30 +00:00
e915d26614
Merge pull request #8001 from pentesttools-com/add-missing-descriptions-cves
...
Add missing descriptions CVE-2021-44139, CVE-2023-38205, CVE-2023-34960
2023-08-18 13:57:40 +05:30
528865b5ce
Merge pull request #8000 from projectdiscovery/pussycat0x-patch-5
...
AspCMS commentList.asp - SQL Injection
2023-08-18 13:57:20 +05:30
025dce59e0
Merge pull request #8002 from pentesttools-com/add-short-description-kodak-network-panel
...
Added short description for kodak network panel
2023-08-18 13:50:09 +05:30
d81343a191
Update aspcms-commentlist-sqli.yaml
2023-08-18 13:45:33 +05:30
830e50a4b8
Update aspcms-commentlist-sqli.yaml
2023-08-18 13:43:42 +05:30
a8375f3ca5
syntax format
2023-08-18 13:41:11 +05:30
bc99210ab9
Update and rename http/vulnerabilities/Hanta-Internet-behavior-management-system-RCE.yaml to http/vulnerabilities/others/hanta-rce.yaml
2023-08-18 13:38:31 +05:30
5ba32d3ee7
Added short description for kodak network panel
2023-08-18 11:03:56 +03:00
a8a8361423
Merge pull request #7955 from projectdiscovery/pussycat0x-patch-2
...
CAIMORE Gateway - Remote Code Execution
2023-08-18 13:30:57 +05:30
f8931e8381
nvd description updated
2023-08-18 13:30:45 +05:30
b906322c1e
remove verified
2023-08-18 13:27:12 +05:30
daba6e2efb
Merge branch 'projectdiscovery:main' into add-missing-descriptions-cves
2023-08-18 10:47:36 +03:00
3edf136ea4
Added description fields for CVE-2021-44139 CVE-2023-38205 CVE-2023-34960
2023-08-18 10:46:53 +03:00
4a5bfffe65
AspCMS commentList.asp - SQL Injection
2023-08-18 13:00:19 +05:30
38a717c064
Update caimore-gateway-rce.yaml
2023-08-18 11:01:18 +05:30
880a66fe29
Update Hanta-Internet-behavior-management-system-RCE.yaml
2023-08-18 13:24:45 +08:00
c172c09c1a
TemplateMan Update [Fri Aug 18 05:20:51 UTC 2023] 🤖
2023-08-18 05:20:52 +00:00
074f9b5337
Merge pull request #7995 from projectdiscovery/pussycat0x-patch-6
...
Feiyuxing Information - Exposure
2023-08-18 10:50:40 +05:30
d1c4b0e0ff
Merge pull request #7941 from pphuahua/main-1
...
Update dedecms-detect.yaml
2023-08-18 10:48:24 +05:30
df36477b9a
match only to response contains password
2023-08-18 10:48:00 +05:30
d9c4e7154d
TemplateMan Update [Fri Aug 18 05:17:58 UTC 2023] 🤖
2023-08-18 05:17:59 +00:00
f9079b7523
Add files via upload
2023-08-18 13:17:32 +08:00
b3291e7217
author name - added
2023-08-18 10:43:20 +05:30
ad0bf9f262
Merge branch 'projectdiscovery:main' into main
2023-08-18 13:11:23 +08:00
8c8e23424c
Delete Hanta-Internet-behavior-management-system-RCE.yaml
2023-08-18 10:37:54 +05:30
b4fb3057df
Update Hanta-Internet-behavior-management-system-RCE.yaml
2023-08-18 13:07:50 +08:00
805e9ffd1e
Merge pull request #7956 from projectdiscovery/pussycat0x-patch-5
...
CAIMORE Gateway Default Login - Detect
2023-08-18 10:35:46 +05:30
feb716e891
Add files via upload
2023-08-18 13:04:34 +08:00
56780f8f72
spacing
2023-08-18 10:33:49 +05:30
592d9d1a4b
Merge branch 'projectdiscovery:main' into main
2023-08-18 13:03:42 +08:00
f20c0ec18a
Update and rename http/default-logins/caimore-gateway-default-login.yaml to http/default-logins/caimore/caimore-default-login.yaml
2023-08-18 10:30:13 +05:30
0569415775
Merge pull request #7998 from projectdiscovery/pussycat0x-patch-7
...
Apache CouchDB - Unauthenticated Access
2023-08-18 10:24:07 +05:30
5ac99a28e8
matcher update
2023-08-18 10:22:37 +05:30
1eefb6532b
added reference
2023-08-18 10:16:51 +05:30
5afabcb523
TemplateMan Update [Fri Aug 18 04:12:05 UTC 2023] 🤖
2023-08-18 04:12:05 +00:00
49e22c510a
Merge pull request #7946 from johnk3r/main
...
Update sonicwall-sslvpn-panel.yaml :: Sugestion to avoid FN
2023-08-18 09:39:59 +05:30
f3bdf5fc66
Auto WordPress Plugins Update [Fri Aug 18 04:02:21 UTC 2023] 🤖
2023-08-18 04:02:21 +00:00
2b695516e1
Add files via upload
2023-08-18 09:07:14 +05:30
266bf937ca
Update feiyuxing-info-leak.yaml
2023-08-18 08:33:45 +05:30
23da4ed9de
Feiyuxing Information - Exposure
2023-08-18 08:30:22 +05:30
899e8b870d
Add files via upload
2023-08-18 00:24:33 +05:30
4812b16559
Add files via upload
2023-08-18 00:05:57 +05:30
728bb60b9f
metadata update and space fix
2023-08-17 23:26:49 +05:30
3d7f88751b
Add criterias
2023-08-17 18:52:43 +02:00
b04b1de4d0
Update CVE-2021-41773.yaml
2023-08-17 18:38:41 +05:30
3ed60c2d8c
changes
2023-08-17 18:37:35 +05:30
dcd8d7fa30
fix templates
2023-08-17 18:36:17 +05:30
0a51273b76
fix template
2023-08-17 18:36:07 +05:30
6529cfe9de
Move back CVE-2015-9323.yaml to the 2015 directory
2023-08-17 14:57:09 +02:00
8000427907
Add extractor to drupal-detect
2023-08-17 12:11:14 +02:00
02de96b13f
added stop at first match
2023-08-17 14:45:05 +05:30
b60230b423
fix template with remediation
2023-08-17 14:42:24 +05:30
ff3a91bcb9
Update prometheus-metrics.yaml
2023-08-17 14:04:13 +05:30
796f749d19
Delete CAIMORE-Gateway-RCE.yaml
2023-08-17 15:58:58 +08:00
d61d1513d1
Create CVE-2022-1756.yaml
2023-08-17 13:19:11 +05:30
6b65d51bae
TemplateMan Update [Thu Aug 17 06:03:14 UTC 2023] 🤖
2023-08-17 06:03:15 +00:00
83c1f31ed2
Merge pull request #7943 from iamxhunt3r/main-2
...
Update mobileiron-login.yaml
2023-08-17 11:30:49 +05:30
11338e9c1a
updated matcher condition or
2023-08-17 11:27:52 +05:30
ff6bd7c56e
Auto WordPress Plugins Update [Thu Aug 17 04:02:01 UTC 2023] 🤖
2023-08-17 04:02:01 +00:00
9eaa8e8998
Update sonicwall-sslvpn-panel.yaml
2023-08-16 18:09:19 -03:00
d2d5247d28
Merge pull request #7945 from harsh2403/main-3
...
Create wp-real-estate-xss.yaml
2023-08-17 01:06:01 +05:30
591066311f
Update wp-real-estate-xss.yaml
2023-08-17 01:02:52 +05:30
7966d77a59
trail space fix
2023-08-16 23:44:26 +05:30
44a037fa78
fix-template
2023-08-16 23:41:35 +05:30
12909e445b
Merge pull request #7938 from Arrnitage/cve-2022-46463
...
add CVE-2022-46463 template
2023-08-16 23:19:58 +05:30
1ad073713d
Merge pull request #7942 from kazet/aws-other-cloud-provider
...
AWS metadata description informs that it could be other cloud provider
2023-08-16 23:12:58 +05:30
05084960d7
lint and format fix
2023-08-16 23:12:35 +05:30
f8cbf253a7
Create wp-real-estate-xss.yaml
2023-08-16 22:28:53 +05:30
59407bc0cd
Merge branch 'main' into cve-2022-46463
2023-08-16 21:52:30 +05:30
13010c5ba4
Merge branch 'main' into main-1
2023-08-16 22:03:27 +08:00
4882498129
TemplateMan Update [Wed Aug 16 13:50:50 UTC 2023] 🤖
2023-08-16 13:50:50 +00:00
80a7818b58
Merge pull request #7940 from j4vaovo/j4vaovo-patch-1
...
Update phpinfo-files.yaml
2023-08-16 19:18:59 +05:30
c52eaa45be
Merge pull request #7939 from projectdiscovery/manage-engine-fp
...
Fix FP Manage Engine AD Search
2023-08-16 19:17:27 +05:30
2aa52da043
Exposed core dump file detection
2023-08-16 14:43:17 +02:00
d603efa2a5
Update mobileiron-login.yaml
...
Verified from Shodan
https://www.shodan.io/search?query=http.favicon.hash%3A1983356674&page=2
2023-08-16 17:21:07 +05:30
1f1d83c824
AWS metadata description informs that it could be other cloud provider
2023-08-16 13:40:32 +02:00
6545808283
Update dedecms-detect.yaml
2023-08-16 18:32:22 +08:00
3867152a25
Update phpinfo-files.yaml
2023-08-16 18:31:14 +08:00
da721be768
trail space fix
2023-08-16 15:18:48 +05:30
de378a520a
fix it bro
2023-08-16 15:14:58 +05:30
f2e033df45
trailspace fix please
2023-08-16 15:07:30 +05:30
0907a448be
classification added
2023-08-16 14:58:32 +05:30
83e0faedc1
fix trailspace and metadata
2023-08-16 14:52:52 +05:30
c424ca1c83
Rename CVE-2021-25065 to CVE-2021-25065.yaml
2023-08-16 14:47:39 +05:30
d16824d7b7
Fix FP
2023-08-16 14:41:36 +05:30
94a06bd2fe
add cve-2022-46463
2023-08-16 16:57:23 +08:00
ff554bd551
add cve-2022-46463.yaml
2023-08-16 16:46:20 +08:00
2dbbc20a53
Merge pull request #7927 from harsh2403/CVE-2015-9323
...
Create CVE-2015-9323.yaml
2023-08-16 11:36:31 +05:30
5d6d00a53e
Merge pull request #7929 from harsh2403/main-2
...
Create CVE-2021-25065
2023-08-16 11:25:06 +05:30
75d104dca2
Update CVE-2021-25065
2023-08-16 11:22:57 +05:30
26a4991b30
Merge pull request #7931 from johnk3r/main
...
Update CVE-2021-36260.yaml :: Suggestion to avoid FN
2023-08-16 11:19:32 +05:30
d6f968528f
Merge pull request #7935 from Lucky-Pulse/add_istio_envoy_to_tech_detect
...
Added istio-envoy header detection to tech-detect
2023-08-16 11:17:33 +05:30
4847c5e616
added remediation and matcher fix
2023-08-16 10:42:57 +05:30
e42ab01dbf
rewrote template and matcher update
2023-08-16 10:35:23 +05:30
2d601c36d4
added metadata
2023-08-16 09:43:54 +05:30
5e3d633e86
Added istio-envoy header to tech-detect
2023-08-16 11:21:10 +12:00
aba8f08315
Add files via upload
2023-08-16 00:50:26 +08:00
d3affcfbfa
Add files via upload
2023-08-16 00:37:28 +08:00
bd027fa42d
Delete ecology-oa-filedownloadforoutdoc-sqli.yaml
2023-08-16 00:33:22 +08:00
822c8a5192
Update ecology-oa-filedownloadforoutdoc-sqli.yaml
2023-08-16 00:28:39 +08:00
5a158e156b
Add files via upload
2023-08-16 00:25:07 +08:00
06b8c2fc26
Add files via upload
2023-08-16 00:23:18 +08:00
df5eb2b284
Delete ecology-oa-filedownloadforoutdoc-sqli.yaml
2023-08-16 00:18:24 +08:00
84d8c493e4
Add files via upload
2023-08-16 00:17:28 +08:00
093a08056f
Delete CAIMORE-Gateway-RCE.yaml
2023-08-16 00:14:12 +08:00
c1998873ca
Delete mooSocial-xss.yaml
2023-08-16 00:13:50 +08:00
99f32ed102
Add files via upload
2023-08-16 00:09:48 +08:00
ef8915e472
Add files via upload
2023-08-16 00:08:07 +08:00
3e5d376135
Merge branch 'projectdiscovery:main' into main
2023-08-15 23:54:46 +08:00
8ab24a01b5
updated matcher
2023-08-15 21:09:25 +05:30
1ebcaad001
Auto WordPress Plugins Update [Tue Aug 15 04:02:10 UTC 2023] 🤖
2023-08-15 04:02:10 +00:00
7db62fb59d
Update CVE-2021-36260.yaml
2023-08-14 22:57:12 -03:00
cf8a208fe7
Create CVE-2021-25065
2023-08-14 17:59:50 +05:30
779dd20417
lint fix
2023-08-14 17:24:30 +05:30
de738633ef
lint fix
2023-08-14 17:23:35 +05:30
6e325b7fc7
Create CVE-2021-24409.yaml
2023-08-14 17:00:37 +05:30
9dbf7f288c
Create CVE-2015-9323.yaml
2023-08-14 16:39:55 +05:30
74a63355b6
Merge pull request #7919 from nullfuzz-pentest/besu-server
...
Added besu-server-detect template
2023-08-14 12:37:56 +05:30
e3f90a21e1
Update besu-server-detect.yaml
2023-08-14 12:11:52 +05:30
dc7ec6dd1b
Merge pull request #7920 from nullfuzz-pentest/nethermind-server
...
Added nethermind-server-detect template
2023-08-14 12:11:22 +05:30
8bc1dcb2f1
Update nethermind-server-detect.yaml
2023-08-14 12:07:13 +05:30
c8a17455f6
Merge pull request #7921 from nullfuzz-pentest/geth-server
...
Added geth-server-detect template
2023-08-14 12:06:31 +05:30
a8c26b250e
Update geth-server-detect.yaml
2023-08-14 12:02:59 +05:30
cc07116b96
TemplateMan Update [Mon Aug 14 05:34:20 UTC 2023] 🤖
2023-08-14 05:34:21 +00:00
937a2fbebd
Merge pull request #7917 from nullfuzz-pentest/erigon-server
...
Added erigon-server-detect template
2023-08-14 11:02:19 +05:30
3356d1f570
Update erigon-server-detect.yaml
2023-08-14 10:57:31 +05:30
f786c1b2ae
added and condition for status code
2023-08-14 10:39:29 +05:30
6281a649f2
added verified , updated id name
2023-08-14 10:36:17 +05:30
7155cfa6c1
added verified , updated id name
2023-08-14 10:34:00 +05:30
89ca4dfb26
added verified , updated id name
2023-08-14 10:14:56 +05:30
c4da20f5d3
added verified , updated id name
2023-08-14 10:09:58 +05:30
df0acfbcd4
Auto WordPress Plugins Update [Sun Aug 13 04:02:05 UTC 2023] 🤖
2023-08-13 04:02:05 +00:00
1a0b749249
Added geth-server-detect template
2023-08-12 23:42:57 -03:00
a0eaa1db71
Update CVE-2022-31879.yaml
2023-08-13 10:04:23 +08:00
783e5bf677
Added nethermind-server-detect template
2023-08-12 23:03:01 -03:00
3c7cd075c9
Added besu-server-detect template
2023-08-12 22:50:53 -03:00
b9e1a34d55
Added erigon-server-detect template
2023-08-12 22:38:49 -03:00
9ef2b2a9c6
Update CVE-2019-15642.yaml
2023-08-13 06:03:31 +05:30
ab8416797b
TemplateMan Update [Sat Aug 12 17:47:01 UTC 2023] 🤖
2023-08-12 17:47:02 +00:00
f6c1088240
Lexmark Command Injection ZDI-CAN-19470 Pwn2Own Toronto 2022 🔥 ( #7910 )
...
* Create CVE-2023-26067.yaml
* cmd exec check + better matchers
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-08-12 23:15:00 +05:30
9571447984
Update CVE-2022-31879.yaml
2023-08-12 16:18:49 +08:00
059c1c4e63
Auto WordPress Plugins Update [Sat Aug 12 04:02:02 UTC 2023] 🤖
2023-08-12 04:02:02 +00:00
6687a699f1
Fixes incorrect tag in CVE-2020-28185
...
TerraMaster TOS < 4.2.06 - User Enumeration
2023-08-11 11:54:13 -05:00
acee1a8ec8
Merge pull request #7911 from projectdiscovery/evlink-panel
...
Create evlink-panel.yaml
2023-08-11 22:03:13 +05:30
3ded5bdd35
Merge pull request #7912 from projectdiscovery/evse-web-panel
...
Create evse-web-panel.yaml
2023-08-11 17:15:24 +05:30
a0cf407efe
Merge pull request #7907 from dcruzec/Update-sonarqube-login.yaml
...
Update sonarqube-login.yaml
2023-08-11 17:13:08 +05:30
e68bad9050
Create evse-web-panel.yaml
2023-08-11 17:06:35 +05:30
f1824bc2d9
Create evlink-panel.yaml
2023-08-11 17:00:06 +05:30
216e4128be
updated matcher
2023-08-11 15:45:25 +05:30
0656125645
fix trail space
2023-08-11 11:16:44 +05:30
6f656fcc2e
Create ecology-oa-file-sqli.yaml
2023-08-11 11:14:21 +05:30
b5091f1c8a
TemplateMan Update [Fri Aug 11 04:57:00 UTC 2023] 🤖
2023-08-11 04:57:01 +00:00
3514e332d4
fix trail space
2023-08-11 10:20:45 +05:30
d7b3675bd7
Auto WordPress Plugins Update [Fri Aug 11 04:01:55 UTC 2023] 🤖
2023-08-11 04:01:55 +00:00
c3516992c3
Update sonarqube-login.yaml
...
The original template was causing too many false positives. It seems that it was only picking off the BaseURL endpoint. Meaning if any other service like Fortinet had a similar endpoint then it would show up as a Sonarqube result.
I've added matchers-condition as well as the HTTP status to 200 which eliminated the false positives in my case during testing.
2023-08-10 21:46:19 -04:00
1b7dd8f5df
Update FLIR-AX8-RCE.yaml
2023-08-10 23:16:02 +08:00
621b42eca2
Update FLIR-AX8-RCE.yaml
2023-08-10 23:12:03 +08:00
eb74a12232
Update FLIR-AX8-RCE.yaml
2023-08-10 23:09:08 +08:00
ece7176183
Update FLIR-AX8-RCE.yaml
2023-08-10 23:01:37 +08:00
0102bcf997
Add files via upload
2023-08-10 22:58:24 +08:00
7d128b858e
Update CAIMORE-Gateway-RCE.yaml
2023-08-10 22:39:40 +08:00
0bdb7cf4ce
Add files via upload
2023-08-10 22:30:03 +08:00
fdeb1329ee
added missing request method
2023-08-10 16:26:30 +05:30
5df82a865a
severity case fix
2023-08-10 16:24:19 +05:30
2a5923f86d
Merge pull request #7902 from j4vaovo/j4vaovo-patch-1
...
fix [FP]uptimerobot-takeover
2023-08-10 15:19:54 +05:30
103ae05d02
Merge pull request #7892 from kazet/fewer-false-positives-generic-env
...
Fewer false positives in generic-env.yaml
2023-08-10 15:19:39 +05:30
474db1293e
Create CVE-2021-22707.yaml
2023-08-10 12:00:57 +05:30
23203f762e
TemplateMan Update [Thu Aug 10 06:15:29 UTC 2023] 🤖
2023-08-10 06:15:29 +00:00
de6be72170
Merge pull request #7577 from harsh2403/patch-13
...
Create CVE-2022-46443.yaml
2023-08-10 11:43:36 +05:30
864154f8a5
Merge pull request #7889 from momika233/main
...
CVE-2023-4174/CVE-2023-4173/TerraMaster-RCE/panabit-ixcache-date-config-rce
2023-08-10 11:27:53 +05:30
4e03d0623b
Merge pull request #7903 from projectdiscovery/pussycat0x-patch-2
...
CVE-2017-8229
2023-08-10 11:26:50 +05:30
7316145d48
fix template
2023-08-10 11:23:25 +05:30
6090a6efea
tag - update
2023-08-10 11:20:30 +05:30
pussycat0x
GitHub Action
Dhiyaneshwaran
Guillaume Granjus
adrlsx
pentesttools-com
pentesttools-com
momika233
Dominique RIGHETTO
Yoyoda75
Techbrunch
Tarunkant Gupta
Harsh Yadav
johnk3r
Ritik Chaddha
pphua
Krzysztof Zając
Vikas Gupta
J4vaovo
Arm!tage
Lucky-Pulse
nullfuzz
Prince Chaddha
Walter Sagehorn
dcruzec
sandeep