208ff38843
Create CVE-2023-30013.yaml
...
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2023-09-30 13:15:00 +09:00
ff450a65ba
strict matcher
2023-09-29 19:04:39 +05:30
fd69046097
Added CVE-2023-29357 (Microsoft SharePoint - Authentication Bypass)
2023-09-29 18:51:23 +05:30
6784a9d2c1
format fix
2023-09-29 14:24:46 +05:30
5574a26f60
Update CVE-2019-6802.yaml
...
Updated to remove false positives.
As the previous change matches the words "Set-Cookie: crlfinjection=1" even if the words are present in the Location header too.
The updated code, will match only if the "Set-Cookie: crlfinjection=1" is actually a header, by verifying that it actually starts in the beginning of a response header.
2023-09-29 13:46:22 +05:30
77bfd17949
TemplateMan Update [Fri Sep 29 05:57:07 UTC 2023] 🤖
2023-09-29 05:57:07 +00:00
30217297c2
Merge pull request #8271 from projectdiscovery/CVE-2014-9180
...
Create CVE-2014-9180.yaml
2023-09-29 11:24:52 +05:30
e616bb0ec7
protocol update
2023-09-27 23:35:44 +05:30
bc957cd1a4
Update CVE-2023-42793.yaml
2023-09-27 23:35:06 +05:30
f0ba24afa1
JetBrains TeamCity - Remote Code Execution (CVE-2023-42793)
2023-09-27 23:25:18 +05:30
dc6b9c1e73
metadata update
2023-09-27 14:39:20 +05:30
334c3be057
Create CVE-2023-22432.yaml
2023-09-27 14:38:24 +05:30
082966e07a
Create CVE-2014-9180.yaml
2023-09-27 14:13:02 +05:30
e47239d4df
Merge pull request #8267 from projectdiscovery/CVE-2023-5074
...
Create CVE-2023-5074.yaml (Authentication Bypass in D-Link D-View 8 🔥 )
2023-09-26 21:24:12 +05:30
17669c7fd8
lint -fix
2023-09-26 21:21:03 +05:30
5f4f590e7f
Update CVE-2023-5074.yaml
2023-09-26 21:16:55 +05:30
3b789d908b
Update CVE-2023-5074.yaml
2023-09-26 21:13:29 +05:30
eec309f75f
TemplateMan Update [Tue Sep 26 15:42:15 UTC 2023] 🤖
2023-09-26 15:42:16 +00:00
85868d5802
Merge pull request #8216 from zn9988/main
...
Create CVE-2023-2479.yaml
2023-09-26 21:09:57 +05:30
e48aa75f0f
fix-trail-spacing
2023-09-26 20:09:49 +05:30
52c9d36132
Create CVE-2023-5074.yaml
2023-09-26 20:05:39 +05:30
634eb6f24f
Merge pull request #8225 from projectdiscovery/CVE-2023-36845
...
Create CVE-2023-36845.yaml (Juniper J-Web - Remote Code Execution 🔥 )
2023-09-26 18:57:53 +05:30
6d40f1256d
fix trail space
2023-09-26 12:42:57 +05:30
ae67cf87ba
minor update
2023-09-26 12:33:31 +05:30
c79554fd80
TemplateMan Update [Tue Sep 26 05:47:05 UTC 2023] 🤖
2023-09-26 05:47:06 +00:00
2c1392e423
Merge pull request #8260 from kazet/zzzcms-rce-fp
...
ZZZCMS RCE is a false positive if we see phpinfo() without posting any data
2023-09-26 11:14:55 +05:30
59151619bc
req and matcher update
2023-09-26 10:19:09 +05:30
f188fcbe2f
more precise status code match
2023-09-25 16:28:43 +02:00
8e3d9c97ce
ZZZCMS RCE is a false positive if we see phpinfo() without posting any data
2023-09-25 16:24:23 +02:00
463f722ad7
Create CVE-2023-30625.yaml
...
rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution (RCE) due to the `rudder` role in PostgresSQL having superuser permissions by default. Version 1.3.0-rc.1 contains patches for this issue.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2023-09-24 18:15:00 +09:00
d549599606
fix: typo in cve-2023-23492 template name ( #8250 )
2023-09-23 15:12:58 +05:30
8c3ccf581b
fix: typo in template CVE-2023-24735 name
2023-09-21 11:10:50 +03:00
47f97458af
Create CVE-2023-42442.yaml
2023-09-20 16:14:04 +05:30
3115469524
Merge pull request #8224 from projectdiscovery/CVE-2023-4568
...
Create CVE-2023-4568.yaml (PaperCut NG Unauthenticated XMLRPC Functionality 🔥 )
2023-09-19 13:50:04 +05:30
4dc094fffa
Create CVE-2023-36845.yaml
2023-09-19 07:24:05 +05:30
835179f9be
Merge pull request #8203 from projectdiscovery/CVE-2023-2766
...
Create CVE-2023-2766.yaml
2023-09-18 23:51:03 +05:30
6335a4e3a0
matcher and info update
2023-09-18 23:47:32 +05:30
681a1b3263
Create CVE-2023-4568.yaml
2023-09-18 23:06:47 +05:30
18f37d9226
Update CVE-2022-0342.yaml
2023-09-18 18:51:11 +05:30
8e38345f0d
Merge pull request #7997 from SleepingBag945/some_tps
...
Added 124 Templates
2023-09-18 18:13:14 +05:30
d5dfd3302c
template update
2023-09-18 18:07:42 +05:30
601100cd0f
Merge pull request #8215 from projectdiscovery/princechaddha-patch-2
...
Create CVE-2023-41892.yaml
2023-09-18 15:20:42 +05:30
823e1b1f49
Merge pull request #8113 from harsh2403/patch-18
...
Create CVE-2023-37629.yaml
2023-09-18 15:18:37 +05:30
716c8ddfce
updated matcher
2023-09-18 15:17:31 +05:30
b6550ca831
updated matcher
2023-09-18 14:31:39 +05:30
274c14e763
updated-templates-p
2023-09-17 14:21:38 +05:30
0e4f7b0565
Update CVE-2023-2813.yaml
2023-09-17 13:41:16 +05:30
1baa17c029
Fix FP -CVE-2023-2813
2023-09-17 13:37:19 +05:30
88153faaf8
Merge branch 'main' into some_tps
2023-09-17 13:03:38 +05:30
4ace2254fa
Merge pull request #8218 from projectdiscovery/CVE-2023-2813
...
Create CVE-2023-2813.yaml (48 Wordpress Themes Affected 🔥 )
2023-09-16 23:21:00 +05:30
0f037e9860
request update
2023-09-15 22:39:22 +05:30
86659ff1f4
TemplateMan Update [Fri Sep 15 17:04:28 UTC 2023] 🤖
2023-09-15 17:04:28 +00:00
8f3dfab992
Merge pull request #8178 from meme-lord/phpinfo_template
...
Added template for CVE-2023-39677 MyPrestaModules PHPInfo
2023-09-15 22:32:31 +05:30
03eb0dedc8
Merge pull request #8204 from projectdiscovery/CVE-2023-22463
...
Create CVE-2023-22463.yaml (KubePi JwtSigKey - Login Bypass 🔥 )
2023-09-15 22:31:29 +05:30
89683e2c2b
info update
2023-09-15 22:24:13 +05:30
af6f3e0897
Merge pull request #8210 from projectdiscovery/CVE-2023-4714
...
Create CVE-2023-4714.yaml
2023-09-15 22:16:15 +05:30
428b82492d
matcher & info update
2023-09-15 22:16:06 +05:30
753e4e5af7
matcher update
2023-09-15 22:12:25 +05:30
b665b1b0e8
info update
2023-09-15 22:11:27 +05:30
f122fc3ec9
Create CVE-2023-2813.yaml
2023-09-15 18:19:17 +05:30
c84e4ef64c
Templates - update
2023-09-15 17:53:57 +05:30
1353a5c204
added metadata
2023-09-15 15:54:32 +05:30
d405588ec1
Create CVE-2023-41892.yaml
2023-09-15 12:44:48 +05:30
a711c0cc04
Create CVE-2023-2479.yaml
2023-09-15 15:11:13 +08:00
67bf15b8cb
Update CVE-2023-25573.yaml
2023-09-14 23:02:41 +05:30
3d99f465a6
Update CVE-2023-4714.yaml
2023-09-14 20:41:26 +05:30
a35edf9795
Create CVE-2023-4714.yaml
2023-09-14 20:38:32 +05:30
9e2b1fa698
Update CVE-2023-25573.yaml
2023-09-14 20:34:56 +05:30
646084dced
Create CVE-2023-25573.yaml
2023-09-14 20:29:27 +05:30
db0ac300f5
Create CVE-2023-22463.yaml
2023-09-13 18:30:12 +05:30
82d46bb11d
Create CVE-2023-2766.yaml
2023-09-13 18:07:55 +05:30
a14aed0579
Merge pull request #8197 from pphuahua/patch-1
...
Fixed CVE-2022-23854.yaml
2023-09-13 11:36:11 +05:30
b4b8015c73
Merge pull request #8173 from meme-lord/main
...
Added template for CVE-2023-39676 FieldPopupNewsletter XSS
2023-09-12 17:27:58 +05:30
f9fe314b2c
name - update
2023-09-12 17:15:08 +05:30
b9b992446b
Update CVE-2022-23854.yaml
2023-09-12 15:41:24 +05:30
78e1d30ab4
TemplateMan Update [Tue Sep 12 10:04:40 UTC 2023] 🤖
2023-09-12 10:04:40 +00:00
38048e3023
Merge pull request #8120 from projectdiscovery/CVE-2023-30943
...
Create CVE-2023-30943.yaml
2023-09-12 15:32:40 +05:30
74eff31e1d
info update
2023-09-12 12:50:58 +05:30
8508734893
added classification
2023-09-12 12:49:44 +05:30
5a9459d0fd
updated template
2023-09-12 12:44:40 +05:30
7f13992675
added content-type
2023-09-12 11:44:58 +05:30
14c8f415d5
Update CVE-2022-23854.yaml
...
Due to version differences, sometimes there is no "EricomSecureGateway" in the http response.
2023-09-12 14:01:48 +08:00
f9cf8a303a
Merge pull request #8169 from projectdiscovery/remediations
...
Updating remediation for CVEs
2023-09-11 20:03:59 +05:30
921a06f483
Merge pull request #8187 from muthumohanprasath/muthumohanprasath-patch-1
...
Create CVE-2023-39598.yaml
2023-09-11 15:41:20 +05:30
e6912e6342
corrected description
2023-09-11 13:09:49 +05:30
d888ca0d4b
Update CVE-2023-39677.yaml
2023-09-11 12:27:02 +05:30
5da357447f
Update CVE-2023-39676.yaml
2023-09-11 12:14:30 +05:30
cf900022f5
Merge branch 'main' into remediations
2023-09-11 12:02:51 +05:30
b71a7bb05c
Merge pull request #8188 from muthumohanprasath/muthumohanprasath-patch-2
...
Create CVE-2023-39600.yaml
2023-09-10 22:28:58 +05:30
8bb91fcd4f
Rename CVE-2023-38433.yaml to CVE-2023-38433.yaml
2023-09-10 20:06:14 +05:30
4471d442e0
matcher update
2023-09-10 20:04:42 +05:30
3ea7388fa2
Rename CVE-2023-39598.yaml to CVE-2023-39598.yaml
2023-09-10 20:03:49 +05:30
8196867c7a
Update and rename CVE-2023-39600.yaml to CVE-2023-39600.yaml
2023-09-10 20:02:16 +05:30
2b0d68f7e7
matcher update
2023-09-10 20:01:33 +05:30
356c07ccdc
add matchers-condition: and
2023-09-10 21:44:34 +08:00
63bcb69d6f
TemplateMan Update [Sat Sep 9 17:06:23 UTC 2023] 🤖
2023-09-09 17:06:24 +00:00
216236de8c
Merge pull request #8157 from projectdiscovery/princechaddha-patch-3
...
Update CVE-2019-11580.yaml
2023-09-09 22:34:13 +05:30
c36a419cac
added myprestamodules phpinfo template
2023-09-08 12:30:28 +01:00
dad997b818
added template for CVE-2023-39676 FieldPopupNewsletter XSS
2023-09-07 10:43:17 +01:00
e418b30d19
Merge branch 'remediations' of https://github.com/projectdiscovery/nuclei-templates into remediations
2023-09-06 18:53:19 +05:30
3f650354e1
updated other CVEs
2023-09-06 18:52:34 +05:30
74f0907215
Rename CVE-2023-36346 2.yaml to CVE-2023-36346.yaml
2023-09-06 18:50:10 +05:30
e6a5d8ec22
updated 2018 CVEs
2023-09-06 18:27:14 +05:30
a92ce6783f
updated 2019 CVEs
2023-09-06 18:23:28 +05:30
d6f27be44f
Merge branch 'remediations' of https://github.com/projectdiscovery/nuclei-templates into remediations
2023-09-06 17:52:49 +05:30
7d9d59ab58
updated 2020 CVEs
2023-09-06 17:52:36 +05:30
09c59282c4
fixed lint error
2023-09-06 17:52:30 +05:30
a09a0c8d7a
Updated 2021 CVEs
2023-09-06 17:39:01 +05:30
d103f3140c
reference & matcher update
2023-09-06 17:37:50 +05:30
449651f076
updated 2022 CVEs
2023-09-06 17:29:08 +05:30
469b7f7049
matchers update
2023-09-06 17:17:28 +05:30
137cf38b8b
updated remediation in 2023 CVEs
2023-09-06 17:13:37 +05:30
8939245dee
Create CVE-2023-39361.yaml
2023-09-06 17:09:51 +05:30
9e32a2fcbf
Merge pull request #8160 from projectdiscovery/CVE-2023-4634
...
Create CVE-2023-4634.yaml
2023-09-05 19:06:20 +05:30
09275ac997
lint fix
2023-09-05 19:03:32 +05:30
fc0dcf0ea7
update metadata & ref
2023-09-05 19:02:19 +05:30
7534ad59ac
Create CVE-2023-4634.yaml
2023-09-05 19:00:09 +05:30
b8b9e7b92b
Create CVE-2023-2648.yaml
2023-09-05 18:02:23 +05:30
a6dd2314a9
Merge pull request #7802 from j4vaovo/patch-4
...
fix CVE-2020-2036 false-positive
2023-09-05 17:39:44 +05:30
85d55af2f1
Update CVE-2019-11580.yaml
2023-09-05 14:34:47 +05:30
b1dc64b66d
Merge pull request #8140 from j4vaovo/patch-1
...
fix fp CVE-2021-32819.yaml
2023-09-05 10:31:26 +05:30
7e8f939eed
Merge pull request #8142 from j4vaovo/patch-3
...
fix fp CVE-2022-0591.yaml
2023-09-04 23:43:23 +05:30
a20bd30096
metadata update
2023-09-04 23:15:06 +05:30
52cee1f6a7
Merge pull request #8123 from projectdiscovery/epss-percentile
...
Added EPSS Percentile
2023-09-04 15:47:17 +05:30
4413725ebd
Update CVE-2022-0591.yaml
2023-09-03 09:11:15 +08:00
4856ec61af
Update CVE-2022-0591.yaml
2023-09-03 07:23:47 +08:00
a3b7335af6
fix fp CVE-2022-0591.yaml
2023-09-03 07:22:48 +08:00
fc8d5d9817
fix fp CVE-2021-32819.yaml
2023-09-03 05:59:37 +08:00
ecb8f96e87
Merge pull request #8104 from projectdiscovery/CVE-2018-17153
...
Create CVE-2018-17153.yaml
2023-09-01 21:29:34 +05:30
1e46f16428
req & info update
2023-09-01 21:22:19 +05:30
2a37a061a8
Merge branch 'main' into epss-percentile
2023-09-01 14:29:43 +05:30
0fdde48ab4
updated matcher|metadata
2023-09-01 14:25:18 +05:30
b049cda79e
misc update
2023-09-01 14:04:34 +05:30
a2db8b7ec5
payload updation
2023-09-01 08:34:21 +05:30
6d5a53306e
Merge pull request #8127 from projectdiscovery/CVE-2020-10220
...
Create CVE-2020-10220.yaml & update rconfig-file-upload.yaml
2023-09-01 08:32:08 +05:30
0d9daed8d8
matchers-condition: and added
2023-09-01 08:25:12 +05:30
af9148890b
TemplateMan Update [Fri Sep 1 02:54:41 UTC 2023] 🤖
2023-09-01 02:54:42 +00:00
115ec59aa4
Merge pull request #8126 from tarunkant/patch-6
...
Adding one more path in CVE-2020-13379.yaml
2023-09-01 08:22:23 +05:30
3194deebc4
TemplateMan Update [Fri Sep 1 02:52:14 UTC 2023] 🤖
2023-09-01 02:52:15 +00:00
42b3dfeeb4
Create CVE-2021-46107.yaml
2023-09-01 01:19:52 +05:30
d425d8da65
Create CVE-2020-10220.yaml
2023-09-01 00:53:15 +05:30
3b74f3747d
Adding one more path in CVE-2020-13379.yaml
2023-08-31 23:08:16 +05:30
844ed284c5
Merge pull request #8124 from projectdiscovery/CVE-2018-15917
...
Create CVE-2018-15917.yaml
2023-08-31 21:24:52 +05:30
047ecaa915
TemplateMan Update [Thu Aug 31 15:54:09 UTC 2023] 🤖
2023-08-31 15:54:09 +00:00
d1c6782c2f
Merge pull request #7731 from projectdiscovery/CVE-2023-34192
...
Create CVE-2023-34192.yaml (Zimbra XSS)
2023-08-31 21:22:12 +05:30
474ee5baf4
Create CVE-2018-15917.yaml
2023-08-31 21:13:46 +05:30
d428cc0c9c
Added EPSS Percentile
2023-08-31 17:16:18 +05:30
83bb3b4766
Create CVE-2023-30943.yaml
2023-08-31 10:04:29 +05:30
12c478a2c8
minor update
2023-08-31 01:31:43 +05:30
a397e12906
CVE-2023-26469
2023-08-30 23:01:52 +05:30
3518319d95
Update CVE-2023-37629.yaml
...
Updated Author
2023-08-30 09:49:07 +05:30
23989d540e
fix-trail-space
2023-08-30 08:24:05 +05:30
8c2227c4be
Create CVE-2023-37629.yaml
2023-08-29 23:17:46 +05:30
7106abd7b8
Merge branch 'main' into CVE-2023-34192
2023-08-29 16:43:02 +05:30
8feb47bead
Update CVE-2023-34192.yaml
2023-08-29 16:42:34 +05:30
25ce5141f7
Update CVE-2023-39141.yaml
2023-08-29 13:54:35 +05:30
5593ae03c0
Create CVE-2018-17153.yaml
2023-08-29 05:23:56 +05:30
a350dd71c6
Create CVE-2016-10108.yaml
2023-08-29 05:12:23 +05:30
1ace193c51
Merge pull request #8087 from projectdiscovery/princechaddha-patch-3
...
Create CVE-2023-36844.yaml
2023-08-29 02:08:25 +05:30
7fd2a80c8c
Merge pull request #8099 from projectdiscovery/CVE-2023-34124
...
Create CVE-2023-34124.yaml
2023-08-29 02:07:51 +05:30
f6e4c58708
template update
2023-08-29 00:25:45 +05:30
55c3839469
metadata update
2023-08-29 00:17:26 +05:30
f1f1e457b1
updated severity
2023-08-29 00:09:15 +05:30
e627b0f699
TemplateMan Update [Mon Aug 28 18:37:37 UTC 2023] 🤖
2023-08-28 18:37:38 +00:00
c9d059782a
Merge branch 'main' into princechaddha-patch-3
2023-08-29 00:02:03 +05:30
bd1744502e
updated template
2023-08-29 00:01:48 +05:30
6e81e536a3
Update CVE-2023-34124.yaml
2023-08-28 22:35:22 +05:30
5f397028f7
Update CVE-2023-32563.yaml
2023-08-28 22:31:52 +05:30
5cbc0e4415
randstr
2023-08-28 22:30:28 +05:30
df7a8852ad
regex fix
2023-08-28 22:14:26 +05:30
df3313134f
yaml lint
2023-08-28 22:13:33 +05:30
f04b826f4a
fix spaceing
2023-08-28 22:07:59 +05:30
5b68b4c71e
variable update
2023-08-28 21:20:44 +05:30
9427dc14df
fix trail space
2023-08-28 19:02:13 +05:30
a1a8e6568b
Create CVE-2023-34124.yaml
2023-08-28 18:56:29 +05:30
46cb580f95
Merge branch 'main' into princechaddha-patch-5
2023-08-28 18:20:28 +05:30
96eacea06e
updated payload
2023-08-28 12:21:54 +05:30
4501c3294d
TemplateMan Update [Sat Aug 26 10:15:16 UTC 2023] 🤖
2023-08-26 10:15:16 +00:00
5a6c1f88e3
Merge pull request #8026 from projectdiscovery/princechaddha-patch-2
...
Cisco VPN Routers - Unauthenticated Arbitrary File Upload and Stored XSS
2023-08-26 15:43:00 +05:30
fde3d043f0
appended html comment to match
2023-08-26 15:36:24 +05:30
238807bde8
Create CVE-2023-32563.yaml
2023-08-26 13:23:49 +05:30
8a86cbb523
Create CVE-2023-36844.yaml
2023-08-26 13:06:41 +05:30
70d14b6858
TemplateMan Update [Fri Aug 25 14:08:39 UTC 2023] 🤖
2023-08-25 14:08:40 +00:00
f075cb4a00
Updated condition
2023-08-25 19:30:49 +05:30
60418c566f
Fix trailing space
2023-08-25 16:25:02 +03:00
6b0b47a2d6
Fixed matchers and removed statuscode check as not always is 200
2023-08-25 16:17:54 +03:00
d5c2557fbc
fixed trailing spaces
2023-08-25 18:04:57 +05:30
55dc24a4c5
Merge branch 'main' into prestashopsqli
2023-08-25 17:59:19 +05:30
c5e48e9cc8
updated matchers
2023-08-25 17:53:28 +05:30
003c12a15e
updated matchers
2023-08-25 17:07:43 +05:30
60a0fe67f5
cvss added
2023-08-25 13:57:04 +05:30
f4faa84ffb
Create CVE-2020-11798.yaml
2023-08-25 11:38:13 +05:30
17f6abec90
Merge pull request #8070 from projectdiscovery/CVE-2023-39026
...
Create CVE-2023-39026.yaml
2023-08-24 23:19:35 +05:30
bcf747cc69
update matchers|info
2023-08-24 23:15:24 +05:30
777a520c8e
Create CVE-2023-38035.yaml ( #8075 )
...
* Create CVE-2023-38035.yaml
* syntax fix
* working template
* misc updates
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-08-24 23:10:37 +05:30
ce7d7f288c
TemplateMan Update [Thu Aug 24 06:15:35 UTC 2023] 🤖
2023-08-24 06:15:36 +00:00
c63f2ee0ce
Merge pull request #8060 from projectdiscovery/CVE-2023-39141
...
Create CVE-2023-39141.yaml WebUI-Aria2 - Path traversal
2023-08-24 11:43:42 +05:30
eeb0288c31
dsl -update
2023-08-24 11:37:23 +05:30
ec2d108430
Create CVE-2023-39026.yaml
2023-08-24 11:10:31 +05:30
73068f1b31
fix fp
2023-08-24 09:23:50 +05:30
GwanYeong Kim
sandeep
jainiresh
GitHub Action
pussycat0x
Ritik Chaddha
Dhiyaneshwaran
Krzysztof Zając
pentesttools-com
pentesttools-com
Prince Chaddha
Ritik Chaddha
Prince Chaddha
zn9988
pphua
J4vaovo
meme-lord
Sandeep Singh
Tarunkant Gupta
Harsh Yadav
mastercho