fa99cba4b3
Create vmware-horizon-log4j-jndi-rce.yaml ( #3403 )
...
* Create vmware-horizon-log4j-jndi-rce.yaml
* Update vmware-horizon-log4j-jndi-rce.yaml
* Update vmware-horizon-log4j-jndi-rce.yaml
* minor update
* minor update
* Added VMware Horizon detection
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-23 22:30:08 +05:30
8289e92291
Fixed h3c-imc-rce.yaml ( #3401 )
...
* Fixed h3c-imc-rce.yaml
* Update h3c-imc-rce.yaml
* Additional payload for windows
Co-authored-by: niudai <niudai@zp857s-mbp.local>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-23 20:23:42 +05:30
c57984b8f8
Added UniFi Network Log4j JNDI RCE ( #3402 )
...
Co-Authored-By: KrE80r <13027962+KrE80r@users.noreply.github.com>
Co-authored-by: KrE80r <13027962+KrE80r@users.noreply.github.com>
2021-12-23 08:57:03 +05:30
7933cfc470
Removing extra space from raw HTTP request
...
Should prevent issues with parsing this request
2021-12-22 13:33:51 +01:00
a511dac237
Merge pull request #3354 from DhiyaneshGeek/master
...
Create wordpress-ssrf-oembed.yaml
2021-12-21 18:48:42 +05:30
6e6349205d
Update and rename pacsone-server-6-6-2-lfi.yaml to vulnerabilities/other/pacsone-server-lfi.yaml
2021-12-21 17:32:19 +05:30
7a5cdc2bc3
Added ServiceNow Helpdesk Credential Exposure ( #3371 )
...
* Added ServiceNow Helpdesk Credential Exposure
Co-Authored-By: JP <19959240+jordanpotti@users.noreply.github.com>
* matcher update
Co-authored-by: JP <19959240+jordanpotti@users.noreply.github.com>
2021-12-19 23:42:01 +05:30
4af3a04b3c
Apache OFBiz Log4j JNDI RCE ( #3374 )
...
* Added Apache OFBiz Log4j JNDI RCE
* fixed matcher to match hostname in both cases
2021-12-18 15:46:49 +05:30
dcf3f57bdf
Merge pull request #3373 from projectdiscovery/princechaddha-patch-2
...
Create global-domains-xss.yaml
2021-12-18 15:02:06 +05:30
71027cbc79
Merge pull request #3357 from Akokonunes/patch-90
...
Create global-domains-lfi.yaml
2021-12-18 14:52:35 +05:30
3b067a1aca
Create global-domains-xss.yaml
2021-12-18 14:51:08 +05:30
0f40857119
Update and rename global-domains-lfi.yaml to vulnerabilities/other/global-domains-lfi.yaml
2021-12-18 14:43:28 +05:30
9a4941d995
Merge pull request #3356 from Akokonunes/patch-89
...
Create groupoffice-lfi.yaml
2021-12-18 14:33:42 +05:30
7b39972bfd
Merge pull request #3367 from gy741/rule-add-v80
...
Create oliver-library-server-lfi.yaml
2021-12-18 14:33:23 +05:30
d911551318
Merge pull request #3358 from Akokonunes/patch-91
...
Create asanhamayesh-cms-lfi.yaml
2021-12-18 14:32:12 +05:30
c6521085b7
Update groupoffice-lfi.yaml
2021-12-18 14:32:09 +05:30
4747277a4e
Update and rename asanhamayesh-cms-lfi.yaml to vulnerabilities/other/asanhamayesh-lfi.yaml
2021-12-18 14:28:39 +05:30
35faabd29f
Update and rename groupoffice-lfi.yaml to vulnerabilities/other/groupoffice-lfi.yaml
2021-12-18 14:26:46 +05:30
8afbfdc8dc
Update and rename oliver-library-server-lfi.yaml to oliver-library-lfi.yaml
2021-12-18 14:23:57 +05:30
4fdb934da0
Create oliver-library-server-lfi.yaml
...
An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 8.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-12-18 10:55:28 +09:00
09324d1be7
Added MobileIron log4j template ( #3355 )
...
* Added MobileIron log4j
* misc updates
Co-authored-by: meme-lord <17912559+meme-lord@users.noreply.github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-16 22:37:32 +05:30
fdeb2b8500
Merge branch 'master' of https://github.com/DhiyaneshGeek/nuclei-templates into pr/3354
2021-12-16 14:32:14 +05:30
7670d1d6b8
Update wordpress-ssrf-oembed.yaml
2021-12-16 14:28:12 +05:30
1cfc899a27
update: lint fix
2021-12-16 14:25:00 +05:30
77441c0d81
Update wordpress-ssrf-oembed.yaml
2021-12-16 14:24:56 +05:30
0047b611cf
Update wordpress-ssrf-oembed.yaml
2021-12-16 14:21:53 +05:30
499fe055bf
Create wordpress-ssrf-oembed.yaml
2021-12-16 13:48:34 +05:30
39a71c641a
update: added more reference
2021-12-15 21:20:18 +05:30
11fe2fdfee
Added apache-solr-log4j RCE ( #3336 )
...
* update: added apache-solr-log4j-rce
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: GitHub Action <action@github.com>
2021-12-15 21:15:43 +05:30
d9ed21458f
Added VMware VCenter Log4j JNDI RCE ( #3340 )
...
* Added VMware VCenter Log4j JNDI RCE
Co-Authored-By: FQ Hsu <fanqxu@gmail.com>
* update: removed static UA
Co-Authored-By: FQ Hsu <fanqxu@gmail.com>
Co-authored-by: FQ Hsu <fanqxu@gmail.com>
2021-12-14 21:27:30 +05:30
c9ddd7a0ae
update: id + reference update
2021-12-14 21:07:46 +05:30
dddb0bbb82
Added CVE-2021-24997 ( #3298 )
...
* Added CVE-39226
* Added CVE-39226
* Delete CVE-39226.yaml
* Renamed CVE-39226 to CVE-2021-39226
Fixed naming error
* Added Wp-Guppy-Information-Disclosure template
* Removed File
Found better descriptor
* Added CVE-2021-24997
Added WordPress Guppy Information Disclosure CVE
* Fixed CVE-2021-24997
Fixed YAML formatting
* Fixed Typo
URL Path had an extra double quote
* Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] 🤖
* Deleted Blank Space
* Update CVE-2021-24997.yaml
* Update CVE-2021-24997.yaml
* Update CVE-2021-24997.yaml
* Update CVE-2021-24997.yaml
* Added CVE-2021-43496
* Update CVE-2021-43496.yaml
* fix: syntax update
* Added New Vuln
* Update CVE-2021-24997.yaml
* Update CVE-2021-43496.yaml
* Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml
* fix: lints update
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-14 02:22:26 +05:30
8cac8b5a36
Update open-redirect.yaml ( #3333 )
2021-12-13 20:42:06 +05:30
b76dbf91c6
Add Another Redirect Payload and Extend the Regex to Recognize it ( #3299 )
...
* Fix Open Redirect Header Regex
The regex was missing the correct escaping for special char `/`
* Add New General Open Redirect
There's another option for open redirects. I tested it in FF and Chrome.
* Update Location Redirect Regex
* update: mix changes
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-13 20:38:21 +05:30
79a95a56d7
Update and rename pieregister-plugin-open-redirect.yaml to vulnerabilities/wordpress/pieregister-open-redirect.yaml
2021-12-12 16:59:16 +05:30
6a4bbdf93a
Update Grafana Arbitrary File Read ( #3321 )
...
* Add Grafana plugins wordlist
* Using payloads instead
* fix: updated variable name
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-11 11:07:55 +05:30
0e94557017
Merge pull request #3248 from pikpikcu/patch-307
...
added thruk-xss
2021-12-09 22:01:56 +05:30
f476c5ff5b
Update thruk-xss.yaml
2021-12-09 21:58:15 +05:30
d35a55f7b4
Update and rename watchguard-fireware-ad-helper-component-credentials-disclosure.yaml to watchguard-credentials-disclosure.yaml
2021-12-09 21:05:13 +05:30
bde4e1815a
Create watchguard-fireware-ad-helper-component-credentials-disclosure.yaml
...
a credential-disclosure vulnerability in the AD Helper component of the WatchGuard Fireware Threat Detection and Response (TDR) service, which allows unauthenticated attackers to gain Active Directory credentials for a Windows domain in plaintext.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-12-09 16:02:48 +09:00
2521cb62bf
Added CVE-2021-43798 ( #3296 )
...
* Added CVE-2021-43798
* updated with default plugin list
* Update grafana-file-read.yaml
2021-12-08 16:46:47 +05:30
d79b085051
add grafana file read ( #3286 )
...
* add grafana file read
* update: more reference
Co-authored-by: dev <z0ne>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-07 15:42:59 +05:30
fdcccb5938
Update and rename netsweeper-reflected-xss.yaml to netsweeper-rxss.yaml
2021-12-07 13:56:30 +05:30
ba8bad94c4
Update netsweeper-open-redirect.yaml
2021-12-07 13:43:29 +05:30
b90d0b7e3e
Add 10 templates and edit 1 workflows
2021-12-06 23:38:54 +07:00
9da0d768a1
fix: syntax + lint
2021-12-03 10:37:42 +05:30
83f6b2a153
Update thruk-xss.yaml
2021-12-02 19:07:50 +07:00
435eeca764
Create thruk-xss.yaml
2021-12-02 19:02:40 +07:00
1dabef2e6f
Revert "CVE update - CVE-2021-22049"
...
This reverts commit 70128c2587
2021-12-02 01:34:29 +05:30
70128c2587
CVE update - CVE-2021-22049
2021-12-02 01:31:41 +05:30
7ea7da8d4b
Added VMware vCenter SSRF/LFI/XSS ( #3240 )
2021-12-02 00:53:47 +05:30
71143da193
Added missing tags
2021-11-28 04:13:45 +05:30
e7e8c33d64
fixed matcher + added additional matcher
2021-11-27 10:20:04 +05:30
5080276f31
Update flow-flow-social-stream-xss.yaml
2021-11-26 09:48:04 +02:00
f82f4d1a0b
Create flow-flow-social-stream-xss.yaml
2021-11-26 06:55:21 +02:00
0d2a2f4e15
Merge pull request #3188 from pussycat0x/master
...
WordPress Themes Haberadam IDOR and Full Path Disclosure via JSON API
2021-11-24 12:14:54 +04:00
85d79fd597
Update and rename wp-haberadam-theme-idor.yaml to wp-haberadam-idor.yaml
2021-11-24 12:09:22 +04:00
b7701dc7b3
Update wp-haberadam-theme-idor.yaml
2021-11-23 19:53:36 +05:30
e7bc254415
Update wp-haberadam-theme-idor.yaml
2021-11-23 19:50:27 +05:30
b3ceaffb9f
Add files via upload
2021-11-23 19:46:33 +05:30
725782050a
Add description
2021-11-23 12:09:00 +02:00
42a9f46f94
Merge pull request #3176 from pussycat0x/master
...
Wordpress Revslider - Unauthenticated Arbitrary File Download
2021-11-23 09:40:48 +05:30
2407b57779
Update wp-revslider-file-download.yaml
2021-11-23 08:09:29 +04:00
fdb0cc0277
lint fix + moving template to wp folder
2021-11-22 22:55:00 +05:30
ee2a766a35
Update wp-revslider-file-download.yaml
2021-11-22 20:40:38 +05:30
680fffc187
Update wp-revslider-file-download.yaml
2021-11-22 20:33:29 +05:30
a8ee7e2ddf
Update wp-revslider-file-download.yaml
2021-11-22 20:29:59 +05:30
ba3d453744
Add files via upload
2021-11-21 17:00:25 +05:30
6eea2f5ec3
Merge pull request #3170 from pussycat0x/master
...
new templates
2021-11-21 14:44:52 +05:30
bb5dcd79ac
moved templates to correct directory/location
2021-11-21 14:40:48 +05:30
41669cb8f6
Add files via upload
2021-11-21 06:45:24 +05:30
1e31e0f76d
Update and rename eibiz-server-3-8-0-lfi.yaml to vulnerabilities/other/eibiz-lfi.yaml
2021-11-18 21:52:30 +05:30
cacf934f38
Merge pull request #3144 from DhiyaneshGeek/master
...
Axigen Mail Server & Squirrel Server
2021-11-16 16:09:21 +05:30
dfea5262ab
Update squirrelmail-add-xss.yaml
2021-11-16 15:30:41 +05:30
77e5352a78
Update squirrelmail-vkeyboard-xss.yaml
2021-11-16 15:13:47 +05:30
32715528d8
Update squirrelmail-lfi.yaml
2021-11-16 00:10:15 +05:30
1905c9321a
Create squirrelmail-vkeyboard-xss.yaml
2021-11-15 23:58:18 +05:30
36c96f5dd8
Rename squirrelmail-vkeyboard-xss.yaml to squirrelmail-add-xss.yaml
2021-11-15 23:57:48 +05:30
c003036a7e
Create squirrelmail-vkeyboard-xss.yaml
2021-11-15 23:44:51 +05:30
fcbbb3475c
Create squirrelmail-lfi.yaml
2021-11-15 23:40:09 +05:30
fbf50f1109
format fixing
2021-11-15 21:00:17 +05:30
4eb84d7802
Merge pull request #3131 from Akokonunes/patch-70
...
Create hrsale-unauthenticated-lfi.yaml
2021-11-13 23:46:11 +05:30
9a227941a1
Rename hrsale-unauthenticated-lfi.yaml to vulnerabilities/other/hrsale-unauthenticated-lfi.yaml
2021-11-13 23:37:32 +05:30
b2aa8f9f5b
misc updates
2021-11-13 23:01:53 +05:30
35bfff6f61
Added skip-variables-check for SSTI template
2021-11-09 22:16:37 +05:30
cb74944f43
misc updates
2021-11-08 15:45:54 +05:30
c51bbf8715
Merge pull request #3099 from ImNightmaree/master
...
Create ecshop-sql.yaml
2021-11-08 13:44:54 +05:30
5a6c30c7cf
Update ecshop-sqli.yaml
2021-11-08 13:42:44 +05:30
85741bbcf9
Update and rename ecshop-sql.yaml to ecshop-sqli.yaml
2021-11-08 13:42:13 +05:30
06bb1f444c
Update seowon-router-rce.yaml
2021-11-08 12:49:37 +05:30
7973948360
Update seowon-router-rce.yaml
2021-11-08 12:43:14 +05:30
6183e248d8
Create seowon-router-rce.yaml
...
Execute commands without authentication as admin user, To use it in all versions, we only enter the router ip & Port(if available) in the request The result of the request is visible on the browser page
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-11-07 14:50:39 +09:00
797d9066a1
More linting
2021-11-07 02:49:07 +00:00
b77df460dd
Linting
2021-11-07 02:39:21 +00:00
bbecf3965a
Update ecshop-sql.yaml
2021-11-07 02:36:28 +00:00
38135df2a6
Update ecshop-sql.yaml
2021-11-07 02:30:38 +00:00
f37527101c
Create ecshop-sql.yaml
2021-11-07 02:03:09 +00:00
5fa10c4b64
cves update
2021-11-06 12:34:04 +05:30
86f00468e1
Merge pull request #3070 from ImNightmaree/patch-2
...
Vanguard CMS Post-XSS
2021-11-06 00:13:58 +05:30
b66427b7c1
Update and rename wp-plugin-ad-widget-lfi.yaml to vulnerabilities/wordpress/ad-widget-lfi.yaml
2021-11-06 00:06:13 +05:30
a57cb5081a
Update vanguard-post-xss.yaml
2021-11-05 21:36:53 +05:30
eef5252cc5
file name update
2021-11-05 06:01:59 +05:30
e98a1b4085
Update vanguard-post-xss
2021-11-04 16:56:40 +00:00
5a94091468
Create vanguard-post-xss
2021-11-04 15:12:47 +00:00
915bb09a82
updating file name
2021-11-04 15:43:49 +05:30
67f3530dbf
Added meta info
2021-11-03 17:27:53 +05:30
be65921cc3
Added remediation information
2021-11-03 17:11:48 +05:30
c06cc9f690
Added Sitecore Experience Platform Pre-Auth RCE
2021-11-03 16:52:25 +05:30
e2b4d2b29c
misc update
2021-11-03 02:54:23 +05:30
b83e79a8fe
moving files around
2021-11-01 19:36:21 +05:30
f650961021
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates into gitlab-updates
2021-11-01 19:21:55 +05:30
c4b7bb3bd2
Merge pull request #3032 from r3dg33k/wordpress-rdf-user-enum
...
wordpress-rdf-user-enum
2021-11-01 15:43:00 +05:30
7b20a25fc6
Update and rename wordpress-rdf-user-enum.yaml to rdf-user-enumeration.yaml
2021-11-01 15:37:58 +05:30
a862dc3a6f
Update wordpress-rdf-user-enum.yaml
2021-11-01 15:33:06 +05:30
ff5b68a343
Update wordpress-rdf-user-enum.yaml
2021-11-01 15:30:54 +05:30
3decaed012
Merge pull request #3036 from Akokonunes/patch-64
...
Create wp-theme-diarise-lfi.yaml
2021-11-01 14:54:58 +05:30
756ed2c443
Update and rename wp-theme-diarise-lfi.yaml to vulnerabilities/wordpress/diarise-theme-lfi.yaml
2021-11-01 14:37:16 +05:30
4381a462e2
Add description
2021-10-31 16:00:56 +02:00
d277d83c8e
Add description
2021-10-31 15:58:17 +02:00
8e27d69da4
misc update
2021-10-31 16:24:36 +05:30
26c298ed03
Update top-xss-params.yaml
...
added an additional 23 parameters and matchers
2021-10-30 16:26:28 -05:00
8c3f98c767
fixed invalid template syntax
2021-10-30 16:47:35 +05:30
2925226122
Update wordpress-rdf-user-enum.yaml
2021-10-30 13:58:24 +03:00
f3a44a7f50
Update wordpress-rdf-user-enum.yaml
2021-10-30 13:57:53 +03:00
f75fcde7a9
Update wordpress-rdf-user-enum.yaml
2021-10-30 13:56:04 +03:00
2d50cb52c6
Add files via upload
2021-10-30 13:46:56 +03:00
9848f92894
Add description
2021-10-27 14:06:15 +03:00
14ae8e3f59
Add description
2021-10-27 14:05:11 +03:00
3a02b7c325
Add description
2021-10-27 14:04:00 +03:00
f1cf6fd9a7
Add description
2021-10-27 14:03:22 +03:00
d5d2ed0a0e
Add description
2021-10-27 13:52:34 +03:00
659f61ca53
Create thinkphp-501-rce.yaml
2021-10-27 00:17:42 +05:30
ac70e14788
Merge pull request #2995 from Akokonunes/patch-63
...
Create wp-tinymce-thumbnail-plugin-lfi.yaml
2021-10-27 00:13:01 +05:30
b928d9a269
Update and rename wp-tinymce-thumbnail-plugin-lfi.yaml to wp-tinymce-lfi.yaml
2021-10-27 00:11:48 +05:30
7abaf59c18
Merge pull request #2993 from Akokonunes/patch-61
...
Create wp-javospot-premium-theme-lfi.yaml
2021-10-27 00:02:00 +05:30
ab633f8675
Update and rename wp-javospot-premium-theme-lfi.yaml to vulnerabilities/wordpress/wp-javospot-lfi.yaml
2021-10-26 23:55:34 +05:30
c9efc02223
Add description
2021-10-26 15:29:20 +03:00
093a495b5f
Add description
2021-10-26 15:28:43 +03:00
25f7c812c2
Add description
2021-10-26 15:27:57 +03:00
5d98d22416
Add description
2021-10-26 15:27:16 +03:00
8adbf37ab4
Add description
2021-10-26 15:26:10 +03:00
57bae34cb9
Add description
2021-10-26 15:25:34 +03:00
4c0e8bae7e
Add description
2021-10-26 15:24:26 +03:00
dcf402cfa4
Add description
2021-10-26 15:23:43 +03:00
7d0c8669a3
Add description
2021-10-26 15:22:21 +03:00
0de8bc19f8
misc template updates
2021-10-26 17:39:26 +05:30
058d859cd8
Add description
2021-10-26 12:45:23 +03:00
9c96179595
Fix description
2021-10-26 12:45:16 +03:00
423584f1b7
moving files around
2021-10-26 15:08:26 +05:30
fb81f4ca36
Better description
2021-10-26 12:35:56 +03:00
johnk3r
niudaii
Sandeep Singh
Melvin
Prince Chaddha
GwanYeong Kim
meme-lord
Dhiyaneshwaran
Evan Rubinstein
pudsec
S Bani
Dwi Siswanto
Prince Chaddha
z0ne
daffainfo
PikPikcU
alph4byt3
pussycat0x
Noam Rathaus
ImNightmaree
Geeknik Labs
r3dg33k