a9afe92229
Update stored-xss-mwb.yaml
2022-07-27 13:18:58 +05:30
4fc4fa5050
Update stored-xss-mwb.yaml
2022-07-27 13:16:49 +05:30
66ad97de7c
Update stored-xss-mwb.yaml
2022-07-27 13:01:23 +05:30
38278e0211
Update stored-xss-mwb.yaml
2022-07-27 12:59:11 +05:30
38eba0637e
Update stored-xss-mwb.yaml
2022-07-27 12:09:06 +05:30
711bad8a91
Update stored-xss-mwb.yaml
2022-07-27 11:50:07 +05:30
c5a7d79f5a
Dashboard Content Enhancements ( #4819 )
...
Dashboard Content Enhancements
2022-07-26 09:45:11 -04:00
4968037238
Create stored-xss-mwb
2022-07-26 19:00:38 +05:30
731c02429a
Create weiphp-sql-injection ( #941 )
...
* Create weiphp-sql-injection.yaml
* Update weiphp-sql-injection.yaml
* Update weiphp-sql-injection.yaml
Co-authored-by: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
2022-07-26 17:28:08 +05:30
f94c44a51a
Merge pull request #3263 from projectdiscovery/jexboss-backdoor
...
Added Jexboss Backdoor Webshell
2022-07-26 12:46:15 +05:30
6a24e37b31
Update jexboss-backdoor.yaml
2022-07-26 12:29:48 +05:30
d07b944d90
Merge pull request #4882 from arafatansari/patch-20
...
Create cvms-sqli.yaml
2022-07-26 10:43:07 +05:30
6c8e1772fa
Update cvms-sqli.yaml
2022-07-26 10:19:24 +05:30
3ef173ca7f
Update zms-sqli.yaml
2022-07-26 10:16:30 +05:30
d73f42e715
Update zms-sqli.yaml
2022-07-26 10:05:07 +05:30
e4e2f4cf00
Update zms-sqli.yaml
2022-07-25 23:55:18 +05:30
f5295fa474
Update zms-sqli.yaml
2022-07-25 23:50:46 +05:30
2e6ea14451
Create zms-sqli.yaml
2022-07-25 23:47:14 +05:30
0831a9d488
Update cvms-sqli.yaml
2022-07-25 23:41:06 +05:30
43c389c42a
Update cvms-sqli.yaml
2022-07-25 23:39:57 +05:30
f0b5e19833
Merge pull request #4163 from ritikchaddha/patch-34
...
Create zzcms-xss.yaml
2022-07-24 21:26:23 +05:30
ac96218aae
Update zzcms-xss.yaml
2022-07-24 21:16:05 +05:30
8c6cc9b9eb
Update zzcms-xss.yaml
2022-07-24 19:13:49 +05:30
7379d35162
addition signup path + template fix
2022-07-23 18:37:43 +05:30
9d8af2ac47
Update goanywhere-log4j-rce.yaml
2022-07-22 23:41:57 +05:30
53ca3cf256
Merge pull request #4870 from arafatansari/patch-16
...
Create loancms-sqli.yaml
2022-07-22 12:40:16 +05:30
e79fa7e245
Update loancms-sqli.yaml
2022-07-22 12:15:21 +05:30
1ea058b576
added goanywhere-log4j-rce
2022-07-22 07:12:43 +05:30
42470ac90c
Update loancms-sqli.yaml
2022-07-21 16:36:05 +05:30
de5b654312
Merge pull request #4883 from arafatansari/patch-21
...
Create alumni-sqli.yaml
2022-07-21 16:29:38 +05:30
daf917a751
Update alumni-management-sqli.yaml
2022-07-21 16:20:17 +05:30
268a9f0a39
Update and rename alumni-sqli.yaml to alumni-management-sqli.yaml
2022-07-21 16:17:53 +05:30
3035ea903c
Merge pull request #4868 from arafatansari/patch-15
...
Create devalcms-xss.yaml
2022-07-21 15:20:18 +05:30
47c8fdd8fc
Update loancms-sqli.yaml
2022-07-21 15:17:40 +05:30
b4be125f85
Merge pull request #4872 from arafatansari/patch-17
...
Create onlinecms-xss.yaml
2022-07-21 15:10:36 +05:30
04a0949573
Update and rename onlinecms-xss.yaml to onlinefarm-management-xss.yaml
2022-07-21 15:06:42 +05:30
66786b8aaa
Merge pull request #4874 from arafatansari/patch-18
...
Create surrealtodo-lfi.yaml
2022-07-21 14:17:03 +05:30
77ab5e2cbd
Update dedecms-rce.yaml
2022-07-21 14:02:18 +05:30
8823370bdf
Create dedecms-rce.yaml
2022-07-21 13:52:11 +05:30
5baf2a4bf2
Update and rename opencti-lfi.yaml to vulnerabilities/other/opencti-lfi.yaml
2022-07-21 13:18:27 +05:30
467d8ecc6a
Create alumni-sqli.yaml
2022-07-21 13:16:42 +05:30
91f907e3b1
Create cvms-sqli.yaml
2022-07-21 12:57:46 +05:30
2fd7baf1bf
Create ems-sqli.yaml
2022-07-21 12:39:06 +05:30
9e829668a4
Update onlinecms-xss.yaml
2022-07-20 23:52:19 +05:30
acc357f591
Update onlinecms-xss.yaml
2022-07-20 23:43:48 +05:30
d88160b8d5
Update surrealtodo-lfi.yaml
2022-07-20 23:21:03 +05:30
14e430b3df
Update surrealtodo-lfi.yaml
2022-07-20 23:20:37 +05:30
9f28a9c8e3
Create surrealtodo-lfi.yaml
2022-07-20 23:14:17 +05:30
ef1a1f0f44
Create onlinecms-xss.yaml
2022-07-20 22:14:07 +05:30
bd0c9a9163
Update loancms-sqli.yaml
2022-07-20 18:11:03 +05:30
8bca76cf6d
Update loancms-sqli.yaml
2022-07-20 18:08:25 +05:30
2d71d7a288
Create loancms-sqli.yaml
2022-07-20 16:37:42 +05:30
4b6aa7df81
Update devalcms-xss.yaml
2022-07-20 14:42:25 +05:30
289f1731bb
Update devalcms-xss.yaml
2022-07-20 14:37:43 +05:30
0f209ca08c
Update devalcms-xss.yaml
2022-07-20 14:31:44 +05:30
9304c58b2c
Create devalcms-xss.yaml
2022-07-20 14:26:54 +05:30
8279d7b4e7
Merge pull request #4854 from arafatansari/patch-14
...
Create eris-xss.yaml
2022-07-19 14:58:37 +05:30
cba12fe78d
Update eris-xss.yaml
2022-07-19 14:25:14 +05:30
920ee7ea97
Update eris-xss.yaml
2022-07-18 21:59:07 +05:30
b7b317dc02
Merge pull request #4461 from gy741/rule-add-v113
...
Create cisco-rv-series-rce.yaml
2022-07-18 20:52:16 +05:30
099e9ede6e
Update cisco-rv-series-rce.yaml
2022-07-18 20:49:58 +05:30
d004cb9b65
Create eris-xss.yaml
2022-07-18 18:14:09 +05:30
38b1247fcf
Update cisco-rv-series-rce.yaml
2022-07-18 15:22:26 +05:30
279a418e17
Merge pull request #4836 from gy741/v119
...
Create carel-bacnet-gateway-directory-traversal.yaml
2022-07-18 14:15:54 +05:30
1318dbbae8
Update and rename carel-bacnet-gateway-directory-traversal.yaml to carel-bacnet-gateway-traversal.yaml
2022-07-18 13:47:02 +05:30
22e47c889b
Merge pull request #4847 from ritikchaddha/Update-metadata-query
...
Log4j templates enhancement
2022-07-18 12:15:49 +05:30
08bf44add6
Update apache-ofbiz-log4j-rce.yaml
2022-07-18 12:04:47 +05:30
4a6ef1b3b0
Update apache-solr-log4j-rce.yaml
2022-07-18 12:04:43 +05:30
73c9a981ac
Update jamf-log4j-jndi-rce.yaml
2022-07-18 12:04:40 +05:30
6f6eb47953
Update mobileiron-log4j-jndi-rce.yaml
2022-07-18 12:04:37 +05:30
a1409f1f2a
Update unifi-network-log4j-rce.yaml
2022-07-18 12:04:32 +05:30
3b2e9d617b
Update vmware-horizon-log4j-jndi-rce.yaml
2022-07-18 12:04:27 +05:30
d516bf58d9
Update vmware-vcenter-log4j-jndi-rce.yaml
2022-07-18 12:04:24 +05:30
5f24480409
Update vrealize-operations-log4j-rce.yaml
2022-07-18 12:04:22 +05:30
851c7ef71d
Update mobileiron-log4j-jndi-rce.yaml
2022-07-17 09:23:02 +05:30
633c7ccbee
Update apache-ofbiz-log4j-rce.yaml
2022-07-16 22:38:08 +05:30
a312af919a
Update apache-solr-log4j-rce.yaml
2022-07-16 22:38:06 +05:30
e065e78756
Update code42-log4j-rce.yaml
2022-07-16 22:38:04 +05:30
f0ef7c981b
Update jamf-log4j-jndi-rce.yaml
2022-07-16 22:38:02 +05:30
aa631b6a04
Update mobileiron-log4j-jndi-rce.yaml
2022-07-16 22:37:18 +05:30
928abe95cc
Update unifi-network-log4j-rce.yaml
2022-07-16 22:37:16 +05:30
ab67da1487
Update springboot-log4j-rce.yaml
2022-07-16 22:37:13 +05:30
b5818db94c
Update vmware-horizon-log4j-jndi-rce.yaml
2022-07-16 22:35:40 +05:30
4add304837
Update vmware-vcenter-log4j-jndi-rce.yaml
2022-07-16 22:35:37 +05:30
10ad3459b6
Update vrealize-operations-log4j-rce.yaml
2022-07-16 22:35:27 +05:30
c7b482532d
Update elasticsearch5-log4j-rce.yaml
2022-07-16 18:04:04 +05:30
236912a8fa
Create elasticsearch5-log4j-rce.yaml
2022-07-16 12:21:07 +05:30
549c969d5f
Create carel-bacnet-gateway-directory-traversal.yaml
...
The device suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-07-16 10:59:44 +09:00
67df84f78a
Update vmware-siterecovery-log4j-rce.yaml
2022-07-15 17:09:23 +05:30
8d163b4730
Merge pull request #4832 from projectdiscovery/vmware-log4j-rce
...
Create vmware-log4j-rce.yaml
2022-07-15 16:09:14 +05:30
7670b03504
Update and rename vmware-log4j-rce.yaml to vmware-siterecovery-log4j-rce.yaml
2022-07-15 16:04:49 +05:30
9241b0d568
Update opennms-log4j-jndi-rce.yaml
2022-07-15 15:46:29 +05:30
69f0e7675a
Update opennms-log4j-jndi-rce.yaml
2022-07-15 10:23:51 +05:30
a508c28178
Create vmware-log4j-rce.yaml
2022-07-14 23:00:42 +05:30
918a56d516
Update opennms-log4j-jndi-rce.yaml
2022-07-14 19:48:13 +05:30
1c66b826b3
Update opennms-log4j-jndi-rce.yaml
2022-07-14 19:46:46 +05:30
35d13abbb0
Create opennms-log4j-jndi-rce.yaml
2022-07-14 10:31:10 -03:00
cf2d464bee
Update icewarp-webclient-rce.yaml
2022-07-10 15:07:19 +05:30
2863e385a3
Update opensis-lfi.yaml
2022-07-10 15:07:18 +05:30
0f7699ef22
Merge pull request #4783 from uomogrande/icewarp-openredirects
...
Added icewarp-openredirects Template
2022-07-09 22:20:56 +05:30
7789261fce
Update icewarp-openredirects.yaml
2022-07-09 22:11:36 +05:30
58bd909659
Create members-list-xss.yaml
2022-07-09 18:42:35 +05:30
fd9fb82a61
Update icewarp-openredirects.yaml
2022-07-09 14:55:04 +05:30
29acb27dc6
Update icewarp-openredirects.yaml
2022-07-09 14:52:47 +05:30
2a7c7f816a
Added icewarp-openredirects Template
2022-07-08 12:58:41 +02:00
643911cbb6
Update dedecms-membergroup-sqli.yaml
2022-07-07 15:45:54 +05:30
9953dd2201
Update grafana-file-read.yaml
2022-07-07 15:45:51 +05:30
cc772eb97a
Update and rename Drupal-avatar-xss.yaml to drupal-avatar-xss.yaml
2022-07-06 23:15:18 +05:30
f7b10ecf9f
Create Drupal-avatar-xss.yaml
2022-07-06 23:10:05 +05:30
78304fd30b
Merge pull request #4762 from projectdiscovery/curcy-xss
...
Create curcy-xss.yaml
2022-07-06 16:32:05 +05:30
68eb6586c3
Merge pull request #4764 from projectdiscovery/clearfy-cache-xss
...
Create clearfy-cache-xss.yaml
2022-07-06 16:31:43 +05:30
81ef0bdbcf
Merge pull request #4765 from projectdiscovery/checkout-fields-manager-xss
...
Create checkout-fields-manager-xss.yaml
2022-07-06 16:31:22 +05:30
edf09d30b6
Create 404-to-301-xss.yaml
2022-07-06 16:16:17 +05:30
11dda1d89e
Create checkout-fields-manager-xss.yaml
2022-07-06 16:12:13 +05:30
154f19ed6d
Create clearfy-cache-xss.yaml
2022-07-06 16:04:32 +05:30
2b1284f34c
Create curcy-xss.yaml
2022-07-06 15:52:41 +05:30
5692419f40
Merge pull request #4760 from projectdiscovery/modula-image-gallery-xss
...
Create modula-image-gallery-xss.yaml
2022-07-06 15:38:05 +05:30
7bd3b7ffec
Update shortpixel-image-optimizer-xss.yaml
2022-07-06 15:37:10 +05:30
6adcefe3ac
Update modula-image-gallery-xss.yaml
2022-07-06 15:36:43 +05:30
865cced275
Merge pull request #4759 from projectdiscovery/shortpixel-image-optimizer-xss
...
Create shortpixel-image-optimizer-xss.yaml
2022-07-06 15:35:19 +05:30
6a0c3c9892
Create modula-image-gallery-xss.yaml
2022-07-06 15:32:14 +05:30
0509c8c372
Update woocommerce-pdf-invoices-xss.yaml
2022-07-06 15:31:47 +05:30
85976d219f
Update shortpixel-image-optimizer-xss.yaml
2022-07-06 15:31:26 +05:30
067658568e
Create shortpixel-image-optimizer-xss.yaml
2022-07-06 15:26:41 +05:30
9353c41e78
Update woocommerce-pdf-invoices-xss.yaml
2022-07-06 15:25:31 +05:30
fac95562b9
Update woocommerce-pdf-invoices-xss.yaml
2022-07-06 15:19:30 +05:30
daca40f05e
Create woocommerce-pdf-invoices-xss.yaml
2022-07-06 15:13:25 +05:30
056ef1ba38
Update jenkins-script.yaml ( #4752 )
...
* Update jenkins-script.yaml
The Jenkins console (with the latest version) in the response body does not contain Scriptconsole, but contains "Script Console".
* additional matcher update
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-07-06 02:39:28 +05:30
ab4b46a0e5
Create elFinder-path-traversal.yaml
2022-07-05 08:40:51 +05:30
1bd96f8902
Update and rename misconfiguration/vulnerabilities/other/umbraco-base-ssrf.yaml to vulnerabilities/other/umbraco-base-ssrf.yaml
2022-07-05 08:23:51 +05:30
f55d13f03b
Update jira-unauthenticated-user-picker.yaml
2022-07-04 18:48:18 +05:30
f575393fcb
Update jira-unauthenticated-screens.yaml
2022-07-04 18:48:16 +05:30
89d1dc600b
Update jira-unauthenticated-resolutions.yaml
2022-07-04 18:48:14 +05:30
0ccac6cf52
Update jira-unauthenticated-projects.yaml
2022-07-04 18:48:12 +05:30
b94e52a340
Update jira-unauthenticated-projectcategories.yaml
2022-07-04 18:48:10 +05:30
cfc4ce1ee5
Update jira-unauthenticated-installed-gadgets.yaml
2022-07-04 18:48:08 +05:30
2b5f222a01
Update jira-unauthenticated-dashboards.yaml
2022-07-04 18:48:06 +05:30
cad9b674dc
Update jira-unauthenticated-adminprojects.yaml
2022-07-04 18:48:04 +05:30
e855d0d067
Update jira-service-desk-signup.yaml
2022-07-04 18:48:00 +05:30
1dccc86c88
Create wp-insert-php-xss.yaml
2022-07-04 17:31:46 +05:30
255b2cf91d
Revert "Create wp-insert-php-xss.yaml"
...
This reverts commit 415ba61d73
2022-07-04 17:30:26 +05:30
415ba61d73
Create wp-insert-php-xss.yaml
2022-07-04 17:29:53 +05:30
84aedb39bc
Merge pull request #4736 from ritikchaddha/Update-shodan/fofa-links-to-search-query
...
Update shodan/fofa links to query
2022-07-04 16:56:06 +05:30
1e7f5d7bed
Classify ( #4735 )
...
* Auto Generated CVE annotations [Sun May 15 12:16:57 UTC 2022] 🤖
* Auto Generated CVE annotations [Mon Jun 6 03:02:54 UTC 2022] 🤖
* classify these templates
* misc update
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-07-04 14:17:10 +05:30
2a4070fc15
Update shodan/fofa links to query
2022-07-04 14:16:15 +05:30
db5029fc61
Update cors-misconfig.yaml
2022-07-02 15:50:54 +05:30
79051fe0e7
Merge pull request #4712 from conitrade/hotfix/cors-path
...
use path for CORS GET request
2022-07-02 15:48:48 +05:30
123746b30e
Update and rename sym404.yaml to wp-sym404.yaml
2022-07-02 09:22:28 +05:30
66cb988803
Update wp-all-export-xss.yaml
2022-07-01 23:56:05 +05:30
f5fe9bd9c0
Create wp-all-export-xss.yaml
2022-07-01 23:54:26 +05:30
3a2f976390
Merge pull request #4720 from ritikchaddha/patch-96
...
Create siteminder-dom-based-xss.yaml
2022-07-01 19:03:05 +05:30
529ad9f336
Update siteminder-dom-xss.yaml
2022-07-01 19:01:25 +05:30
03b780fdf3
Update and rename siteminder-dom-based-xss.yaml to siteminder-dom-xss.yaml
2022-07-01 18:59:21 +05:30
0db06d6b15
Dead Site Removal ( #4641 )
...
* Deleted buffalo-config-injection.yaml
Add reference from buffalo-config-injection.yaml to CVE-2021-20091.yaml
* Delete vulnerabilities/other/buffalo-config-injection.yaml
* Link cleanups
* Change links to Secunia to point to archive.org
* Additonal link cleanup
* replace securitytracker.com links with archive.org links
2022-07-01 15:32:07 +05:30
da535f4c0c
Create siteminder-dom-based-xss.yaml
2022-07-01 14:10:29 +05:30
9e874954c0
use path for CORS GET request
...
This allows to test endpoints which do not end with a single slash (i.e. '/')
by specifying the path as a variable (e.g. -var Path=/v1/test).
2022-06-30 15:04:02 +02:00
42bcf03924
Merge pull request #4710 from ritikchaddha/patch-92
...
Create parallels-hsphere-xss.yaml
2022-06-30 18:02:29 +05:30
6f6909cb38
template syntax fixes ( #4711 )
2022-06-30 16:49:17 +05:30
d7e182c693
Update parallels-hsphere-xss.yaml
2022-06-30 16:30:01 +05:30
4c862b96cf
Create parallels-hsphere-xss.yaml
2022-06-30 16:23:38 +05:30
4f913c95aa
Update dedecms-membergroup-sqli.yaml
2022-06-30 09:22:06 +05:30
b7d0d6f21a
Update zcms-v3-sqli.yaml
2022-06-30 08:50:00 +05:30
d81a48e31e
Update xdcms-sqli.yaml
2022-06-30 08:48:00 +05:30
28e6e03fc5
Update wuzhicms-sqli.yaml
2022-06-30 08:46:19 +05:30
be8560b788
Update seacms-sqli.yaml
2022-06-30 08:43:38 +05:30
9ecfdf9a0a
Update etouch-v2-sqli.yaml
2022-06-30 08:35:53 +05:30
967628302d
Update phpok-sqli.yaml
2022-06-30 08:32:35 +05:30
8ddb1d70da
Update yonyou-u8-oa-sqli.yaml
2022-06-30 08:32:02 +05:30
9b793127c3
Update phpok-sqli.yaml
2022-06-30 08:31:16 +05:30
5729e6486a
Update finecms-sqli.yaml
2022-06-30 08:30:16 +05:30
b1f9fc94d6
Update 74cms-sqli.yaml
2022-06-30 08:29:32 +05:30
f1a0cc6cc5
Update duomicms-sql-injection.yaml
2022-06-30 08:24:58 +05:30
8ab77083cc
Update duomicms-sql-injection.yaml
2022-06-30 08:18:22 +05:30
a5e29b684a
lint fixes
2022-06-28 19:20:23 +05:30
bd3cfa7e4a
Update duomicms-sql-injection.yaml
2022-06-28 18:29:31 +05:30
29d7c43cdb
Update 74cms-sqli.yaml
2022-06-28 15:23:44 +05:30
51aadcdb36
Update yonyou-u8-oa-sqli.yaml
2022-06-28 15:14:07 +05:30
913f3239ab
Update finecms-sqli.yaml
2022-06-28 14:57:21 +05:30
8234a29c97
Update phpok-sqli.yaml
2022-06-28 14:22:58 +05:30
a55edcdca4
Create wpify-woo-czech-xss.yaml
2022-06-28 08:00:31 +05:30
17e1643c64
Revert "Create wpify-woo-czech-xss.yaml"
...
This reverts commit 6d44b2ee90
2022-06-28 07:59:11 +05:30
6d44b2ee90
Create wpify-woo-czech-xss.yaml
2022-06-28 07:57:59 +05:30
3f4a9f8783
Merge pull request #4667 from projectdiscovery/new-user-approve-xss
...
Create new-user-approve-xss.yaml
2022-06-25 14:54:51 +05:30
aee8f69c5a
Merge pull request #4663 from ritikchaddha/patch-89
...
Added reference sym404.yaml
2022-06-25 14:14:34 +05:30
0c4c64ed5c
Create new-user-approve-xss.yaml
2022-06-25 14:11:05 +05:30
75c6c22a27
Added URL encoded payload ( #4664 )
2022-06-25 12:38:56 +05:30
101b139dfd
Update sym404.yaml
2022-06-25 01:02:35 +05:30
c49c2abeeb
Merge pull request #4657 from DhiyaneshGeek/master
...
Create sym404.yaml
2022-06-25 00:39:59 +05:30
4880b0fa67
Update sym404.yaml
2022-06-25 00:36:26 +05:30
74463d0e9f
Merge pull request #4652 from ritikchaddha/patch-85
...
Create royalevent-stored-xss.yaml
2022-06-25 00:16:05 +05:30
de213e905d
Update sym404.yaml
2022-06-25 00:15:02 +05:30
5b0461286c
Update sym404.yaml
2022-06-24 15:25:56 +01:00
5376bf09d3
Update and rename royalevent-management-xss.yaml to royalevent-stored-xss.yaml
2022-06-24 00:15:44 +05:30
59b74c82bd
Merge pull request #4651 from ritikchaddha/patch-84
...
Create royalevent-management-xss.yaml
2022-06-24 00:11:37 +05:30
98034728fc
Update and rename vulnerabilities/other/royalevent-management-xss.yaml to vulnerabilities/other/royalevent/royalevent-management-xss.yaml
2022-06-24 00:10:24 +05:30
4338eea2ec
Rename vulnerabilities/other/royalevent-management-xss.yaml to vulnerabilities/other/royalevent/royalevent-management-xss.yaml
2022-06-24 00:09:06 +05:30
a66f548304
Update royalevent-management-xss.yaml
2022-06-24 00:05:48 +05:30
f348eae9d1
Create sym404.yaml
2022-06-23 17:39:44 +01:00
cc07d2cb75
Update finecms-sqli.yaml
2022-06-23 18:28:06 +05:30
679bc9198e
Create royalevent-management-xss.yaml
2022-06-23 13:00:43 +05:30
103861f588
Create royalevent-management-xss.yaml
2022-06-23 12:38:09 +05:30
493ea898ea
Merge branch 'Update-metadata-query' of https://github.com/ritikchaddha/nuclei-templates into ritikchaddha-Update-metadata-query
2022-06-16 10:03:41 +05:30
0e7a1483c8
Update magento-2-exposed-api.yaml
2022-06-16 01:29:46 +05:30
0c0adb758c
Update magento-unprotected-dev-files.yaml
2022-06-16 01:27:39 +05:30
c3340b5e33
Update magento-cacheleak.yaml
2022-06-16 01:27:37 +05:30
9b247d6fa6
Create finecms-sqli.yaml
2022-06-10 19:28:24 +05:30
a44e87a683
Update and rename orbiteam-bscw-server-unauthenticated-lfi.yaml to vulnerabilities/other/orbiteam-bscw-server-lfi.yaml
2022-06-10 18:37:39 +05:30
b883737198
Dashboard Content Enhancements ( #4567 )
...
Dashboard Content Enhancements
2022-06-09 16:35:21 -04:00
5aa779a068
Fix templates: change alert(xss) to alert(/xss/) ( #4564 )
2022-06-09 10:11:03 +05:30
3401689a2b
classify eyou, seeyon, tonged, weaver, dedecms, yonyou ( #4557 )
...
* Auto Generated CVE annotations [Sun May 15 12:16:57 UTC 2022] 🤖
* Auto Generated CVE annotations [Mon Jun 6 03:02:54 UTC 2022] 🤖
* create tongda directory and put templates in
* create weaver directory and put templates in
* create seeyon directory and put templates in
* create yonyou directory and put templates in
* create dedecms directory and put templates in
* create eyou directory and put templates in
* misc update
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-08 13:31:29 +05:30
9bb6b91ba3
Remove Links for Dead sites ( #4554 )
...
* Deleted buffalo-config-injection.yaml
Add reference from buffalo-config-injection.yaml to CVE-2021-20091.yaml
* Delete vulnerabilities/other/buffalo-config-injection.yaml
* Remove/replace links to dead sites:
* archives.neohapsis.com
* osvdb.org
* securityfocus.com
2022-06-08 02:20:59 +05:30
50fbea791c
buffalo-config-injection.yaml is a duplicate of CVE-2021-20091.yaml ( #4547 )
...
* Deleted buffalo-config-injection.yaml
Add reference from buffalo-config-injection.yaml to CVE-2021-20091.yaml
* Delete vulnerabilities/other/buffalo-config-injection.yaml
2022-06-06 20:32:33 +05:30
606344bfad
template id + file update
2022-06-06 16:23:02 +05:30
7ada510859
Fixed possible FPs in open redirect templates ( #4544 )
...
* Fixed possible FPs in open redirect templates
We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results.
* updated example domain
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 16:10:15 +05:30
01080a3aed
Update phpok-sqli.yaml
2022-06-05 17:09:00 +05:30
51cdbeaf6a
Merge pull request #4535 from ritikchaddha/patch-70
...
Update and rename cves/2020/CVE-2020-22210.yaml to vulnerabilities/ot…
2022-06-05 15:48:17 +05:30
914aa45704
Update and rename cves/2020/CVE-2020-22210.yaml to vulnerabilities/other/74cms-sqli.yaml
2022-06-05 15:04:44 +05:30
0780108196
Update phpok-sqli.yaml
2022-06-05 14:06:26 +05:30
49d7a23320
Create phpok-sqli.yaml
2022-06-05 14:01:28 +05:30
5da580f9c2
Dashboard Content Enhancements ( #4519 )
...
Dashboard Content Enhancements
2022-06-03 15:12:31 -04:00
85050febf7
Update unauth-message-read.yaml
2022-06-01 18:51:48 +05:30
047a7231a3
add ref + rem
2022-06-01 13:44:10 +02:00
88c150d2e0
Remove blank cve-id fields from templates. ( #4516 )
...
* Remove blank cve-id fields from templates.
Add cve-id to CVE-2022-0776.yaml
* Fix classification spelling
2022-05-31 20:04:35 +05:30
ecc12ec58f
Merge pull request #4496 from MostInterestingBotInTheWorld/dashboard
...
Dashboard Content Enhancements
2022-05-31 15:24:07 +05:30
bbc9bd2a84
Update nuuo-nvrmini2-rce.yaml
2022-05-31 14:52:46 +05:30
c4aec5a0d1
Update oa-tongda-path-traversal.yaml
2022-05-31 14:51:16 +05:30
683b511766
Update opensns-rce.yaml
2022-05-31 14:49:47 +05:30
35e1863cda
Update oracle-fatwire-lfi.yaml
2022-05-31 14:48:35 +05:30
630a29f710
Update php-zerodium-backdoor-rce.yaml
2022-05-31 14:48:05 +05:30
927b557f16
Update powercreator-cms-rce.yaml
2022-05-31 14:47:10 +05:30
39c25f539b
Update qi-anxin-netkang-next-generation-firewall-rce.yaml
2022-05-31 14:44:03 +05:30
e5eeae4afb
Update qihang-media-disclosure.yaml
2022-05-31 14:42:37 +05:30
21cb387113
Update sar2html-rce.yaml
2022-05-31 14:41:26 +05:30
a0d74ba5e8
Update seowon-router-rce.yaml
2022-05-31 14:40:43 +05:30
2d03dfdf85
Update showdoc-file-upload-rce.yaml
2022-05-31 14:38:36 +05:30
f46b4f6fb0
Update sonicwall-sslvpn-shellshock.yaml
2022-05-31 14:36:41 +05:30
cbed893fe9
Update sponip-network-system-ping-rce.yaml
2022-05-31 14:36:06 +05:30
e1d05486a8
Update rusty-joomla.yaml
2022-05-31 14:34:37 +05:30
66fe14e8a0
Update metersphere-plugin-rce.yaml
2022-05-31 14:33:16 +05:30
236a91ffd6
Update oracle-ebs-bispgraph-file-access.yaml
2022-05-31 14:32:35 +05:30
399f4d1434
Update clockwatch-enterprise-rce.yaml
2022-05-31 14:31:19 +05:30
9a4a006909
Update commax-biometric-auth-bypass.yaml
2022-05-31 14:30:59 +05:30
c4e9ddf1f0
Update commax-credentials-disclosure.yaml
2022-05-31 14:30:21 +05:30
2919dc1469
Update icewarp-webclient-rce.yaml
2022-05-31 14:29:38 +05:30
fbf8533896
Update kevinlab-bems-backdoor.yaml
2022-05-31 14:29:07 +05:30
18f573cc0d
Update kevinlab-hems-backdoor.yaml
2022-05-31 14:28:02 +05:30
59f524e539
Update lotuscms-rce.yaml
2022-05-31 14:26:43 +05:30
59a7391451
Update maccmsv10-backdoor.yaml
2022-05-31 14:26:02 +05:30
32b085c52a
Update magicflow-lfi.yaml
2022-05-31 14:25:40 +05:30
cd9188a2d9
Update mirai-unknown-rce.yaml
2022-05-31 14:23:16 +05:30
636dec14ab
Update natshell-rce.yaml
2022-05-31 14:22:28 +05:30
ff002c5b1b
Update netgear-router-exposure.yaml
2022-05-31 14:21:09 +05:30
8dd9e07f80
Update apache-ofbiz-log4j-rce.yaml
2022-05-31 14:14:19 +05:30
0d4b2cfd10
Update apache-solr-log4j-rce.yaml
2022-05-31 14:13:47 +05:30
ad4509d33b
Update code42-log4j-rce.yaml
2022-05-31 14:13:20 +05:30
3106c22125
Update fastjson-1-2-68-rce.yaml
2022-05-31 14:12:39 +05:30
4c90184054
Update jamf-log4j-jndi-rce.yaml
2022-05-31 14:12:11 +05:30
03993005fb
Update jenkins-script.yaml
2022-05-31 14:11:09 +05:30
ebab53c7be
Update rusty-joomla.yaml
2022-05-31 14:09:58 +05:30
7be57dbf17
Update dotnetcms-sqli.yaml
2022-05-30 22:56:35 +05:30
8712d2b6c5
Enhancement: vulnerabilities/other/icewarp-webclient-rce.yaml by mp
2022-05-30 13:26:21 -04:00
75e1c543c0
Enhancement: vulnerabilities/other/kevinlab-bems-backdoor.yaml by mp
2022-05-30 13:25:21 -04:00
eb1647611f
Enhancement: vulnerabilities/other/kevinlab-hems-backdoor.yaml by mp
2022-05-30 13:22:21 -04:00
d4543f05a3
Enhancement: vulnerabilities/other/sar2html-rce.yaml by mp
2022-05-30 13:19:43 -04:00
e37d064294
Enhancement: vulnerabilities/other/oa-tongda-path-traversal.yaml by mp
2022-05-30 13:13:35 -04:00
35fb337708
Enhancement: vulnerabilities/other/netgear-router-exposure.yaml by mp
2022-05-30 13:12:49 -04:00
d4529ca918
Enhancement: vulnerabilities/other/maccmsv10-backdoor.yaml by mp
2022-05-30 13:11:43 -04:00
57348a8841
Enhancement: vulnerabilities/other/lotuscms-rce.yaml by mp
2022-05-30 13:10:32 -04:00
3db25f4ee3
Enhancement: vulnerabilities/other/sponip-network-system-ping-rce.yaml by mp
2022-05-30 12:24:46 -04:00
84df3a4c02
Enhancement: vulnerabilities/other/sonicwall-sslvpn-shellshock.yaml by mp
2022-05-30 12:23:29 -04:00
9a6f0ae3a8
Enhancement: vulnerabilities/other/showdoc-file-upload-rce.yaml by mp
2022-05-30 12:22:09 -04:00
87ac93b918
Enhancement: vulnerabilities/other/seowon-router-rce.yaml by mp
2022-05-30 12:21:04 -04:00
10a9317b22
Enhancement: vulnerabilities/other/sar2html-rce.yaml by mp
2022-05-30 12:19:44 -04:00
a8e014d313
Enhancement: vulnerabilities/other/sangfor-ba-rce.yaml by mp
2022-05-30 12:18:15 -04:00
805882fa88
Enhancement: vulnerabilities/other/qihang-media-disclosure.yaml by mp
2022-05-30 12:17:42 -04:00
1ef6598da0
Enhancement: vulnerabilities/other/qi-anxin-netkang-next-generation-firewall-rce.yaml by mp
2022-05-30 12:16:18 -04:00
ec9771943b
Enhancement: vulnerabilities/other/powercreator-cms-rce.yaml by mp
2022-05-30 12:15:22 -04:00
07fb89712d
Enhancement: vulnerabilities/other/php-zerodium-backdoor-rce.yaml by mp
2022-05-30 12:12:27 -04:00
7a980959d2
Enhancement: vulnerabilities/other/oracle-fatwire-lfi.yaml by mp
2022-05-30 11:04:24 -04:00
3a2ddad627
Enhancement: vulnerabilities/other/opensns-rce.yaml by mp
2022-05-30 10:36:52 -04:00
69702aa586
Enhancement: vulnerabilities/other/oa-tongda-path-traversal.yaml by mp
2022-05-30 10:36:06 -04:00
480c2fca93
Enhancement: vulnerabilities/other/nuuo-nvrmini2-rce.yaml by mp
2022-05-30 10:12:35 -04:00
03a8417f7c
Enhancement: vulnerabilities/other/netgear-router-exposure.yaml by mp
2022-05-30 10:10:54 -04:00
062c170d10
Enhancement: vulnerabilities/other/natshell-rce.yaml by mp
2022-05-30 10:05:52 -04:00
b004ffeb68
Enhancement: vulnerabilities/other/mirai-unknown-rce.yaml by mp
2022-05-30 10:04:12 -04:00
4768876a28
Enhancement: vulnerabilities/other/magicflow-lfi.yaml by mp
2022-05-30 09:57:24 -04:00
9aac455f6c
Update dotnetcms-sqli.yaml
2022-05-30 19:20:44 +05:30
5cee74ec5c
Enhancement: vulnerabilities/other/maccmsv10-backdoor.yaml by mp
2022-05-30 09:48:06 -04:00
a604bfaa3d
Enhancement: vulnerabilities/other/lotuscms-rce.yaml by mp
2022-05-30 09:46:17 -04:00
fdc7a4825e
Create dotnetcms-sqli.yaml
2022-05-30 19:03:36 +05:30
c30ab4dbe7
Update ecology-arbitrary-file-upload.yaml
2022-05-30 14:40:15 +05:30
87ba83be67
Update digitalrebar-traversal.yaml
2022-05-28 22:59:19 +05:30
9f8bd21e1d
Trailng space
2022-05-27 17:05:45 -04:00
29bb7d1fd3
Enhancement: vulnerabilities/other/commax-credentials-disclosure.yaml by mp
2022-05-27 14:28:13 -04:00
3bb9b3b9b4
Enhancement: vulnerabilities/other/commax-biometric-auth-bypass.yaml by mp
2022-05-27 14:27:14 -04:00
ceca4a66eb
Enhancement: vulnerabilities/other/clockwatch-enterprise-rce.yaml by mp
2022-05-27 14:24:57 -04:00
c7879a024a
Enhancement: vulnerabilities/other/clockwatch-enterprise-rce.yaml by mp
2022-05-27 14:24:10 -04:00
e945b90658
Enhancement: vulnerabilities/apache/apache-solr-log4j-rce.yaml by mp
2022-05-27 11:55:31 -04:00
514dcc9130
Enhancement: vulnerabilities/apache/apache-solr-log4j-rce.yaml by mp
2022-05-27 11:51:56 -04:00
a39ff66bc7
Merge branch 'projectdiscovery:master' into dashboard
2022-05-27 09:47:03 -04:00
b04f2e96fc
Merge branch 'dashboard' of https://github.com/MostInterestingBotInTheWorld/nuclei-templates into dashboard
2022-05-27 09:46:25 -04:00
a6d9c0dc6f
Various syntax updates
2022-05-27 09:44:40 -04:00
0bc780b271
Enhancement: vulnerabilities/joomla/rusty-joomla.yaml by mp
2022-05-27 09:40:04 -04:00
e51ffe8e42
Enhancement: vulnerabilities/jamf/jamf-log4j-jndi-rce.yaml by mp
2022-05-27 09:37:10 -04:00
1073ce9376
Enhancement: vulnerabilities/code42/code42-log4j-rce.yaml by mp
2022-05-27 09:32:32 -04:00
1d8806d53b
Enhancement: vulnerabilities/apache/apache-ofbiz-log4j-rce.yaml by mp
2022-05-27 09:28:10 -04:00
6a8f9f6ec6
Enhancement: vulnerabilities/other/WSO2-2019-0598.yaml by mp
2022-05-26 15:59:23 -04:00
95ce6f2c3a
Enhancement: vulnerabilities/oracle/oracle-ebs-bispgraph-file-access.yaml by mp
2022-05-26 15:57:07 -04:00
c039487da2
Enhancement: vulnerabilities/oracle/oracle-ebs-bispgraph-file-access.yaml by mp
2022-05-26 15:56:32 -04:00
8afdeb3629
Enhancement: vulnerabilities/metersphere/metersphere-plugin-rce.yaml by mp
2022-05-26 15:23:19 -04:00
b82487b452
Enhancement: vulnerabilities/joomla/rusty-joomla.yaml by mp
2022-05-26 14:11:38 -04:00
29bf5b8a9c
Enhancement: vulnerabilities/jenkins/jenkins-script.yaml by mp
2022-05-26 12:51:54 -04:00
0841f7b8af
Enhancement: vulnerabilities/jamf/jamf-log4j-jndi-rce.yaml by mp
2022-05-26 12:45:45 -04:00
3f99ce203c
Enhancement: vulnerabilities/fastjson/fastjson-1-2-41-rce.yaml by mp
2022-05-25 17:18:25 -04:00
faad73bef0
Enhancement: vulnerabilities/fastjson/fastjson-1-2-42-rce.yaml by mp
2022-05-25 17:17:59 -04:00
8fd83cc9ba
Enhancement: vulnerabilities/fastjson/fastjson-1-2-43-rce.yaml by mp
2022-05-25 17:05:12 -04:00
6c01b09603
Enhancement: vulnerabilities/fastjson/fastjson-1-2-47-rce.yaml by mp
2022-05-25 17:04:03 -04:00
af6d259881
Enhancement: vulnerabilities/fastjson/fastjson-1-2-62-rce.yaml by mp
2022-05-25 17:03:39 -04:00
9b5515f772
Enhancement: vulnerabilities/fastjson/fastjson-1-2-24-rce.yaml by mp
2022-05-25 17:00:30 -04:00
2ee0c440e3
Enhancement: vulnerabilities/fastjson/fastjson-1-2-68-rce.yaml by mp
2022-05-25 14:55:07 -04:00
485b351e12
Enhancement: vulnerabilities/fastjson/fastjson-1-2-67-rce.yaml by mp
2022-05-25 14:53:54 -04:00
a665ef18a0
Enhancement: vulnerabilities/fastjson/fastjson-1-2-62-rce.yaml by mp
2022-05-25 14:52:37 -04:00
779a386850
Enhancement: vulnerabilities/fastjson/fastjson-1-2-47-rce.yaml by mp
2022-05-25 14:47:11 -04:00
28f29dfa45
Enhancement: vulnerabilities/fastjson/fastjson-1-2-43-rce.yaml by mp
2022-05-25 14:45:59 -04:00
140502c059
Enhancement: vulnerabilities/fastjson/fastjson-1-2-41-rce.yaml by mp
2022-05-25 14:42:38 -04:00
88ff31247d
Enhancement: vulnerabilities/fastjson/fastjson-1-2-24-rce.yaml by mp
2022-05-24 13:53:38 -04:00
1f2b42e0d1
Enhancement: vulnerabilities/code42/code42-log4j-rce.yaml by mp
2022-05-24 13:30:47 -04:00
0fcd77fe46
Enhancement: vulnerabilities/apache/apache-ofbiz-log4j-rce.yaml by mp
2022-05-24 12:41:22 -04:00
d0ea7fe0b2
Enhancement: vulnerabilities/apache/apache-ofbiz-log4j-rce.yaml by mp
2022-05-24 12:38:03 -04:00
a81f40cb74
Create digitalrebar-traversal.yaml
2022-05-24 12:18:27 +05:30
bdb372cfb4
Dashboard Content Enhancements ( #4475 )
...
Dashboard Content Enhancements
2022-05-23 17:29:29 -04:00
bd5823ea54
Merge branch 'projectdiscovery:master' into dashboard
2022-05-23 17:24:43 -04:00
0880da19a4
Enhancement: vulnerabilities/apache/apache-flink-unauth-rce.yaml by mp
2022-05-23 15:33:34 -04:00
fe0bf001b7
Merge pull request #4471 from projectdiscovery/princechaddha-patch-2
...
Update and rename vulnerabilities/other/sangfor-edr-rce.yaml to vulne…
2022-05-23 23:58:57 +05:30
50a9ef0f89
Update cisco-rv-series-rce.yaml
2022-05-23 17:26:06 +05:30
fa903d06d3
Merge pull request #4368 from ritikchaddha/patch-52
...
Create sangfor-ba-rce.yaml
2022-05-23 16:29:32 +05:30
430cc1ea03
Update sangfor-ba-rce.yaml
2022-05-23 16:27:59 +05:30
5ad7e37a87
Update and rename vulnerabilities/other/sangfor-edr-auth-bypass.yaml to vulnerabilities/sangfor/sangfor-edr-auth-bypass.yaml
2022-05-23 16:27:31 +05:30
b8d2df57ba
Update and rename vulnerabilities/other/sangfor-edr-rce.yaml to vulnerabilities/sangfor/sangfor-edr-rce.yaml
2022-05-23 16:25:10 +05:30
a6a35ab400
Merge pull request #4431 from ritikchaddha/patch-59
...
Update ecshop-sqli.yaml
2022-05-23 16:14:33 +05:30
d2333f8c0c
Update ecshop-sqli.yaml
2022-05-23 16:13:10 +05:30
78a5fbc640
Merge pull request #4466 from gy741/rule-add-v114
...
Create ait-csv-import-export-rce.yaml
2022-05-23 14:16:51 +05:30
b2be30c340
Update ait-csv-import-export-rce.yaml
2022-05-23 14:04:27 +05:30
09de9e19ce
Merge branch 'master' into master
2022-05-23 13:30:04 +05:30
428176e5f6
Update grafana-file-read.yaml
2022-05-23 13:27:45 +05:30
aacb8f738f
Create ait-csv-import-export-rce.yaml
...
The AIT CSV Import/Export plugin <= 3.0.3 allows unauthenticated remote attackers to upload and execute arbitrary PHP code. The upload-handler does not require authentication, nor validates the uploaded content.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-22 10:12:09 +09:00
40116f7ee3
Create cisco-rv-series-rce.yaml
...
Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote
attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more infor
mation about these vulnerabilities, see the Details section of this advisory.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-22 00:15:55 +09:00
809e87987c
Dashboard Content Enhancements ( #4456 )
...
Dashboard Content Enhancements
2022-05-20 17:38:52 -04:00
b78e56dbc9
Update and rename vulnerabilities/other/dedecms-configphp-xss.yaml to vulnerabilities/dedecms/dedecms-config-xss.yaml
2022-05-20 00:36:18 +05:30
35e6d8b5f7
Update dedecms-configphp-xss.yaml
2022-05-19 18:08:04 +05:30
Ritik Chaddha
amit-jd
MostInterestingBotInTheWorld
PikPikcU
Prince Chaddha
Arafat Ansari
sandeep
Ritik Chaddha
GwanYeong Kim
johnk3r
uomogrande
Bojan Zdrnja
Prince Chaddha
Arm!tage
sullo
Alexander Sennhauser
Krishna Agarwal
Dhiyaneshwaran
Aaron Chen
Alexandre ZANNI