Prince Chaddha
e79277cef1
Merge pull request #2005 from daffainfo/patch-50
...
Create CVE-2012-4273.yaml
2021-07-15 14:35:12 +05:30
Prince Chaddha
96e8a1fb0a
Merge pull request #2011 from daffainfo/patch-55
...
Create CVE-2019-9618.yaml
2021-07-15 14:33:33 +05:30
Prince Chaddha
9e3fe02a38
Merge pull request #2007 from daffainfo/patch-52
...
Create CVE-2014-4513.yaml
2021-07-15 14:33:16 +05:30
Prince Chaddha
d73599eb3c
Merge pull request #2006 from daffainfo/patch-51
...
Create CVE-2021-24389.yaml
2021-07-15 14:32:09 +05:30
Prince Chaddha
a7b69d34f5
Update CVE-2012-4273.yaml
2021-07-15 14:31:25 +05:30
Prince Chaddha
799e7109c3
Update CVE-2021-24389.yaml
2021-07-15 14:30:23 +05:30
Prince Chaddha
75c7fa04e3
Update CVE-2014-4513.yaml
2021-07-15 14:28:58 +05:30
Prince Chaddha
7a1e276d7b
Update CVE-2021-24335.yaml
2021-07-15 14:27:55 +05:30
Prince Chaddha
fb1f67ce26
Rename CVE-2016-10960.yaml to cves/2016/CVE-2016-10960.yaml
2021-07-15 14:21:17 +05:30
Prince Chaddha
c20a208c4a
Update CVE-2019-9618.yaml
2021-07-15 14:20:42 +05:30
Prince Chaddha
5cab7d67e4
Update CVE-2011-1669.yaml
2021-07-15 14:20:03 +05:30
Prince Chaddha
caa5ceecca
Update CVE-2015-9480.yaml
2021-07-15 14:16:52 +05:30
Prince Chaddha
2f41c4de62
Update CVE-2021-24298.yaml
2021-07-15 14:15:49 +05:30
GwanYeong Kim
1c729ab1ea
Create CVE-2021-31755.yaml
...
Vulnerabilities in the web-based management interface of enda Router AC11 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-15 15:09:26 +09:00
GwanYeong Kim
a3699d912a
Create CVE-2020-25506.yaml
...
The exploit targets a command injection vulnerability in a system_mgr.cgi component. The component does not successfully sanitize the value of the HTTP parameters f_ntp_server, which in turn leads to arbitrary command execution.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-15 14:28:14 +09:00
Muhammad Daffa
031cd24480
Create CVE-2021-24298.yaml
2021-07-15 10:52:21 +07:00
Muhammad Daffa
ca75afe52c
Create CVE-2021-24320.yaml
2021-07-15 10:38:35 +07:00
Muhammad Daffa
3c2a1cd727
Create CVE-2011-1669.yaml
2021-07-15 10:01:50 +07:00
Muhammad Daffa
3fa2bf156a
Create CVE-2019-9618.yaml
2021-07-15 09:48:59 +07:00
GwanYeong Kim
67ae44be04
Create CVE-2020-26919.yaml
...
it was found that every section of the web could be used as a valid endpoint to submit POST requests being the action defined by the submitId argument. The problem was located in the login.html webpage, that has to be publicly available to perform login requests but does not implement any restriction for executing debug actions. This will allow users execute system commands.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-15 10:54:56 +09:00
Muhammad Daffa
e34ec6c05c
Create CVE-2021-24335.yaml
2021-07-15 07:06:50 +07:00
Muhammad Daffa
1dedb2aee5
Create CVE-2014-4513.yaml
2021-07-15 06:59:13 +07:00
Muhammad Daffa
6a0d2d2b90
Create CVE-2021-24389.yaml
2021-07-15 06:54:35 +07:00
Muhammad Daffa
ad69ef25cb
Create CVE-2012-4273.yaml
2021-07-15 06:51:46 +07:00
Muhammad Daffa
b3766162cc
Create CVE-2012-1835.yaml
2021-07-15 06:19:57 +07:00
Muhammad Daffa
65166046e7
Create CVE-2011-5106.yaml
2021-07-15 06:17:43 +07:00
Muhammad Daffa
e43c3befdf
Create CVE-2015-9480.yaml
2021-07-14 21:13:26 +07:00
Prince Chaddha
f218ea12ee
Update CVE-2012-4768.yaml
2021-07-14 19:28:30 +05:30
Prince Chaddha
85a6271c20
Merge pull request #1996 from daffainfo/patch-45
...
Create CVE-2015-1000012.yaml
2021-07-14 19:27:29 +05:30
Prince Chaddha
e904f97937
Update CVE-2015-1000012.yaml
2021-07-14 19:26:20 +05:30
Prince Chaddha
6559a49a8e
Merge pull request #1972 from daffainfo/patch-33
...
Create CVE-2013-4625.yaml
2021-07-14 19:24:05 +05:30
Prince Chaddha
127b66c546
Merge pull request #1995 from daffainfo/patch-44
...
Create CVE-2016-10956.yaml
2021-07-14 19:23:54 +05:30
Prince Chaddha
ecdb1b3204
Merge pull request #1977 from daffainfo/patch-36
...
Create CVE-2011-4618.yaml
2021-07-14 19:22:35 +05:30
Prince Chaddha
336ea26181
Update CVE-2013-4625.yaml
2021-07-14 19:22:11 +05:30
Prince Chaddha
57e03632d0
Merge pull request #1971 from daffainfo/patch-32
...
Create CVE-2013-4117.yaml
2021-07-14 19:15:55 +05:30
Prince Chaddha
3f5a32b61c
Update CVE-2013-4117.yaml
2021-07-14 19:14:56 +05:30
Prince Chaddha
f76c9151e9
Merge pull request #1984 from daffainfo/patch-43
...
Create CVE-2012-5913.yaml
2021-07-14 19:09:47 +05:30
Prince Chaddha
6981caf971
Merge pull request #1983 from daffainfo/patch-42
...
Create CVE-2012-2371.yaml
2021-07-14 19:08:24 +05:30
Prince Chaddha
0af70752fc
Update CVE-2012-5913.yaml
2021-07-14 19:08:13 +05:30
Prince Chaddha
0767a5b9f3
Update CVE-2012-2371.yaml
2021-07-14 19:07:09 +05:30
Prince Chaddha
6e7d5ad05f
Merge pull request #1982 from daffainfo/patch-41
...
Create CVE-2012-0901.yaml
2021-07-14 19:06:28 +05:30
Prince Chaddha
4abd3903e7
Merge pull request #1981 from daffainfo/patch-40
...
Create CVE-2011-5265.yaml
2021-07-14 18:48:13 +05:30
Prince Chaddha
4f92a44481
Update CVE-2012-0901.yaml
2021-07-14 18:48:09 +05:30
Prince Chaddha
79881e5a53
Update CVE-2011-5265.yaml
2021-07-14 18:47:04 +05:30
Prince Chaddha
81186887f0
Merge pull request #1980 from daffainfo/patch-39
...
Create CVE-2011-5181.yaml
2021-07-14 18:45:58 +05:30
Prince Chaddha
7f210b692a
Update CVE-2011-5265.yaml
2021-07-14 18:45:47 +05:30
Prince Chaddha
aedb24576f
Merge pull request #1979 from daffainfo/patch-38
...
Create CVE-2011-5179.yaml
2021-07-14 18:40:12 +05:30
Prince Chaddha
42395f3cf0
Update CVE-2011-5181.yaml
2021-07-14 18:40:07 +05:30
Prince Chaddha
0dc763a5e2
Merge pull request #1978 from daffainfo/patch-37
...
Create CVE-2011-5107.yaml
2021-07-14 18:39:18 +05:30
Prince Chaddha
31c69d6a53
Update CVE-2011-5179.yaml
2021-07-14 18:39:10 +05:30
Prince Chaddha
b24958c966
Update CVE-2011-5107.yaml
2021-07-14 18:38:27 +05:30
Prince Chaddha
49b8f5dced
Merge pull request #1976 from daffainfo/patch-35
...
Create CVE-2011-4926.yaml
2021-07-14 18:37:31 +05:30
Prince Chaddha
4530f816e7
Update CVE-2011-4618.yaml
2021-07-14 18:37:19 +05:30
Prince Chaddha
aa49f5249c
Merge pull request #1975 from daffainfo/patch-34
...
Create CVE-2011-4624.yaml
2021-07-14 18:36:28 +05:30
Prince Chaddha
2f3470ca1f
Update CVE-2011-4926.yaml
2021-07-14 18:36:19 +05:30
Muhammad Daffa
f63f825283
Create CVE-2015-1000012.yaml
2021-07-14 18:10:41 +07:00
Muhammad Daffa
08e3f1af84
Create CVE-2016-10956.yaml
2021-07-14 18:03:54 +07:00
Prince Chaddha
74c4f507b5
Update CVE-2011-4624.yaml
2021-07-14 16:20:22 +05:30
sandeep
f7259df034
typo update
2021-07-14 15:38:56 +05:30
Geeknik Labs
fc35b4c56d
Update CVE-2017-5487.yaml
...
Fixes #1985
2021-07-13 18:58:52 +00:00
Muhammad Daffa
e2221a68f6
Create CVE-2012-5913.yaml
2021-07-14 00:15:23 +07:00
Muhammad Daffa
660d2341fb
Create CVE-2012-2371.yaml
2021-07-14 00:14:36 +07:00
Muhammad Daffa
a64856f005
Create CVE-2012-0901.yaml
2021-07-14 00:13:20 +07:00
Muhammad Daffa
52712e1738
Create CVE-2011-5265.yaml
2021-07-14 00:12:07 +07:00
Muhammad Daffa
2171814982
Update CVE-2011-5181.yaml
2021-07-14 00:10:26 +07:00
Muhammad Daffa
cdc64106ad
Create CVE-2011-5181.yaml
2021-07-14 00:08:59 +07:00
Muhammad Daffa
a6ec5edc8d
Create CVE-2011-5179.yaml
2021-07-14 00:07:06 +07:00
Muhammad Daffa
206ed76058
Create CVE-2011-5107.yaml
2021-07-14 00:05:34 +07:00
Muhammad Daffa
7b1fb46547
Create CVE-2011-4618.yaml
2021-07-14 00:03:30 +07:00
Muhammad Daffa
a165adadae
Create CVE-2011-4926.yaml
2021-07-13 23:44:37 +07:00
Muhammad Daffa
4946a5d8a7
Create CVE-2011-4624.yaml
2021-07-13 23:42:57 +07:00
sandeep
b6ec1c2abb
Added reference
2021-07-13 19:22:59 +05:30
Sandeep Singh
b4e21feadd
Rename cve-2021-24472.yaml to CVE-2021-24472.yaml
2021-07-13 19:21:21 +05:30
sandeep
6d6b30e9cf
matcher update
2021-07-13 19:20:10 +05:30
Muhammad Daffa
0871ccb042
Create CVE-2013-4625.yaml
2021-07-13 20:48:19 +07:00
Muhammad Daffa
f29b55b6cc
Create CVE-2013-4117.yaml
2021-07-13 20:45:32 +07:00
Suman Kar
9aeac41fbc
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
2021-07-13 18:42:05 +05:30
Sandeep Singh
51834499f8
Merge pull request #1944 from daffainfo/patch-23
...
Create CVE-2012-4242.yaml
2021-07-13 16:45:39 +05:30
Sandeep Singh
858a6b48de
Merge pull request #1946 from daffainfo/patch-25
...
Create CVE-2013-2287.yaml
2021-07-13 16:43:05 +05:30
Sandeep Singh
9a09d52520
Merge pull request #1951 from gy741/rule-add-v22
...
Create CVE-2021-33544.yaml
2021-07-13 16:30:44 +05:30
Sandeep Singh
43d4644164
Update CVE-2021-33544.yaml
2021-07-13 16:29:55 +05:30
Sandeep Singh
bb53177a74
Update CVE-2021-33544.yaml
2021-07-13 16:26:33 +05:30
Sandeep Singh
8c4f1dfe43
Merge pull request #1954 from Akokonunes/patch-18
...
Create CVE-2015-7823
2021-07-13 15:06:48 +05:30
sandeep
dfd9a2592b
moving files around
2021-07-13 15:04:42 +05:30
Sandeep Singh
89e1a8da93
Merge pull request #1962 from dwisiswant0/hotfix/CVE-2020-24148
2021-07-13 05:01:01 +05:30
Dwi Siswanto
a91516cbb5
Misplaced of CVE-2020-24148
2021-07-13 05:24:03 +07:00
Sandeep Singh
e23f378fe8
Merge pull request #1943 from gy741/rule-add-v21
...
Create CVE-2021-30497.yaml
2021-07-13 01:00:59 +05:30
Sandeep Singh
dec41b5631
Merge pull request #1950 from dwisiswant0/add/CVE-2020-24148
...
Add CVE-2020-24148
2021-07-13 00:52:08 +05:30
GwanYeong Kim
0e1e727bb1
Create CVE-2021-33544.yaml
...
Multiple vulnerabilities in the web-based management interface of Geutebruck could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.
CVE-2021-33543 : Authentication Bypass
CVE-2021-33544 : Command injection multiple parameters
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-12 13:10:31 +09:00
Dwi Siswanto
4ea2c71a3d
Add CVE-2020-24148
2021-07-12 09:24:50 +07:00
Muhammad Daffa
9788955ebd
Create CVE-2013-2287.yaml
2021-07-11 17:18:20 +07:00
Muhammad Daffa
21195f9f0e
Create CVE-2012-4242.yaml
2021-07-11 17:06:48 +07:00
GwanYeong Kim
c0f5105dcf
Create CVE-2021-30497.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-11 18:31:18 +09:00
sandeep
25dcb930ad
Added CVE-2021-29156
2021-07-11 14:39:41 +05:30
sandeep
3bbcb23cd0
Severity update as this directly doesn't pose any risk.
2021-07-11 13:39:21 +05:30
Muhammad Daffa
f1690ec51b
Create CVE-2012-4768.yaml
2021-07-11 13:33:29 +07:00
Prince Chaddha
aa63d1afb7
Merge pull request #1925 from daffainfo/patch-10
...
Create CVE-2020-29395.yaml
2021-07-11 10:25:06 +05:30
Prince Chaddha
bca05d61d6
Merge pull request #1926 from daffainfo/patch-11
...
Create CVE-2019-14470.yaml
2021-07-11 10:15:11 +05:30
Prince Chaddha
7f0f8beff2
Update CVE-2020-29395.yaml
2021-07-11 10:14:56 +05:30
Prince Chaddha
7c19ca873d
Update CVE-2019-14470.yaml
2021-07-11 10:12:41 +05:30
Prince Chaddha
7c0c5033e9
Update CVE-2019-14470.yaml
2021-07-11 10:11:11 +05:30
Prince Chaddha
a3c2fdee36
Merge pull request #1928 from daffainfo/patch-13
...
Create CVE-2019-15889.yaml
2021-07-11 10:09:58 +05:30
Prince Chaddha
0bae5e975e
Update CVE-2019-15889.yaml
2021-07-11 10:09:51 +05:30
Prince Chaddha
70930af523
Merge pull request #1929 from daffainfo/patch-14
...
Create CVE-2014-9094.yaml
2021-07-11 10:09:00 +05:30
Prince Chaddha
a04341ae20
Update CVE-2014-9094.yaml
2021-07-11 10:08:53 +05:30
Prince Chaddha
92e1a5feeb
Update CVE-2013-3526.yaml
2021-07-11 10:05:10 +05:30
Muhammad Daffa
53c2c47099
Create CVE-2013-3526.yaml
2021-07-11 09:00:15 +07:00
Muhammad Daffa
4773149878
Create CVE-2014-9094.yaml
2021-07-11 08:43:01 +07:00
Muhammad Daffa
009e68c627
Create CVE-2019-15889.yaml
2021-07-11 08:20:03 +07:00
Muhammad Daffa
4889efb117
Create CVE-2019-14470.yaml
2021-07-11 08:06:14 +07:00
Muhammad Daffa
da45bdf0ef
Create CVE-2020-29395.yaml
2021-07-11 07:58:31 +07:00
sandeep
01ae482fe8
Added CVE-2021-34621
2021-07-10 22:31:08 +05:30
Sandeep Singh
97023903a0
Merge pull request #1918 from gy741/rule-add-v19
...
Create Hongdian Vulnerability
2021-07-10 21:24:56 +05:30
Sandeep Singh
5ca472b43e
Merge pull request #1880 from gy741/rule-add-v13
...
Create CVE-2021-1497.yaml
2021-07-10 20:55:14 +05:30
sandeep
1cd29628aa
more reference
2021-07-10 20:54:04 +05:30
sandeep
7f37050361
Added HTTP check
2021-07-10 20:53:23 +05:30
sandeep
dd9e85a29c
Added missing condition
2021-07-10 20:47:20 +05:30
sandeep
1e8aa5288f
Update CVE-2021-1497.yaml
2021-07-10 20:45:00 +05:30
sandeep
767f173f88
minor updates
2021-07-10 18:45:09 +05:30
GwanYeong Kim
3bf1c929ed
Create Hongdian Vulnerability
...
CVE-2021-28149 : Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file.
CVE-2021-28150 : Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
CVE-2021-28151 : Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-10 21:16:35 +09:00
sandeep
c2f87a94c6
Added complete RCE chain
2021-07-10 13:42:09 +05:30
Prince Chaddha
491b6f8e2b
Update CVE-2018-2392.yaml
2021-07-08 14:41:02 +05:30
Sandeep Singh
bff63b673d
Merge pull request #1896 from geeknik/patch-109
...
Create CVE-2017-16806.yaml
2021-07-07 18:40:15 +05:30
Sandeep Singh
5d034716ac
Merge pull request #1895 from geeknik/patch-108
...
Create CVE-2015-6477.yaml
2021-07-07 18:37:48 +05:30
Sandeep Singh
6963c0d669
Update CVE-2015-6477.yaml
2021-07-07 18:37:21 +05:30
Sandeep Singh
36a13094ef
Merge pull request #1894 from geeknik/patch-105
...
Create CVE-2009-4223.yaml
2021-07-07 18:35:27 +05:30
Geeknik Labs
d5cbcec079
Update CVE-2021-22214.yaml
...
dns interaction doesn't prove exploitability
2021-07-07 03:50:13 +00:00
Geeknik Labs
c8ba8e13ce
Create CVE-2017-16806.yaml
2021-07-06 19:50:32 +00:00
Geeknik Labs
6874823632
Create CVE-2015-6477.yaml
2021-07-06 19:47:44 +00:00
Geeknik Labs
1fba6ae882
Create CVE-2009-4223.yaml
2021-07-06 19:44:02 +00:00
Sandeep Singh
deab6ba62c
Merge pull request #1887 from skar4444/nrouter
...
CVE-2016-5649 - Netgear Router - Admin Password Disclosure
2021-07-06 21:36:01 +05:30
sandeep
5a818f62b8
name and template update
2021-07-06 21:34:28 +05:30
Sandeep Singh
2aa91bbf24
Rename cve-2021-24387.yaml to CVE-2021-24387.yaml
2021-07-06 20:29:47 +05:30
Suman Kar
78617f6012
Real Estate 7 WordPress Theme < 3.1.1 - Unauthenticated Reflected XSS
2021-07-06 19:51:53 +05:30
sandeep
6dd96ede94
Added additional reference
2021-07-06 12:12:09 +05:30
sandeep
fc68a95803
Template Name/ID update as per assigned CVE
2021-07-06 12:07:53 +05:30
GwanYeong Kim
71dd0de29d
Create CVE-2021-1497.yaml
...
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-06 09:30:13 +09:00
Ivanov Vladimir
8938010a7a
Add CVE-2020-6207.yaml
2021-07-05 20:36:55 +03:00
Ivanov Vladimir
05b2837a0a
Add CVE-2018-2392.yaml
2021-07-05 19:40:37 +03:00
sandeep
36a0918092
fixes
2021-07-04 16:02:51 +05:30
sandeep
13a5215bda
Update CVE-2017-9841.yaml
2021-07-04 15:50:15 +05:30
sandeep
35a8d999cb
strict matchers
2021-07-04 01:05:05 +05:30
sandeep
b137eb57d3
More edge cases
...
Only looking for DNS interaction is not reliable as few servers make DNS requests for host included in path or query parameter.
2021-07-04 00:41:57 +05:30
sandeep
acebe227a1
Update CVE-2019-13101.yaml
2021-07-04 00:12:01 +05:30
sandeep
9e9954cbab
strict matchers
2021-07-04 00:07:30 +05:30
Suman Kar
f249af535a
Update CVE-2019-13101.yaml
...
iot tag added
2021-07-03 17:55:11 +05:30
sandeep
f21b239853
misc changes
2021-07-03 15:23:28 +05:30
Suman Kar
e20298b4d3
D-Link DIR-600M Router - Authentication Bypass
2021-07-03 05:50:40 +05:30
Sandeep Singh
52e0c861a1
Merge pull request #1733 from milo2012/master
...
Added CVE-2018-1000130/ CVE-2018-2628/ CVE-2018-2628/ CVE-2019-3401/ CVE-2020-1938/ oracle-bi-default-login/ jolokia-heap-disclosure
2021-07-02 18:27:45 +05:30
sandeep
e2a0f93f79
misc updates
2021-07-02 18:24:31 +05:30
sandeep
16da6c9980
strict matchers
2021-07-02 18:20:58 +05:30
Prince Chaddha
56ccb9f3a4
Merge pull request #1822 from Akokonunes/patch-13
...
Create CVE-2021-24210.yaml
2021-07-01 00:00:03 +05:30
Prince Chaddha
f44c3e597f
Update and rename CVE-2021-24210.yaml to cves/2021/CVE-2021-24210.yaml
2021-06-30 23:45:27 +05:30
Prince Chaddha
87a1d1acce
Merge pull request #1823 from Akokonunes/patch-14
...
Create CVE-2021-24406.yaml
2021-06-30 23:44:03 +05:30
Prince Chaddha
6a6607c282
Update and rename CVE-2021-24406.yaml to cves/2021/CVE-2021-24406.yaml
2021-06-30 23:43:06 +05:30
Prince Chaddha
3802723219
Update CVE-2013-3827.yaml
2021-06-30 23:39:47 +05:30
Sandeep Singh
dbcdbe907e
Merge pull request #1797 from Mad-robot/patch-2
...
Create CVE-2021-29203.yaml
2021-06-30 21:27:35 +05:30
sandeep
2d63ddfa20
minor update
2021-06-30 21:27:06 +05:30
Sandeep Singh
3602eebf6c
Merge pull request #1780 from wwilson83H3/master
...
The default request never flagged druid in my env. Replaced with MSF …
2021-06-30 20:32:14 +05:30
Sandeep Singh
d1f47657a9
Update CVE-2021-25646.yaml
2021-06-30 20:31:15 +05:30
Sandeep Singh
cfcb739fbc
more changes
2021-06-30 20:28:41 +05:30
Sandeep Singh
cc56986b92
Merge pull request #1820 from pikpikcu/patch-190
...
Update CVE-2018-13380.yaml
2021-06-30 19:52:53 +05:30
Keith
8490fe60ca
Add CVE-2017-9822.yaml - DotNetNuke Cookie Deserialization Remote Code Execution (RCE)
2021-06-30 19:35:01 +08:00
Keith
b7d1d4771b
Merge branch 'master' of https://github.com/milo2012/nuclei-templates into master
2021-06-30 19:33:31 +08:00
Keith
f78452e808
Add CVE-2017-9822.yaml - DotNetNuke Cookie Deserialization Remote Code Execution (RCE)
2021-06-30 19:32:59 +08:00
Robbie
9d8f8f8589
Create CVE-2013-3827.yaml
2021-06-30 11:50:41 +01:00
Prince Chaddha
b3c580d290
Update CVE-2018-8715.yaml
2021-06-30 15:34:58 +05:30
Keith
1afa102620
Add CVE-2018-8715.yaml - AppWeb authentication bypass
2021-06-30 16:30:56 +08:00
sandeep
96fc7bb341
more strict matchers
2021-06-30 03:26:01 +05:30
sandeep
498586e854
Added additional matcher and full exploit chain details
2021-06-30 03:01:13 +05:30
SaN ThosH
8b0b2a169d
Update CVE-2021-35464.yaml
2021-06-29 18:02:33 +05:30
SaN ThosH
2d4c8cb434
Create CVE-2021-35464.yaml
2021-06-29 17:26:37 +05:30
Sandeep Singh
2d826f3391
More edge cases
2021-06-29 12:41:19 +05:30
Prince Chaddha
8ae56492d8
Update CVE-2021-29203.yaml
2021-06-29 10:13:41 +05:30
Prince Chaddha
dcbaaf31ac
Merge pull request #1775 from pikpikcu/patch-186
...
Create CVE-2017-12794.yaml
2021-06-29 10:08:13 +05:30
Prince Chaddha
b46dc119e7
Update CVE-2017-12794.yaml
2021-06-29 10:07:07 +05:30
PikPikcU
54f40d8f2c
Update CVE-2018-13380.yaml
2021-06-29 02:17:42 +00:00
Sandeep Singh
40bb93faff
Merge pull request #1773 from pikpikcu/patch-184
...
Create CVE-2020-3580.yaml
2021-06-28 21:44:36 +05:30
Sandeep Singh
40782db039
Merge pull request #1771 from gy741/rule-add-v7
...
Create CVE-2021-3223.yaml
2021-06-28 21:43:59 +05:30
sandeep
b97811a143
Update CVE-2021-3223.yaml
2021-06-28 21:43:04 +05:30
sandeep
bce647b441
Added CVE-2015-8813
2021-06-28 17:14:03 +05:30
SaN ThosH
cb5c53aef3
Create CVE-2021-29203.yaml
2021-06-26 13:40:30 +05:30
Prince Chaddha
bae4998f81
Merge pull request #1766 from gy741/rule-add-v6
...
Create CVE-2021-21234.yaml
2021-06-25 16:50:36 +05:30
Prince Chaddha
2d40d90715
Update CVE-2021-21234.yaml
2021-06-25 12:53:22 +05:30
Prince Chaddha
dd98451110
Update CVE-2018-16299.yaml
2021-06-25 12:45:04 +05:30
Prince Chaddha
fca70dd2c7
Update and rename CVE-2018-16299.yaml to cves/2018/CVE-2018-16299.yaml
2021-06-25 12:43:55 +05:30
sandeep
d1e4b5c510
minor updates
2021-06-25 10:51:00 +05:30
Keith
95b34330ed
Add CVE-2018-2893.yaml - Oracle WebLogic Server Deserialization RCE
2021-06-25 03:41:02 +08:00
Keith
4e888bf3e2
Add CVE-2018-2893.yaml - Oracle WebLogic Server Deserialization RCE
2021-06-25 03:38:53 +08:00
sandeep
7db13c6bce
Duplicate template
2021-06-25 00:08:05 +05:30
sandeep
426abedcfa
severity updates as per CVE database
2021-06-25 00:05:59 +05:30
Sandeep Singh
e4e8e6e148
Merge pull request #1776 from pikpikcu/patch-187
...
Create CVE-2021-28169.yaml
2021-06-25 00:02:51 +05:30
sandeep
a736120dc0
minor updates
2021-06-25 00:02:05 +05:30
Sandeep Singh
e84c784fa2
Merge pull request #1689 from nrathaus/master
...
CVE-2021-28164 and some fixes
2021-06-24 23:58:29 +05:30
sandeep
a9a161f8c6
Update CVE-2021-28164.yaml
2021-06-24 23:56:33 +05:30
sandeep
809668943f
minor changes
2021-06-24 23:54:29 +05:30
wyatt
16e5ad7fad
The default request never flagged druid in my env. Replaced with MSF request and it flags everytime now
2021-06-24 13:37:45 -04:00
PikPikcU
b97d012636
Create CVE-2021-28169.yaml
2021-06-24 16:00:02 +00:00
PikPikcU
9cc9a52db2
Create CVE-2017-12794.yaml
2021-06-24 15:49:12 +00:00
PikPikcU
19d80d9d0a
Create CVE-2020-3580.yaml
2021-06-24 15:34:19 +00:00
GwanYeong Kim
e7bb4bff23
Create CVE-2021-3223.yaml
...
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-06-24 21:07:17 +09:00
Prince Chaddha
37261f7a2f
Update and rename vulnerabilities/jira/jira-unauthenticated-popular-filters.yaml to cves/2019/CVE-2019-3401.yaml
2021-06-24 16:52:04 +05:30
Prince Chaddha
f7563d9718
Update CVE-2019-3401.yaml
2021-06-24 16:45:07 +05:30
GwanYeong Kim
cc0dd04ac2
Create CVE-2021-21234.yaml
...
spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vulnerability. The nature of this library is to expose a log file directory via admin (spring boot actuator) HTTP endpoints. Both the filename to view and a base folder (relative to the logging folder root) can be specified via request parameters. While the filename parameter was checked to prevent directory traversal exploits (so that `filename=../somefile` would not work), the base folder parameter was not sufficiently checked, so that `filename=somefile&base=../` could access a file outside the logging base directory). The vulnerability has been patched in release 0.2.13. Any users of 0.2.12 should be able to update without any issues as there are no other changes in that release. There is no workaround to fix the vulnerability other than updating or removing the dependency. However, removing read access of the user the application is run with to any directory not required for running the application can limit the impact. Additionally, access to the logview endpoint can be limited by deploying the application behind a reverse proxy.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-06-24 14:36:45 +09:00
Prince Chaddha
35cf8d1378
Merge pull request #1221 from projectdiscovery/princechaddha-patch-6
...
Create CVE-2018-9995.yaml
2021-06-24 02:33:20 +05:30
Prince Chaddha
0fbbfdd364
Update CVE-2018-9995.yaml
2021-06-24 02:32:23 +05:30
Sandeep Singh
9479826132
Merge pull request #1747 from Udyz/patch-3
...
Create CVE-2021-21389
2021-06-24 02:26:23 +05:30
sandeep
416bafe2fa
misc changes
2021-06-24 02:24:58 +05:30
sandeep
9386111906
making status check generic both case
2021-06-24 00:13:58 +05:30
sandeep
459dd6b84b
misc changes
2021-06-23 23:48:34 +05:30
Wyatt Dahlenburg
67c4713f13
Added status to CVE-2012-3153
2021-06-23 08:26:37 -05:00
Keith
916ea5ff72
Add CVE-2019-3401 - Atlassian JIRA Information Exposure (CVE-2019-3401)
2021-06-23 01:29:08 +08:00
Keith
6e139881ee
fix or operator
2021-06-23 00:33:06 +08:00
Prince Chaddha
6b358f38a9
Merge pull request #1751 from realistic-security/master
...
Create two "Oracle Forms & Reports" Vulnerabilities
2021-06-22 19:43:04 +05:30
Sidahmed
672acb880e
Updated Oracle Forms & Reports CVE-2012-3153
2021-06-22 14:53:26 +01:00
Keith
139aaf2ecf
Add CVE-2018-1000130.yaml - fix spaces
2021-06-22 20:35:17 +08:00
Keith
e84dc0e94c
Add CVE-2018-1000130.yaml - Jolokia Agent Proxy JNDI Code Injection
2021-06-22 20:32:30 +08:00
lulz
04a7fda94a
Update CVE-2021-21389.yaml
2021-06-22 19:12:35 +07:00
lulz
014ca91e15
hmm just simple check...
...
sorry i just know little bit english...
2021-06-22 19:07:00 +07:00
Prince Chaddha
1c4a2a56a7
Merge pull request #1734 from darrenmartyn/patch-1
...
Create CVE-2019-4781.yaml
2021-06-22 13:21:04 +05:30
Prince Chaddha
2539c830ac
Update CVE-2019-7481.yaml
2021-06-22 13:20:06 +05:30
Prince Chaddha
c87238c37a
Update CVE-2019-7481.yaml
2021-06-22 13:18:51 +05:30
Sandeep Singh
dcaef6a836
Rename CVE-2021-21389 to CVE-2021-21389.yaml
2021-06-22 04:05:42 +05:30
sandeep
3844df9fc8
misc changes
2021-06-21 18:09:16 +05:30
Prince Chaddha
592b2e7222
Update CVE-2020-1938.yaml
2021-06-21 14:28:51 +05:30
Prince Chaddha
be89aed331
Update CVE-2018-2628.yaml
2021-06-21 14:26:53 +05:30
Prince Chaddha
cb4d12cc8c
Moved to cves/2018
2021-06-21 14:20:20 +05:30
Sidahmed
ec835a0bc5
Create CVE-2012-3152, CVE-2012-3153
2021-06-21 09:48:42 +01:00
Dhiyaneshwaran
8b43919211
Update CVE-2020-11930.yaml
2021-06-21 14:15:45 +05:30
Dhiyaneshwaran
216b484aec
Update CVE-2020-11930.yaml
2021-06-21 14:15:09 +05:30
Dhiyaneshwaran
ebc202adcb
Create CVE-2020-11930.yaml
2021-06-21 14:11:20 +05:30
lulz
0d5a57bc23
Create CVE-2021-21389
2021-06-21 12:33:14 +07:00
Keith
55b89115aa
add CVE-2018-2628 - Oracle WebLogic Server Deserialization RCE
2021-06-21 06:24:33 +08:00
sandeep
c7a11cd1b1
Added CVE-2020-11110
2021-06-20 20:00:19 +05:30
Prince Chaddha
1465ad8c76
Merge pull request #1740 from Akokonunes/patch-9
...
Create CVE-2018-18775.yaml
2021-06-20 16:51:09 +05:30
Prince Chaddha
a2623f5e9d
Update CVE-2018-18775.yaml
2021-06-20 16:49:24 +05:30
Prince Chaddha
b874963894
moved to cves
2021-06-20 16:47:21 +05:30
Prince Chaddha
00ad7ee3db
Moved to cves
2021-06-20 16:43:44 +05:30
Noam Rathaus
bb6fa66dd9
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-20 13:56:54 +03:00
darrenmartyn
80d159c277
Update CVE-2019-7481.yaml
2021-06-19 22:44:05 +01:00
darrenmartyn
7c65c33396
Update CVE-2019-7481.yaml
...
maybe yaml lint thing doesn't hate me now
2021-06-19 22:42:10 +01:00
darrenmartyn
722a2bd60c
Update and rename CVE-2019-4781.yaml to CVE-2019-7481.yaml
2021-06-19 21:39:08 +01:00
darrenmartyn
a26c0d9c3a
Create CVE-2019-4781.yaml
...
Need some feedback on this, tested it out and it works just fine.
2021-06-19 21:17:40 +01:00
Keith
e8e5dd5c83
add CVE-2020-1938.yaml - Ghostcat - Apache Tomcat AJP File Read/Inclusion Vulnerability
2021-06-19 21:59:42 +08:00
Geeknik Labs
988726f5c8
Create CVE-2017-15944.yaml
...
This fixes #1091 . I changed line 20 from `part: body` to `part: header`.
2021-06-18 20:45:44 +00:00
Prince Chaddha
55c1984a52
Template Moved to cves
2021-06-19 01:58:02 +05:30
Prince Chaddha
112113437c
Moved template to cves folder
2021-06-18 16:58:27 +05:30
Sandeep Singh
9200ac068a
Merge pull request #1714 from skar4444/unauthenticated-CI-lint-API
...
CVE 2021-22214 - Unauthenticated Gitlab SSRF - CI Lint API
2021-06-18 15:08:33 +05:30
sandeep
b301c830a3
final improvements
2021-06-18 15:02:17 +05:30
sandeep
27d67855e8
misc changes
2021-06-18 14:42:13 +05:30
Sandeep Singh
4f0bfc9362
Merge pull request #1705 from projectdiscovery/CVE-2021-28854
...
Added CVE-2021-28854
2021-06-18 12:52:42 +05:30
Sandeep Singh
44a53f7090
Merge pull request #1636 from pdelteil/patch-6
...
Update CVE-2018-18069.yaml
2021-06-18 10:01:04 +05:30
Prince Chaddha
bfa70bacf5
Update CVE-2021-21975.yaml
2021-06-17 22:55:10 +05:30
Prince Chaddha
0f590a867b
Update CVE-2018-18069.yaml
2021-06-17 22:20:02 +05:30
Prince Chaddha
eeb88e4bd1
Update CVE-2018-18069.yaml
2021-06-17 22:13:32 +05:30
Prince Chaddha
36bb1fff95
Update CVE-2018-18069.yaml
2021-06-17 22:11:00 +05:30
Noam Rathaus
01b77a7ed2
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-17 16:54:18 +03:00
Dwi Siswanto
8a1d7bd7d2
Hotfix FP of CVE-2021-24146
2021-06-17 08:16:54 +07:00
Sandeep Singh
5c2a07d65e
Merge pull request #1684 from geeknik/patch-107
...
Create CVE-2018-16670.yaml
2021-06-16 02:01:36 +05:30
Sandeep Singh
dbee289627
Merge pull request #1683 from geeknik/patch-106
...
Create CVE-2018-16668.yaml
2021-06-16 01:59:47 +05:30
Sandeep Singh
6c48452767
Merge pull request #1682 from geeknik/patch-105
...
Create CVE-2018-16671.yaml
2021-06-16 01:58:32 +05:30
Sandeep Singh
bfbd3ccdac
Merge pull request #1656 from Akokonunes/patch-4
...
Create CVE-2021-24237.yaml
2021-06-16 01:56:39 +05:30
Sandeep Singh
074b15b081
Merge pull request #1655 from Akokonunes/patch-3
...
Create CVE-2013-2248.yaml
2021-06-16 01:46:45 +05:30
sandeep
92d35b4710
minor update
2021-06-16 01:45:31 +05:30
sandeep
5cff973564
Added tags
2021-06-16 01:02:21 +05:30
sandeep
c36419c94c
Added CVE-2021-28854
2021-06-16 01:01:01 +05:30
Prince Chaddha
8cf0d5e8ac
Merge pull request #1680 from Alex-null/master
...
Update CVE-2013-2251.yaml
2021-06-15 16:42:14 +05:30
Prince Chaddha
ccac0e26e5
Update CVE-2013-2251.yaml
2021-06-15 16:41:14 +05:30
Prince Chaddha
edf4a45ee4
Update CVE-2018-1000533.yaml
2021-06-15 16:38:28 +05:30
Prince Chaddha
72d9357cf6
Update CVE-2018-1000533.yaml
2021-06-15 16:23:59 +05:30
Prince Chaddha
3cfc921b71
Update CVE-2018-1000533.yaml
2021-06-15 15:31:36 +05:30
PikPikcU
e970a09c53
Create CVE-2018-1000533.yaml
2021-06-15 07:28:10 +00:00
Philippe Delteil
d25869d764
Update CVE-2020-36289.yaml
2021-06-14 11:50:25 -04:00
Noam Rathaus
a91ee941ff
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-14 14:59:58 +03:00
Prince Chaddha
8df5f982f3
Moved template to cves
2021-06-13 21:01:21 +05:30
Noam Rathaus
b5bdac494b
Merge branch 'master' of https://github.com/nrathaus/nuclei-templates
2021-06-13 09:54:52 +03:00
Prince Chaddha
eb1a3b678a
Update CVE-2014-2383.yaml
2021-06-12 16:42:57 +05:30
Geeknik Labs
e83ba1b5ec
Create CVE-2018-16670.yaml
2021-06-11 12:11:36 +00:00
Geeknik Labs
c451137ffc
Create CVE-2018-16668.yaml
2021-06-11 12:10:29 +00:00
Geeknik Labs
210465a658
Create CVE-2018-16671.yaml
2021-06-11 12:09:29 +00:00
Prince Chaddha
3779eb70e0
Moved template to cves folder
2021-06-11 16:48:05 +05:30
Sandeep Singh
b17196ee18
Merge pull request #1679 from Mad-robot/master
...
Update CVE-2018-3167.yaml
2021-06-11 16:25:07 +05:30
Prince Chaddha
710d2345ba
Merge pull request #1671 from Akokonunes/patch-6
...
Create CVE-2018-16836.yaml
2021-06-11 15:59:49 +05:30
Prince Chaddha
bc4a0d37b1
Moving template to cves folder
2021-06-11 15:58:02 +05:30
Prince Chaddha
3ef83889b4
Update CVE-2014-2383.yaml
2021-06-11 15:22:14 +05:30
Alex-null
161b2f5008
Update CVE-2013-2251.yaml
...
Add new payload. Test it on this environment-https://github.com/vulhub/vulhub/tree/master/struts2/s2-016
2021-06-11 17:50:50 +08:00
Prince Chaddha
658cd17d4f
Merge pull request #1670 from Akokonunes/patch-5
...
Create CVE-2014-2383.yaml
2021-06-11 15:04:17 +05:30
Prince Chaddha
afb2f15dbd
Added more paths
2021-06-11 14:47:02 +05:30
Prince Chaddha
d4db18c218
Update CVE-2014-2383.yaml
2021-06-11 14:33:43 +05:30
Prince Chaddha
583f4e6778
Template moved to CVE folder
2021-06-11 14:19:36 +05:30
SaN ThosH
a2e740148f
Update CVE-2018-3167.yaml
2021-06-11 13:21:20 +05:30
SaN ThosH
bfed8d5200
Update CVE-2018-3167.yaml
2021-06-11 13:19:46 +05:30
SaN ThosH
84341549c0
Update CVE-2018-3167.yaml
2021-06-11 13:18:36 +05:30
SaN ThosH
42ec1d5636
Update CVE-2018-3167.yaml
2021-06-11 13:14:15 +05:30
sandeep
69ded42e3a
Template rename / update
2021-06-10 21:57:07 +05:30
sandeep
3de46aa21b
misc changes
2021-06-10 00:01:38 +05:30
sandeep
ea26842383
Added CVE-2019-2616
2021-06-09 23:56:42 +05:30
Sandeep Singh
4e17331f30
Merge pull request #1657 from DhiyaneshGeek/master
...
CVE-2017-9140: Telerik ReportViewer XSS
2021-06-09 21:40:40 +05:30
sandeep
8fa1dbc604
Minor updates
2021-06-09 21:37:22 +05:30
sandeep
5c80980915
Added CVE-2020-36289
2021-06-09 21:13:52 +05:30
Dhiyaneshwaran
6c79bfa14d
Create CVE-2017-9140.yaml
2021-06-09 18:40:47 +05:30
Prince Chaddha
83ce809e8d
Updated author names
2021-06-09 17:50:56 +05:30
Prince Chaddha
769de2a231
Create CVE-2013-2248.yaml
2021-06-09 15:32:42 +05:30
sandeep
ccdb667d3b
YML to YAML
2021-06-09 14:42:14 +05:30
sandeep
1299ae621f
Update CVE-2021-28164.yml
2021-06-09 14:39:19 +05:30
sandeep
eef5158207
Update CVE-2021-28164.yml
2021-06-09 14:38:12 +05:30
sandeep
23cb4c4d9f
moving files around
2021-06-09 14:37:40 +05:30
Sandeep Singh
9d7ab618b8
Merge pull request #1654 from Mad-robot/master
...
Update CVE-2017-9506.yaml
2021-06-09 14:25:30 +05:30
sandeep
9045f0bb2a
misc changes
2021-06-09 14:23:32 +05:30
Prince Chaddha
0013f94807
Merge pull request #1631 from projectdiscovery/sap_update
...
SAP NetWeaver update
2021-06-09 14:17:51 +05:30
SaN ThosH
c5d4e5e400
Update CVE-2017-9506.yaml
2021-06-09 13:11:39 +05:30
sandeep
0cdfd0468f
Update CVE-2021-24285.yaml
2021-06-09 04:01:21 +05:30
sandeep
2953942c3c
Added CVE-2021-24285
2021-06-09 03:13:23 +05:30
sandeep
68642e226b
CVE-2018-1247 fix
2021-06-09 01:40:02 +05:30
sandeep
799af2e5fb
minor update
2021-06-09 01:23:13 +05:30
SaN ThosH
aca824b910
Update CVE-2019-2767.yaml
2021-06-08 21:59:59 +05:30
SaN ThosH
ff9b9a871c
Update CVE-2019-2767.yaml
2021-06-08 21:53:28 +05:30
SaN ThosH
41784d5261
Update CVE-2019-2767.yaml
2021-06-08 21:52:58 +05:30
SaN ThosH
169d64a3ff
Create CVE-2019-2767.yaml
2021-06-08 21:49:35 +05:30
Philippe Delteil
39555505db
Update CVE-2018-18069.yaml
...
The matching condition are not enough. The payload input is not checked for reflection. This creates false positives like this one
nuclei -debug -t nuclei-templates/cves/2018/CVE-2018-18069.yaml -u https://empleo.gbtspain.com
2021-06-05 14:12:50 -04:00
sandeep
14fa085d1b
more improvements
2021-06-05 12:15:32 +05:30
sandeep
55c0e1b103
Improved matchers for CVE-2020-6287
2021-06-05 10:29:59 +05:30
Sandeep Singh
c0103e0b8a
Merge pull request #1608 from Mad-robot/master
...
Create CVE-2020-6308.yaml
2021-06-05 00:04:56 +05:30
sandeep
83d359f6cf
updating tags
2021-06-05 00:02:33 +05:30
sandeep
11cb8b3106
Update CVE-2020-6308.yaml
2021-06-05 00:00:50 +05:30
sandeep
8e13733d34
moving files around
2021-06-04 16:30:31 +05:30
sandeep
0e3ed049ae
misc changes
2021-06-03 23:00:47 +05:30
sandeep
bdc803fd4b
Added CVE-2020-13927
2021-06-03 14:23:34 +05:30
sandeep
4a0e83037d
Update CVE-2020-11978.yaml
2021-06-03 13:58:41 +05:30
sandeep
6652b2ddb6
Added CVE-2020-11978
2021-06-03 13:57:09 +05:30
Prince Chaddha
d92568cd03
Merge pull request #1604 from Sicks3c/sicks3c
...
Added new path for CVE-2021-22122.yaml
2021-06-02 13:18:12 +05:30
Prince Chaddha
5269cc1c87
Update CVE-2021-22122.yaml
2021-06-02 13:17:00 +05:30
Noam Rathaus
e3f42066bf
Spelling
2021-06-02 09:39:35 +03:00
SaN ThosH
f28fdf610b
Create CVE-2020-6308.yaml
2021-06-02 11:39:27 +05:30
root
2678721174
Added new path for CVE-2021-22122.yaml
2021-06-02 00:06:20 +01:00
Sandeep Singh
23a59704e9
Merge pull request #1585 from pikpikcu/patch-171
...
Add CVE-2017-14535
2021-06-01 11:07:56 +05:30
sandeep
b021a0cf49
Misc changes
2021-06-01 11:06:13 +05:30
Geeknik Labs
fe1ab8385d
Update and rename exposures/logs/circarlife-system-log.yaml to cves/2018/CVE-2018-12634.yaml
2021-05-31 11:31:04 -05:00
sandeep
19b73df6be
Update CVE-2021-21985.yaml
2021-05-31 19:44:44 +05:30
sandeep
633644b159
Added CVE-2021-21985
2021-05-31 19:20:59 +05:30
sandeep
2cc30c771a
misc updates
2021-05-31 16:53:36 +05:30
PikPikcU
b0eca52c4b
Create CVE-2017-14535.yaml
2021-05-31 09:46:53 +00:00
sandeep
a39f71eeff
Fixing CVE-2018-0296
2021-05-31 09:28:47 +05:30
0xsapra
0d8c5607cb
CVE-2021-33564.yaml
2021-05-29 02:33:38 +05:30
Sandeep Singh
707d6720d1
Merge pull request #1543 from Morn98/CVE-2017-1000486
...
Add detection for JavaServer Faces and detection for vulnerable PrimeFaces 5.x EL Injection (CVE 2017 1000486)
2021-05-28 14:05:01 +05:30
sandeep
b7d103a740
Update CVE-2017-1000486.yaml
2021-05-28 10:27:21 +05:30
sandeep
450cf76976
Improved template
2021-05-28 10:25:48 +05:30
sandeep
01995c82ab
misc changes
2021-05-28 09:26:30 +05:30
PikPikcU
830a187e0d
Update CVE-2020-35736.yaml
2021-05-27 15:02:32 +00:00
PikPikcU
ddf6bcb7ca
Update CVE-2020-35736.yaml
2021-05-27 14:51:03 +00:00
PikPikcU
f981074e3f
Update CVE-2020-35736.yaml
2021-05-27 13:03:59 +00:00
PikPikcU
b7d8536a01
Create CVE-2020-35736.yaml
2021-05-27 12:56:22 +00:00
Moritz
0c0eaf114c
Update CVE-2017-1000486.yaml file to pass Checks
2021-05-27 11:38:23 +02:00
Moritz
24bcb23857
Add Detection for PrimeFaces 5.x EL Injection (CVE-2017-1000486)
2021-05-27 10:17:31 +02:00
Dhiyaneshwaran
633b9c39ee
Update CVE-2020-19625.yaml
2021-05-26 16:39:57 +05:30
sandeep
e36fd816da
Removing unused matcher
2021-05-25 05:21:23 +05:30
sandeep
cad836d34e
Added CVE-2020-15227
2021-05-22 17:22:45 +05:30
sandeep
26fc5c2dfa
Added CVE-2021-27850
2021-05-21 09:04:16 +05:30
Sandeep Singh
20eb4b5084
Merge pull request #1510 from geeknik/patch-96
...
Create CVE-2021-29622.yaml
2021-05-20 22:17:13 +05:30
Sandeep Singh
a320fd7720
Merge pull request #1494 from Techbrunch/magento-stuff
...
Security Checks for Magento - Templates and workflow
2021-05-20 20:04:25 +05:30
Geeknik Labs
67bf4fab3c
Update CVE-2021-29622.yaml
2021-05-20 13:14:28 +00:00
Geeknik Labs
dde1e5e736
Create CVE-2021-29622.yaml
2021-05-20 13:13:18 +00:00
Geeknik Labs
788fe276ed
Update CVE-2009-0545.yaml
2021-05-19 14:53:06 +00:00
Geeknik Labs
c55b2c58db
Create CVE-2009-0545.yaml
2021-05-19 14:40:37 +00:00
sandeep
74449f98ed
Removing additional requests
2021-05-19 06:50:49 +05:30
Geeknik Labs
0c6a3051e8
Create CVE-2020-36112.yaml
2021-05-18 22:56:54 +00:00
Techbrunch
776776621a
Added a few Magento related templates
2021-05-18 15:53:10 +02:00
Sandeep Singh
78abf0d8a2
Merge pull request #1480 from nrathaus/master
...
Changes to reference and description
2021-05-17 21:54:41 +05:30
sandeep
ce200510a6
changed for testing locally, reverting it back
2021-05-17 21:45:53 +05:30
sandeep
fa73765221
regex update
2021-05-17 21:42:41 +05:30
sandeep
cd9321d4cb
minor update
2021-05-17 19:32:49 +05:30
Geeknik Labs
0cf6e5507e
Update and rename cves/2021/CVE-2021-31800.yaml to cves/2014/CVE-2014-3744.yaml
2021-05-17 13:18:10 +00:00
Sandeep Singh
c0d13a6def
Merge pull request #1475 from Ganofins/patch-3
...
Create CVE-2021-24176.yaml
2021-05-16 22:15:39 +05:30
sandeep
1d9cdf949b
Update CVE-2021-24176.yaml
2021-05-16 22:12:33 +05:30
Noam Rathaus
ae6b2b42bf
Shorter check
2021-05-16 16:12:59 +03:00
Noam Rathaus
dbdf6e8b6e
Better description
2021-05-16 15:53:51 +03:00
Noam Rathaus
0d836a40f8
Much better description
2021-05-16 15:50:33 +03:00
Noam Rathaus
14a612623a
Some dots make it easier to ready
2021-05-16 15:49:02 +03:00
Noam Rathaus
6df4482c23
Make description more managable
2021-05-16 15:46:17 +03:00
Noam Rathaus
f659e820b7
Much better description and references
2021-05-16 15:44:54 +03:00
sandeep
e46fcb9e9a
Adding CVE-2021-27651
2021-05-16 15:10:08 +05:30
Ganesh Bagaria
4170b2d3e3
Create CVE-2021-24176.yaml
2021-05-16 12:59:32 +05:30
Prince Chaddha
5e2eaaf7a7
Update CVE-2021-31800.yaml
2021-05-16 02:16:34 +05:30
Geeknik Labs
4e1c4986f8
Create CVE-2021-31800.yaml
2021-05-15 18:56:07 +00:00
sandeep
fdec804118
Template fix
2021-05-15 19:25:57 +05:30
sandeep
7b4d736b94
Adding additional matcher
2021-05-14 22:15:50 +05:30
Geeknik Labs
77b95af240
Update CVE-2021-31537.yaml
2021-05-12 20:27:33 +00:00
Geeknik Labs
8365697de4
Update CVE-2021-31537.yaml
2021-05-12 20:25:22 +00:00
Geeknik Labs
7dcfccff74
Create CVE-2021-31537.yaml
2021-05-12 20:23:19 +00:00
sandeep
d63b9e1cb8
Adding missing tags
2021-05-13 00:54:59 +05:30
sandeep
ff93978e09
Removing status matcher to avoid missing true positives results.
2021-05-12 02:04:56 +05:30
sandeep
20eae78810
improved matcher
2021-05-12 00:32:16 +05:30
sandeep
ce680a546c
Improved matcher
2021-05-12 00:25:14 +05:30
sandeep
de70b699bc
More references
2021-05-11 23:47:49 +05:30
sandeep
1c04ba5abc
Additional matchers
2021-05-11 23:47:09 +05:30
Pina
79962222c5
cve-2017-12149 jboss deserialization rce
2021-05-11 12:07:05 +01:00
sandeep
682b9fbbc3
Adding status matcher
2021-05-11 02:48:45 +05:30
sandeep
bfddeccb31
path update
2021-05-11 02:42:34 +05:30
sandeep
1913076aef
Update CVE-2017-7269.yaml
2021-05-09 22:50:07 +05:30
Geeknik Labs
ce63f8ebea
Update CVE-2017-7269.yaml
2021-05-09 15:43:32 +00:00
Geeknik Labs
f6dc6a1376
Update CVE-2017-7269.yaml
2021-05-09 15:16:07 +00:00
sandeep
c0f5cf03ab
tags update
2021-05-09 20:41:52 +05:30
sandeep
f18a611286
Delete CVE-2018-0101.yaml
...
Temporarily removing as current matcher is not sufficient to match this accurately.
2021-05-09 17:12:50 +05:30
sandeep
988d09e2de
Added CVE-2021-28073
2021-05-07 20:30:23 +05:30
sandeep
5fca66c2a5
Added CVE-2020-9490
2021-05-07 19:24:44 +05:30
sandeep
c56111663f
Added CVE-2021-30461
2021-05-07 18:00:10 +05:30
Sandeep Singh
cee291e366
Merge pull request #1419 from dwisiswant0/add/GHSL-2020-325
...
Hotfix: Update operator
2021-05-07 16:46:43 +05:30
Dwi Siswanto
1f5cbe507c
Update operator
2021-05-06 16:24:08 +07:00
Sandeep Singh
1198c7e724
Merge pull request #1382 from dwisiswant0/add/GHSL-2020-325
...
Add CVE-2021-29441
2021-05-05 18:26:10 +05:30
sandeep
22f123ff79
template update
2021-05-05 18:23:07 +05:30
sandeep
a14c1ce233
Added strict matcher
2021-05-05 17:26:14 +05:30
sandeep
931f8833bf
removing weak matcher
2021-05-05 17:13:51 +05:30
sandeep
1d2a7b370f
Adding strict matcher
2021-05-05 17:04:46 +05:30
sandeep
c2c381787f
updating condition
2021-05-05 16:58:40 +05:30
Sandeep Singh
68a9a5f954
Merge pull request #1302 from projectdiscovery/CVE-2020-7247
...
Adding CVE-2020-7247 🔥 🔥
2021-05-05 00:02:23 +05:30
Sandeep Singh
f8ebcb9239
Merge pull request #1303 from projectdiscovery/oob-templates-update
...
OOB Template updates (WIP)
2021-05-05 00:01:55 +05:30
Sandeep Singh
81c7aac3ab
Merge pull request #1372 from projectdiscovery/CVE-2017-3506
...
Added CVE-2017-3506
2021-05-05 00:01:18 +05:30
Sandeep Singh
2080bfdab3
Merge pull request #1380 from projectdiscovery/cves/CVE-2017-12629
...
Added CVE-2017-12629
2021-05-05 00:00:43 +05:30
Dwi Siswanto
d2ea9d2da0
Using Get configurations open API endpoint
2021-05-04 13:18:55 +07:00
sandeep
a3c73e6aa3
updated workflow
2021-05-03 15:37:05 +05:30
sandeep
b2ffaa1c5b
Update CVE-2018-10141.yaml
2021-05-03 15:16:29 +05:30
sandeep
e94b507722
moving files around
2021-05-03 15:16:08 +05:30
Dhiyaneshwaran
15c7472891
Update CVE-2019-8446.yaml
2021-05-03 01:32:15 +05:30
Dhiyaneshwaran
cf8f9ac094
Update CVE-2019-8446.yaml
2021-05-03 01:23:15 +05:30
Dhiyaneshwaran
e7caffd3e7
Create CVE-2019-8446.yaml
2021-05-03 01:20:57 +05:30
sandeep
641e125c79
improved payload
2021-05-02 18:51:04 +05:30
Sandeep Singh
f838747ec1
Merge pull request #1393 from DhiyaneshGeek/master
...
ZyXEL NAS RCE,Oracle iPlanet Improper Authorization,NetScalar AAA Login Panel,ShareCenter Login Page
2021-05-02 17:18:15 +05:30
sandeep
534fcc8964
Update CVE-2020-9315.yaml
2021-05-02 17:14:03 +05:30
sandeep
837ca10f23
minor updates
2021-05-02 17:07:30 +05:30
Noam Rathaus
e76d10a3c7
Make reference visible
2021-05-02 08:51:18 +03:00
sandeep
a6b8fd6e67
Adding CVE-2019-13462
2021-05-02 00:24:21 +05:30
Dhiyaneshwaran
3ec1a82d82
Create CVE-2020-9315.yaml
2021-05-01 16:38:36 +05:30
Dhiyaneshwaran
3012822716
Create CVE-2020-9054.yaml
2021-05-01 16:15:03 +05:30
Noam Rathaus
bfc959a5a6
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-30 20:11:38 +03:00
sandeep
dad40cadfc
Temporarily moving to branch
2021-04-30 21:45:18 +05:30
Noam Rathaus
2860cdfb4a
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-29 08:38:11 +03:00
Dwi Siswanto
3a51f45be5
Update description
2021-04-28 21:01:25 +07:00
Prince Chaddha
56d09dda92
Update CVE-2021-29442.yaml
2021-04-28 18:30:55 +05:30
Dwi Siswanto
64a45f2439
Add CVE-2021-29442
2021-04-28 12:01:34 +07:00
Dwi Siswanto
486103e0d4
Add CVE-2021-29441
2021-04-28 11:54:36 +07:00
Noam Rathaus
1f2b2d05c1
False positive in the matcher, the content of the file has: "= 5.3.1 =" in it, not just a number on its own in addition, it has "1. ... something" in it causing FP
2021-04-27 16:09:27 +03:00
sandeep
daff7a614c
RAW requests
2021-04-27 16:55:09 +05:30
sandeep
7a2edf0085
Moving files around
2021-04-27 16:38:12 +05:30
sandeep
e9621ed0a0
Payload and matcher update
2021-04-27 16:37:02 +05:30
sandeep
68b06c50a4
Update CVE-2017-3506.yaml
2021-04-26 21:16:27 +05:30
sandeep
b6c1ab4ac8
Update CVE-2019-17382.yaml
2021-04-26 20:05:45 +05:30
Sandeep Singh
e257a691f3
Merge pull request #1359 from Open-Sec/patch-1
...
Update CVE-2019-17382.yaml
2021-04-26 20:04:03 +05:30
sandeep
73e17259fd
Added more payloads
2021-04-26 20:01:51 +05:30
sandeep
8ca815d191
Update CVE-2017-3506.yaml
2021-04-26 15:20:04 +05:30
sandeep
6eae4191d6
Added CVE-2017-3506
2021-04-26 15:18:57 +05:30
sandeep
8b7fbeb786
Added hostname
2021-04-25 13:02:41 +05:30
sandeep
564c7635ec
In template payload input and fixes
2021-04-24 09:29:34 +05:30
Open Sec
d6c0dfa5c5
Update CVE-2019-17382.yaml
...
Sometimes dashboards get deleted and asking just for an specific numbre will give a false negative
2021-04-23 16:15:16 -05:00
Sandeep Singh
4d3a55cfca
Merge pull request #1353 from geeknik/patch-75
...
Create CVE-2014-2321.yaml
2021-04-23 22:14:45 +05:30
sandeep
34d8d2a2c9
Update CVE-2014-2321.yaml
2021-04-23 22:12:45 +05:30
Sandeep Singh
7d9cb28f33
Merge pull request #1355 from geeknik/patch-77
...
Create CVE-2019-15859.yaml
2021-04-23 22:05:43 +05:30
Sandeep Singh
627448a876
Merge pull request #1354 from geeknik/patch-76
...
Create CVE-2017-15715.yaml
2021-04-23 22:03:42 +05:30
sandeep
c3379618ab
matching against uploaded string in file
2021-04-23 22:02:27 +05:30
sandeep
d9f32d0312
Update CVE-2017-15715.yaml
2021-04-23 21:48:57 +05:30
sandeep
f596d64a47
Update CVE-2014-4210.yaml
2021-04-23 19:41:38 +05:30
sandeep
6c3634a162
Update CVE-2017-15715.yaml
2021-04-23 19:27:38 +05:30
sandeep
7d0fea2bab
making it unique for every new scans
2021-04-23 19:22:23 +05:30
Geeknik Labs
b75885491f
Create CVE-2019-15859.yaml
2021-04-23 13:38:16 +00:00
Geeknik Labs
8fc4e54a36
Create CVE-2017-15715.yaml
2021-04-23 13:34:52 +00:00
Geeknik Labs
debd9dd2bc
Create CVE-2014-2321.yaml
2021-04-23 13:32:38 +00:00
sandeep
7203040e96
minor update
2021-04-23 18:51:52 +05:30
sandeep
ee74145a98
template update
2021-04-23 15:38:41 +05:30
Sandeep Singh
8a9c25f21c
Merge pull request #1329 from davidmckennirey/kentico-cms-deser-vuln
...
Add Kentico CMS Deserialization RCE (CVE-2019-10068)
2021-04-23 14:41:21 +05:30
sandeep
bfe1b00af3
Update CVE-2019-10068.yaml
2021-04-23 14:38:40 +05:30
sandeep
3608b6c162
Update CVE-2019-10068.yaml
2021-04-23 14:36:58 +05:30
sandeep
28e1900715
minor updates
2021-04-23 14:29:22 +05:30
sandeep
76c08284ce
Adding more references
2021-04-23 14:21:15 +05:30
sandeep
c539514cdd
Update CVE-2021-27905.yaml
2021-04-23 14:18:51 +05:30
sandeep
33c9b30143
Template fix and minor updates
2021-04-23 14:14:49 +05:30
Dhiyaneshwaran
6ca4f1c5d2
Create CVE-2021-27905
2021-04-23 12:53:49 +05:30
sandeep
5af8fe5e34
Moving into draft for better matching
2021-04-23 12:45:49 +05:30
sandeep
2f434d0440
Update CVE-2021-24146.yaml
2021-04-23 08:50:02 +05:30
sandeep
6cd5b9d35c
CVE update
2021-04-23 08:47:52 +05:30
sandeep
5ce3ebc7f7
Update CVE-2019-10068.yaml
2021-04-22 21:29:09 +05:30
Noam Rathaus
622748c6f6
Description and references
2021-04-22 12:06:27 +03:00
Noam Rathaus
71645c8c5c
Description and references
2021-04-22 12:04:36 +03:00
Noam Rathaus
7bd3bc65b8
Description and references
2021-04-22 12:02:19 +03:00
Noam Rathaus
4c048c4de1
Description and reference
2021-04-22 11:59:05 +03:00
sandeep
65b6c57e9f
Temporarily removing this template
2021-04-22 09:46:29 +05:30
David McKennirey
2c8fca0c1d
remove trailing spaces
2021-04-21 23:06:29 -04:00
David McKennirey
1a01c80dd8
Add Kentico CMS Deserialization RCE (CVE-2019-10068)
2021-04-21 22:57:28 -04:00
Prince Chaddha
ced9938646
Merge pull request #1215 from projectdiscovery/princechaddha-patch-3
...
Create CVE-2015-8399.yaml
2021-04-21 23:57:24 +05:30
Prince Chaddha
98dbbe4d0f
Merge pull request #1225 from projectdiscovery/princechaddha-patch-8
...
Create CVE-2017-8917.yaml
2021-04-21 23:57:11 +05:30
Prince Chaddha
a6c178bd90
Merge pull request #1226 from projectdiscovery/princechaddha-patch-9
...
Create CVE-2015-7297.yaml
2021-04-21 23:56:56 +05:30
Prince Chaddha
b5d16381de
Merge pull request #1220 from projectdiscovery/princechaddha-patch-5
...
Create CVE-2014-3704.yaml
2021-04-21 23:55:51 +05:30
Prince Chaddha
51ae3a6d1f
Update CVE-2015-8399.yaml
2021-04-21 23:55:23 +05:30
Prince Chaddha
fb4020a894
Merge pull request #1245 from projectdiscovery/princechaddha-patch-13
...
Create CVE-2018-8770.yaml
2021-04-21 23:53:08 +05:30
Prince Chaddha
bc4e678ed1
Merge pull request #1235 from projectdiscovery/princechaddha-patch-10
...
Create CVE-2018-17246.yaml
2021-04-21 23:43:01 +05:30
Prince Chaddha
2681015072
Merge pull request #1278 from projectdiscovery/princechaddha-patch-15
...
Create CVE-2017-5521.yaml
2021-04-21 23:42:18 +05:30
sandeep
0e2a270a11
minor update
2021-04-21 22:08:46 +05:30
jeyaseelan8
5b598fb291
Add files via upload
2021-04-21 21:05:47 +05:30
Sandeep Singh
ba47278ff6
Merge pull request #1319 from Al-AizHashim/master
...
CVE-2018-13379 traversal path is corrected
2021-04-21 12:59:33 +05:30
sandeep
6cb0b89738
minor update
2021-04-21 12:46:44 +05:30
SaN ThosH
f91c579fb3
Update CVE-2021-28480.yaml
2021-04-21 12:24:19 +05:30
Al-AizHashim
c2a990a0d9
CVE-2018-13379 traversal path is corrected
2021-04-21 02:15:12 +03:00
SaN ThosH
beb1ac700e
Update CVE-2021-28480.yaml
2021-04-21 02:51:05 +05:30
SaN ThosH
8e8ef1a0dd
Update CVE-2021-28480.yaml
2021-04-21 02:42:50 +05:30
SaN ThosH
5a8949554c
Create CVE-2021-28480.yaml
2021-04-21 02:34:10 +05:30
SaN ThosH
d89e613dc6
Update CVE-2019-17558.yaml
2021-04-21 00:27:22 +05:30
sandeep
9117c91bd0
Update CVE-2017-12635.yaml
2021-04-19 14:28:00 +05:30
sandeep
385aff0b7c
Update CVE-2017-9506.yaml
2021-04-19 13:17:56 +05:30
Noam Rathaus
3a8edbffe6
I think the 'words' were placed in the wrong place
2021-04-19 09:32:33 +03:00
Noam Rathaus
b1f15e3c29
Not familar with the term "RPE" tried to look it up, can't find it, so I think this should be RCE
2021-04-19 08:31:33 +03:00
sandeep
de4f25fce7
OOB Template updates (WIP)
2021-04-18 22:06:07 +05:30
Sandeep Singh
866ad44553
Merge pull request #1301 from pikpikcu/patch-150
...
Create CVE-2019-17270
2021-04-18 20:53:47 +05:30
sandeep
64e3e49ea2
template name update
2021-04-18 20:47:43 +05:30
Sandeep Singh
be92728c36
Merge pull request #1300 from nrathaus/master
...
Descriptions and references
2021-04-18 20:41:47 +05:30
sandeep
af3905d2db
Update CVE-2020-7247.yaml
2021-04-18 20:18:32 +05:30
sandeep
dad0d1b3a4
Adding CVE-2020-7247
2021-04-18 20:15:41 +05:30
sandeep
a9aba00d42
Update CVE-2011-0049.yaml
2021-04-18 20:09:39 +05:30
Noam Rathaus
0ee0c0870f
Description and References
2021-04-18 16:02:50 +03:00
Noam Rathaus
4beb5e8495
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-18 16:00:42 +03:00
Noam Rathaus
d26f311cdf
Descriptions and references
2021-04-18 16:00:27 +03:00
PikPikcU
6597c83c02
Create CVE-2011-0049.yaml
2021-04-18 10:16:06 +00:00
sandeep
8652ce2262
minor update
2021-04-17 21:24:29 +05:30
Sandeep Singh
44c26e52d5
Merge pull request #1130 from pikpikcu/patch-132
...
Added CVE-2017-12542
2021-04-17 21:19:53 +05:30
sandeep
41d1d4258b
Update CVE-2017-12542.yaml
2021-04-17 21:18:58 +05:30
Sandeep Singh
0ed9083f12
Merge pull request #1231 from Mad-robot/patch-1
...
Update CVE-2019-17558.yaml
2021-04-17 21:04:15 +05:30
Sandeep Singh
954fe60b85
Merge pull request #1286 from geeknik/patch-66
...
Create CVE-2021-3374.yaml
2021-04-17 20:45:29 +05:30
Sandeep Singh
216a40129c
Merge pull request #1288 from pikpikcu/patch-148
...
Create CVE-2015-1880
2021-04-17 19:40:57 +05:30
sandeep
15bbb07505
Update CVE-2015-1880.yaml
2021-04-17 19:40:44 +05:30
sandeep
6bf828d61d
Update CVE-2021-28937.yaml
2021-04-16 02:21:48 +05:30
Geeknik Labs
aa2ac6471d
Update CVE-2021-28937.yaml
2021-04-15 20:31:01 +00:00
Geeknik Labs
e7a1fde388
Update CVE-2021-28937.yaml
2021-04-15 20:24:24 +00:00
Geeknik Labs
6edf8c3a8b
Create CVE-2021-28937.yaml
2021-04-15 20:20:27 +00:00
Prince Chaddha
d4e78af66b
Update CVE-2020-19625.yaml
2021-04-15 23:37:47 +05:30
Geeknik Labs
3ebf76685a
Create CVE-2020-19625.yaml
2021-04-15 13:16:11 +00:00
PikPikcU
79428b13a5
Create CVE-2015-1880.yaml
2021-04-15 08:28:35 +00:00
Geeknik Labs
a6417c6fa5
Update CVE-2021-3374.yaml
2021-04-14 23:54:48 +00:00
Geeknik Labs
de7321344f
Create CVE-2021-3374.yaml
2021-04-14 20:56:03 +00:00
PD-Team
9e87970190
Merge pull request #1246 from projectdiscovery/princechaddha-patch-14
...
Adding CVE-2009-1151
2021-04-14 17:41:22 +05:30
sandeep
29f1bdcdf7
template updates
2021-04-14 17:34:59 +05:30
Noam Rathaus
e732259392
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-14 10:53:12 +03:00
sandeep
3eea755de1
Adding status matcher
2021-04-14 01:37:04 +05:30
Prince Chaddha
155987f7a7
Update CVE-2017-5521.yaml
2021-04-14 01:33:05 +05:30
Prince Chaddha
1073ba9234
Create CVE-2017-5521.yaml
2021-04-14 01:24:49 +05:30
Dwi Siswanto
eed5fb11da
Add CVE-2020-35846
2021-04-14 02:45:06 +07:00
Dwi Siswanto
8ab8a1d53e
Add CVE-2020-35848
2021-04-14 02:30:08 +07:00
Dwi Siswanto
65a7eae942
Add CVE-2020-35847
2021-04-14 02:19:41 +07:00
Noam Rathaus
b0c0a3063a
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-13 17:02:10 +03:00
Prince Chaddha
e72784eb53
Merge pull request #1249 from geeknik/patch-67
...
Create CVE-2018-2894.yaml
2021-04-13 18:10:38 +05:30
Prince Chaddha
4196c94ac5
Update CVE-2018-2894.yaml
2021-04-13 18:08:13 +05:30
Noam Rathaus
ed8ea816eb
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-12 09:35:53 +03:00
PD-Team
a5f19bdf4f
Merge pull request #1250 from DhiyaneshGeek/master
...
CVE-2021-30151
2021-04-11 17:55:49 +05:30
sandeep
b0b45dd599
Update CVE-2021-30151.yaml
2021-04-11 17:51:41 +05:30
sandeep
b05c8f402b
Added CVE-2020-15500
2021-04-11 16:12:21 +05:30
sandeep
a4ffb88b17
Added CVE-2018-7422
2021-04-11 15:49:26 +05:30
PikPikcU
f0a7b5da37
Update CVE-2017-12542.yaml
2021-04-10 23:48:05 +00:00
Prince Chaddha
43e59a577e
Update CVE-2021-30151.yaml
2021-04-11 01:00:49 +05:30
Prince Chaddha
4c9cbc1692
Update CVE-2021-30151.yaml
2021-04-11 00:57:38 +05:30
Dhiyaneshwaran
1692ef1821
Update CVE-2021-30151.yaml
2021-04-10 23:47:02 +05:30
Dhiyaneshwaran
1e0b6ea383
Update CVE-2021-30151.yaml
2021-04-10 23:43:37 +05:30
Dhiyaneshwaran
3e3db1c972
Update CVE-2021-30151.yaml
2021-04-10 23:37:38 +05:30
Dhiyaneshwaran
e87a0671ee
Create CVE-2021-30151.yaml
2021-04-10 22:58:27 +05:30
Geeknik Labs
32a3410ff8
Create CVE-2018-2894.yaml
2021-04-10 13:44:41 +00:00
Prince Chaddha
8e5c1150a8
Update CVE-2019-18394.yaml
2021-04-10 03:49:09 +05:30
Prince Chaddha
abad438c3b
Create CVE-2018-8770.yaml
2021-04-10 03:40:04 +05:30
Prince Chaddha
a4ab51f7de
Update CVE-2018-17246.yaml
2021-04-09 15:44:40 +05:30
sandeep
0b746c97c2
Added additional check to avoid possible false positive
2021-04-09 13:13:36 +05:30
Prince Chaddha
8e74c7f37a
Update CVE-2018-17246.yaml
2021-04-09 02:35:42 +05:30
Prince Chaddha
bfc477e817
Create CVE-2018-17246.yaml
2021-04-09 02:31:08 +05:30
sandeep
d4025787ca
misc changes
2021-04-08 15:30:03 +05:30
SaN ThosH
e6b81affd3
Update CVE-2019-17558.yaml
2021-04-08 15:25:15 +05:30
SaN ThosH
aacf7c8cd3
Update CVE-2019-17558.yaml
2021-04-08 15:16:32 +05:30
SaN ThosH
c2751f24d3
Update CVE-2019-17558.yaml
2021-04-08 15:14:25 +05:30
Prince Chaddha
a3510d29a0
Create CVE-2017-7921.yaml
2021-04-07 22:30:37 +05:30
Prince Chaddha
e314a1273b
Create CVE-2015-7297.yaml
2021-04-07 22:22:11 +05:30
Prince Chaddha
0e07c2d618
Create CVE-2017-8917.yaml
2021-04-07 22:09:33 +05:30
Prince Chaddha
578ec0bac1
Create CVE-2018-9995.yaml
2021-04-07 18:03:31 +05:30
Prince Chaddha
bcab1f76c3
Create CVE-2014-3704.yaml
2021-04-07 17:52:53 +05:30
PD-Team
2d3051aea1
Merge pull request #1207 from nrathaus/master
...
Fixed some template issues
2021-04-07 14:27:19 +05:30
sandeep
7bc9df16d7
misc fix
2021-04-07 14:26:16 +05:30
Prince Chaddha
8575e24234
Create CVE-2015-8399.yaml
2021-04-07 01:07:06 +05:30
Julian Vilas
7b44702946
Remove duplicated CVE-2020-26073 template
2021-04-06 15:40:01 +02:00
Noam Rathaus
9f5d6c5eaa
Spelling
2021-04-06 13:43:41 +03:00
Noam Rathaus
989ee9d9dd
Spelling
2021-04-06 13:38:03 +03:00
Noam Rathaus
098d3157e5
Relevant reference
2021-04-06 13:27:39 +03:00
Noam Rathaus
ac932b6c33
description
2021-04-06 13:25:50 +03:00
Noam Rathaus
2de36ad7b4
description and reference
2021-04-06 13:22:54 +03:00
Noam Rathaus
b6b0b3dfda
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-06 13:19:07 +03:00
sandeep
7ae63d0899
Adding missing host for network based templates
2021-04-06 12:58:03 +05:30
sandeep
8fdfc64e54
misc tag updates
2021-04-06 12:16:11 +05:30
Noam Rathaus
1790babdd4
Better reference
2021-04-04 12:49:07 +03:00
PD-Team
38decfa33d
Merge pull request #1190 from dwisiswant0/add/cves/2021/CVE-2021-21402
...
Add CVE-2021-21402
2021-04-02 18:05:38 +05:30
sandeep
3f8303a1de
Update CVE-2020-24550.yaml
2021-04-02 14:31:43 +05:30
Dhiyaneshwaran
7111fb4bbe
Create CVE-2020-24550.yaml
2021-04-02 14:11:43 +05:30
Dwi Siswanto
c2c7c9b0c2
Add header matcher
2021-04-02 07:17:18 +07:00
Dwi Siswanto
efae3ccd11
Update vulnerable paths
2021-04-02 07:11:37 +07:00
Dwi Siswanto
bb33d0597b
Update routes
2021-04-02 05:28:27 +07:00
Dwi Siswanto
029706a939
Add more vulnerable path
2021-04-02 05:17:29 +07:00
Dwi Siswanto
79c0046596
Update severity
2021-04-02 05:17:07 +07:00
Dwi Siswanto
ad69b05f11
🔥 Add CVE-2021-21402
2021-04-02 05:16:53 +07:00
Noam Rathaus
198e192137
Description
2021-04-01 17:16:07 +03:00
Noam Rathaus
3c8ec933e7
Description
2021-04-01 17:09:29 +03:00
sandeep
15aba2ca14
improved matcher
2021-04-01 14:31:34 +05:30
PD-Team
8d022bcbf7
Merge pull request #1058 from dwisiswant0/add/cves/2018/CVE-2018-0101
...
Add CVE-2018-0101
2021-04-01 14:02:28 +05:30
sandeep
06827e41c9
Update CVE-2018-0101.yaml
2021-04-01 14:01:09 +05:30
sandeep
b7efe0b3c9
minor fixes and improvements
2021-04-01 13:59:23 +05:30
PD-Team
f5321b040f
Merge branch 'master' into patch-30
2021-04-01 13:33:08 +05:30
sandeep
b273765752
minor changes
2021-04-01 13:28:30 +05:30
sandeep
5df627a909
Update CVE-2020-25078.yaml
2021-04-01 12:53:55 +05:30
PikPikcU
052c61ba31
Update CVE-2020-25078.yaml
2021-04-01 03:49:46 +00:00
PikPikcU
3735db2221
Create CVE-2020-25078.yaml
2021-04-01 03:35:06 +00:00
sandeep
570cc1a220
Update CVE-2021-21975.yaml
2021-03-31 22:45:42 +05:30
Prince Chaddha
c6bb3b0151
Merge pull request #1164 from geeknik/patch-34
...
Create CVE-2020-23517.yaml
2021-03-31 15:39:35 +05:30
PD-Team
ee3930525c
Merge pull request #1166 from pikpikcu/patch-136
...
Add CVE-2020-15148
2021-03-31 15:36:49 +05:30
sandeep
fd763a3d69
Update CVE-2020-15148.yaml
2021-03-31 15:35:43 +05:30
sandeep
063d685ac5
Update CVE-2021-21975.yaml
2021-03-31 06:27:33 +05:30
sandeep
94a4c87c3f
safe matcher
2021-03-31 06:22:10 +05:30
daemonum
8f7e7cba24
Add CVE-2021-21975
2021-03-31 02:43:36 +03:00
Noam Rathaus
8cecc0f7d0
More description
2021-03-30 15:21:02 +03:00
Noam Rathaus
c20d89466a
Description and referenes
2021-03-30 15:10:17 +03:00
Noam Rathaus
98fd86e313
description and reference
2021-03-30 15:01:26 +03:00
Noam Rathaus
6be989e58f
Description and references
2021-03-30 15:00:27 +03:00
Noam Rathaus
b07a3bab2f
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-03-30 10:18:12 +03:00
Noam Rathaus
4f7f8a2291
Missing reference
2021-03-30 10:16:57 +03:00
Noam Rathaus
5976870cfd
Spelling mistake
2021-03-30 09:51:17 +03:00
Noam Rathaus
b0a9be9d08
Description
2021-03-30 09:50:02 +03:00
Noam Rathaus
95899eee43
Missing condition
2021-03-30 09:49:14 +03:00
Noam Rathaus
fba16d5f49
Description
2021-03-30 09:27:35 +03:00
PikPikcU
4d1addb6f1
Create CVE-2020-15148.yaml
2021-03-29 20:47:04 +00:00
Geeknik Labs
b25ba806dc
Update CVE-2017-17562.yaml
2021-03-29 20:04:26 +00:00
Geeknik Labs
4363fcded1
Update CVE-2020-23517.yaml
2021-03-29 19:37:59 +00:00
Geeknik Labs
8ec0053387
Create CVE-2020-23517.yaml
2021-03-29 15:52:28 +00:00
sandeep
4f7faf94ff
Create CVE-2020-28208.yaml
2021-03-29 17:09:45 +05:30
Geeknik Labs
7b3c6c12a6
Create CVE-2017-17562.yaml
...
WIP
2021-03-27 21:22:33 +00:00
Dwi Siswanto
2925d53ab9
Fix wrong identations
2021-03-28 02:09:26 +07:00
Dwi Siswanto
b804f5f676
Add more possible crash 5xx status codes
2021-03-28 02:07:23 +07:00
Dwi Siswanto
53d8ab8322
Using DSL type of matcher
2021-03-28 02:06:37 +07:00
Dwi Siswanto
e80e67a592
Using RAW requests
2021-03-28 02:06:04 +07:00
sandeep
cf99b0a32b
Update CVE-2019-9955.yaml
2021-03-26 14:12:05 +05:30
Noam Rathaus
e942511845
description and relevant reference
2021-03-26 09:53:07 +03:00
Noam Rathaus
33755631fe
description and reference
2021-03-26 09:52:14 +03:00
Noam Rathaus
95afdb43d7
description and reference
2021-03-26 09:49:26 +03:00
Noam Rathaus
957fca9fba
Description and reference
2021-03-26 09:47:35 +03:00
Noam Rathaus
68cee6ae86
Another reference
2021-03-26 09:44:13 +03:00
Noam Rathaus
80b4647f7c
Reference and description
2021-03-26 09:43:58 +03:00
Noam Rathaus
66f141f733
Better reference
2021-03-25 12:08:15 +02:00
Noam Rathaus
b84a491478
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-03-25 12:06:18 +02:00
Noam Rathaus
1107344fab
Reference and description
2021-03-25 12:05:45 +02:00
Noam Rathaus
826cfa89e3
Reference and description
2021-03-25 12:02:27 +02:00
Noam Rathaus
cd1723f699
Description and references
2021-03-25 12:00:46 +02:00
Mzack9999
351167e91f
removing redundant boolean check
2021-03-25 00:28:50 +01:00
sandeep
282dfa1c5c
Added CVE-2015-3337
2021-03-25 02:21:43 +05:30
PD-Team
4bbbd79b70
Merge pull request #1124 from alanbriangh/master
...
Add CVE-2020-35489 Detection
2021-03-25 01:29:36 +05:30
sandeep
904c9666d1
matcher and workflow update
2021-03-25 01:28:03 +05:30
PD-Team
5d8bf70470
Merge pull request #1137 from nrathaus/master
...
Description and References on some templates were missing
2021-03-24 23:02:15 +05:30
SaN ThosH
bc5ab99237
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
SaN ThosH
8e781f97d0
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
sandeep
7a8d56ee65
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
sandeep
635cc7fae7
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
SaN ThosH
9987dc0c36
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
SaN ThosH
33e3fac8da
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
SaN ThosH
c55a72a168
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
SaN ThosH
38daf751a3
Update CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
SaN ThosH
3876cb6b55
Create CVE-2021-26295.yaml
2021-03-24 22:57:35 +05:30
sandeep
8b4c8b8549
wrong branch 😅
2021-03-24 22:46:39 +05:30
sandeep
423be58952
Update CVE-2020-17453.yaml
2021-03-24 22:42:56 +05:30
sandeep
8c2b41e7bd
Merge branch 'master' of https://github.com/Mad-robot/nuclei-templates into pr/1132
2021-03-24 22:32:03 +05:30
SaN ThosH
92cda223eb
Create CVE-2020-17453.yaml
2021-03-24 21:05:32 +05:30
sandeep
362858a6c9
Added CVE-2016-10033
2021-03-24 17:03:21 +05:30
sandeep
86ad55d66f
Adding to workflow
2021-03-24 14:07:22 +05:30
sandeep
dbaf445933
Update CVE-2021-26295.yaml
2021-03-24 13:02:29 +05:30
sandeep
f04bd785db
Update CVE-2021-26295.yaml
2021-03-24 13:00:26 +05:30
Noam Rathaus
be600fd099
References
2021-03-24 09:01:00 +02:00
Noam Rathaus
f56f240951
Descriptions and references
2021-03-24 09:00:21 +02:00
Noam Rathaus
314a487512
Description
2021-03-24 08:56:49 +02:00
Noam Rathaus
4d7b0396ae
Description
2021-03-24 08:54:09 +02:00
Noam Rathaus
6e7314ac41
Better description
2021-03-24 08:51:54 +02:00
Noam Rathaus
532c5373a1
Missing description
2021-03-24 08:50:41 +02:00
Noam Rathaus
904f156121
Missing description
2021-03-24 08:50:31 +02:00
Noam Rathaus
93bc3a76b1
Better references and description
2021-03-24 08:48:11 +02:00
SaN ThosH
3f3357f2a6
Update CVE-2021-26295.yaml
2021-03-23 21:48:13 +05:30
SaN ThosH
a2ab8b67e5
Update CVE-2021-26295.yaml
2021-03-23 21:42:58 +05:30
SaN ThosH
744e4c504c
Update CVE-2021-26295.yaml
2021-03-23 21:42:35 +05:30
SaN ThosH
d392432b15
Update CVE-2021-26295.yaml
2021-03-23 21:32:09 +05:30
SaN ThosH
a8149d0cfc
Create CVE-2021-26295.yaml
2021-03-23 21:30:15 +05:30
Dwi Siswanto
e49b4a7d8a
✏️ Add wordpress to tags
2021-03-23 19:57:15 +07:00
Dwi Siswanto
2e233a0aa2
🔨 Update matchers
2021-03-23 19:56:56 +07:00
Dwi Siswanto
53c0e1e954
🔥 Add CVE-2017-1000170
2021-03-23 19:56:42 +07:00
PikPikcU
832a39f418
Update CVE-2017-12542.yaml
2021-03-23 11:33:07 +00:00
PikPikcU
4244af34d2
Create CVE-2017-12542.yaml
2021-03-23 11:26:08 +00:00
PD-Team
7105ac9c46
Merge pull request #1127 from nrathaus/master
...
Prettify tests
2021-03-23 03:54:09 +05:30
Noam Rathaus
e8ef1c198e
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-03-22 16:34:00 +02:00
sandeep
ca66fa321b
Update CVE-2021-22986.yaml
2021-03-22 18:21:42 +05:30
Noam Rathaus
ee8c34576c
Description and reference
2021-03-22 10:55:38 +02:00
Noam Rathaus
555dba6268
References
2021-03-22 10:54:22 +02:00
Noam Rathaus
301dd3c243
Add reference
2021-03-22 10:51:39 +02:00
Noam Rathaus
f5831c3f97
Add description
2021-03-22 10:49:07 +02:00
Noam Rathaus
704a217663
Make references visible
2021-03-22 10:22:27 +02:00
Noam Rathaus
a8f3e09621
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-03-22 09:28:32 +02:00
sandeep
5ae86fcaef
Update CVE-2020-35489.yaml
2021-03-22 01:22:38 +05:30
sandeep
1f8170332a
Update CVE-2020-35489.yaml
2021-03-22 01:21:07 +05:30
sandeep
339077ff43
misc fixes
2021-03-22 01:19:30 +05:30
Alan Brian
f7a508ad1e
FIX: Indentation
2021-03-21 15:08:38 -03:00