2fd7baf1bf
Create ems-sqli.yaml
2022-07-21 12:39:06 +05:30
9e829668a4
Update onlinecms-xss.yaml
2022-07-20 23:52:19 +05:30
acc357f591
Update onlinecms-xss.yaml
2022-07-20 23:43:48 +05:30
d88160b8d5
Update surrealtodo-lfi.yaml
2022-07-20 23:21:03 +05:30
14e430b3df
Update surrealtodo-lfi.yaml
2022-07-20 23:20:37 +05:30
9f28a9c8e3
Create surrealtodo-lfi.yaml
2022-07-20 23:14:17 +05:30
ef1a1f0f44
Create onlinecms-xss.yaml
2022-07-20 22:14:07 +05:30
bd0c9a9163
Update loancms-sqli.yaml
2022-07-20 18:11:03 +05:30
8bca76cf6d
Update loancms-sqli.yaml
2022-07-20 18:08:25 +05:30
2d71d7a288
Create loancms-sqli.yaml
2022-07-20 16:37:42 +05:30
4b6aa7df81
Update devalcms-xss.yaml
2022-07-20 14:42:25 +05:30
289f1731bb
Update devalcms-xss.yaml
2022-07-20 14:37:43 +05:30
0f209ca08c
Update devalcms-xss.yaml
2022-07-20 14:31:44 +05:30
9304c58b2c
Create devalcms-xss.yaml
2022-07-20 14:26:54 +05:30
8279d7b4e7
Merge pull request #4854 from arafatansari/patch-14
...
Create eris-xss.yaml
2022-07-19 14:58:37 +05:30
cba12fe78d
Update eris-xss.yaml
2022-07-19 14:25:14 +05:30
920ee7ea97
Update eris-xss.yaml
2022-07-18 21:59:07 +05:30
b7b317dc02
Merge pull request #4461 from gy741/rule-add-v113
...
Create cisco-rv-series-rce.yaml
2022-07-18 20:52:16 +05:30
099e9ede6e
Update cisco-rv-series-rce.yaml
2022-07-18 20:49:58 +05:30
d004cb9b65
Create eris-xss.yaml
2022-07-18 18:14:09 +05:30
38b1247fcf
Update cisco-rv-series-rce.yaml
2022-07-18 15:22:26 +05:30
279a418e17
Merge pull request #4836 from gy741/v119
...
Create carel-bacnet-gateway-directory-traversal.yaml
2022-07-18 14:15:54 +05:30
1318dbbae8
Update and rename carel-bacnet-gateway-directory-traversal.yaml to carel-bacnet-gateway-traversal.yaml
2022-07-18 13:47:02 +05:30
22e47c889b
Merge pull request #4847 from ritikchaddha/Update-metadata-query
...
Log4j templates enhancement
2022-07-18 12:15:49 +05:30
a1409f1f2a
Update unifi-network-log4j-rce.yaml
2022-07-18 12:04:32 +05:30
928abe95cc
Update unifi-network-log4j-rce.yaml
2022-07-16 22:37:16 +05:30
c7b482532d
Update elasticsearch5-log4j-rce.yaml
2022-07-16 18:04:04 +05:30
236912a8fa
Create elasticsearch5-log4j-rce.yaml
2022-07-16 12:21:07 +05:30
549c969d5f
Create carel-bacnet-gateway-directory-traversal.yaml
...
The device suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-07-16 10:59:44 +09:00
67df84f78a
Update vmware-siterecovery-log4j-rce.yaml
2022-07-15 17:09:23 +05:30
8d163b4730
Merge pull request #4832 from projectdiscovery/vmware-log4j-rce
...
Create vmware-log4j-rce.yaml
2022-07-15 16:09:14 +05:30
7670b03504
Update and rename vmware-log4j-rce.yaml to vmware-siterecovery-log4j-rce.yaml
2022-07-15 16:04:49 +05:30
9241b0d568
Update opennms-log4j-jndi-rce.yaml
2022-07-15 15:46:29 +05:30
69f0e7675a
Update opennms-log4j-jndi-rce.yaml
2022-07-15 10:23:51 +05:30
a508c28178
Create vmware-log4j-rce.yaml
2022-07-14 23:00:42 +05:30
918a56d516
Update opennms-log4j-jndi-rce.yaml
2022-07-14 19:48:13 +05:30
1c66b826b3
Update opennms-log4j-jndi-rce.yaml
2022-07-14 19:46:46 +05:30
35d13abbb0
Create opennms-log4j-jndi-rce.yaml
2022-07-14 10:31:10 -03:00
cf2d464bee
Update icewarp-webclient-rce.yaml
2022-07-10 15:07:19 +05:30
2863e385a3
Update opensis-lfi.yaml
2022-07-10 15:07:18 +05:30
0f7699ef22
Merge pull request #4783 from uomogrande/icewarp-openredirects
...
Added icewarp-openredirects Template
2022-07-09 22:20:56 +05:30
7789261fce
Update icewarp-openredirects.yaml
2022-07-09 22:11:36 +05:30
fd9fb82a61
Update icewarp-openredirects.yaml
2022-07-09 14:55:04 +05:30
29acb27dc6
Update icewarp-openredirects.yaml
2022-07-09 14:52:47 +05:30
2a7c7f816a
Added icewarp-openredirects Template
2022-07-08 12:58:41 +02:00
ab4b46a0e5
Create elFinder-path-traversal.yaml
2022-07-05 08:40:51 +05:30
1bd96f8902
Update and rename misconfiguration/vulnerabilities/other/umbraco-base-ssrf.yaml to vulnerabilities/other/umbraco-base-ssrf.yaml
2022-07-05 08:23:51 +05:30
84aedb39bc
Merge pull request #4736 from ritikchaddha/Update-shodan/fofa-links-to-search-query
...
Update shodan/fofa links to query
2022-07-04 16:56:06 +05:30
1e7f5d7bed
Classify ( #4735 )
...
* Auto Generated CVE annotations [Sun May 15 12:16:57 UTC 2022] 🤖
* Auto Generated CVE annotations [Mon Jun 6 03:02:54 UTC 2022] 🤖
* classify these templates
* misc update
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-07-04 14:17:10 +05:30
2a4070fc15
Update shodan/fofa links to query
2022-07-04 14:16:15 +05:30
3a2f976390
Merge pull request #4720 from ritikchaddha/patch-96
...
Create siteminder-dom-based-xss.yaml
2022-07-01 19:03:05 +05:30
529ad9f336
Update siteminder-dom-xss.yaml
2022-07-01 19:01:25 +05:30
03b780fdf3
Update and rename siteminder-dom-based-xss.yaml to siteminder-dom-xss.yaml
2022-07-01 18:59:21 +05:30
0db06d6b15
Dead Site Removal ( #4641 )
...
* Deleted buffalo-config-injection.yaml
Add reference from buffalo-config-injection.yaml to CVE-2021-20091.yaml
* Delete vulnerabilities/other/buffalo-config-injection.yaml
* Link cleanups
* Change links to Secunia to point to archive.org
* Additonal link cleanup
* replace securitytracker.com links with archive.org links
2022-07-01 15:32:07 +05:30
da535f4c0c
Create siteminder-dom-based-xss.yaml
2022-07-01 14:10:29 +05:30
42bcf03924
Merge pull request #4710 from ritikchaddha/patch-92
...
Create parallels-hsphere-xss.yaml
2022-06-30 18:02:29 +05:30
6f6909cb38
template syntax fixes ( #4711 )
2022-06-30 16:49:17 +05:30
d7e182c693
Update parallels-hsphere-xss.yaml
2022-06-30 16:30:01 +05:30
4c862b96cf
Create parallels-hsphere-xss.yaml
2022-06-30 16:23:38 +05:30
b7d0d6f21a
Update zcms-v3-sqli.yaml
2022-06-30 08:50:00 +05:30
d81a48e31e
Update xdcms-sqli.yaml
2022-06-30 08:48:00 +05:30
28e6e03fc5
Update wuzhicms-sqli.yaml
2022-06-30 08:46:19 +05:30
be8560b788
Update seacms-sqli.yaml
2022-06-30 08:43:38 +05:30
9ecfdf9a0a
Update etouch-v2-sqli.yaml
2022-06-30 08:35:53 +05:30
967628302d
Update phpok-sqli.yaml
2022-06-30 08:32:35 +05:30
8ddb1d70da
Update yonyou-u8-oa-sqli.yaml
2022-06-30 08:32:02 +05:30
9b793127c3
Update phpok-sqli.yaml
2022-06-30 08:31:16 +05:30
5729e6486a
Update finecms-sqli.yaml
2022-06-30 08:30:16 +05:30
b1f9fc94d6
Update 74cms-sqli.yaml
2022-06-30 08:29:32 +05:30
f1a0cc6cc5
Update duomicms-sql-injection.yaml
2022-06-30 08:24:58 +05:30
8ab77083cc
Update duomicms-sql-injection.yaml
2022-06-30 08:18:22 +05:30
a5e29b684a
lint fixes
2022-06-28 19:20:23 +05:30
bd3cfa7e4a
Update duomicms-sql-injection.yaml
2022-06-28 18:29:31 +05:30
29d7c43cdb
Update 74cms-sqli.yaml
2022-06-28 15:23:44 +05:30
51aadcdb36
Update yonyou-u8-oa-sqli.yaml
2022-06-28 15:14:07 +05:30
913f3239ab
Update finecms-sqli.yaml
2022-06-28 14:57:21 +05:30
8234a29c97
Update phpok-sqli.yaml
2022-06-28 14:22:58 +05:30
74463d0e9f
Merge pull request #4652 from ritikchaddha/patch-85
...
Create royalevent-stored-xss.yaml
2022-06-25 00:16:05 +05:30
5376bf09d3
Update and rename royalevent-management-xss.yaml to royalevent-stored-xss.yaml
2022-06-24 00:15:44 +05:30
59b74c82bd
Merge pull request #4651 from ritikchaddha/patch-84
...
Create royalevent-management-xss.yaml
2022-06-24 00:11:37 +05:30
98034728fc
Update and rename vulnerabilities/other/royalevent-management-xss.yaml to vulnerabilities/other/royalevent/royalevent-management-xss.yaml
2022-06-24 00:10:24 +05:30
4338eea2ec
Rename vulnerabilities/other/royalevent-management-xss.yaml to vulnerabilities/other/royalevent/royalevent-management-xss.yaml
2022-06-24 00:09:06 +05:30
a66f548304
Update royalevent-management-xss.yaml
2022-06-24 00:05:48 +05:30
cc07d2cb75
Update finecms-sqli.yaml
2022-06-23 18:28:06 +05:30
679bc9198e
Create royalevent-management-xss.yaml
2022-06-23 13:00:43 +05:30
103861f588
Create royalevent-management-xss.yaml
2022-06-23 12:38:09 +05:30
9b247d6fa6
Create finecms-sqli.yaml
2022-06-10 19:28:24 +05:30
a44e87a683
Update and rename orbiteam-bscw-server-unauthenticated-lfi.yaml to vulnerabilities/other/orbiteam-bscw-server-lfi.yaml
2022-06-10 18:37:39 +05:30
b883737198
Dashboard Content Enhancements ( #4567 )
...
Dashboard Content Enhancements
2022-06-09 16:35:21 -04:00
5aa779a068
Fix templates: change alert(xss) to alert(/xss/) ( #4564 )
2022-06-09 10:11:03 +05:30
3401689a2b
classify eyou, seeyon, tonged, weaver, dedecms, yonyou ( #4557 )
...
* Auto Generated CVE annotations [Sun May 15 12:16:57 UTC 2022] 🤖
* Auto Generated CVE annotations [Mon Jun 6 03:02:54 UTC 2022] 🤖
* create tongda directory and put templates in
* create weaver directory and put templates in
* create seeyon directory and put templates in
* create yonyou directory and put templates in
* create dedecms directory and put templates in
* create eyou directory and put templates in
* misc update
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-08 13:31:29 +05:30
50fbea791c
buffalo-config-injection.yaml is a duplicate of CVE-2021-20091.yaml ( #4547 )
...
* Deleted buffalo-config-injection.yaml
Add reference from buffalo-config-injection.yaml to CVE-2021-20091.yaml
* Delete vulnerabilities/other/buffalo-config-injection.yaml
2022-06-06 20:32:33 +05:30
7ada510859
Fixed possible FPs in open redirect templates ( #4544 )
...
* Fixed possible FPs in open redirect templates
We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results.
* updated example domain
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-06-06 16:10:15 +05:30
01080a3aed
Update phpok-sqli.yaml
2022-06-05 17:09:00 +05:30
51cdbeaf6a
Merge pull request #4535 from ritikchaddha/patch-70
...
Update and rename cves/2020/CVE-2020-22210.yaml to vulnerabilities/ot…
2022-06-05 15:48:17 +05:30
914aa45704
Update and rename cves/2020/CVE-2020-22210.yaml to vulnerabilities/other/74cms-sqli.yaml
2022-06-05 15:04:44 +05:30
0780108196
Update phpok-sqli.yaml
2022-06-05 14:06:26 +05:30
49d7a23320
Create phpok-sqli.yaml
2022-06-05 14:01:28 +05:30
5da580f9c2
Dashboard Content Enhancements ( #4519 )
...
Dashboard Content Enhancements
2022-06-03 15:12:31 -04:00
88c150d2e0
Remove blank cve-id fields from templates. ( #4516 )
...
* Remove blank cve-id fields from templates.
Add cve-id to CVE-2022-0776.yaml
* Fix classification spelling
2022-05-31 20:04:35 +05:30
ecc12ec58f
Merge pull request #4496 from MostInterestingBotInTheWorld/dashboard
...
Dashboard Content Enhancements
2022-05-31 15:24:07 +05:30
bbc9bd2a84
Update nuuo-nvrmini2-rce.yaml
2022-05-31 14:52:46 +05:30
c4aec5a0d1
Update oa-tongda-path-traversal.yaml
2022-05-31 14:51:16 +05:30
683b511766
Update opensns-rce.yaml
2022-05-31 14:49:47 +05:30
35e1863cda
Update oracle-fatwire-lfi.yaml
2022-05-31 14:48:35 +05:30
630a29f710
Update php-zerodium-backdoor-rce.yaml
2022-05-31 14:48:05 +05:30
927b557f16
Update powercreator-cms-rce.yaml
2022-05-31 14:47:10 +05:30
39c25f539b
Update qi-anxin-netkang-next-generation-firewall-rce.yaml
2022-05-31 14:44:03 +05:30
e5eeae4afb
Update qihang-media-disclosure.yaml
2022-05-31 14:42:37 +05:30
21cb387113
Update sar2html-rce.yaml
2022-05-31 14:41:26 +05:30
a0d74ba5e8
Update seowon-router-rce.yaml
2022-05-31 14:40:43 +05:30
2d03dfdf85
Update showdoc-file-upload-rce.yaml
2022-05-31 14:38:36 +05:30
f46b4f6fb0
Update sonicwall-sslvpn-shellshock.yaml
2022-05-31 14:36:41 +05:30
cbed893fe9
Update sponip-network-system-ping-rce.yaml
2022-05-31 14:36:06 +05:30
399f4d1434
Update clockwatch-enterprise-rce.yaml
2022-05-31 14:31:19 +05:30
9a4a006909
Update commax-biometric-auth-bypass.yaml
2022-05-31 14:30:59 +05:30
c4e9ddf1f0
Update commax-credentials-disclosure.yaml
2022-05-31 14:30:21 +05:30
2919dc1469
Update icewarp-webclient-rce.yaml
2022-05-31 14:29:38 +05:30
fbf8533896
Update kevinlab-bems-backdoor.yaml
2022-05-31 14:29:07 +05:30
18f573cc0d
Update kevinlab-hems-backdoor.yaml
2022-05-31 14:28:02 +05:30
59f524e539
Update lotuscms-rce.yaml
2022-05-31 14:26:43 +05:30
59a7391451
Update maccmsv10-backdoor.yaml
2022-05-31 14:26:02 +05:30
32b085c52a
Update magicflow-lfi.yaml
2022-05-31 14:25:40 +05:30
cd9188a2d9
Update mirai-unknown-rce.yaml
2022-05-31 14:23:16 +05:30
636dec14ab
Update natshell-rce.yaml
2022-05-31 14:22:28 +05:30
ff002c5b1b
Update netgear-router-exposure.yaml
2022-05-31 14:21:09 +05:30
7be57dbf17
Update dotnetcms-sqli.yaml
2022-05-30 22:56:35 +05:30
8712d2b6c5
Enhancement: vulnerabilities/other/icewarp-webclient-rce.yaml by mp
2022-05-30 13:26:21 -04:00
75e1c543c0
Enhancement: vulnerabilities/other/kevinlab-bems-backdoor.yaml by mp
2022-05-30 13:25:21 -04:00
eb1647611f
Enhancement: vulnerabilities/other/kevinlab-hems-backdoor.yaml by mp
2022-05-30 13:22:21 -04:00
d4543f05a3
Enhancement: vulnerabilities/other/sar2html-rce.yaml by mp
2022-05-30 13:19:43 -04:00
e37d064294
Enhancement: vulnerabilities/other/oa-tongda-path-traversal.yaml by mp
2022-05-30 13:13:35 -04:00
35fb337708
Enhancement: vulnerabilities/other/netgear-router-exposure.yaml by mp
2022-05-30 13:12:49 -04:00
d4529ca918
Enhancement: vulnerabilities/other/maccmsv10-backdoor.yaml by mp
2022-05-30 13:11:43 -04:00
57348a8841
Enhancement: vulnerabilities/other/lotuscms-rce.yaml by mp
2022-05-30 13:10:32 -04:00
3db25f4ee3
Enhancement: vulnerabilities/other/sponip-network-system-ping-rce.yaml by mp
2022-05-30 12:24:46 -04:00
84df3a4c02
Enhancement: vulnerabilities/other/sonicwall-sslvpn-shellshock.yaml by mp
2022-05-30 12:23:29 -04:00
9a6f0ae3a8
Enhancement: vulnerabilities/other/showdoc-file-upload-rce.yaml by mp
2022-05-30 12:22:09 -04:00
87ac93b918
Enhancement: vulnerabilities/other/seowon-router-rce.yaml by mp
2022-05-30 12:21:04 -04:00
10a9317b22
Enhancement: vulnerabilities/other/sar2html-rce.yaml by mp
2022-05-30 12:19:44 -04:00
a8e014d313
Enhancement: vulnerabilities/other/sangfor-ba-rce.yaml by mp
2022-05-30 12:18:15 -04:00
805882fa88
Enhancement: vulnerabilities/other/qihang-media-disclosure.yaml by mp
2022-05-30 12:17:42 -04:00
1ef6598da0
Enhancement: vulnerabilities/other/qi-anxin-netkang-next-generation-firewall-rce.yaml by mp
2022-05-30 12:16:18 -04:00
ec9771943b
Enhancement: vulnerabilities/other/powercreator-cms-rce.yaml by mp
2022-05-30 12:15:22 -04:00
07fb89712d
Enhancement: vulnerabilities/other/php-zerodium-backdoor-rce.yaml by mp
2022-05-30 12:12:27 -04:00
7a980959d2
Enhancement: vulnerabilities/other/oracle-fatwire-lfi.yaml by mp
2022-05-30 11:04:24 -04:00
3a2ddad627
Enhancement: vulnerabilities/other/opensns-rce.yaml by mp
2022-05-30 10:36:52 -04:00
69702aa586
Enhancement: vulnerabilities/other/oa-tongda-path-traversal.yaml by mp
2022-05-30 10:36:06 -04:00
480c2fca93
Enhancement: vulnerabilities/other/nuuo-nvrmini2-rce.yaml by mp
2022-05-30 10:12:35 -04:00
03a8417f7c
Enhancement: vulnerabilities/other/netgear-router-exposure.yaml by mp
2022-05-30 10:10:54 -04:00
062c170d10
Enhancement: vulnerabilities/other/natshell-rce.yaml by mp
2022-05-30 10:05:52 -04:00
b004ffeb68
Enhancement: vulnerabilities/other/mirai-unknown-rce.yaml by mp
2022-05-30 10:04:12 -04:00
4768876a28
Enhancement: vulnerabilities/other/magicflow-lfi.yaml by mp
2022-05-30 09:57:24 -04:00
9aac455f6c
Update dotnetcms-sqli.yaml
2022-05-30 19:20:44 +05:30
5cee74ec5c
Enhancement: vulnerabilities/other/maccmsv10-backdoor.yaml by mp
2022-05-30 09:48:06 -04:00
a604bfaa3d
Enhancement: vulnerabilities/other/lotuscms-rce.yaml by mp
2022-05-30 09:46:17 -04:00
fdc7a4825e
Create dotnetcms-sqli.yaml
2022-05-30 19:03:36 +05:30
87ba83be67
Update digitalrebar-traversal.yaml
2022-05-28 22:59:19 +05:30
29bb7d1fd3
Enhancement: vulnerabilities/other/commax-credentials-disclosure.yaml by mp
2022-05-27 14:28:13 -04:00
3bb9b3b9b4
Enhancement: vulnerabilities/other/commax-biometric-auth-bypass.yaml by mp
2022-05-27 14:27:14 -04:00
ceca4a66eb
Enhancement: vulnerabilities/other/clockwatch-enterprise-rce.yaml by mp
2022-05-27 14:24:57 -04:00
c7879a024a
Enhancement: vulnerabilities/other/clockwatch-enterprise-rce.yaml by mp
2022-05-27 14:24:10 -04:00
a39ff66bc7
Merge branch 'projectdiscovery:master' into dashboard
2022-05-27 09:47:03 -04:00
6a8f9f6ec6
Enhancement: vulnerabilities/other/WSO2-2019-0598.yaml by mp
2022-05-26 15:59:23 -04:00
a81f40cb74
Create digitalrebar-traversal.yaml
2022-05-24 12:18:27 +05:30
fe0bf001b7
Merge pull request #4471 from projectdiscovery/princechaddha-patch-2
...
Update and rename vulnerabilities/other/sangfor-edr-rce.yaml to vulne…
2022-05-23 23:58:57 +05:30
50a9ef0f89
Update cisco-rv-series-rce.yaml
2022-05-23 17:26:06 +05:30
fa903d06d3
Merge pull request #4368 from ritikchaddha/patch-52
...
Create sangfor-ba-rce.yaml
2022-05-23 16:29:32 +05:30
430cc1ea03
Update sangfor-ba-rce.yaml
2022-05-23 16:27:59 +05:30
5ad7e37a87
Update and rename vulnerabilities/other/sangfor-edr-auth-bypass.yaml to vulnerabilities/sangfor/sangfor-edr-auth-bypass.yaml
2022-05-23 16:27:31 +05:30
b8d2df57ba
Update and rename vulnerabilities/other/sangfor-edr-rce.yaml to vulnerabilities/sangfor/sangfor-edr-rce.yaml
2022-05-23 16:25:10 +05:30
d2333f8c0c
Update ecshop-sqli.yaml
2022-05-23 16:13:10 +05:30
40116f7ee3
Create cisco-rv-series-rce.yaml
...
Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote
attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more infor
mation about these vulnerabilities, see the Details section of this advisory.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-22 00:15:55 +09:00
30d4f20b7e
Update ecshop-sqli.yaml
2022-05-19 00:51:53 +05:30
6c76c6f99c
Update ecshop-sqli.yaml
2022-05-18 15:06:50 +05:30
14664c1e01
Update ecshop-sqli.yaml
2022-05-18 14:53:08 +05:30
d8fdb31b1b
Update ecshop-sqli.yaml
2022-05-18 14:50:12 +05:30
83cc50ce3e
Dashboard Content Enhancements ( #4411 )
...
* standardizing enhanced by tag
* Fix spacing. Add classification->cve
* Enhancement: cves/2021/CVE-2021-20158.yaml by mp
* Enhancement: cves/2021/CVE-2021-20167.yaml by mp
* Typo
* Enhancement: cves/2021/CVE-2021-20837.yaml by mp
* Enhancement: cves/2021/CVE-2021-21307.yaml by mp
* Enhancement: cves/2021/CVE-2021-21479.yaml by mp
* Enhancement: cves/2021/CVE-2021-21881.yaml by mp
* Enhancement: cves/2021/CVE-2021-21972.yaml by mp
* Enhancement: cves/2021/CVE-2021-21978.yaml by mp
* Enhancement: cves/2021/CVE-2021-22005.yaml by mp
* Enhancement: cves/2021/CVE-2021-22205.yaml by mp
* Enhancement: cves/2021/CVE-2021-22986.yaml by mp
* Enhancement: cves/2021/CVE-2021-24285.yaml by mp
* Enhancement: cves/2021/CVE-2021-24472.yaml by mp
* Enhancement: cves/2021/CVE-2021-20090.yaml by mp
* Enhancement: cves/2021/CVE-2021-20167.yaml by mp
* Enhancement: cves/2021/CVE-2021-21307.yaml by mp
* Enhancement: cves/2021/CVE-2021-21978.yaml by mp
* Enhancement: cves/2021/CVE-2021-21985.yaml by mp
* Enhancement: cves/2021/CVE-2021-21972.yaml by mp
* Enhancement: cves/2021/CVE-2021-22205.yaml by mp
* Enhancement: cves/2021/CVE-2021-22986.yaml by mp
* Enhancement: cves/2021/CVE-2021-24285.yaml by mp
* Restore empty lines
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: vulnerabilities/other/3cx-management-console.yaml by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Remove unnecessary file
* Restore content after bad dashboard edit
* Enhancement: undefined by cs
* Spacing issues
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: undefined by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Delete null file created by dashboard
* Remove improper Enhanced tag
* Spacing issues
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Remove test dashboard commits
* Enhancement: cves/2014/CVE-2014-9618.yaml by mp
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by cs
* Not really enhanced
* Add classification->cve-id
* Restore content from dashboard mess up
* Enhancement: cves/2014/CVE-2014-9618.yaml by mp
* Enhancement: cves/2014/CVE-2014-9618.yaml by mp
* Restore newlines
* Enhancement: cves/2007/CVE-2007-4556.yaml by mp
* Enhancement: cves/2007/CVE-2007-4556.yaml by mp
* Enhancement: cves/2014/CVE-2014-9618.yaml by mp
* Enhancement: cves/2015/CVE-2015-1427.yaml by mp
* Enhancement: cves/2015/CVE-2015-3224.yaml by mp
* Enhancement: cves/2015/CVE-2015-7450.yaml by mp
* Enhancement: cves/2016/CVE-2016-10134.yaml by mp
* Enhancement: cves/2016/CVE-2016-1555.yaml by mp
* Enhancement: cves/2016/CVE-2016-2004.yaml by mp
* Enhancement: cves/2016/CVE-2016-5649.yaml by mp
* Enhancement: cves/2016/CVE-2016-7552.yaml by mp
* Enhancement: cves/2017/CVE-2017-1000486.yaml by mp
* Enhancement: cves/2017/CVE-2017-11444.yaml by mp
* Spacing issues
* Added better reference
* Enhancement: cves/2017/CVE-2017-12149.yaml by mp
* Enhancement: cves/2017/CVE-2017-12542.yaml by mp
* Enhancement: cves/2017/CVE-2017-12611.yaml by mp
* Enhancement: cves/2017/CVE-2017-12635.yaml by mp
* Enhancement: cves/2017/CVE-2017-14135.yaml by mp
* Enhancement: cves/2017/CVE-2017-3881.yaml by mp
* Enhancement: cves/2017/CVE-2017-7269.yaml by mp
* Enhancement: cves/2017/CVE-2017-8917.yaml by mp
* Enhancement: cves/2017/CVE-2017-9791.yaml by mp
* Enhancement: cves/2015/CVE-2015-1427.yaml by mp
* Enhancement: cves/2017/CVE-2017-12149.yaml by mp
* Enhancement: cves/2017/CVE-2017-12542.yaml by mp
* Enhancement: cves/2017/CVE-2017-8917.yaml by mp
* Spacing and other minor issues
* Update CVE-2015-1427.yaml
* Update CVE-2017-12149.yaml
* Update CVE-2017-12542.yaml
* Update CVE-2017-12635.yaml
* Update CVE-2017-14135.yaml
* Update CVE-2017-3881.yaml
* Update CVE-2017-7269.yaml
* Update CVE-2017-8917.yaml
* Update CVE-2017-9791.yaml
* Enhancement: cnvd/2019/CNVD-2019-19299.yaml by mp
* Enhancement: cnvd/2019/CNVD-2019-32204.yaml by mp
* Enhancement: cnvd/2020/CNVD-2020-68596.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-09650.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-26422.yaml by mp
* Enhancement: cnvd/2022/CNVD-2022-03672.yaml by mp
* Enhancement: cves/2017/CVE-2017-9841.yaml by mp
* Enhancement: cves/2018/CVE-2018-0127.yaml by mp
* Enhancement: cves/2018/CVE-2018-1000226.yaml by mp
* Enhancement: cves/2018/CVE-2018-1000861.yaml by mp
* Enhancement: cves/2018/CVE-2018-10562.yaml by mp
* Enhancement: cves/2018/CVE-2018-12031.yaml by mp
* Enhancement: cves/2018/CVE-2018-1207.yaml by mp
* Enhancement: cves/2018/CVE-2018-12634.yaml by mp
* Enhancement: cves/2018/CVE-2018-1273.yaml by mp
* Enhancement: cves/2018/CVE-2018-16763.yaml by mp
* Enhancement: cves/2018/CVE-2018-16167.yaml by mp
* Enhancement: cves/2018/CVE-2018-14916.yaml by mp
* Enhancement: cves/2018/CVE-2018-14064.yaml by mp
* Enhancement: cves/2018/CVE-2018-13379.yaml by mp
* Enhancement: cves/2017/CVE-2017-9841.yaml by mp
* Enhancement: cves/2018/CVE-2018-1000861.yaml by mp
* Enhancement: cves/2018/CVE-2018-10562.yaml by mp
* Enhancement: cves/2018/CVE-2018-12031.yaml by mp
* Enhancement: cves/2018/CVE-2018-1207.yaml by mp
* Enhancement: cves/2018/CVE-2018-12634.yaml by mp
* Enhancement: cves/2018/CVE-2018-13379.yaml by mp
* Enhancement: cves/2018/CVE-2018-14916.yaml by mp
* Enhancement: cves/2018/CVE-2018-16167.yaml by mp
* Enhancement: cves/2018/CVE-2018-16763.yaml by mp
* Cleanup and spacing
* Remove blank cve-id lines
* Enhancement: cves/2018/CVE-2018-16836.yaml by mp
* Enhancement: cves/2018/CVE-2018-17246.yaml by mp
* Enhancement: cves/2018/CVE-2018-17431.yaml by mp
* Enhancement: cves/2018/CVE-2018-18925.yaml by mp
* Enhancement: cves/2018/CVE-2018-20985.yaml by mp
* Enhancement: cves/2018/CVE-2018-2894.yaml by mp
* Enhancement: cves/2018/CVE-2018-3810.yaml by mp
* Enhancement: cves/2018/CVE-2018-7600.yaml by mp
* Enhancement: cves/2018/CVE-2018-7600.yaml by mp
* Enhancement: cves/2018/CVE-2018-7602.yaml by mp
* Enhancement: cves/2018/CVE-2018-9161.yaml by mp
* Enhancement: cves/2018/CVE-2018-16836.yaml by mp
* Enhancement: cves/2018/CVE-2018-17431.yaml by mp
* Many title clean-ups for more standardization.
Some vendor name clean-up
* Enhancement: cves/2018/CVE-2018-20985.yaml by mp
* Enhancement: cves/2018/CVE-2018-3810.yaml by mp
* Spacing issues
* Remove 2 blank newlines
* Enhancement: vulnerabilities/other/tamronos-rce.yaml by cs
* Enhancement: cves/2018/CVE-2018-9845.yaml by mp
* Enhancement: cves/2018/CVE-2018-9995.yaml by mp
* Enhancement: cves/2019/CVE-2019-0230.yaml by mp
* Enhancement: cves/2019/CVE-2019-16920.yaml by mp
* Enhancement: cves/2019/CVE-2019-17270.yaml by mp
* Enhancement: cves/2019/CVE-2019-17382.yaml by mp
* Enhancement: cves/2019/CVE-2019-17444.yaml by mp
* Enhancement: cves/2019/CVE-2019-17506.yaml by mp
* Enhancement: cves/2020/CVE-2020-10148.yaml by mp
* Enhancement: cves/2020/CVE-2020-11710.yaml by mp
* Enhancement: cves/2020/CVE-2020-11854.yaml by mp
* Enhancement: cves/2020/CVE-2020-12800.yaml by mp
* Enhancement: cves/2020/CVE-2020-13117.yaml by mp
* Enhancement: cves/2020/CVE-2020-13167.yaml by mp
* Enhancement: cves/2020/CVE-2020-13927.yaml by mp
* Enhancement: cves/2020/CVE-2020-13942.yaml by mp
* Spacing, syntax error
* Spacing, correct this time.
* Enhancement: cves/2020/CVE-2020-15920.yaml by mp
* Enhancement: cves/2020/CVE-2020-29227.yaml by mp
* Enhancement: cves/2021/CVE-2021-24499.yaml by mp
* Enhancement: cves/2021/CVE-2021-24762.yaml by mp
* Enhancement: cves/2018/CVE-2018-9995.yaml by mp
* Enhancement: cves/2019/CVE-2019-0230.yaml by mp
* Enhancement: cves/2019/CVE-2019-17444.yaml by mp
* Enhancement: cves/2020/CVE-2020-10148.yaml by mp
* Enhancement: cves/2020/CVE-2020-11854.yaml by mp
* Enhancement: cves/2020/CVE-2020-13167.yaml by mp
* Enhancement: cves/2020/CVE-2020-13927.yaml by mp
* Enhancement: cves/2020/CVE-2020-15920.yaml by mp
* Enhancement: cves/2021/CVE-2021-24499.yaml by mp
* Extra newlines and one sp;acing issue
* Update CVE-2018-9995.yaml
* Update CVE-2019-0230.yaml
* Update CVE-2019-16920.yaml
* Update CVE-2019-17270.yaml
* Update CVE-2019-17382.yaml
* Update CVE-2019-17444.yaml
* Update CVE-2019-17506.yaml
* Update CVE-2020-10148.yaml
* Update CVE-2020-11710.yaml
* Update CVE-2020-11854.yaml
* Update CVE-2020-12800.yaml
* Update CVE-2020-13167.yaml
* Update CVE-2020-13927.yaml
* Update CVE-2020-13942.yaml
* Update CVE-2020-15920.yaml
* Update CVE-2020-29227.yaml
* Update CVE-2021-24499.yaml
* Update CVE-2021-24762.yaml
Co-authored-by: sullo <sullo@cirt.net>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2022-05-17 14:41:26 +05:30
1a5427c415
Fix yonyou product name, add tag yonyou-ufida-nc to CNVD-2021-30167.yaml ( #4388 )
...
* Change weblogic-workflow.yaml file privilege
* Change yonyou product name
* Add Yonyou-ufida-nc workflow template
* misc update
* misc update
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-05-15 05:55:05 +05:30
581b7a627b
Dashboard Content Enhancements ( #4381 )
...
Dashboard Content Enhancements
2022-05-13 16:26:43 -04:00
20b869632b
Merge pull request #4341 from gy741/rule-add-v108
...
Create gnuboard-sms-xss.yaml
2022-05-13 01:14:28 +05:30
c616179c95
Update gnuboard-sms-xss.yaml
2022-05-13 01:11:32 +05:30
27a039a70c
Update metadata query ( #4350 )
...
* Update adobe-component-login.yaml
* Update cold-fusion-cfcache-map.yaml
* Update unpatched-coldfusion.yaml
* Update coldfusion-debug-xss.yaml
* Update CVE-2020-11978.yaml
* Update CVE-2020-13927.yaml
* Update CVE-2021-38540.yaml
* Update CVE-2021-44451.yaml
* Update CVE-2022-24288.yaml
* Update airflow-debug.yaml
* Update airflow-detect.yaml
* Update CVE-2010-0219.yaml
* Update apache-axis-detect.yaml
* Update CVE-2020-11991.yaml
* Update apache-cocoon-detect.yaml
* Update CVE-2021-21402.yaml
* Update jellyfin-detect.yaml
* Update CVE-2021-21402.yaml
* Update CVE-2021-21402.yaml
* Update ecology-arbitrary-file-upload.yaml
* Update ecology-v8-sqli.yaml
* Update ecology-syncuserinfo-sqli.yaml
* Update ecology-filedownload-directory-traversal.yaml
* Update CNVD-2021-15822.yaml
* Update dedecms-carbuyaction-fileinclude.yaml
* Update dedecms-openredirect.yaml
* Update tamronos-rce.yaml
* Update natshell-path-traversal.yaml
2022-05-12 19:48:36 +05:30
93c86e4adf
Update ecsimagingpacs-rce.yaml
2022-05-12 16:38:58 +05:30
70501101a6
Create ecsimagingpacs-rce.yaml
2022-05-12 13:50:38 +05:30
c82ef1fb68
Create sangfor-ba-rce.yaml
2022-05-12 00:17:57 +05:30
92e9c1da0b
Create gnuboard-sms-xss.yaml
...
A vulnerability in Gnuboard CMS allows remote attackers to inject arbitrary Javascript into the responses returned by the server.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-05-10 13:22:31 +09:00
1ff8b55f06
Update inspur-clusterengine-v4-sysshell-rce.yaml
2022-05-09 23:04:44 +05:30
c44aed7f5e
Update huijietong-cloud-fileread.yaml
2022-05-09 13:31:15 +05:30
a9de43f0f7
Update huijietong-cloud-fileread.yaml
2022-05-08 18:14:47 +05:30
4124cb441a
Update huijietong-cloud-fileread.yaml
2022-05-08 18:11:28 +05:30
958b15663c
Strict matchers / f/p fix ( #4320 )
...
* more strict matcher + matcher fix
* misc updates
2022-05-08 12:13:38 +05:30
303165dac4
Rename vulnerabilities/other/ruijie-networks-rce.yaml to vulnerabilities/ruijie/ruijie-networks-rce.yaml
2022-05-06 21:09:42 +05:30
ef7e1fcf8b
Rename vulnerabilities/other/ruijie-networks-lfi.yaml to vulnerabilities/ruijie/ruijie-networks-lfi.yaml
2022-05-06 21:09:32 +05:30
027c4ee86e
Rename vulnerabilities/other/ruijie-eg-rce.yaml to vulnerabilities/ruijie/ruijie-eg-rce.yaml
2022-05-06 21:09:20 +05:30
16c82b3aad
Rename vulnerabilities/other/ruijie/ruijie-password-leak.yaml to vulnerabilities/ruijie/ruijie-password-leak.yaml
2022-05-06 21:09:07 +05:30
610f52a09b
Update and rename vulnerabilities/other/ruijie-password-leak.yaml to vulnerabilities/other/ruijie/ruijie-password-leak.yaml
2022-05-06 21:07:45 +05:30
e445aa053a
Update and rename firewall-password-leak.yaml to ruijie-password-leak.yaml
2022-05-06 20:59:15 +05:30
684528467b
Update firewall-password-leak.yaml
2022-05-06 16:13:47 +05:30
7ffa667acc
Create firewall-password-leak.yaml
2022-05-06 16:10:24 +05:30
5fdda06ce1
Create inspur-clusterengine-v4-sysshell-rce.yaml
2022-05-04 01:24:06 +05:30
c9f72c1137
Update avada-xss.yaml
2022-04-28 23:27:46 +05:30
1c2235e87a
Update avada-xss.yaml
2022-04-28 21:41:50 +07:00
aa888bca8d
Dashboard Content Enhancements ( #4238 )
...
Dashboard Content Enhancements
2022-04-25 10:35:07 -04:00
5e58c8a1dc
Added WSO2 < 5.8.0 - Server Side Request Forgery ( #4229 )
2022-04-24 01:19:18 +05:30
5451673368
Moved and renamed templates containing a CVE under their correct location
2022-04-22 19:25:23 +03:00
2487e9877f
Merge pull request #4219 from projectdiscovery/template_info_fixup
...
Info section refactor
2022-04-22 18:01:12 +05:30
209538baa6
refactor: Description field uniformization
...
* info field reorder
* reference values refactored to list
* added new lines after the id and before the protocols
* removed extra new lines
* split really long descriptions to multiple lines (part 1)
* other minor fixes
2022-04-22 13:38:41 +03:00
b0f93aa784
Create avada-xss.yaml
2022-04-22 12:56:53 +04:00
31312b1c19
Dashboard Content Enhancements ( #4191 )
...
Dashboard Content Enhancements
2022-04-21 17:16:41 -04:00
321f265cf4
Merge pull request #4194 from ritikchaddha/patch-35
...
Create tianqing-info-leak.yaml
2022-04-20 12:32:46 +04:00
37b638bd08
Update tianqing-info-leak.yaml
2022-04-20 12:29:00 +04:00
2669491e8a
Update ecology-v8-sqli.yaml
2022-04-20 01:03:52 +04:00
15586bf5ef
Create ecology-v8-sqli.yaml
2022-04-20 02:11:43 +05:30
aec114c561
Create tianqing-info-leak.yaml
2022-04-20 01:34:41 +05:30
406f8fab71
Update zzcms-xss.yaml
2022-04-18 02:37:25 +04:00
768aba3b09
Create zzcms-xss.yaml
2022-04-16 14:32:25 +05:30
5730781afa
Dashboard Content Enhancements ( #4157 )
...
* Enhancement: exposures/files/joomla-file-listing.yaml by cs
* Enhancement: cves/2019/CVE-2019-5418.yaml by mp
* Enhancement: cves/2016/CVE-2016-10940.yaml by mp
* Enhancement: cves/2015/CVE-2015-4694.yaml by mp
* Enhancement: cves/2016/CVE-2016-10960.yaml by mp
* Enhancement: cves/2021/CVE-2021-20091.yaml by mp
* Enhancement: cves/2021/CVE-2021-20092.yaml by mp
* Enhancement: vulnerabilities/other/solar-log-authbypass.yaml by mp
* Enhancement: vulnerabilities/wordpress/churchope-lfi.yaml by mp
* Enhancement: vulnerabilities/other/solar-log-authbypass.yaml by mp
* Enhancement: cves/2017/CVE-2017-10075.yaml by mp
* Enhancement: cves/2021/CVE-2021-27358.yaml by mp
* Enhancement: cves/2017/CVE-2017-9833.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml by mp
* Enhancement: vulnerabilities/wordpress/wp-spot-premium-lfi.yaml by mp
* Enhancement: misconfiguration/symfony-debugmode.yaml by mp
* Enhancement: cves/2016/CVE-2016-10940.yaml by mp
* Enhancement: cves/2015/CVE-2015-4694.yaml by mp
* Enhancement: cves/2016/CVE-2016-10960.yaml by mp
* Enhancement: cves/2015/CVE-2015-4694.yaml by mp
* Enhancement: vulnerabilities/wordpress/churchope-lfi.yaml by mp
* Enhancement: cves/2017/CVE-2017-10075.yaml by mp
* Enhancement: cves/2021/CVE-2021-27358.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml by mp
* Enhancement: vulnerabilities/wordpress/wp-spot-premium-lfi.yaml by mp
* Enhancement: vulnerabilities/wordpress/newsletter-open-redirect.yaml by mp
* Enhancement: vulnerabilities/wordpress/newsletter-open-redirect.yaml by mp
* Enhancement: vulnerabilities/wordpress/pieregister-open-redirect.yaml by mp
* Enhancement: cves/2021/CVE-2021-25055.yaml by mp
* Enhancement: cves/2021/CVE-2021-25028.yaml by mp
* Enhancement: vulnerabilities/wordpress/noptin-open-redirect.yaml by mp
* Enhancement: vulnerabilities/wordpress/elex-woocommerce-xss.yaml by mp
* Enhancement: vulnerabilities/wordpress/my-chatbot-xss.yaml by mp
* Enhancement: vulnerabilities/wordpress/wp-adaptive-xss.yaml by mp
* Enhancement: cves/2021/CVE-2021-24947.yaml by mp
* Enhancement: cves/2021/CVE-2021-24406.yaml by mp
* Enhancement: vulnerabilities/wordpress/elementorpage-open-redirect.yaml by mp
* Enhancement: cves/2016/CVE-2016-10033.yaml by mp
* Enhancement: cves/2021/CVE-2021-31682.yaml by mp
* Enhancement: vulnerabilities/wordpress/wp-woocommerce-file-download.yaml by mp
* Enhancement: cves/2021/CVE-2021-22986.yaml by mp
* Enhancement: vulnerabilities/wordpress/newsletter-open-redirect.yaml by mp
* Enhancement: vulnerabilities/wordpress/pieregister-open-redirect.yaml by mp
* Enhancement: cves/2021/CVE-2021-25055.yaml by mp
* Enhancement: cves/2021/CVE-2021-25028.yaml by mp
* Enhancement: vulnerabilities/wordpress/noptin-open-redirect.yaml by mp
* Enhancement: vulnerabilities/wordpress/elex-woocommerce-xss.yaml by mp
* Enhancement: cves/2021/CVE-2021-24947.yaml by mp
* Enhancement: cves/2021/CVE-2021-24406.yaml by mp
* Enhancement: cves/2021/CVE-2021-22986.yaml by mp
* Enhancement: cves/2016/CVE-2016-10033.yaml by mp
* Enhancement: vulnerabilities/wordpress/elementorpage-open-redirect.yaml by mp
* Enhancement: cves/2021/CVE-2021-24406.yaml by mp
* Relocating to CVE folder
* Enhancement: cves/2017/CVE-2017-14651.yaml by mp
* Enhancement: cves/2020/CVE-2020-24589.yaml by mp
* Enhancement: vulnerabilities/confluence/confluence-ssrf-sharelinks.yaml by mp
* Enhancement: cves/2019/CVE-2019-2729.yaml by mp
* Enhancement: cves/2018/CVE-2018-2893.yaml by mp
* Enhancement: cves/2018/CVE-2018-2628.yaml by mp
* Enhancement: cves/2018/CVE-2018-3238.yaml by mp
* Enhancement: cves/2018/CVE-2018-3238.yaml by mp
* Enhancement: cves/2017/CVE-2017-3528.yaml by mp
* Enhancement: cves/2019/CVE-2019-2588.yaml by mp
* Enhancement: cves/2021/CVE-2021-31755.yaml by mp
* Enhancement: cves/2021/CVE-2021-42071.yaml by mp
* Enhancement: misconfiguration/zabbix-dashboards-access.yaml by mp
* Enhancement: cves/2017/CVE-2017-14651.yaml by mp
* Enhancement: cves/2020/CVE-2020-24589.yaml by mp
* Enhancement: vulnerabilities/confluence/confluence-ssrf-sharelinks.yaml by mp
* Enhancement: cves/2019/CVE-2019-2729.yaml by mp
* Enhancement: cves/2018/CVE-2018-2893.yaml by mp
* Enhancement: cves/2018/CVE-2018-3238.yaml by mp
* Enhancement: cves/2017/CVE-2017-3528.yaml by mp
* Enhancement: cves/2021/CVE-2021-42071.yaml by mp
* Syntax corrections
Added some cve-id fields
Removed duplicate dashboard comments
* Tag typo
Co-authored-by: sullo <sullo@cirt.net>
2022-04-15 12:39:44 -04:00
eda4cdd339
Merge pull request #4102 from ritikchaddha/patch-23
...
Create qizhi-fortressaircraft-unauthorized.yaml
2022-04-12 01:39:51 +05:30
13de1b849c
Merge pull request #4106 from ritikchaddha/patch-25
...
Create pyspider-unauthorized-access.yaml
2022-04-12 01:38:05 +05:30
dda19c0a9b
Update and rename qizhi-fortressaircraft-unauthorized.yaml to qizhi-fortressaircraft-unauth.yaml
2022-04-12 01:37:20 +05:30
39336f2ca5
Update pyspider-unauthorized-access.yaml
2022-04-12 01:34:02 +05:30
45174dee16
Dashboard Content Enhancements ( #4111 )
...
Dashboard Content Enhancements
2022-04-11 10:42:35 -04:00
a874ccac44
Create pyspider-unauthorized-access.yaml
2022-04-11 12:36:33 +05:30
55907e03a9
Create qizhi-fortressaircraft-unauthorized.yaml
2022-04-11 12:12:24 +05:30
5eb47292e4
Added Reprise License Manager Templates ( #4097 )
...
Co-Authored-By: Akincibor <99909324+Akincibor@users.noreply.github.com>
Co-authored-by: Akincibor <99909324+Akincibor@users.noreply.github.com>
2022-04-10 12:41:31 +05:30
7a26b26611
Merge pull request #4079 from ritikchaddha/patch-19
...
Create hanming-video-conferencing-file-read.yaml
2022-04-10 01:15:06 +05:30
c48a3009ef
Update and rename hanming-video-conferencing-file-read.yaml to hanming-lfr.yaml
2022-04-10 01:12:47 +05:30
fb3b587f8d
Merge pull request #4080 from ritikchaddha/patch-20
...
Create tongda-user-session-disclosure.yaml
2022-04-10 01:10:41 +05:30
da6a91f00c
Update and rename tongda-user-session-disclosure.yaml to tongda-session-disclosure.yaml
2022-04-10 01:07:22 +05:30
3a870ceb11
Update yongyou-u8-oa-sqli.yaml
2022-04-10 00:40:02 +05:30
e33e5186d7
Create yongyou-u8-oa-sqli.yaml
2022-04-08 13:43:23 +05:30
4333ef4f89
Create tongda-user-session-disclosure.yaml
2022-04-08 13:42:20 +05:30
14029f1772
Create hanming-video-conferencing-file-read.yaml
2022-04-08 13:40:46 +05:30
210d16392b
Merge pull request #4064 from ritikchaddha/patch-8
...
Create ecology-syncuserinfo-sqli.yaml
2022-04-07 19:27:52 +05:30
a24ef794b7
Dashboard Content Enhancements ( #4031 )
...
Dashboard Content Enhancements
2022-04-07 09:53:15 -04:00
bb4358e498
Update ecology-syncuserinfo-sqli.yaml
2022-04-07 18:42:11 +05:30
7791b71a8d
Update ecology-syncuserinfo-sqli.yaml
2022-04-07 18:40:03 +05:30
8a45bc4f7d
Update hiboss-rce.yaml
2022-04-07 18:12:31 +05:30
84b9e66fba
Merge pull request #4073 from ritikchaddha/patch-16
...
Create pbootcms-database-file-download.yaml
2022-04-07 17:32:58 +05:30
6f2ae23929
Merge pull request #4074 from ritikchaddha/patch-17
...
Create dss-download-fileread.yaml
2022-04-07 17:32:37 +05:30
d2c87cf12a
Update pbootcms-database-file-download.yaml
2022-04-07 17:30:29 +05:30
465b904cf1
Update pbootcms-database-file-download.yaml
2022-04-07 17:24:43 +05:30
c509256843
Update dss-download-fileread.yaml
2022-04-07 17:07:42 +05:30
3dafb4bbfe
Update kingsoft-v8-file-read.yaml
2022-04-07 16:58:32 +05:30
78625369df
Create dss-download-fileread.yaml
2022-04-07 16:01:28 +05:30
cfee24aaa7
Create pbootcms-database-file-download.yaml
2022-04-07 15:53:09 +05:30
2f849a6620
Create kingsoft-v8-file-read.yaml
2022-04-07 15:15:14 +05:30
0c6a333a38
Update ns-asg-file-read.yaml
2022-04-07 14:31:10 +05:30
9bf3b9493c
Update ns-asg-file-read.yaml
2022-04-07 14:24:10 +05:30
888c593257
Update ns-asg-file-read.yaml
2022-04-07 14:23:54 +05:30
37dc09b55b
Update ns-asg-file-read.yaml
2022-04-07 14:14:15 +05:30
affc2d4e52
Create ecology-syncuserinfo-sqli.yaml
2022-04-06 14:25:59 +05:30
3b767cd5b6
Merge pull request #4055 from ritikchaddha/patch-5
...
Create kingdee-eas-directory-traversal.yaml
2022-04-06 13:34:12 +05:30
0c07ddb3a7
Update kingdee-eas-directory-traversal.yaml
2022-04-06 13:32:42 +05:30
7aa021fd1e
Merge pull request #4057 from ritikchaddha/patch-7
...
Create seacms-sqli.yaml
2022-04-06 13:32:19 +05:30
b5e81d3f54
Update kingdee-eas-directory-traversal.yaml
2022-04-06 13:31:21 +05:30
831f53d205
Rename vulnerabilities/seacms-sqli.yaml to vulnerabilities/other/seacms-sqli.yaml
2022-04-06 13:21:30 +05:30
0451a7c3ea
Update 3cx-management-console.yaml
2022-04-06 09:30:14 +05:30
cd16ff171d
Create kingdee-eas-directory-traversal.yaml
2022-04-05 17:20:57 +05:30
cbb575dddb
Create 3cx-management-console.yaml
2022-04-02 16:24:05 +05:30
6ddfbac2b4
Dashboard Content Enhancement ( #4020 )
...
* Enhancement: cnvd/2021/CNVD-2021-15822.yaml by mp
* Enhancement: exposed-panels/apache/tomcat-pathnormalization.yaml by mp
* Enhancement: cves/2021/CVE-2021-40542.yaml by mp
* Enhancement: misconfiguration/horde-unauthenticated.yaml by mp
* Enhancement: misconfiguration/horde-unauthenticated.yaml by mp
* Enhancement: misconfiguration/horde-unauthenticated.yaml by mp
* Enhancement: cves/2021/CVE-2021-40542.yaml by mp
* Enhancement: exposed-panels/apiman-panel.yaml by mp
* Enhancement: cves/2010/CVE-2010-1873.yaml by mp
* Enhancement: exposed-panels/arcgis/arcgis-panel.yaml by mp
* Enhancement: exposed-panels/arcgis/arcgis-rest-api.yaml by mp
* Enhancement: exposed-panels/argocd-login.yaml by mp
* Enhancement: exposed-panels/atlassian-crowd-panel.yaml by mp
* Enhancement: exposed-panels/atvise-login.yaml by mp
* Enhancement: exposed-panels/avantfax-panel.yaml by mp
* Enhancement: exposed-panels/avatier-password-management.yaml by mp
* Enhancement: exposed-panels/axigen-webadmin.yaml by mp
* Enhancement: exposed-panels/axigen-webmail.yaml by mp
* Enhancement: exposed-panels/azkaban-web-client.yaml by mp
* Enhancement: exposed-panels/acunetix-panel.yaml by mp
* Enhancement: exposed-panels/adiscon-loganalyzer.yaml by mp
* Enhancement: exposed-panels/adminer-panel.yaml by mp
* Enhancement: cves/2010/CVE-2010-1870.yaml by mp
* Enhancement: exposed-panels/adminset-panel.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-component-login.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-connect-central-login.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-experience-manager-login.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-media-server.yaml by mp
* Enhancement: exposed-panels/advance-setup.yaml by mp
* Enhancement: exposed-panels/aerohive-netconfig-ui.yaml by mp
* Enhancement: exposed-panels/aims-password-mgmt-client.yaml by mp
* Enhancement: exposed-panels/aims-password-mgmt-client.yaml by mp
* Enhancement: exposed-panels/aims-password-portal.yaml by mp
* Enhancement: exposed-panels/airflow-panel.yaml by mp
* Enhancement: exposed-panels/airflow-panel.yaml by mp
* spacing issues
* Spacing
* HTML codes improperly interpreted
Relocate horde-unauthenticated.yaml to CVE-2005-3344.yaml
* Relocate horde-unauthenticated.yaml to CVE-2005-3344.yaml
* Enhancement: technologies/waf-detect.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml by mp
* Enhancement: network/sap-router-info-leak.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml by mp
* Enhancement: network/sap-router-info-leak.yaml by mp
* Enhancement: network/exposed-adb.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-woocommerce-sqli.yaml by mp
* Enhancement: exposures/tokens/digitalocean/tugboat-config-exposure.yaml by mp
* Enhancement: exposed-panels/concrete5/concrete5-install.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-infinitewp-auth-bypass.yaml by mp
* indentation issue
* Character encoding issue fix
* Enhancement: default-logins/alibaba/canal-default-login.yaml by mp
* Enhancement: default-logins/alphaweb/alphaweb-default-login.yaml by mp
* Enhancement: default-logins/ambari/ambari-default-login.yaml by mp
* Enhancement: default-logins/apache/airflow-default-login.yaml by mp
* Enhancement: default-logins/apache/apisix-default-login.yaml by mp
* Enhancement: default-logins/apollo/apollo-default-login.yaml by mp
* Enhancement: default-logins/arl/arl-default-login.yaml by mp
* Enhancement: default-logins/digitalrebar/digitalrebar-default-login.yaml by mp
* Enhancement: default-logins/mantisbt/mantisbt-default-credential.yaml by mp
* Enhancement: default-logins/stackstorm/stackstorm-default-login.yaml by mp
* Enhancement: dns/caa-fingerprint.yaml by mp
* Enhancement: exposed-panels/active-admin-exposure.yaml by mp
* Enhancement: exposed-panels/activemq-panel.yaml by mp
* Enhancement: default-logins/ambari/ambari-default-login.yaml by mp
* Restore & stomped by dashboard
* Enhancement: cves/2010/CVE-2010-1653.yaml by mp
* Enhancement: cves/2021/CVE-2021-38751.yaml by mp
* Enhancement: cves/2021/CVE-2021-39320.yaml by mp
* Enhancement: cves/2021/CVE-2021-39322.yaml by mp
* Enhancement: cves/2021/CVE-2021-39327.yaml by mp
* Enhancement: cves/2021/CVE-2021-39350.yaml by mp
* Enhancement: cves/2021/CVE-2021-39433.yaml by mp
* Enhancement: cves/2021/CVE-2021-41192.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-15824.yaml by mp
* Enhancement: exposed-panels/ansible-semaphore-panel.yaml by mp
* Enhancement: exposed-panels/aviatrix-panel.yaml by mp
* Enhancement: cves/2022/CVE-2022-24288.yaml by mp
* Enhancement: cves/2022/CVE-2022-24990.yaml by mp
* Enhancement: cves/2022/CVE-2022-26159.yaml by mp
* Enhancement: default-logins/aem/aem-default-login.yaml by mp
* Enhancement: exposed-panels/blue-iris-login.yaml by mp
* Enhancement: exposed-panels/bigbluebutton-login.yaml by mp
* Enhancement: cves/2022/CVE-2022-24288.yaml by mp
* Enhancement: cves/2022/CVE-2022-24990.yaml by mp
* Enhancement: cves/2022/CVE-2022-26159.yaml by mp
* Enhancement: default-logins/aem/aem-default-login.yaml by mp
* Spacing issues
Add cve-id field
* fix & stomping
* Enhancement: cves/2016/CVE-2016-1000141.yaml by mp
* Enhancement: cves/2020/CVE-2020-24912.yaml by mp
* Enhancement: cves/2021/CVE-2021-35265.yaml by mp
* Enhancement: cves/2022/CVE-2022-0437.yaml by mp
* Enhancement: cves/2010/CVE-2010-1601.yaml by mp
* Enhancement: technologies/teradici-pcoip.yaml by mp
* Enhancement: vulnerabilities/other/unauth-hoteldruid-panel.yaml by mp
* Enhancement: cves/2010/CVE-2010-1475.yaml by mp
* Enhancement: cves/2010/CVE-2010-1535.yaml by mp
* Enhancement: exposed-panels/epson-web-control-detect.yaml by mp
* Enhancement: exposed-panels/epson-access-detect.yaml by mp
* Enhancement: cves/2020/CVE-2020-29453.yaml by mp
* Fix spacing
* Remove empty cve lines and relocate tags
* Remove blank cve lines & move tags
* Fix merge errors
* Enhancement: cves/2020/CVE-2020-21224.yaml by mp
* Enhancement: cves/2020/CVE-2020-24148.yaml by mp
* Enhancement: cves/2020/CVE-2020-24391.yaml by mp
* Enhancement: cves/2020/CVE-2020-24589.yaml by mp
* Enhancement: cves/2020/CVE-2020-25213.yaml by mp
* Enhancement: cves/2020/CVE-2020-25223.yaml by mp
* Enhancement: cves/2020/CVE-2020-25506.yaml by mp
* Enhancement: cves/2020/CVE-2020-2551.yaml by mp
* Enhancement: cves/2020/CVE-2020-28871.yaml by mp
* Enhancement: cves/2020/CVE-2020-28188.yaml by mp
* Enhancement: cves/2020/CVE-2020-26948.yaml by mp
* Enhancement: cves/2020/CVE-2020-26919.yaml by mp
* Enhancement: cves/2020/CVE-2020-26214.yaml by mp
* Enhancement: cves/2020/CVE-2020-25223.yaml by mp
* Enhancement: cves/2020/CVE-2020-21224.yaml by mp
* Enhancement: cves/2020/CVE-2020-24148.yaml by mp
* Enhancement: cves/2020/CVE-2020-24186.yaml by mp
* Enhancement: cves/2020/CVE-2020-24186.yaml by mp
* Enhancement: cves/2020/CVE-2020-24391.yaml by mp
* Enhancement: cves/2020/CVE-2020-24589.yaml by mp
* Enhancement: cves/2020/CVE-2020-25213.yaml by mp
* Enhancement: cves/2020/CVE-2020-25223.yaml by mp
* Enhancement: cves/2020/CVE-2020-25506.yaml by mp
* Enhancement: cves/2020/CVE-2020-28871.yaml by mp
* Enhancement: cves/2020/CVE-2020-28188.yaml by mp
* Enhancement: cves/2020/CVE-2020-26948.yaml by mp
* Enhancement: cves/2020/CVE-2020-26919.yaml by mp
* Enhancement: cves/2020/CVE-2020-26214.yaml by mp
* Syntax cleanup
* Enhancement: cves/2021/CVE-2021-38647.yaml by mp
* Syntax and a title change
* Enhancement: cves/2021/CVE-2021-38702.yaml by mp
* Fix references
* Enhancement: cves/2021/CVE-2021-38704.yaml by mp
* Enhancement: cves/2021/CVE-2021-41691.yaml by mp
* Enhancement: cves/2021/CVE-2021-41691.yaml by mp
* Enhancement: cves/2021/CVE-2021-41691.yaml by mp
* Enhancement: cves/2021/CVE-2021-44529.yaml by mp
* Conflicts resolved
* Fix quoting
* Enhancement: cves/2021/CVE-2021-45967.yaml by mp
* Enhancement: cves/2022/CVE-2022-0189.yaml by mp
* Enhancement: cves/2022/CVE-2022-0189.yaml by mp
* Enhancement: cves/2022/CVE-2022-23779.yaml by mp
* Enhancement: default-logins/apache/dolphinscheduler-default-login.yaml by mp
* Enhancement: default-logins/cobbler/hue-default-credential.yaml by mp
* Enhancement: default-logins/emqx/emqx-default-login.yaml by mp
* Enhancement: default-logins/geoserver/geoserver-default-login.yaml by mp
* Enhancement: cves/2021/CVE-2021-38647.yaml by mp
* Enhancement: cves/2021/CVE-2021-41691.yaml by mp
* Enhancement: cves/2021/CVE-2021-45967.yaml by mp
* Enhancement: cves/2022/CVE-2022-0189.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-14536.yaml by mp
* Enhancement: default-logins/apache/dolphinscheduler-default-login.yaml by mp
* Enhancement: default-logins/geoserver/geoserver-default-login.yaml by mp
* Update CVE-2020-25223.yaml
* Update CVE-2020-26214.yaml
* Update CVE-2020-25506.yaml
* Update CVE-2020-2551.yaml
* Update CVE-2020-26919.yaml
* Update CVE-2021-44529.yaml
* Update CVE-2020-28871.yaml
* Update CVE-2020-28188.yaml
* Update CVE-2021-45967.yaml
* Update hue-default-credential.yaml
* Update CVE-2021-44529.yaml
* misc syntax update
* Syntax restore some characters
* Spacing
* Enhancement: vulnerabilities/wordpress/hide-security-enhancer-lfi.yaml by mp
* Enhancement: vulnerabilities/wordpress/issuu-panel-lfi.yaml by mp
* Enhancement: cves/2019/CVE-2019-10068.yaml by mp
* Enhancement: cves/2019/CVE-2019-10232.yaml by mp
* Enhancement: cves/2019/CVE-2019-10758.yaml by mp
* Enhancement: cves/2019/CVE-2019-11510.yaml by mp
* Enhancement: cves/2019/CVE-2019-11580.yaml by mp
* Enhancement: cves/2019/CVE-2019-11581.yaml by mp
* Enhancement: cves/2019/CVE-2019-12314.yaml by mp
* Enhancement: cves/2019/CVE-2019-13101.yaml by mp
* Link wrapping issue
* Enhancement: cves/2019/CVE-2019-13462.yaml by mp
* Enhancement: cves/2019/CVE-2019-15107.yaml by mp
* Enhancement: cves/2019/CVE-2019-15859.yaml by mp
* Enhancement: cves/2019/CVE-2019-16759.yaml by mp
* Enhancement: cves/2019/CVE-2019-16662.yaml by mp
* Enhancement: cves/2019/CVE-2019-16278.yaml by mp
* Enhancement: cves/2019/CVE-2019-10232.yaml by mp
* Enhancement: cves/2019/CVE-2019-10758.yaml by mp
* Enhancement: cves/2019/CVE-2019-11510.yaml by mp
* Enhancement: cves/2019/CVE-2019-12725.yaml by mp
* Enhancement: cves/2019/CVE-2019-13101.yaml by mp
* Enhancement: cves/2019/CVE-2019-15107.yaml by mp
* Enhancement: cves/2019/CVE-2019-15859.yaml by mp
* Enhancement: cves/2019/CVE-2019-16662.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-10543.yaml by cs
* Enhancement: cves/2021/CVE-2021-33807.yaml by mp
* Enhancement: cves/2010/CVE-2010-0943.yaml by mp
* Enhancement: cves/2008/CVE-2008-6172.yaml by mp
* Enhancement: vulnerabilities/simplecrm/simple-crm-sql-injection.yaml by mp
* Enhancement: vulnerabilities/oracle/oracle-siebel-xss.yaml by mp
* Enhancement: cves/2010/CVE-2010-1602.yaml by mp
* Enhancement: cves/2010/CVE-2010-1474.yaml by mp
* Enhancement: network/cisco-smi-exposure.yaml by mp
* Enhancement: cves/2021/CVE-2021-37704.yaml by mp
* Enhancement: vulnerabilities/other/microweber-xss.yaml by mp
* Enhancement: cves/2019/CVE-2019-16313.yaml by mp
* Enhancement: cves/2021/CVE-2021-3017.yaml by mp
* Enhancement: cves/2010/CVE-2010-1353.yaml by mp
* Enhancement: cves/2010/CVE-2010-5278.yaml by mp
* Enhancement: cves/2021/CVE-2021-37573.yaml by mp
* Enhancement: vulnerabilities/oracle/oracle-siebel-xss.yaml by mp
* Enhancement: cves/2010/CVE-2010-1602.yaml by mp
* Enhancement: cves/2010/CVE-2010-1474.yaml by mp
* Enhancement: vulnerabilities/other/microweber-xss.yaml by mp
* Enhancement: cves/2018/CVE-2018-11709.yaml by mp
* Enhancement: cves/2014/CVE-2014-2321.yaml by mp
* Enhancement: vulnerabilities/other/visual-tools-dvr-rce.yaml by mp
* Enhancement: vulnerabilities/other/visual-tools-dvr-rce.yaml by mp
* Manual enhancement
* Manual enhancement push due to dashboard failure
* Testing of dashboard accidentally commited to dashboard branch
* Spacing
Put some CVEs in the classification
* Add missing cve-id fields to templates in cve/
Co-authored-by: sullo <sullo@cirt.net>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-01 14:21:42 +05:30
04ec5b6b6d
Create netgear-wac124-router-auth-bypass.yaml ( #3986 )
...
* Create netgear-wac124-router-auth-bypass.yaml
This vulnerability allows network-adjacent attackers to bypass authentication on affected of WAC124, AC2000 routers. Authentication is not required to exploit this vulnerability.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
* misc update
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-03-27 20:40:41 +05:30
948ceb8b11
Create oracle-fatwire-lfi.yaml ( #3975 )
...
* Create oracle-fatwire-lfi.yaml
* Update oracle-fatwire-lfi.yaml
* Update oracle-fatwire-lfi.yaml
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2022-03-26 14:56:13 +05:30
eb23e6e44e
Dashboard Content Enhancements ( #3980 )
...
Dashboard Content Enhancements
2022-03-25 10:16:18 -04:00
814d07fb7d
Dashboard Content Enhancements ( #3961 )
...
* Enhancement: default-logins/viewpoint/trilithic-viewpoint-login.yaml by mp
* Enhancement: default-logins/visionhub/visionhub-default-login.yaml by mp
* Enhancement: default-logins/weblogic/weblogic-weak-login.yaml by mp
* Enhancement: default-logins/wifisky/wifisky-default-login.yaml by mp
* Enhancement: default-logins/wso2/wso2-default-login.yaml by mp
* Enhancement: default-logins/xerox/xerox7-default-login.yaml by mp
* Enhancement: default-logins/xxljob/xxljob-default-login.yaml by mp
* Enhancement: default-logins/zabbix/zabbix-default-login.yaml by mp
* Enhancement: default-logins/zmanda/zmanda-default-login.yaml by mp
* Enhancement: dns/azure-takeover-detection.yaml by mp
* Enhancement: dns/cname-fingerprint.yaml by mp
* Enhancement: dns/cname-service-detection.yaml by mp
* Enhancement: dns/detect-dangling-cname.yaml by mp
* Enhancement: dns/dns-waf-detect.yaml by mp
* Enhancement: default-logins/weblogic/weblogic-weak-login.yaml by mp
* Enhancement: default-logins/xxljob/xxljob-default-login.yaml by mp
* Enhancement: dns/dnssec-detection.yaml by mp
* Enhancement: dns/ec2-detection.yaml by mp
* Add CVSS/CWE
* Trailing space
* Linting error on comment indentation
* Typo
* Enhancement: dns/elasticbeantalk-takeover.yaml by mp
* Enhancement: cves/2020/CVE-2020-23517.yaml by mp
* Enhancement: dns/elasticbeantalk-takeover.yaml by mp
* Enhancement: dns/mx-fingerprint.yaml by mp
* Enhancement: dns/mx-service-detector.yaml by mp
* Enhancement: dns/nameserver-fingerprint.yaml by mp
* Enhancement: dns/ptr-fingerprint.yaml by mp
* Enhancement: dns/servfail-refused-hosts.yaml by mp
* Enhancement: dns/spoofable-spf-records-ptr.yaml by mp
* Enhancement: dns/txt-fingerprint.yaml by mp
* Enhancement: dns/worksites-detection.yaml by mp
* Enhancement: exposed-panels/3g-wireless-gateway.yaml by mp
* Enhancement: exposed-panels/acemanager-login.yaml by mp
* Enhancement: exposed-panels/acrolinx-dashboard.yaml by mp
* Enhancement: dns/mx-fingerprint.yaml by mp
* Enhancement: dns/mx-service-detector.yaml by mp
* Enhancement: dns/ptr-fingerprint.yaml by mp
* Enhancement: dns/servfail-refused-hosts.yaml by mp
* Enhancement: dns/spoofable-spf-records-ptr.yaml by mp
* Enhancement: cves/2021/CVE-2021-39501.yaml by mp
* Enhancement: cves/2021/CVE-2021-40323.yaml by mp
* Enhancement: cves/2021/CVE-2021-40539.yaml by mp
* Enhancement: cves/2021/CVE-2021-40542.yaml by mp
* Enhancement: cves/2021/CVE-2021-40856.yaml by mp
* Enhancement: cves/2021/CVE-2021-40859.yaml by mp
* Enhancement: cves/2021/CVE-2021-40323.yaml by mp
* Enhancement: cves/2021/CVE-2021-40539.yaml by mp
* Enhancement: cves/2010/CVE-2010-1875.yaml by mp
* Enhancement: exposed-panels/aims-password-portal.yaml by mp
* Enhancement: exposed-panels/airflow-panel.yaml by mp
* Enhancement: exposed-panels/akamai-cloudtest.yaml by mp
* Enhancement: exposed-panels/alfresco-detect.yaml by mp
* Enhancement: exposed-panels/alienvault-usm.yaml by mp
* Enhancement: exposed-panels/ambari-exposure.yaml by mp
* Enhancement: exposed-panels/amcrest-login.yaml by mp
* Enhancement: exposed-panels/ametys-admin-login.yaml by mp
* Enhancement: exposed-panels/ametys-admin-login.yaml by mp
* Enhancement: exposed-panels/alienvault-usm.yaml by mp
* Enhancement: exposed-panels/airflow-panel.yaml by mp
* Enhancement: exposed-panels/aims-password-portal.yaml by mp
* Enhancement: exposed-panels/ambari-exposure.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-17369.yaml by mp
* Enhancement: exposed-panels/apache/public-tomcat-manager.yaml by mp
* Enhancement: exposed-panels/apache/apache-apisix-panel.yaml by mp
* Enhancement: exposed-panels/ansible-tower-exposure.yaml by mp
* Enhancement: exposed-panels/ampps-panel.yaml by mp
* Enhancement: exposed-panels/ampps-admin-panel.yaml by mp
* Enhancement: exposed-panels/ametys-admin-login.yaml by mp
* Enhancement: cves/2010/CVE-2010-1878.yaml by mp
* Fix encoded chars
* trailing space
* Enhancement: cnvd/2021/CNVD-2021-15822.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-15822.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-15822.yaml by mp
* Enhancement: exposed-panels/apache/tomcat-pathnormalization.yaml by mp
* Enhancement: cves/2021/CVE-2021-40542.yaml by mp
* Enhancement: misconfiguration/horde-unauthenticated.yaml by mp
* Enhancement: misconfiguration/horde-unauthenticated.yaml by mp
* Enhancement: misconfiguration/horde-unauthenticated.yaml by mp
* Enhancement: cves/2021/CVE-2021-40542.yaml by mp
* Enhancement: exposed-panels/apiman-panel.yaml by mp
* Enhancement: cves/2010/CVE-2010-1873.yaml by mp
* Enhancement: exposed-panels/arcgis/arcgis-panel.yaml by mp
* Enhancement: exposed-panels/arcgis/arcgis-rest-api.yaml by mp
* Enhancement: exposed-panels/argocd-login.yaml by mp
* Enhancement: exposed-panels/atlassian-crowd-panel.yaml by mp
* Enhancement: exposed-panels/atvise-login.yaml by mp
* Enhancement: exposed-panels/avantfax-panel.yaml by mp
* Enhancement: exposed-panels/avatier-password-management.yaml by mp
* Enhancement: exposed-panels/axigen-webadmin.yaml by mp
* Enhancement: exposed-panels/axigen-webmail.yaml by mp
* Enhancement: exposed-panels/azkaban-web-client.yaml by mp
* Enhancement: exposed-panels/acunetix-panel.yaml by mp
* Enhancement: exposed-panels/adiscon-loganalyzer.yaml by mp
* Enhancement: exposed-panels/adminer-panel.yaml by mp
* Enhancement: cves/2010/CVE-2010-1870.yaml by mp
* Enhancement: exposed-panels/adminset-panel.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-component-login.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-connect-central-login.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-experience-manager-login.yaml by mp
* Enhancement: exposed-panels/adobe/adobe-media-server.yaml by mp
* Enhancement: exposed-panels/advance-setup.yaml by mp
* Enhancement: exposed-panels/aerohive-netconfig-ui.yaml by mp
* Enhancement: exposed-panels/aims-password-mgmt-client.yaml by mp
* Enhancement: exposed-panels/aims-password-mgmt-client.yaml by mp
* Enhancement: exposed-panels/aims-password-portal.yaml by mp
* Enhancement: exposed-panels/airflow-panel.yaml by mp
* Enhancement: exposed-panels/airflow-panel.yaml by mp
* spacing issues
* Spacing
* HTML codes improperly interpreted
Relocate horde-unauthenticated.yaml to CVE-2005-3344.yaml
* Relocate horde-unauthenticated.yaml to CVE-2005-3344.yaml
* Enhancement: technologies/waf-detect.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml by mp
* Enhancement: network/sap-router-info-leak.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml by mp
* Enhancement: network/sap-router-info-leak.yaml by mp
* Enhancement: network/exposed-adb.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/vmware/vrealize-operations-log4j-rce.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-woocommerce-sqli.yaml by mp
* Enhancement: exposures/tokens/digitalocean/tugboat-config-exposure.yaml by mp
* Enhancement: exposed-panels/concrete5/concrete5-install.yaml by mp
* Enhancement: vulnerabilities/wordpress/wordpress-infinitewp-auth-bypass.yaml by mp
* indentation issue
* Character encoding issue fix
* Enhancement: default-logins/alibaba/canal-default-login.yaml by mp
* Enhancement: default-logins/alphaweb/alphaweb-default-login.yaml by mp
* Enhancement: default-logins/ambari/ambari-default-login.yaml by mp
* Enhancement: default-logins/apache/airflow-default-login.yaml by mp
* Enhancement: default-logins/apache/apisix-default-login.yaml by mp
* Enhancement: default-logins/apollo/apollo-default-login.yaml by mp
* Enhancement: default-logins/arl/arl-default-login.yaml by mp
* Enhancement: default-logins/digitalrebar/digitalrebar-default-login.yaml by mp
* Enhancement: default-logins/mantisbt/mantisbt-default-credential.yaml by mp
* Enhancement: default-logins/stackstorm/stackstorm-default-login.yaml by mp
* Enhancement: dns/caa-fingerprint.yaml by mp
* Enhancement: exposed-panels/active-admin-exposure.yaml by mp
* Enhancement: exposed-panels/activemq-panel.yaml by mp
* Enhancement: default-logins/ambari/ambari-default-login.yaml by mp
* Restore & stomped by dashboard
* Enhancement: cves/2010/CVE-2010-1653.yaml by mp
* Enhancement: cves/2021/CVE-2021-38751.yaml by mp
* Enhancement: cves/2021/CVE-2021-39320.yaml by mp
* Enhancement: cves/2021/CVE-2021-39322.yaml by mp
* Enhancement: cves/2021/CVE-2021-39327.yaml by mp
* Enhancement: cves/2021/CVE-2021-39350.yaml by mp
* Enhancement: cves/2021/CVE-2021-39433.yaml by mp
* Enhancement: cves/2021/CVE-2021-41192.yaml by mp
* Enhancement: cnvd/2021/CNVD-2021-15824.yaml by mp
* Enhancement: exposed-panels/ansible-semaphore-panel.yaml by mp
* Enhancement: exposed-panels/aviatrix-panel.yaml by mp
* Enhancement: cves/2022/CVE-2022-24288.yaml by mp
* Enhancement: cves/2022/CVE-2022-24990.yaml by mp
* Enhancement: cves/2022/CVE-2022-26159.yaml by mp
* Enhancement: default-logins/aem/aem-default-login.yaml by mp
* Enhancement: exposed-panels/blue-iris-login.yaml by mp
* Enhancement: exposed-panels/bigbluebutton-login.yaml by mp
* Enhancement: cves/2022/CVE-2022-24288.yaml by mp
* Enhancement: cves/2022/CVE-2022-24990.yaml by mp
* Enhancement: cves/2022/CVE-2022-26159.yaml by mp
* Enhancement: default-logins/aem/aem-default-login.yaml by mp
* Spacing issues
Add cve-id field
* fix & stomping
* Enhancement: cves/2016/CVE-2016-1000141.yaml by mp
* Enhancement: cves/2020/CVE-2020-24912.yaml by mp
* Enhancement: cves/2021/CVE-2021-35265.yaml by mp
* Enhancement: cves/2022/CVE-2022-0437.yaml by mp
* Enhancement: cves/2010/CVE-2010-1601.yaml by mp
* Enhancement: technologies/teradici-pcoip.yaml by mp
* Enhancement: vulnerabilities/other/unauth-hoteldruid-panel.yaml by mp
* Enhancement: cves/2010/CVE-2010-1475.yaml by mp
* Enhancement: cves/2010/CVE-2010-1535.yaml by mp
* Enhancement: exposed-panels/epson-web-control-detect.yaml by mp
* Enhancement: exposed-panels/epson-access-detect.yaml by mp
* Enhancement: cves/2020/CVE-2020-29453.yaml by mp
* Fix spacing
Co-authored-by: sullo <sullo@cirt.net>
2022-03-25 17:15:10 +05:30
95d9b7f30c
Merge pull request #3953 from projectdiscovery/regex-update
...
Updated "/etc/passwd" regex to avoid possible false positive results.
2022-03-23 00:23:06 +05:30
ec99241f0e
Updated "/etc/passwd" regex to avoid possible false positive results.
2022-03-22 13:31:31 +05:30
c513d88d0d
Merge branch 'master' into rule-add-v102
2022-03-22 13:23:38 +05:30
66927bff20
Update tekon-info-leak.yaml
2022-03-21 16:36:39 +05:30
218b87a384
removing duplicate template
2022-03-18 21:09:34 +05:30
b17a49d4e4
Create CNVD-2021-28277.yaml ( #3892 )
...
* Create CNVD-2021-28277.yaml
* misc update
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-03-18 20:35:35 +05:30
bb7dbc4f0c
Create tekon-info-leak.yaml
...
A vulnerability in Tekon allows remote unauthenticated users to disclose the Log of the remote device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-03-18 19:38:44 +09:00
795dbfdecc
Added Kiwi TCMS JSON-RPC misconfig
2022-03-13 17:50:38 +05:30
713c8d87cf
Merge pull request #3877 from projectdiscovery/dixell-xweb500-file-write
...
Create dixell-xweb500-file-write.yaml
2022-03-11 16:34:36 +05:30
5bd8cb0f89
Update and rename dixell-xweb500-file-write.yaml to dixell-xweb500-filewrite.yaml
2022-03-11 16:30:02 +05:30
030c9484b9
Update and rename unisharp-laravel-file-manager.yaml to laravel-filemanager-lfi.yaml
2022-03-11 15:57:07 +05:30
b7cc60c53d
Update dixell-xweb500-file-write.yaml
2022-03-11 02:00:55 +05:30
d7b8f35d9f
Create unisharp-laravel-file-manager.yaml
2022-03-11 02:00:23 +05:30
a5713235f2
Create dixell-xweb500-file-write.yaml
2022-03-11 01:57:31 +05:30
d5556d3a75
Enhancement: default-logins/cobbler/cobbler-default-login.yaml by mp
2022-03-03 08:27:48 -05:00
83d58c326f
Enhancement: vulnerabilities/other/accent-microcomputers-lfi.yaml by mp
2022-03-02 10:11:09 -05:00
3f18fe8d0b
Enhancement: vulnerabilities/other/accent-microcomputers-lfi.yaml by mp
2022-03-02 09:52:59 -05:00
3b031c3693
Enhancement: vulnerabilities/other/74cms-sqli.yaml by mp
2022-03-02 09:43:09 -05:00
a330bb78bb
Merge branch 'master' into dashboard
2022-02-28 17:21:32 -05:00
44a9163e54
Update microweber-xss.yaml
2022-03-01 02:47:11 +05:30
420a995b14
Enhancement: vulnerabilities/other/unauth-spark-api.yaml by cs
2022-02-28 14:17:05 -05:00
1368ea9fe7
Create microweber-xss.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-02-28 16:17:51 +09:00
c07bd54967
payload fix
2022-02-25 17:28:47 +05:30
402cda8a0a
Merge pull request #3747 from Akokonunes/patch-120
...
Create otobo-open-redirect.yaml
2022-02-23 17:35:55 +05:30
b86641d6df
Update and rename otobo-open-redirect.yaml to vulnerabilities/other/otobo-open-redirect.yaml
2022-02-23 17:07:41 +05:30
d5b600a2a1
Merge pull request #3727 from evanRubinsteinIT/pollbot-redirect
...
Added pollbot-redirect
2022-02-22 13:56:25 +05:30
4731194ac2
Update pollbot-redirect.yaml
2022-02-22 12:01:20 +05:30
2fb5401ddb
Update pollbot-redirect.yaml
2022-02-22 11:48:32 +05:30
0672c4dc7d
Update goip-1-lfi.yaml
2022-02-22 11:38:07 +05:30
21a267d106
Updated Template
2022-02-18 10:48:34 -05:00
a536bb5087
Added pollbot-redirect
2022-02-18 10:39:04 -05:00
a2cec40a5d
Create goip-1-lfi.yaml
...
Input passed thru the 'content' or 'sidebar' GET parameter in 'frame.html' or 'frame.A100.html' not properly sanitized before being used to read files. This can be exploited by an unauthenticated attacker to read arbitrary files on the affected system.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2022-02-18 21:33:17 +09:00
f705c2debd
removing duplicate template
2022-02-15 23:43:06 +05:30
be309f08e0
Update and rename yshaadmin-traversal.yaml to yishaadmin-lfi.yaml
2022-02-15 18:33:24 +05:30
Arafat Ansari
Ritik Chaddha
Prince Chaddha
Ritik Chaddha
GwanYeong Kim
johnk3r
uomogrande
Arm!tage
sullo
Sandeep Singh
MostInterestingBotInTheWorld
Aaron Chen
Muhammad Daffa
forgedhallpass
Evan Rubinstein