Commit Graph

2029 Commits (79c077ddf781712f448bf89c7b467243aa0755ab)

Author SHA1 Message Date
Prince Chaddha b10b8a61b8
Update CVE-2021-21479.yaml 2021-07-20 14:16:30 +05:30
Prince Chaddha 0af69ac0fd
Update CVE-2021-21479.yaml 2021-07-20 14:15:45 +05:30
Muhammad Daffa 21809132da
Renamed to CVE-2021-24340.yaml 2021-07-20 13:36:04 +07:00
Prince Chaddha eb15971f16
Merge pull request #2096 from geeknik/patch-4
Create CVE-2021-26475.yaml
2021-07-20 11:53:45 +05:30
sandeep 13e5528c46 duplicate update 2021-07-20 11:40:23 +05:30
Sandeep Singh ac39bd3284
Merge pull request #2100 from daffainfo/master
Renamed CVE-2020-8771.yaml
2021-07-20 11:38:35 +05:30
Sandeep Singh 14beefec28
Update CVE-2020-8771.yaml 2021-07-20 11:35:57 +05:30
sandeep 19fe96bc45 minor improvements and file name update 2021-07-20 11:33:16 +05:30
Muhammad Daffa d27fb4c3b0
Renamed CVE-2020-8771.yaml 2021-07-20 12:49:16 +07:00
sandeep 4dbf36813d removing duplicate template 2021-07-20 00:43:39 +05:30
Sandeep Singh 6eee57115c
Merge pull request #2083 from projectdiscovery/fixing-xss-matchers
fixing-xss-matchers
2021-07-20 00:28:01 +05:30
Sandeep Singh ae24c38370
Merge pull request #2087 from daffainfo/patch-89
Add CVE-2018-16059
2021-07-20 00:25:31 +05:30
Sandeep Singh aa2c8d210b
Update CVE-2018-16059.yaml 2021-07-20 00:15:32 +05:30
sandeep 9d19d5fb5b description update 2021-07-20 00:12:01 +05:30
sandeep 13d26d8c6d moving files around 2021-07-20 00:10:30 +05:30
sandeep 414883f719 Update CVE-2020-12054.yaml 2021-07-19 23:55:15 +05:30
Geeknik Labs 39acc90454
Create CVE-2021-26475.yaml
CVE-2021-26475 -- EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.
2021-07-19 08:34:21 -05:00
Sandeep Singh ffce401c23
Update CVE-2018-16283.yaml 2021-07-19 18:22:19 +05:30
Muhammad Daffa 68efee3702
Merge branch 'projectdiscovery:master' into master 2021-07-19 19:48:57 +07:00
Muhammad Daffa 7a99c2db48
Rename to CVE-2018-16283 2021-07-19 19:47:31 +07:00
sandeep c22924c1ba misc updates 2021-07-19 18:17:12 +05:30
sandeep 2d6198ba04 Updated payload + matcher 2021-07-19 18:13:09 +05:30
Sandeep Singh ff900ebc07
Merge pull request #2084 from gy741/rule-add-v28
Create CVE-2020-28188.yaml
2021-07-19 16:58:07 +05:30
sandeep eec253fdd8 minor update 2021-07-19 16:53:47 +05:30
sandeep 7d9dbc4aad Update CVE-2020-28188.yaml 2021-07-19 16:41:12 +05:30
Muhammad Daffa 5a5b5ea18e
Create CVE-2018-16059.yaml 2021-07-19 17:16:19 +07:00
GwanYeong Kim edabf1e7ca Create CVE-2020-28188.yaml
Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php in Event parameter.

Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-19 15:13:57 +09:00
Prince Chaddha 707083438e
Update CVE-2021-24389.yaml 2021-07-19 11:37:51 +05:30
Prince Chaddha 751f4e099c
Update CVE-2021-24335.yaml 2021-07-19 11:37:18 +05:30
Prince Chaddha c8ee50bd9b
Update CVE-2021-24320.yaml 2021-07-19 11:36:45 +05:30
Prince Chaddha 06a82e2c78
Update CVE-2021-24298.yaml 2021-07-19 11:36:11 +05:30
Prince Chaddha 75c5a8c68e
Update CVE-2020-17362.yaml 2021-07-19 11:35:47 +05:30
Prince Chaddha c22839b3fd
Update CVE-2020-12054.yaml 2021-07-19 11:35:24 +05:30
Prince Chaddha aff7f7fa64
Update CVE-2019-19134.yaml 2021-07-19 11:34:59 +05:30
Prince Chaddha 5dce5e078e
Update CVE-2019-16525.yaml 2021-07-19 11:34:07 +05:30
Prince Chaddha 5b1766e10b
Update CVE-2019-16332.yaml 2021-07-19 11:33:40 +05:30
Prince Chaddha bf0aff7579
Update CVE-2019-15713.yaml 2021-07-19 11:32:53 +05:30
Prince Chaddha fee3b0dbba
Update CVE-2018-5316.yaml 2021-07-19 11:32:30 +05:30
Prince Chaddha 5923b1522e
Update CVE-2018-20462.yaml 2021-07-19 11:31:57 +05:30
Prince Chaddha 1453b08a1d
Update CVE-2018-11709.yaml 2021-07-19 11:31:16 +05:30
Prince Chaddha cfd72afbc5
Update CVE-2017-9288.yaml 2021-07-19 11:30:44 +05:30
Prince Chaddha 70b1ba08d6
Update CVE-2017-18536.yaml 2021-07-19 11:29:58 +05:30
Prince Chaddha 63765c5693
Update CVE-2017-17451.yaml 2021-07-19 11:29:23 +05:30
Prince Chaddha df69924f5b
Update CVE-2017-17059.yaml 2021-07-19 11:15:37 +05:30
Prince Chaddha b47cf72dd0
Update CVE-2017-17043.yaml 2021-07-19 11:15:08 +05:30
Prince Chaddha a81d23491b
Update CVE-2016-1000135.yaml 2021-07-19 11:14:30 +05:30
Prince Chaddha e6f51e19eb
Update CVE-2016-1000134.yaml 2021-07-19 11:13:59 +05:30
Prince Chaddha d74ebd67d7
Update CVE-2016-1000133.yaml 2021-07-19 11:13:30 +05:30
Prince Chaddha 1790dd8fc2
Update CVE-2016-1000132.yaml 2021-07-19 11:12:58 +05:30
Prince Chaddha 62c3971816
Update CVE-2016-1000131.yaml 2021-07-19 11:12:30 +05:30
Prince Chaddha ce8bab80f9
Update CVE-2016-1000130.yaml 2021-07-19 11:12:07 +05:30
Prince Chaddha fbf13672ba
Update CVE-2016-1000129.yaml 2021-07-19 11:11:45 +05:30
Prince Chaddha e694c5ed4f
Update CVE-2016-1000128.yaml 2021-07-19 11:11:14 +05:30
Prince Chaddha ac74c79880
Update CVE-2014-4513.yaml 2021-07-19 11:10:50 +05:30
Prince Chaddha 47adcf182a
Update CVE-2013-4625.yaml 2021-07-19 11:06:19 +05:30
Prince Chaddha 62617288d0
Update CVE-2013-4117.yaml 2021-07-19 11:05:55 +05:30
Prince Chaddha c8a1047ec1
Update CVE-2013-2287.yaml 2021-07-19 11:05:25 +05:30
Prince Chaddha 269d14b0be
Update CVE-2012-5913.yaml 2021-07-19 11:05:03 +05:30
Prince Chaddha 68e005d1a2
Update CVE-2012-4768.yaml 2021-07-19 11:03:46 +05:30
Prince Chaddha 0fb255a462
Update CVE-2012-4273.yaml 2021-07-19 11:03:23 +05:30
Prince Chaddha 70bd4c64ed
Update CVE-2012-4242.yaml 2021-07-19 11:02:53 +05:30
Prince Chaddha 6cd08e6f41
Update CVE-2012-2371.yaml 2021-07-19 11:01:40 +05:30
Prince Chaddha 41df1d8136
Update CVE-2012-1835.yaml 2021-07-19 11:01:12 +05:30
Prince Chaddha b4c91dc3c3
Update CVE-2012-0901.yaml 2021-07-19 11:00:43 +05:30
Prince Chaddha 16d049098f
Update CVE-2011-5265.yaml 2021-07-19 11:00:15 +05:30
Prince Chaddha 112172ca7f
Update CVE-2011-5181.yaml 2021-07-19 10:59:46 +05:30
Prince Chaddha c255951814
Update CVE-2011-5179.yaml 2021-07-19 10:59:15 +05:30
Prince Chaddha 88cbfd1c8a
Update CVE-2011-5107.yaml 2021-07-19 10:58:42 +05:30
Prince Chaddha 0ee4a82a51
Update CVE-2011-5106.yaml 2021-07-19 10:58:12 +05:30
Prince Chaddha 92e3ef5abb
Update CVE-2011-4926.yaml 2021-07-19 10:57:35 +05:30
Prince Chaddha c8776b52be
Update CVE-2011-4624.yaml 2021-07-19 10:56:53 +05:30
Prince Chaddha 9292a9a025
Update CVE-2011-4618.yaml 2021-07-19 10:55:56 +05:30
Suman Kar 77fd227376
Update CVE-2021-24498.yaml 2021-07-19 10:45:58 +05:30
Suman Kar 556a94136b Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS) 2021-07-19 10:40:50 +05:30
Sandeep Singh 922555503b
Merge pull request #2073 from gy741/rule-add-v26
Create CVE-2020-27866.yaml
2021-07-18 23:25:43 +05:30
sandeep 965e6fcc00 minor update 2021-07-18 23:24:55 +05:30
Sandeep Singh f9c8314092
Merge pull request #2077 from gy741/rule-add-v27
Create Advantech R-SeeNet Multiple Reflected XSS vulnerabilities
2021-07-18 23:17:40 +05:30
sandeep c56680cef3 Additional matcher 2021-07-18 23:14:19 +05:30
Sandeep Singh 9971674b36
Update CVE-2021-21479.yaml 2021-07-18 22:54:34 +05:30
sandeep 3088fb5431 Removing CVE-2021-24213
As per blog - https://bentl.ee/posts/cve-givewp/

> This vulnerability requires user interaction from an admin in order to be exploited.
2021-07-18 22:39:37 +05:30
sandeep 76e95ac1e5 Minor improvements 2021-07-18 22:36:15 +05:30
Dhiyaneshwaran 22fa4de8d8
Update CVE-2021-21307.yaml 2021-07-18 19:33:28 +05:30
Dhiyaneshwaran e692d81999
Update CVE-2021-21307.yaml 2021-07-18 19:24:46 +05:30
Dhiyaneshwaran 0a8d2ffdcc
Create CVE-2021-21307.yaml 2021-07-18 19:19:19 +05:30
GwanYeong Kim 4414ff60db Create Advantech R-SeeNet Multiple Reflected XSS vulnerabilities
This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution.

Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-18 22:12:01 +09:00
Dhiyaneshwaran 0a01f0cd79
Create CVE-2021-24213.yaml 2021-07-18 16:44:57 +05:30
Dwi Siswanto e4b2316bf0 Add CVE-2021-21479 2021-07-18 11:11:56 +07:00
GwanYeong Kim fb22fd40c5 Create CVE-2020-27866.yaml
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this vulnerability.

Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-18 10:03:38 +09:00
Sandeep Singh b707e46052
Merge pull request #1830 from random-robbie/patch-13
Create CVE-2013-3827.yaml
2021-07-17 21:50:24 +05:30
sandeep 41436ccef8 matcher update 2021-07-17 21:44:56 +05:30
sandeep 450c6b3690 Updated POC for CVE-2017-15944 2021-07-17 17:07:28 +05:30
Prince Chaddha 3a7177191d
Merge pull request #2064 from daffainfo/patch-88
Create CVE-2016-1000135.yaml
2021-07-17 10:20:54 +05:30
Prince Chaddha c20eba7957
Merge pull request #2063 from daffainfo/patch-87
Create CVE-2016-1000134.yaml
2021-07-17 10:19:22 +05:30
Prince Chaddha 7d5e27f3d7
Update CVE-2016-1000135.yaml 2021-07-17 10:19:09 +05:30
Prince Chaddha d4f871f608
Merge pull request #2062 from daffainfo/patch-86
Create CVE-2016-1000133.yaml
2021-07-17 10:18:24 +05:30
Prince Chaddha 6a45c29d46
Update CVE-2016-1000134.yaml 2021-07-17 10:18:09 +05:30
Prince Chaddha 0996d4cf5f
Update CVE-2016-1000133.yaml 2021-07-17 10:16:20 +05:30
Prince Chaddha 9504d806dc
Merge pull request #2061 from daffainfo/patch-85
Create CVE-2016-1000132.yaml
2021-07-17 10:15:34 +05:30
Prince Chaddha 2e1222e865
Update CVE-2016-1000132.yaml 2021-07-17 10:10:50 +05:30
Prince Chaddha 848e7a2b5e
Merge pull request #2058 from daffainfo/patch-83
Create CVE-2016-1000130.yaml
2021-07-17 10:10:10 +05:30
Prince Chaddha 59338c5a27
Merge pull request #2059 from daffainfo/patch-84
Create CVE-2016-1000131.yaml
2021-07-17 10:08:37 +05:30
Prince Chaddha 7e52bacc81
Merge pull request #2057 from daffainfo/patch-82
Create CVE-2016-1000129.yaml
2021-07-17 10:07:18 +05:30
Prince Chaddha f503adee97
Update CVE-2016-1000130.yaml 2021-07-17 10:07:03 +05:30
Prince Chaddha 146085a0b8
Update CVE-2016-1000129.yaml 2021-07-17 10:05:56 +05:30
Prince Chaddha 2de24cfb1c
Merge pull request #2055 from daffainfo/patch-80
Create CVE-2009-1558.yaml
2021-07-17 10:04:49 +05:30
Prince Chaddha d49585b993
Merge pull request #2056 from daffainfo/patch-81
Create CVE-2016-1000128.yaml
2021-07-17 10:04:40 +05:30
Prince Chaddha dd16d1349a
Update CVE-2009-1558.yaml 2021-07-17 10:02:09 +05:30
Prince Chaddha b8e3840ad6
Update CVE-2007-0885.yaml 2021-07-17 09:59:54 +05:30
sandeep 048cdff225 Additional matcher 2021-07-17 02:07:26 +05:30
Muhammad Daffa 3fee8f6145
Create CVE-2016-1000135.yaml 2021-07-17 01:09:08 +07:00
Muhammad Daffa 89cd375576
Create CVE-2016-1000134.yaml 2021-07-17 01:07:53 +07:00
Muhammad Daffa 977b588c3c
Create CVE-2016-1000133.yaml 2021-07-17 01:06:22 +07:00
Muhammad Daffa e6cdaee59f
Create CVE-2016-1000132.yaml 2021-07-17 01:01:11 +07:00
sandeep e848640e9d Added CVE-2019-12616 2021-07-16 23:27:01 +05:30
Muhammad Daffa 4886bc48fd
Create CVE-2016-1000131.yaml 2021-07-17 00:55:47 +07:00
Muhammad Daffa 63d2932eac
Create CVE-2016-1000130.yaml 2021-07-17 00:52:56 +07:00
Muhammad Daffa 6ee439eda2
Create CVE-2016-1000129.yaml 2021-07-17 00:50:57 +07:00
Muhammad Daffa 3830a7805a
Create CVE-2016-1000128.yaml 2021-07-17 00:49:06 +07:00
Muhammad Daffa 141993dafd
Create CVE-2009-1558.yaml 2021-07-17 00:40:24 +07:00
Muhammad Daffa 4eb74ebcae
Update CVE-2010-2307.yaml 2021-07-17 00:38:35 +07:00
Geeknik Labs 9756a893f0
Create CVE-2007-0885.yaml 2021-07-16 12:34:42 -05:00
Muhammad Daffa b2c5fd9f0a
Create CVE-2010-2307.yaml 2021-07-17 00:32:16 +07:00
Muhammad Daffa 60c60f8955
Create CVE-2010-4231.yaml 2021-07-17 00:29:30 +07:00
Prince Chaddha 28a0197945
Merge pull request #2048 from projectdiscovery/princechaddha-patch-1
Update CVE-2018-12031.yaml
2021-07-16 20:18:06 +05:30
Muhammad Daffa 72de5ba106
Create CVE-2016-1000127.yaml 2021-07-16 20:46:42 +07:00
Muhammad Daffa 0b9c6a3520
Create CVE-2016-1000126.yaml 2021-07-16 20:43:22 +07:00
Prince Chaddha 33a0ede229
Merge pull request #2009 from gy741/rule-add-v24
Create CVE-2020-26919, CVE-2020-25506, OptiLink ONT1GEW GPON RCE, CVE-2021-31755
2021-07-16 18:04:52 +05:30
Prince Chaddha 5d88f85f44
Merge pull request #2003 from daffainfo/patch-48
Create CVE-2012-1835.yaml
2021-07-16 18:00:24 +05:30
Prince Chaddha 015a073d38
Merge pull request #2049 from daffainfo/patch-75
Create CVE-2019-20085.yaml
2021-07-16 17:59:46 +05:30
Prince Chaddha 829507fd1e
Update CVE-2019-20085.yaml 2021-07-16 17:58:51 +05:30
Prince Chaddha 379345fc05
Update CVE-2019-20085.yaml 2021-07-16 17:57:49 +05:30
Prince Chaddha a599daf014
Merge pull request #2010 from daffainfo/patch-54
Create CVE-2016-10960.yaml
2021-07-16 17:56:25 +05:30
Prince Chaddha eaba7dc5de
Update CVE-2016-10960.yaml 2021-07-16 17:54:37 +05:30
Muhammad Daffa f857247e84
Create CVE-2019-20085.yaml 2021-07-16 19:17:49 +07:00
Prince Chaddha 429bb01311
Update CVE-2016-10960.yaml 2021-07-16 17:46:33 +05:30
Prince Chaddha 833306ad86
Merge pull request #2025 from daffainfo/patch-63
Create CVE-2019-16525.yaml
2021-07-16 17:44:09 +05:30
Prince Chaddha 9ab9617b95
Update CVE-2019-16525.yaml 2021-07-16 17:42:41 +05:30
Prince Chaddha 304ab07b28
Update CVE-2018-12031.yaml 2021-07-16 17:42:00 +05:30
Prince Chaddha 110a989ff1
Update CVE-2018-12031.yaml 2021-07-16 17:36:12 +05:30
Prince Chaddha 6686b39b75
Merge pull request #2047 from daffainfo/patch-74
Create CVE-2018-12031.yaml
2021-07-16 17:33:54 +05:30
Prince Chaddha 4238febae3
Update CVE-2018-12031.yaml 2021-07-16 17:33:02 +05:30
Prince Chaddha 4da4ebf224
Merge pull request #2020 from gy741/rule-add-v25
Create CVE-2020-35713.yaml
2021-07-16 17:31:26 +05:30
Prince Chaddha f4f05394e1
Update CVE-2020-35713.yaml 2021-07-16 17:30:35 +05:30
Muhammad Daffa 134031c9aa
Update and rename cves/2020/CVE-2020-14461.yaml to cves/2018/CVE-2018-12031.yaml 2021-07-16 18:56:28 +07:00
Muhammad Daffa 90776cea1c
Create CVE-2020-14461.yaml 2021-07-16 18:52:12 +07:00
Regala 6aef970258
Update CVE-2020-17362.yaml
Added "nova-lite" matcher; massively reduce false positives.
2021-07-16 12:19:30 +01:00
Prince Chaddha 0c4a223fa0
Update CVE-2016-10960.yaml 2021-07-16 11:13:17 +05:30
Prince Chaddha 900347eeb4
Merge pull request #2044 from daffainfo/patch-72
Create CVE-2017-17043.yaml
2021-07-16 11:07:52 +05:30
Prince Chaddha 84223eb0b8
Merge pull request #2033 from daffainfo/patch-67
Create CVE-2018-11709.yaml
2021-07-16 11:07:42 +05:30
Prince Chaddha 247c964e78
Merge pull request #2034 from daffainfo/patch-68
Create CVE-2018-5316.yaml
2021-07-16 11:07:32 +05:30