5dc45f1fb1
Fix typo in cve-2019-14696.yaml and cve-2020-24223
2020-09-17 17:58:51 +08:00
048ab54a98
Update CVE-2020-25540.yaml
2020-09-16 23:54:38 +05:30
9ff599c333
Update CVE-2020-25540.yaml
2020-09-16 18:20:43 +00:00
74a88ab411
Create CVE-2020-25540.yaml
...
This is for testing against a Linux host as per https://www.exploit-db.com/exploits/48812 . If someone else wants to update this to add the check for Windows, that would be swell.
2020-09-16 18:17:57 +00:00
beed4568eb
Merge pull request #473 from CasperGN/fix-cve-2020-15920
...
Correcting endpoint to contain /PDC/ajaxreq.php?
2020-09-16 23:03:45 +05:30
63c0a78fc8
Correcting endpoint to contain /PDC/ajaxreq.php?
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-09-16 19:02:49 +02:00
ffef121561
Normalized id fields to match schema regex
2020-09-16 00:55:55 +05:30
e8ef3b5759
Merge pull request #461 from dwisiswant0/add/CVE-2020-15129
...
Add CVE-2020-15129
2020-09-15 19:45:59 +05:30
fa570b5560
✏️ Add reference
2020-09-15 00:40:03 +07:00
19f9e5842a
🔨 Update status matcher
2020-09-15 00:39:24 +07:00
e0f4437cdd
🔥 Add CVE-2020-15129
2020-09-15 00:31:40 +07:00
f7d2851490
✏️ Add descriptions
2020-09-14 14:26:39 +07:00
66f1789690
⬇️ Delete payloads
2020-09-14 14:26:11 +07:00
4c29679877
✏️ Update name
2020-09-14 14:25:01 +07:00
5fb87d81a2
🔥 Add CVE-2020-15505
2020-09-14 14:23:20 +07:00
118df25b44
Create CVE-2019-16662.yaml
2020-09-11 13:25:48 +00:00
a1d9be6097
Update CVE-2018-16763.yaml
2020-09-11 16:20:03 +05:30
73572d26de
Update CVE-2020-16139.yaml
2020-09-10 12:45:32 +00:00
459bdf6922
Cisco 7937G Denial-of-Service Reboot Attack 🔥
2020-09-10 07:32:07 +00:00
1110db2ad4
🔨 Add matchers condition
2020-09-10 01:44:26 +07:00
90de2070c4
Merge pull request #434 from CasperGN/master
...
More templates to Lotus Domino + workflow to bind them together
2020-09-09 22:40:33 +05:30
ad3bab450d
Based on metasploit regex
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-09-09 19:08:23 +02:00
e984f1466f
Adding word matcher which mimics public PoC exploits
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-09-09 16:53:16 +02:00
5f452f2969
And the last file
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-09-09 10:38:32 +02:00
7cf712bd49
Inclusion of stage- 1 detection of the old hashdump vuln.
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-09-09 10:11:50 +02:00
061c4e5c1f
Create CVE-2018-19386.yaml
2020-09-09 01:45:42 +00:00
0d0cb8c225
Fixed some spaces
2020-09-07 15:07:46 +02:00
7dcba733f0
Removed original code
2020-09-07 15:07:13 +02:00
1ba5ba68af
Moved some spaces
2020-09-07 15:06:14 +02:00
dd3ce36a87
Fix CVE-2017-7529.yaml matcher
...
Submit a fix to resolve the issue
https://github.com/projectdiscovery/nuclei-templates/issues/424 .
2020-09-07 15:04:58 +02:00
23e88269bb
Update CVE-2018-16763.yaml
2020-09-07 00:47:19 +00:00
28d50c311f
Merge pull request #422 from pikpikcu/patch-18
...
Add CVE-2018-16763 fuelCMS 1.4.1 - Remote Code Execution
2020-09-07 02:28:38 +05:30
f9ee82f180
Update CVE-2018-16763.yaml
2020-09-07 02:25:49 +05:30
a2fe4e9932
few updates
2020-09-07 02:22:50 +05:30
33643990de
Create CVE-2018-16763.yaml
2020-09-06 17:22:32 +00:00
3a624136d4
Update CVE-2019-7256.yaml
2020-09-06 12:06:45 +00:00
06c45b8a8d
Create CVE-2019-7256.yaml
2020-09-06 11:55:23 +00:00
cb5d5b9f0d
Update CVE-2019-1010287.yaml
2020-09-05 13:10:46 +05:30
6d67bb8d7b
Merge pull request #416 from pikpikcu/patch-15
...
Add CVE-2019-12593 IIceWarp <=10.4.4 - Local File Inclusion
2020-09-05 12:42:58 +05:30
3839c683f4
Update CVE-2019-12593.yaml
2020-09-05 12:41:21 +05:30
02a46f245e
Update CVE-2019-12593.yaml
2020-09-05 07:00:51 +00:00
4d4ff8073c
Update CVE-2019-12593.yaml
2020-09-05 07:00:15 +00:00
651396a50b
Merge pull request #413 from geeknik/patch-4
...
Create sql-dump.yaml
2020-09-05 12:28:38 +05:30
148bb16fa7
Update CVE-2020-11034.yaml
2020-09-05 12:27:56 +05:30
d0b755c0e3
Create CVE-2019-12593.yaml
2020-09-05 06:49:58 +00:00
798dbf01a4
Merge pull request #412 from geeknik/patch-2
...
Create CVE-2019-11043.yaml
2020-09-05 12:18:04 +05:30
4450dec23c
Merge pull request #410 from pikpikcu/patch-13
...
Add CVE-2019-14696 Open-Scool 3.0 - Cross Site Scripting
2020-09-05 12:11:01 +05:30
4b828d3a06
Update CVE-2019-14696.yaml
2020-09-05 12:10:16 +05:30
a5da5abd03
Merge pull request #409 from dwisiswant0/tpl/magmi-multiple-vulns
...
Add Magmi Multiple Vulnerabilities
2020-09-05 12:07:14 +05:30
6dd5f429d9
updates
2020-09-05 12:04:18 +05:30
f663a946c6
Update CVE-2019-11043.yaml
2020-09-04 22:30:54 +00:00
b773cc9f0f
Create CVE-2019-11043.yaml
...
PHP-FPM & nginx RCE (CVE-2019-11043)
2020-09-04 22:28:41 +00:00
6b64e78280
Solved escape character
2020-09-04 18:02:18 +00:00
301135ad74
Update URL Encoding
2020-09-04 15:51:55 +00:00
cc1e0a3fef
Create CVE-2019-14696.yaml
2020-09-04 15:46:07 +00:00
8cce587aa8
📝 Remove trailing spaces
2020-09-04 20:34:53 +07:00
9036d1bdc9
✏️ Update CVEs name
2020-09-04 20:25:30 +07:00
196cb1691b
🔥 Add CVE-2020-5776
2020-09-04 20:19:13 +07:00
5ce8c21fa1
🔥 Add CVE-2020-5777
2020-09-04 20:02:17 +07:00
9fd85c7bba
Merge pull request #407 from pikpikcu/patch-12
...
Add CVE-2019-1010287 Timesheet Cross Site Scripting
2020-09-04 17:25:11 +05:30
243eb9b04e
Merge pull request #405 from pikpikcu/patch-11
...
Add CVE-2020-11034 - GLPI v.9.4.6 - Open redirect
2020-09-04 17:15:34 +05:30
6f3992305e
Merge pull request #403 from pikpikcu/patch-10
...
Add CVE-2017-14537 trixbox 2.8.0 - directory-traversal
2020-09-04 17:10:36 +05:30
4547aeb6bb
Update CVE-2017-14537.yaml
2020-09-04 17:09:45 +05:30
089cf671eb
Create CVE-2019-1010287.yaml
2020-09-04 10:01:06 +00:00
216def75b4
Update CVE-2020-11034.yaml
2020-09-04 07:25:27 +00:00
26aeaaa5a4
GLPI v.9.4.6 - Open redirect Detection
2020-09-04 07:16:47 +00:00
07d10d6e50
Fix encoding for XSS payloads
...
Prevent false positives encoding the xss payloads, and remove from the match data that was not injected.
2020-09-04 00:55:13 -05:00
de779e3de1
Create CVE-2017-14537.yaml
2020-09-04 04:26:20 +00:00
39cfec87ae
Update CVE-2019-17558.yaml
2020-09-03 22:44:42 +05:30
6d1789ff76
Create CVE-2019-17558.yaml
2020-09-03 16:13:34 +00:00
d78a56514a
Create CVE-2019-12461.yaml
2020-09-03 12:37:18 +00:00
a3f96907fe
Update CVE-2017-7391.yaml
2020-09-03 09:12:43 +05:30
df52790318
Create CVE-2017-7391.yaml
2020-09-03 03:32:29 +00:00
4b8fb4774f
Merge pull request #391 from dwisiswant0/cve/CVE-2020-15920
...
Add CVE-2020-15920
2020-09-02 12:40:21 +05:30
455a98f771
🔥 Add CVE-2020-15920
2020-09-02 01:38:31 +07:00
b08882d0fe
Update CVE-2020-24223.yaml
2020-09-02 00:01:57 +05:30
4fca8d598f
Update CVE-2020-24223.yaml
2020-09-01 18:23:35 +00:00
e82474224e
Create CVE-2020-24223.yaml
2020-09-01 18:16:14 +00:00
5e1d63fa5f
Update CVE-2019-16278.yaml
2020-09-01 23:29:32 +05:30
8d1b5caf39
Update CVE-2019-16278.yaml
2020-09-01 23:28:20 +05:30
cc3affd053
Update CVE-2019-16278.yaml
2020-09-01 16:10:27 +00:00
4d4343cc54
Create CVE-2019-16278.yaml
2020-09-01 15:59:30 +00:00
b1f2a9ebe8
Merge pull request #386 from dwisiswant0/cve/CVE-2020-5412
...
Add CVE-2020-5412
2020-09-01 19:03:46 +05:30
cd3c9f56c3
Update CVE-2020-5412.yaml
2020-09-01 19:02:57 +05:30
92720cbc20
✏️ Update template name
2020-09-01 20:26:37 +07:00
bfee8d6679
♨️ Update severity
2020-09-01 20:25:49 +07:00
c43cac170c
🔥 Add CVE-2020-5412
2020-09-01 20:24:39 +07:00
23de5c8b44
Merge pull request #384 from ohlinge/master
...
Fix bug about CVE-2018-1000129
2020-09-01 18:42:45 +05:30
d7a44ae025
Update CVE-2020-7209.yaml
2020-09-01 13:08:31 +00:00
d1d679e04c
Merge branch 'master' into master
2020-09-01 20:49:15 +08:00
27fd87ce24
Fix bug about CVE-2018-1000129
2020-09-01 20:42:12 +08:00
9bf0b6dbaf
uniform format
2020-09-01 00:04:29 +05:30
1dd5658717
Update CVE-2020-2140.yaml
2020-08-31 13:09:38 +05:30
dfc487caba
Update CVE-2020-2140.yaml
2020-08-31 13:08:04 +05:30
72a2b1ec29
Delete CVE-2019-7238.yaml
2020-08-30 15:08:56 -03:00
5fa09b15cc
Create CVE-2019-7238.yaml
2020-08-30 15:03:30 -03:00
635446eb26
Create CVE-2020-2140.yaml
2020-08-30 14:42:46 -03:00
f4f36ec0c6
Update CVE-2018-1000129.yaml
2020-08-30 18:49:02 +05:30
4667c44bb0
Merge pull request #365 from projectdiscovery/CVE-2017-7529-fix
...
drafting CVE-2017-7529
2020-08-30 10:42:18 +05:30
f40edfcbb8
🔨 Add 'and' condition
2020-08-30 12:04:34 +07:00
a850c41aa1
🔨 Add server matcher
2020-08-30 11:58:14 +07:00
3558952c03
Merge pull request #353 from flag007/patch-3
...
Update CVE-2018-1000129.yaml
2020-08-30 10:03:58 +05:30
3ff2f585c5
Update CVE-2018-1000129.yaml
2020-08-30 10:02:59 +05:30
4f9de168af
drafting cve
2020-08-30 09:57:07 +05:30
efaecb5df5
CVE-2017-7529 to draft
2020-08-30 09:54:06 +05:30
53f7438d58
Update CVE-2017-5638.yaml
2020-08-30 09:44:52 +05:30
374d6c54b0
Update CVE-2017-7529.yaml
2020-08-29 10:20:04 +05:30
747aa48d09
Merge pull request #345 from aqme/master
...
Add *description* property to nuclei-templates
2020-08-28 01:09:39 +05:30
0896fc82f9
fix minor issue
...
fix issue from yamllint.
2020-08-27 18:19:24 +02:00
10bc6dbef6
Update CVE-2018-1000129.yaml
...
A single svg is prone to false positives, let me update the payload
2020-08-27 20:32:15 +08:00
2113093014
Update CVE-2018-1000129.yaml
...
There are two problems with this payload, / means the path, add it cannot be detected correctly, in addition, it should not be url-encoded
2020-08-27 20:27:47 +08:00
c76c05af44
Update CVE-2018-2791.yaml
2020-08-26 13:04:18 +05:30
0856415d43
Update CVE-2018-2791.yaml
2020-08-26 13:01:07 +05:30
58d0e08739
description
2020-08-26 00:52:00 +02:00
32f77c4632
The avatar feature
2020-08-26 00:43:40 +02:00
a0094cb3bc
description bugs
2020-08-26 00:22:08 +02:00
d1e45e084e
add desc
2020-08-26 00:15:20 +02:00
f20cdfcb69
add some descr
2020-08-25 23:51:04 +02:00
7fd89d3550
add
2020-08-25 23:35:37 +02:00
085f9c4a34
add descru
2020-08-25 23:23:46 +02:00
146e114a3b
fix minor yamllint issues
...
Fix minor yamllint issues to move forward.
2020-08-25 22:18:58 +02:00
18b36a4cd6
Update CVE-2017-10075.yaml
...
add oracle xss descri
2020-08-25 19:27:30 +02:00
e767c37070
xss oracle cmt
2020-08-25 19:22:18 +02:00
fb9c909e5c
🔨 Add word matcher & enable redirects
2020-08-24 11:39:40 +07:00
cd22d83f94
🔨 Add content-type matcher CVE-2020-5284
2020-08-24 11:34:40 +07:00
b2828c3a44
🔨 Fix false-positive CVE-2019-9978
2020-08-24 09:08:46 +07:00
0a82cb787d
Merge pull request #339 from aringo/master
...
CVE-2020-5902 added hsqldb bypass
2020-08-23 14:43:03 +05:30
fc0a1ba15d
Merge pull request #338 from correkthorse/cve/2020-8163
...
Create CVE-2020-8163.yaml
2020-08-23 14:19:20 +05:30
986a49f6d1
CVE-2020-5902 added hsqldb bypass
2020-08-22 19:37:43 -05:00
03c0feee77
Create CVE-2020-8163.yaml
...
details of CVE at https://correkt.horse/ruby/2020/08/22/CVE-2020-8163/
2020-08-23 07:47:58 +10:00
26fc8b5a23
updating PR
2020-08-21 00:31:07 +05:30
4fd07d906c
🔨 Move name to matchers to chain with workflow - CVE-2020-17506
2020-08-20 22:49:36 +07:00
8b9b0d2747
🔥 Add CVE-2020-17505
2020-08-20 22:38:14 +07:00
20ea5091d1
🔥 Add CVE-2020-17506
2020-08-20 22:11:34 +07:00
394d2e37cf
Create CVE-2017-14849.yaml
2020-08-19 16:34:31 +01:00
e734a23381
Update CVE-2019-11248.yaml
2020-08-19 20:14:59 +05:30
2b5e991df2
cve update
2020-08-19 20:12:29 +05:30
f466050ac1
Create 2019-11248.yaml
2020-08-19 20:03:23 +05:30
0cd106838f
Update CVE-2017-5638.yaml
2020-08-19 19:25:42 +05:30
7a45a9deef
Create CVE-2017-5638.yaml
2020-08-19 14:13:31 +01:00
de04f9d30a
🔨 Add some ports & extractors
2020-08-18 07:20:02 +07:00
f6a35bb11d
🔨 Convert payload to sniper attack for cross-platform exploit
2020-08-18 07:03:51 +07:00
3cfbf7edf8
🔨 CVE-2020-7961 - Fix payload that can't execute in Windows platform
2020-08-18 04:46:19 +07:00
a7e79e8dc9
Update CVE-2019-9978.yaml
...
Typo
2020-08-17 01:02:37 -05:00
049d7d9b04
🔥 Add CVE-2019-2725
2020-08-16 23:33:49 +07:00
7747dd475a
🔥 Add CVE-2019-11580
2020-08-16 22:54:45 +07:00
3d6f52fbbf
🔥 Add CVE-2019-6112
2020-08-16 22:22:28 +07:00
505e77400a
🔨 Add multi-request because by default OFBiz doesn't run directly through port 80 (except it build with Docker image)
2020-08-16 08:14:03 +07:00
0c89ba4dae
🔥 Add CVE-2020-9496
2020-08-16 07:52:06 +07:00
d57f734d54
Merge pull request #309 from dwisiswant0/tpl/add-cves
...
Add CVE-2019-7609
2020-08-16 02:08:06 +05:30
b994bc6435
Update CVE-2019-7609.yaml
2020-08-16 02:07:25 +05:30
2796981df2
Merge pull request #311 from Pxmme/master
...
Create CVE-2020-13379.yaml
2020-08-16 02:05:21 +05:30
afe7ba568d
Update CVE-2020-13379.yaml
2020-08-16 02:04:11 +05:30
37891375e1
Create CVE-2020-13379.yaml
...
lol DoS is fun
2020-08-15 22:14:07 +02:00
64cbf896de
🔥 Add CVE-2019-7609
2020-08-16 01:10:27 +07:00
5eac34b513
🔨 Fix false-positive
2020-08-15 15:04:58 +07:00
96093904ad
Update CVE-2019-19985.yaml
2020-08-12 23:14:53 +05:30
dc627f2d97
Update CVE-2019-19985.yaml
2020-08-12 23:10:09 +05:30
5e8411900f
Update CVE-2019-19985.yaml
...
Fixing false positives
previously shown vulnerable for
https://books.apple.com/wp-admin/admin.php?page=download_report&report=users&status=all
Originally vulnerable
https://www.yacht-charter.co.uk/wp-admin/admin.php?page=download_report&report=users&status=all
2020-08-12 23:09:50 +05:30
4d1ff74303
Merge branch 'master' of https://github.com/Mad-robot/nuclei-templates into pr/298
2020-08-12 20:43:14 +05:30
d9a36ec84f
Update CVE-2019-9978.yaml
2020-08-12 20:42:50 +05:30
d60f915497
Update CVE-2019-9978.yaml
2020-08-12 20:41:52 +05:30
ec95929e4b
Create CVE-2019-9978.yaml
2020-08-12 20:35:52 +05:30
aaba00a84d
Update CVE-2019-16759-1.yaml
2020-08-10 16:30:34 +05:30
634226bdcb
Merge pull request #293 from Mad-robot/master
...
Create CVE-2019-16759-fixbypass.yaml
2020-08-10 14:42:33 +05:30
b4c75eba60
Updated file name
2020-08-10 14:41:08 +05:30
ba3dddc284
Create CVE-2019-16759-fixbypass.yaml
2020-08-10 14:02:30 +05:30
5c083d5860
Update CVE-2017-9841.yaml
2020-08-07 13:43:01 +05:30
7cdf1f2154
Adding Reference
2020-08-07 13:41:39 +05:30
5d6e6e8fbf
updating file name
2020-08-07 13:37:12 +05:30
a43291d9d9
Create CVE-2017-9841
2020-08-07 09:02:28 +01:00
fca119eb24
adding both path for possilbe use cases
2020-08-06 13:42:12 +05:30
8315f5f780
Add semicolon to path
...
The vulnerability is that access restriction can be circumvented by adding a semicolon to the path (as pointed out in https://github.com/immunIT/CVE-2018-11759 ).
Without semicolon, jkstatus would be public anyway and would not be related to the CVE.
2020-08-06 10:06:13 +02:00
e4ecdde5e0
Added CVE-2019-19985
2020-08-05 01:49:57 +05:30
4abb268ac2
Added CVE-2019-18394
2020-08-04 20:54:23 +05:30
6f7eca5f04
few more updates
2020-08-04 04:05:04 +05:30
a41edcf8e5
template mise
2020-08-04 03:24:35 +05:30
0088f2e474
encoding update
2020-08-02 21:28:48 +05:30
fdf5ac46df
Readme update
2020-08-02 18:42:36 +05:30
8bb5d0ba4e
preparing for v2.1.0 release
2020-08-02 18:28:07 +05:30
f5d35e3fad
minor fixs
2020-08-01 02:18:24 +05:30
fb310bc62f
Oracle Content Server XSS
2020-07-31 23:23:22 +05:30
b44f47c502
matcher updates
2020-07-31 23:12:34 +05:30
0a38e306a7
Odoo 12.0 - Local File Inclusion
...
https://www.exploit-db.com/exploits/48609
2020-07-31 22:52:10 +05:30
7054c2b758
Payload update
2020-07-31 21:51:48 +05:30
567dd35b03
Update CVE-2020-3187.yaml
2020-07-25 12:35:19 +05:30
86e27b8609
updating template
2020-07-25 12:27:30 +05:30
bb4542433e
Update CVE-2020-3187.yaml
2020-07-25 10:52:00 +05:30
5d616236af
Adding Cisco ASA/FTD Unauthenticated Arbitrary File Deletion - CVE-2020-3187
2020-07-25 03:53:21 +02:00
d498f1a4bd
Update and rename cve-2020-3452.yaml to CVE-2020-3452.yaml
2020-07-23 02:14:48 +05:30
b4a6f7bc8c
Create cve-2020-3452.yaml
2020-07-23 00:59:49 +05:30
0eb330bd46
removing extra spaces
2020-07-21 13:30:14 +05:30
d31ce1f937
🔥 Add CVE-2020-6287
2020-07-21 13:53:00 +07:00
1a836fc482
🔥 Add CVE-2020-1147
2020-07-21 03:12:42 +07:00
d2885a1351
Merge pull request #186 from dwisiswant0/development
...
Add CVE-2019-16759 RCE in vBulletin
2020-07-17 09:39:39 +05:30
2ff5be0a36
Merge pull request #233 from bauthard/master
...
template for CVE-2020-8193 detection
2020-07-11 23:59:37 +05:30
dd8e298fdc
🔨 Update severity - CVE-2020-8191
2020-07-12 00:54:36 +07:00
624c89931c
🔥 Add Citrix ADC/Gateway Reflected XSS - CVE-2020-8191
2020-07-12 00:53:33 +07:00
0c74115ffd
🔥 Add Citrix ADC/Gateway Reflected Code Injection - CVE-2020-8194
2020-07-12 00:52:28 +07:00
b15494d59e
tempalte for CVE-2020-8193 detection
2020-07-11 15:45:20 +05:30
7e7afed768
fixing few templates
...
need to confirm this before adding this again
2020-07-11 11:39:55 +05:30
292197f823
Merge pull request #231 from dwisiswant0/fix-false-positives
...
Fix from False-positive Results
2020-07-11 03:33:19 +05:30
d634b2710c
🔨 Fix CVE-2018-5230 from false-positives
2020-07-11 03:38:48 +07:00
8bb2915b01
🔨 Fix CVE-2020-8512 from false-positives
2020-07-11 03:30:14 +07:00
f216354342
🔨 Fix CVE-2018-19439 from false-positives
2020-07-11 03:12:41 +07:00
5e9005e2db
Update CVE-2017-7529.yaml
2020-07-10 15:08:52 +05:30
ee41cc2b3d
Merge pull request #227 from harsh-bothra/patch-10
...
Create CVE-2017-6360.yaml
2020-07-10 14:22:40 +05:30
e67853ce9d
Merge pull request #228 from harsh-bothra/patch-11
...
Create CVE-2017-6361.yaml
2020-07-10 14:22:29 +05:30
2a37e53ed4
Update CVE-2017-6360.yaml
2020-07-10 14:19:05 +05:30
2bc59cd709
Update CVE-2017-6361.yaml
2020-07-10 14:17:33 +05:30
f5b2e1b794
Update CVE-2017-7529.yaml
2020-07-10 13:51:33 +05:30
965e5947cd
improve CVE-2017-7529 detection
2020-07-09 13:12:36 +02:00
aa2fa6a6c2
Create CVE-2017-6361.yaml
...
Command Injection in authLogin.cgi 'reboot_notice_msg'
2020-07-09 12:40:32 +05:30
704fb54ecc
Create CVE-2017-6360.yaml
...
Command Injection in userConfig.cgi cloudPersonalSmtp 'hash'
2020-07-09 12:37:53 +05:30
10592308d3
🔨 Fix false-positives - CVE-2018-20824
2020-07-09 03:47:36 +07:00
0ab076bf9a
🔨 Update matchers causes false-positives - CVE-2020-8115
2020-07-09 03:22:44 +07:00
3206089f45
🔨 Update payload due to false-positives - CVE-2020-13167
2020-07-09 03:02:14 +07:00
eb87a5ddb8
Removing CVE-2018-6389
...
as it's an invalid issue.
2020-07-08 23:16:18 +05:30
c47a4d881d
Merge pull request #215 from harsh-bothra/patch-8
...
Create CVE-2019-3396.yaml
2020-07-08 23:11:43 +05:30
441cdd039d
Update CVE-2019-3396.yaml
2020-07-08 23:10:14 +05:30
db19560721
Update CVE-2020-10199.yaml
2020-07-08 22:51:50 +05:30
849ac3599d
Create CVE-2020-10199.yaml
2020-07-08 20:41:50 +05:30
ed4e9e7feb
Fixed default condition OR to AND in false-positives
2020-07-08 17:08:57 +05:30
f2bfdbfb9f
Merge pull request #216 from secureITmania/secureITmania-patch-1
...
Update CVE-2020-9757 logic
2020-07-08 15:19:51 +05:30
7044a9116c
Update CVE-2020-5284.yaml
2020-07-08 14:15:47 +05:30
38bc600e99
Update CVE-2020-5284.yaml
2020-07-08 14:15:18 +05:30
336bac5e1a
Merge pull request #219 from dwisiswant0/add-cves-and-workflows
...
Add CVE-2020-13167, CVE-2020-7209 & Workflows
2020-07-08 09:46:45 +05:30
577e3cb429
📝 Remove trailing spaces
2020-07-08 02:55:24 +07:00
b0aec24951
🔥 Add LinuxKI Toolset RCE - CVE-2020-7209
2020-07-08 02:28:16 +07:00
5f42e15fcb
🔥 Add Netsweeper WebAdmin PreAuth RCE - CVE-2020-13167
2020-07-08 02:26:15 +07:00
cc260b27b0
Update CVE-2020-9757.yaml
...
template logic changed
2020-07-07 14:09:32 +05:30
ab6bfa0107
Create CVE-2019-3396.yaml
...
Atlassian Confluence Path Traversal/RCE
2020-07-07 12:54:27 +05:30
d58fb83331
Merge pull request #214 from harsh-bothra/patch-6
...
Create CVE-2019-17382.yaml
2020-07-07 11:56:49 +05:30
5cfdcf0064
adding matchers-condition
...
when we are looking to match two condition, we should add matchers-condition, as the default check is OR which will results into false positive results.
2020-07-07 11:56:01 +05:30
0a207f55cc
Update CVE-2020-10204.yaml
2020-07-07 11:49:48 +05:30
76745f7dcb
Create CVE-2019-17382.yaml
...
Zabbix Authentication Bypass to access Dashboard
2020-07-07 09:47:27 +05:30
9c8104f937
Create CVE-2020-10204.yaml
2020-07-07 01:54:18 +05:30
2499aaa0a6
Update CVE-2018-1247.yaml
2020-07-07 00:37:01 +05:30
24eafa3648
updated matcher
2020-07-07 00:34:27 +05:30
ebb2f1f3ac
Merge pull request #210 from harsh-bothra/patch-5
...
Create CVE-2018-11759.yaml
2020-07-06 22:44:05 +05:30
ba2fe4bf75
Update CVE-2018-11759.yaml
2020-07-06 22:43:45 +05:30
1714fa6674
Merge pull request #209 from harsh-bothra/patch-4
...
Create CVE-2020-5405.yaml
2020-07-06 22:41:09 +05:30
8362fb3dc2
Update CVE-2020-5405.yaml
2020-07-06 22:40:05 +05:30
63289fb700
Merge pull request #205 from dwisiswant0/update-cve-2020-5902
...
Update RAW payloads due to can't use helper function - CVE-2020-5902
2020-07-06 22:19:31 +05:30
8b4cf6bd46
Create CVE-2018-11759.yaml
...
Apache Tomcat JK Status Manager Access
2020-07-06 21:58:42 +05:30
ebcf1ec0f6
Create CVE-2020-5405.yaml
...
Spring Cloud Directory Traversal
2020-07-06 21:52:18 +05:30
59661b1eb6
Update CVE-2019-8451.yaml
...
Fix trailing whitespace
2020-07-06 16:56:27 +02:00
3a44d74762
Create CVE-2019-8451.yaml
...
# On September 9, Atlassian released version 8.4.0 for Jira Core and Jira Software, which included a fix for an important
# security issue reported in August 2019.
# CVE-2019-8451 is a pre-authentication server-side request forgery (SSRF) vulnerability found in
# the /plugins/servlet/gadgets/makeRequest resource. The vulnerability exists due to “a logic bug” in the JiraWhitelist class.
# An unauthenticated attacker could exploit this vulnerability by sending a specially crafted web request to a vulnerable
# Jira server. Successful exploitation would result in unauthorized access to view and potentially modify internal
# network resources.
# https://www.tenable.com/blog/cve-2019-8451-proof-of-concept-available-for-server-side-request-forgery-ssrf-vulnerability-in
# https://twitter.com/benmontour/status/1177250393220239360
# https://twitter.com/ojensen5115/status/1176569607357730817
2020-07-06 16:52:34 +02:00
d19f00bf82
❌ Update RAW payloads due to can't use helper function
2020-07-06 21:45:44 +07:00
8ef6e99ab3
Merge pull request #200 from dwisiswant0/update-cve-2020-5902
...
Update CVE-2020-5902 matchers & requests
2020-07-06 19:15:28 +05:30
Adam Jordan
bauthard
Geeknik Labs
Casper Guldbech Nielsen
Ice3man543
Dwi Siswanto
PikPikcU
toufik-airane
un-fmunozs
0h1in9e
Gabriel Geraldino
flag007
SaN ThosH
chajer
Jawad Moustadif
ringo
Tim Koopmans
Robbie
0xceeb
Pxmme
Aron Molnar
v1ll41n
Florian Pfitzer
Harsh Bothra
Aditya Soni
secureITmania
Techbrunch