b466fce758
Update basic-cors.yaml
2021-08-11 13:15:04 +05:30
5ac272597b
Delete cors-misconfig.yaml
2021-08-11 13:14:04 +05:30
cb94b58009
Update basic-cors.yaml
2021-08-11 13:13:45 +05:30
d49dc5f9d4
Update top-xss-params.yaml
2021-08-11 13:08:49 +05:30
c576f4317b
Update open-redirect.yaml
2021-08-11 13:08:24 +05:30
efa7319d40
Update generic-windows-lfi.yaml
2021-08-11 13:08:11 +05:30
57b8d89815
Update generic-linux-lfi.yaml
2021-08-11 13:08:00 +05:30
cbfe76f33f
Update error-based-sql-injection.yaml
2021-08-11 13:07:46 +05:30
aa0b195c99
Update crlf-injection.yaml
2021-08-11 13:07:36 +05:30
2165418c59
Update cache-poisoning.yaml
2021-08-11 13:07:27 +05:30
4d4ae2edd2
Update basic-xss-prober.yaml
2021-08-11 13:07:17 +05:30
791472aa2b
Update basic-cors.yaml
2021-08-11 13:07:05 +05:30
0d2b53e71d
Create sar2html-rce.yaml
...
SAR2HTML could allow a remote attacker to execute arbitrary commands on the system, caused by a commend injection flaw in the index.php script. By sending specially-crafted commands, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-11 14:11:25 +09:00
8c48ca97d2
matcher + payload + regex updates
2021-08-09 21:58:28 +05:30
a44324ec2f
updatev2 cors-misconfig.yaml
2021-08-09 11:57:37 -03:00
e98fb7179e
update cors-misconfig.yaml
2021-08-09 11:56:37 -03:00
a806149864
Spelling
2021-08-09 16:31:00 +03:00
864b209cc1
Add reference
2021-08-09 16:10:10 +03:00
3651410d37
Provide description
2021-08-09 16:08:19 +03:00
210c57768d
Merge pull request #2193 from gy741/rule-add-v42
...
Create kevinlab-hems-backdoor.yaml
2021-08-08 13:56:56 +05:30
3918071875
Merge pull request #2348 from Akokonunes/patch-25
...
Create grimag-open-redirect.yaml
2021-08-08 12:38:24 +05:30
d7b8760231
minor update
2021-08-08 12:29:11 +05:30
4c057dcb1e
minor update
2021-08-08 12:26:34 +05:30
a7dcd3f317
added more tags
2021-08-08 00:27:18 +05:30
3b6d6322ea
Additional matcher
2021-08-08 00:22:55 +05:30
e690901c86
minor update
2021-08-08 00:20:56 +05:30
0ee60c4a3e
Merge pull request #2197 from mesaglio/master
...
Detect azure directory traversal hosts file
2021-08-07 23:15:29 +05:30
318aa4736e
misc update
2021-08-07 23:04:27 +05:30
2233ebf3f1
moving files around
2021-08-07 23:02:17 +05:30
ca9efec5c0
tag update
2021-08-07 15:00:29 +05:30
afcbd374a9
Create sap-redirect.yaml
2021-08-07 11:31:58 +05:30
5cddd4312b
Adding additional steps to make it work
2021-08-06 23:30:34 +05:30
57624f3d25
Create ruijie-eg-rce.yaml
2021-08-06 17:04:32 +07:00
3395eff8a0
Merge pull request #2316 from gy741/rule-add-v49
...
Create CVE-2020-7796.yaml
2021-08-03 19:57:45 +05:30
c581a94bf4
Merge pull request #2318 from gy741/rule-add-v50
...
Create longjing-technology-bems-api-lfi.yaml
2021-08-03 19:56:57 +05:30
28d568b88c
Update and rename longjing-technology-bems-api-lfi.yaml to bems-api-lfi.yaml
2021-08-03 19:55:25 +05:30
23bc448b1b
Merge pull request #2199 from pikpikcu/patch-208
...
Add OpenSIS POC
2021-08-03 19:53:32 +05:30
5fb6332bd9
Create longjing-technology-bems-api-lfi.yaml
...
The application suffers from an unauthenticated arbitrary file download vulnerability. Input passed through the fileName parameter through downloads endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files through directory traversal attacks.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-03 21:52:14 +09:00
ea1ae20a82
Create zimbra-preauth-ssrf.yaml
2021-08-03 12:52:56 +05:30
2491a6a4b7
Merge pull request #2227 from Udyz/patch-5
...
Create hasura-graphql-sql-exec.yaml
2021-08-02 22:25:31 +05:30
4e976706b8
Update hasura-graphql-psql-exec.yaml
2021-08-02 22:18:41 +05:30
204cf337c8
Update hasura-graphql-psql-exec.yaml
2021-08-02 22:15:52 +05:30
6102421e22
Update hasura-graphql-ssrf.yaml
2021-08-02 22:03:12 +05:30
03077a9ca2
Update tikiwiki-reflected-xss.yaml
2021-08-02 21:44:48 +05:30
9f8d31200f
Merge pull request #2263 from pdelteil/patch-35
...
Create jenkins-script.yaml
2021-08-02 20:59:12 +05:30
451aca42f9
Update jenkins-script.yaml
2021-08-02 20:57:19 +05:30
493acb8afe
Description
2021-08-02 14:30:22 +03:00
e896a8982d
misc updates
2021-08-02 12:53:35 +05:30
27eef8c1a9
Create zhiyuan-file-upload.yaml
...
Zhiyuan OA is a set of office coordinating management software. Recently, Qianxin CERT monitors the relevant vulnerability information of the long OA. Since there is an unauthorized access in some interfaces, and some functions are insufficient, the attacker can upload malicious script files without logging in, so that there is no need to log in. Zhiyuan OA official has provided patches for this vulnerability. In view of the large vulnerability harm, it is recommended that users apply patch updates as soon as possible.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-02 11:07:14 +09:00
aa336ed979
matcher update
2021-07-31 23:08:46 +05:30
918a6deead
Merge pull request #2265 from pussycat0x/master
...
zabbix-dashboards-access
2021-07-30 02:37:02 +05:30
0d7dfa1713
Update wp-upload-data.yaml
2021-07-30 02:36:18 +05:30
147ac0143a
Create jenkins-script.yaml
2021-07-29 12:29:05 -04:00
1f6a6a8764
Update jenkins-stack-trace.yaml
...
file name = template id.
2021-07-29 02:50:35 -04:00
6d205308ea
Merge pull request #2239 from pikpikcu/patch-236
...
Add Bitrix Open redirect
2021-07-29 00:16:19 +05:30
49efd9fa07
Update bitrix-open-redirect.yaml
2021-07-29 00:13:15 +05:30
576b42b412
Update wp-upload-data.yaml
2021-07-29 00:09:11 +05:30
7038617c86
Add files via upload
2021-07-28 23:56:51 +05:30
4b7080333a
Rename unauthenticated-jenkin-dashboard.yaml to unaunthenticated-jenkin.yaml
...
id - name file consistency
2021-07-28 01:17:18 -04:00
783550d003
Update bitrix-open-redirect.yaml
2021-07-28 08:38:48 +07:00
72fcdc20bf
Create bitrix-open-redirect.yaml
2021-07-28 08:37:25 +07:00
0c68ef5f66
Rename raw-psql-warp.yaml to hasura-graphql-psql-exec.yaml
2021-07-27 23:25:36 +07:00
0706823399
Update raw-psql-warp.yaml
2021-07-27 23:23:55 +07:00
5c931f8d00
Update raw-psql-warp.yaml
2021-07-27 22:12:41 +07:00
2219ab607e
Create raw-psql-warp.yaml
2021-07-27 21:57:59 +07:00
9f28ff8f9b
Update qcubed-xss.yaml
2021-07-27 11:57:30 +05:30
a2fc63b7ac
Create qcubed-xss.yaml
2021-07-27 13:06:30 +07:00
72c038bbf1
Update opensis-lfi.yaml
2021-07-27 08:07:21 +07:00
29e399df87
Create opensis-lfi.yaml
2021-07-27 07:43:02 +07:00
5d5dafc6e7
Detect azure directory traversal hosts file
2021-07-26 20:12:26 -03:00
eadc9b4dac
Create kevinlab-hems-backdoor.yaml
...
The HEMS solution has an undocumented backdoor account and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution thru the RMI. Attacker could exploit this vulnerability by logging in using the backdoor account with highest privileges for administration and gain full system control. The backdoor user cannot be seen in the users settings in the admin panel and it also uses an undocumented privilege level (admin_pk=1) which allows full availability of the features that the HEMS is offering remotely.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-27 02:48:31 +09:00
833ae4ae48
Merge pull request #1083 from pikpikcu/patch-123
...
Create dedecms-membergroup-sqli
2021-07-26 18:02:27 +05:30
86989129d1
Update netgear-wnap320-rce.yaml
2021-07-26 13:38:38 +05:30
c72190c4bf
Create netgear-wnap320-rce.yaml
...
vulnerabilities in the web-based management interface of Netgear WNAP320 Access Point could allow an authenticated, remote attacker to perform command injection attacks against an affected device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-26 08:35:22 +09:00
6ccc5f8792
matcher update to handle edge cases
2021-07-25 03:05:55 +05:30
2c0aa783c4
Merge pull request #2148 from gy741/rule-add-v34
...
Add KevinLAB BEMS 1.0 Multiple Vulnerabilities
2021-07-24 15:37:48 +05:30
bf7c0d3a63
Merge pull request #2122 from gy741/rule-add-v33
...
Create magicflow-lfi.yaml
2021-07-24 12:13:59 +05:30
ac45802ef5
Update kevinlab-bems-sqli.yaml
2021-07-24 12:10:46 +05:30
2631f55550
Update kevinlab-bems-backdoor.yaml
2021-07-24 12:07:27 +05:30
9a46592f71
Update kevinlab-bems-sqli.yaml
2021-07-24 11:59:35 +05:30
87b4c2e98b
Update kevinlab-bems-sqli.yaml
2021-07-24 11:47:05 +05:30
4b444af3c4
Merge pull request #2125 from DhiyaneshGeek/master
...
17 New Templates Added
2021-07-24 03:26:09 +05:30
9617bc5815
matcher update
2021-07-24 03:25:22 +05:30
47ea40bc55
Update kevinlab-bems-backdoor.yaml
2021-07-24 03:17:53 +05:30
b346584002
Update vulnerabilities/other/nginx-merge-slashes-path-traversal.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:25:13 +05:30
1909e3f628
Update vulnerabilities/other/nginx-merge-slashes-path-traversal.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-24 00:24:37 +05:30
59f90ffffa
Merge pull request #2150 from pussycat0x/master
...
New templates added
2021-07-24 00:09:43 +05:30
79e15e7123
Update wordpress-wpcourses-info-disclosure.yaml
2021-07-24 00:07:50 +05:30
43dccef185
generic improvements
2021-07-24 00:06:13 +05:30
97aa239d52
Merge branch 'master' of https://github.com/pussycat0x/nuclei-templates into pr/2037
2021-07-24 00:00:55 +05:30
3960d1f295
strict matchers
2021-07-23 23:59:54 +05:30
38c2b6d4a9
Update vulnerabilities/wordpress/wp-idx-broker-platinum-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:49:58 +05:30
bdfee95603
Update vulnerabilities/wordpress/wp-idx-broker-platinum-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:49:33 +05:30
6ebd1a36e0
Update vulnerabilities/wordpress/wp-email-subscribers-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:49:28 +05:30
edc62d15a4
Update vulnerabilities/wordpress/wp-email-subscribers-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:49:20 +05:30
5170f4962b
Update vulnerabilities/wordpress/wp-arforms-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:49:14 +05:30
1feaaded28
Update vulnerabilities/wordpress/wp-idx-broker-platinum-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:41:26 +05:30
750a86c500
Update vulnerabilities/wordpress/wp-iwp-client-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:41:14 +05:30
04b71d9335
Update vulnerabilities/wordpress/wp-iwp-client-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:41:06 +05:30
b82ac4b3fc
Update vulnerabilities/wordpress/wp-iwp-client-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 23:40:56 +05:30
28d7d26953
Update wp-sfwd-lms-listing.yaml
2021-07-23 23:39:46 +05:30
ca49fb21c7
Merge pull request #2154 from pdelteil/patch-25
...
Update coldfusion-debug-xss.yaml
2021-07-23 20:54:31 +05:30
2dfa3d2e82
Update visual-tools-dvr-rce.yaml
2021-07-23 20:46:49 +05:30
1dd4e3c846
Update visual-tools-dvr-rce.yaml
2021-07-23 15:15:23 +05:30
2c77510faa
Create visual-tools-dvr-rce.yaml
...
vulnerabilities in the web-based management interface of Visual Tools DVR VX16 4.2.28.0 could allow an authenticated, remote attacker to perform command injection attacks against an affected device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-23 08:47:29 +09:00
abacdafb4f
Update coldfusion-debug-xss.yaml
...
The term adobe is more general than coldfusion. Since Coldfusion is a product of Adobe.
2021-07-22 19:44:57 -04:00
d3ff29daaa
Update vulnerabilities/wordpress/wp-arforms-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 00:32:13 +05:30
6987e1ffee
Update vulnerabilities/wordpress/wp-arforms-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 00:32:05 +05:30
eac08288e8
Update vulnerabilities/wordpress/wp-sfwd-lms-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 00:31:33 +05:30
05846a34c7
Update vulnerabilities/wordpress/wp-sfwd-lms-listing.yaml
...
Co-authored-by: Toufik Airane <toufik.airane@appsectribe.com>
2021-07-23 00:31:13 +05:30
a81e3b53cb
Add files via upload
2021-07-22 19:42:25 +05:30
69db0862ee
Create kevinlab-bems-backdoor.yaml
...
The BEMS solution has an undocumented backdoor account and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution thru the RMI. Attacker could exploit this vulnerability by logging in using the backdoor account with highest privileges for administration and gain full system control. The backdoor user cannot be seen in the users settings in the admin panel and it also uses an undocumented privilege level (admin_pk=1) which allows full availability of the features that the BEMS is offering remotely.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-22 22:13:00 +09:00
a4ec6a2b11
Create kevinlab-bems-sqli.yaml
...
The application suffers from an unauthenticated SQL Injection vulnerability. Input passed through 'input_id' POST parameter in '/http/index.php' is not properly sanitised before being returned to the user or used in SQL queries.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-22 21:46:18 +09:00
5455222476
Merge pull request #2140 from pussycat0x/master
...
New templates added
2021-07-22 17:53:25 +05:30
c17763ac20
Update and rename wp-plugineasy-media-gallery-pro-listing.yaml to easy-media-gallery-pro-listing.yaml
2021-07-22 17:45:43 +05:30
f00f5eeaa9
Add files via upload
2021-07-22 08:04:21 +05:30
111da22943
Update dedecms-membergroup-sqli.yaml
2021-07-21 18:34:37 +05:30
403a73d1c7
Merge pull request #1085 from pikpikcu/patch-125
...
Create dedecms-carbuyaction-fileinclude.yaml
2021-07-21 18:27:45 +05:30
f5fc07dd72
Merge pull request #1581 from pikpikcu/patch-168
...
Create hiboss-rce
2021-07-21 18:27:38 +05:30
08541f08c4
Update dedecms-carbuyaction-fileinclude.yaml
2021-07-21 18:26:36 +05:30
00ce088daf
Merge pull request #1334 from projectdiscovery/princechaddha-patch-3
...
Create sangfor-edr-auth-bypass.yaml
2021-07-21 18:18:08 +05:30
8d953c45ea
Update sangfor-edr-auth-bypass.yaml
2021-07-21 18:14:42 +05:30
da1ef3b031
Merge pull request #1568 from pikpikcu/patch-166
...
Create h3c-imc-rce
2021-07-21 18:11:11 +05:30
08f160f0e2
Create nginx-merge-slashes-path-traversal.yaml
2021-07-21 13:46:40 +05:30
16750fd9a2
Create magicflow-lfi.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-21 14:18:00 +09:00
21809132da
Renamed to CVE-2021-24340.yaml
2021-07-20 13:36:04 +07:00
13e5528c46
duplicate update
2021-07-20 11:40:23 +05:30
d27fb4c3b0
Renamed CVE-2020-8771.yaml
2021-07-20 12:49:16 +07:00
4dbf36813d
removing duplicate template
2021-07-20 00:43:39 +05:30
6eee57115c
Merge pull request #2083 from projectdiscovery/fixing-xss-matchers
...
fixing-xss-matchers
2021-07-20 00:28:01 +05:30
13d26d8c6d
moving files around
2021-07-20 00:10:30 +05:30
68efee3702
Merge branch 'projectdiscovery:master' into master
2021-07-19 19:48:57 +07:00
7a99c2db48
Rename to CVE-2018-16283
2021-07-19 19:47:31 +07:00
96d7a23ccd
removed duplicate
2021-07-19 18:15:42 +05:30
a88710e503
Removed duplicate template
2021-07-19 16:56:45 +05:30
574245af0d
Update wp-socialfit-xss.yaml
2021-07-19 11:43:07 +05:30
5fcbd0e446
Update wp-slideshow-xss.yaml
2021-07-19 11:42:34 +05:30
f77f66d1e6
Update wp-phpfreechat-xss.yaml
2021-07-19 11:41:40 +05:30
4df08a33c4
Update wp-nextgen-xss.yaml
2021-07-19 11:41:15 +05:30
0329b1b2fb
Update wp-knews-xss.yaml
2021-07-19 11:40:45 +05:30
e14b31489b
Update wp-flagem-xss.yaml
2021-07-19 11:40:14 +05:30
705f431c1c
Update wp-finder-xss.yaml
2021-07-19 11:39:33 +05:30
57c3f3ec20
Update wp-custom-tables-xss.yaml
2021-07-19 11:38:50 +05:30
ac66db36f3
Update wp-church-admin-xss.yaml
2021-07-19 11:38:22 +05:30
19fa522fec
Create mirai-unknown-rce.yaml
...
The unknown exploit targets the login CGI script, where a key parameter is not properly sanitized leading to a command injection.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-18 22:44:29 +09:00
63ae086b67
Payload + matcher update
2021-07-17 23:02:43 +05:30
fc38b27176
minor update
2021-07-17 16:32:15 +05:30
33a0ede229
Merge pull request #2009 from gy741/rule-add-v24
...
Create CVE-2020-26919, CVE-2020-25506, OptiLink ONT1GEW GPON RCE, CVE-2021-31755
2021-07-16 18:04:52 +05:30
fbc281f0a1
Merge pull request #2027 from projectdiscovery/yapi-rce
...
Added Yapi RCE
2021-07-16 17:27:37 +05:30
6d27a6fe8e
payload update
2021-07-16 00:34:38 +05:30
07db6737e5
Update wordpress-woocommerce-sqli.yaml
2021-07-16 00:08:42 +05:30
9b7a57bf15
Update wordpress-woocommerce-sqli.yaml
2021-07-15 23:35:02 +05:30
9286c79bc1
Rename optiLink-ont1gew-gpon-rce.yaml to optilink-ont1gew-gpon-rce.yaml
2021-07-15 23:15:45 +05:30
6bf13454ae
Update optiLink-ont1gew-gpon-rce.yaml
2021-07-15 23:15:22 +05:30
382534fedc
Update wordpress-woocommerce-sqli.yaml
2021-07-15 22:58:43 +05:30
ede6df8fa4
Add WooCommerce SQLi Template
2021-07-15 17:02:19 +00:00
642f71278d
Added Yapi RCE
2021-07-15 22:11:22 +05:30
6fcbe11064
Update oscommerce-rce.yaml
2021-07-15 18:29:24 +05:30
9e7bf184b7
minor update
2021-07-15 18:28:08 +05:30
e9b5b8fceb
osCommerce 2.3.4.1 - Remote Code Execution
2021-07-15 18:11:26 +05:30
ba64446d08
Update nativechurch-wp-theme-lfd.yaml
2021-07-15 17:43:45 +05:30
a95133ee3d
Update and rename nativechurch-wp-theme-lfd.yaml to vulnerabilities/wordpress/nativechurch-wp-theme-lfd.yaml
2021-07-15 15:16:37 +05:30
615db88ce6
Merge pull request #2004 from daffainfo/patch-49
...
Create wp-custom-tables-xss.yaml
2021-07-15 14:53:41 +05:30
7cecd5aa3e
Update wp-custom-tables-xss.yaml
2021-07-15 14:34:40 +05:30
22ecd2a192
Merge pull request #2016 from DhiyaneshGeek/master
...
Severity Update
2021-07-15 14:14:38 +05:30
887e7bcfab
Update wordpress-updraftplus-pem-key.yaml
2021-07-15 14:13:25 +05:30
69b04c8a98
Update wordpress-updraftplus-pem-key.yaml
2021-07-15 13:51:19 +05:30
1eb999ce02
Create optiLink-ont1gew-gpon-rce.yaml
...
vulnerabilities in the web-based management interface of OptiLink could allow an authenticated, remote attacker to perform command injection attacks against an affected device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-15 14:57:34 +09:00
ad3f81bc95
Create wp-custom-tables-xss.yaml
2021-07-15 06:21:50 +07:00
11dc9db49e
Merge pull request #1997 from skar4444/sassy-update
...
Update-sassy-social-share-xss
2021-07-14 20:56:57 +05:30
117b0558a9
Update sassy-social-share.yaml
2021-07-14 20:55:05 +05:30
5182b88b54
Merge pull request #1871 from projectdiscovery/huijietong-cloud-fileread
...
Create huijietong-cloud-fileread.yaml
2021-07-14 19:27:43 +05:30
ecd98c6403
Merge pull request #1967 from daffainfo/patch-31
...
Create wp-slideshow-xss.yaml
2021-07-14 19:15:07 +05:30
55ea2242b7
Rename vulnerabilities/wp-slideshow-xss.yaml to vulnerabilities/wordpress/wp-slideshow-xss.yaml
2021-07-14 19:14:06 +05:30
9fb7e17c0d
Merge pull request #1966 from daffainfo/patch-30
...
Create wp-nextgen-xss.yaml
2021-07-14 19:10:26 +05:30
933c1d5f05
Merge pull request #1965 from daffainfo/patch-29
...
Create wp-flagem-xss.yaml
2021-07-14 19:09:34 +05:30
00f1e65d50
Update-sassy-social-share-xss
2021-07-14 17:01:59 +05:30
7e258fcae2
template-fix
2021-07-14 16:07:09 +05:30
69dd5ae8a0
Adding some path
2021-07-13 18:24:23 +07:00
6b8a398a76
Create wp-slideshow-xss.yaml
2021-07-13 18:20:25 +07:00
62cb5ce2bc
Create wp-nextgen-xss.yaml
2021-07-13 18:17:14 +07:00
c751aca059
Create wp-flagem-xss.yaml
2021-07-13 18:15:43 +07:00
83ee761691
Merge pull request #1957 from projectdiscovery/hasura-graphql-ssrf
...
Create hasura-graphql-ssrf.yaml
2021-07-13 15:58:27 +05:30
c8c49c5046
Update hasura-graphql-ssrf.yaml
2021-07-13 15:58:06 +05:30
5fe872788f
minor update
2021-07-13 15:57:10 +05:30
e167cf0ab9
Merge pull request #1937 from daffainfo/patch-20
...
Create wp-phpfreechat-xss.yaml
2021-07-13 15:45:53 +05:30
df0e4b7117
Merge pull request #1938 from daffainfo/patch-21
...
Create wp-finder-xss.yaml
2021-07-13 15:42:29 +05:30
67a679860e
Update wp-finder-xss.yaml
2021-07-13 15:41:44 +05:30
500f0b70f8
Merge pull request #1936 from daffainfo/patch-19
...
Create wp-knews-xss.yaml
2021-07-13 15:36:57 +05:30
08f2cfea0b
Merge pull request #1924 from daffainfo/master
...
WordPress Plugin SocialFit - 'msg' Cross-Site Scripting
2021-07-13 15:29:49 +05:30
a8be22ad0a
Removed as it requires admin login
2021-07-13 15:28:48 +05:30
5a2d81e578
Merge pull request #1935 from daffainfo/patch-18
...
Create wp-church-admin-xss.yaml
2021-07-13 15:22:31 +05:30
06efff9ddd
minor update
2021-07-13 15:21:26 +05:30
cb32c05cfa
Merge pull request #1953 from Akokonunes/patch-17
...
Create wordpress-wordfence-lfi.yaml
2021-07-13 15:00:01 +05:30
47a07b533b
moving files around
2021-07-13 14:59:11 +05:30
920255635b
Merge pull request #1876 from pussycat0x/master
...
web-ftp
2021-07-13 01:53:15 +05:30
8b8663970f
minor update
2021-07-13 01:44:24 +05:30
81f1f8badc
minor update
2021-07-13 01:43:52 +05:30
a1d3678a70
Add files via upload
2021-07-12 23:24:24 +05:30
4ef8ed8e97
Create hasura-graphql-ssrf.yaml
2021-07-12 20:49:09 +05:30
0e195c4138
Merge branch 'projectdiscovery:master' into master
2021-07-12 14:58:59 +07:00
0f46d27b60
Add files via upload
2021-07-11 23:45:02 +05:30
64bdaee44e
Create wp-finder-xss.yaml
2021-07-11 13:23:51 +07:00
d3f21f1793
Create wp-phpfreechat-xss.yaml
2021-07-11 13:19:01 +07:00
e6272bf44c
Create wp-knews-xss.yaml
2021-07-11 13:11:03 +07:00
8a6e78934c
Create wp-church-admin-xss.yaml
2021-07-11 13:07:34 +07:00
361a641483
Update wp-socialfit-xss.yaml
2021-07-11 10:16:24 +05:30
5366b70077
Merge pull request #1931 from daffainfo/patch-16
...
Create wp-securimage-xss.yaml
2021-07-11 10:08:02 +05:30
b830f86384
Update wp-securimage-xss.yaml
2021-07-11 10:02:30 +05:30
b1f755466b
Update wp-ambience-xss.yaml
2021-07-11 09:57:44 +05:30
cc165287fd
Create wp-ambience-xss.yaml
2021-07-11 09:16:13 +07:00
ab85fd5eba
Create wp-securimage-xss.yaml
2021-07-11 09:10:35 +07:00
d0ec1acc76
Create wp-socialfit-xss.yaml
2021-07-11 07:41:04 +07:00
05bc6366f3
Rename wp-supsystic-backup-lfi to wp-supsystic-backup-lfi.yaml
2021-07-11 07:24:41 +07:00
04e5e30051
Update and rename wp-upsystic-backup-lfi to wp-supsystic-backup-lfi
2021-07-11 07:24:27 +07:00
e26b467c76
Create wp-upsystic-backup-lfi
2021-07-11 07:22:38 +07:00
6a99a183cd
Merge pull request #1920 from projectdiscovery/wordpress-user-enum
...
Added wordpress-user-enum
2021-07-10 21:56:17 +05:30
b228b35f83
Added wordpress-user-enum
2021-07-10 21:54:31 +05:30
ba90f28231
Merge pull request #1909 from gy741/rule-add-v17
...
Create icewarp-webclient-rce.yaml
2021-07-10 09:23:50 +05:30
a0d643561f
Update icewarp-webclient-rce.yaml
2021-07-10 09:18:32 +05:30
c36a62a120
Update jira-unauthenticated-installed-gadgets.yaml
2021-07-10 01:28:30 +05:30
3f46e48426
Update jira-unauthenticated-installed-gadgets.yaml
2021-07-10 01:26:45 +05:30
ef74a354ca
Create icewarp-webclient-rce.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-09 13:52:28 +09:00
98c925a413
Create jira-unauthenticated-installed-gadgets.yaml
2021-07-08 16:55:20 -04:00
808712f772
Update clockwatch-enterprise-rce.yaml
2021-07-08 14:20:18 +05:30
6e6d383b6c
Update clockwatch-enterprise-rce.yaml
2021-07-08 14:00:27 +05:30
7695526e13
Update clockwatch-enterprise-rce.yaml
2021-07-08 14:00:01 +05:30
a722b9fff6
Create clockwatch-enterprise-rce.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-08 13:18:31 +09:00
edc0f1a775
Update opensns-rce.yaml
2021-07-07 18:30:48 +05:30
9588eadaed
minor updates
2021-07-07 18:30:15 +05:30
c3cbee2794
Create opensns-rce.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-07 18:49:36 +09:00
0446fe1996
Merge pull request #1844 from rwincey/maestro-unauth-rce
...
LISTSERV Maestro
2021-07-06 23:55:22 +05:30
d8b3cbf750
Update listserv_maestro_rce.yaml
2021-07-06 23:53:38 +05:30
b02708055d
Update listserv_maestro_rce.yaml
2021-07-06 23:52:24 +05:30
07f3f0d988
Removed extra lines and few updates
2021-07-06 23:44:06 +05:30
f683e0bade
Merge pull request #1837 from gy741/rule-add-v10
...
Create huawei-router-auth-bypass.yaml
2021-07-06 23:33:47 +05:30
cc4244d36c
Update huawei-router-auth-bypass.yaml
2021-07-06 23:32:45 +05:30
2373873f30
Merge pull request #1881 from johnjhacking/patch-1
...
Added bypass for 1.9.2
2021-07-06 12:34:07 +05:30
fc68a95803
Template Name/ID update as per assigned CVE
2021-07-06 12:07:53 +05:30
fd13654972
Merge branch 'patch-1' of https://github.com/johnjhacking/nuclei-templates into pr/1827
2021-07-06 12:04:00 +05:30
192201c27c
condition update as per new bypass
2021-07-06 12:03:51 +05:30
a2f283c51b
CVE number was assigned
...
As stated.
2021-07-06 00:32:35 -06:00
9068a38b56
Update reference
...
Currently, the provided reference doesn't exist anymore. However, this tweet posted on May 9th should work as a reference.
2021-07-06 00:27:15 -06:00
601a192703
Added bypass for 1.9.2
...
Another payload was identified, as a bypass in version 1.9.2. This bypass caused the vendor to upgrade to 1.9.3
I have added the bypass and the matcher above. Let me know what you think.
2021-07-05 18:39:25 -06:00
7c06dfaf70
Create huijietong-cloud-fileread.yaml
2021-07-05 21:59:12 +05:30
f55aef6a1b
Merge pull request #1839 from gy741/rule-add-v11
...
Create netgear-router-auth-bypass.yaml
2021-07-05 21:46:00 +05:30
b1e6c71d89
Merge pull request #1857 from Akokonunes/patch-16
...
Create wp-vault-lfi.yaml
2021-07-05 21:08:11 +05:30
ce43643e00
Update and rename wp-vault-lfi.yaml to vulnerabilities/wordpress/wp-vault-lfi.yaml
2021-07-05 21:06:50 +05:30
457ce76e34
minor updates
2021-07-04 17:09:45 +05:30
ecdd86167a
Create lotuscms-rce.yaml
2021-07-04 11:11:19 +00:00
d50459eb9b
Added missing matcher
2021-07-04 01:26:41 +05:30
22421fd38e
Merge pull request #1843 from DhiyaneshGeek/master
...
Update AEM CRX bypass , AEM Debug XSS and Java sean debug page, Jetty showcontexts enable , jfrog-unauth-build-exposed Templates Added
2021-07-04 01:23:20 +05:30
afcbe4cfe4
minor updates
2021-07-04 01:22:08 +05:30
b137eb57d3
More edge cases
...
Only looking for DNS interaction is not reliable as few servers make DNS requests for host included in path or query parameter.
2021-07-04 00:41:57 +05:30
127673455a
Update coldfusion-debug-xss.yaml
2021-07-02 20:55:33 +05:30
e259c3dd2f
Update jfrog-unauth-build-exposed.yaml
2021-07-02 20:53:02 +05:30
52e0c861a1
Merge pull request #1733 from milo2012/master
...
Added CVE-2018-1000130/ CVE-2018-2628/ CVE-2018-2628/ CVE-2019-3401/ CVE-2020-1938/ oracle-bi-default-login/ jolokia-heap-disclosure
2021-07-02 18:27:45 +05:30
e2a0f93f79
misc updates
2021-07-02 18:24:31 +05:30
f02befc6f7
Merge pull request #1834 from pussycat0x/master
...
wp-plugin-1-flash-gallery.yaml
2021-07-02 13:56:53 +05:30
f983baba38
misc changes
2021-07-02 13:55:32 +05:30
2787fc01b6
Update jfrog-unauth-build-exposed.yaml
2021-07-02 08:25:40 +05:30
2fa4382ef5
Create jfrog-unauth-build-exposed.yaml
2021-07-02 08:23:42 +05:30
dad74b4738
LISTSERV Maestro
2021-07-01 12:14:33 -07:00
453b09d3ff
Create coldfusion-debug-xss.yaml
2021-07-01 22:31:01 +05:30
c0ebf56f85
Create netgear-router-auth-bypass.yaml
...
NETGEAR decided to use to check if a page has “.jpg”, “.gif” or “ess_” substrings, trying to match the entire URL. We can therefore access any page on the device, including those that require authentication, by appending a GET variable with the relevant substring (like “?.gif”).
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-01 14:39:10 +09:00
4d56d47c69
Create huawei-router-auth-bypass.yaml
...
The default password of this router is the last 8 characters of the
device's serial number which exist in the back of the device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-01 09:28:30 +09:00
89eff74128
Add files via upload
2021-06-30 21:33:39 +05:30
5affbf47b3
misc changes
2021-06-30 18:24:34 +05:30
9f6b6aeb89
Update jolokia-heap-info-disclosure.yaml
2021-06-30 15:36:25 +05:30
d2df3303c6
Add Marmoset Viewer XSS Vulnerability
...
Reference:
https://wordpress.org/plugins/marmoset-viewer/#developers
2021-06-30 01:12:12 -06:00
d564c257d8
Additional check add
2021-06-29 17:26:42 +05:30
b80df5756a
Merge pull request #1795 from Mad-robot/patch-1
...
Create multiple-theme-ssrf.yaml
2021-06-28 23:58:54 +05:30
2a1772d78c
misc changes
2021-06-28 23:58:31 +05:30
039a41e790
Merge pull request #1774 from pikpikcu/patch-185
...
Create huawei-hg659-lfi.yaml
2021-06-28 21:46:51 +05:30
24a3fab9d3
Added missing condition
2021-06-26 19:35:52 +05:30
59e24ab8a7
Create multiple-theme-ssrf.yaml
2021-06-26 13:38:26 +05:30
e84c784fa2
Merge pull request #1689 from nrathaus/master
...
CVE-2021-28164 and some fixes
2021-06-24 23:58:29 +05:30
cb18f313fd
Create huawei-hg659-lfi.yaml
2021-06-24 15:41:18 +00:00
37261f7a2f
Update and rename vulnerabilities/jira/jira-unauthenticated-popular-filters.yaml to cves/2019/CVE-2019-3401.yaml
2021-06-24 16:52:04 +05:30
bc7e8a80db
Merge pull request #1336 from projectdiscovery/princechaddha-patch-5
...
Create resin-inputfile-fileread.yaml
2021-06-24 02:32:40 +05:30
ed4c5a415d
Merge pull request #1335 from projectdiscovery/princechaddha-patch-4
...
Create resin-viewfile-lfr.yaml
2021-06-24 02:28:47 +05:30
c45ec90d5f
Update resin-inputfile-fileread.yaml
2021-06-24 02:28:18 +05:30
b2114008ad
Merge pull request #1595 from pikpikcu/patch-173
...
Create jeewms-lfi
2021-06-24 02:24:41 +05:30
89b4fdf8ed
Merge pull request #1757 from pussycat0x/master
...
New template added
2021-06-24 02:02:42 +05:30
c383c120b7
moved to wordpress folder
2021-06-24 01:39:09 +05:30
3e7269f2a4
Rename ALFA_DATA.yaml to alfacgiapi-wordpress.yaml
2021-06-24 01:37:45 +05:30
8c7e69fafd
Update ALFA_DATA.yaml
2021-06-24 01:36:47 +05:30
aeed665ff7
Update ALFA_DATA.yaml
2021-06-24 01:29:50 +05:30
161204c20e
Rename wordpress-123ContactForm.yaml to wp-123contactform-plugin-listing.yaml
2021-06-24 01:13:42 +05:30
8f247c03c0
Removed trailing spaces
2021-06-24 01:11:14 +05:30
a4e439024e
Added missing condition
2021-06-24 01:10:33 +05:30
c1f5c60700
Update wordpress-123ContactForm.yaml
2021-06-23 21:31:03 +05:30
418de400a7
Add files via upload
2021-06-23 21:27:43 +05:30
5e9847260a
remove trailing spaces
2021-06-23 01:46:57 +08:00
f48d1d8b35
Add jolokia-heap-info-disclosure.yaml
2021-06-23 01:43:31 +08:00
1c1186e4da
Add files via upload
2021-06-22 20:39:40 +05:30
1d581af4ec
Update jeewms-lfi.yaml
2021-06-22 18:28:52 +05:30
37bf78a3a9
Merge pull request #1752 from DhiyaneshGeek/master
...
6 New Wordpress Template Added
2021-06-21 18:12:33 +05:30
27287e473b
Update wordpress-woocommerce-listing.yaml
2021-06-21 18:11:30 +05:30
3844df9fc8
misc changes
2021-06-21 18:09:16 +05:30
9ba613b509
Create wordpress-gtranslate-plugin.yaml
2021-06-21 15:00:25 +05:30
f5ef733bd8
Update wp-gtranslate-open-redirect.yaml
2021-06-21 14:48:53 +05:30
402d5eb9f3
Update wp-gtranslate-open-redirect.yaml
2021-06-21 14:45:43 +05:30
c990105b0d
Update wp-gtranslate-open-redirect.yaml
2021-06-21 14:41:57 +05:30
401a26eefd
Update wp-gtranslate-open-redirect.yaml
2021-06-21 14:39:42 +05:30
d5afd2831f
Create wp-gtranslate-open-redirect.yaml
2021-06-21 14:37:29 +05:30
38668c44e7
Update open-redirect.yaml
...
this payload worked for me while i was hunting.
2021-06-21 10:21:44 +02:00
2d91148f39
Create wordpress-bbpress-plugin.yaml
2021-06-21 13:50:11 +05:30
08f9cf9de6
Update wordpress-woocommerce-plugin.yaml
2021-06-21 13:48:15 +05:30
b2bc8d61a1
Create wordpress-woocommerce-plugin.yaml
2021-06-21 13:03:20 +05:30
fbd53598d6
Create wordpress-elementor-plugin.yaml
2021-06-21 12:29:50 +05:30
00a0b17bf5
Merge pull request #1744 from pussycat0x/master
...
Add files via upload
2021-06-21 01:43:48 +05:30
788fc31fd3
Adding additional condition
2021-06-21 01:40:01 +05:30
82e23a03e3
Add files via upload
2021-06-21 00:26:48 +05:30
0ec921ef4f
misc changes
2021-06-21 00:09:04 +05:30
5d01e7b235
Create wordpress-updraftplus-pem-key.yaml
2021-06-20 23:03:52 +05:30
42c937d730
Create wpmudev-my-calender-xss.yaml
2021-06-20 22:45:15 +05:30
40dfa6d6fe
Create wpmudev-pub-keys.yaml
2021-06-20 22:38:20 +05:30
dbd72a33e0
Create wordpress-redirection-listing.yaml
2021-06-20 22:26:23 +05:30
4160cb168a
misc changes to work with workflows
2021-06-20 16:35:59 +05:30
bb6fa66dd9
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-20 13:56:54 +03:00
3430bc2efd
Merge pull request #1710 from skar4444/gitlab-user-indormation-disclosed
...
GitLab - User Information Disclosure Via Open API
2021-06-18 13:54:24 +05:30
351534bd1a
Added reference
2021-06-18 13:52:48 +05:30
d0076b92c7
Added fuzz tags + more strict matcher
2021-06-18 13:50:34 +05:30
62fb7fd0b9
Rename gitlab-user-information-disclosure-via-open-api.yaml to gitlab-user-open-api.yaml
2021-06-17 22:03:32 +05:30
01b77a7ed2
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-17 16:54:18 +03:00
b50032d692
Update gitlab-user-information-disclosure-via-open-api.yaml
2021-06-17 13:31:19 +05:30
9f8cae8ab5
Update tamronos-rce.yaml
2021-06-17 01:34:49 +00:00
90bdede7dd
Create tamronos-rce.yaml
2021-06-17 01:31:59 +00:00
bd7b099e97
GitLab - User Information Disclosure Via Open API
2021-06-16 21:39:35 +05:30
bb4cdb5e3d
Merge pull request #1696 from skar4444/skar4444
...
GitLab User Enumeration
2021-06-16 01:25:55 +05:30
564a0ea6ae
minor changes
2021-06-16 01:23:59 +05:30
e103e7b0ff
Update confluence-ssrf-sharelinks.yaml
2021-06-14 23:13:30 +05:30
a91ee941ff
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-14 14:59:58 +03:00
26da2936eb
misc updates
2021-06-14 16:13:38 +05:30
c164158aff
Add Confluence SSRF in sharelinks
2021-06-14 11:10:56 +02:00
13617d98cf
GitLab User Enumeration
2021-06-14 14:20:55 +05:30
fecae7747e
Merge pull request #1691 from DhiyaneshGeek/master
...
2 new template
2021-06-13 20:57:19 +05:30
1e77410799
Update wpdm-cache-session.yaml
2021-06-13 20:56:28 +05:30
dab25e2df3
Create wpdm-cache-session.yaml
2021-06-13 17:43:24 +05:30
cb342f8564
misc changes
2021-06-13 17:28:10 +05:30
3369c5a4dd
Reference
2021-06-13 11:55:20 +03:00
b5bdac494b
Merge branch 'master' of https://github.com/nrathaus/nuclei-templates
2021-06-13 09:54:52 +03:00
feb42e49b0
Reduce chances of FP
2021-06-13 09:53:47 +03:00
513596d2e0
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-13 09:05:57 +03:00
641e0c0672
Wordpress DB Backup
2021-06-12 20:13:29 +05:30
962959f573
Removed invalid payload
2021-06-11 22:20:01 +05:30
98e49295b6
Merge pull request #1672 from DhiyaneshGeek/master
...
CKAN DOM Based XSS , php-zerodium-backdoor-rce
2021-06-11 14:16:18 +05:30
771e55eca6
Create php-zerodium-backdoor-rce.yaml
2021-06-10 22:01:26 +05:30
69ded42e3a
Template rename / update
2021-06-10 21:57:07 +05:30
Prince Chaddha
Prince Chaddha
GwanYeong Kim
sandeep
G4L1T0
Noam Rathaus
Dhiyaneshwaran
PikPikcU
Philippe Delteil
pussycat0x
lulz
juan mesaglio
Muhammad Daffa
SaN ThosH
rootxharsh
Suman Kar
John Jackson
sandeep
b0yd
Keith
Emad Youssef
Techbrunch