19bfb84638
Auto Generated CVE annotations [Tue Dec 21 11:06:14 UTC 2021] 🤖
2021-12-21 11:06:14 +00:00
7fe5c23627
Auto Generated CVE annotations [Mon Dec 20 14:33:22 UTC 2021] 🤖
2021-12-20 14:33:22 +00:00
b8ee43e27a
Create CVE-2021-26085.yaml
2021-12-20 15:20:14 +05:30
d40c6cbaa3
Merge pull request #3377 from daffainfo/patch-284
...
Create CVE-2015-2166.yaml
2021-12-20 13:04:30 +05:30
d5c43bb502
Update CVE-2015-2166.yaml
2021-12-20 13:02:41 +05:30
9461383161
Update CVE-2015-0554.yaml
2021-12-20 13:01:11 +05:30
2c279c7388
Update CVE-2015-2166.yaml
2021-12-20 12:56:36 +05:30
bee031da45
Create CVE-2015-2166.yaml
2021-12-19 20:33:58 +07:00
e3c0539174
Create CVE-2015-0554.yaml
2021-12-19 20:23:13 +07:00
ca6146a4af
Update CVE-2021-44228.yaml
2021-12-19 14:52:29 +05:30
5f271045d1
CVE-2016-6210 - Fix typo in the regex ( #3365 )
...
* CVE-2016-6210 - Fix typo in the regex
* minor variable update
Co-authored-by: ganoes <karel.rozhon@etnetera.cz>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-18 14:58:35 +05:30
fc566d27a8
Create CVE-2021-45092.yaml ( #3372 )
...
* Create CVE-2021-45092.yaml
* Added Thinfinity Iframe Injection
Co-Authored-By: Daniel Mofer <7999779+danielmofer@users.noreply.github.com>
* Added Thinfinity VirtualUI User Enumeration
Co-Authored-By: Daniel Mofer <7999779+danielmofer@users.noreply.github.com>
* added missing tag
Co-Authored-By: Daniel Mofer <7999779+danielmofer@users.noreply.github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
Co-authored-by: Daniel Mofer <7999779+danielmofer@users.noreply.github.com>
2021-12-18 14:32:44 +05:30
dd40419ea5
Updated CVE-2021-44228 with most common vulnerable headers ( #3334 )
...
* Updated with common headers which can be exploited
Reference : https://blog.qualys.com/vulnerabilities-threat-research/2021/12/10/apache-log4j2-zero-day-exploited-in-the-wild-log4shell
These headers are collected from above blog in Detecting the Vulnerability part
* fix: lint update
* Update CVE-2021-44228.yaml
* Update CVE-2021-44228.yaml
* Updated changed matchers and extractors regex according to v8.7.3 update
* payload updates for CVE-2021-44228
- more injection points
- a fixed regex to extract uppercase hostnames
- standardized payloads
- printed injection points
Source - https://twitter.com/0xceba/status/1471664540542648322
Co-Authored-By: 0xceba <44234156+0xceba@users.noreply.github.com>
Co-Authored-By: Abhiram V <61599526+Anon-Artist@users.noreply.github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
Co-authored-by: 0xceba <44234156+0xceba@users.noreply.github.com>
2021-12-18 10:51:45 +05:30
b8fa0d5857
update: added more reference
2021-12-15 21:26:35 +05:30
9c169bd682
Create CVE-2021-44528.yaml ( #3342 )
2021-12-15 20:43:07 +05:30
c9ddd7a0ae
update: id + reference update
2021-12-14 21:07:46 +05:30
34d4557dad
update: making it compatible with self-hosted interactsh server
2021-12-14 03:21:47 +05:30
dddb0bbb82
Added CVE-2021-24997 ( #3298 )
...
* Added CVE-39226
* Added CVE-39226
* Delete CVE-39226.yaml
* Renamed CVE-39226 to CVE-2021-39226
Fixed naming error
* Added Wp-Guppy-Information-Disclosure template
* Removed File
Found better descriptor
* Added CVE-2021-24997
Added WordPress Guppy Information Disclosure CVE
* Fixed CVE-2021-24997
Fixed YAML formatting
* Fixed Typo
URL Path had an extra double quote
* Auto Generated Templates Stats [Wed Dec 8 23:07:24 UTC 2021] 🤖
* Deleted Blank Space
* Update CVE-2021-24997.yaml
* Update CVE-2021-24997.yaml
* Update CVE-2021-24997.yaml
* Update CVE-2021-24997.yaml
* Added CVE-2021-43496
* Update CVE-2021-43496.yaml
* fix: syntax update
* Added New Vuln
* Update CVE-2021-24997.yaml
* Update CVE-2021-43496.yaml
* Update and rename hd-netowrk-realtime-monitor-system-LFI.yaml to hdnetwork-realtime-lfi.yaml
* fix: lints update
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: GitHub Action <action@github.com>
Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2021-12-14 02:22:26 +05:30
1411edf332
Updated CVE-2021-44228.yaml ( #3335 )
...
Co-authored-by: olacin <olacin@users.noreply.github.com>
2021-12-13 20:24:06 +05:30
fe4ec9185f
Merge pull request #3325 from 5tr1x/patch-1
...
Add X-Forwarded-For and Authentication headers
2021-12-12 17:31:07 +05:30
1824aef5f5
Update and rename CVE-2018-7467.yaml to cves/2018/CVE-2018-7467.yaml
2021-12-12 16:53:17 +05:30
5dc71681c5
Add X-Forwarded-For and Authentication headers
2021-12-11 15:43:22 -06:00
33fbe53930
Create CVE-2021-44228.yaml ( #3319 )
...
* Create CVE-2021-44228.yaml
* fix: syntax fix
* update: added additional path based payload
* update: strict matcher + pulling hostname information of the system
* update: added path based payload
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2021-12-12 00:56:50 +05:30
18d54f5204
Edit magmi workflow ( #3312 )
2021-12-09 23:28:33 +05:30
a19b941193
Auto Generated CVE annotations [Wed Dec 8 11:18:20 UTC 2021] 🤖
2021-12-08 11:18:20 +00:00
2521cb62bf
Added CVE-2021-43798 ( #3296 )
...
* Added CVE-2021-43798
* updated with default plugin list
* Update grafana-file-read.yaml
2021-12-08 16:46:47 +05:30
548980ae5b
Update CVE-2021-40856.yaml
2021-12-08 10:25:18 +05:30
48c6834de6
Create CVE-2021-40856.yaml
...
Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for authentication at the PBX, among other data.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-12-08 09:54:30 +09:00
7905d1dfd7
Merge pull request #3281 from daffainfo/master
...
Add 10 templates and edit 1 workflows netsweeper
2021-12-07 13:59:14 +05:30
684abeb93e
Update CVE-2014-9618.yaml
2021-12-07 13:42:19 +05:30
2fcb784fcf
Update CVE-2014-9617.yaml
2021-12-07 13:38:32 +05:30
6d73776e5d
Update CVE-2014-9615.yaml
2021-12-07 13:25:57 +05:30
7bee8bedd9
Update CVE-2014-9614.yaml
2021-12-07 13:13:49 +05:30
ac1439c40f
Update CVE-2014-9608.yaml
2021-12-07 13:05:50 +05:30
891a922592
Update CVE-2014-9609.yaml
2021-12-07 12:56:58 +05:30
c3f2e61e48
Update CVE-2014-9608.yaml
2021-12-07 12:55:09 +05:30
881ea5dd3c
Update CVE-2014-9607.yaml
2021-12-07 12:48:33 +05:30
d38243621e
Update CVE-2014-9606.yaml
2021-12-07 12:43:19 +05:30
7983f04c51
Update and rename CVE-2014-3110.yaml to CVE-2014-2908.yaml
2021-12-07 10:28:21 +05:30
f0fbe930f6
Update CVE-2014-3110.yaml
2021-12-07 10:23:35 +05:30
04dc5d7532
Update CVE-2014-9614.yaml
2021-12-06 23:49:04 +07:00
b24b6e8fa1
Update CVE-2014-9614.yaml
2021-12-06 23:48:38 +07:00
3bf8c4f4b4
Auto Generated CVE annotations [Mon Dec 6 16:40:52 UTC 2021] 🤖
2021-12-06 16:40:52 +00:00
b90d0b7e3e
Add 10 templates and edit 1 workflows
2021-12-06 23:38:54 +07:00
f8771cea8f
Create CVE-2014-3110.yaml
2021-12-06 22:13:40 +07:00
3d7060f0d2
Update and rename CVE-2018-8727.yaml to cves/2018/CVE-2018-8727.yaml
2021-12-06 18:31:06 +05:30
c92010033b
Update CVE-2020-8497.yaml
2021-12-06 10:39:43 +05:30
b76c1d20f3
Create CVE-2020-8497.yaml
...
In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-12-06 08:36:14 +09:00
b8d068416f
update: added reference for CVE-2021-38314
2021-12-04 22:17:25 +05:30
f64926808d
Added missing tag
2021-12-04 12:50:04 +05:30
01cb3156ce
Auto Generated CVE annotations [Sat Dec 4 07:17:12 UTC 2021] 🤖
2021-12-04 07:17:12 +00:00
d2d0d4bf8d
minor update to description
2021-12-04 12:44:08 +05:30
09468dc0f8
Create CVE-2021-29490.yaml
2021-12-04 12:40:47 +05:30
5180d138bf
Delete CVE-2021-29490
2021-12-04 12:40:47 +05:30
41148c9f86
Create CVE-2021-29490
2021-12-04 12:40:47 +05:30
a04590433f
Merge pull request #3193 from Akokonunes/patch-78
...
Create CVE-2018-7719.yaml
2021-12-03 14:56:42 +05:30
ee1c16543d
Auto Generated CVE annotations [Fri Dec 3 09:17:18 UTC 2021] 🤖
2021-12-03 09:17:18 +00:00
7a32fc3941
Update and rename CVE-2021-27310.yaml to cves/2021/CVE-2021-27310.yaml
2021-12-03 14:43:25 +05:30
7bd27557d8
Merge pull request #3253 from projectdiscovery/pr-fix-1
...
Update CVE-2021-30213.yaml
2021-12-03 14:32:47 +05:30
0ac3b4da59
Merge pull request #3252 from projectdiscovery/pr-fix
...
Update CVE-2021-27931.yaml
2021-12-03 14:32:06 +05:30
10c0f1b22f
Update CVE-2021-30213.yaml
2021-12-03 14:31:08 +05:30
04bb340596
Update CVE-2021-27931.yaml
2021-12-03 14:30:44 +05:30
5a36367340
Merge branch 'master' into pr-fix-1
2021-12-03 13:49:27 +05:30
3cade85cc8
Merge branch 'master' into pr-fix
2021-12-03 13:23:33 +05:30
6731cb176b
Auto Generated CVE annotations [Fri Dec 3 07:23:34 UTC 2021] 🤖
2021-12-03 07:23:34 +00:00
ccca1add3f
Update CVE-2021-30213.yaml
2021-12-03 12:53:01 +05:30
e53cdde0c0
Merge pull request #3199 from alph4byt3/alph4byt3-patch-1
...
Create CVE-2021-30213.yaml
2021-12-03 12:52:11 +05:30
5afe45cba5
Auto Generated CVE annotations [Fri Dec 3 07:19:34 UTC 2021] 🤖
2021-12-03 07:19:34 +00:00
636a82effd
Update CVE-2021-27931.yaml
2021-12-03 12:48:47 +05:30
025475d950
Merge pull request #3251 from projectdiscovery/pr-fix
...
Update and rename CVE-2021-40542.yaml to cves/2021/CVE-2021-40542.yaml
2021-12-03 12:48:01 +05:30
bac5f0f843
Merge pull request #3206 from alph4byt3/patch-1
...
Create CVE-2021-27931.yaml
2021-12-03 12:47:18 +05:30
0457cbd6b2
Update and rename CVE-2021-40542.yaml to cves/2021/CVE-2021-40542.yaml
2021-12-03 12:42:37 +05:30
91f667044c
Update CVE-2018-16133.yaml
2021-12-03 10:52:45 +05:30
df69e7e4e3
minor template update
2021-12-03 10:45:57 +05:30
53182fa956
Merge pull request #3195 from Akokonunes/patch-80
...
Create CVE-2015-1503.yaml
2021-12-02 12:50:16 +05:30
8a23858b71
Update and rename CVE-2015-1503.yaml to cves/2015/CVE-2015-1503.yaml
2021-12-02 12:48:57 +05:30
78e5e52cd8
Merge pull request #3194 from Akokonunes/patch-79
...
Create CVE-2018-10201.yaml
2021-12-02 12:46:03 +05:30
cc24ef4880
Update CVE-2018-10201.yaml
2021-12-02 12:43:43 +05:30
1dabef2e6f
Revert "CVE update - CVE-2021-22049"
...
This reverts commit 70128c2587
2021-12-02 01:34:29 +05:30
70128c2587
CVE update - CVE-2021-22049
2021-12-02 01:31:41 +05:30
814bf92a00
File name update - CVE-2021-39226
2021-12-02 01:14:10 +05:30
19fcafa546
CVE-2021-39226 ( #3241 )
...
* Added CVE-39226
Co-Authored-By: Evan Rubinstein <70485623+evanRubinsteinIT@users.noreply.github.com>
Co-authored-by: Evan Rubinstein <70485623+evanRubinsteinIT@users.noreply.github.com>
2021-12-02 01:07:40 +05:30
854b464b1d
Add remediation information to CVE-2021-40539 and CVE-2021-44427 ( #3237 )
...
* Added remediation to CVE-2021-40539
* Added remediation to CVE-2021-44427
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2021-12-01 22:23:24 +05:30
40d7678327
Merge pull request #3233 from Akokonunes/patch-83
...
Create CVE-2018-16133.yaml
2021-12-01 19:21:26 +05:30
c9b6c8e463
Merge pull request #3235 from cckuailong/master
...
add CVE-2021-43778.yaml
2021-12-01 19:21:08 +05:30
93f9f3ccac
Update CVE-2021-43778.yaml
2021-12-01 19:19:10 +05:30
ec4360339e
Merge pull request #3232 from Akokonunes/patch-82
...
Create CVE-2018-18323.yaml
2021-12-01 19:16:06 +05:30
c77356d541
Update and rename CVE-2018-16133.yaml to cves/2018/CVE-2018-16133.yaml
2021-12-01 19:15:56 +05:30
d3649d4f43
Auto Generated CVE annotations [Wed Dec 1 13:42:24 UTC 2021] 🤖
2021-12-01 13:42:24 +00:00
80df18b062
Update and rename CVE-2018-18323.yaml to cves/2018/CVE-2018-18323.yaml
2021-12-01 19:10:27 +05:30
a265f86133
Rename CVE-2018-19753.yaml to cves/2018/CVE-2018-19753.yaml
2021-12-01 19:08:50 +05:30
2a8ca5d836
add CVE-2021-43778.yaml
2021-12-01 15:04:29 +08:00
fb048c7972
Auto Generated CVE annotations [Tue Nov 30 18:51:32 UTC 2021] 🤖
2021-11-30 18:51:32 +00:00
eb5a6ab341
Added CVE-2021-41266 ( #3229 )
...
Co-Authored-By: Lenin Alevski <1795553+Alevsk@users.noreply.github.com>
2021-12-01 00:19:41 +05:30
d484fed316
Merge pull request #3224 from xShuden/master
...
Create CVE-2021-44427.yaml
2021-11-30 21:55:47 +04:00
f6a952d4be
Update CVE-2021-44427.yaml
2021-11-30 23:23:31 +05:30
ae078ecd51
Merge pull request #3223 from gy741/rule-add-v74
...
Create CVE-2021-41653.yaml
2021-11-30 20:54:55 +04:00
0b82e570d1
Update CVE-2021-41653.yaml
2021-11-30 22:22:16 +05:30
38f147a716
create CVE-2021-41951 ( #3202 )
...
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2021-11-30 22:19:12 +05:30
949cd0d5a6
CVE 2021 41951 ( #3226 )
...
* create CVE-2021-41951
Co-authored-by: Aaron Chen <aaronchen.lisp@gmail.com>
2021-11-30 22:15:32 +05:30
3ae4c1b484
Create CVE-2021-44427.yaml
2021-11-30 16:56:38 +01:00
3dd0c78fff
Create CVE-2021-41653.yaml
...
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-11-30 14:35:25 +09:00
2f6733c202
Auto Generated CVE annotations [Mon Nov 29 14:34:36 UTC 2021] 🤖
2021-11-29 14:34:36 +00:00
38839cfbbc
Added Commvault CommCell Directory Traversal (CVE-2020-25780) ( #3182 )
2021-11-29 20:02:59 +05:30
7ef4f90cf0
feat: CVE-2021-22053 ( #3220 )
...
* feat: CVE-2021-22053
2021-11-29 18:42:08 +05:30
bcb798df8b
Auto Generated CVE annotations [Sun Nov 28 20:49:07 UTC 2021] 🤖
2021-11-28 20:49:07 +00:00
b7cb6a63cb
moving template into cves
2021-11-29 02:17:27 +05:30
302227a09d
Auto Generated CVE annotations [Sun Nov 28 20:31:30 UTC 2021] 🤖
2021-11-28 20:31:30 +00:00
90b18a504e
Merge pull request #3217 from projectdiscovery/CVE-2021-38540
...
Apache Airflow - Unauthenticated variable Import (CVE-2021-38540)
2021-11-29 01:59:54 +05:30
682db62431
Fixed CVE-2020-14882 payload + matcher
2021-11-29 01:15:05 +05:30
d00dea3f6b
removed unwanted headers
2021-11-29 00:05:36 +05:30
685c46640e
Added Apache Airflow - Unauthenticated variable Import
2021-11-28 23:47:12 +05:30
b07189e3d1
Merge pull request #3216 from projectdiscovery/CVE-2014-8682-fix
...
Added missing condition for CVE-2014-8682
2021-11-28 17:24:24 +05:30
63b23a4848
Added additional reference
2021-11-28 17:22:02 +05:30
e108fe7df8
Added missing condition
2021-11-28 00:08:05 +05:30
7345869864
Added additional matcher
2021-11-27 10:04:24 +05:30
0595a1dcf1
Add template for CVE-2021-24278
2021-11-27 01:32:48 +02:00
9aad440f05
lint fixing
2021-11-26 22:25:58 +05:30
45319b2571
Merge pull request #3191 from r3naissance/master
...
Adding a 2000 cve because I tragically came across it today...
2021-11-26 22:18:36 +05:30
e7c68469e0
Added additional path
2021-11-26 22:17:35 +05:30
325d8de2fe
added addition tag
2021-11-26 22:14:43 +05:30
3c1ae20146
Create CVE-2021-27931.yaml
2021-11-25 17:39:09 +02:00
62b3e7e9d0
Update and rename CVE-2018-7719.yaml to cves/2018/CVE-2018-7719.yaml
2021-11-25 10:45:10 +04:00
1f46d1653d
Auto Generated CVE annotations [Wed Nov 24 21:58:12 UTC 2021] 🤖
2021-11-24 21:58:12 +00:00
566361897c
moving template of cves folder
2021-11-25 03:21:36 +05:30
f2ff7a1a7e
Create CVE-2021-30213.yaml
2021-11-24 17:43:59 +02:00
168db8a984
Update CVE-2020-2096.yaml
2021-11-24 11:58:52 +04:00
ea78c078d8
Fixed Title
2021-11-23 16:53:00 -07:00
45521a075f
Adding a 2000 cve because I tragically came across it today...
2021-11-23 16:46:22 -07:00
641ffd4e93
update CVE-2020-2096
2021-11-23 19:01:24 +08:00
65ec414ae7
Auto Generated CVE annotations [Tue Nov 23 04:08:40 UTC 2021] 🤖
2021-11-23 04:08:40 +00:00
13204529fa
Merge pull request #3181 from pikpikcu/patch-301
...
Create CVE-2020-20982
2021-11-23 09:37:04 +05:30
2e3c57379f
Auto Generated CVE annotations [Tue Nov 23 03:59:46 UTC 2021] 🤖
2021-11-23 03:59:46 +00:00
f632abce33
Merge pull request #3178 from ImNightmaree/patch-4
...
Minor updates to grammar
2021-11-23 09:28:28 +05:30
1c569d76cb
Update CVE-2020-20982.yaml
2021-11-23 07:57:11 +04:00
e787e67010
Update CVE-2021-43495.yaml
2021-11-23 07:46:15 +04:00
05a366d141
Create CVE-2021-43495.yaml
2021-11-23 08:30:30 +07:00
8463cfd824
Create CVE-2020-20982.yaml
2021-11-22 22:56:22 +07:00
9febb14f78
Minor updates to grammar
...
Capitalization adjustment to "unrestricted file upload"
2021-11-22 00:00:53 +00:00
eff91b0dfa
removed extra headers
2021-11-21 15:27:06 +05:30
3fb2bf4644
Merge pull request #3174 from DhiyaneshGeek/master
...
Version Control Templates
2021-11-21 14:55:24 +05:30
d16fb02b21
minor updates to template
2021-11-21 14:53:15 +05:30
71fce6b5ea
Auto Generated CVE annotations [Sat Nov 20 12:32:16 UTC 2021] 🤖
2021-11-20 12:32:16 +00:00
bb4f329f15
Update CVE-2008-5587.yaml
2021-11-20 18:00:35 +05:30
8cfe1a59af
Create CVE-2008-5587.yaml
2021-11-20 18:00:04 +05:30
f21ffcf1d6
Auto Generated CVE annotations [Sat Nov 20 12:29:14 UTC 2021] 🤖
2021-11-20 12:29:14 +00:00
7ea0ec8fc0
Create CVE-2007-5728.yaml
2021-11-20 17:57:41 +05:30
623fe7ee15
Auto Generated CVE annotations [Sat Nov 20 11:56:31 UTC 2021] 🤖
2021-11-20 11:56:31 +00:00
fb105fdb39
Create CVE-2014-8682.yaml
2021-11-20 17:24:58 +05:30
a175effdc4
Added few additional information
2021-11-20 17:19:24 +05:30
GitHub Action
Prince Chaddha
Muhammad Daffa
Ganoes
Abhiram V
sandeep
Geeknik Labs
Evan Rubinstein
Nicolas
5tr1x
Mohamed Elbadry
GwanYeong Kim
daffainfo
alph4byt3
sullo
cckuailong
Aaron Chen
Furkan Sayım
forgedhallpass
rotemr
Chapman Schleiss
yuan
Prince Chaddha
PikPikcU
ImNightmaree
Dhiyaneshwaran