daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,420 Commits
17 Branches
0 Tags
160 MiB
Commit Graph

381 Commits (eacbdef17783ccee5536fa72bdacc9168441f7e2)

Author SHA1 Message Date
sandeep 8c48ca97d2 matcher + payload + regex updates 2021-08-09 21:58:28 +05:30
sandeep c0db649278 Added CVE-2019-0193 - Apache Solr - DataImportHandler RCE 2021-08-09 21:57:30 +05:30
sandeep 63595cad63 Update CVE-2019-12616.yaml 2021-08-08 12:20:47 +05:30
sandeep 5d51c6235d Update CVE-2019-12616.yaml 2021-08-08 12:20:24 +05:30
Philippe Delteil 78cca01d07
Update CVE-2019-12616.yaml 
regex matching condition to match all vulnerable versions. 
With 401 we could find instances behind htaccess protection. 
Added a version extractor also.
 2021-08-07 18:59:05 -04:00
Sandeep Singh 454e11f6c4
Merge pull request #2271 from pikpikcu/patch-240 
Update JIRA SSRF
 2021-08-02 01:31:27 +05:30
sandeep f5982c5d28 Update CVE-2019-8451.yaml 2021-08-02 01:30:00 +05:30
sandeep 5023dd6f9c Update CVE-2019-8451.yaml 2021-08-02 01:27:40 +05:30
Sandeep Singh c7778257c3
Update CVE-2019-8451.yaml 2021-08-02 01:22:49 +05:30
Sandeep Singh 56d3a2f1bd
Merge pull request #2284 from pikpikcu/patch-242 
Update CVE-2019-0221
 2021-08-02 01:17:36 +05:30
Noam Rathaus 03dfb4bff6 More references 2021-08-01 09:16:33 +03:00
Noam Rathaus ac70ba03c7 description and reference 2021-08-01 09:12:12 +03:00
Noam Rathaus 21b17993be Better references 2021-08-01 09:10:14 +03:00
PikPikcU 0653fdc498
Update CVE-2019-0221.yaml 2021-08-01 09:43:53 +07:00
Prince Chaddha 8246b2356c
Update CVE-2019-12276.yaml 2021-07-31 08:58:19 +05:30
sandeep ff344b0e49 Update CVE-2019-8451.yaml 2021-07-30 17:35:48 +05:30
PikPikcU 5bf63d1811
Update JIRA SSRF 2021-07-30 18:50:31 +07:00
Muhammad Daffa 189f59ba9d
Create CVE-2019-12276.yaml 2021-07-30 05:49:59 +07:00
Muhammad Daffa 3a3ccf0ba2
Create CVE-2019-14312.yaml 2021-07-28 09:04:19 +07:00
sandeep 6ccc5f8792 matcher update to handle edge cases 2021-07-25 03:05:55 +05:30
sandeep 13e5528c46 duplicate update 2021-07-20 11:40:23 +05:30
Sandeep Singh 6eee57115c
Merge pull request #2083 from projectdiscovery/fixing-xss-matchers 
fixing-xss-matchers
 2021-07-20 00:28:01 +05:30
sandeep 2d6198ba04 Updated payload + matcher 2021-07-19 18:13:09 +05:30
Prince Chaddha aff7f7fa64
Update CVE-2019-19134.yaml 2021-07-19 11:34:59 +05:30
Prince Chaddha 5dce5e078e
Update CVE-2019-16525.yaml 2021-07-19 11:34:07 +05:30
Prince Chaddha 5b1766e10b
Update CVE-2019-16332.yaml 2021-07-19 11:33:40 +05:30
Prince Chaddha bf0aff7579
Update CVE-2019-15713.yaml 2021-07-19 11:32:53 +05:30
sandeep e848640e9d Added CVE-2019-12616 2021-07-16 23:27:01 +05:30
Prince Chaddha 829507fd1e
Update CVE-2019-20085.yaml 2021-07-16 17:58:51 +05:30
Prince Chaddha 379345fc05
Update CVE-2019-20085.yaml 2021-07-16 17:57:49 +05:30
Muhammad Daffa f857247e84
Create CVE-2019-20085.yaml 2021-07-16 19:17:49 +07:00
Prince Chaddha 833306ad86
Merge pull request #2025 from daffainfo/patch-63 
Create CVE-2019-16525.yaml
 2021-07-16 17:44:09 +05:30
Prince Chaddha 9ab9617b95
Update CVE-2019-16525.yaml 2021-07-16 17:42:41 +05:30
Prince Chaddha cbd0d293bd
Merge pull request #2031 from daffainfo/patch-65 
Create CVE-2019-15713.yaml
 2021-07-16 11:02:45 +05:30
Prince Chaddha a08eed7ce8
Update CVE-2019-15713.yaml 2021-07-16 11:00:01 +05:30
Prince Chaddha a78e6caafc
Update CVE-2019-16332.yaml 2021-07-16 10:57:50 +05:30
Muhammad Daffa bf68e5060d
Create CVE-2019-15713.yaml 2021-07-16 00:09:33 +07:00
Muhammad Daffa 28278b45a2
Create CVE-2019-16332.yaml 2021-07-16 00:06:33 +07:00
Muhammad Daffa 8a28dc1935
Create CVE-2019-16525.yaml 2021-07-15 19:30:44 +07:00
Prince Chaddha 22a16b4b17
Update CVE-2019-19134.yaml 2021-07-15 17:26:55 +05:30
Muhammad Daffa f816c58bac
Create CVE-2019-19134.yaml 2021-07-15 18:40:17 +07:00
Prince Chaddha c20a208c4a
Update CVE-2019-9618.yaml 2021-07-15 14:20:42 +05:30
Muhammad Daffa 3fa2bf156a
Create CVE-2019-9618.yaml 2021-07-15 09:48:59 +07:00
sandeep f7259df034 typo update 2021-07-14 15:38:56 +05:30
Prince Chaddha bca05d61d6
Merge pull request #1926 from daffainfo/patch-11 
Create CVE-2019-14470.yaml
 2021-07-11 10:15:11 +05:30
Prince Chaddha 7c19ca873d
Update CVE-2019-14470.yaml 2021-07-11 10:12:41 +05:30
Prince Chaddha 7c0c5033e9
Update CVE-2019-14470.yaml 2021-07-11 10:11:11 +05:30
Prince Chaddha 0bae5e975e
Update CVE-2019-15889.yaml 2021-07-11 10:09:51 +05:30
Muhammad Daffa 009e68c627
Create CVE-2019-15889.yaml 2021-07-11 08:20:03 +07:00
Muhammad Daffa 4889efb117
Create CVE-2019-14470.yaml 2021-07-11 08:06:14 +07:00
sandeep b137eb57d3 More edge cases 
Only looking for DNS interaction is not reliable as few servers make DNS requests for host included in path or query parameter.
 2021-07-04 00:41:57 +05:30
sandeep acebe227a1 Update CVE-2019-13101.yaml 2021-07-04 00:12:01 +05:30
sandeep 9e9954cbab strict matchers 2021-07-04 00:07:30 +05:30
Suman Kar f249af535a
Update CVE-2019-13101.yaml 
iot tag added
 2021-07-03 17:55:11 +05:30
Suman Kar e20298b4d3 D-Link DIR-600M Router - Authentication Bypass 2021-07-03 05:50:40 +05:30
Prince Chaddha 37261f7a2f
Update and rename vulnerabilities/jira/jira-unauthenticated-popular-filters.yaml to cves/2019/CVE-2019-3401.yaml 2021-06-24 16:52:04 +05:30
Prince Chaddha 2539c830ac
Update CVE-2019-7481.yaml 2021-06-22 13:20:06 +05:30
Prince Chaddha c87238c37a Update CVE-2019-7481.yaml 2021-06-22 13:18:51 +05:30
darrenmartyn 80d159c277
Update CVE-2019-7481.yaml 2021-06-19 22:44:05 +01:00
darrenmartyn 7c65c33396
Update CVE-2019-7481.yaml 
maybe yaml lint thing doesn't hate me now
 2021-06-19 22:42:10 +01:00
darrenmartyn 722a2bd60c
Update and rename CVE-2019-4781.yaml to CVE-2019-7481.yaml 2021-06-19 21:39:08 +01:00
darrenmartyn a26c0d9c3a
Create CVE-2019-4781.yaml 
Need some feedback on this, tested it out and it works just fine.
 2021-06-19 21:17:40 +01:00
Prince Chaddha 8df5f982f3 Moved template to cves 2021-06-13 21:01:21 +05:30
sandeep 3de46aa21b misc changes 2021-06-10 00:01:38 +05:30
sandeep ea26842383 Added CVE-2019-2616 2021-06-09 23:56:42 +05:30
Prince Chaddha 83ce809e8d Updated author names 2021-06-09 17:50:56 +05:30
sandeep 799af2e5fb minor update 2021-06-09 01:23:13 +05:30
SaN ThosH aca824b910
Update CVE-2019-2767.yaml 2021-06-08 21:59:59 +05:30
SaN ThosH ff9b9a871c
Update CVE-2019-2767.yaml 2021-06-08 21:53:28 +05:30
SaN ThosH 41784d5261
Update CVE-2019-2767.yaml 2021-06-08 21:52:58 +05:30
SaN ThosH 169d64a3ff
Create CVE-2019-2767.yaml 2021-06-08 21:49:35 +05:30
Noam Rathaus 0d836a40f8 Much better description 2021-05-16 15:50:33 +03:00
Noam Rathaus 14a612623a Some dots make it easier to ready 2021-05-16 15:49:02 +03:00
sandeep d63b9e1cb8 Adding missing tags 2021-05-13 00:54:59 +05:30
sandeep a3c73e6aa3 updated workflow 2021-05-03 15:37:05 +05:30
Dhiyaneshwaran 15c7472891
Update CVE-2019-8446.yaml 2021-05-03 01:32:15 +05:30
Dhiyaneshwaran cf8f9ac094
Update CVE-2019-8446.yaml 2021-05-03 01:23:15 +05:30
Dhiyaneshwaran e7caffd3e7
Create CVE-2019-8446.yaml 2021-05-03 01:20:57 +05:30
sandeep a6b8fd6e67 Adding CVE-2019-13462 2021-05-02 00:24:21 +05:30
sandeep b6c1ab4ac8 Update CVE-2019-17382.yaml 2021-04-26 20:05:45 +05:30
sandeep 73e17259fd Added more payloads 2021-04-26 20:01:51 +05:30
sandeep 564c7635ec In template payload input and fixes 2021-04-24 09:29:34 +05:30
Open Sec d6c0dfa5c5
Update CVE-2019-17382.yaml 
Sometimes dashboards get deleted and asking just for an specific numbre will give a false negative
 2021-04-23 16:15:16 -05:00
Geeknik Labs b75885491f
Create CVE-2019-15859.yaml 2021-04-23 13:38:16 +00:00
Sandeep Singh 8a9c25f21c
Merge pull request #1329 from davidmckennirey/kentico-cms-deser-vuln 
Add Kentico CMS Deserialization RCE (CVE-2019-10068)
 2021-04-23 14:41:21 +05:30
sandeep bfe1b00af3 Update CVE-2019-10068.yaml 2021-04-23 14:38:40 +05:30
sandeep 3608b6c162 Update CVE-2019-10068.yaml 2021-04-23 14:36:58 +05:30
sandeep 28e1900715 minor updates 2021-04-23 14:29:22 +05:30
sandeep 5ce3ebc7f7 Update CVE-2019-10068.yaml 2021-04-22 21:29:09 +05:30
David McKennirey 2c8fca0c1d remove trailing spaces 2021-04-21 23:06:29 -04:00
David McKennirey 1a01c80dd8 Add Kentico CMS Deserialization RCE (CVE-2019-10068) 2021-04-21 22:57:28 -04:00
SaN ThosH d89e613dc6
Update CVE-2019-17558.yaml 2021-04-21 00:27:22 +05:30
Sandeep Singh 866ad44553
Merge pull request #1301 from pikpikcu/patch-150 
Create CVE-2019-17270
 2021-04-18 20:53:47 +05:30
sandeep 64e3e49ea2 template name update 2021-04-18 20:47:43 +05:30
Noam Rathaus 4beb5e8495 Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates 2021-04-18 16:00:42 +03:00
Noam Rathaus d26f311cdf Descriptions and references 2021-04-18 16:00:27 +03:00
Sandeep Singh 0ed9083f12
Merge pull request #1231 from Mad-robot/patch-1 
Update CVE-2019-17558.yaml
 2021-04-17 21:04:15 +05:30
Noam Rathaus ed8ea816eb Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates 2021-04-12 09:35:53 +03:00
Prince Chaddha 8e5c1150a8
Update CVE-2019-18394.yaml 2021-04-10 03:49:09 +05:30
sandeep d4025787ca misc changes 2021-04-08 15:30:03 +05:30
SaN ThosH e6b81affd3
Update CVE-2019-17558.yaml 2021-04-08 15:25:15 +05:30
SaN ThosH aacf7c8cd3
Update CVE-2019-17558.yaml 2021-04-08 15:16:32 +05:30
SaN ThosH c2751f24d3
Update CVE-2019-17558.yaml 2021-04-08 15:14:25 +05:30
sandeep 7bc9df16d7 misc fix 2021-04-07 14:26:16 +05:30
Noam Rathaus 9f5d6c5eaa Spelling 2021-04-06 13:43:41 +03:00
Noam Rathaus 098d3157e5 Relevant reference 2021-04-06 13:27:39 +03:00
Noam Rathaus ac932b6c33 description 2021-04-06 13:25:50 +03:00
Noam Rathaus 2de36ad7b4 description and reference 2021-04-06 13:22:54 +03:00
sandeep 8fdfc64e54 misc tag updates 2021-04-06 12:16:11 +05:30
Noam Rathaus 198e192137 Description 2021-04-01 17:16:07 +03:00
Noam Rathaus 3c8ec933e7 Description 2021-04-01 17:09:29 +03:00
Noam Rathaus 8cecc0f7d0 More description 2021-03-30 15:21:02 +03:00
Noam Rathaus c20d89466a Description and referenes 2021-03-30 15:10:17 +03:00
Noam Rathaus 98fd86e313 description and reference 2021-03-30 15:01:26 +03:00
Noam Rathaus 6be989e58f Description and references 2021-03-30 15:00:27 +03:00
Noam Rathaus 4f7f8a2291 Missing reference 2021-03-30 10:16:57 +03:00
Noam Rathaus 5976870cfd Spelling mistake 2021-03-30 09:51:17 +03:00
Noam Rathaus b0a9be9d08 Description 2021-03-30 09:50:02 +03:00
Noam Rathaus 95899eee43 Missing condition 2021-03-30 09:49:14 +03:00
Noam Rathaus fba16d5f49 Description 2021-03-30 09:27:35 +03:00
sandeep cf99b0a32b Update CVE-2019-9955.yaml 2021-03-26 14:12:05 +05:30
Noam Rathaus e942511845 description and relevant reference 2021-03-26 09:53:07 +03:00
Noam Rathaus 33755631fe description and reference 2021-03-26 09:52:14 +03:00
Noam Rathaus 95afdb43d7 description and reference 2021-03-26 09:49:26 +03:00
Noam Rathaus 957fca9fba Description and reference 2021-03-26 09:47:35 +03:00
Noam Rathaus 68cee6ae86 Another reference 2021-03-26 09:44:13 +03:00
Noam Rathaus 80b4647f7c Reference and description 2021-03-26 09:43:58 +03:00
Noam Rathaus b84a491478 Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates 2021-03-25 12:06:18 +02:00
Noam Rathaus 1107344fab Reference and description 2021-03-25 12:05:45 +02:00
Noam Rathaus 826cfa89e3 Reference and description 2021-03-25 12:02:27 +02:00
Noam Rathaus cd1723f699 Description and references 2021-03-25 12:00:46 +02:00
Mzack9999 351167e91f removing redundant boolean check 2021-03-25 00:28:50 +01:00
Geeknik Labs 4a22b0225b
Update CVE-2019-0230.yaml 2021-03-18 16:10:11 +00:00
Geeknik Labs bb512e5185
Create CVE-2019-0230.yaml 2021-03-18 16:04:40 +00:00
sandeep ad84ecb792 tag improvements 2021-03-18 13:24:36 +05:30
sandeep db18f137e6 linting updates 2021-03-12 12:40:16 +05:30
PD-Team 6be368e308
Merge pull request #1069 from nrathaus/master 
Multiple description/references cleanup
 2021-03-12 01:48:30 +05:30
Noam Rathaus a5bfde8c3a Spelling mistake 2021-03-11 19:57:37 +02:00
Noam Rathaus 756fea3481 Spelling mistake 2021-03-11 19:54:58 +02:00
Noam Rathaus 0d19f8fce5 Missing headers 2021-03-11 19:51:40 +02:00
Noam Rathaus b38427a729 Reference and description 2021-03-11 19:06:39 +02:00
Noam Rathaus 0a1c4057a3 description and references 2021-03-11 19:05:36 +02:00
Noam Rathaus df2da2c76a Add better references 2021-03-11 19:04:32 +02:00
Dwi Siswanto d6645feaca Fix comments linter 2021-03-11 23:09:36 +07:00
sandeep d3ee173ade Adding updated syntax 2021-03-11 19:47:22 +05:30
sandeep ed91c0813e more typos 2021-03-10 19:45:41 +05:30
sandeep 7085d1fd8b Update CVE-2019-8451.yaml 2021-03-10 14:23:44 +05:30
sandeep 46b484f9ad Update CVE-2019-0221.yaml 2021-03-06 11:28:28 +05:30
PikPikcU 5555d64db3
Update CVE-2019-0221.yaml 2021-03-06 02:04:44 +00:00
PikPikcU 3249f7f6ca
📝 CVE-2019-0221 2021-03-05 14:38:39 +00:00
sandeep 04cc9c44fb xss matchers update 2021-03-04 21:32:34 +05:30
sandeep b7aba7f7ac improved matcher 2021-03-04 20:53:55 +05:30
sandeep da0391fd37 Improving matchers 2021-03-04 20:02:49 +05:30
sandeep ff198c3ad9 Update CVE-2019-17538.yaml 2021-03-01 17:30:49 +05:30
sandeep 1c7cd8921e syntax update 2021-03-01 17:26:36 +05:30
pussycat0x e281df8e1f
Add files via upload 
Jnoj Directory Traversal
 2021-03-01 16:59:32 +05:30
aron 0661d57d9d Check if contact form is active 2021-02-24 14:26:43 +01:00
PD-Team 92aa531605
Merge pull request #895 from pikpikcu/patch-72 
Added harbor detection/cve/workflow
 2021-02-19 12:25:52 +05:30
sandeep 5256e08a0e improved matcher 2021-02-19 12:23:34 +05:30
sandeep 5f4a147d49 few changes 2021-02-19 12:13:13 +05:30
PikPikcU c53531cf91
Create CVE-2019-16097.yaml 2021-02-19 13:08:32 +07:00
sandeep f0a402c206 Update CVE-2019-18393.yaml 2021-02-19 11:16:04 +05:30
sandeep adbb891912 Update CVE-2019-18393.yaml 2021-02-19 11:14:48 +05:30
PikPikcU c6a7bc234f
Create CVE-2019-18393.yaml 2021-02-19 07:44:10 +07:00
sandeep 36f3371a37 few changes 2021-02-18 11:09:07 +05:30
PikPikcU be746c27fe
Create CVE-2019-14205.yaml 2021-02-18 08:22:37 +07:00
Ganesh Bagaria a3b3641627
Create CVE-2019-3403.yaml (#873) 2021-02-16 22:25:16 +05:30
sandeep 4a5ef01b48 Fixed an issue with gzip encoding 2021-02-12 18:08:21 +05:30
PikPikcU 4880e80997
Created ZZZCMS 1.6.1 RCE (#820) 2021-02-10 16:39:46 +05:30
PikPikcU 0ae26b5964
Added (CVE-2019-5127) YouPHPTube Encoder RCE (#811) 2021-02-10 16:33:39 +05:30
PD-Team 00d26c0608
Added tags to cves 😎 (#813) 
* Added tags to cves 😎
 2021-02-06 01:14:41 +05:30
PD-Team e998d52673 Added tags to wp templates 2021-02-05 14:57:08 +05:30
PD-Team ac2a0ca82a Update CVE-2019-17506.yaml 2021-02-01 22:32:44 +05:30
PikPikcU a5b2ecedf7
Create CVE-2019-17506.yaml 2021-02-01 00:41:22 +00:00
PD-Team dc24595935 BaseURL updates 2021-01-14 20:11:56 +05:30
team-projectdiscovery 1468d8a52c matcher updates 2021-01-11 12:14:22 +05:30
team-projectdiscovery a52ffe5c4e fixes and updates 2021-01-10 19:45:36 +05:30
team-projectdiscovery 664a6f3b04 more cves 🔥 2021-01-09 20:15:11 +05:30
team-projectdiscovery 9ec41352f6 matcher update 2021-01-05 00:33:42 +05:30
team-projectdiscovery 0cec810029 misc changes 2021-01-02 10:29:06 +05:30
team-projectdiscovery ba58677a74 moving cves to year based structure 
easy for viewing / running templates based on years.
 2021-01-02 09:52:04 +05:30