GwanYeong Kim
a722b9fff6
Create clockwatch-enterprise-rce.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-08 13:18:31 +09:00
sandeep
edc0f1a775
Update opensns-rce.yaml
2021-07-07 18:30:48 +05:30
sandeep
9588eadaed
minor updates
2021-07-07 18:30:15 +05:30
GwanYeong Kim
c3cbee2794
Create opensns-rce.yaml
...
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-07 18:49:36 +09:00
Sandeep Singh
f683e0bade
Merge pull request #1837 from gy741/rule-add-v10
...
Create huawei-router-auth-bypass.yaml
2021-07-06 23:33:47 +05:30
sandeep
cc4244d36c
Update huawei-router-auth-bypass.yaml
2021-07-06 23:32:45 +05:30
Prince Chaddha
7c06dfaf70
Create huijietong-cloud-fileread.yaml
2021-07-05 21:59:12 +05:30
Prince Chaddha
f55aef6a1b
Merge pull request #1839 from gy741/rule-add-v11
...
Create netgear-router-auth-bypass.yaml
2021-07-05 21:46:00 +05:30
sandeep
457ce76e34
minor updates
2021-07-04 17:09:45 +05:30
PikPikcU
ecdd86167a
Create lotuscms-rce.yaml
2021-07-04 11:11:19 +00:00
sandeep
d50459eb9b
Added missing matcher
2021-07-04 01:26:41 +05:30
sandeep
afcbe4cfe4
minor updates
2021-07-04 01:22:08 +05:30
Dhiyaneshwaran
127673455a
Update coldfusion-debug-xss.yaml
2021-07-02 20:55:33 +05:30
Dhiyaneshwaran
e259c3dd2f
Update jfrog-unauth-build-exposed.yaml
2021-07-02 20:53:02 +05:30
Dhiyaneshwaran
2787fc01b6
Update jfrog-unauth-build-exposed.yaml
2021-07-02 08:25:40 +05:30
Dhiyaneshwaran
2fa4382ef5
Create jfrog-unauth-build-exposed.yaml
2021-07-02 08:23:42 +05:30
Dhiyaneshwaran
453b09d3ff
Create coldfusion-debug-xss.yaml
2021-07-01 22:31:01 +05:30
GwanYeong Kim
c0ebf56f85
Create netgear-router-auth-bypass.yaml
...
NETGEAR decided to use to check if a page has “.jpg”, “.gif” or “ess_” substrings, trying to match the entire URL. We can therefore access any page on the device, including those that require authentication, by appending a GET variable with the relevant substring (like “?.gif”).
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-01 14:39:10 +09:00
GwanYeong Kim
4d56d47c69
Create huawei-router-auth-bypass.yaml
...
The default password of this router is the last 8 characters of the
device's serial number which exist in the back of the device.
Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-01 09:28:30 +09:00
Sandeep Singh
039a41e790
Merge pull request #1774 from pikpikcu/patch-185
...
Create huawei-hg659-lfi.yaml
2021-06-28 21:46:51 +05:30
sandeep
24a3fab9d3
Added missing condition
2021-06-26 19:35:52 +05:30
Sandeep Singh
e84c784fa2
Merge pull request #1689 from nrathaus/master
...
CVE-2021-28164 and some fixes
2021-06-24 23:58:29 +05:30
PikPikcU
cb18f313fd
Create huawei-hg659-lfi.yaml
2021-06-24 15:41:18 +00:00
Prince Chaddha
bc7e8a80db
Merge pull request #1336 from projectdiscovery/princechaddha-patch-5
...
Create resin-inputfile-fileread.yaml
2021-06-24 02:32:40 +05:30
Prince Chaddha
ed4c5a415d
Merge pull request #1335 from projectdiscovery/princechaddha-patch-4
...
Create resin-viewfile-lfr.yaml
2021-06-24 02:28:47 +05:30
Prince Chaddha
c45ec90d5f
Update resin-inputfile-fileread.yaml
2021-06-24 02:28:18 +05:30
Prince Chaddha
b2114008ad
Merge pull request #1595 from pikpikcu/patch-173
...
Create jeewms-lfi
2021-06-24 02:24:41 +05:30
Prince Chaddha
1d581af4ec
Update jeewms-lfi.yaml
2021-06-22 18:28:52 +05:30
Noam Rathaus
01b77a7ed2
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-17 16:54:18 +03:00
PikPikcU
9f8cae8ab5
Update tamronos-rce.yaml
2021-06-17 01:34:49 +00:00
PikPikcU
90bdede7dd
Create tamronos-rce.yaml
2021-06-17 01:31:59 +00:00
Noam Rathaus
3369c5a4dd
Reference
2021-06-13 11:55:20 +03:00
Noam Rathaus
b5bdac494b
Merge branch 'master' of https://github.com/nrathaus/nuclei-templates
2021-06-13 09:54:52 +03:00
Noam Rathaus
feb42e49b0
Reduce chances of FP
2021-06-13 09:53:47 +03:00
Noam Rathaus
513596d2e0
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-13 09:05:57 +03:00
Prince Chaddha
98e49295b6
Merge pull request #1672 from DhiyaneshGeek/master
...
CKAN DOM Based XSS , php-zerodium-backdoor-rce
2021-06-11 14:16:18 +05:30
Dhiyaneshwaran
771e55eca6
Create php-zerodium-backdoor-rce.yaml
2021-06-10 22:01:26 +05:30
Dhiyaneshwaran
fd70f535dd
Update ckan-dom-based-xss.yaml
2021-06-10 17:27:21 +05:30
Sandeep Singh
a4897080b2
Merge pull request #1668 from pikpikcu/patch-181
...
Create php-timeclock-xss
2021-06-10 14:57:05 +05:30
sandeep
b43c8f2c93
misc update
2021-06-10 14:53:31 +05:30
sandeep
083d32c05f
More validation
2021-06-10 14:37:26 +05:30
sandeep
0ebeff27a6
misc changes
2021-06-10 14:25:20 +05:30
Dhiyaneshwaran
5b2ec54d34
Create ckan-dom-based-xss.yaml
2021-06-10 13:37:33 +05:30
PikPikcU
a4e714718f
Create php-timeclock-xss.yaml
2021-06-10 07:29:19 +00:00
PikPikcU
c80690c829
Create mpsec-isg1000-lfi.yaml
2021-06-10 07:11:07 +00:00
Noam Rathaus
885aeadaa7
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-09 16:07:06 +03:00
Prince Chaddha
83ce809e8d
Updated author names
2021-06-09 17:50:56 +05:30
sandeep
23cb4c4d9f
moving files around
2021-06-09 14:37:40 +05:30
Noam Rathaus
46e4d47d92
Another reference
2021-06-09 09:43:04 +03:00
Noam Rathaus
27db48cb53
Another vector
2021-06-09 09:42:41 +03:00
Noam Rathaus
1e0a542b21
New test
2021-06-09 09:07:03 +03:00
Noam Rathaus
8b0c5eaee3
Spelling
2021-06-06 10:35:09 +03:00
sandeep
5d63b1bb05
Fixing the condition
2021-06-04 21:33:01 +05:30
sandeep
1f6334671c
escape fix
2021-06-04 21:26:59 +05:30
PikPikcU
bc9a760d29
Create interlib-fileread.yaml
2021-06-04 02:54:55 +00:00
sandeep
0f0ff2ee1e
moving files around
2021-06-03 21:54:08 +05:30
Prince Chaddha
3202a0dd65
Merge pull request #1606 from nrathaus/master
...
Description / Spelling
2021-06-02 13:10:50 +05:30
sandeep
2fe2c88872
Moving files around
2021-06-02 12:22:24 +05:30
Noam Rathaus
2d52259f70
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-06-02 09:09:05 +03:00
sandeep
a5ccb5f893
strict matcher
2021-06-01 16:08:41 +05:30
PikPikcU
7f5dfedf55
Create jeewms-lfi.yaml
2021-06-01 09:08:45 +00:00
Sandeep Singh
2685f492ed
Merge pull request #1580 from pikpikcu/patch-167
...
Create ns-asg-file-read
2021-06-01 14:10:09 +05:30
sandeep
d5b9e4c7b6
Update ns-asg-file-read.yaml
2021-06-01 14:09:01 +05:30
Prince Chaddha
31341b547e
Update blue-ocean-excellence-lfi.yaml
2021-05-31 15:44:21 +05:30
PikPikcU
f944191e7a
Create blue-ocean-excellence-lfi.yaml
2021-05-31 09:29:51 +00:00
PikPikcU
65c73dbe34
Create hiboss-rce.yaml
2021-05-31 09:08:16 +00:00
PikPikcU
e56a64402c
Create ns-asg-file-read.yaml
2021-05-31 08:56:01 +00:00
sandeep
4edb345286
Merge branch 'patch-165' of https://github.com/pikpikcu/nuclei-templates into pr/1567
2021-05-31 14:20:30 +05:30
sandeep
2ad903dcf1
misc changes
2021-05-31 14:19:23 +05:30
PikPikcU
76886054ce
Create h3c-imc-rce.yaml
2021-05-31 05:53:21 +00:00
PikPikcU
5f4923ddce
Create hjtcloud-arbitrary-file-read.yaml
2021-05-31 05:38:23 +00:00
Noam Rathaus
81d1180769
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-05-30 09:09:37 +03:00
sandeep
1644eb793a
misc changes
2021-05-28 11:12:36 +05:30
PikPikcU
b94ba82591
Update natshell-rce.yaml
2021-05-28 02:49:17 +07:00
PikPikcU
f1726d3a1f
Create natshell-rce.yaml
2021-05-27 14:59:33 +00:00
Noam Rathaus
b32eac85b1
Give description
2021-05-25 14:35:41 +03:00
sandeep
8676d8c23c
Added Maian Cart 3.8 preauth RCE template
2021-05-25 05:08:52 +05:30
sandeep
d7d86bbd95
More strict matcher
2021-05-20 23:15:01 +05:30
sandeep
e66ce65285
Adding Fanruan related templates
2021-05-20 22:56:55 +05:30
sandeep
f0879103d4
Improved matcher
2021-05-17 22:39:05 +05:30
sandeep
08ee1ad5ee
matcher update
2021-05-17 19:49:24 +05:30
PikPikcU
08001381c4
Create natshell-path-traversal.yaml
2021-05-17 08:14:20 +00:00
PikPikcU
04e1fb0ef8
Create flir-path-traversal.yaml
2021-05-16 04:54:40 +00:00
Prince Chaddha
21c1dc2c70
Merge pull request #1337 from projectdiscovery/princechaddha-patch-7
...
Create resin-cnnvd-200705-315.yaml
2021-05-16 02:33:31 +05:30
sandeep
fc66a9e076
Removing duplicate template
2021-05-11 23:48:36 +05:30
Prince Chaddha
b4b30c95ee
Update oa-v9-uploads-file.yaml
2021-05-10 13:23:08 +05:30
Noam Rathaus
8766b537dd
Add reference
2021-05-10 09:52:26 +03:00
Noam Rathaus
fa7567f68e
Its not really a regex
2021-05-10 09:35:36 +03:00
Noam Rathaus
4c201aa1dd
It is not just a file upload
2021-05-10 09:35:10 +03:00
Noam Rathaus
1e364a6cdb
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-05-10 09:27:13 +03:00
Sandeep Singh
7fde950173
Merge pull request #1327 from projectdiscovery/showdoc-file-upload
...
Adding Showdoc < 2.8.6 File Upload RCE
2021-05-10 01:36:45 +05:30
sandeep
1f8ff83353
tags update
2021-05-10 01:34:11 +05:30
sandeep
ccfb5ca4c4
regex update
2021-05-10 01:33:27 +05:30
Noam Rathaus
18dff7387c
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-05-09 08:32:05 +03:00
sandeep
d950f72ff9
minor update
2021-05-07 14:56:40 +05:30
sandeep
0159c284e7
minor update
2021-05-07 14:53:34 +05:30
Noam Rathaus
253ede65c1
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-05-06 15:16:27 +03:00
Dhiyaneshwaran
8274939810
Create kafdrop-xss.yaml
2021-05-05 23:51:53 +05:30
Dhiyaneshwaran
9944ef191f
Create joomla-lfi-com_fabrik.yaml
2021-05-05 23:48:57 +05:30
Prince Chaddha
e87baf2967
Merge pull request #1346 from projectdiscovery/princechaddha-patch-11
...
Create wuzhicms-sqli.yaml
2021-05-05 23:30:36 +05:30
Prince Chaddha
ae45a6b386
Merge pull request #1344 from projectdiscovery/princechaddha-patch-9
...
Create ueditor-file-upload.yaml
2021-05-05 23:29:11 +05:30
Noam Rathaus
e68777d20a
Alternative reference
2021-05-05 17:08:11 +03:00
Noam Rathaus
7f90af4d32
Reference is dead
2021-05-05 17:07:52 +03:00
Sandeep Singh
0520ad05d3
Merge pull request #1351 from projectdiscovery/princechaddha-patch-16
...
Create ecology-filedownload-directory-traversal.yaml
2021-05-05 17:56:59 +05:30
Sandeep Singh
d1f62765f9
Merge pull request #1409 from DhiyaneshGeek/master
...
Gogs install exposure,Gloo UI Unauthentication
2021-05-05 17:54:37 +05:30
sandeep
ae13e5e44e
minor updates
2021-05-05 17:53:34 +05:30
sandeep
b10918510c
Adding strict matcher
2021-05-05 17:39:31 +05:30
Sandeep Singh
127ac5e37c
Merge pull request #962 from pikpikcu/patch-89
...
add hashicorp-consul-rce
2021-05-05 00:02:57 +05:30
sandeep
819e201ebd
Update concrete-xss.yaml
2021-05-04 13:36:54 +05:30
sandeep
052f1b3b7b
Adding concrete-xss
2021-05-04 13:36:16 +05:30
Dhiyaneshwaran
585b651592
Update gloo-unauth.yaml
2021-05-03 18:23:30 +05:30
Dhiyaneshwaran
a1fc27ca75
Create gloo-unauth.yaml
2021-05-03 18:14:44 +05:30
sandeep
acf5d41ef9
Minor update
2021-05-02 17:51:44 +05:30
sandeep
f9559b1e21
Update landray-oa-fileread.yaml
2021-05-02 13:58:47 +05:30
sandeep
a6df4754d4
Update landray-oa-fileread.yaml
2021-05-02 13:57:33 +05:30
PikPikcU
c5bdf6cbca
Create landray-oa-fileread.yaml
2021-05-02 04:42:37 +00:00
sandeep
cc9d4eddf1
Update rce-via-java-deserialization.yaml
2021-05-01 17:22:03 +05:30
Noam Rathaus
f898e4b539
Correct product name
2021-04-29 09:20:58 +03:00
Noam Rathaus
a7de9915c7
Removed self-reference
2021-04-29 08:58:02 +03:00
Noam Rathaus
91b6b1b175
Make references visible
2021-04-29 08:57:39 +03:00
Noam Rathaus
2860cdfb4a
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2021-04-29 08:38:11 +03:00
sandeep
2920fa9bfb
matcher and payload update
2021-04-28 19:44:28 +05:30
Prince Chaddha
a55db7af44
Merge pull request #1332 from projectdiscovery/princechaddha-patch-2
...
Create WooYun-2015-148227.yaml
2021-04-28 18:51:07 +05:30
Noam Rathaus
ecb436df3e
Those aren't really regexes
2021-04-28 15:07:39 +03:00
Noam Rathaus
9ece07bf9a
Provide reference
2021-04-28 14:00:15 +03:00
Prince Chaddha
8d9d46e00a
Merge pull request #1362 from underfl0w/chamilo-lms-sqli
...
Chamilo 1.11.14 LMS sql injection
2021-04-28 15:55:14 +05:30
Prince Chaddha
722e305878
Update chamilo-lms-sqli.yaml
2021-04-28 15:48:34 +05:30
sandeep
5f5430a7a4
Payload and matcher fix
2021-04-28 14:42:10 +05:30
sandeep
3adf607b6f
Matcher for DNS interaction
2021-04-27 16:24:39 +05:30
Prince Chaddha
eaf70d16ab
Merge pull request #1350 from projectdiscovery/princechaddha-patch-15
...
Create zcms-v3-sqli.yaml
2021-04-27 16:09:32 +05:30
Prince Chaddha
d705648dc4
Merge pull request #1343 from projectdiscovery/princechaddha-patch-8
...
Create spark-webui-unauth.yaml
2021-04-26 21:58:53 +05:30
Prince Chaddha
3079fce648
Update spark-webui-unauth.yaml
2021-04-26 21:57:46 +05:30
Prince Chaddha
f726562445
Update spark-webui-unauth.yaml
2021-04-26 21:56:13 +05:30
Prince Chaddha
487e2300e1
Merge pull request #1331 from projectdiscovery/princechaddha-patch-1
...
Create unauth-spark-api.yaml
2021-04-26 21:52:22 +05:30
Prince Chaddha
5fcba18d1e
Merge pull request #1349 from projectdiscovery/princechaddha-patch-14
...
Create xunchi-file-read.yaml
2021-04-26 21:06:27 +05:30
Prince Chaddha
ac29e9a622
Merge pull request #1348 from projectdiscovery/princechaddha-patch-13
...
Create xiuno-bbs-reinstallation.yaml
2021-04-26 21:05:39 +05:30
Prince Chaddha
4cc83776f3
Merge pull request #1352 from projectdiscovery/princechaddha-patch-17
...
Create ecology-springframework-directory-traversal.yaml
2021-04-26 20:48:30 +05:30
Noam Rathaus
2e1e0e932f
Product name
2021-04-26 09:07:57 +03:00
Noam Rathaus
19a4bbc844
Correct product name, and link to the Gitee
2021-04-26 09:03:24 +03:00
Noam Rathaus
3857469468
Add reference
2021-04-26 09:01:39 +03:00
Noam Rathaus
909a0ce4dd
Product seems to be called ectouch
2021-04-26 08:51:08 +03:00
Noam Rathaus
bb974381b5
add references
2021-04-26 08:48:16 +03:00
Jurjen de Jonge
b9ad93a3cd
Reverted back to old technique
...
The ;INSERT method only seemed to work on my dev enviroment.
2021-04-24 22:15:57 +03:00
Jurjen de Jonge
5f264c9891
Updated chamilo-lms-sqli.yaml
...
Uses SQL injection to insert data into the database, then checks to see
if this data has been added;
2021-04-24 21:41:38 +03:00
Jurjen de Jonge
d4e8720797
Chamilo 1.11.14 LMS sql injection
...
YAML file is now indented correctly
2021-04-24 19:35:29 +03:00
Jurjen de Jonge
2f7746fe3d
Chamilo 1.11.14 LMS sql injection
2021-04-24 19:11:58 +03:00
Prince Chaddha
71e25fa42d
Create ecology-springframework-directory-traversal.yaml
2021-04-23 18:52:08 +05:30
Prince Chaddha
85bc6464cb
Create ecology-filedownload-directory-traversal.yaml
2021-04-23 18:50:11 +05:30
Prince Chaddha
2aa7764e58
Create zcms-v3-sqli.yaml
2021-04-23 18:48:00 +05:30
Prince Chaddha
525475ea2e
Create xunchi-file-read.yaml
2021-04-23 18:45:02 +05:30
Prince Chaddha
3527ffcd5c
Update xiuno-bbs-reinstallation.yaml
2021-04-23 18:41:15 +05:30
Prince Chaddha
bfa6113b45
Create xiuno-bbs-reinstallation.yaml
2021-04-23 18:40:17 +05:30
Prince Chaddha
9341841862
Create wuzhicms-sqli.yaml
2021-04-23 18:26:43 +05:30
Prince Chaddha
bfae33ab72
Create ueditor-file-upload.yaml
2021-04-23 17:45:09 +05:30
Prince Chaddha
fcb93ad108
Create spark-webui-unauth.yaml
2021-04-23 17:37:19 +05:30
sandeep
f7875a24d6
Adding Apache Solr <= 8.8.1 Arbitrary File Read
2021-04-23 15:48:04 +05:30
Prince Chaddha
ed1f462a3c
Create resin-cnnvd-200705-315.yaml
2021-04-22 19:37:30 +05:30
Prince Chaddha
376e8ec590
Create resin-inputfile-fileread.yaml
2021-04-22 19:16:56 +05:30
Prince Chaddha
edbe48cdf7
Update resin-viewfile-lfr.yaml
2021-04-22 19:14:41 +05:30
Prince Chaddha
bafc6d146a
Update resin-viewfile-lfr.yaml
2021-04-22 19:13:46 +05:30
Prince Chaddha
175bd1780d
Create resin-viewfile-lfr.yaml
2021-04-22 14:46:29 +05:30
Prince Chaddha
b9e013caec
Create sangfor-edr-auth-bypass.yaml
2021-04-22 14:37:32 +05:30
Prince Chaddha
7b051a70a9
Create WooYun-2015-148227.yaml
2021-04-22 14:29:47 +05:30
Prince Chaddha
af89aaf731
Update unauth-spark-api.yaml
2021-04-22 14:23:08 +05:30
Prince Chaddha
6c80ff0b68
Update unauth-spark-api.yaml
2021-04-22 13:48:03 +05:30
Prince Chaddha
c89872228c
Update unauth-spark-api.yaml
2021-04-22 13:46:18 +05:30
Prince Chaddha
22ddf02690
Create unauth-spark-api.yaml
2021-04-22 13:45:01 +05:30
sandeep
333c7965ad
Adding Showdoc < 2.8.6 File Upload RCE
2021-04-22 01:04:21 +05:30
Prince Chaddha
d8ccf26cc5
Merge pull request #1222 from projectdiscovery/princechaddha-patch-7
...
Create feifeicms-lfr.yaml
2021-04-21 23:56:37 +05:30
Prince Chaddha
89dd2b02a6
Merge pull request #1210 from projectdiscovery/princechaddha-patch-1
...
Create 74cms-sqli.yaml
2021-04-21 23:54:00 +05:30
Prince Chaddha
8d53d57728
Merge pull request #1243 from projectdiscovery/princechaddha-patch-12
...
Create maccmsv10-backdoor.yaml
2021-04-21 23:49:17 +05:30
Prince Chaddha
41b35fe99b
Merge pull request #1242 from projectdiscovery/princechaddha-patch-11
...
Create myucms-lfr.yaml
2021-04-21 23:48:16 +05:30
Prince Chaddha
63effa3f1f
Merge pull request #1279 from projectdiscovery/princechaddha-patch-16
...
Create nuuo-file-inclusion.yaml
2021-04-21 23:41:50 +05:30
Noam Rathaus
e5e995e909
Usually matchers is under requests and not at top level
2021-04-20 18:40:55 +03:00
Prince Chaddha
3fa6b9fb74
Create nuuo-file-inclusion.yaml
2021-04-14 01:57:44 +05:30
sandeep
9302d0397b
Update eyou-email-rce.yaml
2021-04-14 01:54:06 +05:30
sandeep
19553cf671
matcher improvements
2021-04-14 01:53:24 +05:30
PikPikcU
98af0ce0cc
Create erp-nc-directory-traversal.yaml
2021-04-13 07:18:15 +00:00
PikPikcU
c19e8aa1cc
Create qi-anxin-netkang-next-generation-firewall-rce.yaml
2021-04-13 07:13:07 +00:00
PikPikcU
9583b3bbd5
Create oa-v9-uploads-file.yaml
2021-04-13 07:06:02 +00:00
PikPikcU
52f5496134
Create core-chuangtian-cloud-rce.yaml
2021-04-13 06:53:27 +00:00
PikPikcU
fb3b481ae8
Create eyou-email-rce.yaml
2021-04-13 06:40:20 +00:00
sandeep
d96746d193
minor update
2021-04-11 17:24:54 +05:30
PikPikcU
cdac8b34a6
Create turbocrm-xss.yaml
2021-04-11 00:22:56 +00:00
Prince Chaddha
1df35d4f32
Create maccmsv10-backdoor.yaml
2021-04-10 03:30:22 +05:30
Prince Chaddha
939b8bee6c
Create myucms-lfr.yaml
2021-04-10 03:10:57 +05:30
Prince Chaddha
03c6126f60
Create etouch-v2-sqli.yaml
2021-04-07 22:03:17 +05:30
Prince Chaddha
797098e7fc
Create feifeicms-lfr.yaml
2021-04-07 19:54:35 +05:30
Prince Chaddha
220a6461fb
Create 74cms-sqli.yaml
2021-04-06 23:59:29 +05:30
sandeep
8fdfc64e54
misc tag updates
2021-04-06 12:16:11 +05:30
sandeep
d34ca6773b
misc changes
2021-04-05 23:55:18 +05:30
sandeep
e934241101
Update empirecms-xss.yaml
2021-04-05 22:13:16 +05:30
PikPikcU
d789177b06
Create empirecms-xss.yaml
2021-04-05 08:16:27 +00:00
PD-Team
59574cc701
Revert "Create apache-spark-rce"
2021-03-26 00:16:29 +05:30
sandeep
28bf41830f
Merge branch 'patch-104' of https://github.com/pikpikcu/nuclei-templates into pikpikcu-patch-104
2021-03-25 22:37:34 +05:30
Mzack9999
351167e91f
removing redundant boolean check
2021-03-25 00:28:50 +01:00
PD-Team
1e541d324f
Merge pull request #1116 from pikpikcu/patch-127
...
Create tpshop-directory-traversal.yaml
2021-03-21 21:04:43 +05:30
sandeep
7af81a3ce8
Update tpshop-directory-traversal.yaml
2021-03-21 21:04:33 +05:30
PikPikcU
7674824c98
Create xdcms-sqli.yaml
2021-03-21 10:15:44 +00:00
PikPikcU
ce51bfee06
Create tpshop-directory-traversal.yaml
2021-03-21 02:53:52 +00:00
sandeep
d2115fa8f6
Update hashicorp-consul-rce.yaml
2021-03-18 18:37:43 +05:30
sandeep
4e16407c52
Update hashicorp-consul-rce.yaml
2021-03-18 18:36:13 +05:30
sandeep
3c8432686c
Update viewlinc-crlf-injection.yaml
2021-03-16 14:05:20 +05:30
Geeknik Labs
e951c75c59
Update viewlinc-crlf-injection.yaml
2021-03-15 20:04:37 +00:00
Geeknik Labs
0068d7ae0c
Create viewlinc-crlf-injection.yaml
...
This was discovered whilst participating in a private Hacker0x01 bug bounty program.
2021-03-15 20:00:56 +00:00
PikPikcU
6689aa0a81
Create dedecms-carbuyaction-fileinclude.yaml
2021-03-15 08:40:45 +00:00
PikPikcU
332ccbdb36
Create dedecms-membergroup-sqli.yaml
2021-03-15 08:01:47 +00:00
PD-Team
fb65d9341b
Merge branch 'master' into patch-4
2021-03-15 00:30:30 +05:30
sandeep
ffae74a6a8
Updated to openam-detection
2021-03-15 00:27:59 +05:30
PD-Team
47a7ea85e0
Merge pull request #1066 from r3naissance/master
...
Add teacherease-xss and parentlink-xss to /vulnerabilities/other/
2021-03-14 17:12:05 +05:30
sandeep
e18b34cc64
few updates
2021-03-14 17:07:52 +05:30
Dhiyaneshwaran
ed87cc42a8
Create pmb-local-file-disclosure.yaml
2021-03-12 22:42:45 +05:30
sandeep
a0785510f5
Update apache-flink-unauth-rce.yaml
2021-03-12 12:42:17 +05:30
sandeep
db18f137e6
linting updates
2021-03-12 12:40:16 +05:30
Chapman Schleiss
655308b864
Added reference
2021-03-11 09:50:26 -07:00
sandeep
86faa863f6
Added some reference
2021-03-11 20:33:36 +05:30
Chapman Schleiss
881cedaabc
Adding teacherease-xss
2021-03-10 12:36:44 -07:00
Chapman Schleiss
8a015fe306
Adding parentlink-xss
2021-03-10 12:36:08 -07:00
sandeep
ed91c0813e
more typos
2021-03-10 19:45:41 +05:30
sandeep
04cc9c44fb
xss matchers update
2021-03-04 21:32:34 +05:30
sandeep
e9c9c4822f
misc update
2021-03-04 21:04:06 +05:30
PikPikcU
4e31596426
Fix 🛠️
2021-03-03 22:07:46 +07:00
PikPikcU
8a2f8ca4ee
Fix name 🛠️
2021-03-03 22:03:52 +07:00
PikPikcU
b831644c7e
Update apache-sprak-rce.yaml
2021-03-03 21:49:11 +07:00
PikPikcU
0389429c1f
Create apache-sprak-rce.yaml
2021-03-03 11:02:51 +00:00
sandeep
fdd015042f
Update simple-employee-rce.yaml
2021-03-02 21:42:00 +05:30
PikPikcU
0e78ce0a5b
Create simple-employee-rce.yaml
2021-03-01 11:40:03 +00:00
PikPikcU
b9d3325fc6
Create ruijie-networks-lfi.yaml
2021-03-01 10:21:32 +00:00
sandeep
4c319fc79f
Update ruijie-networks-rce.yaml
2021-03-01 13:37:10 +05:30
PikPikcU
7ec42cf499
Update ruijie-networks-rce.yaml
2021-03-01 06:57:32 +00:00
PikPikcU
c55692e01c
Create ruijie-networks-rce.yaml
2021-03-01 06:56:46 +00:00
PikPikcU
6a4bd45625
Add tags
2021-02-27 00:39:28 +07:00
PikPikcU
481ba6aba1
Create duomicms-sql-injection.yaml
2021-02-26 22:44:31 +07:00
sandeep
e29525ecf7
Update hashicorp-consul-rce.yaml
2021-02-26 17:32:50 +05:30
sandeep
a15fad8cb7
Update hashicorp-consul-rce.yaml
2021-02-26 17:01:59 +05:30
PikPikcU
d926680125
Update hashicorp-consul-rce.yaml
2021-02-26 11:29:22 +00:00
PikPikcU
52f6fab37b
Update hashicorp-consul-rce.yaml
2021-02-26 11:06:28 +00:00
PikPikcU
50f5c91edf
Create hashicorp-consul-rce.yaml
2021-02-26 09:02:50 +00:00
sandeep
1355185b45
improved matcher
2021-02-25 23:04:21 +05:30
PD-Team
237b268e31
Merge pull request #937 from pikpikcu/patch-82
...
Create weiphp-path-traversal
2021-02-25 18:43:18 +05:30
sandeep
1dbd3b082b
matcher update
2021-02-25 18:29:49 +05:30
PikPikcU
277f7c21d6
Delete weiphp-sql-injection.yaml
2021-02-25 12:37:44 +00:00
PikPikcU
bf11f5889f
Update weiphp-sql-injection.yaml
2021-02-25 12:02:35 +00:00
sandeep
609ac0e098
Update rockmongo-xss.yaml
2021-02-25 17:16:33 +05:30
sandeep
3ea4c3a826
Update rockmongo-xss.yaml
2021-02-25 17:15:21 +05:30
PikPikcU
63a71afa62
Create rockmongo-xss.yaml
2021-02-25 11:28:40 +00:00
sandeep
c2982994a4
Update weiphp-sql-injection.yaml
2021-02-25 16:36:57 +05:30
sandeep
30483cf1e5
Update weiphp-path-traversal.yaml
2021-02-25 16:18:18 +05:30
PikPikcU
4a55ac7128
Update weiphp-sql-injection.yaml
2021-02-25 10:02:04 +00:00
PikPikcU
e81b961873
Update weiphp-sql-injection.yaml
2021-02-25 09:51:58 +00:00
PikPikcU
fe995933bc
Create weiphp-sql-injection.yaml
2021-02-25 09:49:18 +00:00
sandeep
48f55d25d0
Update weiphp-path-traversal.yaml
2021-02-25 15:03:56 +05:30
PikPikcU
f0f11568c0
Update weiphp-path-traversal.yaml
2021-02-25 09:07:26 +00:00
PikPikcU
b18c68674c
Create weiphp-path-traversal.yaml
2021-02-25 08:59:17 +00:00
PD-Team
9e9aa20646
Merge pull request #929 from pikpikcu/patch-80
...
zhiyuan-oa session leak
2021-02-24 23:24:28 +05:30
sandeep
a0175f96c4
Update zhiyuan-oa-info-leak.yaml
2021-02-24 23:22:23 +05:30
sandeep
00abdb4732
Update yarn-resourcemanager-rce.yaml
2021-02-24 21:29:13 +05:30
sandeep
99b1ae2d46
Improved matcher
2021-02-24 21:28:48 +05:30
PikPikcU
2f39160e65
Create zhiyuan-oa-info-leak.yaml
2021-02-24 08:07:57 +00:00
PikPikcU
b86a406d26
Create zhiyuan-oa-session-leak.yaml
2021-02-24 08:06:28 +00:00
sandeep
cd2a3a7a77
Update dedecms-openredirect.yaml
2021-02-20 23:12:14 +05:30
PikPikcU
d118e3e8cf
Create dedecms-openredirect.yaml
2021-02-21 00:35:47 +07:00
sandeep
6f74d31e0b
few updates
2021-02-20 22:41:54 +05:30
PikPikcU
6ace5ab376
Create finereport-path-traversal.yaml
2021-02-20 23:36:48 +07:00
sandeep
5ffc1aa211
Update metinfo-lfi.yaml
2021-02-20 19:24:20 +05:30
PikPikcU
6e19a6eb45
Create metinfo-lfi.yaml
2021-02-20 07:25:43 +07:00
sandeep
d77862ef7b
adding tags
2021-02-19 13:51:21 +05:30
PikPikcU
e537b279a0
Create cisco-webui-rce.yaml
2021-02-19 14:39:32 +07:00
sandeep
b538a7f481
Update seacms-rce.yaml
2021-02-18 20:38:50 +05:30
PikPikcU
15bff234ef
Create seacms-rce.yaml
2021-02-18 20:05:35 +07:00
sandeep
b4a9d2ec68
Update cacti-weathermap-file-write.yaml
2021-02-16 02:17:45 +05:30
PikPikcU
ef6b416535
Create cacti-weathermap-file-write.yaml
2021-02-15 04:39:47 +00:00
sandeep
eb50c32a64
Update rails6-xss.yaml
2021-02-15 04:27:45 +05:30
sandeep
58835cfc59
Update oa-tongda-path-traversal.yaml
2021-02-14 20:24:12 +05:30
PikPikcU
9362086705
Create oa-tongda-path-traversal.yaml
2021-02-14 12:22:51 +00:00
sandeep
0e5a07232f
misc changes
2021-02-14 16:29:41 +05:30
PikPikcU
197bf2286e
Create powercreator-cms-rce.yaml
2021-02-14 08:40:45 +00:00
sandeep
768c05a9df
Update rce-shellshock-user-agent.yaml
2021-02-13 10:25:02 +05:30
sandeep
ec7a29957d
Adding tags to vulnerabilities and workflows
2021-02-12 11:23:01 +05:30
Khaled Mohamed
e7c6731d1a
Update
...
Edit after update from Mohamed elbadry @melbadry9
2021-02-11 22:53:19 +02:00
sandeep
5c419acb32
misc updates
2021-02-12 02:03:38 +05:30
PikPikcU
82acc49390
Update and rename thinkcmf-shell-write.yaml to thinkcmf-rce.yaml
2021-02-11 17:49:03 +00:00
PikPikcU
29eda8d1ab
Create thinkcmf-shell-write.yaml
2021-02-11 17:31:25 +00:00
sandeep
e6c31e6512
Update thinkcmf-lfi.yaml
2021-02-11 22:23:14 +05:30
PikPikcU
2b8c738e03
Create thinkcmf-lfi.yaml
2021-02-11 15:46:20 +00:00
PikPikcU
f27418b7ba
Added apache-flink-rce ( #810 )
2021-02-10 20:48:24 +05:30
PD-Team
83fb22a81b
Merge pull request #801 from pikpikcu/patch-42
...
Adding sangfor-edr-rce
2021-02-03 17:30:11 +05:30
PD-Team
3a28f79400
Update chamilo-lms-xss.yaml
2021-02-03 16:58:43 +05:30
PikPikcU
c21acfa7a0
Create sangfor-edr-rce.yaml
2021-02-03 04:40:07 +00:00
Geeknik Labs
26f1e7d857
Create chamilo-lms-xss.yaml
2021-02-01 20:54:21 +00:00
PD-Team
fa732d4565
Merge pull request #787 from pikpikcu/patch-36
...
Create dlink-dir-850l-info-leak
2021-02-01 23:12:23 +05:30
PD-Team
b476243f85
misc changes
2021-02-01 23:11:29 +05:30
PD-Team
de3338ebb7
Update caucho-resin-info-disclosure.yaml
2021-02-01 23:03:11 +05:30
PD-Team
fc3eb4e73e
few updates
2021-02-01 23:02:39 +05:30
PD-Team
c649ff4a85
Added key-cloak xss and admin panel
2021-02-01 22:17:31 +05:30
PikPikcU
3a2a99cd63
Create caucho-resin-information-disclosure.yaml
2021-02-01 15:43:29 +00:00
PD-Team
6101f8e537
misc update
2021-01-31 12:54:53 +05:30
PikPikcU
ed4b717d65
Create wooyun-path-traversal.yaml
2021-01-30 21:37:05 +00:00
PD-Team
f6ccec48ed
Update CNVD-2020-62422.yaml
2021-01-30 18:33:26 +05:30
PikPikcU
64209dca7d
Create CNVD-2020-62422.yaml
2021-01-30 10:45:17 +00:00
PD-Team
a887ebe289
few updates
2021-01-26 20:01:01 +05:30
PR3R00T
7f1abf1e4b
Update sonicwall-sslvpn-shellshock.yml
2021-01-26 10:45:15 +00:00
PR3R00T
1712d10086
Update sonicwall-sslvpn-shellshock.yml
2021-01-26 10:44:17 +00:00
PR3R00T
4782898579
Update sonicwall-sslvpn-shellshock.yml
2021-01-26 10:40:48 +00:00
PR3R00T
f4529d02c5
Update sonicwall-sslvpn-shellshock.yml
2021-01-26 10:37:18 +00:00
PR3R00T
abe3f04402
Update sonicwall-sslvpn-shellshock.yml
2021-01-26 10:34:17 +00:00
PR3R00T
45d26b875e
New Sonicwall 0day Exploit test
2021-01-26 10:20:46 +00:00
PD-Team
c762044d29
updating incorrect file permissions
2021-01-21 23:28:32 +05:30
Khaled Mohamed
5c2eabbebc
Create openam-ldap-injection.yaml
...
reference: https://blog.cybercastle.io/ldap-injection-in-openam/
The vulnerability was found in the password reset feature that OpenAM provides. When a user tries to reset his password, he is asked to enter his username then the backend validates whether the user exists or not through an LDAP query before the password reset token is sent to the user’s email.
2021-01-13 23:36:19 +02:00
team-projectdiscovery
106da77fc3
Preparing for request clustering
2021-01-13 13:01:46 +05:30
team-projectdiscovery
c62dfd2b53
adding few from masters
2021-01-11 12:28:56 +05:30
team-projectdiscovery
b80ca7732d
linting errors
2021-01-11 03:31:24 +05:30
team-projectdiscovery
a52ffe5c4e
fixes and updates
2021-01-10 19:45:36 +05:30
team-projectdiscovery
a90d047991
Massive template checks addition 🎉 🎉
2021-01-10 18:41:25 +05:30
team-projectdiscovery
187e4a5feb
moving more files around
2021-01-09 18:32:04 +05:30