f4faa84ffb
Create CVE-2020-11798.yaml
2023-08-25 11:38:13 +05:30
12e5dd8345
TemplateMan Update [Fri Aug 25 05:39:18 UTC 2023] 🤖
2023-08-25 05:39:19 +00:00
28442ecfc9
Auto Generated Templates Checksum [Fri Aug 25 05:37:31 UTC 2023] 🤖
2023-08-25 05:37:32 +00:00
1d14f2a048
Auto Generated New Template Addition List [Fri Aug 25 05:37:10 UTC 2023] 🤖
2023-08-25 05:37:11 +00:00
a6c7580952
Merge pull request #8078 from geeknik/main-2
...
Update weak-cipher-suites.yaml
2023-08-25 11:06:53 +05:30
8f268672c9
Auto WordPress Plugins Update [Fri Aug 25 04:02:14 UTC 2023] 🤖
2023-08-25 04:02:14 +00:00
1b6adaac8d
TemplateMan Update [Fri Aug 25 03:57:19 UTC 2023] 🤖
2023-08-25 03:57:20 +00:00
ac0edd8108
Auto Generated Templates Checksum [Fri Aug 25 03:55:26 UTC 2023] 🤖
2023-08-25 03:55:26 +00:00
22daf24bcf
Auto Generated New Template Addition List [Fri Aug 25 03:55:15 UTC 2023] 🤖
2023-08-25 03:55:15 +00:00
26b9028b55
Merge pull request #8072 from projectdiscovery/princechaddha-patch-3
...
Create hikvision-ivms-file-upload-bypass.yaml
2023-08-25 09:24:57 +05:30
e3439d8417
Update weak-cipher-suites.yaml
...
Here are some potential justifications for lowering the severity of the weak cipher suites alert in Nuclei from medium to low:
- The risks associated with weak cipher suites are mainly related to interception of traffic and decryption of sensitive data in transit. This requires a man-in-the-middle position which limits the scale of potential abuse.
- For an external scan, it is difficult to determine the true impact of weak cipher suites without knowing details of the application architecture and data flows. There could be other protections in place that mitigate the risk.
- Weak cipher suites alone do not enable direct remote code execution or access to underlying resources. Additional vulnerabilities would need to be chained to result in system compromise.
- The classification of "weak" cipher suites is also subjective and changes over time. Something considered weak today may still be commonly used and considered acceptable by many organizations.
- The CVSS score ranges from none to low for interception of non-sensitive data in transit. For external scanning, it's uncertain if truly sensitive data is exposed.
- Remediation requires updating server configurations across potentially many hosts. While recommended in the long term, it is not always trivial for organizations to deploy in the short term.
- There are likely higher severity issues that should be prioritized for remediation first, rather than just the acceptable cipher suites.
While weak cipher suites are not advisable, their ease of exploitation is limited in many real-world scenarios. And when performing external testing, it's difficult to determine the true impact. Given these factors, lowering the severity rating seems reasonable compared to other more serious remote bugs. But organizations should still look to phase out weak ciphers in a responsible manner.
2023-08-25 01:11:23 +00:00
94700c0ae0
Auto README Update [Thu Aug 24 18:05:18 UTC 2023] 🤖
2023-08-24 18:05:18 +00:00
74cafea0d2
Auto Generated Templates Stats [Thu Aug 24 18:04:49 UTC 2023] 🤖
2023-08-24 18:04:49 +00:00
d18f899e00
Auto Generated cves.json [Thu Aug 24 17:50:00 UTC 2023] 🤖
2023-08-24 17:50:11 +00:00
6e2701102e
Auto Generated Templates Checksum [Thu Aug 24 17:49:59 UTC 2023] 🤖
2023-08-24 17:50:00 +00:00
fd30717781
Auto Generated New Template Addition List [Thu Aug 24 17:49:52 UTC 2023] 🤖
2023-08-24 17:49:52 +00:00
17f6abec90
Merge pull request #8070 from projectdiscovery/CVE-2023-39026
...
Create CVE-2023-39026.yaml
2023-08-24 23:19:35 +05:30
bcf747cc69
update matchers|info
2023-08-24 23:15:24 +05:30
cf21ef1cb3
Auto Generated Templates Checksum [Thu Aug 24 17:42:27 UTC 2023] 🤖
2023-08-24 17:42:27 +00:00
de3f67aea6
Auto Generated cves.json [Thu Aug 24 17:41:05 UTC 2023] 🤖
2023-08-24 17:41:17 +00:00
2961211203
Auto Generated New Template Addition List [Thu Aug 24 17:40:57 UTC 2023] 🤖
2023-08-24 17:40:57 +00:00
777a520c8e
Create CVE-2023-38035.yaml ( #8075 )
...
* Create CVE-2023-38035.yaml
* syntax fix
* working template
* misc updates
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-08-24 23:10:37 +05:30
c1bfdf2609
Update hikvision-ivms-file-upload-bypass.yaml
2023-08-24 18:25:47 +05:30
b20726b619
updated POC with a valid file upload
2023-08-24 18:08:26 +05:30
3e8c8533b5
minor update
2023-08-24 17:14:56 +05:30
9fc5093a3a
fixed lint
2023-08-24 16:19:35 +05:30
5972c3fb32
Rename http/vulnerabilities/hikvision-ivms-file-upload-rce.yaml to http/vulnerabilities/hikvision/hikvision-ivms-file-upload-rce.yaml
2023-08-24 16:15:57 +05:30
da3a426920
Create hikvision-ivms-file-upload-bypass.yaml
2023-08-24 16:14:56 +05:30
ce7d7f288c
TemplateMan Update [Thu Aug 24 06:15:35 UTC 2023] 🤖
2023-08-24 06:15:36 +00:00
89cb779bed
Auto Generated Templates Checksum [Thu Aug 24 06:14:12 UTC 2023] 🤖
2023-08-24 06:14:13 +00:00
b4ffd7a151
Auto Generated New Template Addition List [Thu Aug 24 06:14:03 UTC 2023] 🤖
2023-08-24 06:14:03 +00:00
c63f2ee0ce
Merge pull request #8060 from projectdiscovery/CVE-2023-39141
...
Create CVE-2023-39141.yaml WebUI-Aria2 - Path traversal
2023-08-24 11:43:42 +05:30
eeb0288c31
dsl -update
2023-08-24 11:37:23 +05:30
ec2d108430
Create CVE-2023-39026.yaml
2023-08-24 11:10:31 +05:30
51bcfd3ee4
Auto WordPress Plugins Update [Thu Aug 24 04:19:42 UTC 2023] 🤖
2023-08-24 04:19:42 +00:00
73068f1b31
fix fp
2023-08-24 09:23:50 +05:30
6609118544
Auto Generated Templates Checksum [Thu Aug 24 03:16:14 UTC 2023] 🤖
2023-08-24 03:16:15 +00:00
89e07b8958
Auto Generated New Template Addition List [Thu Aug 24 03:15:56 UTC 2023] 🤖
2023-08-24 03:15:56 +00:00
1c1b0913c2
Merge pull request #8069 from projectdiscovery/pussycat0x-patch-2
...
matchers condition - update
2023-08-24 08:45:36 +05:30
c78d7e5e7b
Auto Generated Templates Checksum [Thu Aug 24 02:32:19 UTC 2023] 🤖
2023-08-24 02:32:20 +00:00
4dc5b94c24
Auto Generated New Template Addition List [Thu Aug 24 02:32:02 UTC 2023] 🤖
2023-08-24 02:32:02 +00:00
d9d897dfc1
Merge pull request #8062 from lu4nx/metasplot-web
...
Add Metasplot Web Detect
2023-08-24 08:01:44 +05:30
931b9eeff6
matchers condition - update
2023-08-24 07:59:57 +05:30
e1634d5440
Auto Generated cves.json [Thu Aug 24 02:26:41 UTC 2023] 🤖
2023-08-24 02:26:53 +00:00
d662f222de
Auto Generated New Template Addition List [Thu Aug 24 02:26:40 UTC 2023] 🤖
2023-08-24 02:26:40 +00:00
6841680597
Merge pull request #8067 from projectdiscovery/CVE-2019-17662
...
Create CVE-2019-17662.yaml
2023-08-24 07:56:20 +05:30
a5537d7f8e
Update metasploit-panel.yaml
2023-08-24 07:55:19 +05:30
fca4829c6c
Auto Generated Templates Checksum [Thu Aug 24 02:24:37 UTC 2023] 🤖
2023-08-24 02:24:38 +00:00
018970551d
Auto Generated New Template Addition List [Thu Aug 24 02:24:32 UTC 2023] 🤖
2023-08-24 02:24:33 +00:00
d7635c7bc7
Merge pull request #8065 from projectdiscovery/CVE-2022-47615
...
Create CVE-2022-47615.yaml
2023-08-24 07:54:11 +05:30
Ritik Chaddha
GitHub Action
pussycat0x
Dhiyaneshwaran
geeknik
Prince Chaddha