4b93be2efe
Create CVE-2018-3167.yaml
2021-02-03 17:54:35 +00:00
c85d4988bc
Merge pull request #803 from pikpikcu/patch-44
...
Add CVE-2021-25646
2021-02-03 21:44:28 +05:30
b33a15f3e2
Update CVE-2021-25646.yaml
2021-02-03 21:42:03 +05:30
8f6b091992
Merge pull request #796 from pikpikcu/patch-41
...
(CVE-2020-11710) Kong Admin Rest API Unauth
2021-02-03 17:24:29 +05:30
6f0005dd87
Update CVE-2020-11710.yaml
2021-02-03 17:23:16 +05:30
a7f38537bd
Update CVE-2020-35476.yaml
2021-02-03 16:49:03 +05:30
429ee4645e
Adding more validations
2021-02-03 15:27:16 +05:30
85db9df19d
CVE-2021-25646
2021-02-03 09:24:49 +00:00
7a21babcd4
Added template CVE-2017-10271 for Weblogic. Added Weblogic workflow.
2021-02-02 21:48:46 -03:00
ee475e9775
Merge branch 'master' into fix-template-typo
2021-02-02 12:58:20 -08:00
83ddab207f
Fixed typo in CVE-2020-12116 template
2021-02-02 12:38:35 -08:00
7b30e2cbdf
CVE-2020-11710
2021-02-02 14:48:20 +00:00
947a045d9c
Update CVE-2018-14574.yaml
2021-02-02 19:12:49 +05:30
311a1a4595
Merge pull request #792 from pikpikcu/patch-39
...
Added (CVE-2018-14574) Django Open Redirect
2021-02-01 23:04:23 +05:30
ac2a0ca82a
Update CVE-2019-17506.yaml
2021-02-01 22:32:44 +05:30
761b931fda
Create CVE-2018-14574.yaml
2021-02-01 13:26:05 +00:00
a5b2ecedf7
Create CVE-2019-17506.yaml
2021-02-01 00:41:22 +00:00
1e7f79065a
Ading CVE-2020-35476 🔥
2021-01-31 23:05:32 +05:30
55507dfdbb
Update CVE-2020-24579.yaml
2021-01-31 15:58:15 +05:30
cb9f3bd024
Create CVE-2020-24579.yaml
2021-01-30 17:41:47 +00:00
56f508af7e
Merge pull request #779 from pikpikcu/patch-31
...
added CVE-2020-27986
2021-01-30 19:24:19 +05:30
efc31d6397
matcher update
2021-01-30 19:22:02 +05:30
aa7420713b
Create CVE-2021-3019.yaml
2021-01-30 12:22:35 +00:00
262ff4a266
Update CVE-2020-27986.yaml
2021-01-30 10:18:46 +00:00
6451399e11
Create CVE-2020-27986.yaml
2021-01-30 09:51:50 +00:00
7a4f0b26a9
Merge pull request #775 from pikpikcu/patch-27
...
Added CVE-2020-13937 Apache kylin
2021-01-30 11:40:07 +05:30
8bd790f98d
Update CVE-2020-13937.yaml
2021-01-30 11:39:17 +05:30
1e78e2d130
Update CVE-2020-13937.yaml
2021-01-30 11:27:56 +05:30
08119c0df6
Merge pull request #777 from pikpikcu/patch-29
...
Add (CVE-2018-8033) Apache OFBiz XXE
2021-01-30 11:20:37 +05:30
3be5354a7d
Delete CVE-2020-10199.yaml
2021-01-30 10:18:01 +05:30
2c7a7a8b4d
Create CVE-2018-8033.yaml
2021-01-30 03:58:20 +00:00
fb97d100b8
Create CVE-2020-13937.yaml
2021-01-30 00:28:31 +00:00
064f084dee
misc changes
2021-01-29 23:53:50 +05:30
544382d143
Merge pull request #767 from pudsec/master
...
Added CVE-2021-22873
2021-01-29 23:41:48 +05:30
865c778d4b
few updates
2021-01-29 23:35:27 +05:30
2ff5e8ca42
Removing CVE-2020-10204
...
Reference:- https://github.com/projectdiscovery/nuclei-templates/pull/212#issuecomment-655051520
2021-01-29 23:15:54 +05:30
81891e9cbd
file name update
2021-01-29 00:23:43 +05:30
ee82f8364e
Create CVE-2020-8515
2021-01-28 15:30:20 +00:00
2c217760db
Update CVE-2020-17530.yaml
2021-01-27 19:07:23 +00:00
72c8d0e2ef
Update CVE-2020-17530.yaml
2021-01-27 19:03:03 +00:00
ad23717e7c
Create CVE-2020-17530.yaml
2021-01-27 18:47:58 +00:00
5e7ae851f1
Added CVE-2021-22873
2021-01-24 19:37:25 +08:00
8d647ffbad
Update CVE-2020-5410.yaml
2021-01-14 20:21:36 +05:30
dc24595935
BaseURL updates
2021-01-14 20:11:56 +05:30
b528ce663c
Introduce a new risky-cves root folder
...
The template for CVE-2020-16139 lived in `cves/`
and was not ignored by default in .nuclei-ignore
for a considurable time because of directory
restructuring. The risky-cves root folder is
introduced to make this mistake less likely to
happen in the future.
2021-01-13 12:53:29 +01:00
106da77fc3
Preparing for request clustering
2021-01-13 13:01:46 +05:30
d8fc0079d9
Adding CVE-2020-9376
2021-01-12 21:45:12 +05:30
1468d8a52c
matcher updates
2021-01-11 12:14:22 +05:30
b5dd30abf5
fixes
2021-01-11 04:09:54 +05:30
a52ffe5c4e
fixes and updates
2021-01-10 19:45:36 +05:30
664a6f3b04
more cves 🔥
2021-01-09 20:15:11 +05:30
eaaf56e9da
workflow updates
2021-01-09 18:58:57 +05:30
87ec61f0de
Update CVE-2020-17518.yaml
2021-01-08 00:19:39 +05:30
32143aa738
Create CVE-2020-17518.yaml
2021-01-06 23:08:45 +05:30
dfd308612b
adding CVE-2020-17519
2021-01-06 12:38:41 +05:30
9ec41352f6
matcher update
2021-01-05 00:33:42 +05:30
4f2a99345c
cve id updates
2021-01-02 10:32:50 +05:30
82b5a7f57b
misc changes
2021-01-02 10:30:39 +05:30
0cec810029
misc changes
2021-01-02 10:29:06 +05:30
6cc3f88a5d
misc changes
2021-01-02 10:26:15 +05:30
ba58677a74
moving cves to year based structure
...
easy for viewing / running templates based on years.
2021-01-02 09:52:04 +05:30
e7677fcc81
Update CVE-2020-10148.yaml
2021-01-01 17:03:22 +05:30
c0609a6dd9
misc changes
2021-01-01 16:41:05 +05:30
7c0bfcd167
Update CVE-2020-10148.yaml
2021-01-01 16:10:35 +05:30
9ccdc41c6a
updating matchers and path
2021-01-01 16:08:09 +05:30
dfd822bfe2
✏️ Replace reference
2020-12-31 16:12:13 +07:00
7bc5bf03be
🔨 Splitting matcher parts
2020-12-31 15:51:24 +07:00
87f2961ed0
🔨 Simplify matchers & add more references
2020-12-31 15:40:10 +07:00
4b0c979208
🔥 Add CVE-2020-10148
2020-12-29 14:32:08 +07:00
6c575732f4
Fixed small typing error
...
Changed temaplte to template
2020-12-25 14:44:40 -03:00
a5e062992d
Update CVE-2008-2398.yaml
2020-12-25 20:34:57 +05:30
eded3a5bc5
Update CVE-2008-2398.yaml
2020-12-25 20:13:47 +05:30
6bc5af5ce2
updating rules
2020-12-25 15:26:00 +05:30
e5234dbcc6
Add CVE-2019-11869
...
XSS in Yuzo Related Posts plugin before 5.12.94
2020-12-25 13:51:48 +05:30
7a1c7f63b7
Update CVE-2019-20141.yaml
2020-12-23 19:08:42 +05:30
441c1d2c40
updated rails6-xss
2020-12-23 14:54:03 +05:30
365098fd7b
Update CVE-2020-8185.yaml
2020-12-23 08:03:49 +05:30
93154ff6ae
Formatted YAML
2020-12-23 04:03:16 +05:30
61beebde41
Add Rails 6 XSS
2020-12-23 03:55:41 +05:30
077fda9228
Update CVE-2008-2398.yaml
2020-12-16 11:06:39 +05:30
8c9ce49b2d
cve-2008-2398 added
2020-12-16 01:20:04 +05:30
00ef32a392
Reintroduce CVE-2019-15858.yaml check
...
Old version had a lot of FP as it did not check if the returned page was
acutally the correct readme. So I added a check for the name of the
plugin and another one to ensure there is a changelog. This shoud remove
almost all false positives.
2020-12-14 20:53:39 -05:00
d0df82d928
Adding content type checks for XSS templates
2020-12-14 00:54:23 +05:30
f5a5a0883d
Merge pull request #675 from geeknik/patch-27
...
Delete CVE-2019-11043.yaml
2020-12-14 00:42:16 +05:30
5e844c925f
Delete CVE-2019-11043.yaml
...
This is the incorrect way to test for this particular bug. The person who pointed this out has no desire to open a pull request. So we nuke this file.
2020-12-12 19:45:59 +00:00
044bf5d19b
🔥 Add CVE-2020-11738
2020-12-12 12:03:34 +07:00
d383687b6a
🔥 Add CVE-2020-7318
2020-12-09 15:54:40 +07:00
33c36b045e
Merge pull request #667 from dwisiswant0/add/CVE-2020-4463
...
Add CVE-2020-4463
2020-12-07 20:31:05 +05:30
dd077a0300
Adding small note
2020-12-07 20:30:11 +05:30
ad01bb0633
Temporarily removing due to f/p
2020-12-07 20:18:03 +05:30
676b5d23ef
🔥 Add CVE-2020-4463
2020-12-07 14:59:25 +07:00
e22932c1fa
Improving matchers
2020-12-06 15:12:32 +05:30
04d566eea5
misc changes
2020-12-06 15:02:10 +05:30
b7102ea11b
Update CVE-2019-11581.yaml
2020-12-05 17:21:28 +08:00
bf3e0f501a
Update CVE-2019-11581.yaml
2020-12-05 17:17:48 +08:00
b19bcfacf8
Update CVE-2019-11581.yaml
...
Fix syntax error
2020-12-05 17:00:05 +08:00
d3a77c422d
Update and rename cve-2019-11581.yaml to CVE-2019-11581.yaml
2020-12-05 16:53:14 +08:00
3a7130030e
cve-2019-11581
...
Jira template injection
2020-12-05 16:51:54 +08:00
950d3e4f24
Create CVE-2019-15858.yaml
2020-12-02 10:55:57 +05:30
2ef8cb5c8f
temporary remove
2020-12-02 10:47:07 +05:30
6b5734f25d
Merge pull request #630 from Patralos/master
...
cve-2019-15858 reversed check
2020-12-02 10:22:45 +05:30
06b94ebae3
🔥 Add CVE-2020-23972
2020-12-01 16:25:33 +07:00
7d0d8bdb99
Update CVE-2019-11043.yaml
2020-11-29 17:38:24 +05:30
0bc9e92da6
Update CVE-2019-11043.yaml
2020-11-28 19:14:21 +00:00
231974676e
Merge pull request #650 from projectdiscovery/bugfix-cve-2019-12725
...
fixing unmarshal error
2020-11-27 01:19:50 +05:30
519ddb4ce5
reverting the change
2020-11-27 01:19:35 +05:30
1b203b350b
Update CVE-2019-12725.yaml
2020-11-27 01:16:49 +05:30
f5e5515a35
fixing unmarshal error
2020-11-26 20:36:28 +01:00
0fae570c4c
Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates
2020-11-26 20:59:30 +05:30
a1732cc1a3
Removing cve-2020-14815
...
This will be added back with support of https://github.com/projectdiscovery/nuclei/issues/295
2020-11-26 20:59:10 +05:30
3d7e839a99
Update CVE-2019-12725.yaml
2020-11-26 14:42:15 +05:30
f9301c5808
🔥 Add CVE-2019-12725
2020-11-26 11:24:02 +07:00
6c4fcfc602
Adding marker to payload
2020-11-26 02:02:20 +05:30
e39ffdf513
🔨 Fix false-positive for CVE-2013-2251
2020-11-25 07:26:52 +07:00
6f3b2cdd0c
adding more info and matchers
2020-11-25 01:30:01 +05:30
b81c8ea57d
🔥 Add CVE-2018-13380
2020-11-24 21:30:18 +07:00
05796b0692
🔥 Rename cve-* files to CVEs
2020-11-22 05:49:16 +07:00
971f016178
few updates
2020-11-21 20:39:12 +05:30
bf5e619803
Create CVE-2019-6340.yaml
2020-11-21 13:07:33 +05:30
beb578cdf0
Marker updates to payloads
...
Adding § marker to variable names to avoid any confusion with real data and variable name, supported from nuclei v2.2.0
2020-11-21 12:25:49 +05:30
f35eec7ba1
remove empty lines
2020-11-20 10:33:26 +01:00
becd37a635
cve-2019-15858 reversed check
...
2.2.5 is the fixed version and should therefore be absent.
2020-11-20 10:28:29 +01:00
1ec8040a8d
Merge pull request #624 from dwisiswant0/add/CVE-2020-13942
...
Add CVE-2020-13942
2020-11-19 00:42:55 +05:30
05f41079f4
🔥 Add CVE-2020-13942
2020-11-19 00:47:19 +07:00
63cfa344bd
🔥 Add CVE-2020-16846
2020-11-19 00:21:07 +07:00
071e3b25c9
few updates
2020-11-17 16:27:15 +05:30
0202889780
cve-2017-12637.yaml tab fixed
2020-11-17 11:18:19 +01:00
f5e1d23545
cve-2017-12637.yaml added
2020-11-17 11:14:41 +01:00
d6198665e7
🔥 Add CVE-2020-8209
...
References:
- https://swarm.ptsecurity.com/path-traversal-on-citrix-xenmobile-server/
2020-11-16 21:49:51 +07:00
b1965155f7
Update CVE-2020-14815.yaml
2020-11-14 15:37:15 +05:30
a710c24d4d
Update CVE-2020-14815.yaml
2020-11-14 15:35:06 +05:30
a273c87c2e
Create CVE-2020-14815.yaml
2020-11-13 01:25:48 +05:30
3cf5167077
Update CVE-2019-20141.yaml
2020-11-12 14:30:01 +05:30
c4349a33cf
fixing possible false positive
2020-11-12 13:55:56 +05:30
4f746684c8
Encoding updates
2020-11-10 19:43:51 +05:30
29d421549a
Search for "provider":"ldap" to complete the match on the cve
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-11-07 12:37:29 +01:00
e9b57b3e9a
Add cve-2020-26214 detection
...
Signed-off-by: Casper Guldbech Nielsen <whopsec@protonmail.com>
2020-11-07 11:47:02 +01:00
cd90698cb5
Adding cve-2019-3402
2020-11-06 15:58:11 +05:30
b175c2117c
🔥 Update CVE-2020-14882 payload & with positive matchers
2020-11-02 14:23:12 +07:00
73c94b174c
moved to another branch for the fix.
2020-11-01 12:53:33 +05:30
8503dd1471
fixing mistake
2020-10-30 11:01:43 +05:30
baaba9036e
🔥 Add CVE-2020-14882
2020-10-29 19:58:49 +07:00
0c3b87f943
Merge pull request #595 from projectdiscovery/z-xxe
...
adding cve-2019-9670
2020-10-29 16:24:59 +05:30
0c63ebfd8f
adding cve-2019-9670
2020-10-29 16:23:46 +05:30
ca1c3e7f72
Update CVE-2020-14864.yaml
2020-10-29 15:43:50 +05:30
54f73f80e1
add template for CVE-2020-14864
2020-10-29 10:54:06 +01:00
3b1f0bf6f9
Create CVE-2020-9344.yaml
2020-10-23 11:59:51 +05:30
c912513e40
Merge pull request #575 from dwisiswant0/fix/cve-2020-7961
...
Update CVE-2020-7961
2020-10-16 11:34:23 +05:30
d9f53727c9
✏️ Escaping dot in extractors
2020-10-16 02:59:46 +07:00
b69d65fe7b
🔨 Update matchers using regexes
2020-10-16 02:58:54 +07:00
Geeknik Labs
PD-Team
PikPikcU
drset
CS-Student118
CS-Student118
pudsec
Michael Henriksen
Dwi Siswanto
dsm
Ganesh Bagaria
rootxharsh
shubham chaskar
Philippe Pépos Petitclerc
PD-Team
ree4pwn
Mzack9999
shelld3v
SaN ThosH
Patralos
Sandor Toth
mohammedshine
Casper Guldbech Nielsen
palaziv