diff --git a/CHANGELOG.md b/CHANGELOG.md index e063e4e..787f7b5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,20 @@ # Changelog This file keeps track of all notable changes between the different versions of search_vulns. +## v0.5.7 - 2024-07-25 +### Added +- Added equivalent CPE for Ghostscript. +- Added equivalent CPE for OwnCloud. +- Added links to public web instance and blog posts to GitHub README. + +### Changed +- search_vulns logo in web app now uses snake case. + +### Fixed +- Updated test cases. +- Fixed comparison of zero-extended versions, e.g. 21.0 !< 21.0.0 + + ## v0.5.6 - 2024-07-08 ### Fixed - Update test case. diff --git a/README.md b/README.md index a7bc995..672e9a8 100644 --- a/README.md +++ b/README.md @@ -15,9 +15,10 @@ Using the *search_vulns* tool, this local information can be queried, either by ## Quick Links -* [The Surprising Complexity of Finding Known Vulnerabilities](https://herolab.usd.de/the-surprising-complexity-of-finding-known-vulnerabilities/): A blog post detailing the challenges and motivations behind search_vulns. -* [https://search-vulns.usd.de](https://search-vulns.usd.de): To be published soon, a public instance hosted by [usd AG](https://github.com/usdAG). -* To be published: A second blog post detailing how search_vulns works in depth, compares with other tools and solves the challenges discussed in the first blog post. +* Public instance of the web server: [https://search-vulns.com](https://search-vulns.com) +* [The Surprising Complexity of Finding Known Vulnerabilities](https://search-vulns.com/blog-post/1) - A blog post detailing the challenges and motivations behind search_vulns. +* [search_vulns: Simplifying the Surprising Complexity of Finding Known Vulnerabilities](https://search-vulns.com/blog-post/2) - A blog post introducing search_vulns and describing its features. +* [search_vulns: A Deep Dive into its Technologies and Approaches](https://search-vulns.com/blog-post/3) - A blog post detailing how search_vulns works on a technical level, including its novel approaches. ## Installation diff --git a/tests/test_cve_attr_completeness.py b/tests/test_cve_attr_completeness.py index ae917d9..b23e603 100755 --- a/tests/test_cve_attr_completeness.py +++ b/tests/test_cve_attr_completeness.py @@ -28,7 +28,7 @@ def test_search_apache_2425(self): self.maxDiff = None query = 'cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*' result = search_vulns.search_vulns(query=query, add_other_exploit_refs=True, is_good_cpe=True) - expected_attrs = {'CVE-2017-15710': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-3169': {'published': '2017-06-20 01:29:00', 'cvss_ver': '3.0', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2017-7659': {'published': '2017-07-26 21:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-7668': {'published': '2017-06-20 01:29:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-9798': {'published': '2017-09-18 15:29:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2018-1312': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2018-17189': {'published': '2019-01-30 22:29:00', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L', 'cisa_known_exploited': False}, 'CVE-2023-25690': {'published': '2023-03-07 16:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2019-10082': {'published': '2019-09-26 16:15:10', 'cvss_ver': '3.1', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-30556': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2022-22719': {'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2019-10098': {'published': '2019-09-25 17:15:10', 'cvss_ver': '3.1', 'cvss': '6.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2018-1283': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2022-28615': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2019-10092': {'published': '2019-09-26 16:15:10', 'cvss_ver': '3.1', 'cvss': '6.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2021-39275': {'published': '2021-09-16 15:15:07', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2019-9517': {'published': '2019-08-13 21:15:12', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-1999-1237': {'published': '1999-06-06 04:00:00', 'cvss_ver': '2.0', 'cvss': '10.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:C/I:C/A:C', 'cisa_known_exploited': False}, 'CVE-2019-10081': {'published': '2019-08-15 22:15:12', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2007-0450': {'published': '2007-03-16 22:19:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:P/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2021-34798': {'published': '2021-09-16 15:15:07', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-1999-0678': {'published': '1999-01-17 05:00:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:P/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2019-17567': {'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2006-20001': {'published': '2023-01-17 20:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-44224': {'published': '2021-12-20 12:15:07', 'cvss_ver': '3.1', 'cvss': '8.2', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', 'cisa_known_exploited': False}, 'CVE-1999-0289': {'published': '1999-12-12 05:00:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:P/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2021-26690': {'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-3167': {'published': '2017-06-20 01:29:00', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2019-0196': {'published': '2019-06-11 22:29:03', 'cvss_ver': '3.0', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L', 'cisa_known_exploited': False}, 'CVE-2020-11993': {'published': '2020-08-07 16:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2019-0220': {'published': '2019-06-11 21:29:00', 'cvss_ver': '3.0', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2022-37436': {'published': '2023-01-17 20:15:11', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2018-1301': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-9788': {'published': '2017-07-13 16:29:00', 'cvss_ver': '3.0', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-1999-1412': {'published': '1999-06-03 04:00:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:N/I:N/A:P', 'cisa_known_exploited': False}, 'CVE-1999-0236': {'published': '1997-01-01 05:00:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2018-1302': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-31813': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2020-1927': {'published': '2020-04-02 00:15:13', 'cvss_ver': '3.1', 'cvss': '6.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2020-9490': {'published': '2020-08-07 16:15:12', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-23943': {'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2017-7679': {'published': '2017-06-20 01:29:00', 'cvss_ver': '3.0', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2020-35452': {'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '7.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L', 'cisa_known_exploited': False}, 'CVE-2017-15715': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '8.1', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-28614': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2021-33193': {'published': '2021-08-16 08:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2022-36760': {'published': '2023-01-17 20:15:11', 'cvss_ver': '3.1', 'cvss': '9.0', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-28330': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2021-26691': {'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-22720': {'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2018-11763': {'published': '2018-09-25 21:29:00', 'cvss_ver': '3.0', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-40438': {'published': '2021-09-16 15:15:07', 'cvss_ver': '3.1', 'cvss': '9.0', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H', 'cisa_known_exploited': True}, 'CVE-2022-22721': {'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-29404': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2020-13938': {'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '5.5', 'cvss_vec': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-44790': {'published': '2021-12-20 12:15:07', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2020-1934': {'published': '2020-04-01 20:15:15', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2019-0217': {'published': '2019-04-08 21:29:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2018-1333': {'published': '2018-06-18 18:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2018-1303': {'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2018-17199': {'published': '2019-01-30 22:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2019-0211': {'published': '2019-04-08 22:29:00', 'cvss_ver': '3.0', 'cvss': '7.8', 'cvss_vec': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': True}, 'CVE-2022-26377': {'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2007-0086': {'published': '2007-01-05 18:28:00', 'cvss_ver': '2.0', 'cvss': '7.8', 'cvss_vec': 'AV:N/AC:L/Au:N/C:N/I:N/A:C', 'cisa_known_exploited': False}, 'CVE-2023-31122': {'published': '2023-10-23 07:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2023-45802': {'published': '2023-10-23 07:15:11', 'cvss_ver': '3.1', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2024-27316': {'published': '2024-04-04 20:15:08', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}} + expected_attrs = {'CVE-2017-15710': {'id': 'CVE-2017-15710', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-3169': {'id': 'CVE-2017-3169', 'published': '2017-06-20 01:29:00', 'cvss_ver': '3.0', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-28615': {'id': 'CVE-2022-28615', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2019-0196': {'id': 'CVE-2019-0196', 'published': '2019-06-11 22:29:03', 'cvss_ver': '3.0', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L', 'cisa_known_exploited': False}, 'CVE-2019-0220': {'id': 'CVE-2019-0220', 'published': '2019-06-11 21:29:00', 'cvss_ver': '3.0', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2018-17189': {'id': 'CVE-2018-17189', 'published': '2019-01-30 22:29:00', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L', 'cisa_known_exploited': False}, 'CVE-2022-29404': {'id': 'CVE-2022-29404', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2017-7668': {'id': 'CVE-2017-7668', 'published': '2017-06-20 01:29:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2007-0450': {'id': 'CVE-2007-0450', 'published': '2007-03-16 22:19:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:P/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2018-1312': {'id': 'CVE-2018-1312', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2020-1927': {'id': 'CVE-2020-1927', 'published': '2020-04-02 00:15:13', 'cvss_ver': '3.1', 'cvss': '6.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2019-10098': {'id': 'CVE-2019-10098', 'published': '2019-09-25 17:15:10', 'cvss_ver': '3.1', 'cvss': '6.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2017-3167': {'id': 'CVE-2017-3167', 'published': '2017-06-20 01:29:00', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2018-11763': {'id': 'CVE-2018-11763', 'published': '2018-09-25 21:29:00', 'cvss_ver': '3.0', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2023-45802': {'id': 'CVE-2023-45802', 'published': '2023-10-23 07:15:11', 'cvss_ver': '3.1', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2024-27316': {'id': 'CVE-2024-27316', 'published': '2024-04-04 20:15:08', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2018-1301': {'id': 'CVE-2018-1301', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2023-25690': {'id': 'CVE-2023-25690', 'published': '2023-03-07 16:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2017-9798': {'id': 'CVE-2017-9798', 'published': '2017-09-18 15:29:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2019-0211': {'id': 'CVE-2019-0211', 'published': '2019-04-08 22:29:00', 'cvss_ver': '3.1', 'cvss': '7.8', 'cvss_vec': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': True}, 'CVE-2022-28330': {'id': 'CVE-2022-28330', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-1999-0236': {'id': 'CVE-1999-0236', 'published': '1997-01-01 05:00:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2019-10082': {'id': 'CVE-2019-10082', 'published': '2019-09-26 16:15:10', 'cvss_ver': '3.1', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2019-17567': {'id': 'CVE-2019-17567', 'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2020-13938': {'id': 'CVE-2020-13938', 'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '5.5', 'cvss_vec': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-33193': {'id': 'CVE-2021-33193', 'published': '2021-08-16 08:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-1999-0678': {'id': 'CVE-1999-0678', 'published': '1999-01-17 05:00:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:P/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2006-20001': {'id': 'CVE-2006-20001', 'published': '2023-01-17 20:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-28614': {'id': 'CVE-2022-28614', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2019-9517': {'id': 'CVE-2019-9517', 'published': '2019-08-13 21:15:12', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-1999-1237': {'id': 'CVE-1999-1237', 'published': '1999-06-06 04:00:00', 'cvss_ver': '2.0', 'cvss': '10.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:C/I:C/A:C', 'cisa_known_exploited': False}, 'CVE-2018-1303': {'id': 'CVE-2018-1303', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2019-10081': {'id': 'CVE-2019-10081', 'published': '2019-08-15 22:15:12', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2020-11993': {'id': 'CVE-2020-11993', 'published': '2020-08-07 16:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-44224': {'id': 'CVE-2021-44224', 'published': '2021-12-20 12:15:07', 'cvss_ver': '3.1', 'cvss': '8.2', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', 'cisa_known_exploited': False}, 'CVE-2018-1283': {'id': 'CVE-2018-1283', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2018-1302': {'id': 'CVE-2018-1302', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '5.9', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-26377': {'id': 'CVE-2022-26377', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2018-17199': {'id': 'CVE-2018-17199', 'published': '2019-01-30 22:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', 'cisa_known_exploited': False}, 'CVE-2020-1934': {'id': 'CVE-2020-1934', 'published': '2020-04-01 20:15:15', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2022-23943': {'id': 'CVE-2022-23943', 'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2021-26691': {'id': 'CVE-2021-26691', 'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2019-0217': {'id': 'CVE-2019-0217', 'published': '2019-04-08 21:29:00', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2017-7679': {'id': 'CVE-2017-7679', 'published': '2017-06-20 01:29:00', 'cvss_ver': '3.0', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2021-40438': {'id': 'CVE-2021-40438', 'published': '2021-09-16 15:15:07', 'cvss_ver': '3.1', 'cvss': '9.0', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H', 'cisa_known_exploited': True}, 'CVE-2007-0086': {'id': 'CVE-2007-0086', 'published': '2007-01-05 18:28:00', 'cvss_ver': '2.0', 'cvss': '7.8', 'cvss_vec': 'AV:N/AC:L/Au:N/C:N/I:N/A:C', 'cisa_known_exploited': False}, 'CVE-2018-1333': {'id': 'CVE-2018-1333', 'published': '2018-06-18 18:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-30556': {'id': 'CVE-2022-30556', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2019-10092': {'id': 'CVE-2019-10092', 'published': '2019-09-26 16:15:10', 'cvss_ver': '3.1', 'cvss': '6.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2021-39275': {'id': 'CVE-2021-39275', 'published': '2021-09-16 15:15:07', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2020-35452': {'id': 'CVE-2020-35452', 'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '7.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L', 'cisa_known_exploited': False}, 'CVE-2020-9490': {'id': 'CVE-2020-9490', 'published': '2020-08-07 16:15:12', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-22719': {'id': 'CVE-2022-22719', 'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-44790': {'id': 'CVE-2021-44790', 'published': '2021-12-20 12:15:07', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2023-31122': {'id': 'CVE-2023-31122', 'published': '2023-10-23 07:15:11', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-37436': {'id': 'CVE-2022-37436', 'published': '2023-01-17 20:15:11', 'cvss_ver': '3.1', 'cvss': '5.3', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N', 'cisa_known_exploited': False}, 'CVE-2022-36760': {'id': 'CVE-2022-36760', 'published': '2023-01-17 20:15:11', 'cvss_ver': '3.1', 'cvss': '9.0', 'cvss_vec': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2017-7659': {'id': 'CVE-2017-7659', 'published': '2017-07-26 21:29:00', 'cvss_ver': '3.0', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-1999-0289': {'id': 'CVE-1999-0289', 'published': '1999-12-12 05:00:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:P/I:N/A:N', 'cisa_known_exploited': False}, 'CVE-2017-9788': {'id': 'CVE-2017-9788', 'published': '2017-07-13 16:29:00', 'cvss_ver': '3.0', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-1999-1412': {'id': 'CVE-1999-1412', 'published': '1999-06-03 04:00:00', 'cvss_ver': '2.0', 'cvss': '5.0', 'cvss_vec': 'AV:N/AC:L/Au:N/C:N/I:N/A:P', 'cisa_known_exploited': False}, 'CVE-2021-26690': {'id': 'CVE-2021-26690', 'published': '2021-06-10 07:15:07', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2021-34798': {'id': 'CVE-2021-34798', 'published': '2021-09-16 15:15:07', 'cvss_ver': '3.1', 'cvss': '7.5', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', 'cisa_known_exploited': False}, 'CVE-2022-22721': {'id': 'CVE-2022-22721', 'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '9.1', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2017-15715': {'id': 'CVE-2017-15715', 'published': '2018-03-26 15:29:00', 'cvss_ver': '3.0', 'cvss': '8.1', 'cvss_vec': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-22720': {'id': 'CVE-2022-22720', 'published': '2022-03-14 11:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}, 'CVE-2022-31813': {'id': 'CVE-2022-31813', 'published': '2022-06-09 17:15:09', 'cvss_ver': '3.1', 'cvss': '9.8', 'cvss_vec': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', 'cisa_known_exploited': False}} for cve, cve_attrs in result[query]['vulns'].items(): self.assertIn(cve, expected_attrs) diff --git a/tests/test_eol_date.py b/tests/test_eol_date.py index cccf5e5..d3f8d33 100755 --- a/tests/test_eol_date.py +++ b/tests/test_eol_date.py @@ -14,14 +14,14 @@ def test_search_wp_general(self): self.maxDiff = None query = 'cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*' result = search_vulns.search_vulns(query=query, add_other_exploit_refs=False, is_good_cpe=True) - expected_result = {'status': 'N/A', 'latest': '6.6', 'ref': 'https://endoflife.date/wordpress'} + expected_result = {'status': 'N/A', 'latest': '6.6.1', 'ref': 'https://endoflife.date/wordpress'} self.assertEqual(result[query]['version_status'], expected_result) def test_search_wp_572(self): self.maxDiff = None query = 'cpe:2.3:a:wordpress:wordpress:5.7.2:*:*:*:*:*:*:*' result = search_vulns.search_vulns(query=query, add_other_exploit_refs=False, is_good_cpe=True) - expected_result = {'status': 'eol', 'latest': '6.6', 'ref': 'https://endoflife.date/wordpress'} + expected_result = {'status': 'eol', 'latest': '6.6.1', 'ref': 'https://endoflife.date/wordpress'} self.assertEqual(result[query]['version_status'], expected_result) def test_search_jquery_general(self): diff --git a/tests/test_exploit_completeness.py b/tests/test_exploit_completeness.py index d4d1893..d1101a0 100755 --- a/tests/test_exploit_completeness.py +++ b/tests/test_exploit_completeness.py @@ -27,7 +27,7 @@ def test_search_apache_2425(self): self.maxDiff = None query = 'cpe:2.3:a:apache:http_server:2.4.25:*:*:*:*:*:*:*' result = search_vulns.search_vulns(query=query, add_other_exploit_refs=True, is_good_cpe=True) - expected_exploits = ['https://www.exploit-db.com/exploits/42745', 'https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html', 'https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch', 'https://github.com/hannob/optionsbleed', 'https://github.com/brokensound77/OptionsBleed-POC-Scanner', 'https://github.com/l0n3rs/CVE-2017-9798', 'https://github.com/nitrado/CVE-2017-9798', 'https://github.com/pabloec20/optionsbleed', 'https://www.exploit-db.com/exploits/46676', 'http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html', 'https://github.com/ozkanbilge/Apache-Exploit-2019', 'https://www.exploit-db.com/exploits/19244', 'https://github.com/Saksham2002/CVE-2006-20001', 'https://www.exploit-db.com/exploits/20595', 'https://www.exploit-db.com/exploits/47689', 'https://github.com/dja2TaqkGEEfA45/CVE-2021-26691', 'https://github.com/dja2TaqkGEEfA45/CVE-2021-26690', 'https://github.com/dhmosfunk/CVE-2023-25690-POC', 'https://github.com/tbachvarova/linux-apache-fix-mod_rewrite-spaceInURL', 'https://www.exploit-db.com/exploits/29739', 'https://www.exploit-db.com/exploits/19253', 'https://portswigger.net/research/http2', 'http://packetstormsecurity.com/files/160393/Apache-2-HTTP2-Module-Concurrent-Pool-Usage.html', 'https://httpd.apache.org/security/vulnerabilities_24.html', 'https://github.com/whisp1830/CVE-2017-15715', 'https://github.com/BabyTeam1024/CVE-2021-40438', 'https://github.com/Kashkovsky/CVE-2021-40438', 'https://github.com/ericmann/apache-cve-poc', 'https://github.com/gassara-kys/CVE-2021-40438', 'https://github.com/pisut4152/Sigma-Rule-for-CVE-2021-40438-exploitation-attempt', 'https://github.com/sixpacksecurity/CVE-2021-40438', 'https://github.com/xiaojiangxl/CVE-2021-40438', 'https://www.exploit-db.com/exploits/47688', 'https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd', 'https://github.com/motikan2010/CVE-2019-10092_Docker', 'https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679', 'https://github.com/snknritr/CVE-2017-7679-in-python', 'https://www.exploit-db.com/exploits/51193', 'https://github.com/Benasin/CVE-2022-22720', 'https://github.com/nuPacaChi/-CVE-2021-44790', 'https://github.com/thanhlam-attt/CVE-2023-25690', 'https://github.com/sergiovks/CVE-2021-40438-Apache-2.4.48-SSRF-exploit', 'https://github.com/watchtowrlabs/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc', 'https://github.com/Cappricio-Securities/CVE-2021-40438', 'https://github.com/mbadanoiu/CVE-2019-10092', 'https://github.com/aeyesec/CVE-2024-27316_poc', 'https://github.com/lockness-Ko/CVE-2024-27316'] + expected_exploits = ['https://www.exploit-db.com/exploits/42745', 'https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html', 'https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch', 'https://github.com/hannob/optionsbleed', 'https://github.com/brokensound77/OptionsBleed-POC-Scanner', 'https://github.com/l0n3rs/CVE-2017-9798', 'https://github.com/nitrado/CVE-2017-9798', 'https://github.com/pabloec20/optionsbleed', 'https://www.exploit-db.com/exploits/46676', 'http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html', 'https://github.com/ozkanbilge/Apache-Exploit-2019', 'https://www.exploit-db.com/exploits/19244', 'https://github.com/Saksham2002/CVE-2006-20001', 'https://www.exploit-db.com/exploits/20595', 'https://www.exploit-db.com/exploits/47689', 'https://github.com/dja2TaqkGEEfA45/CVE-2021-26691', 'https://github.com/dja2TaqkGEEfA45/CVE-2021-26690', 'https://github.com/dhmosfunk/CVE-2023-25690-POC', 'https://github.com/tbachvarova/linux-apache-fix-mod_rewrite-spaceInURL', 'https://www.exploit-db.com/exploits/29739', 'https://www.exploit-db.com/exploits/19253', 'https://portswigger.net/research/http2', 'http://packetstormsecurity.com/files/160393/Apache-2-HTTP2-Module-Concurrent-Pool-Usage.html', 'https://httpd.apache.org/security/vulnerabilities_24.html', 'https://github.com/whisp1830/CVE-2017-15715', 'https://github.com/BabyTeam1024/CVE-2021-40438', 'https://github.com/Kashkovsky/CVE-2021-40438', 'https://github.com/ericmann/apache-cve-poc', 'https://github.com/gassara-kys/CVE-2021-40438', 'https://github.com/pisut4152/Sigma-Rule-for-CVE-2021-40438-exploitation-attempt', 'https://github.com/sixpacksecurity/CVE-2021-40438', 'https://github.com/xiaojiangxl/CVE-2021-40438', 'https://www.exploit-db.com/exploits/47688', 'https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd', 'https://github.com/motikan2010/CVE-2019-10092_Docker', 'https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679', 'https://github.com/snknritr/CVE-2017-7679-in-python', 'https://www.exploit-db.com/exploits/51193', 'https://github.com/Benasin/CVE-2022-22720', 'https://github.com/nuPacaChi/-CVE-2021-44790', 'https://github.com/thanhlam-attt/CVE-2023-25690', 'https://github.com/sergiovks/CVE-2021-40438-Apache-2.4.48-SSRF-exploit', 'https://github.com/watchtowrlabs/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc', 'https://github.com/Cappricio-Securities/CVE-2021-40438', 'https://github.com/mbadanoiu/CVE-2019-10092', 'https://github.com/aeyesec/CVE-2024-27316_poc', 'https://github.com/lockness-Ko/CVE-2024-27316', 'http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html'] result_exploits = [] for cve in result[query]['vulns']: data = result[query]['vulns'].get(cve) diff --git a/version.txt b/version.txt index ad83b1b..dc2b74e 100644 --- a/version.txt +++ b/version.txt @@ -1 +1 @@ -0.5.6 \ No newline at end of file +0.5.7 \ No newline at end of file