All pull requests

Pull requests

• unauth-munin: fix title matcher that prevents the template from matching

  Done
  #17357·cham423 opened Oct 1, 2026Contributor·

  ·
  

• CVE-2026-76504 - Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

  #17356·darses opened Sep 30, 2026Contributor·

  ·
  

• fix(CVE-2025-12536): correct cve-id in classification

  Done
  #17355·Shaivarth opened Sep 30, 2026Contributor·

  ·
  

• Add unauthenticated version detection to RabbitMQ Management panel template

  #17354·FLX-0x00 opened Sep 30, 2026Contributor·

  ·
  

• fix(yonyou-nc-ncmessageservlet-rce): fix expr spacing in X-T0KEN-INF0

  Done
  #17353·neoxua opened Sep 30, 2026·

  ·
  1

  

• xff-403-bypass: confirm the bypass with a third no-XFF request to fix false positives

  Done
  #17352·cham423 opened Sep 30, 2026Contributor·

  ·
  

• Add CVE-2026-10818 - WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Upload

  #17350·i-am-paradox opened Sep 30, 2026Contributor·

  ·
  

• Create CVE-2026-63358.yaml

  #17348·moizxsec opened Sep 29, 2026·

  ·
  

• smb-default-login: skip servers that accept any login (fixes #17301)

  #17347·BilalAtique opened Sep 29, 2026·

  ·
  1

  

• Add template for CVE-2026-18110

  #17346·flenz00 opened Sep 29, 2026·

  ·
  

• keycloak-openid-config: fix false positive on non-Keycloak OIDC endpoints

  Done
  #17344·cham423 opened Sep 29, 2026Contributor·

  ·
  1

  

• Add CVE-2010-1428 (Red Hat JBoss unauthenticated Web/JMX console access)

  #17340·ArjunSecurin opened Sep 29, 2026·

  ·
  

• CVE-2026-88771: Citrix NetScaler ADC/Gateway — Pitboss Pre-Auth Log-Poisoning Command Injection Detector

  #17336·Enosonm-dev opened Sep 28, 2026·

  ·
  1

  

• Add SuiteCRM CVE-2026-69137 template

  Done
  #17335·EntroVyx opened Sep 28, 2026Contributor·

  ·
  

• fix(CVE-2024-12849): remove false-negative fingerprint check

  #17334·diedromeo opened Sep 28, 2026Contributor·

  ·
  

• fix: cve-id pointing at a different vulnerability in two templates

  Done
  #17332·CalvinTjoaquinn opened Sep 28, 2026·

  ·
  

• Add CVE-2013-0625 (Adobe ColdFusion Administrator authentication bypass)

  waiting for more info
  #17331·ArjunSecurin opened Sep 28, 2026·

  ·
  1

  

• Add CVE-2010-0738 (JBoss JMX/Web Console verb-tampering auth bypass)

  #17330·ArjunSecurin opened Sep 28, 2026·

  ·
  

• Add RuoYi Detect technology detection configuration

  Done
  #17322·xiangdangloser opened Sep 28, 2026·

  ·
  2

  

• Add CVE-2020-2555 (Oracle Coherence T3 deserialization RCE) — active template

  #17321·ArjunSecurin opened Sep 28, 2026·

  ·
  

• Add CVE-2026-65888 - Balbooa Gridbox Joomla Account Takeover via socialLogin Auth Bypass (CVSS 10.0, KEV)

  #17318·showmemercy19-rgb opened Sep 27, 2026·

  ·
  

• Add CVE-2026-19490 Citrix NetScaler ADC and Gateway Authentication Bypass

  #17315·Nivid42 opened Sep 26, 2026Contributor·

  ·
  

• Add CVE-2026-94127 F5 BIG-IP APM OAuth RCE detection template

  waiting for more info
  #17310·rxerium opened Sep 24, 2026Contributor·

  ·
  2

  

• Harden CVE-2025-29927 against middleware-bypass false positives

  #17286·Tito0015 opened Sep 20, 2026·

  ·
  

• Add CVE-2026-6627 template

  #17282·str4k3r opened Sep 19, 2026Contributor·

  ·