All pull requests

Pull requests

• Add JBoss AS/EAP Admin Console templates (panel + default-login)

  #17664·Tortuginator opened Nov 3, 2026Contributor·2 tasks done·

  ·
  

• adding sonicwall sslvpn config extraction

  #17663·m4lwhere opened Nov 3, 2026·2 tasks done·

  ·
  

• Improve existing template: Add version extractor to bitbucket

  #17662·Tortuginator opened Nov 3, 2026Contributor·2 tasks done·

  ·
  

• Add Prefect Server unauthenticated API exposure template

  #17661·HaroonArshad-53 opened Nov 3, 2026Contributor·

  ·
  

• docs: document template signing and the # digest line in CONTRIBUTING.md

  Done
  #17660·Shaivarth opened Nov 3, 2026Contributor·

  ·
  1

  

• CVE-2026-81648 - CryptoPayment Gateway <= 1.2.2 - Unauthenticated Broken Access Control

  Done
  #17659·DhiyaneshGeek opened Nov 3, 2026Member·1 of 2 tasks·

  ·
  

• Drupal Commerce Core - Anonymous Guest Cart Admin Access Bypass (CVE-2026-118539)

  Done
  #17656·alex700 opened Nov 3, 2026Contributor·2 tasks done·

  ·
  2

  

• Add template for CVE-2026-75650 (StyleSmuggler)

  Done
  #17655·k0pak4 opened Nov 2, 2026Contributor·2 tasks done·

  ·
  

• fix(smb-default-login): suppress guest-mapped servers via canary credential

  #17654·maulanawirawan opened Nov 2, 2026Contributor·4 tasks done·

  ·
  1

  

• fix(http): prevent false positives for CVE-2026-77806

  #17652·Mamaxa2512 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2026-96654 - Plex Media Server < 1.43.3.10861 - Loopback Plugin API Pivot via Unsanitized searchOne identifier (OOB) [KEV]

  Done
  #17651·maulanawirawan opened Nov 2, 2026Contributor·6 tasks done·

  ·
  

• Add 16 default-login templates and CodeMeter/QNAP QTS detection

  #17650·mr-pmillz opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2026-47668 - DbGate <= 7.1.8 Unauthenticated Remote Code Execution

  #17648·Ayham970 opened Nov 2, 2026·

  ·
  

• Updated vscode-mcp-json template: probe .vscode/mcp.json and match the VS Code servers format

  Donegood first issue
  #17647·eeee2345 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2022-23221 - H2 Database Console JDBC URL Pre-Auth RCE

  #17646·Ayham970 opened Nov 2, 2026·2 tasks done·

  ·
  

• fix(appsmith-info-disclosure): stop matching patched Appsmith (>= v1.98)

  Done
  #17645·nanikasi opened Nov 2, 2026·

  ·
  

• Add CVE-2017-7529 - Nginx Range Filter Integer Overflow Cache Leak

  #17644·Ayham970 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2024-28752 - Apache CXF Aegis DataBinding SSRF / Local File Read

  #17643·Ayham970 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2026-37004 - LiteLLM <= 1.82.4 SSTI to RCE

  #17642·Ayham970 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2021-3199 - ONLYOFFICE Document Server < 5.6.3 Path Traversal to Arbitrary File Write

  #17641·Ayham970 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2026-49869 (CISA KEV) cross-reference to Kestra CVE-2026-53576

  #17640·Ayham970 opened Nov 2, 2026·2 tasks done·

  ·
  

• Add CVE-2026-112816 LXD client-chain auth bypass detector

  #17635·alex700 opened Nov 1, 2026Contributor·2 tasks done·

  ·
  

• Add Dashdot server info exposure template

  #17621·HaroonArshad-53 opened Nov 1, 2026Contributor·

  ·
  

• Fix underscore support in Webpack sourcemap filename extraction

  #17613·Sparshagarwal0110 opened Oct 31, 2026·

  ·
  1

  

• Add template: Drupal JSON:API meta.count private file enumeration oracle

  #17608·wakedxy opened Oct 30, 2026Contributor·3 tasks done·

  ·