search

Sinderella / epherousa

1 stars 0 forks source link

Multiple CVEs parsed incorrectly in SecurityFocus searcher #50

Closed ngkogkos closed 7 years ago

ngkogkos commented 7 years ago

A CVE is not necessarily 13 chars https://github.com/Sinderella/epherousa/blob/master/epherousa/searchers/SecurityFocus.py#L17

If I search for: "joomla catalog sql injection" there is that exploit at http://www.securityfocus.com/bid/93265.

For some reason in this page they have so many CVEs all the same and it comes back broken. This is because of the _format_cve method. @Sinderella can you try to fix this? Also maybe its worth us checking for duplicates I guess, as it will look bad if we return back 100 same CVEs 💃

Sinderella commented 7 years ago

Will fix when you merge this #46 :laughing:

ngkogkos commented 7 years ago

Additionally, with this search:

python epherousa/main.py "quick and dirty blog local file"

One of the results comes comma delimited 👯