Add new vulnerabilities to database - Githubissues

vulndb / data

User, contributor and developer friendly vulnerability database

Other

130 stars 29 forks source link

Add new vulnerabilities to database #17

Open andresriancho opened 9 years ago

andresriancho commented 9 years ago

Description

Using vulndb in w3af I noticed that there are some missing vulnerabilities which need to be added to the database with low priority

Vulnerability list

[ ] 'Buffer overflow vulnerability'
[ ] 'MX injection vulnerability'
[ ] 'Unsafe preg_replace usage'
[ ] 'ReDoS vulnerability'
[ ] Server side include vulnerability
[ ] Persistent server side include vulnerability
[x] Basic HTTP credentials
[ ] Path disclosure vulnerability (maybe it's already in the DB?)
[ ] Malware identified
[ ] CSP vulnerability
[x] Missing X-Content-Type-Options header
[x] Guessable credentials
Task

For each vulnerability we need to create a new JSON file inside the db directory (that looks like this) and make sure it passes all the tests.

References

andresriancho commented 8 years ago

Thanks to the amazing job from @snoopythesecuritydog we now have three more vulnerabilities in the DB!

https://github.com/vulndb/data/pull/42/files