-
Notifications
You must be signed in to change notification settings - Fork 29
Open
Description
Description
Using vulndb in w3af I noticed that there are some missing vulnerabilities which need to be added to the database with low priority
Vulnerability list
- 'Buffer overflow vulnerability'
- 'MX injection vulnerability'
- 'Unsafe preg_replace usage'
- 'ReDoS vulnerability'
- Server side include vulnerability
- Persistent server side include vulnerability
- Basic HTTP credentials
- Path disclosure vulnerability (maybe it's already in the DB?)
- Malware identified
- CSP vulnerability
- Missing X-Content-Type-Options header
- Guessable credentials
Task
For each vulnerability we need to create a new JSON file inside the db directory (that looks like this) and make sure it passes all the tests.