troubadix 25.7.3__py3-none-any.whl → 25.8.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. troubadix/__version__.py +1 -1
  2. troubadix/codespell/codespell.additions +2 -0
  3. troubadix/codespell/codespell.exclude +11 -2
  4. troubadix/plugins/http_links_in_tags.py +3 -0
  5. {troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/METADATA +1 -1
  6. {troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/RECORD +9 -9
  7. {troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/LICENSE +0 -0
  8. {troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/WHEEL +0 -0
  9. {troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/entry_points.txt +0 -0
troubadix/__version__.py CHANGED
@@ -2,4 +2,4 @@
2
2
 
3
3
  # THIS IS AN AUTOGENERATED FILE. DO NOT TOUCH!
4
4
 
5
- __version__ = "25.7.3"
5
+ __version__ = "25.8.0"
troubadix/codespell/codespell.additions CHANGED
@@ -24,3 +24,5 @@ iit->it
24
24
  itt->it
25
25
  CSFR->CSRF
26
26
  XXS->XSS
27
+ reverenced->referenced
28
+ sever->server
troubadix/codespell/codespell.exclude CHANGED
@@ -250,6 +250,7 @@ complete_xml = string (complete_xml, '<oval_system_characteristics xmlns="http:/
250
250
  Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE,
251
251
  "Connection: TE, close\r\n",
252
252
  "Connection: TE,,Keep-Alive\r\n\r\n" );
253
+ ('content="Xenon Boostrap Admin Panel"' >< res || '<body class="cui">' >< res)) {
253
254
  control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI)
254
255
  # Copyright (c) 2008 Tim Brown
255
256
  # Copyright (C) 2008 Tim Brown
@@ -347,6 +348,7 @@ CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities
347
348
  CVE-2020-8492: Fixed a regular expression in urrlib that was prone to
348
349
  CVE-2021-30004: Fixed an issue where forging attacks might have occured
349
350
  * CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
351
+ - CVE-2025-3200: Multiple products from Wiesemann & Theis");
350
352
  dass eine geeignete Windows 8.1 Version, vorzugsweise eine 64-Bit Variante, eingesetzt werden muss.");
351
353
  "DataArchivingService/webcontent/aas",
352
354
  "/DataArchivingService/webcontent/aas/aas_store.jsp");
@@ -437,6 +439,7 @@ Federico Manuel Bento discovered that the Linux kernel did not properly
437
439
  # Fedora Update for tre FEDORA-2016-cd09eab674
438
440
  Festplatten- und Dateiverschluesselung eingesetzt werden. Alternativ SOLLTE 'dm-crypt' in
439
441
  files. If a user were tricked into opening a specially-crafted CAF file, a
442
+ files packed with UPack.
440
443
  files to potentially execute code and it is tracked by the Mitre CVE
441
444
  file_xml = '\t\t<file_item' + status + ' xmlns="http://oval.mitre.org/XMLSchema/' +
442
445
  Fixed a bug where Podman could not run containers usin... [Please see the references for more information on the vulnerabilities]");
@@ -507,7 +510,8 @@ Helin, Andre Bargull, Massimiliano Tomassoli, laf.intel, Massimiliano
507
510
  hello_data += clen + _ciphers;
508
511
  "H", "HSI",
509
512
  - HP Helion Eucalyptus does not correctly check IAM user's permissions for accessing versioned objects and ACLs.
510
- hp_printer['login_success'] = '<?hp te.includeSubPage';
513
+ hp_printer["login_success"] = "<?hp te\.includeSubPage";
514
+ # <?hp te.includeSubPage("/webApps/Wired/ip4.htf") ?>
511
515
  </HSI>
512
516
  <HSI>
513
517
  # <HTML>Acess not granted.</HTML>
@@ -532,6 +536,7 @@ if (!banner || banner !~ "^(RICOH|LANIER|SAVIN|Gestetner|NRG) ")
532
536
  if(!banner = get_kb_item("shttp/" + port + "/banner"))
533
537
  if (banner =~ "Huawei TE[0-9]0") {
534
538
  if( banner =~ "(MD|BU)-" ) {
539
+ if( banner !~ "Server\s*:\s*Boa" || ( "AirLive" >!< banner && banner !~ "(WL|MD|BU|POE)-") )
535
540
  if( ( buf =~ "<title>GLPI - Authentification" || buf =~ "<title>GLPI - Authentication" ) && ( buf =~ "Powered By Indepnet" ||
536
541
  if( "CONEXANT SYSTEMS, INC." >< r &&
537
542
  if( "CONEXANT SYSTEMS, INC" >< r && "ACCESS RUNNER ADSL CONSOLE PORT" >< r && "LOGON PASSWORD" >< r ) {
@@ -591,7 +596,6 @@ if ((res = ispkgvuln(pkg:"app-admin/lsat", unaffected: make_list(), vulnerable:
591
596
  if(res =~ "<span>[Ss]arix&[Tt]rade;</span>" && res =~ "<span>Copyright\s*&copy;\s*[0-9]+-[0-9]+,\s*[Pp][Ee][Ll][Cc][Oo]\s*&middot;"
592
597
  if (res =~ "[Ss]creen[Cc]onnect" &&
593
598
  if( res && "WAN SETTINGS" >< res && "value='3G Interface" >< res && "menu.html" >< res &&
594
- if( "Server: Boa" >!< banner || ( "AirLive" >!< banner && banner !~ "(WL|MD|BU|POE)-") )
595
599
  if( strlen( data ) < 8 || data !~ "^(DELETE|PROPFIND|PUT|GET|HEAD|POST|OPTIONS|REPORT|MKCOL|MOVE|PROPPATCH|COPY|PATCH|CONNECT|TRACE|LOCK|UNLOCK|TRACK|M-POST|CHECKOUT|CHECKIN|UNCHECKOUT|VERSION-CONTROL|BASELINE-CONTROL).*HTTP/(1\.[01]|2)" ) {
596
600
  if(strlen(res) && "nonexistant" >< res && "XJ004CSS" >< res) {
597
601
  if( sysdesc =~ "^(RICOH|LANIER|SAVIN|NRG)" && sysdesc =~ "(RICOH|LANIER|SAVIN|NRG) Network Printer" ) {
@@ -610,6 +614,7 @@ ii libapt-pkg4.12:amd64 0.9.7.5ubuntu5.6 amd64 package managment runtime lib
610
614
  ii libapt-pkg4.12:amd64 0.9.7.7ubuntu6 amd64 package managment runtime library
611
615
  ii libapt-pkg4.12:amd64 0.9.7.9+deb7u7 amd64 package managment runtime library
612
616
  ii libapt-pkg4.12:amd64 0.9.9.1~ubuntu3.3 amd64 package managment runtime library
617
+ ii unminimize 0.2.1 amd64 Un-minimize your minimial images or setup
613
618
  image. This occured because of a lack of proper validation that cached
614
619
  Imaging and Communications in Medicine (DICOM) service accessible from a public WAN (Internet) /
615
620
  Imaging and Communications in Medicine (DICOM) web viewer accessible from a public WAN (Internet)
@@ -728,6 +733,8 @@ mark_dead = script_get_preference( "Mark unrechable Hosts as dead (not scanning)
728
733
  Mark Shepard discovered a double free in the TCP listener cleanup which could result in denial of service by an authenticated user if Dropbear is running with the '-a' option.
729
734
  masked. All LSAT users are advised to unmerge it.
730
735
  "Max-Forwards", "TE" ) ) {
736
+ "/mdm/checkin",
737
+ /mdm/checkin and /lshw endpoints.");
731
738
  "Memorise" >< poshRes)
732
739
  memory disclosure whne processing of a specially crafted mp4 file with
733
740
  # Mesosphere Marathon Web UI Public WAN (Internet) Accessible
@@ -886,6 +893,7 @@ reenable php7-dba support of Berkeley DB (bsc#1108554)");
886
893
  reg_xml = '\t\t<registry_item' + status + ' xmlns="http://oval.mitre.org/' +
887
894
  Reject invalid eliptic curve point coordinates (bsc#1131291)");
888
895
  rejection for EXTRAVERSION = -xfs, but likely little else will be
896
+ remote attackers to execute arbitrary code via a crafted Upack PE file.
889
897
  - Remote Command Execution via WAN and LAN
890
898
  - Remote Unauthenticated Information Disclosure via WAN and LAN
891
899
  Remove all mitre.org links from the script descriptions as
@@ -1546,6 +1554,7 @@ Wan-Teh Chang as the original reporters of CVE-2013-5607.
1546
1554
  web-based interface for Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could
1547
1555
  webcontent/aas/aas_store.jsp.");
1548
1556
  * Webdienst Assoziation
1557
+ "webdynpro/resources/sap.com/caf~eu~gp~mail~cf~ui",
1549
1558
  Wen Guanxing discovered that PCRE incorrectly handled certain regular
1550
1559
  Wen Xu and Po-Ning Tseng discovered that btrfs file system implementation
1551
1560
  Wen Xu and Po-Ning Tseng discovered that the btrfs filesystem
troubadix/plugins/http_links_in_tags.py CHANGED
@@ -169,6 +169,9 @@ class CheckHttpLinksInTags(FilePlugin):
169
169
  "https://username:password@proxy:8080",
170
170
  "sun.net.www.http.KeepAliveCache",
171
171
  "www.foo.com",
172
+ # e.g.:
173
+ # sun.net.www.protocol.jar.JarURLConnection
174
+ "sun.net.www.",
172
175
  ]
173
176
 
174
177
  return any(
{troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.3
2
2
  Name: troubadix
3
- Version: 25.7.3
3
+ Version: 25.8.0
4
4
  Summary: A linting and QA check tool for NASL files
5
5
  License: GPL-3.0-or-later
6
6
  Author: Greenbone
{troubadix-25.7.3.dist-info → troubadix-25.8.0.dist-info}/RECORD RENAMED
@@ -1,8 +1,8 @@
1
1
  troubadix/__init__.py,sha256=K7sIXXDrC7YRb7BvIpdQ6ZfG_QkT0qUH_wAlHROVRfM,716
2
- troubadix/__version__.py,sha256=u9FnDhh-YcJ5SxwN459lv4y5J4xuIuXl2bH00srEsSE,103
2
+ troubadix/__version__.py,sha256=slXo8XXjA99NZ-AEZSj0e-r3IC9HzLqsDlDHW74OJ8E,103
3
3
  troubadix/argparser.py,sha256=-H07Jhqh68_M4Mbjq9qJjTr3MShy_N2pxl2qHA6cfRU,7481
4
- troubadix/codespell/codespell.additions,sha256=E62zoHJavUhcbMoyBqO2rOUe3OqIXikh7uAiGmNs5uw,524
5
- troubadix/codespell/codespell.exclude,sha256=8blBv8KRrKU4KQhneHOPth1tSCYdrEoOCI5kYRfhOEA,147451
4
+ troubadix/codespell/codespell.additions,sha256=SJPlIo8vEKEOTftY6ZBSXzcfyv6y9aFAXl9FdpcMxD0,561
5
+ troubadix/codespell/codespell.exclude,sha256=W1dHEbKuXZbiLMRLhUPIzhCV1ptHqPLuaB6VsJLxn64,147965
6
6
  troubadix/codespell/codespell.ignore,sha256=2CP8u6O2VENcDpt2FfEDNmfa1Eh3D80yeYHT54GM1X4,1512
7
7
  troubadix/helper/__init__.py,sha256=tp2fPLzwGEA_2eiJbvuePiY6rjYSFxx7VUsCV4fSwvw,1110
8
8
  troubadix/helper/date_format.py,sha256=2m8EWZPmTQ1kxgv4i5hrPoPlAA8usjz28aRff352zNU,2488
@@ -31,7 +31,7 @@ troubadix/plugins/encoding.py,sha256=zNzqNpP39TUwOklnc8OJ3OIUelAN_hvnuBYoa3Pz764
31
31
  troubadix/plugins/forking_nasl_functions.py,sha256=IUtCrTK_sGDx79jAPS8lF_aN8zSG2AkzfC6duTMvJOw,6069
32
32
  troubadix/plugins/get_kb_on_services.py,sha256=oFmcjiF7ZD3x5tEbJEoZNn80y1qUzNgeSZNsogSqaZ0,3401
33
33
  troubadix/plugins/grammar.py,sha256=9VPdf4nO-UOE2P8fiAKgh_8GwjGbLztPEixb2AQyeFU,9642
34
- troubadix/plugins/http_links_in_tags.py,sha256=yKT5SgLo__TJKAfudfIHkoMF0g9VtOP4VI77dANj014,7221
34
+ troubadix/plugins/http_links_in_tags.py,sha256=F4fm74M3CbmWOJoCyDdEO-bKQahFsHL6vs4ZynhHEkc,7325
35
35
  troubadix/plugins/if_statement_syntax.py,sha256=5BRJwCCghvZn1AfvYzmk8l9S7aRqbVaLHhSKod_Q9zw,1429
36
36
  troubadix/plugins/illegal_characters.py,sha256=B6q_RU85AxCjLry56Oc-RhMSpnJU8mTrxclRzi1FVFU,4406
37
37
  troubadix/plugins/log_messages.py,sha256=COrnp3bXMG8PRIAD2x5Ka9hk-jI16We9ifXj6JBZI0c,2960
@@ -108,8 +108,8 @@ troubadix/standalone_plugins/no_solution.py,sha256=p_-az9Igl4GH6HnhLLYbYlWIiEP64
108
108
  troubadix/standalone_plugins/util.py,sha256=JTXGmi-_BJouTNe6QzEosLlXUt9jKW-3fz4db05RJJw,696
109
109
  troubadix/standalone_plugins/version_updated.py,sha256=6YHF0OjL5NWszQdsSh7XzlSji1e6Uaqwu_Y6m3R0mvI,4203
110
110
  troubadix/troubadix.py,sha256=5__Jz3bYSrya4aG6RCBWxqnsDepXfwXZ3v0bjCzEFi0,6039
111
- troubadix-25.7.3.dist-info/LICENSE,sha256=OXLcl0T2SZ8Pmy2_dmlvKuetivmyPd5m1q-Gyd-zaYY,35149
112
- troubadix-25.7.3.dist-info/METADATA,sha256=Gom5h4veT9nQrAy-44KjDlz5TunMgOFJpu13dLmzkAo,4462
113
- troubadix-25.7.3.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
114
- troubadix-25.7.3.dist-info/entry_points.txt,sha256=ETEPBi4fKv3o7hzkzceX4838G6g5_5wRdEddYot8N6A,920
115
- troubadix-25.7.3.dist-info/RECORD,,
111
+ troubadix-25.8.0.dist-info/LICENSE,sha256=OXLcl0T2SZ8Pmy2_dmlvKuetivmyPd5m1q-Gyd-zaYY,35149
112
+ troubadix-25.8.0.dist-info/METADATA,sha256=52Gr3cjy7GvoaV-rmo0KTpT5OrbCvRUOWRItkZfsuWo,4462
113
+ troubadix-25.8.0.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
114
+ troubadix-25.8.0.dist-info/entry_points.txt,sha256=ETEPBi4fKv3o7hzkzceX4838G6g5_5wRdEddYot8N6A,920
115
+ troubadix-25.8.0.dist-info/RECORD,,