Skip to content

Instantly share code, notes, and snippets.

@vulnersCom
Created September 30, 2016 13:53
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save vulnersCom/2149fa8afb3e240e6213b30ea3e16f8c to your computer and use it in GitHub Desktop.
Save vulnersCom/2149fa8afb3e240e6213b30ea3e16f8c to your computer and use it in GitHub Desktop.
Vunlers.com useful queries
Your website unpatched vulnerabilities at the Openbugbounty:
[type:openbugbounty AND title:"your-domain-here.com" AND openbugbounty.patchStatus:unpatched](http://bit.ly/2d12FF9)
Software vulnerabilities, Firefox as example:
[affectedSoftware.name:"firefox" OR affectedPackage.packageName:"firefox" OR cpe:*firefox* order:published](http://bit.ly/2cQvJ4e)
Software vulnerabilities, for exact version. Nginx 1.11.0 vulnerabilities:
[affectedSoftware.name:nginx AND affectedSoftware.version:"1.11.0"](http://bit.ly/2dEX8oz)
Software vulnerabilities, wildcard version, CVSS score range. Nginx 1.9* and CVSS score between 7 to 10:
[affectedSoftware.name:nginx AND affectedSoftware.version:1.9* AND cvss.score:[7 TO 10]](http://bit.ly/2dpZBpz)
Package vulnerabilities in some OS. Installed packages vulnerabilities for any PHP in SUSE:
[affectedPackage.packageName:php* AND type:suse order:published](http://bit.ly/2dcjL51)
Search for php4 vulnerabilities in SUSE and CentOS or php4 exploits excluding OpenVAS and Nessus plugins:
[(affectedPackage.packageName:php4* AND (type:suse OR type:centos)) OR (title:php4 AND bulletinFamily:exploit) -type:openvas -type:nessus order:published](http://bit.ly/2dfc7HP)
Looking for affected CVE number in collection. OpenWRT vulnerabilities for CVE-2016-0799:
[type:openwrt AND cvelist:CVE-2016-0799](http://bit.ly/2dsiR20)
Extension vulnerabilities in TYPO3. Vulnerable div2007 extension for TYPO3:
[affectedSoftware.name:div2007 AND type:typo3](http://bit.ly/2dwySJm)
AWS Credentials leakage in Android Google Play repository:
[type:hackapp AWS credentials](http://bit.ly/2dshIr7)
Nmap NSE scripts updates:
[type:nmap order:published](http://bit.ly/2dq127k)
Most expensive public disclosed Yahoo vulnerabilities:
[h1team.handle:yahoo order:bounty](http://bit.ly/2dEWhnQ)
Exploits with "Selinux" in source code sorted by CVSS score:
[type:exploitdb sourceData:SELinux order:cvss.score](http://bit.ly/2dfe473)
Microsoft vulnerabilities with CVSS score in range 6 to 10 in CVE catalog sorted by date:
[(type:cve AND cvss.score:[6 TO 10] AND description:\"Microsoft\") order:published](http://bit.ly/2dcHK7c)
Search CentOS vulnerabilities with title, strating with "Critical" or "Important" and NETWORK in CVSS vector:
[(type:centos AND (title:\"Critical\" OR title:"Important") AND cvss.vector:"AV:NETWORK") order:published](http://bit.ly/2diPCR9)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment