WordPress plugin version check, Nuclei translations, Nuclei blocklist…

…ing (#1423)
CERT-Polska · Dec 2, 2024 · 4c2f88a · 4c2f88a
1 parent e6d7108
commit 4c2f88a
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/artemis/config.py b/artemis/config.py
@@ -422,6 +422,7 @@ class Nuclei:
                         "http/exposed-panels/pulse-secure-version.yaml",
                         "http/exposed-panels/cisco/cisco-anyconnect-vpn.yaml",
                         "http/exposed-panels/openvpn-connect.yaml",
+                        "http/exposed-panels/ivanti-csa-panel.yaml",
                         "http/exposed-panels/ivanti-connect-secure-panel.yaml",
                         "http/exposed-panels/softether-vpn-panel.yaml",
                         "http/exposed-panels/cas-login.yaml",
@@ -531,6 +532,8 @@ class Nuclei:
                         "http/fuzzing/xff-403-bypass.yaml",
                         # Not that severe to spam people
                         "javascript/cves/2023/CVE-2023-48795.yaml",
+                        # We already check for Gitlab
+                        "http/exposed-panels/ghe-encrypt-saml.yaml",
                     ]
                 ),
                 cast=decouple.Csv(str),

diff --git a/artemis/modules/wordpress_plugins.py b/artemis/modules/wordpress_plugins.py
@@ -55,6 +55,7 @@
 ]
 PLUGINS_BAD_VERSION_IN_README = [
     "blocks-animation",
+    "cf7-styler-for-divi",
     "coming-soon",
     "delete-all-comments-of-website",
     "disable-remove-google-fonts",

diff --git a/artemis/reporting/modules/nuclei/translations/nuclei_messages/pl_PL.py b/artemis/reporting/modules/nuclei/translations/nuclei_messages/pl_PL.py
@@ -1547,4 +1547,8 @@
     'Identifies "Logon Error Message" in the SAP Internet Communication Framework which returns a 404 status code.': "Wykryto stronę systemu SAP.",
     "RStudio Sign In panel was detected.": "Wykryto panel logowania RStudio.",
     "Usermin panel was discovered.": "Wykryto panel Usermin.",
+    "VMware Workspace ONE UEM Airwatch Self-Service Portal (SSP) login panel was detected.": "Wykryto panel logowania VMware Workspace ONE UEM Airwatch Self-Service Portal (SSP)",
+    "Cyberpanel login panel was detected.": "Wykryto panel logowania systemu Cyberpanel.",
+    "Thruk Monitoring panel was detected.": "Wykryto panel Thruk Monitoring.",
+    "FreeScout panel was discovered.": "Wykryto panel FreeScout.",
 }